sealbridge 0.2.1 → 0.3.0

package/dist/packages/runtime/dist/held-request-store.js

@@ -0,0 +1,290 @@
+// SPDX-License-Identifier: Apache-2.0
+import * as fs from 'node:fs';
+import { createHash, randomUUID } from 'node:crypto';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { digest, isEncryptedEnvelopePayload, resolveDid, signPayload, verifyEnvelope, verifySigned } from '../../core/dist/index.js';
+import { checkPath, inspectDirectory, privateDirectory, readPrivateFile, resolveDataRoot, writePrivateFile } from './local-identity.js';
+export const HELD_CONTENT_BOUNDS = Object.freeze({
+    retentionMs: 24 * 60 * 60_000, envelopeBytes: 256 * 1024, records: 100,
+    totalEnvelopeBytes: 32 * 1024 * 1024, metadataBytes: 8 * 1024,
+});
+const idPattern = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
+export const isHeldDigest = (value) => typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value);
+const kinds = ['task', 'connection', 'application'];
+function fail() { throw new Error('QUARANTINE_INVALID'); }
+function keys(value, allowed) { return Object.keys(value).every(k => allowed.includes(k)); }
+function signedShape(value) {
+    return keys(value, ['payload', 'signature']) && !!value.signature && keys(value.signature, ['signerDid', 'canonicalization', 'payloadDigest', 'signedAt', 'signature']);
+}
+function identifier(value) { return value === undefined || typeof value === 'string' && /^[A-Za-z0-9_-]{1,128}$/.test(value); }
+function bytes(value) { return Buffer.byteLength(JSON.stringify(value)); }
+function encrypted(envelope, ownerDid) {
+    if (!isEncryptedEnvelopePayload(envelope?.payload?.payload))
+        throw new Error('UNENCRYPTED_ENVELOPE_REJECTED');
+    const payload = envelope.payload.payload;
+    if (!verifyEnvelope(envelope, ownerDid) || !keys(payload, ['__acpEncrypted', 'ephemeralPublicKey', 'iv', 'ciphertext', 'tag']) ||
+        ![payload.ephemeralPublicKey, payload.iv, payload.ciphertext, payload.tag].every(s => /^[A-Za-z0-9_-]*$/.test(s)) ||
+        Buffer.from(payload.iv, 'base64url').length !== 12 || Buffer.from(payload.tag, 'base64url').length !== 16)
+        fail();
+}
+export function heldRequestDirectory(ownerDid, options = {}) {
+    return join(resolveDataRoot(options), 'quarantine', createHash('sha256').update(ownerDid).digest('hex'));
+}
+export function heldSummary(record, now) {
+    return { id: record.id, kind: record.kind, ownerDid: record.ownerDid, senderOwnerDid: record.senderOwnerDid,
+        ...(record.requestId === undefined ? {} : { requestId: record.requestId }),
+        ...(record.taskId === undefined ? {} : { taskId: record.taskId }),
+        contentDigest: record.contentDigest, envelopeDigest: record.envelopeDigest,
+        receivedAt: record.receivedAt, expiresAt: record.expiresAt,
+        state: record.expiresAt <= now ? 'expired' : record.state,
+        inspectionStatus: record.inspectionReceipt?.payload.status ?? 'pending', sizeBytes: bytes(record.envelope) };
+}
+/** Owner-local ciphertext storage. Reads never create, migrate, prune or rewrite files. */
+export class HeldRequestStore {
+    owner;
+    directory;
+    transitionSink;
+    setTransitionSink(sink) { this.transitionSink = sink; }
+    io;
+    platform;
+    now;
+    limits;
+    constructor(owner, options = {}) {
+        this.owner = owner;
+        this.transitionSink = options.transitionSink;
+        this.directory = heldRequestDirectory(owner.did, options);
+        this.io = options.fs ?? fs;
+        this.platform = options.platform ?? process.platform;
+        this.now = options.now ?? Date.now;
+        this.limits = { ...HELD_CONTENT_BOUNDS, ...options.limits };
+        for (const name of ['envelopeBytes', 'records', 'totalEnvelopeBytes'])
+            if (!Number.isInteger(this.limits[name]) || this.limits[name] < 1 || this.limits[name] > HELD_CONTENT_BOUNDS[name])
+                fail();
+        if (options.workspaceDir !== undefined) {
+            const path = relative(resolve(options.workspaceDir), this.directory);
+            if (!path || !isAbsolute(path) && path !== '..' && !path.startsWith('..' + sep))
+                fail();
+        }
+    }
+    directories() { return [dirname(dirname(this.directory)), dirname(this.directory), this.directory]; }
+    path(id) { if (!idPattern.test(id))
+        fail(); return join(this.directory, id + '.json'); }
+    validate(record, id) {
+        if (!record || !keys(record, ['version', 'id', 'kind', 'ownerDid', 'senderOwnerDid', 'requestId', 'taskId', 'contentDigest',
+            'envelopeDigest', 'receivedAt', 'expiresAt', 'state', 'envelope', 'inspectionReceipt']) || record.version !== 1 ||
+            record.id !== id || record.ownerDid !== this.owner.did || !kinds.includes(record.kind) ||
+            !identifier(record.requestId) || !identifier(record.taskId) || !isHeldDigest(record.contentDigest) ||
+            ![record.receivedAt, record.expiresAt].every(Number.isSafeInteger) || record.expiresAt <= record.receivedAt ||
+            record.expiresAt - record.receivedAt > HELD_CONTENT_BOUNDS.retentionMs ||
+            !['held', 'reviewable'].includes(record.state) || record.envelopeDigest !== digest(record.envelope))
+            fail();
+        resolveDid(record.senderOwnerDid);
+        encrypted(record.envelope, this.owner.did);
+        if (record.taskId !== undefined && record.taskId !== record.envelope.payload.taskId)
+            fail();
+        const receipt = record.inspectionReceipt, p = receipt?.payload;
+        if (receipt && (!signedShape(receipt) || !verifySigned(receipt, this.owner.did) || !p ||
+            !keys(p, ['type', 'v', 'recordId', 'ownerDid', 'kind', 'contentDigest', 'envelopeDigest', 'status', 'reportDigest', 'inspectedAt']) ||
+            p.type !== 'HeldContentInspection' || p.v !== 1 || p.recordId !== id || p.ownerDid !== this.owner.did || p.kind !== record.kind ||
+            p.contentDigest !== record.contentDigest || p.envelopeDigest !== record.envelopeDigest ||
+            !['complete', 'unavailable', 'error'].includes(p.status) || !Number.isSafeInteger(p.inspectedAt) ||
+            p.inspectedAt < record.receivedAt || p.inspectedAt >= record.expiresAt ||
+            (p.reportDigest !== undefined && !isHeldDigest(p.reportDigest)) || p.status === 'complete' && !p.reportDigest))
+            fail();
+        if ((record.state === 'reviewable') !== (p?.status === 'complete'))
+            fail();
+        const { envelope, ...metadata } = record;
+        if (bytes(envelope) > HELD_CONTENT_BOUNDS.envelopeBytes || bytes(metadata) + 1024 > HELD_CONTENT_BOUNDS.metadataBytes)
+            fail();
+    }
+    /** Returns ciphertext and signed inspection metadata, never decrypted content. */
+    read(id) {
+        const path = this.path(id);
+        try {
+            for (const directory of this.directories()) {
+                try {
+                    inspectDirectory(directory, this.io, this.platform);
+                }
+                catch (e) {
+                    if (e.code !== 'ENOENT')
+                        throw e;
+                }
+            }
+            const raw = readPrivateFile(path, this.io, HELD_CONTENT_BOUNDS.envelopeBytes + HELD_CONTENT_BOUNDS.metadataBytes, this.platform);
+            if (raw === undefined)
+                return undefined;
+            const signed = JSON.parse(raw);
+            if (!signedShape(signed) || !verifySigned(signed, this.owner.did))
+                fail();
+            this.validate(signed.payload, id);
+            return signed.payload;
+        }
+        catch {
+            fail();
+        }
+    }
+    records() {
+        try {
+            for (const directory of this.directories()) {
+                try {
+                    inspectDirectory(directory, this.io, this.platform);
+                }
+                catch (e) {
+                    if (e.code !== 'ENOENT')
+                        throw e;
+                }
+            }
+            let names;
+            try {
+                names = this.io.readdirSync(this.directory);
+            }
+            catch (e) {
+                if (e.code === 'ENOENT')
+                    return [];
+                throw e;
+            }
+            const files = names.filter(n => n.endsWith('.json'));
+            if (files.length > HELD_CONTENT_BOUNDS.records)
+                fail();
+            return files.sort().map(name => this.read(name.slice(0, -5)) ?? fail());
+        }
+        catch {
+            fail();
+        }
+    }
+    list() { const now = this.now(); return this.records().map(r => heldSummary(r, now)); }
+    mutate(operation) {
+        const lock = join(this.directory, '.lock');
+        let locked = false;
+        try {
+            for (const directory of this.directories())
+                privateDirectory(directory, this.io, this.platform);
+            try {
+                writePrivateFile(lock, Buffer.alloc(0), this.io, this.platform);
+                locked = true;
+            }
+            catch (e) {
+                if (e.code === 'EEXIST')
+                    throw new Error('QUARANTINE_BUSY');
+                throw e;
+            }
+            return operation(this.records());
+        }
+        catch (e) {
+            if (e instanceof Error && /^(QUARANTINE_|INSPECTION_|UNENCRYPTED_ENVELOPE_REJECTED$)/.test(e.message))
+                throw e;
+            throw new Error('QUARANTINE_UNWRITABLE');
+        }
+        finally {
+            if (locked)
+                this.io.unlinkSync(lock);
+        }
+    }
+    publish(record) {
+        this.validate(record, record.id);
+        const target = this.path(record.id), temporary = target + '.' + randomUUID() + '.tmp';
+        try {
+            writePrivateFile(temporary, Buffer.from(JSON.stringify(signPayload(record, this.owner, new Date(this.now()).toISOString())) + '\n'), this.io, this.platform);
+            checkPath(target, this.io, this.platform);
+            this.io.renameSync(temporary, target);
+        }
+        finally {
+            try {
+                this.io.unlinkSync(temporary);
+            }
+            catch (e) {
+                if (e.code !== 'ENOENT')
+                    throw e;
+            }
+        }
+    }
+    /** Caller validates sender-owner delegation and the task/offer deadline before holding. Return only after publication. */
+    hold(request) {
+        let record;
+        try {
+            const now = this.now();
+            encrypted(request.envelope, this.owner.did);
+            if (!Number.isSafeInteger(request.deadline))
+                fail();
+            if (bytes(request.envelope) > this.limits.envelopeBytes)
+                throw new Error('QUARANTINE_FULL');
+            record = { version: 1, id: request.id ?? randomUUID(), kind: request.kind, ownerDid: this.owner.did,
+                senderOwnerDid: request.senderOwnerDid, contentDigest: request.contentDigest, envelopeDigest: digest(request.envelope),
+                receivedAt: now, expiresAt: Math.min(request.deadline, now + HELD_CONTENT_BOUNDS.retentionMs), state: 'held',
+                envelope: structuredClone(request.envelope),
+                ...(request.taskId === undefined ? {} : { taskId: request.taskId }),
+                ...(request.requestId === undefined ? {} : { requestId: request.requestId }) };
+            this.path(record.id);
+            this.validate(record, record.id);
+        }
+        catch (e) {
+            if (e instanceof Error && /^(QUARANTINE_|UNENCRYPTED_ENVELOPE_REJECTED$)/.test(e.message))
+                throw e;
+            fail();
+        }
+        return this.mutate(records => {
+            const previous = records.find(r => r.id === record.id);
+            if (previous) {
+                if (previous.expiresAt <= this.now() || previous.envelopeDigest !== record.envelopeDigest || previous.contentDigest !== record.contentDigest ||
+                    previous.kind !== record.kind || previous.senderOwnerDid !== record.senderOwnerDid ||
+                    previous.requestId !== record.requestId || previous.taskId !== record.taskId)
+                    fail();
+                this.transitionSink?.(previous, 'held');
+                return heldSummary(previous, this.now());
+            }
+            this.prune(records);
+            const live = records.filter(r => r.expiresAt > this.now());
+            if (live.length >= this.limits.records || live.reduce((sum, r) => sum + bytes(r.envelope), 0) + bytes(record.envelope) > this.limits.totalEnvelopeBytes)
+                throw new Error('QUARANTINE_FULL');
+            this.publish(record);
+            this.transitionSink?.(record, 'held');
+            return heldSummary(record, this.now());
+        });
+    }
+    /** Commits a provider completion bound to the stored ciphertext. Does not approve a task or a connection. */
+    recordInspection(id, receipt) {
+        return this.mutate(records => {
+            const record = records.find(r => r.id === id && r.expiresAt > this.now());
+            if (!record)
+                throw new Error('QUARANTINE_NOT_FOUND');
+            if (record.state === 'reviewable')
+                return heldSummary(record, this.now());
+            record.inspectionReceipt = structuredClone(receipt);
+            record.state = receipt.payload.status === 'complete' ? 'reviewable' : 'held';
+            this.publish(record);
+            return heldSummary(record, this.now());
+        });
+    }
+    prune(records) {
+        const expired = records.filter(r => r.expiresAt <= this.now());
+        for (const r of expired) {
+            this.transitionSink?.(r, 'closed');
+            this.io.unlinkSync(this.path(r.id));
+        }
+        return expired.length;
+    }
+    expire() { return this.mutate(records => this.prune(records)); }
+    discard(id, cause = 'closed') {
+        this.path(id);
+        return this.mutate(records => { const record = records.find(r => r.id === id); if (!record)
+            return false; this.transitionSink?.(record, cause); this.io.unlinkSync(this.path(id)); return true; });
+    }
+    /** Call when a peer is blocked; connection state is managed separately. */
+    discardPeer(senderOwnerDid) {
+        return this.mutate(records => {
+            const matches = records.filter(r => r.senderOwnerDid === senderOwnerDid);
+            for (const r of matches) {
+                this.transitionSink?.(r, 'closed');
+                this.io.unlinkSync(this.path(r.id));
+            }
+            return matches.length;
+        });
+    }
+    clear() {
+        return this.mutate(records => { for (const r of records) {
+            this.transitionSink?.(r, 'closed');
+            this.io.unlinkSync(this.path(r.id));
+        } return records.length; });
+    }
+}
+//# sourceMappingURL=held-request-store.js.map

package/dist/packages/runtime/dist/held-request-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"held-request-store.js","sourceRoot":"","sources":["../src/held-request-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEtH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAwBxI,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG;IACtE,kBAAkB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,GAAG,IAAI;CAC9D,CAAC,CAAC;AAWH,MAAM,SAAS,GAAG,gEAAgE,CAAC;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACpD,SAAS,IAAI,KAAY,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,IAAI,CAAC,KAAa,EAAE,OAAiB,IAAa,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvH,SAAS,WAAW,CAAC,KAAsB;IACzC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EACvF,CAAC,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AACjF,CAAC;AACD,SAAS,UAAU,CAAC,KAAc,IAAa,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjJ,SAAS,KAAK,CAAC,KAAc,IAAY,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3F,SAAS,SAAS,CAAC,QAAwB,EAAE,QAAgB;IAC3D,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC9G,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IACzC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC1H,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,IAAI,EAAE,CAAC;AACxH,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,UAAgC,EAAE;IACvF,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3G,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,GAAW;IACzD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;QACzG,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACjE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;QAC1E,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QAC1D,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QACzD,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjH,CAAC;AACD,2FAA2F;AAC3F,MAAM,OAAO,gBAAgB;IAQE;IAPpB,SAAS,CAAS;IACnB,cAAc,CAAsB;IAC5C,iBAAiB,CAAC,IAAwB,IAAU,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,EAAE,CAAY;IACd,QAAQ,CAAkB;IAC1B,GAAG,CAAe;IAClB,MAAM,CAAyE;IAChG,YAA6B,KAAc,EAAE,UAAmC,EAAE;QAArD,UAAK,GAAL,KAAK,CAAS;QACzC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAAC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACrH,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,oBAAoB,CAAU;YAC5E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC;gBAAE,IAAI,EAAE,CAAC;QAC7H,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;gBAAE,IAAI,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IACO,WAAW,KAAe,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,CAAC,EAAU,IAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxG,QAAQ,CAAC,MAAkB,EAAE,EAAU;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe;YACzH,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAC/G,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YACtF,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC;YAClG,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU;YAC3G,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,GAAG,mBAAmB,CAAC,WAAW;YACtE,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,IAAI,EAAE,CAAC;QAC9G,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAClC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;YAAE,IAAI,EAAE,CAAC;QAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnF,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;YACnI,CAAC,CAAC,IAAI,KAAK,uBAAuB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC/H,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;YACtF,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;YAChG,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS;YACtE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;YAAE,IAAI,EAAE,CAAC;QACzH,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,KAAK,UAAU,CAAC;YAAE,IAAI,EAAE,CAAC;QAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;QACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,mBAAmB,CAAC,aAAa,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,GAAG,mBAAmB,CAAC,aAAa;YAAE,IAAI,EAAE,CAAC;IAChI,CAAC;IACD,kFAAkF;IAClF,IAAI,CAAC,EAAU;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAC5D,OAAO,CAAC,EAAE,CAAC;oBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;YAC5E,CAAC;YACD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,aAAa,GAAG,mBAAmB,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjI,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;YACrD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,IAAI,EAAE,CAAC;YAC1E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IACrB,CAAC;IACD,OAAO;QACL,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAC5D,OAAO,CAAC,EAAE,CAAC;oBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;YAC5E,CAAC;YACD,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YACpD,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YACrF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,CAAC,OAAO;gBAAE,IAAI,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IACrB,CAAC;IACD,IAAI,KAAoB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAI,SAAuC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,MAAM,GAAG,KAAK,CAAC;QAC/D,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE;gBAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChG,IAAI,CAAC;gBAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC;YACvF,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAC9G,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,2DAA2D,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACrD,CAAC;IACO,OAAO,CAAC,MAAkB;QAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;QACtF,IAAI,CAAC;YACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7J,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,CAAC;YAAC,CAAC;QACnH,CAAC;IACH,CAAC;IACD,0HAA0H;IAC1H,IAAI,CAAC,OAAoB;QACvB,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,IAAI,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC5F,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;gBACjG,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtH,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,GAAG,mBAAmB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM;gBAC5G,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACjF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,IAAI,+CAA+C,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,CAAC;YACnG,IAAI,EAAE,CAAC;QACT,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;oBACxI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;oBAClF,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;oBAAE,IAAI,EAAE,CAAC;gBACzF,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAAC,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBACrJ,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;IACL,CAAC;IACD,6GAA6G;IAC7G,gBAAgB,CAAC,EAAU,EAAE,OAAsC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY;gBAAE,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,iBAAiB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,OAAqB;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACrG,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,MAAM,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,EAAU,EAAE,QAAgC,QAAQ;QAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrM,CAAC;IACD,2EAA2E;IAC3E,WAAW,CAAC,cAAsB;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACrG,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClK,CAAC;CACF"}

package/dist/packages/runtime/dist/idempotency-store.d.ts

@@ -0,0 +1,53 @@
+import type { Json, KeyPair } from '../../core/dist/index.js';
+import { DeliveryStore } from './delivery-store.js';
+import type { DeliveryStoreOptions } from './delivery-store.js';
+import type { IdempotencyAuthorization, PreparedIdempotentAction } from './delivery-records.js';
+type Mutation = Pick<DeliveryStore, 'read' | 'write' | 'reserveIdempotencyCapacity'>;
+export type IdempotencyResponse = {
+    isError: boolean;
+    value: Json;
+};
+export interface IdempotencyStoreOptions extends DeliveryStoreOptions {
+    leaseMs?: number;
+}
+export declare function validateIdempotencyKey(value: unknown): asserts value is string;
+export declare function idempotencyKeyHash(owner: string, tool: string, key: string): string;
+export declare function idempotencyFailure(error: unknown): IdempotencyResponse;
+export declare function unwrapIdempotency<T>(response: IdempotencyResponse): T;
+/** Remove process-local hooks and paths; retain every execution option in the fingerprint. */
+export declare function runtimeIdempotencyAction(options: object, defaults?: Record<string, unknown>): Json;
+/** One operation owns preparation, authorization and all fan-out children. */
+export declare class IdempotencyOperation {
+    readonly store: IdempotencyStore;
+    readonly operationId: string;
+    readonly holderId: string;
+    readonly children: number;
+    private readonly keyHash;
+    private readonly ready;
+    private readonly waiters;
+    private preparationFailure?;
+    private prepared;
+    constructor(store: IdempotencyStore, operationId: string, holderId: string, children: number, keyHash: string);
+    private change;
+    prepare(action: PreparedIdempotentAction): Promise<void>;
+    childReady(index: number, error?: unknown): Promise<void>;
+    authorize(childIndex: number, evidence: IdempotencyAuthorization | void): Promise<void>;
+    sending(): Promise<void>;
+    renew(): Promise<void>;
+}
+/** Owner-signed operation cache sharing C1's atomic store and short signer lock. */
+export declare class IdempotencyStore {
+    readonly records: DeliveryStore;
+    readonly leaseMs: number;
+    private readonly live;
+    constructor(owner: KeyPair, options?: IdempotencyStoreOptions);
+    /** Plan under the signer lock, write outside it, then compare before publishing. */
+    mutate<T>(change: (records: Mutation) => T): Promise<T>;
+    private storeError;
+    run(tool: string, key: string, action: Json, run: (operation: IdempotencyOperation) => Promise<IdempotencyResponse>, options?: {
+        children?: number;
+        deadline?: number;
+    }): Promise<IdempotencyResponse>;
+    private execute;
+}
+export {};