theokit 0.66.0 → 0.67.0

package/dist/{actions-virtual-module-RMEAW2NX.js → actions-virtual-module-WCHXKH6R.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-O3EBLVMP.js";
+import "./chunk-B4Z7KIIU.js";
 import "./chunk-UETVDZBE.js";
 import "./chunk-QD5X56I3.js";
-import "./chunk-VV2VU3LJ.js";
+import "./chunk-WSMLSIS5.js";
 import "./chunk-5VLP3GQ2.js";
 import "./chunk-C27VRUVN.js";
 import "./chunk-7UZZHCRN.js";
@@ -218,4 +218,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-RMEAW2NX.js.map
+//# sourceMappingURL=actions-virtual-module-WCHXKH6R.js.map

package/dist/{actions-virtual-module-LVWXLDCT.js → actions-virtual-module-YIWQTI6Q.js}

@@ -1,7 +1,7 @@
 import "./chunk-WAYUHS54.js";
 import "./chunk-GAJOZJWD.js";
-import "./chunk-EYRWD2AB.js";
-import "./chunk-5GZROLDV.js";
+import "./chunk-WSOAN4KN.js";
+import "./chunk-ENSFCKP6.js";
 import "./chunk-5AGNZXHJ.js";
 import "./chunk-P6OS7652.js";
 import "./chunk-ZDUO4IYN.js";
@@ -234,4 +234,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-LVWXLDCT.js.map
+//# sourceMappingURL=actions-virtual-module-YIWQTI6Q.js.map

package/dist/adapters/security-headers.d.ts

@@ -1,6 +1,6 @@
 export { g as generateNonce } from '../nonce-BXt7Qu_C.js';
-import { S as SecurityHeadersConfig } from '../security-headers-C2cByfJn.js';
-export { b as buildSecurityHeaders } from '../security-headers-C2cByfJn.js';
+import { S as SecurityHeadersConfig } from '../security-headers-vris2MQq.js';
+export { b as buildSecurityHeaders } from '../security-headers-vris2MQq.js';
 
 /**
  * The security headers a deployed target puts on its responses.

package/dist/adapters/security-headers.js

@@ -1,6 +1,6 @@
 import {
   buildSecurityHeaders
-} from "../chunk-5GZROLDV.js";
+} from "../chunk-ENSFCKP6.js";
 import {
   generateNonce
 } from "../chunk-Z4PJMZLM.js";

package/dist/{agent-OCQA4WXF.js → agent-C7F5O5V4.js}

@@ -3,7 +3,7 @@ import "tsx/esm";
 import {
   agentCommand,
   createAgentSsrLoader
-} from "./chunk-N6XDYNWK.js";
+} from "./chunk-UKMOQWUC.js";
 import "./chunk-UETVDZBE.js";
 import "./chunk-5NNFO7R7.js";
 import "./chunk-Z7CJHDLS.js";
@@ -12,4 +12,4 @@ export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=agent-OCQA4WXF.js.map
+//# sourceMappingURL=agent-C7F5O5V4.js.map

package/dist/{app-typed-client-Z4MF5HCB.js → app-typed-client-2ZEGNFJP.js}

@@ -2,8 +2,8 @@ import {
   scanControllerModules
 } from "./chunk-WAYUHS54.js";
 import "./chunk-GAJOZJWD.js";
-import "./chunk-EYRWD2AB.js";
-import "./chunk-5GZROLDV.js";
+import "./chunk-WSOAN4KN.js";
+import "./chunk-ENSFCKP6.js";
 import "./chunk-5AGNZXHJ.js";
 import "./chunk-P6OS7652.js";
 import "./chunk-ZDUO4IYN.js";
@@ -427,4 +427,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-Z4MF5HCB.js.map
+//# sourceMappingURL=app-typed-client-2ZEGNFJP.js.map

package/dist/{app-typed-client-J7NWKMS7.js → app-typed-client-CUM2GZ5Y.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-O3EBLVMP.js";
+import "./chunk-B4Z7KIIU.js";
 import "./chunk-UETVDZBE.js";
 import {
   scanControllerModules
 } from "./chunk-QD5X56I3.js";
-import "./chunk-VV2VU3LJ.js";
+import "./chunk-WSMLSIS5.js";
 import "./chunk-5VLP3GQ2.js";
 import "./chunk-C27VRUVN.js";
 import "./chunk-7UZZHCRN.js";
@@ -411,4 +411,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-J7NWKMS7.js.map
+//# sourceMappingURL=app-typed-client-CUM2GZ5Y.js.map

package/dist/{aws-lambda-AN6CEBXO.js → aws-lambda-R76PWR27.js}

@@ -8,11 +8,11 @@ import {
   describeDeployedSecurityHeaders,
   renderSecurityHeadersConfigLiteral,
   serverDirLiteral
-} from "./chunk-PALZUV6E.js";
+} from "./chunk-6B3CMPE4.js";
 import {
   nodeAdapter
 } from "./chunk-KI4DOTN4.js";
-import "./chunk-VV2VU3LJ.js";
+import "./chunk-WSMLSIS5.js";
 import {
   assertServicesUnsupported,
   readManifest
@@ -259,4 +259,4 @@ export {
   renderAwsLambdaEntry,
   responseToLambdaResultV2
 };
-//# sourceMappingURL=aws-lambda-AN6CEBXO.js.map
+//# sourceMappingURL=aws-lambda-R76PWR27.js.map

package/dist/boot/index.d.ts

@@ -1,12 +1,11 @@
-import { R as ReservedRoutes } from '../health-route-C0hk64_U.js';
+import { R as ReservedRoutes } from '../health-route-CYI7z5g3.js';
 
 /**
  * M7-3 — `theokit/boot`: programmatic boot surface for the convention server.
  *
- * The programmatic surface is a Web `fetch` handler (the universal "fetch
- * handler is the entry point" contract — see the hono reference in
- * knowledge-base/discoveries/blueprints/m7-http-dual-surface-blueprint.md
- * "Coverage Corner 4"). It composes M7-1 (typed 404 envelope) + M7-2 (reserved
+ * The programmatic surface is a Web `fetch` handler — the universal "a fetch
+ * handler is the entry point" contract. It composes M7-1 (typed 404 envelope)
+ * + M7-2 (reserved
  * health/ready routes) and binds NO socket, so embedders + integration tests
  * can fire requests in-process via `app.fetch(new Request(...))`.
  *

package/dist/boot/index.js

@@ -1,6 +1,6 @@
 import {
   serveReservedRoute
-} from "../chunk-GAPBPRPP.js";
+} from "../chunk-TRCJHFAX.js";
 import {
   envelopeCodeToStatus
 } from "../chunk-ACKBVBUI.js";

package/dist/boot/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/boot.ts"],"mappings":";;;;;;;;;;;;;AA0CO,SAAS,6BACd,UAAyC,CAAC,GACnB;AACvB,SAAO;AAAA,IACL,MAAM,MAAM,SAAqC;AAC/C,YAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE;AACtC,YAAM,WAAW,MAAM,mBAAmB,UAAU,QAAQ,kBAAkB,CAAC,CAAC;AAChF,UAAI,aAAa,MAAM;AACrB,eAAO,SAAS,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAAA,MACjE;AAIA,YAAM,WAAW,sBAAsB,IAAI,cAAc,WAAW,CAAC;AACrE,aAAO,SAAS,KAAK,UAAU,EAAE,QAAQ,qBAAqB,SAAS,IAAI,EAAE,CAAC;AAAA,IAChF;AAAA;AAAA;AAAA,IAGA,QAAuB;AACrB,aAAO,QAAQ,QAAQ;AAAA,IACzB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/boot.ts"],"mappings":";;;;;;;;;;;;;AAyCO,SAAS,6BACd,UAAyC,CAAC,GACnB;AACvB,SAAO;AAAA,IACL,MAAM,MAAM,SAAqC;AAC/C,YAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE;AACtC,YAAM,WAAW,MAAM,mBAAmB,UAAU,QAAQ,kBAAkB,CAAC,CAAC;AAChF,UAAI,aAAa,MAAM;AACrB,eAAO,SAAS,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAAA,MACjE;AAIA,YAAM,WAAW,sBAAsB,IAAI,cAAc,WAAW,CAAC;AACrE,aAAO,SAAS,KAAK,UAAU,EAAE,QAAQ,qBAAqB,SAAS,IAAI,EAAE,CAAC;AAAA,IAChF;AAAA;AAAA;AAAA,IAGA,QAAuB;AACrB,aAAO,QAAQ,QAAQ;AAAA,IACzB;AAAA,EACF;AACF;","names":[]}

package/dist/{build-JQSCQ3SQ.js → build-UNBI6VKC.js}

@@ -554,7 +554,7 @@ async function buildCommand(options) {
 `);
 }
 async function runAdapterBuild(target, config, cwd) {
-  const { theoPluginAsync } = await import("./vite-plugin-AVFHID5Z.js");
+  const { theoPluginAsync } = await import("./vite-plugin-ILWLTOKK.js");
   const { default: react } = await import("@vitejs/plugin-react");
   const ctx = {
     // `react()` may return Plugin or Plugin[] depending on version; spread the
@@ -603,7 +603,7 @@ async function runAdapterBuild(target, config, cwd) {
       };
     }
   };
-  const { resolveAdapter } = await import("./registry-RZHBBLIF.js");
+  const { resolveAdapter } = await import("./registry-E5XEUKG6.js");
   const adapter = await resolveAdapter(target);
   const { warnUnappliedConfig, assertRateLimitEnforceable } = await import("./config-support-O4REYSK5.js");
   assertRateLimitEnforceable(config, adapter, target);
@@ -676,4 +676,4 @@ function relativize3(absPath, root) {
 export {
   buildCommand
 };
-//# sourceMappingURL=build-JQSCQ3SQ.js.map
+//# sourceMappingURL=build-UNBI6VKC.js.map

package/dist/{bun-3FFL7CS4.js → bun-NPBIAWSU.js}

@@ -12,11 +12,11 @@ import {
   describeDeployedSecurityHeaders,
   renderSecurityHeadersConfigLiteral,
   serverDirLiteral
-} from "./chunk-PALZUV6E.js";
+} from "./chunk-6B3CMPE4.js";
 import {
   nodeAdapter
 } from "./chunk-KI4DOTN4.js";
-import "./chunk-VV2VU3LJ.js";
+import "./chunk-WSMLSIS5.js";
 import {
   assertServicesUnsupported,
   readManifest
@@ -344,4 +344,4 @@ export {
   bunAdapter,
   renderBunEntry
 };
-//# sourceMappingURL=bun-3FFL7CS4.js.map
+//# sourceMappingURL=bun-NPBIAWSU.js.map

package/dist/{chunk-PALZUV6E.js → chunk-6B3CMPE4.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   buildSecurityHeaders
-} from "./chunk-VV2VU3LJ.js";
+} from "./chunk-WSMLSIS5.js";
 
 // src/adapters/deployed-cors.ts
 var UnserializableCorsOriginError = class extends Error {
@@ -189,4 +189,4 @@ export {
   renderSecurityHeadersConfigLiteral,
   describeDeployedSecurityHeaders
 };
-//# sourceMappingURL=chunk-PALZUV6E.js.map
+//# sourceMappingURL=chunk-6B3CMPE4.js.map

package/dist/{chunk-3IIKKBOJ.js → chunk-AL5JHX7X.js}

@@ -357,6 +357,28 @@ function assertProductionSecret(secret) {
   }
 }
 
+// src/server/auth/preview-marker.ts
+var DEFAULT_COOKIE = "theo_preview";
+function createPreviewMarker(config) {
+  const cookieName = config.cookieName ?? DEFAULT_COOKIE;
+  const managerFor = (maxAge) => createSessionManagerWeb({ secret: config.secret, cookieName, maxAge });
+  return {
+    async grant(target, ttlSeconds) {
+      await managerFor(Math.max(ttlSeconds, 0)).createSession(target, {
+        exp: Date.now() + ttlSeconds * 1e3
+      });
+    },
+    revoke(target) {
+      managerFor(0).destroySession(target);
+    },
+    async isPreview(request) {
+      const payload = await managerFor(0).getSession(request);
+      if (payload === null) return false;
+      return typeof payload.exp === "number" && payload.exp > Date.now();
+    }
+  };
+}
+
 // src/server/auth/authenticated-guard.ts
 function Authenticated(sessions) {
   return class AuthenticatedGuard {
@@ -709,6 +731,7 @@ export {
   rotateIfNeededWeb,
   rotateIfNeeded,
   assertProductionSecret,
+  createPreviewMarker,
   Authenticated,
   generateTotp,
   verifyTotp,
@@ -725,4 +748,4 @@ export {
   clearOidcCache,
   discoverOidcProvider
 };
-//# sourceMappingURL=chunk-3IIKKBOJ.js.map
+//# sourceMappingURL=chunk-AL5JHX7X.js.map

package/dist/chunk-AL5JHX7X.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/auth/auth.ts","../src/server/auth/crypto.ts","../src/server/auth/secret-strength.ts","../src/server/auth/session.ts","../src/server/auth/preview-marker.ts","../src/server/auth/authenticated-guard.ts","../src/server/_internal/encoding.ts","../src/server/auth/auth-totp.ts","../src/server/auth/auth-backup-codes.ts","../src/server/auth/auth-throttle.ts","../src/server/auth/oauth-pkce.ts","../src/server/auth/oauth-state.ts","../src/server/auth/oidc-discovery.ts"],"mappings":";;;;;;;;;;AAAO,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAC3C,OAAO;AAAA,EACP,SAAS;AAAA,EAET,YAAY,UAAU,2BAA2B;AAC/C,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,YAAe,SAAqD;AAClF,MAAI,YAAY,QAAQ,YAAY,QAAW;AAC7C,UAAM,IAAI,kBAAkB;AAAA,EAC9B;AACF;;;ACEA,IAAM,UAAU,IAAI,YAAY;AAChC,IAAM,UAAU,IAAI,YAAY;AAEhC,IAAM,oBAAoB,QAAQ,OAAO,iBAAiB;AAC1D,IAAM,kBAAkB,IAAI,WAAW,CAAC;AAKxC,IAAM,WAAW,oBAAI,IAAgC;AAErD,eAAe,UAAU,QAAoC;AAC3D,QAAM,SAAS,SAAS,IAAI,MAAM;AAClC,MAAI,OAAQ,QAAO;AAEnB,QAAM,UAAU,YAAY;AAC1B,UAAM,cAAc,MAAM,OAAO,OAAO;AAAA,MACtC;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB,EAAE,MAAM,OAAO;AAAA,MACf;AAAA,MACA,CAAC,WAAW;AAAA,IACd;AACA,WAAO,OAAO,OAAO;AAAA,MACnB,EAAE,MAAM,QAAQ,MAAM,WAAW,MAAM,iBAAiB,MAAM,kBAAkB;AAAA,MAChF;AAAA,MACA,EAAE,MAAM,WAAW,QAAQ,IAAI;AAAA,MAC/B;AAAA,MACA,CAAC,WAAW,SAAS;AAAA,IACvB;AAAA,EACF,GAAG;AAEH,WAAS,IAAI,QAAQ,MAAM;AAE3B,SAAO,MAAM,MAAM;AACjB,aAAS,OAAO,MAAM;AAAA,EACxB,CAAC;AACD,SAAO;AACT;AAEA,SAAS,YAAY,MAA0B;AAC7C,SAAO,OAAO,KAAK,IAAI,EAAE,SAAS,WAAW;AAC/C;AASA,SAAS,cAAc,KAAsC;AAC3D,QAAM,MAAM,OAAO,KAAK,KAAK,WAAW;AACxC,QAAM,OAAO,IAAI,WAAW,IAAI,MAAM;AACtC,OAAK,IAAI,GAAG;AACZ,SAAO;AACT;AAOA,eAAsB,QAAW,MAAS,QAAiC;AACzE,QAAM,MAAM,MAAM,UAAU,MAAM;AAClC,QAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AACpD,QAAM,YAAY,QAAQ,OAAO,KAAK,UAAU,IAAI,CAAC;AACrD,QAAM,aAAa,IAAI;AAAA,IACrB,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,GAAG,KAAK,SAAS;AAAA,EACrE;AACA,SAAO,GAAG,YAAY,EAAE,CAAC,IAAI,YAAY,UAAU,CAAC;AACtD;AAEA,eAAsB,QAAW,OAAe,QAAmC;AACjF,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,GAAG;AAC7B,QAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,UAAM,KAAK,cAAc,MAAM,CAAC,CAAC;AACjC,UAAM,aAAa,cAAc,MAAM,CAAC,CAAC;AACzC,UAAM,MAAM,MAAM,UAAU,MAAM;AAElC,UAAM,YAAY,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,GAAG,KAAK,UAAU;AACtF,WAAO,KAAK,MAAM,QAAQ,OAAO,SAAS,CAAC;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,yBAA+B;AAC7C,WAAS,MAAM;AACjB;;;ACxDO,IAAM,oBAAoB;AAcjC,IAAM,qBAAqB;AAQ3B,IAAM,oBAAuC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASA,IAAM,8BAAiD;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,iBAAiB;AAGvB,SAAS,gBAAgB,MAAmC;AAC1D,SAAO,SAAS,UAAa,eAAe,KAAK,IAAI;AACvD;AAWA,SAAS,sBAAsB,QAAgB,MAAuB;AACpE,QAAM,WAAW,OAAO,YAAY;AACpC,WAAS,OAAO,GAAG,QAAQ,SAAS,SAAS,KAAK,UAAU;AAC1D,UAAM,KAAK,SAAS,QAAQ,MAAM,IAAI;AACtC,QAAI,OAAO,GAAI,QAAO;AACtB,QAAI,CAAC,gBAAgB,SAAS,KAAK,CAAC,CAAC,KAAK,CAAC,gBAAgB,SAAS,KAAK,KAAK,MAAM,CAAC,GAAG;AACtF,aAAO;AAAA,IACT;AACA,WAAO,KAAK;AAAA,EACd;AACA,SAAO;AACT;AAiBA,IAAM,QAA+B;AAAA,EACnC;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,WACN,OAAO,SAAS,oBACZ,MAAM,OAAO,MAAM,+BAA+B,iBAAiB,KACnE;AAAA,EACR;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,WAAW;AACjB,YAAM,UAAU,kBAAkB,KAAK,CAAC,SAAS,KAAK,KAAK,MAAM,CAAC;AAClE,UAAI,SAAS;AACX,eAAO,0CAA0C,OAAO,OAAO,CAAC;AAAA,MAClE;AACA,YAAM,YAAY,4BAA4B;AAAA,QAAK,CAAC,SAClD,sBAAsB,QAAQ,IAAI;AAAA,MACpC;AACA,UAAI,WAAW;AACb,eAAO,kCAAkC,SAAS;AAAA,MACpD;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,WAAW;AACjB,YAAM,WAAW,IAAI,IAAI,MAAM,EAAE;AACjC,aAAO,WAAW,qBACd,aAAa,QAAQ,yEAAyE,kBAAkB,KAChH;AAAA,IACN;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO,CAAC,WAAW;AAIjB,YAAM,UAAU,SAAS,QAAQ,QAAQ,QAAQ,CAAC;AAClD,aAAO,SAAS,KAAK,SAAS,KAAK,OAAO,SACtC,QAAQ,MAAM,6BAA6B,KAAK,MAAM,OAAO,SAAS,MAAM,CAAC,WAC7E;AAAA,IACN;AAAA,EACF;AACF;AAiBO,SAAS,cAAc,QAAuC;AACnE,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,KAAK,MAAM,MAAM;AAChC,QAAI,WAAW,KAAM,QAAO,EAAE,MAAM,KAAK,MAAM,OAAO;AAAA,EACxD;AACA,SAAO;AACT;;;AC3KA,IAAM,cAAc;AAMpB,SAAS,iBAAiB,OAAoC;AAC5D,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,MAAM,IAAI,CAAC,KAAK;AACzD,MAAI,IAAI,WAAW,GAAG;AACpB,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,MAAI,IAAI,SAAS,aAAa;AAC5B,UAAM,IAAI;AAAA,MACR,2CAA2C,WAAW,qEAAgE,IAAI,MAAM;AAAA,IAClI;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,KAAK;AACpC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,IAAI,IAAI,CAAC;AACf,QAAI,OAAO,MAAM,YAAY,EAAE,SAAS,IAAI;AAC1C,YAAM,QAAQ,WAAW,aAAa,CAAC,KAAK;AAC5C,YAAM,IAAI,MAAM,iBAAiB,KAAK,uDAAuD;AAAA,IAC/F;AAAA,EACF;AACA,SAAO;AACT;AAgBA,SAAS,eAAe,OAAoC;AAC1D,QAAM,UAAU,iBAAiB,KAAK;AACtC,yBAAuB,OAAO;AAC9B,SAAO;AACT;AAUA,eAAe,uBACb,MACA,SACA,QACiB;AACjB,QAAM,WAAqC;AAAA,IACzC;AAAA,IACA,KAAK,KAAK,IAAI,IAAI,SAAS;AAAA,EAC7B;AACA,SAAO,QAAQ,UAAU,QAAQ,CAAC,CAAC;AACrC;AAWA,eAAe,2BACb,KACA,SACwE;AACxE,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,QAAQ,IAAI,OAAO,QAAQ,MAAM;AAC/B,YAAM,MAAM,MAAM,QAAmC,KAAK,MAAM;AAChE,aAAO,MAAM,EAAE,UAAU,KAAK,OAAO,EAAE,IAAI;AAAA,IAC7C,CAAC;AAAA,EACH;AACA,aAAW,UAAU,SAAS;AAC5B,QAAI,OAAQ,QAAO;AAAA,EACrB;AACA,SAAO;AACT;AAEO,SAAS,qBAA+B,QAAiD;AAC9F,QAAM,UAAU,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,SAAS,OAAO,UAAU;AAEhC,WAAS,YAAY,KAAqB,OAAqB;AAC7D,cAAU,KAAK,YAAY,OAAO;AAAA,MAChC,UAAU;AAAA,MACV,UAAU;AAAA,MACV;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,WAAW,KAAK;AACpB,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAmB,GAAG;AAClD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,mBAAmB,KAAK;AAC5B,YAAM,MAAM,UAAU,KAAK,UAAU;AACrC,UAAI,CAAC,IAAK,QAAO,EAAE,MAAM,MAAM,MAAM,EAAE,aAAa,IAAI,gBAAgB,MAAM,EAAE;AAChF,YAAM,UAAU,MAAM,2BAAqC,KAAK,OAAO;AACvE,UAAI,CAAC,QAAS,QAAO,EAAE,MAAM,MAAM,MAAM,EAAE,aAAa,IAAI,gBAAgB,MAAM,EAAE;AACpF,UAAI,QAAQ,SAAS,MAAM,KAAK,IAAI,GAAG;AACrC,eAAO,EAAE,MAAM,MAAM,MAAM,EAAE,aAAa,QAAQ,OAAO,gBAAgB,MAAM,EAAE;AAAA,MACnF;AACA,aAAO;AAAA,QACL,MAAM,QAAQ,SAAS;AAAA,QACvB,MAAM,EAAE,aAAa,QAAQ,OAAO,gBAAgB,QAAQ,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,IAEA,MAAM,cAAc,KAAK,MAAM;AAC7B,YAAM,QAAQ,MAAM,uBAAuB,MAAM,SAAS,MAAM;AAChE,kBAAY,KAAK,KAAK;AAAA,IACxB;AAAA,IAEA,eAAe,KAAK;AAClB,mBAAa,KAAK,UAAU;AAAA,IAC9B;AAAA,IAEA,MAAM,cAAc,KAAK,KAAK;AAC5B,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAmB,GAAG;AAClD,UAAI,SAAS,KAAM,QAAO;AAG1B,YAAM,QAAQ,MAAM,uBAAuB,MAAM,SAAS,MAAM;AAChE,kBAAY,KAAK,KAAK;AACtB,aAAO;AAAA,IACT;AAAA,EACF;AACF;AA4BO,SAAS,wBACd,QAC6B;AAC7B,QAAM,UAAU,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,SAAS,OAAO,UAAU;AAEhC,WAAS,eAAe,QAAiB,OAAqB;AAC5D,0BAAsB,QAAQ,YAAY,OAAO;AAAA,MAC/C,UAAU;AAAA,MACV,UAAU;AAAA,MACV;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,WAAW,SAAS;AACxB,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAmB,OAAO;AACtD,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,mBAAmB,SAAS;AAChC,YAAM,MAAM,qBAAqB,SAAS,UAAU;AACpD,UAAI,QAAQ,OAAW,QAAO,EAAE,MAAM,MAAM,MAAM,EAAE,aAAa,IAAI,gBAAgB,MAAM,EAAE;AAC7F,YAAM,UAAU,MAAM,2BAAqC,KAAK,OAAO;AACvE,UAAI,CAAC,QAAS,QAAO,EAAE,MAAM,MAAM,MAAM,EAAE,aAAa,IAAI,gBAAgB,MAAM,EAAE;AACpF,UAAI,QAAQ,SAAS,MAAM,KAAK,IAAI,GAAG;AACrC,eAAO,EAAE,MAAM,MAAM,MAAM,EAAE,aAAa,QAAQ,OAAO,gBAAgB,MAAM,EAAE;AAAA,MACnF;AACA,aAAO;AAAA,QACL,MAAM,QAAQ,SAAS;AAAA,QACvB,MAAM,EAAE,aAAa,QAAQ,OAAO,gBAAgB,QAAQ,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,IAEA,MAAM,cAAc,QAAQ,MAAM;AAChC,YAAM,QAAQ,MAAM,uBAAuB,MAAM,SAAS,MAAM;AAChE,qBAAe,QAAQ,KAAK;AAAA,IAC9B;AAAA,IAEA,eAAe,QAAQ;AACrB,kCAA4B,QAAQ,UAAU;AAAA,IAChD;AAAA,IAEA,MAAM,cAAc,SAAS,QAAQ;AACnC,YAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAmB,OAAO;AACtD,UAAI,SAAS,KAAM,QAAO;AAC1B,YAAM,QAAQ,MAAM,uBAAuB,MAAM,SAAS,MAAM;AAChE,qBAAe,QAAQ,KAAK;AAC5B,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAiBA,eAAsB,kBACpB,IACA,SACA,QAC0B;AAC1B,QAAM,EAAE,MAAM,KAAK,IAAI,MAAM,GAAG,mBAAmB,OAAO;AAC1D,MAAI,SAAS,QAAQ,KAAK,gBAAgB;AACxC,UAAM,GAAG,cAAc,QAAQ,IAAI;AAAA,EACrC;AACA,SAAO;AACT;AAmBA,eAAsB,eACpB,IACA,KACA,KAC0B;AAC1B,QAAM,EAAE,MAAM,KAAK,IAAI,MAAM,GAAG,mBAAmB,GAAG;AACtD,MAAI,SAAS,QAAQ,KAAK,gBAAgB;AACxC,UAAM,GAAG,cAAc,KAAK,IAAI;AAAA,EAClC;AACA,SAAO;AACT;AAoBO,SAAS,uBAAuB,QAAiC;AACtE,QAAM,MAAM,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AACpD,QAAM,SAAS,QAAQ,IAAI,aAAa;AAExC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAM,WAAW,cAAc,IAAI,CAAC,CAAC;AACrC,QAAI,CAAC,SAAU;AAEf,UAAM,SAAS,IAAI,SAAS,IAAI,2BAA2B,CAAC,KAAK;AAEjE,QAAI,QAAQ;AACV,YAAM,IAAI;AAAA,QACR,GAAG,MAAM,IAAI,SAAS,MAAM;AAAA,MAE9B;AAAA,IACF;AACA,YAAQ;AAAA,MACN,sBAAsB,OAAO,YAAY,CAAC,IAAI,SAAS,MAAM;AAAA,IAE/D;AAAA,EACF;AACF;;;AC/UA,IAAM,iBAAiB;AAEhB,SAAS,oBAAoB,QAA4C;AAC9E,QAAM,aAAa,OAAO,cAAc;AAKxC,QAAM,aAAa,CAAC,WAClB,wBAAwC,EAAE,QAAQ,OAAO,QAAQ,YAAY,OAAO,CAAC;AAEvF,SAAO;AAAA,IACL,MAAM,MAAM,QAAQ,YAAY;AAI9B,YAAM,WAAW,KAAK,IAAI,YAAY,CAAC,CAAC,EAAE,cAAc,QAAQ;AAAA,QAC9D,KAAK,KAAK,IAAI,IAAI,aAAa;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,IAEA,OAAO,QAAQ;AACb,iBAAW,CAAC,EAAE,eAAe,MAAM;AAAA,IACrC;AAAA,IAEA,MAAM,UAAU,SAAS;AAIvB,YAAM,UAAU,MAAM,WAAW,CAAC,EAAE,WAAW,OAAO;AACtD,UAAI,YAAY,KAAM,QAAO;AAC7B,aAAO,OAAO,QAAQ,QAAQ,YAAY,QAAQ,MAAM,KAAK,IAAI;AAAA,IACnE;AAAA,EACF;AACF;;;ACCO,SAAS,cAAwB,UAA0D;AAChG,SAAO,MAAM,mBAA0C;AAAA,IACrD,MAAM,YAAY,SAA6C;AAG7D,aAAQ,MAAM,SAAS,WAAW,QAAQ,WAAW,CAAC,MAAO;AAAA,IAC/D;AAAA,EACF;AACF;;;AC5EO,SAAS,gBAAgB,OAA2B;AACzD,MAAI,IAAI;AACR,aAAW,KAAK,MAAO,MAAK,OAAO,aAAa,CAAC;AAMjD,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;AAgBO,SAAS,mBAAmB,GAAW,GAAoB;AAChE,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,EAAE,WAAW,KAAK,EAAE,WAAW,EAAG,QAAO;AAE7C,QAAM,SAAS,KAAK,IAAI,EAAE,QAAQ,EAAE,MAAM;AAC1C,MAAI,OAAO,EAAE,SAAS,EAAE;AACxB,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAG/B,UAAM,KAAK,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI;AAC5C,UAAM,KAAK,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI;AAC5C,YAAQ,KAAK;AAAA,EACf;AACA,SAAO,SAAS;AAClB;;;ACbA,IAAM,eAAe;AACrB,IAAM,iBAAiB;AACvB,IAAM,oBAAmC;AAGzC,SAAS,aAAa,GAAuB;AAC3C,QAAM,WAAW;AASjB,QAAM,QAAQ,EAAE,YAAY;AAC5B,MAAI,MAAM,MAAM;AAChB,SAAO,MAAM,KAAK,MAAM,WAAW,MAAM,CAAC,MAAM,GAAgB,QAAO;AACvE,QAAM,QAAQ,MAAM,MAAM,GAAG,GAAG,EAAE,QAAQ,QAAQ,EAAE;AACpD,MAAI,CAAC,cAAc,KAAK,KAAK,GAAG;AAC9B,UAAM,IAAI,MAAM,uBAAuB;AAAA,EACzC;AACA,QAAM,OAAiB,CAAC;AACxB,aAAW,KAAK,OAAO;AACrB,UAAM,MAAM,SAAS,QAAQ,CAAC;AAC9B,aAAS,IAAI,GAAG,KAAK,GAAG,IAAK,MAAK,KAAM,OAAO,IAAK,CAAC;AAAA,EACvD;AAEA,QAAM,YAAY,KAAK,MAAM,KAAK,SAAS,CAAC;AAC5C,QAAM,MAAM,IAAI,WAAW,SAAS;AACpC,WAAS,IAAI,GAAG,IAAI,WAAW,KAAK;AAClC,QAAI,IAAI;AACR,aAAS,IAAI,GAAG,IAAI,GAAG,IAAK,KAAK,KAAK,IAAK,KAAK,IAAI,IAAI,CAAC;AACzD,QAAI,CAAC,IAAI;AAAA,EACX;AACA,SAAO;AACT;AAGA,SAAS,aAAa,OAA2B;AAC/C,QAAM,WAAW;AACjB,MAAI,MAAM;AACV,MAAI,SAAS;AACb,MAAI,OAAO;AACX,aAAW,KAAK,OAAO;AACrB,aAAU,UAAU,IAAK;AACzB,YAAQ;AACR,WAAO,QAAQ,GAAG;AAChB,aAAO,SAAU,UAAW,OAAO,IAAM,EAAI;AAC7C,cAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,EAAG,QAAO,SAAU,UAAW,IAAI,OAAS,EAAI;AAC3D,SAAO;AACT;AAEA,SAAS,gBAAgB,QAAyC;AAChE,MAAI,OAAO,WAAW,SAAU,QAAO,aAAa,MAAM;AAC1D,SAAO;AACT;AAGA,SAAS,aAAa,QAAgB,SAA6B;AACjE,QAAM,UAAU,KAAK,MAAM,SAAS,MAAO,OAAO;AAClD,QAAM,MAAM,IAAI,WAAW,CAAC;AAE5B,QAAM,KAAK,KAAK,MAAM,UAAU,UAAW;AAC3C,QAAM,KAAK,YAAY;AACvB,MAAI,CAAC,IAAK,OAAO,KAAM;AACvB,MAAI,CAAC,IAAK,OAAO,KAAM;AACvB,MAAI,CAAC,IAAK,OAAO,IAAK;AACtB,MAAI,CAAC,IAAI,KAAK;AACd,MAAI,CAAC,IAAK,OAAO,KAAM;AACvB,MAAI,CAAC,IAAK,OAAO,KAAM;AACvB,MAAI,CAAC,IAAK,OAAO,IAAK;AACtB,MAAI,CAAC,IAAI,KAAK;AACd,SAAO;AACT;AAEA,eAAe,KACb,QACA,SACA,WACqB;AACrB,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA;AAAA,IACA,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,QAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,OAAuB;AACzE,SAAO,IAAI,WAAW,GAAG;AAC3B;AAGA,SAAS,SAAS,KAAiB,QAAwB;AACzD,QAAM,SAAS,IAAI,IAAI,SAAS,CAAC,IAAI;AACrC,QAAM,QACF,IAAI,MAAM,IAAI,QAAS,MACvB,IAAI,SAAS,CAAC,IAAI,QAAS,MAC3B,IAAI,SAAS,CAAC,IAAI,QAAS,IAC5B,IAAI,SAAS,CAAC,IAAI;AACrB,QAAM,MAAM,MAAM;AAClB,SAAO,OAAO,OAAO,GAAG,EAAE,SAAS,QAAQ,GAAG;AAChD;AAGA,eAAsB,aAAa,MAAoC;AACrE,QAAM,SAAS,gBAAgB,KAAK,MAAM;AAC1C,QAAM,OAAO,KAAK,QAAQ;AAC1B,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,YAAY,KAAK,aAAa;AACpC,QAAM,OAAO,KAAK,QAAQ,KAAK,IAAI;AACnC,QAAM,MAAM,MAAM,KAAK,QAAQ,aAAa,MAAM,IAAI,GAAG,SAAS;AAClE,SAAO,SAAS,KAAK,MAAM;AAC7B;AAQA,eAAsB,WAAW,OAAe,MAA2C;AACzF,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,SAAS,KAAK,UAAU;AAC9B,MAAI,CAAC,QAAQ,KAAK,KAAK,KAAK,MAAM,WAAW,OAAQ,QAAO;AAE5D,QAAM,OAAO,KAAK,QAAQ;AAC1B,QAAM,YAAY,KAAK,aAAa;AACpC,QAAM,OAAO,KAAK,QAAQ,KAAK,IAAI;AACnC,QAAM,QAAQ,KAAK,UAAU;AAC7B,QAAM,SAAS,gBAAgB,KAAK,MAAM;AAG1C,MAAI,UAAU;AACd,WAAS,QAAQ,CAAC,OAAO,SAAS,OAAO,SAAS;AAChD,UAAM,IAAI,OAAO,QAAQ,OAAO;AAChC,UAAM,OAAO,SAAS,MAAM,KAAK,QAAQ,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM;AAClF,QAAI,mBAAmB,MAAM,KAAK,EAAG,WAAU;AAAA,EACjD;AACA,SAAO;AACT;AAGO,SAAS,mBAAmB,QAAQ,IAAgB;AACzD,MAAI,QAAQ,IAAI;AACd,UAAM,IAAI,MAAM,gEAA6D;AAAA,EAC/E;AACA,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,SAAO,gBAAgB,GAAG;AAC1B,SAAO;AACT;AAgBO,SAAS,QAAQ,MAA8B;AACpD,QAAM,QAAQ,GAAG,KAAK,MAAM,IAAI,KAAK,OAAO;AAC5C,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,QAAQ,aAAa,KAAK,MAAM;AAAA,IAChC,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK,aAAa;AAAA,IAC7B,QAAQ,OAAO,KAAK,UAAU,cAAc;AAAA,IAC5C,QAAQ,OAAO,KAAK,QAAQ,YAAY;AAAA,EAC1C,CAAC;AACD,SAAO,kBAAkB,mBAAmB,KAAK,CAAC,IAAI,OAAO,SAAS,CAAC;AACzE;;;AC7LA,IAAM,mBAAmB;AACzB,IAAM,gBAAgB;AACtB,IAAM,iBAAiB;AAQvB,eAAsB,oBAAoB,OAA0B,CAAC,GAA0B;AAC7F,QAAM,QAAQ,KAAK,SAAS;AAC5B,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,YAAY,KAAK,cAAc,SAAY,MAAM,KAAK;AAC5D,QAAM,WAAW,KAAK,YAAY;AAMlC,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,QAAQ,KAAM;AAC1D,UAAM,IAAI;AAAA,MACR,mEAAmE,OAAO,KAAK,CAAC;AAAA,IAClF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,IAAI;AAC1D,UAAM,IAAI;AAAA,MACR,kEAAkE,OAAO,MAAM,CAAC;AAAA,IAClF;AAAA,EACF;AACA,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,6EAA6E,SAAS,MAAM;AAAA,IAC9F;AAAA,EACF;AAEA,QAAM,QAAsB,CAAC;AAC7B,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,MAAM,SAAS,OAAO;AAC3B,UAAM,MAAM,mBAAmB,QAAQ,QAAQ;AAC/C,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AACZ,UAAM,YAAY,oBAAoB,KAAK,SAAS;AACpD,UAAM,OAAO,MAAM,UAAU,cAAc,SAAS,CAAC;AACrD,UAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EAChC;AACA,SAAO;AACT;AAUA,eAAsB,iBACpB,MACA,QACmD;AACnD,QAAM,YAAY,MAAM,UAAU,cAAc,IAAI,CAAC;AACrD,MAAI;AAEJ,aAAW,KAAK,QAAQ;AACtB,QAAIA,oBAAmB,GAAG,SAAS,GAAG;AACpC,oBAAc;AAAA,IAChB;AAAA,EACF;AACA,SAAO,cAAc,EAAE,OAAO,MAAM,YAAY,IAAI,EAAE,OAAO,MAAM;AACrE;AAOA,SAAS,cAAc,OAAuB;AAC5C,SAAO,MAAM,YAAY,EAAE,QAAQ,WAAW,EAAE;AAClD;AAEA,SAAS,oBAAoB,KAAa,WAA+B;AACvE,MAAI,CAAC,aAAa,IAAI,SAAS,EAAG,QAAO;AACzC,QAAM,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC;AACrC,SAAO,IAAI,MAAM,GAAG,GAAG,IAAI,YAAY,IAAI,MAAM,GAAG;AACtD;AAEA,SAAS,mBAAmB,QAAgB,UAA0B;AACpE,QAAM,SAAS,IAAI,WAAW,MAAM;AACpC,SAAO,gBAAgB,MAAM;AAC7B,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,WAAO,SAAS,OAAO,CAAC,IAAI,SAAS,MAAM;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,eAAe,UAAU,OAAgC;AACvD,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK;AACxD,SAAO,MAAM,KAAK,IAAI,WAAW,IAAI,CAAC,EACnC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAEA,SAASA,oBAAmB,GAAW,GAAoB;AACzD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,SAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAC3E,SAAO,SAAS;AAClB;;;ACjGA,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB,KAAK;AAOhC,eAAsB,cAAc,MAA+C;AACjF,QAAM,cAAc,KAAK,eAAe;AACxC,QAAM,QAAQ,MAAM,KAAK,MAAM,IAAI,KAAK,UAAU;AAClD,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,SAAS,MAAM,mBAAmB,YAAY;AAAA,EACzD;AACA,MAAI,MAAM,SAAS,aAAa;AAC9B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,mBAAmB;AAAA;AAAA,MAEnB,aAAa,IAAI,KAAK,MAAM,OAAO;AAAA,IACrC;AAAA,EACF;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,mBAAmB,KAAK,IAAI,GAAG,cAAc,MAAM,KAAK;AAAA,EAC1D;AACF;AAWA,eAAsB,cACpB,MACA,SACwB;AACxB,QAAM,cAAc,KAAK,eAAe;AACxC,MAAI,SAAS;AACX,UAAM,KAAK,MAAM,MAAM,KAAK,UAAU;AACtC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,mBAAmB;AAAA,IACrB;AAAA,EACF;AACA,QAAM,YAAY,KAAK,aAAa;AACpC,QAAM,QAAQ,MAAM,KAAK,MAAM,KAAK,KAAK,YAAY,SAAS;AAE9D,MAAI,MAAM,SAAS,aAAa;AAC9B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,mBAAmB;AAAA,MACnB,aAAa,IAAI,KAAK,MAAM,OAAO;AAAA,IACrC;AAAA,EACF;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,mBAAmB,KAAK,IAAI,GAAG,cAAc,MAAM,KAAK;AAAA,EAC1D;AACF;;;AClFA,eAAsB,0BAA0B,UAAmC;AACjF,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,QAAQ;AAC/C,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK;AACxD,SAAO,gBAAgB,IAAI,WAAW,IAAI,CAAC;AAC7C;AAWA,eAAsB,wBAAgD;AACpE,QAAM,SAAS,IAAI,WAAW,EAAE;AAChC,SAAO,gBAAgB,MAAM;AAC7B,QAAM,eAAe,gBAAgB,MAAM;AAC3C,QAAM,gBAAgB,MAAM,0BAA0B,YAAY;AAClE,SAAO,EAAE,cAAc,eAAe,qBAAqB,OAAO;AACpE;;;ACjCO,SAAS,mBAAmB,OAA2B,CAAC,GAAW;AACxE,QAAM,MAAM,KAAK,SAAS;AAC1B,QAAM,MAAM,IAAI,WAAW,GAAG;AAC9B,SAAO,gBAAgB,GAAG;AAC1B,SAAO,gBAAgB,GAAG;AAC5B;AASO,SAAS,iBAAiB,UAAkB,QAAyB;AAC1E,SAAO,mBAAmB,UAAU,MAAM;AAC5C;;;ACNA,IAAM,QAAQ,oBAAI,IAAmC;AAG9C,SAAS,iBAAuB;AACrC,QAAM,MAAM;AACd;AAEA,SAAS,WAAW,MAAuB;AACzC,SAAO,SAAS,eAAe,SAAS,eAAe,SAAS,WAAW,SAAS;AACtF;AAWA,eAAsB,qBAAqB,QAA6C;AACtF,QAAM,YAAY,OAAO,WAAW,WAAW,SAAS,OAAO,SAAS;AAExE,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,MAAI,IAAI,aAAa,YAAY,CAAC,WAAW,IAAI,QAAQ,GAAG;AAC1D,UAAM,IAAI;AAAA,MACR,yCAAyC,IAAI,QAAQ,KAAK,IAAI,QAAQ;AAAA,IAExE;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,IAAI,SAAS;AAClC,MAAI,OAAQ,QAAO;AAEnB,QAAM,WAAW,YAAY;AAC3B,UAAM,YAAY,IAAI;AAAA,MACpB;AAAA,MACA,UAAU,SAAS,GAAG,IAAI,YAAY,YAAY;AAAA,IACpD;AACA,UAAM,MAAM,MAAM,MAAM,SAAS;AACjC,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,IAAI,IAAI,UAAU,OAAO,SAAS,EAAE;AAAA,IAC1F;AACA,UAAM,WAAY,MAAM,IAAI,KAAK;AACjC,QAAI,CAAC,SAAS,wBAAwB;AACpC,YAAM,IAAI,MAAM,kFAA6E;AAAA,IAC/F;AACA,WAAO;AAAA,EACT,GAAG;AAEH,QAAM,IAAI,WAAW,OAAO;AAC5B,UAAQ,MAAM,MAAM;AAClB,QAAI,MAAM,IAAI,SAAS,MAAM,QAAS,OAAM,OAAO,SAAS;AAAA,EAC9D,CAAC;AACD,SAAO;AACT;","names":["constantTimeEquals"]}

package/dist/{chunk-MOTGIGWC.js → chunk-ASBXR57P.js}

@@ -25,7 +25,7 @@ import {
   parseAgentRequestBody,
   readAgentPolicy,
   subjectFromContext
-} from "./chunk-O3EBLVMP.js";
+} from "./chunk-B4Z7KIIU.js";
 import {
   getApprovalRegistry
 } from "./chunk-UETVDZBE.js";
@@ -35,7 +35,7 @@ import {
 } from "./chunk-QD5X56I3.js";
 import {
   generateNonce
-} from "./chunk-VV2VU3LJ.js";
+} from "./chunk-WSMLSIS5.js";
 
 // src/config/resolve-plugin-specifiers.ts
 import { isAbsolute, resolve } from "path";
@@ -648,8 +648,12 @@ function isListApprovalsPath(urlPath) {
   const match = LIST_PATH.exec(urlPath);
   return match ? decodeURIComponent(match[1]) : null;
 }
-function handleListApprovals(registry) {
-  return new Response(JSON.stringify({ approvals: registry.list() }), {
+function handleListApprovals(registry, subject) {
+  const visible = registry.list().filter((approval) => {
+    const owner = registry.ownerOf(approval.approvalId);
+    return owner === void 0 || owner === subject;
+  });
+  return new Response(JSON.stringify({ approvals: visible }), {
     status: 200,
     headers: { "content-type": "application/json; charset=utf-8" }
   });
@@ -718,13 +722,20 @@ async function matchAgentAuxRoute(method, urlPath, deps) {
 }
 async function admitAux(deps, agent, params, body) {
   const mod = await deps.loadModule(agent.filePath);
+  const resolve4 = deps.resolveSubject;
+  const admitted = { subject: null };
+  const recording = resolve4 === void 0 ? void 0 : async () => {
+    admitted.subject = await resolve4();
+    return admitted.subject;
+  };
   const decision = await admitAgentRequest(
     readAgentPolicy(mod, agent.filePath),
-    deps.resolveSubject,
+    recording,
     params,
     body
   );
-  return decision.allowed ? null : agentAccessDenied(decision, params);
+  const refusal = decision.allowed ? null : agentAccessDenied(decision, params);
+  return { refusal, subject: admitted.subject?.id };
 }
 async function serveMatchedAuxRoute(route, request, deps) {
   if (route.kind === "card") {
@@ -732,11 +743,12 @@ async function serveMatchedAuxRoute(route, request, deps) {
     return handleAgentCard(mod, route.agent.name, route.agent.agentPath, deps.baseUrl);
   }
   if (route.kind === "approvals") {
-    const refusal = await admitAux(deps, route.agent, {
+    const admission = await admitAux(deps, route.agent, {
       agent: route.agent.name,
       endpoint: "approvals"
     });
-    return refusal ?? handleListApprovals(getApprovalRegistry());
+    if (admission.refusal !== null) return admission.refusal;
+    return handleListApprovals(getApprovalRegistry(), admission.subject);
   }
   if (route.kind === "run-stream") {
     return handleAgentRunReconnect(route.runId, request, getRunEventCache());
@@ -747,14 +759,14 @@ async function serveMatchedAuxRoute(route, request, deps) {
 async function serveThreadRoute(route, request, deps) {
   const { agent, sessionId } = route;
   if (route.kind === "thread-stream") {
-    const refusal2 = await admitAux(deps, agent, {
+    const { refusal: refusal2 } = await admitAux(deps, agent, {
       agent: agent.name,
       endpoint: "thread-stream",
       sessionId
     });
     return refusal2 ?? handleThreadStream(sessionId, request);
   }
-  const refusal = await admitAux(deps, agent, {
+  const { refusal } = await admitAux(deps, agent, {
     agent: agent.name,
     endpoint: "thread-message",
     sessionId
@@ -867,4 +879,4 @@ export {
   applyNonceToInlineScripts,
   setupSsrDevMiddleware
 };
-//# sourceMappingURL=chunk-MOTGIGWC.js.map
+//# sourceMappingURL=chunk-ASBXR57P.js.map