instar 1.3.1649 → 1.3.1650

package/dist/server/mobileConsoleTicket.js

@@ -0,0 +1,405 @@
+/**
+ * Console sign-in from an owner's paired phone (docs/specs/mobile-console-device-signin.md).
+ *
+ * The phone proves two things the server can check: it holds the paired device key (the device
+ * authenticator), and its owner has just authenticated on it (a second Secure Enclave key, the
+ * "presence key", that cannot sign without Face ID / Touch ID / the passcode). It then receives a
+ * one-minute, single-use ticket, which the console page redeems for exactly what the dashboard
+ * PIN unlock returns as its console credential: the API token. Never the operator session.
+ *
+ * Challenges and tickets live only in this process's memory, bound to the device and the Host
+ * the request was signed for (machine-local by design: spec, Multi-machine posture).
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { deviceKeyHashOf } from '../core/AppRecordSignatures.js';
+import { arrivedOverLocalTls } from '../core/desktopTransport.js';
+import { normalizeRequestHost } from '../core/MobileOwnNames.js';
+import { isStrictLowSDer, parseDevicePublicKey } from '../core/MobileDeviceKeys.js';
+import { maybeRotateJsonl } from '../utils/jsonl-rotation.js';
+export const CONSOLE_TICKET_TTL_MS = 60_000;
+export const CONSOLE_TICKET_PER_DEVICE = 4;
+export const CONSOLE_TICKET_TOTAL = 64;
+export const CONSOLE_REDEEM_PATH = '/dashboard/console-ticket';
+export const CONSOLE_TICKET_PATH = '/mobile/console-ticket';
+export const CONSOLE_CHALLENGE_PATH = '/mobile/console-ticket/challenge';
+export const PRESENCE_KEY_PATH = '/mobile/device/presence-key';
+export const PRESENCE_MESSAGE_VERSION = 'instar-console-ticket-v1';
+export const PRESENCE_ENROLL_VERSION = 'instar-presence-enroll-v1';
+const REDEEM_PER_ADDRESS_PER_MIN = 10;
+const REDEEM_TOTAL_PER_MIN = 120;
+const AUDIT_MAX_BYTES = 1024 * 1024;
+const SECRET_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+/** `mobilePairing.consoleTicket.enabled`: omitted ⇒ on wherever mobile pairing is on. Read live. */
+export function isConsoleTicketEnabled(config) {
+    const mp = config.mobilePairing;
+    return mp?.consoleTicket?.enabled !== false;
+}
+const sha256 = (s) => crypto.createHash('sha256').update(s).digest('hex');
+/** The exact bytes the presence key signs. */
+export function presenceMessage(deviceId, host, challenge) {
+    return `${PRESENCE_MESSAGE_VERSION}\n${deviceId}\n${host.toLowerCase()}\n${challenge}`;
+}
+/** The bytes the presence key signs to prove possession at enrollment. */
+export function presenceEnrollMessage(deviceId, host, publicKey) {
+    return `${PRESENCE_ENROLL_VERSION}\n${deviceId}\n${host.toLowerCase()}\n${publicKey}`;
+}
+/** The decoded bytes of a base64url public key, for comparing keys as keys rather than as text. */
+export function samePublicKey(a, b) {
+    const x = Buffer.from(a, 'base64url'), y = Buffer.from(b, 'base64url');
+    return x.length === 65 && y.length === 65 && crypto.timingSafeEqual(x, y);
+}
+/** True when `sigB64` is a strict low-S DER ECDSA-P256-SHA256 signature by `publicKeyB64` over `message`. */
+export function verifyPresenceSignature(publicKeyB64, message, sigB64) {
+    if (typeof sigB64 !== 'string' || sigB64.length > 128 || !/^[A-Za-z0-9_-]+$/.test(sigB64))
+        return false;
+    const key = parseDevicePublicKey(publicKeyB64);
+    if (!key)
+        return false;
+    const sig = Buffer.from(sigB64, 'base64url');
+    if (!isStrictLowSDer(sig))
+        return false;
+    try {
+        return crypto.verify('sha256', Buffer.from(message), { key, dsaEncoding: 'der' }, sig);
+    }
+    catch {
+        // @silent-fallback-ok — a malformed signature is simply invalid
+        return false;
+    }
+}
+/**
+ * Single-use secrets bound to a device and a Host: used for both challenges and tickets. Only
+ * the SHA-256 of each secret is kept. Consuming deletes the entry before it is judged.
+ */
+export class BoundSecretStore {
+    now;
+    ttlMs;
+    perDevice;
+    total;
+    entries = new Map();
+    constructor(now = Date.now, ttlMs = CONSOLE_TICKET_TTL_MS, perDevice = CONSOLE_TICKET_PER_DEVICE, total = CONSOLE_TICKET_TOTAL) {
+        this.now = now;
+        this.ttlMs = ttlMs;
+        this.perDevice = perDevice;
+        this.total = total;
+    }
+    issue(deviceId, host) {
+        this.prune();
+        const mine = [...this.entries.entries()].filter(([, e]) => e.deviceId === deviceId);
+        for (let i = 0; i <= mine.length - this.perDevice; i++)
+            this.entries.delete(mine[i][0]);
+        while (this.entries.size >= this.total) {
+            const oldest = this.entries.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.entries.delete(oldest);
+        }
+        const secret = crypto.randomBytes(32).toString('base64url');
+        const expiresAt = this.now() + this.ttlMs;
+        const digest = sha256(secret);
+        this.entries.set(digest, { deviceId, host: host.toLowerCase(), expiresAt });
+        return { secret, expiresAt, ref: digest.slice(0, 12) };
+    }
+    /** Deletes the secret first; returns its binding only when it was live. */
+    consume(secret) {
+        if (typeof secret !== 'string' || !SECRET_PATTERN.test(secret))
+            return null;
+        const digest = sha256(secret);
+        const e = this.entries.get(digest);
+        if (!e)
+            return null;
+        this.entries.delete(digest);
+        if (e.expiresAt <= this.now())
+            return null;
+        return { deviceId: e.deviceId, host: e.host, ref: digest.slice(0, 12) };
+    }
+    size() { this.prune(); return this.entries.size; }
+    prune() {
+        const t = this.now();
+        for (const [k, e] of this.entries)
+            if (e.expiresAt <= t)
+                this.entries.delete(k);
+    }
+}
+/** Fixed-window throughput limit for the public redeem: a limit on calls, never a lockout on a ticket. */
+export class RedeemLimiter {
+    now;
+    perAddressMax;
+    totalMax;
+    windowStart = 0;
+    total = 0;
+    perAddress = new Map();
+    constructor(now = Date.now, perAddressMax = REDEEM_PER_ADDRESS_PER_MIN, totalMax = REDEEM_TOTAL_PER_MIN) {
+        this.now = now;
+        this.perAddressMax = perAddressMax;
+        this.totalMax = totalMax;
+    }
+    admit(address) {
+        const t = this.now();
+        if (t - this.windowStart >= 60_000) {
+            this.windowStart = t;
+            this.total = 0;
+            this.perAddress.clear();
+        }
+        const n = this.perAddress.get(address) ?? 0;
+        if (n >= this.perAddressMax || this.total >= this.totalMax)
+            return false;
+        this.perAddress.set(address, n + 1);
+        this.total++;
+        return true;
+    }
+}
+/**
+ * The audit trail: metadata only, never a secret. Rows involving a real ticket, challenge or
+ * device are written before the answer; refusals of unknown tickets and throttled calls from
+ * anonymous callers are counted and written as one `refused-unknown` row at most once a minute.
+ * A failed write is reported and never fails the request (a record, not a gate).
+ */
+export class ConsoleTicketAudit {
+    now;
+    report;
+    file;
+    pendingUnknown = 0;
+    lastFlush = 0;
+    constructor(stateDir, now = Date.now, report = () => { }) {
+        this.now = now;
+        this.report = report;
+        this.file = path.join(stateDir, 'state', 'mobile-console-tickets.jsonl');
+    }
+    record(row) {
+        this.flushUnknown(false);
+        this.append({ at: new Date(this.now()).toISOString(), ...row });
+    }
+    unknownRefusal() {
+        this.pendingUnknown++;
+        this.flushUnknown(false);
+    }
+    /** Writes the aggregated unknown-refusal count when a minute has passed (or when forced). */
+    flushUnknown(force) {
+        if (this.pendingUnknown === 0)
+            return;
+        const t = this.now();
+        if (!force && t - this.lastFlush < 60_000)
+            return;
+        const count = this.pendingUnknown;
+        this.pendingUnknown = 0;
+        this.lastFlush = t;
+        this.append({ at: new Date(t).toISOString(), event: 'refused-unknown', count });
+    }
+    append(row) {
+        try {
+            fs.mkdirSync(path.dirname(this.file), { recursive: true });
+            maybeRotateJsonl(this.file, { maxBytes: AUDIT_MAX_BYTES, keepRatio: 0.5 });
+            fs.appendFileSync(this.file, JSON.stringify(row) + '\n', { mode: 0o600 });
+        }
+        catch (err) {
+            // @silent-fallback-ok — reported through the injected DegradationReporter hook; the audit never gates
+            this.report(err);
+        }
+    }
+}
+const states = new WeakMap();
+/** The per-process console-ticket state of one pairing service. */
+export function consoleState(svc, now = Date.now) {
+    let s = states.get(svc);
+    if (!s) {
+        s = {
+            challenges: new BoundSecretStore(now),
+            tickets: new BoundSecretStore(now),
+            audit: new ConsoleTicketAudit(svc.deps.stateDir, now, (err) => svc.deps.reportDegradation?.('MobileConsoleTicket.audit', err)),
+            limiter: new RedeemLimiter(now),
+        };
+        states.set(svc, s);
+    }
+    return s;
+}
+/**
+ * Whether the device is, right now, an active owner phone: registry status, the device-key
+ * ledger, and the resolved person. Read from the same sources the device authenticator trusts.
+ */
+export function activeOwnerPhone(svc, deviceId) {
+    if (!svc.enabled())
+        return false;
+    const d = svc.devices.get(deviceId);
+    if (!d || d.status !== 'active' || !d.publicKey)
+        return false;
+    if (svc.keyLedger && svc.keyLedger.isRevoked(deviceKeyHashOf(d.publicKey), d.id))
+        return false;
+    const p = svc.personOfDevice(d);
+    return p.ok && p.role === 'owner';
+}
+function devicePrincipal(req) {
+    const p = req.instarPrincipal;
+    return p && p.kind === 'device' && typeof p.deviceId === 'string' ? { kind: 'device', deviceId: p.deviceId } : null;
+}
+/** One normalization for every Host this feature compares: the device authenticator's, else lowercase. */
+export function normalHost(raw) {
+    if (typeof raw !== 'string')
+        return '';
+    return normalizeRequestHost(raw) ?? raw.trim().toLowerCase();
+}
+function signedHost(req, svc, deviceId) {
+    const h = req.instarDeviceHost;
+    return normalHost(typeof h === 'string' && h.length > 0 ? h : svc.devices.get(deviceId)?.host ?? '');
+}
+/**
+ * The three device-signed routes. Each: feature on, local TLS or loopback, a device principal
+ * whose person is the owner. Mounted on the authed mobile-pairing router.
+ */
+export function mountConsoleTicketDeviceRoutes(router, svc) {
+    const gate = (req, res) => {
+        res.setHeader('Cache-Control', 'no-store');
+        if (!svc.enabled() || !isConsoleTicketEnabled(svc.deps.config) || !svc.deps.config.authToken) {
+            res.status(503).json({ error: 'console-ticket-off', detail: 'Opening the console from the app without the PIN is turned off on this agent.' });
+            return null;
+        }
+        const p = devicePrincipal(req);
+        if (!p) {
+            res.status(403).json({ error: 'device-signature-required' });
+            return null;
+        }
+        if (!arrivedOverLocalTls(req.secure, req.socket.remoteAddress, req.headers['x-forwarded-proto'])) {
+            res.status(403).json({ error: 'secure-transport-required' });
+            return null;
+        }
+        if (!activeOwnerPhone(svc, p.deviceId)) {
+            res.status(403).json({ error: 'owner-phone-required' });
+            return null;
+        }
+        return p.deviceId;
+    };
+    const st = () => consoleState(svc);
+    router.post(PRESENCE_KEY_PATH, (req, res) => {
+        const deviceId = gate(req, res);
+        if (!deviceId)
+            return;
+        const body = (req.body ?? {});
+        const key = body.publicKey;
+        if (typeof key !== 'string' || key.length > 128 || !parseDevicePublicKey(key)) {
+            res.status(400).json({ error: 'bad-public-key' });
+            return;
+        }
+        const d = svc.devices.get(deviceId);
+        if (!d) {
+            res.status(403).json({ error: 'owner-phone-required' });
+            return;
+        }
+        if (d.publicKey && samePublicKey(key, d.publicKey)) {
+            res.status(400).json({ error: 'bad-public-key', detail: 'The presence key must differ from the device key.' });
+            return;
+        }
+        // Proof of possession: the key signs, so a wrong or broken key is refused now, not stored.
+        if (!verifyPresenceSignature(key, presenceEnrollMessage(deviceId, signedHost(req, svc, deviceId), key), body.proof)) {
+            st().audit.record({ event: 'refused', deviceId, reason: 'presence-proof-invalid' });
+            res.status(400).json({ error: 'presence-proof-invalid' });
+            return;
+        }
+        // Same key again (as decoded bytes) is idempotent: store the stored text form.
+        const stored = d.presenceKey && samePublicKey(key, d.presenceKey) ? d.presenceKey : key;
+        let r;
+        try {
+            r = svc.devices.setPresenceKey(deviceId, stored);
+        }
+        catch (err) {
+            svc.deps.reportDegradation?.('MobileConsoleTicket.presenceKey', err);
+            res.status(500).json({ error: 'Could not record the key. Try again.' });
+            return;
+        }
+        if (r === 'conflict') {
+            res.status(409).json({ error: 'presence-key-set', detail: 'This phone already has a sign-in key. Remove and pair the phone again to replace it.' });
+            return;
+        }
+        if (r === 'not-active') {
+            res.status(403).json({ error: 'owner-phone-required' });
+            return;
+        }
+        if (r === 'set')
+            st().audit.record({ event: 'presence-key-set', deviceId });
+        res.json({ ok: true });
+    });
+    router.post(CONSOLE_CHALLENGE_PATH, (req, res) => {
+        const deviceId = gate(req, res);
+        if (!deviceId)
+            return;
+        const c = st().challenges.issue(deviceId, signedHost(req, svc, deviceId));
+        res.json({ challenge: c.secret, expiresAt: new Date(c.expiresAt).toISOString() });
+    });
+    router.post(CONSOLE_TICKET_PATH, (req, res) => {
+        const deviceId = gate(req, res);
+        if (!deviceId)
+            return;
+        const body = (req.body ?? {});
+        const d = svc.devices.get(deviceId);
+        if (!d?.presenceKey) {
+            res.status(409).json({ error: 'presence-key-missing' });
+            return;
+        }
+        const host = signedHost(req, svc, deviceId);
+        const c = st().challenges.consume(body.challenge);
+        if (!c || c.deviceId !== deviceId || c.host !== host) {
+            st().audit.record({ event: 'refused', deviceId, reason: 'challenge-invalid' });
+            res.status(401).json({ error: 'challenge-invalid' });
+            return;
+        }
+        if (!verifyPresenceSignature(d.presenceKey, presenceMessage(deviceId, host, body.challenge), body.presenceSig)) {
+            st().audit.record({ event: 'refused', deviceId, reason: 'presence-invalid' });
+            res.status(401).json({ error: 'presence-invalid' });
+            return;
+        }
+        const t = st().tickets.issue(deviceId, host);
+        st().audit.record({ event: 'minted', deviceId, ticketRef: t.ref });
+        res.json({ ticket: t.secret, expiresAt: new Date(t.expiresAt).toISOString(), redeemOrigin: `https://${host}` });
+    });
+}
+/**
+ * The public redeem, registered before the bearer gate (and exempted in authMiddleware by exact
+ * method + path). Answers only `{ token }`.
+ */
+export function mountConsoleTicketRedeemRoute(app, svc, apiToken) {
+    app.post(CONSOLE_REDEEM_PATH, (req, res) => {
+        res.setHeader('Cache-Control', 'no-store');
+        const st = consoleState(svc);
+        if (!arrivedOverLocalTls(req.secure, req.socket.remoteAddress, req.headers['x-forwarded-proto'])) {
+            res.status(403).json({ error: 'secure-transport-required' });
+            return;
+        }
+        const token = apiToken();
+        if (!svc.enabled() || !isConsoleTicketEnabled(svc.deps.config) || !token) {
+            res.status(503).json({ error: 'console-ticket-off' });
+            return;
+        }
+        const raw = req.body?.ticket;
+        if (typeof raw !== 'string' || raw.length === 0 || raw.length > 128) {
+            res.status(400).json({ error: 'bad-ticket' });
+            return;
+        }
+        // A known ticket is always judged; only the unknown-ticket path is throttled, so an anonymous
+        // caller cannot crowd out the operator's real ticket.
+        const t = st.tickets.consume(raw);
+        if (!t) {
+            st.audit.unknownRefusal();
+            const address = req.ip || req.socket.remoteAddress || 'unknown';
+            if (!st.limiter.admit(address)) {
+                res.status(429).json({ error: 'too-many-requests' });
+                return;
+            }
+            res.status(401).json({ error: 'ticket-invalid' });
+            return;
+        }
+        const host = normalHost(req.headers.host);
+        if (host === '' || host !== normalHost(t.host)) {
+            st.audit.record({ event: 'refused', deviceId: t.deviceId, reason: 'host-mismatch', ticketRef: t.ref });
+            res.status(401).json({ error: 'ticket-invalid' });
+            return;
+        }
+        if (!activeOwnerPhone(svc, t.deviceId)) {
+            st.audit.record({ event: 'refused', deviceId: t.deviceId, reason: 'device-not-active', ticketRef: t.ref });
+            res.status(401).json({ error: 'device-not-active' });
+            return;
+        }
+        st.audit.record({ event: 'redeemed', deviceId: t.deviceId, ticketRef: t.ref });
+        res.json({ token });
+    });
+}
+//# sourceMappingURL=mobileConsoleTicket.js.map

package/dist/server/mobileConsoleTicket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobileConsoleTicket.js","sourceRoot":"","sources":["../../src/server/mobileConsoleTicket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AACnE,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C,oGAAoG;AACpG,MAAM,UAAU,sBAAsB,CAAC,MAAoB;IACzD,MAAM,EAAE,GAAG,MAAM,CAAC,aAAsE,CAAC;IACzF,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,KAAK,KAAK,CAAC;AAC9C,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE1F,8CAA8C;AAC9C,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,IAAY,EAAE,SAAiB;IAC/E,OAAO,GAAG,wBAAwB,KAAK,QAAQ,KAAK,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;AACzF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,IAAY,EAAE,SAAiB;IACrF,OAAO,GAAG,uBAAuB,KAAK,QAAQ,KAAK,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;AACxF,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,OAAe,EAAE,MAAe;IAC5F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACxG,MAAM,GAAG,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAGE,GAAG;IAA4C,KAAK;IAC9D,SAAS;IAA+C,KAAK;IAH/D,OAAO,GAAG,IAAI,GAAG,EAAiE,CAAC;IAEpG,YAA6B,GAAG,GAAiB,IAAI,CAAC,GAAG,EAAmB,KAAK,GAAG,qBAAqB,EACtF,SAAS,GAAG,yBAAyB,EAAmB,KAAK,GAAG,oBAAoB;mBAD1E,GAAG;qBAA4C,KAAK;yBAC9D,SAAS;qBAA+C,KAAK;IAA0B,CAAC;IAE3G,KAAK,CAAC,QAAgB,EAAE,IAAY;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YACtE,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,2EAA2E;IAC3E,OAAO,CAAC,MAAe;QACrB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,KAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAElD,KAAK;QACX,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;CACF;AAED,0GAA0G;AAC1G,MAAM,OAAO,aAAa;IAIK,GAAG;IAA4C,aAAa;IAAgD,QAAQ;IAHzI,WAAW,GAAG,CAAC,CAAC;IAChB,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,YAA6B,GAAG,GAAiB,IAAI,CAAC,GAAG,EAAmB,aAAa,GAAG,0BAA0B,EAAmB,QAAQ,GAAG,oBAAoB;mBAA3I,GAAG;6BAA4C,aAAa;wBAAgD,QAAQ;IAA0B,CAAC;IAC5K,KAAK,CAAC,OAAe;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACtG,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAKD;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAIkB,GAAG;IAC/B,MAAM;IAJhB,IAAI,CAAS;IACd,cAAc,GAAG,CAAC,CAAC;IACnB,SAAS,GAAG,CAAC,CAAC;IACtB,YAAY,QAAgB,EAAmB,GAAG,GAAiB,IAAI,CAAC,GAAG,EACxD,MAAM,GAA2B,GAAG,EAAE,GAAE,CAAC;mBADb,GAAG;sBAC/B,MAAM;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,GAAgC;QACrC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,6FAA6F;IAC7F,YAAY,CAAC,KAAc;QACzB,IAAI,IAAI,CAAC,cAAc,KAAK,CAAC;YAAE,OAAO;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM;YAAE,OAAO;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,MAAM,CAAC,GAAoB;QACjC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sGAAsG;YACtG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAGD,MAAM,MAAM,GAAG,IAAI,OAAO,EAAsC,CAAC;AAEjE,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,GAAyB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAClF,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG;YACF,UAAU,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC;YACrC,OAAO,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAClC,KAAK,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YAC9H,OAAO,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC;SAChC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAyB,EAAE,QAAgB;IAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/F,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;AACpC,CAAC;AAGD,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAI,GAA4E,CAAC,eAAe,CAAC;IACxG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtH,CAAC;AACD,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC/D,CAAC;AACD,SAAS,UAAU,CAAC,GAAY,EAAE,GAAyB,EAAE,QAAgB;IAC3E,MAAM,CAAC,GAAI,GAAiD,CAAC,gBAAgB,CAAC;IAC9E,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAc,EAAE,GAAyB;IACtF,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,GAAa,EAAiB,EAAE;QAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,+EAA+E,EAAE,CAAC,CAAC;YAC/I,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjH,OAAO,CAAC,CAAC,QAAQ,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7I,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5E,IAAI,CAAC,CAAC,SAAS,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/K,2FAA2F;QAC3F,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpH,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,+EAA+E;QAC/E,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;QACxF,IAAI,CAAgD,CAAC;QACrD,IAAI,CAAC;YAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,sFAAsF,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtL,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,KAAK;YAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACzF,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACrD,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAmB,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzH,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7C,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAgB,EAAE,GAAyB,EAAE,QAAkC;IAC3H,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAI,GAAG,CAAC,IAA4C,EAAE,MAAM,CAAC;QACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/H,8FAA8F;QAC9F,sDAAsD;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;YAChE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACjG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACvG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/mobileConversationRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mobileConversationRoutes.d.ts","sourceRoot":"","sources":["../../src/server/mobileConversationRoutes.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAE/G,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,EAAiB,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAgD,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC/G,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAMhF,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAmC,MAAM,iCAAiC,CAAC;AAC3I,OAAO,EAA0D,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAChJ,OAAO,EAC6B,KAAK,aAAa,EACrD,MAAM,0BAA0B,CAAC;AAIlC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mGAAmG;IACnG,WAAW,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACxC;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,UAAU,CAAC,GAAG,MAAM,CAAoC;AAGhI,wDAAwD;AACxD,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAE9F;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAI3G;AACD,wBAAgB,aAAa,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAAoD;AACjH,+CAA+C;AAC/C,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,OAAO,CAI9G;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GACjG;IAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAc5D;AAyDD,KAAK,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,iBAAiB,GAAG,kBAAkB,CAAC,GAAG;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AA4BzG,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,qEAAqE;IACrE,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvC,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACrI;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACvI,qEAAqE;IACrE,QAAQ,CAAC,EAAE;QAAE,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IACpH,0FAA0F;IAC1F,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,qBAAqB,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAWD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQrI;AAED,2EAA2E;AAC3E;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE;IAAE,OAAO,EAAE,qBAAqB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAGpK;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,aAAa,EAAE,GAAG,CAAC,EAAE,sBAAsB,EACtH,SAAS,CAAC,EAAE;IAAE,OAAO,EAAE,qBAAqB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYhG;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,2BAA2B,GAAG,MAAM,CAmgBxF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,EACtH,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,EACnF,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC;AAC1C,6FAA6F;AAC7F,sBAAsB,CAAC,EAAE,MAAM,GAC9B;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,CAoC3D;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAEzD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GACxG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA6ChC;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,sBAAsB,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAChG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWhC"}
+{"version":3,"file":"mobileConversationRoutes.d.ts","sourceRoot":"","sources":["../../src/server/mobileConversationRoutes.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAE/G,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,EAAiB,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAErE,OAAO,EAAgD,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC/G,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAMhF,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAmC,MAAM,iCAAiC,CAAC;AAC3I,OAAO,EAA0D,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAChJ,OAAO,EAC6B,KAAK,aAAa,EACrD,MAAM,0BAA0B,CAAC;AAKlC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mGAAmG;IACnG,WAAW,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACxC;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,UAAU,CAAC,GAAG,MAAM,CAAoC;AAGhI,wDAAwD;AACxD,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAE9F;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAI3G;AACD,wBAAgB,aAAa,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAAoD;AACjH,+CAA+C;AAC/C,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,OAAO,CAI9G;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GACjG;IAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAc5D;AAyDD,KAAK,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,iBAAiB,GAAG,kBAAkB,CAAC,GAAG;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AA4BzG,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,qEAAqE;IACrE,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvC,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACrI;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACvI,qEAAqE;IACrE,QAAQ,CAAC,EAAE;QAAE,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IACpH,0FAA0F;IAC1F,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,qBAAqB,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAWD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQrI;AAED,2EAA2E;AAC3E;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE;IAAE,OAAO,EAAE,qBAAqB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,CAGpK;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,aAAa,EAAE,GAAG,CAAC,EAAE,sBAAsB,EACtH,SAAS,CAAC,EAAE;IAAE,OAAO,EAAE,qBAAqB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYhG;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,2BAA2B,GAAG,MAAM,CAshBxF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,EACtH,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,EACnF,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC;AAC1C,6FAA6F;AAC7F,sBAAsB,CAAC,EAAE,MAAM,GAC9B;IAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,CAoC3D;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAEzD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GACxG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA6ChC;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,sBAAsB,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAChG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWhC"}

package/dist/server/mobileConversationRoutes.js

@@ -39,6 +39,7 @@ import { MAX_ATTACHMENTS, pushPreviewBody, } from '../core/appMediaTypes.js';
 import { detectOutboundCredential } from '../messaging/outbound-credential-guard.js';
 import { isExactStopMessage } from '../core/MessageSentinel.js';
 import { cleanText } from '../core/MobilePairing.js';
+import { featureEvidence } from '../monitoring/FeatureEvidenceLog.js';
 import { isPeerUrlAllowedForCredentials } from './peerUrlGuard.js';
 import { poolPeerFetch } from './poolPeerFetch.js';
 import { deviceTextForRow } from '../core/appPlatformMedia.js';
@@ -553,6 +554,7 @@ export function createMobileConversationRouter(deps) {
         // Step 2 — look up. Step 7 — a done/unknown request answers from the CURRENT delivery state.
         const prior = requests.lookup(deviceId, requestId, hash);
         if (prior.kind === 'done' || prior.kind === 'outcome-unknown') {
+            featureEvidence.record('mobilePairing.native', { kind: 'held', reason: `duplicate send answered from record: ${prior.kind}`, context: { messageId, deviceId, priorKind: prior.kind } });
             const state = s.store.deliveryState(messageId);
             if (state === 'delivered' || state === 'refused' || state === 'intercepted') {
                 const recorded = prior.kind === 'done' ? prior.body : {};
@@ -630,6 +632,7 @@ export function createMobileConversationRouter(deps) {
             r = requests.reserve(deviceId, requestId, hash, 0, { op: 'send', conversationKey: key, messageId });
         }
         catch {
+            featureEvidence.record('mobilePairing.native', { kind: 'error', reason: 'loss: request could not be recorded', context: { messageId, deviceId } });
             res.status(503).json({ error: 'chat-unavailable', detail: 'The message could not be recorded, so it was not sent. Try again.' });
             return;
         }
@@ -645,6 +648,7 @@ export function createMobileConversationRouter(deps) {
         if (msg.kind === 'media-message') {
             const refused = await claimMediaUploads(s, uploadIds, messageId, (detail) => s.deps.reportDegradation?.('AppMedia.publish', detail));
             if (refused) {
+                featureEvidence.record('mobilePairing.native.media', { kind: 'error', reason: 'files could not be claimed for the message', context: { messageId, files: uploadIds.length, status: refused.status } });
                 requests.release(deviceId, requestId);
                 res.status(refused.status).json(refused.body);
                 return;
@@ -661,9 +665,15 @@ export function createMobileConversationRouter(deps) {
         catch (err) {
             requests.release(deviceId, requestId);
             s.deps.reportDegradation?.('AppConversations.persist', err instanceof Error ? err.message : String(err));
+            featureEvidence.record('mobilePairing.native', { kind: 'error', reason: 'loss: message could not be saved', context: { messageId, deviceId, files: stored.length } });
+            if (stored.length > 0)
+                featureEvidence.record('mobilePairing.native.media', { kind: 'error', reason: 'files not published: message could not be saved', context: { messageId, files: stored.length } });
             res.status(503).json({ error: 'chat-unavailable', detail: 'The message could not be saved, so it was not sent. Try again.' });
             return;
         }
+        for (const a of stored) {
+            featureEvidence.record('mobilePairing.native.media', { kind: 'fired', reason: 'file sent', context: { messageId, index: a.index, fileKind: a.kind, declaredKind: a.declaredKind, size: a.size, files: stored.length } });
+        }
         const reclassified = stored.filter((a) => a.kind !== a.declaredKind).map((a) => a.index);
         const extras = {
             ...(removedKinds.size > 0 ? { redacted: true, removed: [...removedKinds] } : {}),
@@ -678,12 +688,14 @@ export function createMobileConversationRouter(deps) {
         if (exactStop) {
             const stop = s.emergencyStop(key);
             s.appendDelivery(key, messageId, 'intercepted', seed);
+            featureEvidence.record('mobilePairing.native', { kind: 'held', reason: 'intercepted: exact emergency stop', context: { messageId, deviceId, stopped: typeof stop.stopped === 'number' ? stop.stopped : null } });
             finish(200, { ok: true, outcome: 'sentinel-kill', stopped: stop.stopped, conversationKey: key, eventId, messageId, deliveryState: 'intercepted', ...extras });
             return;
         }
         // Step 5 — ownership (pool dark: the serving-lease holder), the pause intercept, dispatch.
         const alias = s.deps.registry.appAliasFor(key) ?? (() => { const m = s.deps.registry.mintAppAlias(key); return m.ok ? m.id : null; })();
         if (alias === null || !s.isOwner()) {
+            featureEvidence.record('mobilePairing.native', { kind: 'error', reason: 'saved, not delivered: owner unavailable', context: { messageId, deviceId, aliasMinted: alias !== null } });
             finish(503, { error: 'owner-unavailable', detail: 'Your message is saved, but the machine that runs this conversation is not available right now. Try again shortly.', conversationKey: key, eventId, messageId, ...extras });
             return;
         }
@@ -695,6 +707,7 @@ export function createMobileConversationRouter(deps) {
             // The message is already saved; a failed binding write must not leave the request hanging.
             requests.markUnknown(deviceId, requestId);
             s.deps.reportDegradation?.('AppConversations.bind', err instanceof Error ? err.message : String(err));
+            featureEvidence.record('mobilePairing.native', { kind: 'error', reason: 'outcome unknown: binding write failed', context: { messageId, deviceId, alias } });
             res.status(409).json({ error: 'outcome-unknown', eventId, messageId, detail: 'This message is saved but may not have reached the agent. Check the conversation.' });
             return;
         }
@@ -704,6 +717,7 @@ export function createMobileConversationRouter(deps) {
                 if (d.disposition === 'kill' || d.disposition === 'pause') {
                     const out = d.disposition === 'kill' ? { outcome: 'sentinel-kill', stopped: s.emergencyStop(key).stopped } : { outcome: 'sentinel-pause', paused: s.pause(key) };
                     s.appendDelivery(key, messageId, 'intercepted', seed);
+                    featureEvidence.record('mobilePairing.native', { kind: 'held', reason: `intercepted: sentinel ${d.disposition}`, context: { messageId, deviceId, disposition: d.disposition } });
                     finish(200, { ok: true, ...out, conversationKey: key, eventId, messageId, deliveryState: 'intercepted', ...extras });
                     return;
                 }
@@ -714,6 +728,7 @@ export function createMobileConversationRouter(deps) {
         if (!dispatch) {
             // Nothing was dispatched: an honest refusal, not an unknown outcome.
             s.appendDelivery(key, messageId, 'refused', seed);
+            featureEvidence.record('mobilePairing.native', { kind: 'error', reason: 'saved, not delivered: no dispatcher on this machine', context: { messageId, deviceId } });
             finish(503, { error: 'chat-unavailable', detail: 'Your message is saved, but this machine cannot start a session for it right now.', conversationKey: key, eventId, messageId, deliveryState: 'refused', ...extras });
             return;
         }
@@ -727,8 +742,10 @@ export function createMobileConversationRouter(deps) {
         }
         const pending = s.pendingContext(key);
         let outcome;
+        let originVerdict = 'unknown';
         try {
-            outcome = await dispatch({ conversationKey: key, alias, title: conv.title ?? 'Untitled', text: sessionText, messageId, ownerName: sender?.name ?? s.ownerName(), originVerdict: s.verify(msg), ...(pending.lines.length > 0 ? { notes: pending.lines } : {}) });
+            originVerdict = s.verify(msg);
+            outcome = await dispatch({ conversationKey: key, alias, title: conv.title ?? 'Untitled', text: sessionText, messageId, ownerName: sender?.name ?? s.ownerName(), originVerdict, ...(pending.lines.length > 0 ? { notes: pending.lines } : {}) });
             if (outcome === 'delivered')
                 pending.ack();
         }
@@ -739,10 +756,12 @@ export function createMobileConversationRouter(deps) {
             catch { /* @silent-fallback-ok — the request itself is recorded outcome-unknown below */ }
             requests.markUnknown(deviceId, requestId);
             s.deps.reportDegradation?.('AppConversations.dispatch', err instanceof Error ? err.message : String(err));
+            featureEvidence.record('mobilePairing.native', { kind: 'error', reason: 'outcome unknown: dispatch threw', context: { messageId, deviceId, originVerdict, files: stored.length } });
             res.status(409).json({ error: 'outcome-unknown', eventId, messageId, detail: 'This message may or may not have reached the agent. Check the conversation.' });
             return;
         }
         s.appendDelivery(key, messageId, outcome, seed);
+        featureEvidence.record('mobilePairing.native', { kind: outcome === 'delivered' && originVerdict !== 'failed' ? 'fired' : 'error', reason: originVerdict === 'failed' ? `failed verdict on a message: ${outcome}` : `message ${outcome}`, context: { messageId, deviceId, outcome, originVerdict, files: stored.length, redacted: removedKinds.size > 0, senderRole: sender?.role ?? null } });
         finish(200, { ok: true, outcome, conversationKey: key, eventId, messageId, deliveryState: outcome, ...extras });
     });
     // ── Browse ──