instar 1.3.1649 → 1.3.1650

package/dist/server/mobileSessionTerminalRoutes.js

@@ -0,0 +1,389 @@
+/**
+ * The native session screen for the Instar iPhone app (docs/specs/mobile-native-session-screen.md).
+ *
+ *   GET  /sessions/:name/output?lines=N   read a session's pane
+ *   POST /sessions/:name/input {text}     type plain text into it
+ *
+ * The same paths serve the dashboard with the Bearer token; this router handles ONLY requests
+ * signed by a paired phone and passes every other request on untouched (`next()`), so the Bearer
+ * handlers in routes.ts keep their exact behaviour. It is mounted before the main routes.
+ *
+ * Device requests reach here only through the DEVICE_ALLOWLIST entries flagged `ownerOnly`: the
+ * phone is active, its signature verified, and its person is the owner. On top of that the router
+ * re-checks the owner, resolves the name to exactly one session record running on THIS machine
+ * (tmux name, then id, then name; ambiguous → 409), refuses control characters in typed text,
+ * reads the pane without blocking the event loop, and logs every typed message without its text.
+ * A session that is not here is named from this machine's registry when a peer lists it; it is
+ * never proxied.
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { Router } from 'express';
+import { devicePersonOf, deviceAdmittedHost } from './mobilePairingRoutes.js';
+import { verifiedEntityName } from '../messaging/shared/channelIdentity.js';
+import { REPLAY_TTL_MS, canonicalString } from '../core/MobileDeviceKeys.js';
+/** The session name shape the Bearer routes accept (routes.ts SESSION_NAME_RE). */
+export const DEVICE_SESSION_NAME_RE = /^[a-zA-Z0-9_-]{1,200}$/;
+export const DEVICE_INPUT_MAX = 8000;
+export const DEVICE_OUTPUT_DEFAULT_LINES = 200;
+export const DEVICE_OUTPUT_MAX_LINES = 2000;
+export const MISS_CACHE_FOUND_MS = 15_000;
+export const MISS_CACHE_NEGATIVE_MS = 3_000;
+export const MISS_NAMES_PER_DEVICE_PER_MINUTE = 8;
+export const PEER_LOOKUP_TIMEOUT_MS = 3000;
+export const PEER_LOOKUP_MAX = 16;
+export const AUDIT_ROTATE_BYTES = 2 * 1024 * 1024;
+export const NOT_RUNNING_REASON = 'This session is not running any more. It may have finished or been closed.';
+export const LOCATION_UNKNOWN_REASON = 'This session is not running on this machine, and I could not reach your other machines to check where it is.';
+export const BAD_TEXT_REASON = 'Only plain text can be typed into a session from the phone.';
+export const SEND_FAILED_REASON = 'The session could not take your text right now. It may be starting or restarting; try again in a moment.';
+export const OWNER_ONLY_REASON = "Only the owner's phone can open sessions.";
+export const SESSION_REPLACED_REASON = 'This session ended and a new one took its name. Reopen it from the sessions list.';
+export const INPUT_BUSY_REASON = 'Too many messages were typed from phones in the last minute. Wait a moment and send again.';
+/** Device inputs per minute across ALL phones on this machine (each holds the event loop briefly). */
+export const DEVICE_INPUT_MACHINE_PER_MINUTE = 12;
+/** The answer for a request bound to another machine: it repeats the phone's own claim. */
+export function requestedMachineReason(nickname) {
+    return nickname ? `You opened a session on ${nickname}. Open it from ${nickname}.` : 'You opened a session on another of your machines. Open it from that machine.';
+}
+/**
+ * Remove this agent's own credentials from pane text before a device sees it (mobile-device-keys
+ * §2.3: nothing a device receives may outlive its revocation): the API token, the dashboard PIN,
+ * and private-view `sig=` values. Values shorter than 4 characters are not replaced (they would
+ * mangle ordinary text and are not credentials worth the name).
+ */
+export function redactForDevice(text, secrets) {
+    let out = text.replace(/([?&]sig=)[0-9a-fA-F]{16,}/g, '$1removed');
+    const vals = [...new Set(secrets.filter((v) => typeof v === 'string' && v.length >= 4))].sort((a, b) => b.length - a.length);
+    for (const v of vals)
+        out = out.split(v).join('[redacted]');
+    return out;
+}
+export const REPLAY_REASON = 'This exact request was already received, so it was not typed in again.';
+export const REPLAY_RECORD_REASON = 'The agent could not record this request safely, so it was not typed in. Try again in a moment.';
+/** The plain reason for a session another machine runs (the "Open session" sentence shape). */
+export function otherMachineReason(nickname) {
+    return nickname
+        ? `This session runs on ${nickname}, not on this machine. Open it from ${nickname}.`
+        : 'This session runs on another of your machines, whose name I could not confirm, not on this machine.';
+}
+/** Any control character other than newline and tab: C0, DEL, C1. */
+const CONTROL_RE = /[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/;
+export function isPlainDeviceText(text) { return !CONTROL_RE.test(text); }
+/**
+ * Exactly one running/starting record, matched exactly: tmux name, then id, then name. The first
+ * field that matches any record decides; two records matching on that field is ambiguous.
+ */
+export function resolveDeviceSession(records, name) {
+    const live = records.filter((r) => r.status === 'running' || r.status === 'starting');
+    for (const field of ['tmuxSession', 'id', 'name']) {
+        const hits = live.filter((r) => r[field] === name);
+        if (hits.length === 1)
+            return { kind: 'found', session: hits[0] };
+        if (hits.length > 1)
+            return { kind: 'ambiguous' };
+    }
+    return { kind: 'missing' };
+}
+/** Classify a local miss from the peers' answers (pure; never names a machine nobody reported). */
+export function classifyMiss(answers, nicknameOf) {
+    const hits = answers.filter((a) => 'found' in a && a.found);
+    // Two machines listing the name: it does not identify one session, so no machine is named.
+    if (hits.length > 1)
+        return { error: 'session-location-unknown', reason: LOCATION_UNKNOWN_REASON };
+    const hit = hits[0];
+    if (hit) {
+        const nick = verifiedEntityName(hit.machineId, nicknameOf(hit.machineId)) ?? null;
+        return { error: 'session-on-other-machine', reason: otherMachineReason(nick), ownerMachine: { machineId: hit.machineId, nickname: nick } };
+    }
+    if (answers.some((a) => 'failed' in a))
+        return { error: 'session-location-unknown', reason: LOCATION_UNKNOWN_REASON };
+    return { error: 'session-not-running', reason: NOT_RUNNING_REASON };
+}
+/** Does one peer's GET /sessions row list match `name` in the device order? */
+export function peerRowsMatch(rows, name) {
+    if (!Array.isArray(rows))
+        return false;
+    const live = rows.filter((r) => !!r && typeof r === 'object' && (r.status === 'running' || r.status === 'starting'));
+    return ['tmuxSession', 'id', 'name'].some((f) => live.some((r) => r[f] === name));
+}
+const principalOf = (req) => (req.instarPrincipal) ?? { kind: 'token' };
+/**
+ * The durable replay record for device input (spec: Replay across a restart). The verifier's replay
+ * set lives in memory; input is the first allowlisted device route that is neither idempotent nor
+ * deduplicated, so each accepted input's signature digest is written here BEFORE it is typed and kept
+ * for REPLAY_TTL_MS (longer than the verifier's +/- DEVICE_TIME_WINDOW_MS window). A captured request
+ * can then never be typed twice, across restarts and whatever the phone's clock says.
+ */
+export class DeviceInputReplayRecord {
+    file;
+    now;
+    entries = null;
+    constructor(file, now = Date.now) {
+        this.file = file;
+        this.now = now;
+    }
+    load() {
+        if (this.entries)
+            return this.entries;
+        const m = new Map();
+        try {
+            const raw = JSON.parse(fs.readFileSync(this.file, 'utf8'));
+            for (const [k, v] of Object.entries(raw))
+                if (typeof v === 'number')
+                    m.set(k, v);
+        }
+        catch { /* @silent-fallback-ok — no record yet (or unreadable: rewritten on the next admit) */ }
+        this.entries = m;
+        return m;
+    }
+    /** The digest of a request's canonical signed string (the string the verifier's replay set keys on). */
+    static digest(canonical) {
+        return crypto.createHash('sha256').update(canonical).digest('hex');
+    }
+    /** 'ok' after durably recording the digest; 'replay' if already recorded; 'unavailable' if it could not be written. */
+    admit(digest) {
+        const m = this.load();
+        const t = this.now();
+        for (const [k, at] of m)
+            if (t - at > REPLAY_TTL_MS)
+                m.delete(k);
+        if (m.has(digest))
+            return 'replay';
+        m.set(digest, t);
+        try {
+            fs.mkdirSync(path.dirname(this.file), { recursive: true });
+            const tmp = `${this.file}.${process.pid}.tmp`;
+            fs.writeFileSync(tmp, JSON.stringify(Object.fromEntries(m)), { mode: 0o600 });
+            fs.renameSync(tmp, this.file);
+            return 'ok';
+        }
+        catch (err) {
+            m.delete(digest);
+            console.error(`[mobile-session-input] replay record write failed: ${err instanceof Error ? err.message : String(err)}`);
+            return 'unavailable';
+        }
+    }
+}
+/** Append one audit line (no text), rotating to `.1` past AUDIT_ROTATE_BYTES. Best effort. */
+export function appendInputAudit(stateDir, row) {
+    const dir = path.join(stateDir, 'logs');
+    const file = path.join(dir, 'mobile-session-input.jsonl');
+    try {
+        fs.mkdirSync(dir, { recursive: true });
+        try {
+            if (fs.statSync(file).size > AUDIT_ROTATE_BYTES)
+                fs.renameSync(file, `${file}.1`);
+        }
+        catch { /* @silent-fallback-ok — no file yet */ }
+        fs.appendFileSync(file, JSON.stringify(row) + '\n', { mode: 0o600 });
+    }
+    catch (err) {
+        // @silent-fallback-ok — the audit is a record, not a gate; the failure is logged loudly.
+        console.error(`[mobile-session-input] audit write failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export function createMobileSessionTerminalRouter(deps) {
+    const router = Router();
+    const now = deps.now ?? Date.now;
+    const missCache = new Map();
+    const inFlight = new Map();
+    const missNames = new Map();
+    let machineInputs = [];
+    const replayRecord = deps.replayRecord ?? new DeviceInputReplayRecord(path.join(deps.stateDir, 'state', 'mobile-session-input-replay.json'), now);
+    /** One fan-out per name per cache window (15 s found elsewhere, 3 s otherwise), shared by concurrent callers; per-device name cap. */
+    async function missAnswer(deviceId, name) {
+        const t = now();
+        const ttl = (a) => (a.error === 'session-on-other-machine' ? MISS_CACHE_FOUND_MS : MISS_CACHE_NEGATIVE_MS);
+        for (const [k, v] of missCache)
+            if (t - v.at >= ttl(v.answer))
+                missCache.delete(k);
+        const cached = missCache.get(name);
+        if (cached)
+            return cached.answer;
+        const pending = inFlight.get(name);
+        if (pending)
+            return pending;
+        for (const [k, v] of missNames) {
+            const kept = v.filter((x) => t - x.at < 60_000);
+            if (kept.length)
+                missNames.set(k, kept);
+            else
+                missNames.delete(k);
+        }
+        const recent = missNames.get(deviceId) ?? [];
+        if (!recent.some((x) => x.name === name)) {
+            if (recent.length >= MISS_NAMES_PER_DEVICE_PER_MINUTE)
+                return { error: 'session-location-unknown', reason: LOCATION_UNKNOWN_REASON };
+            recent.push({ at: t, name });
+            missNames.set(deviceId, recent);
+        }
+        const p = (async () => {
+            let answers;
+            try {
+                answers = await deps.lookupPeers(name);
+            }
+            catch {
+                answers = [{ machineId: 'unknown', failed: true }];
+            } // @silent-fallback-ok — reported as location unknown
+            const answer = classifyMiss(answers, deps.nicknameOf);
+            missCache.set(name, { at: now(), answer });
+            return answer;
+        })();
+        inFlight.set(name, p);
+        try {
+            return await p;
+        }
+        finally {
+            inFlight.delete(name);
+        }
+    }
+    /** The common device checks; null when the request was answered (or passed on). */
+    function deviceGate(req, res, next) {
+        const p = principalOf(req);
+        if (p.kind !== 'device') {
+            next();
+            return null;
+        }
+        res.setHeader('Cache-Control', 'no-store');
+        const person = devicePersonOf(req);
+        if (!person || person.role !== 'owner') {
+            res.status(403).json({ error: 'owner-phone-required', reason: OWNER_ONLY_REASON });
+            return null;
+        }
+        const name = req.params.name;
+        if (typeof name !== 'string' || !DEVICE_SESSION_NAME_RE.test(name)) {
+            res.status(400).json({ error: 'bad-session-name' });
+            return null;
+        }
+        // Machine binding: a row from another machine never resolves against this machine's records.
+        const machine = typeof req.query.machine === 'string' ? req.query.machine : '';
+        const self = deps.selfMachineId();
+        if (machine && self && machine !== self) {
+            const nick = verifiedEntityName(machine, deps.nicknameOf(machine)) ?? null;
+            res.status(404).json({ error: 'session-on-other-machine', reason: requestedMachineReason(nick), ownerMachine: { machineId: machine, nickname: nick } });
+            return null;
+        }
+        const sid = typeof req.query.sid === 'string' ? req.query.sid : '';
+        return { deviceId: p.deviceId ?? '', name, local: !!machine && machine === self, sid };
+    }
+    async function resolveOrAnswer(res, g) {
+        const { deviceId, name } = g;
+        let records = [];
+        try {
+            records = deps.listSessions();
+        }
+        catch {
+            records = [];
+        } // @silent-fallback-ok — an unreadable registry is a miss
+        const r = resolveDeviceSession(records, name);
+        if (r.kind === 'found') {
+            if (g.sid && r.session.id !== g.sid) {
+                res.status(409).json({ error: 'session-replaced', reason: SESSION_REPLACED_REASON });
+                return null;
+            }
+            return r.session;
+        }
+        if (r.kind === 'ambiguous') {
+            res.status(409).json({ error: 'ambiguous-session', reason: 'More than one session has this name. Open it from the sessions list.' });
+            return null;
+        }
+        // The phone asked about THIS machine's session: a same-named session elsewhere is another session.
+        if (g.local || g.sid) {
+            res.status(404).json({ error: 'session-not-running', reason: NOT_RUNNING_REASON });
+            return null;
+        }
+        res.status(404).json(await missAnswer(deviceId, name));
+        return null;
+    }
+    router.get('/sessions/:name/output', async (req, res, next) => {
+        const g = deviceGate(req, res, next);
+        if (!g)
+            return;
+        const s = await resolveOrAnswer(res, g);
+        if (!s)
+            return;
+        const raw = parseInt(String(req.query.lines ?? ''), 10);
+        const lines = Number.isFinite(raw) ? Math.min(Math.max(raw, 1), DEVICE_OUTPUT_MAX_LINES) : DEVICE_OUTPUT_DEFAULT_LINES;
+        let output = null;
+        try {
+            output = await deps.captureOutputAsync(s.tmuxSession, lines);
+        }
+        catch {
+            output = null;
+        } // @silent-fallback-ok — an unreadable pane answers not running
+        if (output === null) {
+            res.status(404).json({ error: 'session-not-running', reason: NOT_RUNNING_REASON });
+            return;
+        }
+        let secrets = [];
+        try {
+            secrets = deps.secrets();
+        }
+        catch {
+            secrets = [];
+        } // @silent-fallback-ok — the sig= rewrite still applies
+        res.json({ session: s.name, sessionId: s.id, tmuxSession: s.tmuxSession, output: redactForDevice(output, secrets), startedAt: s.startedAt ?? null, machineNickname: deps.selfNickname() });
+    });
+    router.post('/sessions/:name/input', async (req, res, next) => {
+        const g = deviceGate(req, res, next);
+        if (!g)
+            return;
+        const text = (req.body ?? {}).text;
+        if (typeof text !== 'string' || text.length === 0) {
+            res.status(400).json({ error: 'bad-text', reason: 'Type something to send.' });
+            return;
+        }
+        if (text.length > DEVICE_INPUT_MAX) {
+            res.status(400).json({ error: 'bad-text', reason: `Up to ${DEVICE_INPUT_MAX} characters can be sent at once.` });
+            return;
+        }
+        if (!isPlainDeviceText(text)) {
+            res.status(400).json({ error: 'bad-text', reason: BAD_TEXT_REASON });
+            return;
+        }
+        const s = await resolveOrAnswer(res, g);
+        if (!s)
+            return;
+        // One machine-wide window across all phones. sendInput is synchronous, so sends never overlap.
+        const tNow = now();
+        machineInputs = machineInputs.filter((x) => tNow - x < 60_000);
+        if (machineInputs.length >= DEVICE_INPUT_MACHINE_PER_MINUTE) {
+            res.status(429).json({ error: 'too-many-requests', reason: INPUT_BUSY_REASON });
+            return;
+        }
+        // Durable replay record, written before anything is typed (the verifier's set is in memory).
+        const raw = req.rawBody;
+        const digest = DeviceInputReplayRecord.digest(canonicalString(g.deviceId, deviceAdmittedHost(req) ?? '', req.method, req.originalUrl, String(req.headers['x-instar-device-time'] ?? ''), raw));
+        const admitted = replayRecord.admit(digest);
+        if (admitted === 'replay') {
+            res.status(409).json({ error: 'replay', reason: REPLAY_REASON });
+            return;
+        }
+        if (admitted === 'unavailable') {
+            res.status(503).json({ error: 'replay-record-unavailable', reason: REPLAY_RECORD_REASON });
+            return;
+        }
+        machineInputs.push(tNow);
+        let ok = false;
+        try {
+            ok = deps.sendInput(s.tmuxSession, text);
+        }
+        catch {
+            ok = false;
+        } // @silent-fallback-ok — answered as send-failed
+        if (!ok) {
+            res.status(409).json({ error: 'send-failed', reason: SEND_FAILED_REASON });
+            return;
+        }
+        const person = devicePersonOf(req);
+        appendInputAudit(deps.stateDir, {
+            at: new Date(now()).toISOString(), deviceId: g.deviceId, role: person?.role ?? null, userId: person?.userId ?? null,
+            sessionId: s.id, tmuxSession: s.tmuxSession, textLength: text.length,
+        });
+        res.json({ ok: true });
+    });
+    return router;
+}
+//# sourceMappingURL=mobileSessionTerminalRoutes.js.map

package/dist/server/mobileSessionTerminalRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobileSessionTerminalRoutes.js","sourceRoot":"","sources":["../../src/server/mobileSessionTerminalRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAkD,MAAM,SAAS,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE7E,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,MAAM,CAAC,MAAM,kBAAkB,GAAG,4EAA4E,CAAC;AAC/G,MAAM,CAAC,MAAM,uBAAuB,GAAG,8GAA8G,CAAC;AACtJ,MAAM,CAAC,MAAM,eAAe,GAAG,6DAA6D,CAAC;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAG,0GAA0G,CAAC;AAC7I,MAAM,CAAC,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,mFAAmF,CAAC;AAC3H,MAAM,CAAC,MAAM,iBAAiB,GAAG,4FAA4F,CAAC;AAC9H,sGAAsG;AACtG,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAElD,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,OAAO,QAAQ,CAAC,CAAC,CAAC,2BAA2B,QAAQ,kBAAkB,QAAQ,GAAG,CAAC,CAAC,CAAC,8EAA8E,CAAC;AACtK,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAiD;IAC7F,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1I,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,wEAAwE,CAAC;AACtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,gGAAgG,CAAC;AAErI,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,OAAO,QAAQ;QACb,CAAC,CAAC,wBAAwB,QAAQ,uCAAuC,QAAQ,GAAG;QACpF,CAAC,CAAC,qGAAqG,CAAC;AAC5G,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,GAAG,2CAA2C,CAAC;AAC/D,MAAM,UAAU,iBAAiB,CAAC,IAAY,IAAa,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAU3F;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAqC,EAAE,IAAY;IACtF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IACtF,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAU,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAUD,mGAAmG;AACnG,MAAM,UAAU,YAAY,CAAC,OAA8B,EAAE,UAAyC;IACpG,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8C,EAAE,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACxG,2FAA2F;IAC3F,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACnG,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7I,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACtH,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;AACtE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC;IACnJ,OAAQ,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;AAC/F,CAAC;AA2BD,MAAM,WAAW,GAAG,CAAC,GAAY,EAAa,EAAE,CAAC,CAAE,GAAkD,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAE5I;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAEL,IAAI;IAA2B,GAAG;IADvD,OAAO,GAA+B,IAAI,CAAC;IACnD,YAA6B,IAAY,EAAmB,GAAG,GAAiB,IAAI,CAAC,GAAG;oBAA3D,IAAI;mBAA2B,GAAG;IAA4B,CAAC;IAEpF,IAAI;QACV,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;YACtF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC,CAAC,sFAAsF,CAAC,CAAC;QAClG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wGAAwG;IACxG,MAAM,CAAC,MAAM,CAAC,SAAiB;QAC7B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,uHAAuH;IACvH,KAAK,CAAC,MAAc;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa;gBAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QACnC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YAC9C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxH,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,GAA4B;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,kBAAkB;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC,CAAC,uCAAuC,CAAC,CAAC;QACnD,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yFAAyF;QACzF,OAAO,CAAC,KAAK,CAAC,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAA+B;IAC/E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+C,CAAC;IACzE,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,kCAAkC,CAAC,EAAE,GAAG,CAAC,CAAC;IAElJ,sIAAsI;IACtI,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,IAAY;QACtD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAC/H,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;;gBAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,IAAI,gCAAgC;gBAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YACrI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,OAAqB,CAAC;YAC1B,IAAI,CAAC;gBAAC,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC,CAAC,qDAAqD;YACnK,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACtD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IAC5D,CAAC;IAED,mFAAmF;IACnF,SAAS,UAAU,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACjE,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5I,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACzI,6FAA6F;QAC7F,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,sBAAsB,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACxJ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,IAAI,EAAE,GAAG,EAAE,CAAC;IACzF,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,GAAa,EAAE,CAAkE;QAC9G,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAwB,EAAE,CAAC;QACtC,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC,CAAC,yDAAyD;QACxH,MAAM,CAAC,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAC3I,OAAO,CAAC,CAAC,OAAO,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,sEAAsE,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAClL,mGAAmG;QACnG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1H,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC7F,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACvH,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;QAAC,CAAC,CAAC,+DAA+D;QAC9J,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACpH,IAAI,OAAO,GAAqC,EAAE,CAAC;QACnD,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC,CAAC,uDAAuD;QACjH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7L,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC7F,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9I,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,gBAAgB,kCAAkC,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/G,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,+FAA+F;QAC/F,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QACnB,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/D,IAAI,aAAa,CAAC,MAAM,IAAI,+BAA+B,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACzJ,6FAA6F;QAC7F,MAAM,GAAG,GAAI,GAAuC,CAAC,OAAO,CAAC;QAC7D,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/L,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxG,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,EAAE,GAAG,KAAK,CAAC;QAAC,CAAC,CAAC,gDAAgD;QACxH,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChG,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC9B,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;YACnH,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM;SACrE,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/recommendedServiceRoutes.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Routes for recommended outside services (docs/specs/recommended-services.md, Surfaces).
+ * Reading is open to any session. A no is the operator's act, so it needs the PIN, never a
+ * bearer token alone. Absent ledger answers 503.
+ */
+import type { Request, Response, Router } from 'express';
+import { type RecommendedServicesLedger } from '../recommended/RecommendedServicesLedger.js';
+export interface RecommendedServiceRouteDeps {
+    ledger: () => RecommendedServicesLedger | null;
+    checkPin: (req: Request, res: Response) => boolean;
+}
+export declare function registerRecommendedServiceRoutes(router: Router, deps: RecommendedServiceRouteDeps): void;
+//# sourceMappingURL=recommendedServiceRoutes.d.ts.map

package/dist/server/recommendedServiceRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommendedServiceRoutes.d.ts","sourceRoot":"","sources":["../../src/server/recommendedServiceRoutes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAA6B,KAAK,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAGxH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,yBAAyB,GAAG,IAAI,CAAC;IAC/C,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC;CACpD;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,GAAG,IAAI,CA0CxG"}

package/dist/server/recommendedServiceRoutes.js

@@ -0,0 +1,49 @@
+import { NO_REASONS } from '../recommended/RecommendedServicesLedger.js';
+import { RECOMMENDED_SERVICE_IDS } from '../recommended/serviceIds.js';
+export function registerRecommendedServiceRoutes(router, deps) {
+    const ledgerOr503 = (res) => {
+        const ledger = deps.ledger();
+        if (!ledger)
+            res.status(503).json({ error: 'recommended-services-unavailable', detail: 'Choices cannot be saved on this machine yet, because it has no machine identity.' });
+        return ledger;
+    };
+    router.get('/recommended-services', (_req, res) => {
+        const ledger = ledgerOr503(res);
+        if (!ledger)
+            return;
+        res.json({ services: RECOMMENDED_SERVICE_IDS.map((id) => ledger.effective(id)), offersLive: false, replicating: ledger.isReplicating() });
+    });
+    router.post('/recommended-services/:id/no', (req, res) => {
+        const ledger = ledgerOr503(res);
+        if (!ledger)
+            return;
+        if (!RECOMMENDED_SERVICE_IDS.includes(req.params.id)) {
+            res.status(404).json({ error: 'unknown-service' });
+            return;
+        }
+        if (req.headers['x-instar-request'] !== '1') {
+            res.status(403).json({ error: 'X-Instar-Request: 1 required' });
+            return;
+        }
+        const { reason = 'none', shutdown = false } = (req.body ?? {});
+        if (!NO_REASONS.includes(reason)) {
+            res.status(400).json({ error: 'invalid-reason', valid: NO_REASONS });
+            return;
+        }
+        if (typeof shutdown !== 'boolean') {
+            res.status(400).json({ error: 'invalid-shutdown' });
+            return;
+        }
+        if (!deps.checkPin(req, res))
+            return;
+        try {
+            ledger.recordNo({ service: req.params.id, reason: reason, shutdown: shutdown ? 'authorized' : 'none', origin: 'owner-surface' });
+        }
+        catch {
+            res.status(503).json({ error: 'recommended-services-unavailable', detail: 'That choice could not be saved. Nothing changed.' });
+            return;
+        }
+        res.json(ledger.effective(req.params.id));
+    });
+}
+//# sourceMappingURL=recommendedServiceRoutes.js.map

package/dist/server/recommendedServiceRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommendedServiceRoutes.js","sourceRoot":"","sources":["../../src/server/recommendedServiceRoutes.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAiD,MAAM,6CAA6C,CAAC;AACxH,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAOvE,MAAM,UAAU,gCAAgC,CAAC,MAAc,EAAE,IAAiC;IAChG,MAAM,WAAW,GAAG,CAAC,GAAa,EAAoC,EAAE;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,kFAAkF,EAAE,CAAC,CAAC;QAC7K,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5I,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,GAAG,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6C,CAAC;QAC3G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAkB,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,IAAI,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/I,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC,CAAC;YAChI,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes.d.ts

@@ -750,6 +750,8 @@ export interface RouteContext {
     ecosystemIdeas?: () => import('../ecosystem/buildEcosystemIdeas.js').EcosystemRouteContext | {
         unavailable: 'no-source';
     } | null;
+    /** docs/specs/recommended-services.md. Null when this machine has no identity; the routes answer 503. */
+    recommendedServicesLedger?: import('../recommended/RecommendedServicesLedger.js').RecommendedServicesLedger | null;
     /**
      * The money-layer OPERATOR ENABLE surface
      * (docs/specs/money-layer-operator-enable-surface.md). Unlike every field