tinybeeai 0.0.0-stage → 0.16.1

package/dist/phone/pairing.js

@@ -0,0 +1,442 @@
+// Phone pairing (KAT-141): one-time pairing codes, per-device tokens, the device list, and an audit
+// log. Modelled on Orca's mobile pairing: the desktop shows a short-lived code (and a QR that carries
+// it), the phone trades the code for its own token, and the owner can revoke any device at once.
+//
+// Phone codes live in memory only and are stored as hashes, so a restart cancels them. Invite codes for a
+// teammate (KAT-356) last hours or days, so their hashes are kept in the database and survive a restart.
+// Device tokens are `qdp.<deviceId>.<secret>`; the server keeps sha256(secret) on the device row and never
+// the secret.
+import { createHash, randomBytes, randomInt, timingSafeEqual } from 'node:crypto';
+import { findOne, get, insert, list, remove, update } from '../db.js';
+export const DEVICE_TOKEN_PREFIX = 'qdp.';
+/**
+ * What a paired device may do (KAT-364). A member approves and rejects drafts, chats, reruns tests, and pauses or resumes a dot.
+ * An editor also changes dot settings and rules and uses the card actions, which includes the test command the server runs.
+ * A device with no role (paired before roles existed) is a member. Connections, Setup, pairing, and permanent delete
+ * stay with the admin token whatever the role.
+ */
+export const DEVICE_ROLES = ['member', 'editor'];
+export const roleOfRecord = (d) => (d.role === 'editor' ? 'editor' : 'member');
+/**
+ * The name an approval made with the admin token carries (KAT-364). A device cannot take it: with the same label on
+ * a teammate's approval, the record could not tell the teammate from the admin.
+ */
+export const ADMIN_APPROVER = 'admin';
+/** Whether a device name would read as the admin token on an approval: the same word in any case or width. */
+export const isAdminName = (name) => name.normalize('NFKC').trim().toLowerCase() === ADMIN_APPROVER;
+/** No 0/O, 1/I/L, U: a code read off a screen and typed on a phone should never be ambiguous. */
+const CODE_ALPHABET = 'ABCDEFGHJKMNPQRSTVWXYZ23456789';
+const CODE_LENGTH = 8;
+export const PAIR_CODE_TTL_MS = 5 * 60_000;
+const WINDOW_MS = 10 * 60_000;
+/** Wrong codes one client may send per window before it gets 429. */
+export const MAX_FAILS_PER_CLIENT = 5;
+/** Wrong codes from everyone per window; past this every open code is burned. */
+export const MAX_FAILS_GLOBAL = 20;
+/** New codes per window. */
+export const MAX_CODES_PER_WINDOW = 10;
+/** Last-seen writes per device are throttled to one per this interval. */
+const SEEN_WRITE_MS = 60_000;
+/**
+ * Invite codes (KAT-356) are for a teammate who joins later: one use like a phone code, but they live an
+ * hour, a day, or a week, and they survive a restart (the hash is stored, never the code).
+ */
+export const INVITE_TTLS_SEC = [3600, 86_400, 604_800];
+export const INVITE_DEFAULT_TTL_SEC = 86_400;
+/** New invites per window. */
+export const MAX_INVITES_PER_WINDOW = 20;
+export class PairError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+const sha256 = (s) => createHash('sha256').update(s).digest('hex');
+function safeEqualHex(a, b) {
+    const x = Buffer.from(a, 'hex');
+    const y = Buffer.from(b, 'hex');
+    return x.length > 0 && x.length === y.length && timingSafeEqual(x, y);
+}
+/** Uppercase, drop spaces and dashes. Returns '' for anything that cannot be a code. */
+export function normalizeCode(raw) {
+    if (typeof raw !== 'string')
+        return '';
+    const s = raw.toUpperCase().replace(/[\s-]/g, '');
+    if (s.length !== CODE_LENGTH)
+        return '';
+    for (const ch of s)
+        if (!CODE_ALPHABET.includes(ch))
+            return '';
+    return s;
+}
+/** ABCD-EFGH, the shape shown on screen. */
+export function formatCode(code) {
+    return `${code.slice(0, 4)}-${code.slice(4)}`;
+}
+/** A readable name and platform from a user agent, for a phone that did not send one. */
+export function describeAgent(ua) {
+    const s = ua ?? '';
+    if (/iPhone/i.test(s))
+        return { name: 'iPhone', platform: 'ios' };
+    if (/iPad/i.test(s))
+        return { name: 'iPad', platform: 'ios' };
+    if (/Android/i.test(s))
+        return { name: /Mobile/i.test(s) ? 'Android phone' : 'Android tablet', platform: 'android' };
+    if (/Macintosh|Mac OS X/i.test(s))
+        return { name: 'Mac', platform: 'macos' };
+    if (/Windows/i.test(s))
+        return { name: 'Windows PC', platform: 'windows' };
+    if (/Linux/i.test(s))
+        return { name: 'Linux', platform: 'linux' };
+    return { name: 'Device', platform: 'other' };
+}
+function cleanName(raw, fallback) {
+    if (typeof raw !== 'string')
+        return fallback;
+    const s = raw
+        .replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u202a-\u202e\u2066-\u2069]/g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .slice(0, 60);
+    return s || fallback;
+}
+export function toView(d) {
+    return {
+        id: d.id,
+        name: d.name,
+        platform: d.platform,
+        pairedAt: d.createdAt,
+        lastSeenAt: d.lastSeenAt ?? null,
+        revokedAt: d.revokedAt ?? null,
+        ...(d.viaInvite ? { viaInvite: true } : {}),
+        role: roleOfRecord(d),
+    };
+}
+export function audit(entry) {
+    insert('device_audit', entry);
+}
+export function auditTrail(limit = 30) {
+    return list('device_audit', undefined, { orderBy: 'id DESC', limit });
+}
+/**
+ * Codes, rate limits, exchange, and token checks. One instance per server (`pairing` below); tests
+ * build their own with a fake clock.
+ */
+export class Pairing {
+    now;
+    codes = new Map();
+    fails = new Map();
+    globalFails = [];
+    created = [];
+    invitesMade = [];
+    seenWrites = new Map();
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    prune() {
+        const t = this.now();
+        for (const [h, c] of this.codes)
+            if (c.expiresAt <= t)
+                this.codes.delete(h);
+        const cut = t - WINDOW_MS;
+        this.globalFails = this.globalFails.filter((x) => x > cut);
+        this.created = this.created.filter((x) => x > cut);
+        this.invitesMade = this.invitesMade.filter((x) => x > cut);
+        for (const r of list('pair_invites'))
+            if (Date.parse(r.expiresAt) <= t)
+                remove('pair_invites', r.id);
+        for (const [k, v] of this.fails) {
+            const kept = v.filter((x) => x > cut);
+            if (kept.length)
+                this.fails.set(k, kept);
+            else
+                this.fails.delete(k);
+        }
+    }
+    /** The newest open code's expiry, for the pairing sheet. */
+    activeCode() {
+        this.prune();
+        let latest = 0;
+        for (const c of this.codes.values())
+            latest = Math.max(latest, c.expiresAt);
+        return latest ? { expiresAt: new Date(latest).toISOString() } : null;
+    }
+    /** A new code. Older open codes are cancelled, so only the code on screen works. */
+    createCode(actor) {
+        this.prune();
+        if (this.created.length >= MAX_CODES_PER_WINDOW)
+            throw new PairError(429, 'Too many pairing codes. Wait a few minutes and try again.');
+        this.created.push(this.now());
+        this.codes.clear();
+        let code = '';
+        for (let i = 0; i < CODE_LENGTH; i++)
+            code += CODE_ALPHABET[randomInt(CODE_ALPHABET.length)];
+        const expiresAt = this.now() + PAIR_CODE_TTL_MS;
+        this.codes.set(sha256(code), { hash: sha256(code), expiresAt, createdBy: actor });
+        audit({ action: 'code_created', actor });
+        return { code, display: formatCode(code), expiresAt: new Date(expiresAt).toISOString(), ttlSec: PAIR_CODE_TTL_MS / 1000 };
+    }
+    cancelCodes(actor) {
+        if (this.codes.size)
+            audit({ action: 'code_cancelled', actor });
+        this.codes.clear();
+    }
+    /**
+     * A code for a teammate (KAT-356). Unlike createCode it leaves every other open code alone, so an admin can
+     * send one per person, and it lives `ttlSec` (an hour, a day, or a week). Each code still works once. The device
+     * that uses it gets `role` (KAT-364): a member unless the admin chose editor.
+     */
+    createInvite(actor, ttlSec = INVITE_DEFAULT_TTL_SEC, role = 'member') {
+        const ttl = INVITE_TTLS_SEC.find((t) => t === ttlSec);
+        if (!ttl)
+            throw new PairError(400, 'Choose 1 hour, 1 day, or 7 days.');
+        const picked = DEVICE_ROLES.find((r) => r === role);
+        if (!picked)
+            throw new PairError(400, 'Choose member or editor.');
+        this.prune();
+        if (this.invitesMade.length >= MAX_INVITES_PER_WINDOW)
+            throw new PairError(429, 'Too many invites. Wait a few minutes and try again.');
+        this.invitesMade.push(this.now());
+        let code = '';
+        for (let i = 0; i < CODE_LENGTH; i++)
+            code += CODE_ALPHABET[randomInt(CODE_ALPHABET.length)];
+        const expiresAt = new Date(this.now() + ttl * 1000).toISOString();
+        insert('pair_invites', { hash: sha256(code), expiresAt, createdBy: actor, role: picked });
+        audit({ action: 'invite_created', actor, detail: `${picked}, expires ${expiresAt}` });
+        return { code, display: formatCode(code), expiresAt, ttlSec: ttl, role: picked };
+    }
+    /** How many invites are open: made, not used, not expired. */
+    openInvites() {
+        this.prune();
+        return list('pair_invites').length;
+    }
+    /** Cancels every open invite. Returns how many there were. */
+    cancelInvites(actor) {
+        const rows = list('pair_invites');
+        for (const r of rows)
+            remove('pair_invites', r.id);
+        if (rows.length)
+            audit({ action: 'invites_cancelled', actor, detail: `${rows.length} open` });
+        return rows.length;
+    }
+    /** The open invite for a code hash, or undefined. An expired row is dropped on the way. */
+    invite(hash) {
+        const row = findOne('pair_invites', { hash });
+        if (!row)
+            return undefined;
+        const expiresAt = Date.parse(row.expiresAt);
+        if (expiresAt <= this.now()) {
+            remove('pair_invites', row.id);
+            return undefined;
+        }
+        return { hash, expiresAt, createdBy: row.createdBy, inviteId: row.id, role: roleOfRecord(row) };
+    }
+    /**
+     * Trades a code for a device token. The code is deleted before the device row is written, and
+     * the whole check runs without an await, so two phones racing on one code cannot both win.
+     */
+    exchange(input) {
+        this.prune();
+        const clientFails = this.fails.get(input.client) ?? [];
+        if (clientFails.length >= MAX_FAILS_PER_CLIENT)
+            throw new PairError(429, 'Too many wrong codes. Wait a few minutes, then make a new code on the computer.');
+        const code = normalizeCode(input.code);
+        const hash = code ? sha256(code) : '';
+        const pending = hash ? (this.codes.get(hash) ?? this.invite(hash)) : undefined;
+        if (!pending) {
+            // Every wrong guess counts, even past the global cap, so one client is always cut off after
+            // MAX_FAILS_PER_CLIENT. Past the global cap each wrong guess also burns the open phone codes. An invite
+            // lives hours or days, so anyone who can reach the link must not be able to cancel it with wrong guesses
+            // (KAT-356): it keeps the per-client lockout, and only its admin cancels it.
+            clientFails.push(this.now());
+            this.fails.set(input.client, clientFails);
+            this.globalFails.push(this.now());
+            audit({ action: 'pair_failed', actor: input.client });
+            if (this.globalFails.length >= MAX_FAILS_GLOBAL) {
+                if (this.codes.size) {
+                    this.codes.clear();
+                    audit({ action: 'codes_burned', actor: 'server', detail: 'too many wrong codes' });
+                }
+                throw new PairError(429, 'Too many wrong codes. Wait a few minutes, then make a new code on the computer.');
+            }
+            throw new PairError(400, 'That code is wrong or has expired. Make a new code on the computer.');
+        }
+        // The name goes on every draft this device decides (KAT-356), so an invite needs one, and not one another
+        // device already uses. Both checks run before the code is spent, so the teammate can fix the name and retry.
+        const guess = describeAgent(input.userAgent);
+        const name = cleanName(input.name, guess.name);
+        if (pending.inviteId) {
+            const who = cleanName(input.name, '');
+            if (!who)
+                throw new PairError(422, 'Type your name so the team can see who approved a draft.');
+            this.assertNameFree(who);
+        }
+        this.assertNotAdminName(name);
+        this.codes.delete(hash);
+        if (pending.inviteId)
+            remove('pair_invites', pending.inviteId);
+        const made = this.addDevice({
+            name,
+            platform: cleanName(input.platform, guess.platform).toLowerCase().slice(0, 20),
+            userAgent: input.userAgent,
+            client: input.client,
+            pairedBy: pending.createdBy,
+            role: pending.role ?? 'member',
+            viaInvite: !!pending.inviteId,
+        });
+        audit({ action: 'paired', deviceId: made.device.id, deviceName: made.device.name, actor: input.client, ...(pending.inviteId ? { detail: 'invite' } : {}) });
+        return made;
+    }
+    /** A device may not carry the name the admin token approves under (KAT-364), or its approvals would read as the admin's. */
+    assertNotAdminName(who) {
+        if (isAdminName(who))
+            throw new PairError(422, `"${ADMIN_APPROVER}" is kept for the admin token. Type your own name.`);
+    }
+    /** The name of an active device is taken: two people under one name would make the approver record say nothing. */
+    assertNameFree(who) {
+        const taken = list('devices').some((d) => !d.revokedAt && d.name.toLowerCase() === who.toLowerCase());
+        if (taken)
+            throw new PairError(409, `Someone already joined as ${who}. Add a last name or the device, for example ${who} (laptop).`);
+    }
+    addDevice(d) {
+        const secret = randomBytes(32).toString('base64url');
+        const device = insert('devices', {
+            name: d.name,
+            platform: d.platform,
+            userAgent: (d.userAgent ?? '').slice(0, 300),
+            tokenHash: sha256(secret),
+            lastSeenAt: new Date(this.now()).toISOString(),
+            lastIp: d.client,
+            pairedBy: d.pairedBy,
+            role: d.role,
+            ...(d.viaInvite ? { viaInvite: true } : {}),
+        });
+        return { token: `${DEVICE_TOKEN_PREFIX}${device.id}.${secret}`, device: toView(device) };
+    }
+    /**
+     * The admin pairs the computer they are on under their own name (KAT-364), so daily approvals carry it and not "admin".
+     * It is an editor, and not a teammate: no invite is spent and `viaInvite` stays unset, so the Next steps row for
+     * inviting a teammate does not count it.
+     */
+    pairAdmin(input) {
+        const who = cleanName(input.name, '');
+        if (!who)
+            throw new PairError(422, 'Type your name so approvals carry it.');
+        this.assertNotAdminName(who);
+        this.assertNameFree(who);
+        const guess = describeAgent(input.userAgent);
+        const made = this.addDevice({
+            name: who,
+            platform: guess.platform,
+            userAgent: input.userAgent,
+            client: input.client,
+            pairedBy: input.actor,
+            role: 'editor',
+            viaInvite: false,
+        });
+        audit({ action: 'paired', deviceId: made.device.id, deviceName: made.device.name, actor: input.client, detail: 'admin computer' });
+        return made;
+    }
+    /** The device a token belongs to, or null for a malformed, unknown, or revoked token. */
+    verify(token) {
+        if (!token || !token.startsWith(DEVICE_TOKEN_PREFIX))
+            return null;
+        const rest = token.slice(DEVICE_TOKEN_PREFIX.length);
+        const dot = rest.indexOf('.');
+        if (dot <= 0)
+            return null;
+        const id = rest.slice(0, dot);
+        const secret = rest.slice(dot + 1);
+        if (!/^[A-Za-z0-9]{1,40}$/.test(id) || !secret || secret.length > 100)
+            return null;
+        const d = get('devices', id);
+        if (!d || d.revokedAt || !d.tokenHash)
+            return null;
+        return safeEqualHex(sha256(secret), d.tokenHash) ? d : null;
+    }
+    /** Records last seen, at most once a minute per device. */
+    touch(d, ip) {
+        const t = this.now();
+        if (t - (this.seenWrites.get(d.id) ?? 0) < SEEN_WRITE_MS)
+            return;
+        this.seenWrites.set(d.id, t);
+        update('devices', d.id, { lastSeenAt: new Date(t).toISOString(), lastIp: ip });
+    }
+    devices() {
+        return list('devices', { revokedAt: null }, { orderBy: 'id DESC' }).map(toView);
+    }
+    rename(id, name, actor) {
+        const d = get('devices', id);
+        if (!d || d.revokedAt)
+            throw new PairError(404, 'device not found');
+        const next = cleanName(name, d.name);
+        this.assertNotAdminName(next);
+        update('devices', id, { name: next });
+        audit({ action: 'renamed', deviceId: id, deviceName: next, actor });
+        return toView({ ...d, name: next });
+    }
+    /** Changes what a device may do (KAT-364). The next request reads the new role, so it takes effect at once. */
+    setRole(id, role, actor) {
+        const d = get('devices', id);
+        if (!d || d.revokedAt)
+            throw new PairError(404, 'device not found');
+        const next = DEVICE_ROLES.find((r) => r === role);
+        if (!next)
+            throw new PairError(400, 'Choose member or editor.');
+        if (roleOfRecord(d) === next)
+            return toView(d);
+        update('devices', id, { role: next });
+        audit({ action: 'role_changed', deviceId: id, deviceName: d.name, actor, detail: `${roleOfRecord(d)} to ${next}` });
+        return toView({ ...d, role: next });
+    }
+    /** Revokes at once: the hash is cleared, so the next request with that token fails. Push subscriptions go too. */
+    revoke(id, actor) {
+        const d = get('devices', id);
+        if (!d || d.revokedAt)
+            throw new PairError(404, 'device not found');
+        const revokedAt = new Date(this.now()).toISOString();
+        update('devices', id, { revokedAt, tokenHash: null });
+        for (const s of list('push_subs', { deviceId: id }))
+            remove('push_subs', s.id);
+        // The person's own update settings (KAT-356) go with the device.
+        remove('update_prefs', `device:${id}`);
+        this.seenWrites.delete(id);
+        closeDeviceStreams(id);
+        audit({ action: 'revoked', deviceId: id, deviceName: d.name, actor });
+        return toView({ ...d, revokedAt });
+    }
+}
+const streams = new Map();
+/** Registers a close function for an open stream (live events, chat) held by a device. Returns the unregister. */
+export function trackDeviceStream(deviceId, close) {
+    // A revoke can land between the auth hook and this call: close at once in that case.
+    const d = get('devices', deviceId);
+    if (!d || d.revokedAt) {
+        close();
+        return () => { };
+    }
+    let set = streams.get(deviceId);
+    if (!set)
+        streams.set(deviceId, (set = new Set()));
+    set.add(close);
+    return () => {
+        set.delete(close);
+        if (!set.size)
+            streams.delete(deviceId);
+    };
+}
+function closeDeviceStreams(deviceId) {
+    const set = streams.get(deviceId);
+    streams.delete(deviceId);
+    for (const close of set ?? []) {
+        try {
+            close();
+        }
+        catch {
+            /* already closed */
+        }
+    }
+}
+export const pairing = new Pairing();
+//# sourceMappingURL=pairing.js.map

package/dist/phone/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../src/phone/pairing.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,sGAAsG;AACtG,iGAAiG;AACjG,EAAE;AACF,0GAA0G;AAC1G,yGAAyG;AACzG,2GAA2G;AAC3G,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG1D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAqB,EAAc,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAE/G;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,8GAA8G;AAC9G,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC;AACrH,iGAAiG;AACjG,MAAM,aAAa,GAAG,gCAAgC,CAAC;AACvD,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC3C,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC;AAC9B,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,4BAA4B;AAC5B,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,0EAA0E;AAC1E,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,8BAA8B;AAC9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAuEzC,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IACxB,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnF,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,CAAC;QAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,EAAsB;IAClD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACnB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrH,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7E,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC3E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,QAAgB;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC7C,MAAM,CAAC,GAAG,GAAG;SACV,OAAO,CAAC,sEAAsE,EAAE,GAAG,CAAC;SACpF,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,IAAI,QAAQ,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,CAAe;IACpC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;QAChC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAA2C;IAC/D,MAAM,CAAa,cAAc,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,EAAE;IACnC,OAAO,IAAI,CAAa,cAAc,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,OAAO;IAQW;IAPrB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IACpC,WAAW,GAAa,EAAE,CAAC;IAC3B,OAAO,GAAa,EAAE,CAAC;IACvB,WAAW,GAAa,EAAE,CAAC;IAC3B,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAErD,KAAK;QACX,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAY,cAAc,CAAC;YAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAChH,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;;gBACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,UAAU;QACR,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED,oFAAoF;IACpF,UAAU,CAAC,KAAa;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,oBAAoB;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;QACvI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE;YAAE,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAAE,CAAC;IAC5H,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,YAAY,CACV,KAAa,EACb,SAAkB,sBAAsB,EACxC,OAAgB,QAAQ;QAExB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,sBAAsB;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAC;QACvI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE;YAAE,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,CAAY,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,SAAS,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IAED,8DAA8D;IAC9D,WAAW;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAY,cAAc,CAAC,CAAC,MAAM,CAAC;IAChD,CAAC;IAED,8DAA8D;IAC9D,aAAa,CAAC,KAAa;QACzB,MAAM,IAAI,GAAG,IAAI,CAAY,cAAc,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,2FAA2F;IACnF,MAAM,CAAC,IAAY;QACzB,MAAM,GAAG,GAAG,OAAO,CAAY,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IAClG,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAgG;QACvG,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,WAAW,CAAC,MAAM,IAAI,oBAAoB;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iFAAiF,CAAC,CAAC;QAC5J,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,4FAA4F;YAC5F,wGAAwG;YACxG,yGAAyG;YACzG,6EAA6E;YAC7E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAClC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACrF,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iFAAiF,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,qEAAqE,CAAC,CAAC;QAClG,CAAC;QACD,0GAA0G;QAC1G,6GAA6G;QAC7G,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0DAA0D,CAAC,CAAC;YAC/F,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI;YACJ,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9E,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ;YAC9B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;SAC9B,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5J,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4HAA4H;IACpH,kBAAkB,CAAC,GAAW;QACpC,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,cAAc,oDAAoD,CAAC,CAAC;IACzH,CAAC;IAED,mHAAmH;IAC3G,cAAc,CAAC,GAAW;QAChC,MAAM,KAAK,GAAG,IAAI,CAAe,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACpH,IAAI,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,6BAA6B,GAAG,gDAAgD,GAAG,YAAY,CAAC,CAAC;IACvI,CAAC;IAEO,SAAS,CAAC,CAAiI;QAIjJ,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAe,SAAS,EAAE;YAC7C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC5C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC9C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,GAAG,mBAAmB,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAA2E;QACnF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;QAC5E,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACnI,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,KAAyB;QAC9B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QACnF,MAAM,CAAC,GAAG,GAAG,CAAe,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,CAAe,EAAE,EAAU;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,aAAa;YAAE,OAAO;QACjE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAe,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,IAAa,EAAE,KAAa;QAC7C,MAAM,CAAC,GAAG,GAAG,CAAe,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,+GAA+G;IAC/G,OAAO,CAAC,EAAU,EAAE,IAAa,EAAE,KAAa;QAC9C,MAAM,CAAC,GAAG,GAAG,CAAe,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAChE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;QACpH,OAAO,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,kHAAkH;IAClH,MAAM,CAAC,EAAU,EAAE,KAAa;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAe,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAiB,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,iEAAiE;QACjE,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,kHAAkH;AAClH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,KAAiB;IACnE,qFAAqF;IACrF,MAAM,CAAC,GAAG,GAAG,CAAe,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,EAAE,CAAC;QACR,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,EAAE,CAAC;QACV,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC"}

package/dist/phone/prefs.js

@@ -0,0 +1,27 @@
+// Phone settings: whether to trust the Tailscale identity of the owner, and which phone alerts to send.
+import { get, insert, update } from '../db.js';
+const DEFAULTS = {
+    trustTailscale: false,
+    owner: null,
+    tailnetHost: null,
+    alerts: { bugs: true, outages: true, drafts: true },
+};
+const ID = 'phone';
+export function phonePrefs() {
+    const row = get('phone_prefs', ID);
+    const p = row?.prefs ?? {};
+    return { ...DEFAULTS, ...p, alerts: { ...DEFAULTS.alerts, ...(p.alerts ?? {}) } };
+}
+export function savePhonePrefs(patch) {
+    const cur = phonePrefs();
+    const next = { ...cur, ...patch, alerts: { ...cur.alerts, ...(patch.alerts ?? {}) } };
+    if (get('phone_prefs', ID))
+        update('phone_prefs', ID, { prefs: next });
+    else
+        insert('phone_prefs', { id: ID, prefs: next });
+    return next;
+}
+export function alertEnabled(kind) {
+    return phonePrefs().alerts[kind] !== false;
+}
+//# sourceMappingURL=prefs.js.map

package/dist/phone/prefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prefs.js","sourceRoot":"","sources":["../../src/phone/prefs.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAc/C,MAAM,QAAQ,GAAe;IAC3B,cAAc,EAAE,KAAK;IACrB,KAAK,EAAE,IAAI;IACX,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;CACpD,CAAC;AAEF,MAAM,EAAE,GAAG,OAAO,CAAC;AAEnB,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,GAAG,CAAkC,aAAa,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC;IAC3B,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,IAAI,GAAe,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;IAClG,IAAI,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC;QAAE,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;;QAClE,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,UAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;AAC7C,CAAC"}