@alneas/eaos-server 0.0.0-stage → 0.2.0

package/dist/chunk-YMJ7BRKU.js

@@ -0,0 +1,510 @@
+// src/platform-admin/store.ts
+import { assertBackendMigrationCutover, canonical, normalizeLifecycleState, planBackendMigration } from "@alneas/eaos-server/lifecycle-engine";
+var key = (...parts) => JSON.stringify(parts);
+var identifier = (value, name) => {
+  if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/.test(value)) throw new Error(`Invalid ${name}`);
+  return value;
+};
+var text = (value, name, max = 256) => {
+  if (!value.trim() || value.length > max) throw new Error(`Invalid ${name}`);
+  return value;
+};
+var timestamp = (value, name) => {
+  if (!Number.isFinite(Date.parse(value))) throw new Error(`Invalid ${name}`);
+  return value;
+};
+function materializeBackend(state, backendId) {
+  const backend = state.backends[backendId];
+  if (!backend) return null;
+  return { ...backend, ...state.platform.backendMetadata[backendId] };
+}
+function targetOf(backend) {
+  return { id: backend.id, databaseId: backend.databaseId, dialect: backend.dialect, mode: backend.mode, ...backend.tenantId === void 0 ? {} : { tenantId: backend.tenantId } };
+}
+function placement(state, tenantId) {
+  const record = state.platform.placements[tenantId];
+  if (!record) return null;
+  const backend = materializeBackend(state, record.backendId);
+  if (!backend) throw new Error(`Tenant placement references unknown backend: ${record.backendId}`);
+  return { tenantId, backend, routingRevision: record.routingRevision, changedAt: record.changedAt };
+}
+function validateBackend(backend) {
+  identifier(backend.id, "backend id");
+  identifier(backend.databaseId, "database id");
+  if (!["sqlite", "postgres", "oracle"].includes(backend.dialect) || !["shared", "dedicated"].includes(backend.mode)) throw new Error("Invalid backend target");
+  if (backend.mode === "dedicated") identifier(backend.tenantId ?? "", "dedicated backend tenant");
+  if (backend.mode === "shared" && backend.tenantId !== void 0) throw new Error("Shared backend cannot bind a tenant");
+}
+var LifecyclePlatformControlStore = class {
+  /**
+   * Captures the shared authoritative lifecycle ledger and clock.
+   * @param lifecycle - Host store providing consistent reads and exclusive writer callbacks.
+   * @param now - Clock for mutation timestamps; defaults to a fresh Date.
+   */
+  constructor(lifecycle, now = () => /* @__PURE__ */ new Date()) {
+    this.lifecycle = lifecycle;
+    this.now = now;
+  }
+  lifecycle;
+  now;
+  async read() {
+    return normalizeLifecycleState(await this.lifecycle.read());
+  }
+  async mutate(fn) {
+    return this.lifecycle.withLock(async (writer) => {
+      const state = normalizeLifecycleState(await writer.read());
+      const result = await fn(state);
+      state.revision += 1;
+      await writer.write(state);
+      return result;
+    });
+  }
+  /**
+   * Lists tenant records from the authoritative normalized lifecycle snapshot.
+   * @returns Tenant records with cloned domains arrays, or an empty array.
+   * @throws Host read/normalization failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function listTenants(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["listTenants"]>) {
+   *   return store.listTenants(...args);
+   * }
+   * ```
+   */
+  async listTenants() {
+    const state = await this.read();
+    return Object.values(state.platform.tenants).map((tenant) => ({ ...tenant, domains: [...tenant.domains] }));
+  }
+  /**
+   * Creates an active tenant and its initial backend routing record under the lifecycle writer lock.
+   * @param input - Valid scope ID, nonblank name, nonempty domain strings, and registered initial backendId; a dedicated backend must bind the same tenant.
+   * @returns Created tenant record with clock timestamps; initial routing revision is one.
+   * @throws Invalid input, duplicate tenant, missing/mismatched backend, or host lock/write/clock failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function createTenant(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["createTenant"]>) {
+   *   return store.createTenant(...args);
+   * }
+   * ```
+   */
+  async createTenant(input) {
+    const id = identifier(input.id, "tenant id");
+    const name = text(input.name, "tenant name");
+    const backendId = identifier(input.backendId, "initial backend id");
+    if (!Array.isArray(input.domains) || input.domains.length === 0 || input.domains.some((domain) => typeof domain !== "string" || !domain.trim())) throw new Error("Invalid tenant domains");
+    return this.mutate((state) => {
+      if (state.platform.tenants[id]) throw new Error("Tenant already exists");
+      const backend = materializeBackend(state, backendId);
+      if (!backend) throw new Error("Initial backend not found");
+      if (backend.mode === "dedicated" && backend.tenantId !== id) throw new Error("Initial backend tenant mismatch");
+      const at = this.now().toISOString();
+      const tenant = { id, name, active: true, domains: [...input.domains], createdAt: at, updatedAt: at };
+      state.platform.tenants[id] = tenant;
+      state.platform.placements[id] = { tenantId: id, backendId, routingRevision: 1, changedAt: at };
+      return tenant;
+    });
+  }
+  /**
+   * Updates an existing tenant name, active flag, or domains and refreshes updatedAt.
+   * @param tenantId - Existing valid tenant scope ID.
+   * @param patch - Optional nonblank name, boolean active, and nonempty nonblank domains; omitted fields remain unchanged.
+   * @returns Updated tenant with cloned domains.
+   * @throws Missing tenant, invalid supplied fields, or host lock/write/clock failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function updateTenant(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["updateTenant"]>) {
+   *   return store.updateTenant(...args);
+   * }
+   * ```
+   */
+  async updateTenant(tenantId, patch) {
+    identifier(tenantId, "tenant id");
+    return this.mutate((state) => {
+      const current = state.platform.tenants[tenantId];
+      if (!current) throw new Error("Tenant not found");
+      if (patch.name !== void 0) current.name = text(patch.name, "tenant name");
+      if (patch.active !== void 0) {
+        if (typeof patch.active !== "boolean") throw new Error("Invalid tenant active state");
+        current.active = patch.active;
+      }
+      if (patch.domains !== void 0) {
+        if (!Array.isArray(patch.domains) || patch.domains.length === 0 || patch.domains.some((domain) => typeof domain !== "string" || !domain.trim())) throw new Error("Invalid tenant domains");
+        current.domains = [...patch.domains];
+      }
+      current.updatedAt = this.now().toISOString();
+      return { ...current, domains: [...current.domains] };
+    });
+  }
+  /**
+   * Registers an immutable backend placement identity and replaceable public metadata.
+   * @param backend - Valid backend/database IDs, dialect/mode, optional dedicated tenant binding, and metadata.
+   * @returns Materialized registered target with metadata.
+   * @throws Invalid target, changed placement for an existing ID, database dialect conflict, or host store failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function registerBackend(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["registerBackend"]>) {
+   *   return store.registerBackend(...args);
+   * }
+   * ```
+   */
+  async registerBackend(backend) {
+    validateBackend(backend);
+    return this.mutate((state) => {
+      const existing = state.backends[backend.id];
+      const target = { id: backend.id, databaseId: backend.databaseId, dialect: backend.dialect, mode: backend.mode, ...backend.tenantId === void 0 ? {} : { tenantId: backend.tenantId } };
+      if (existing && canonical(existing) !== canonical(target)) throw new Error("Backend placement is immutable; register a new backend ID");
+      for (const other of Object.values(state.backends)) if (other.id !== backend.id && other.databaseId === backend.databaseId && other.dialect !== backend.dialect) throw new Error("Database dialect conflict");
+      state.backends[backend.id] = target;
+      const { id: _id, databaseId: _databaseId, dialect: _dialect, mode: _mode, tenantId: _tenantId, ...metadata } = backend;
+      state.platform.backendMetadata[backend.id] = metadata;
+      return { ...target, ...metadata };
+    });
+  }
+  /**
+   * Materializes registered backend targets with their public metadata.
+   * @returns Backend list, or an empty array.
+   * @throws Host read/normalization failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function listBackends(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["listBackends"]>) {
+   *   return store.listBackends(...args);
+   * }
+   * ```
+   */
+  async listBackends() {
+    const state = await this.read();
+    return Object.keys(state.backends).map((id) => materializeBackend(state, id)).filter(Boolean);
+  }
+  /**
+   * Reads a registered backend target and its public metadata.
+   * @param backendId - Valid registered backend scope ID.
+   * @returns Materialized backend, or null when unregistered.
+   * @throws Invalid ID or host read failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function getBackend(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["getBackend"]>) {
+   *   return store.getBackend(...args);
+   * }
+   * ```
+   */
+  async getBackend(backendId) {
+    identifier(backendId, "backend id");
+    return materializeBackend(await this.read(), backendId);
+  }
+  /**
+   * Resolves a tenant routing record into its registered backend target.
+   * @param tenantId - Valid tenant scope ID.
+   * @returns Placement with routing revision/time and backend, or null when absent.
+   * @throws Invalid ID, dangling backend reference, or host read failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function getTenantPlacement(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["getTenantPlacement"]>) {
+   *   return store.getTenantPlacement(...args);
+   * }
+   * ```
+   */
+  async getTenantPlacement(tenantId) {
+    identifier(tenantId, "tenant id");
+    return placement(await this.read(), tenantId);
+  }
+  /**
+   * Persists an immutable migration plan after checking registered backend identities.
+   * @param plan - Reviewed plan matching currently registered source/target; identical saved plans may be accepted before completion.
+   * @returns No value; resolves after storing the plan and initial planned record if absent.
+   * @throws Unregistered/changed backend, conflicting reused plan ID, already completed plan, clone or host store failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function saveMigrationPlan(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["saveMigrationPlan"]>) {
+   *   return store.saveMigrationPlan(...args);
+   * }
+   * ```
+   */
+  async saveMigrationPlan(plan) {
+    await this.mutate((state) => {
+      if (!state.backends[plan.request.source.id] || !state.backends[plan.request.target.id]) throw new Error("Migration backend is not registered");
+      if (canonical(targetOf(state.backends[plan.request.source.id])) !== canonical(targetOf(plan.request.source)) || canonical(targetOf(state.backends[plan.request.target.id])) !== canonical(targetOf(plan.request.target))) throw new Error("Migration backend changed since planning");
+      const existing = state.platform.migrationPlans[plan.id];
+      if (existing && canonical(existing) !== canonical(plan)) throw new Error("Migration plan ID already contains a different plan");
+      const current = state.platform.migrationRecords[plan.id];
+      if (current?.status === "cutover" || current?.status === "rolled-back") throw new Error("Migration plan has already completed");
+      state.platform.migrationPlans[plan.id] = structuredClone(plan);
+      state.platform.migrationRecords[plan.id] ??= { status: "planned", updatedAt: plan.request.requestedAt };
+    });
+  }
+  /**
+   * Reads a cloned persisted migration plan by ID.
+   * @param migrationId - Valid migration scope ID.
+   * @returns Plan clone, or null when absent.
+   * @throws Invalid ID or host read/clone failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function getMigrationPlan(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["getMigrationPlan"]>) {
+   *   return store.getMigrationPlan(...args);
+   * }
+   * ```
+   */
+  async getMigrationPlan(migrationId) {
+    identifier(migrationId, "migration id");
+    const state = await this.read();
+    const plan = state.platform.migrationPlans[migrationId];
+    return plan ? structuredClone(plan) : null;
+  }
+  /**
+   * Reads the persisted migration execution/reconciliation record.
+   * @param migrationId - Valid migration scope ID.
+   * @returns Cloned status record, or null when absent.
+   * @throws Invalid ID or host read/clone failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function getMigrationStatus(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["getMigrationStatus"]>) {
+   *   return store.getMigrationStatus(...args);
+   * }
+   * ```
+   */
+  async getMigrationStatus(migrationId) {
+    identifier(migrationId, "migration id");
+    const record = (await this.read()).platform.migrationRecords[migrationId];
+    return record ? structuredClone(record) : null;
+  }
+  /**
+   * Binds an execution token and transitions a tenant migration record to running.
+   * @param input - Verified tenantId, persisted migrationId, and unique host executionId; plan scope must include the tenant.
+   * @returns Cloned running record, or completed cutover/rolled-back record unchanged.
+   * @throws Missing plan, tenant mismatch, conflicting active token, reconciling state, invalid IDs, or host store failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function beginMigrationExecution(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["beginMigrationExecution"]>) {
+   *   return store.beginMigrationExecution(...args);
+   * }
+   * ```
+   */
+  async beginMigrationExecution(input) {
+    identifier(input.tenantId, "tenant id");
+    identifier(input.migrationId, "migration id");
+    identifier(input.executionId, "execution id");
+    return this.mutate((state) => {
+      const plan = state.platform.migrationPlans[input.migrationId];
+      const record = state.platform.migrationRecords[input.migrationId];
+      if (!plan || !record) throw new Error("Migration plan not found");
+      if (plan.request.scope.kind !== "tenants" || !plan.request.scope.tenantIds.includes(input.tenantId)) throw new Error("Migration plan tenant mismatch");
+      if (record.status === "cutover" || record.status === "rolled-back") return structuredClone(record);
+      if ((record.status === "running" || record.status === "verified") && record.executionId !== input.executionId) throw new Error("Migration execution already in progress");
+      if (record.status === "reconciling") throw new Error("Migration requires reconciliation before retry");
+      record.status = "running";
+      record.executionId = input.executionId;
+      record.error = void 0;
+      record.updatedAt = this.now().toISOString();
+      return structuredClone(record);
+    });
+  }
+  /**
+   * Records verified migration evidence and cutover data for the active execution token.
+   * @param input - Tenant, exact persisted plan, active executionId, verification report, and matching validated cutover.
+   * @returns Cloned verified migration record.
+   * @throws Invalid cutover/report, nonpersisted/changed plan, tenant/token/state mismatch, changed retry verification, or host store failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function recordMigrationVerification(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["recordMigrationVerification"]>) {
+   *   return store.recordMigrationVerification(...args);
+   * }
+   * ```
+   */
+  async recordMigrationVerification(input) {
+    identifier(input.tenantId, "tenant id");
+    identifier(input.executionId, "execution id");
+    assertBackendMigrationCutover(input.plan, input.verification, input.cutover);
+    return this.mutate((state) => {
+      const saved = state.platform.migrationPlans[input.plan.id];
+      const record = state.platform.migrationRecords[input.plan.id];
+      if (!saved || canonical(saved) !== canonical(input.plan) || !record) throw new Error("Migration plan is not the persisted plan");
+      if (input.plan.request.scope.kind !== "tenants" || !input.plan.request.scope.tenantIds.includes(input.tenantId)) throw new Error("Migration plan tenant mismatch");
+      if (record.executionId !== input.executionId || !["running", "verified"].includes(record.status)) throw new Error("Migration execution is not active");
+      if (record.status === "verified" && canonical(record.verification) !== canonical(input.verification)) throw new Error("Migration verification changed during retry");
+      record.status = "verified";
+      record.verification = structuredClone(input.verification);
+      record.cutover = structuredClone(input.cutover);
+      record.updatedAt = this.now().toISOString();
+      return structuredClone(record);
+    });
+  }
+  /**
+   * Records a failed or reconciling migration status with host diagnostic text.
+   * @param input - Persisted migrationId, optional expected executionId, failure status, and nonblank message up to 2048 characters.
+   * @returns Cloned updated failure record.
+   * @throws Missing/completed migration, mismatched token, invalid input, or host store/clock failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function markMigrationFailure(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["markMigrationFailure"]>) {
+   *   return store.markMigrationFailure(...args);
+   * }
+   * ```
+   */
+  async markMigrationFailure(input) {
+    identifier(input.migrationId, "migration id");
+    text(input.message, "migration failure", 2048);
+    return this.mutate((state) => {
+      const record = state.platform.migrationRecords[input.migrationId];
+      if (!record) throw new Error("Migration plan not found");
+      if (input.executionId && record.executionId !== input.executionId) throw new Error("Migration execution token mismatch");
+      if (record.status === "cutover" || record.status === "rolled-back") throw new Error("Completed migration cannot be marked failed");
+      record.status = input.status;
+      record.error = { message: input.message, occurredAt: this.now().toISOString() };
+      record.updatedAt = this.now().toISOString();
+      return structuredClone(record);
+    });
+  }
+  /**
+   * Applies an operator reconciliation status action and records its note.
+   * @param input - Persisted migrationId, action, and nonblank note up to 2048 characters; retry only permits failed/reconciling state and clears execution/verification/cutover.
+   * @returns Cloned updated migration record.
+   * @throws Missing record, retry from an ineligible state, completed record for mark-failed/mark-reconciling, invalid text, or host store failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function reconcileMigration(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["reconcileMigration"]>) {
+   *   return store.reconcileMigration(...args);
+   * }
+   * ```
+   */
+  async reconcileMigration(input) {
+    identifier(input.migrationId, "migration id");
+    text(input.note, "reconciliation note", 2048);
+    return this.mutate((state) => {
+      const record = state.platform.migrationRecords[input.migrationId];
+      if (!record) throw new Error("Migration plan not found");
+      if (input.action === "retry") {
+        if (!["failed", "reconciling"].includes(record.status)) throw new Error("Only failed or reconciling migrations can be retried");
+        record.status = "planned";
+        record.executionId = void 0;
+        record.verification = void 0;
+        record.cutover = void 0;
+      } else if (input.action === "mark-failed") {
+        if (record.status === "cutover" || record.status === "rolled-back") throw new Error("Completed migration cannot be marked failed");
+        record.status = "failed";
+      } else if (input.action === "mark-reconciling") {
+        if (record.status === "cutover" || record.status === "rolled-back") throw new Error("Completed migration cannot be reconciled");
+        record.status = "reconciling";
+      }
+      record.error = { message: input.note, occurredAt: this.now().toISOString() };
+      record.updatedAt = this.now().toISOString();
+      return structuredClone(record);
+    });
+  }
+  /**
+   * Creates a reverse migration plan for a completed cutover without executing rollback.
+   * @param input - Verified tenantId, completed migrationId, nonblank reason up to 1024 characters, and parseable requestedAt timestamp.
+   * @returns New planned reverse migration linked to the original record.
+   * @throws Incomplete/already rollback-planned migration, tenant no longer on migrated target, invalid input/planning, or host store failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function createRollbackPlan(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["createRollbackPlan"]>) {
+   *   return store.createRollbackPlan(...args);
+   * }
+   * ```
+   */
+  async createRollbackPlan(input) {
+    identifier(input.tenantId, "tenant id");
+    identifier(input.migrationId, "migration id");
+    text(input.reason, "rollback reason", 1024);
+    timestamp(input.requestedAt, "rollback requestedAt");
+    return this.mutate((state) => {
+      const original = state.platform.migrationRecords[input.migrationId];
+      const originalPlan = state.platform.migrationPlans[input.migrationId];
+      if (!original || !originalPlan || original.status !== "cutover") throw new Error("Only a completed migration can be rolled back");
+      if (original.rollbackPlanId) throw new Error("Migration rollback already exists");
+      const current = placement(state, input.tenantId);
+      if (!current || current.backend.id !== originalPlan.request.target.id) throw new Error("Current tenant placement is not the migrated target");
+      const rollback = planBackendMigration({
+        migrationId: `rollback-${crypto.randomUUID()}`,
+        source: originalPlan.request.target,
+        target: originalPlan.request.source,
+        scope: originalPlan.request.scope,
+        pluginIds: originalPlan.request.pluginIds,
+        requestedAt: input.requestedAt,
+        reason: input.reason
+      });
+      state.platform.migrationPlans[rollback.id] = structuredClone(rollback);
+      state.platform.migrationRecords[rollback.id] = { status: "planned", updatedAt: input.requestedAt, rollbackOf: input.migrationId };
+      original.rollbackPlanId = rollback.id;
+      original.updatedAt = this.now().toISOString();
+      return rollback;
+    });
+  }
+  /**
+   * Commits a verified migration routing change and transfers active plugin activations to the target backend.
+   * @param input - Tenant included by the exact persisted plan and its previously recorded cutover proof.
+   * @returns New target placement, or current placement for an already-cutover record.
+   * @throws Unverified/stale/changed plan, invalid cutover or nonadvancing routing revision, target tenant mismatch, missing planned active plugin or target installation, or host lock/write failure.
+   * @example
+   * ```typescript
+   * import { LifecyclePlatformControlStore } from "@alneas/eaos-server/platform-admin/store";
+   * export async function recordTenantPlacement(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore["recordTenantPlacement"]>) {
+   *   return store.recordTenantPlacement(...args);
+   * }
+   * ```
+   */
+  async recordTenantPlacement(input) {
+    identifier(input.tenantId, "tenant id");
+    return this.mutate((state) => {
+      const { plan, cutover } = input;
+      const saved = state.platform.migrationPlans[plan.id];
+      const record = state.platform.migrationRecords[plan.id];
+      if (!saved || canonical(saved) !== canonical(plan) || !record) throw new Error("Migration plan is not the persisted plan");
+      if (plan.request.scope.kind !== "tenants" || !plan.request.scope.tenantIds.includes(input.tenantId)) throw new Error("Migration plan tenant mismatch");
+      if (record.status === "cutover") return placement(state, input.tenantId);
+      if (record.status !== "verified" || !record.executionId || !record.verification || !record.cutover || canonical(record.cutover) !== canonical(cutover)) throw new Error("Migration must be verified before cutover");
+      if (cutover.migrationId !== plan.request.migrationId || cutover.targetBackendId !== plan.request.target.id || cutover.sourceRetained !== true || !Number.isSafeInteger(cutover.routingRevision) || cutover.routingRevision < 0 || !Number.isFinite(Date.parse(cutover.cutoverAt))) throw new Error("Invalid migration cutover");
+      const current = placement(state, input.tenantId);
+      if (!current || current.backend.id !== plan.request.source.id || current.backend.databaseId !== plan.request.source.databaseId) throw new Error("Migration plan is stale");
+      if (cutover.routingRevision <= current.routingRevision) throw new Error("Migration routing revision must advance");
+      const target = materializeBackend(state, plan.request.target.id);
+      if (!target || canonical(targetOf(target)) !== canonical(targetOf(plan.request.target))) throw new Error("Migration target backend changed");
+      if (target.mode === "dedicated" && target.tenantId !== input.tenantId) throw new Error("Migration target tenant mismatch");
+      const active = Object.entries(state.activations).filter(([, activation]) => activation.backendId === plan.request.source.id && activation.tenantId === input.tenantId && activation.enabled);
+      const planned = new Set(plan.request.pluginIds);
+      for (const [, activation] of active) {
+        if (!planned.has(activation.pluginId)) throw new Error(`Migration plan does not include active plugin: ${activation.pluginId}`);
+        const installation = state.installations[key(plan.request.target.id, activation.pluginId)];
+        if (!installation || installation.status !== "installed") throw new Error(`Target backend is missing installed plugin: ${activation.pluginId}`);
+      }
+      for (const [activationKey, activation] of active) {
+        activation.enabled = false;
+        const targetKey = key(plan.request.target.id, input.tenantId, activation.pluginId);
+        const installation = state.installations[key(plan.request.target.id, activation.pluginId)];
+        state.activations[targetKey] = { ...activation, backendId: plan.request.target.id, digest: installation.digest, enabled: true };
+        state.activations[activationKey] = activation;
+      }
+      state.platform.placements[input.tenantId] = { tenantId: input.tenantId, backendId: plan.request.target.id, routingRevision: cutover.routingRevision, changedAt: timestamp(cutover.cutoverAt, "cutover time") };
+      record.status = "cutover";
+      record.updatedAt = this.now().toISOString();
+      record.cutover = structuredClone(cutover);
+      if (record.rollbackOf) {
+        const original = state.platform.migrationRecords[record.rollbackOf];
+        if (original) {
+          original.status = "rolled-back";
+          original.updatedAt = this.now().toISOString();
+          original.rollbackPlanId = plan.id;
+        }
+      }
+      return placement(state, input.tenantId);
+    });
+  }
+};
+
+export {
+  LifecyclePlatformControlStore
+};
+//# sourceMappingURL=chunk-YMJ7BRKU.js.map

package/dist/chunk-YMJ7BRKU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/platform-admin/store.ts"],"sourcesContent":["import { assertBackendMigrationCutover, canonical, normalizeLifecycleState, planBackendMigration, type BackendMigrationPlan, type BackendMigrationCutover, type BackendMigrationVerificationReport, type BackendTarget, type LifecyclePlatformMigrationRecord, type LifecycleStore, type LifecycleState } from '@alneas/eaos-server/lifecycle-engine'\nimport type { PlatformBackendRecord, PlatformControlStore, PlatformMigrationReconcileAction, PlatformTenantCreateInput, PlatformTenantPatch, PlatformTenantRecord, TenantBackendPlacement } from '@alneas/eaos-server/platform'\n\nconst key = (...parts: string[]) => JSON.stringify(parts)\nconst identifier = (value: string, name: string) => {\n  if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/.test(value)) throw new Error(`Invalid ${name}`)\n  return value\n}\nconst text = (value: string, name: string, max = 256) => {\n  if (!value.trim() || value.length > max) throw new Error(`Invalid ${name}`)\n  return value\n}\nconst timestamp = (value: string, name: string) => {\n  if (!Number.isFinite(Date.parse(value))) throw new Error(`Invalid ${name}`)\n  return value\n}\n\nfunction materializeBackend(state: LifecycleState, backendId: string): PlatformBackendRecord | null {\n  const backend = state.backends[backendId]\n  if (!backend) return null\n  return { ...backend, ...state.platform.backendMetadata[backendId] }\n}\n\nfunction targetOf(backend: PlatformBackendRecord | BackendTarget): BackendTarget {\n  return { id: backend.id, databaseId: backend.databaseId, dialect: backend.dialect, mode: backend.mode, ...(backend.tenantId === undefined ? {} : { tenantId: backend.tenantId }) }\n}\n\nfunction placement(state: LifecycleState, tenantId: string): TenantBackendPlacement | null {\n  const record = state.platform.placements[tenantId]\n  if (!record) return null\n  const backend = materializeBackend(state, record.backendId)\n  if (!backend) throw new Error(`Tenant placement references unknown backend: ${record.backendId}`)\n  return { tenantId, backend, routingRevision: record.routingRevision, changedAt: record.changedAt }\n}\n\nfunction validateBackend(backend: PlatformBackendRecord): void {\n  identifier(backend.id, 'backend id')\n  identifier(backend.databaseId, 'database id')\n  if (!['sqlite', 'postgres', 'oracle'].includes(backend.dialect) || !['shared', 'dedicated'].includes(backend.mode)) throw new Error('Invalid backend target')\n  if (backend.mode === 'dedicated') identifier(backend.tenantId ?? '', 'dedicated backend tenant')\n  if (backend.mode === 'shared' && backend.tenantId !== undefined) throw new Error('Shared backend cannot bind a tenant')\n}\n\n/**\n * Platform control facade backed by the same LifecycleStore snapshot and lock.\n * Use this with SqlLifecycleStore for distributed hosts; it intentionally does\n * not create a second platform database or a second placement authority.\n * @remarks Mutations normalize one locked lifecycle snapshot, increment its revision, and persist it; transaction/CAS/lock recovery depend on the host LifecycleStore. This facade performs no caller authentication, SQL/infra provisioning, remote migration, or automatic retry. Authorize operators before invoking it and reconcile uncertain store failures.\n * @example\n * ```typescript\n * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n * import type { LifecycleStore } from \"@alneas/eaos-server/lifecycle-engine\";\n * export function controlStore(lifecycle: LifecycleStore) { return new LifecyclePlatformControlStore(lifecycle); }\n * ```\n */\nexport class LifecyclePlatformControlStore implements PlatformControlStore {\n  /**\n   * Captures the shared authoritative lifecycle ledger and clock.\n   * @param lifecycle - Host store providing consistent reads and exclusive writer callbacks.\n   * @param now - Clock for mutation timestamps; defaults to a fresh Date.\n   */\n  constructor(private readonly lifecycle: LifecycleStore, private readonly now: () => Date = () => new Date()) {}\n\n  private async read(): Promise<LifecycleState> { return normalizeLifecycleState(await this.lifecycle.read()) }\n\n  private async mutate<T>(fn: (state: LifecycleState) => Promise<T> | T): Promise<T> {\n    return this.lifecycle.withLock(async writer => {\n      const state = normalizeLifecycleState(await writer.read())\n      const result = await fn(state)\n      state.revision += 1\n      await writer.write(state)\n      return result\n    })\n  }\n\n  /**\n   * Lists tenant records from the authoritative normalized lifecycle snapshot.\n   * @returns Tenant records with cloned domains arrays, or an empty array.\n   * @throws Host read/normalization failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function listTenants(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"listTenants\"]>) {\n   *   return store.listTenants(...args);\n   * }\n   * ```\n   */\n  async listTenants(): Promise<readonly PlatformTenantRecord[]> {\n    const state = await this.read()\n    return Object.values(state.platform.tenants).map(tenant => ({ ...tenant, domains: [...tenant.domains] }))\n  }\n\n  /**\n   * Creates an active tenant and its initial backend routing record under the lifecycle writer lock.\n   * @param input - Valid scope ID, nonblank name, nonempty domain strings, and registered initial backendId; a dedicated backend must bind the same tenant.\n   * @returns Created tenant record with clock timestamps; initial routing revision is one.\n   * @throws Invalid input, duplicate tenant, missing/mismatched backend, or host lock/write/clock failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function createTenant(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"createTenant\"]>) {\n   *   return store.createTenant(...args);\n   * }\n   * ```\n   */\n  async createTenant(input: PlatformTenantCreateInput): Promise<PlatformTenantRecord> {\n    const id = identifier(input.id, 'tenant id')\n    const name = text(input.name, 'tenant name')\n    const backendId = identifier(input.backendId, 'initial backend id')\n    if (!Array.isArray(input.domains) || input.domains.length === 0 || input.domains.some(domain => typeof domain !== 'string' || !domain.trim())) throw new Error('Invalid tenant domains')\n    return this.mutate(state => {\n      if (state.platform.tenants[id]) throw new Error('Tenant already exists')\n      const backend = materializeBackend(state, backendId)\n      if (!backend) throw new Error('Initial backend not found')\n      if (backend.mode === 'dedicated' && backend.tenantId !== id) throw new Error('Initial backend tenant mismatch')\n      const at = this.now().toISOString()\n      const tenant = { id, name, active: true, domains: [...input.domains], createdAt: at, updatedAt: at }\n      state.platform.tenants[id] = tenant\n      state.platform.placements[id] = { tenantId: id, backendId, routingRevision: 1, changedAt: at }\n      return tenant\n    })\n  }\n\n  /**\n   * Updates an existing tenant name, active flag, or domains and refreshes updatedAt.\n   * @param tenantId - Existing valid tenant scope ID.\n   * @param patch - Optional nonblank name, boolean active, and nonempty nonblank domains; omitted fields remain unchanged.\n   * @returns Updated tenant with cloned domains.\n   * @throws Missing tenant, invalid supplied fields, or host lock/write/clock failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function updateTenant(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"updateTenant\"]>) {\n   *   return store.updateTenant(...args);\n   * }\n   * ```\n   */\n  async updateTenant(tenantId: string, patch: PlatformTenantPatch): Promise<PlatformTenantRecord> {\n    identifier(tenantId, 'tenant id')\n    return this.mutate(state => {\n      const current = state.platform.tenants[tenantId]\n      if (!current) throw new Error('Tenant not found')\n      if (patch.name !== undefined) current.name = text(patch.name, 'tenant name')\n      if (patch.active !== undefined) {\n        if (typeof patch.active !== 'boolean') throw new Error('Invalid tenant active state')\n        current.active = patch.active\n      }\n      if (patch.domains !== undefined) {\n        if (!Array.isArray(patch.domains) || patch.domains.length === 0 || patch.domains.some(domain => typeof domain !== 'string' || !domain.trim())) throw new Error('Invalid tenant domains')\n        current.domains = [...patch.domains]\n      }\n      current.updatedAt = this.now().toISOString()\n      return { ...current, domains: [...current.domains] }\n    })\n  }\n\n  /**\n   * Registers an immutable backend placement identity and replaceable public metadata.\n   * @param backend - Valid backend/database IDs, dialect/mode, optional dedicated tenant binding, and metadata.\n   * @returns Materialized registered target with metadata.\n   * @throws Invalid target, changed placement for an existing ID, database dialect conflict, or host store failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function registerBackend(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"registerBackend\"]>) {\n   *   return store.registerBackend(...args);\n   * }\n   * ```\n   */\n  async registerBackend(backend: PlatformBackendRecord): Promise<PlatformBackendRecord> {\n    validateBackend(backend)\n    return this.mutate(state => {\n      const existing = state.backends[backend.id]\n      const target: BackendTarget = { id: backend.id, databaseId: backend.databaseId, dialect: backend.dialect, mode: backend.mode, ...(backend.tenantId === undefined ? {} : { tenantId: backend.tenantId }) }\n      if (existing && canonical(existing) !== canonical(target)) throw new Error('Backend placement is immutable; register a new backend ID')\n      for (const other of Object.values(state.backends)) if (other.id !== backend.id && other.databaseId === backend.databaseId && other.dialect !== backend.dialect) throw new Error('Database dialect conflict')\n      state.backends[backend.id] = target\n      const { id: _id, databaseId: _databaseId, dialect: _dialect, mode: _mode, tenantId: _tenantId, ...metadata } = backend\n      state.platform.backendMetadata[backend.id] = metadata\n      return { ...target, ...metadata }\n    })\n  }\n\n  /**\n   * Materializes registered backend targets with their public metadata.\n   * @returns Backend list, or an empty array.\n   * @throws Host read/normalization failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function listBackends(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"listBackends\"]>) {\n   *   return store.listBackends(...args);\n   * }\n   * ```\n   */\n  async listBackends(): Promise<readonly PlatformBackendRecord[]> {\n    const state = await this.read()\n    return Object.keys(state.backends).map(id => materializeBackend(state, id)!).filter(Boolean)\n  }\n\n  /**\n   * Reads a registered backend target and its public metadata.\n   * @param backendId - Valid registered backend scope ID.\n   * @returns Materialized backend, or null when unregistered.\n   * @throws Invalid ID or host read failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function getBackend(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"getBackend\"]>) {\n   *   return store.getBackend(...args);\n   * }\n   * ```\n   */\n  async getBackend(backendId: string): Promise<PlatformBackendRecord | null> {\n    identifier(backendId, 'backend id')\n    return materializeBackend(await this.read(), backendId)\n  }\n\n  /**\n   * Resolves a tenant routing record into its registered backend target.\n   * @param tenantId - Valid tenant scope ID.\n   * @returns Placement with routing revision/time and backend, or null when absent.\n   * @throws Invalid ID, dangling backend reference, or host read failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function getTenantPlacement(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"getTenantPlacement\"]>) {\n   *   return store.getTenantPlacement(...args);\n   * }\n   * ```\n   */\n  async getTenantPlacement(tenantId: string): Promise<TenantBackendPlacement | null> {\n    identifier(tenantId, 'tenant id')\n    return placement(await this.read(), tenantId)\n  }\n\n  /**\n   * Persists an immutable migration plan after checking registered backend identities.\n   * @param plan - Reviewed plan matching currently registered source/target; identical saved plans may be accepted before completion.\n   * @returns No value; resolves after storing the plan and initial planned record if absent.\n   * @throws Unregistered/changed backend, conflicting reused plan ID, already completed plan, clone or host store failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function saveMigrationPlan(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"saveMigrationPlan\"]>) {\n   *   return store.saveMigrationPlan(...args);\n   * }\n   * ```\n   */\n  async saveMigrationPlan(plan: BackendMigrationPlan): Promise<void> {\n    await this.mutate(state => {\n      if (!state.backends[plan.request.source.id] || !state.backends[plan.request.target.id]) throw new Error('Migration backend is not registered')\n      if (canonical(targetOf(state.backends[plan.request.source.id])) !== canonical(targetOf(plan.request.source)) || canonical(targetOf(state.backends[plan.request.target.id])) !== canonical(targetOf(plan.request.target))) throw new Error('Migration backend changed since planning')\n      const existing = state.platform.migrationPlans[plan.id]\n      if (existing && canonical(existing) !== canonical(plan)) throw new Error('Migration plan ID already contains a different plan')\n      const current = state.platform.migrationRecords[plan.id]\n      if (current?.status === 'cutover' || current?.status === 'rolled-back') throw new Error('Migration plan has already completed')\n      state.platform.migrationPlans[plan.id] = structuredClone(plan)\n      state.platform.migrationRecords[plan.id] ??= { status: 'planned', updatedAt: plan.request.requestedAt }\n    })\n  }\n\n  /**\n   * Reads a cloned persisted migration plan by ID.\n   * @param migrationId - Valid migration scope ID.\n   * @returns Plan clone, or null when absent.\n   * @throws Invalid ID or host read/clone failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function getMigrationPlan(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"getMigrationPlan\"]>) {\n   *   return store.getMigrationPlan(...args);\n   * }\n   * ```\n   */\n  async getMigrationPlan(migrationId: string): Promise<BackendMigrationPlan | null> {\n    identifier(migrationId, 'migration id')\n    const state = await this.read()\n    const plan = state.platform.migrationPlans[migrationId]\n    return plan ? structuredClone(plan) : null\n  }\n\n  /**\n   * Reads the persisted migration execution/reconciliation record.\n   * @param migrationId - Valid migration scope ID.\n   * @returns Cloned status record, or null when absent.\n   * @throws Invalid ID or host read/clone failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function getMigrationStatus(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"getMigrationStatus\"]>) {\n   *   return store.getMigrationStatus(...args);\n   * }\n   * ```\n   */\n  async getMigrationStatus(migrationId: string): Promise<LifecyclePlatformMigrationRecord | null> {\n    identifier(migrationId, 'migration id')\n    const record = (await this.read()).platform.migrationRecords[migrationId]\n    return record ? structuredClone(record) : null\n  }\n\n  /**\n   * Binds an execution token and transitions a tenant migration record to running.\n   * @param input - Verified tenantId, persisted migrationId, and unique host executionId; plan scope must include the tenant.\n   * @returns Cloned running record, or completed cutover/rolled-back record unchanged.\n   * @throws Missing plan, tenant mismatch, conflicting active token, reconciling state, invalid IDs, or host store failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function beginMigrationExecution(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"beginMigrationExecution\"]>) {\n   *   return store.beginMigrationExecution(...args);\n   * }\n   * ```\n   */\n  async beginMigrationExecution(input: { \n  /**\n   * Verified tenant included in the persisted migration plan tenant scope; mismatch rejects before recording execution.\n   */\n  tenantId: string; \n  /**\n   * Identity of an already persisted migration plan and its corresponding status record.\n   */\n  migrationId: string; \n  /**\n   * Host execution token bound to this run; a different token cannot replace an active running/verified execution.\n   */\n  executionId: string }): Promise<LifecyclePlatformMigrationRecord> {\n    identifier(input.tenantId, 'tenant id'); identifier(input.migrationId, 'migration id'); identifier(input.executionId, 'execution id')\n    return this.mutate(state => {\n      const plan = state.platform.migrationPlans[input.migrationId]\n      const record = state.platform.migrationRecords[input.migrationId]\n      if (!plan || !record) throw new Error('Migration plan not found')\n      if (plan.request.scope.kind !== 'tenants' || !plan.request.scope.tenantIds.includes(input.tenantId)) throw new Error('Migration plan tenant mismatch')\n      if (record.status === 'cutover' || record.status === 'rolled-back') return structuredClone(record)\n      if ((record.status === 'running' || record.status === 'verified') && record.executionId !== input.executionId) throw new Error('Migration execution already in progress')\n      if (record.status === 'reconciling') throw new Error('Migration requires reconciliation before retry')\n      record.status = 'running'\n      record.executionId = input.executionId\n      record.error = undefined\n      record.updatedAt = this.now().toISOString()\n      return structuredClone(record)\n    })\n  }\n\n  /**\n   * Records verified migration evidence and cutover data for the active execution token.\n   * @param input - Tenant, exact persisted plan, active executionId, verification report, and matching validated cutover.\n   * @returns Cloned verified migration record.\n   * @throws Invalid cutover/report, nonpersisted/changed plan, tenant/token/state mismatch, changed retry verification, or host store failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function recordMigrationVerification(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"recordMigrationVerification\"]>) {\n   *   return store.recordMigrationVerification(...args);\n   * }\n   * ```\n   */\n  async recordMigrationVerification(input: { \n  /**\n   * Verified tenant included in the exact persisted plan tenant scope.\n   */\n  tenantId: string; \n  /**\n   * Exact persisted migration plan; canonical contents must match the saved plan rather than a modified caller copy.\n   */\n  plan: BackendMigrationPlan; \n  /**\n   * Current execution token recorded by beginMigrationExecution; only running/verified records with this token may accept evidence.\n   */\n  executionId: string; \n  /**\n   * Passing source/target verification report validated against the plan and cutover; a verified retry must reproduce the recorded report.\n   */\n  verification: BackendMigrationVerificationReport; \n  /**\n   * Matching validated cutover proof recorded with the report for a later explicit routing commit; recording verification does not itself switch placement.\n   */\n  cutover: BackendMigrationCutover }): Promise<LifecyclePlatformMigrationRecord> {\n    identifier(input.tenantId, 'tenant id'); identifier(input.executionId, 'execution id')\n    assertBackendMigrationCutover(input.plan, input.verification, input.cutover)\n    return this.mutate(state => {\n      const saved = state.platform.migrationPlans[input.plan.id]\n      const record = state.platform.migrationRecords[input.plan.id]\n      if (!saved || canonical(saved) !== canonical(input.plan) || !record) throw new Error('Migration plan is not the persisted plan')\n      if (input.plan.request.scope.kind !== 'tenants' || !input.plan.request.scope.tenantIds.includes(input.tenantId)) throw new Error('Migration plan tenant mismatch')\n      if (record.executionId !== input.executionId || !['running', 'verified'].includes(record.status)) throw new Error('Migration execution is not active')\n      if (record.status === 'verified' && canonical(record.verification) !== canonical(input.verification)) throw new Error('Migration verification changed during retry')\n      record.status = 'verified'\n      record.verification = structuredClone(input.verification)\n      record.cutover = structuredClone(input.cutover)\n      record.updatedAt = this.now().toISOString()\n      return structuredClone(record)\n    })\n  }\n\n  /**\n   * Records a failed or reconciling migration status with host diagnostic text.\n   * @param input - Persisted migrationId, optional expected executionId, failure status, and nonblank message up to 2048 characters.\n   * @returns Cloned updated failure record.\n   * @throws Missing/completed migration, mismatched token, invalid input, or host store/clock failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function markMigrationFailure(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"markMigrationFailure\"]>) {\n   *   return store.markMigrationFailure(...args);\n   * }\n   * ```\n   */\n  async markMigrationFailure(input: { \n  /**\n   * Persisted migration record to mark failed or reconciling; completed cutover/rolled-back records cannot be changed through this method.\n   */\n  migrationId: string; \n  /**\n   * Optional expected active execution token; a truthy supplied value must match, while omission skips this token check.\n   */\n  executionId?: string; \n  /**\n   * Failure disposition to persist: failed permits explicit retry preparation, while reconciling requires operator outcome review before retry.\n   */\n  status: 'failed' | 'reconciling'; \n  /**\n   * Nonblank diagnostic text up to 2048 characters, stored with a generated occurrence timestamp; exclude secrets and customer payloads.\n   */\n  message: string }): Promise<LifecyclePlatformMigrationRecord> {\n    identifier(input.migrationId, 'migration id'); text(input.message, 'migration failure', 2048)\n    return this.mutate(state => {\n      const record = state.platform.migrationRecords[input.migrationId]\n      if (!record) throw new Error('Migration plan not found')\n      if (input.executionId && record.executionId !== input.executionId) throw new Error('Migration execution token mismatch')\n      if (record.status === 'cutover' || record.status === 'rolled-back') throw new Error('Completed migration cannot be marked failed')\n      record.status = input.status\n      record.error = { message: input.message, occurredAt: this.now().toISOString() }\n      record.updatedAt = this.now().toISOString()\n      return structuredClone(record)\n    })\n  }\n\n  /**\n   * Applies an operator reconciliation status action and records its note.\n   * @param input - Persisted migrationId, action, and nonblank note up to 2048 characters; retry only permits failed/reconciling state and clears execution/verification/cutover.\n   * @returns Cloned updated migration record.\n   * @throws Missing record, retry from an ineligible state, completed record for mark-failed/mark-reconciling, invalid text, or host store failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function reconcileMigration(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"reconcileMigration\"]>) {\n   *   return store.reconcileMigration(...args);\n   * }\n   * ```\n   */\n  async reconcileMigration(input: { \n  /**\n   * Persisted migration whose operator reconciliation state is being updated.\n   */\n  migrationId: string; \n  /**\n   * Explicit retry, mark-failed or mark-reconciling action; retry requires failed/reconciling state and clears execution, verification and cutover data.\n   */\n  action: PlatformMigrationReconcileAction; \n  /**\n   * Nonblank operator rationale up to 2048 characters, persisted as timestamped diagnostic text; this does not independently verify external outcomes.\n   */\n  note: string }): Promise<LifecyclePlatformMigrationRecord> {\n    identifier(input.migrationId, 'migration id'); text(input.note, 'reconciliation note', 2048)\n    return this.mutate(state => {\n      const record = state.platform.migrationRecords[input.migrationId]\n      if (!record) throw new Error('Migration plan not found')\n      if (input.action === 'retry') {\n        if (!['failed', 'reconciling'].includes(record.status)) throw new Error('Only failed or reconciling migrations can be retried')\n        record.status = 'planned'; record.executionId = undefined; record.verification = undefined; record.cutover = undefined\n      } else if (input.action === 'mark-failed') {\n        if (record.status === 'cutover' || record.status === 'rolled-back') throw new Error('Completed migration cannot be marked failed')\n        record.status = 'failed'\n      } else if (input.action === 'mark-reconciling') {\n        if (record.status === 'cutover' || record.status === 'rolled-back') throw new Error('Completed migration cannot be reconciled')\n        record.status = 'reconciling'\n      }\n      record.error = { message: input.note, occurredAt: this.now().toISOString() }\n      record.updatedAt = this.now().toISOString()\n      return structuredClone(record)\n    })\n  }\n\n  /**\n   * Creates a reverse migration plan for a completed cutover without executing rollback.\n   * @param input - Verified tenantId, completed migrationId, nonblank reason up to 1024 characters, and parseable requestedAt timestamp.\n   * @returns New planned reverse migration linked to the original record.\n   * @throws Incomplete/already rollback-planned migration, tenant no longer on migrated target, invalid input/planning, or host store failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function createRollbackPlan(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"createRollbackPlan\"]>) {\n   *   return store.createRollbackPlan(...args);\n   * }\n   * ```\n   */\n  async createRollbackPlan(input: { \n  /**\n   * Verified tenant currently placed on the completed migration target; the current placement must still match before a reverse plan is created.\n   */\n  tenantId: string; \n  /**\n   * Completed cutover migration to reverse; an existing rollback plan prevents creating another one.\n   */\n  migrationId: string; \n  /**\n   * Nonblank rollback planning rationale up to 1024 characters, copied to the new reverse migration request.\n   */\n  reason: string; \n  /**\n   * Parseable rollback request timestamp copied to the new plan/status record; no rollback is executed by planning.\n   */\n  requestedAt: string }): Promise<BackendMigrationPlan> {\n    identifier(input.tenantId, 'tenant id'); identifier(input.migrationId, 'migration id'); text(input.reason, 'rollback reason', 1024)\n    timestamp(input.requestedAt, 'rollback requestedAt')\n    return this.mutate(state => {\n      const original = state.platform.migrationRecords[input.migrationId]\n      const originalPlan = state.platform.migrationPlans[input.migrationId]\n      if (!original || !originalPlan || original.status !== 'cutover') throw new Error('Only a completed migration can be rolled back')\n      if (original.rollbackPlanId) throw new Error('Migration rollback already exists')\n      const current = placement(state, input.tenantId)\n      if (!current || current.backend.id !== originalPlan.request.target.id) throw new Error('Current tenant placement is not the migrated target')\n      const rollback = planBackendMigration({\n        migrationId: `rollback-${crypto.randomUUID()}`,\n        source: originalPlan.request.target,\n        target: originalPlan.request.source,\n        scope: originalPlan.request.scope,\n        pluginIds: originalPlan.request.pluginIds,\n        requestedAt: input.requestedAt,\n        reason: input.reason,\n      })\n      state.platform.migrationPlans[rollback.id] = structuredClone(rollback)\n      state.platform.migrationRecords[rollback.id] = { status: 'planned', updatedAt: input.requestedAt, rollbackOf: input.migrationId }\n      original.rollbackPlanId = rollback.id\n      original.updatedAt = this.now().toISOString()\n      return rollback\n    })\n  }\n\n  /**\n   * Commits a verified migration routing change and transfers active plugin activations to the target backend.\n   * @param input - Tenant included by the exact persisted plan and its previously recorded cutover proof.\n   * @returns New target placement, or current placement for an already-cutover record.\n   * @throws Unverified/stale/changed plan, invalid cutover or nonadvancing routing revision, target tenant mismatch, missing planned active plugin or target installation, or host lock/write failure.\n   * @example\n   * ```typescript\n   * import { LifecyclePlatformControlStore } from \"@alneas/eaos-server/platform-admin/store\";\n   * export async function recordTenantPlacement(store: LifecyclePlatformControlStore, ...args: Parameters<LifecyclePlatformControlStore[\"recordTenantPlacement\"]>) {\n   *   return store.recordTenantPlacement(...args);\n   * }\n   * ```\n   */\n  async recordTenantPlacement(input: { \n  /**\n   * Verified tenant included in the plan whose persisted routing placement and active plugin bindings will be moved.\n   */\n  tenantId: string; \n  /**\n   * Exact persisted verified migration plan; current source/target backend identities and installations are rechecked before commit.\n   */\n  plan: BackendMigrationPlan; \n  /**\n   * Previously recorded verification proof with source retained and an advancing routing revision; its canonical contents must match the saved cutover.\n   */\n  cutover: BackendMigrationCutover }): Promise<TenantBackendPlacement> {\n    identifier(input.tenantId, 'tenant id')\n    return this.mutate(state => {\n      const { plan, cutover } = input\n      const saved = state.platform.migrationPlans[plan.id]\n      const record = state.platform.migrationRecords[plan.id]\n      if (!saved || canonical(saved) !== canonical(plan) || !record) throw new Error('Migration plan is not the persisted plan')\n      if (plan.request.scope.kind !== 'tenants' || !plan.request.scope.tenantIds.includes(input.tenantId)) throw new Error('Migration plan tenant mismatch')\n      if (record.status === 'cutover') return placement(state, input.tenantId)!\n      if (record.status !== 'verified' || !record.executionId || !record.verification || !record.cutover || canonical(record.cutover) !== canonical(cutover)) throw new Error('Migration must be verified before cutover')\n      if (cutover.migrationId !== plan.request.migrationId || cutover.targetBackendId !== plan.request.target.id || cutover.sourceRetained !== true || !Number.isSafeInteger(cutover.routingRevision) || cutover.routingRevision < 0 || !Number.isFinite(Date.parse(cutover.cutoverAt))) throw new Error('Invalid migration cutover')\n      const current = placement(state, input.tenantId)\n      if (!current || current.backend.id !== plan.request.source.id || current.backend.databaseId !== plan.request.source.databaseId) throw new Error('Migration plan is stale')\n      if (cutover.routingRevision <= current.routingRevision) throw new Error('Migration routing revision must advance')\n      const target = materializeBackend(state, plan.request.target.id)\n      if (!target || canonical(targetOf(target)) !== canonical(targetOf(plan.request.target))) throw new Error('Migration target backend changed')\n      if (target.mode === 'dedicated' && target.tenantId !== input.tenantId) throw new Error('Migration target tenant mismatch')\n\n      const active = Object.entries(state.activations).filter(([, activation]) => activation.backendId === plan.request.source.id && activation.tenantId === input.tenantId && activation.enabled)\n      const planned = new Set(plan.request.pluginIds)\n      for (const [, activation] of active) {\n        if (!planned.has(activation.pluginId)) throw new Error(`Migration plan does not include active plugin: ${activation.pluginId}`)\n        const installation = state.installations[key(plan.request.target.id, activation.pluginId)]\n        if (!installation || installation.status !== 'installed') throw new Error(`Target backend is missing installed plugin: ${activation.pluginId}`)\n      }\n      for (const [activationKey, activation] of active) {\n        activation.enabled = false\n        const targetKey = key(plan.request.target.id, input.tenantId, activation.pluginId)\n        const installation = state.installations[key(plan.request.target.id, activation.pluginId)]\n        state.activations[targetKey] = { ...activation, backendId: plan.request.target.id, digest: installation.digest, enabled: true }\n        state.activations[activationKey] = activation\n      }\n      state.platform.placements[input.tenantId] = { tenantId: input.tenantId, backendId: plan.request.target.id, routingRevision: cutover.routingRevision, changedAt: timestamp(cutover.cutoverAt, 'cutover time') }\n      record.status = 'cutover'\n      record.updatedAt = this.now().toISOString()\n      record.cutover = structuredClone(cutover)\n      if (record.rollbackOf) {\n        const original = state.platform.migrationRecords[record.rollbackOf]\n        if (original) { original.status = 'rolled-back'; original.updatedAt = this.now().toISOString(); original.rollbackPlanId = plan.id }\n      }\n      return placement(state, input.tenantId)!\n    })\n  }\n}\n"],"mappings":";AAAA,SAAS,+BAA+B,WAAW,yBAAyB,4BAAmO;AAG/S,IAAM,MAAM,IAAI,UAAoB,KAAK,UAAU,KAAK;AACxD,IAAM,aAAa,CAAC,OAAe,SAAiB;AAClD,MAAI,CAAC,oCAAoC,KAAK,KAAK,EAAG,OAAM,IAAI,MAAM,WAAW,IAAI,EAAE;AACvF,SAAO;AACT;AACA,IAAM,OAAO,CAAC,OAAe,MAAc,MAAM,QAAQ;AACvD,MAAI,CAAC,MAAM,KAAK,KAAK,MAAM,SAAS,IAAK,OAAM,IAAI,MAAM,WAAW,IAAI,EAAE;AAC1E,SAAO;AACT;AACA,IAAM,YAAY,CAAC,OAAe,SAAiB;AACjD,MAAI,CAAC,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,WAAW,IAAI,EAAE;AAC1E,SAAO;AACT;AAEA,SAAS,mBAAmB,OAAuB,WAAiD;AAClG,QAAM,UAAU,MAAM,SAAS,SAAS;AACxC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,EAAE,GAAG,SAAS,GAAG,MAAM,SAAS,gBAAgB,SAAS,EAAE;AACpE;AAEA,SAAS,SAAS,SAA+D;AAC/E,SAAO,EAAE,IAAI,QAAQ,IAAI,YAAY,QAAQ,YAAY,SAAS,QAAQ,SAAS,MAAM,QAAQ,MAAM,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS,EAAG;AACnL;AAEA,SAAS,UAAU,OAAuB,UAAiD;AACzF,QAAM,SAAS,MAAM,SAAS,WAAW,QAAQ;AACjD,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,UAAU,mBAAmB,OAAO,OAAO,SAAS;AAC1D,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,gDAAgD,OAAO,SAAS,EAAE;AAChG,SAAO,EAAE,UAAU,SAAS,iBAAiB,OAAO,iBAAiB,WAAW,OAAO,UAAU;AACnG;AAEA,SAAS,gBAAgB,SAAsC;AAC7D,aAAW,QAAQ,IAAI,YAAY;AACnC,aAAW,QAAQ,YAAY,aAAa;AAC5C,MAAI,CAAC,CAAC,UAAU,YAAY,QAAQ,EAAE,SAAS,QAAQ,OAAO,KAAK,CAAC,CAAC,UAAU,WAAW,EAAE,SAAS,QAAQ,IAAI,EAAG,OAAM,IAAI,MAAM,wBAAwB;AAC5J,MAAI,QAAQ,SAAS,YAAa,YAAW,QAAQ,YAAY,IAAI,0BAA0B;AAC/F,MAAI,QAAQ,SAAS,YAAY,QAAQ,aAAa,OAAW,OAAM,IAAI,MAAM,qCAAqC;AACxH;AAcO,IAAM,gCAAN,MAAoE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMzE,YAA6B,WAA4C,MAAkB,MAAM,oBAAI,KAAK,GAAG;AAAhF;AAA4C;AAAA,EAAqC;AAAA,EAAjF;AAAA,EAA4C;AAAA,EAEzE,MAAc,OAAgC;AAAE,WAAO,wBAAwB,MAAM,KAAK,UAAU,KAAK,CAAC;AAAA,EAAE;AAAA,EAE5G,MAAc,OAAU,IAA2D;AACjF,WAAO,KAAK,UAAU,SAAS,OAAM,WAAU;AAC7C,YAAM,QAAQ,wBAAwB,MAAM,OAAO,KAAK,CAAC;AACzD,YAAM,SAAS,MAAM,GAAG,KAAK;AAC7B,YAAM,YAAY;AAClB,YAAM,OAAO,MAAM,KAAK;AACxB,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,cAAwD;AAC5D,UAAM,QAAQ,MAAM,KAAK,KAAK;AAC9B,WAAO,OAAO,OAAO,MAAM,SAAS,OAAO,EAAE,IAAI,aAAW,EAAE,GAAG,QAAQ,SAAS,CAAC,GAAG,OAAO,OAAO,EAAE,EAAE;AAAA,EAC1G;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,aAAa,OAAiE;AAClF,UAAM,KAAK,WAAW,MAAM,IAAI,WAAW;AAC3C,UAAM,OAAO,KAAK,MAAM,MAAM,aAAa;AAC3C,UAAM,YAAY,WAAW,MAAM,WAAW,oBAAoB;AAClE,QAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ,WAAW,KAAK,MAAM,QAAQ,KAAK,YAAU,OAAO,WAAW,YAAY,CAAC,OAAO,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,wBAAwB;AACvL,WAAO,KAAK,OAAO,WAAS;AAC1B,UAAI,MAAM,SAAS,QAAQ,EAAE,EAAG,OAAM,IAAI,MAAM,uBAAuB;AACvE,YAAM,UAAU,mBAAmB,OAAO,SAAS;AACnD,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,2BAA2B;AACzD,UAAI,QAAQ,SAAS,eAAe,QAAQ,aAAa,GAAI,OAAM,IAAI,MAAM,iCAAiC;AAC9G,YAAM,KAAK,KAAK,IAAI,EAAE,YAAY;AAClC,YAAM,SAAS,EAAE,IAAI,MAAM,QAAQ,MAAM,SAAS,CAAC,GAAG,MAAM,OAAO,GAAG,WAAW,IAAI,WAAW,GAAG;AACnG,YAAM,SAAS,QAAQ,EAAE,IAAI;AAC7B,YAAM,SAAS,WAAW,EAAE,IAAI,EAAE,UAAU,IAAI,WAAW,iBAAiB,GAAG,WAAW,GAAG;AAC7F,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,aAAa,UAAkB,OAA2D;AAC9F,eAAW,UAAU,WAAW;AAChC,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAC/C,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,kBAAkB;AAChD,UAAI,MAAM,SAAS,OAAW,SAAQ,OAAO,KAAK,MAAM,MAAM,aAAa;AAC3E,UAAI,MAAM,WAAW,QAAW;AAC9B,YAAI,OAAO,MAAM,WAAW,UAAW,OAAM,IAAI,MAAM,6BAA6B;AACpF,gBAAQ,SAAS,MAAM;AAAA,MACzB;AACA,UAAI,MAAM,YAAY,QAAW;AAC/B,YAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ,WAAW,KAAK,MAAM,QAAQ,KAAK,YAAU,OAAO,WAAW,YAAY,CAAC,OAAO,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,wBAAwB;AACvL,gBAAQ,UAAU,CAAC,GAAG,MAAM,OAAO;AAAA,MACrC;AACA,cAAQ,YAAY,KAAK,IAAI,EAAE,YAAY;AAC3C,aAAO,EAAE,GAAG,SAAS,SAAS,CAAC,GAAG,QAAQ,OAAO,EAAE;AAAA,IACrD,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,gBAAgB,SAAgE;AACpF,oBAAgB,OAAO;AACvB,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,WAAW,MAAM,SAAS,QAAQ,EAAE;AAC1C,YAAM,SAAwB,EAAE,IAAI,QAAQ,IAAI,YAAY,QAAQ,YAAY,SAAS,QAAQ,SAAS,MAAM,QAAQ,MAAM,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS,EAAG;AACxM,UAAI,YAAY,UAAU,QAAQ,MAAM,UAAU,MAAM,EAAG,OAAM,IAAI,MAAM,2DAA2D;AACtI,iBAAW,SAAS,OAAO,OAAO,MAAM,QAAQ,EAAG,KAAI,MAAM,OAAO,QAAQ,MAAM,MAAM,eAAe,QAAQ,cAAc,MAAM,YAAY,QAAQ,QAAS,OAAM,IAAI,MAAM,2BAA2B;AAC3M,YAAM,SAAS,QAAQ,EAAE,IAAI;AAC7B,YAAM,EAAE,IAAI,KAAK,YAAY,aAAa,SAAS,UAAU,MAAM,OAAO,UAAU,WAAW,GAAG,SAAS,IAAI;AAC/G,YAAM,SAAS,gBAAgB,QAAQ,EAAE,IAAI;AAC7C,aAAO,EAAE,GAAG,QAAQ,GAAG,SAAS;AAAA,IAClC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,eAA0D;AAC9D,UAAM,QAAQ,MAAM,KAAK,KAAK;AAC9B,WAAO,OAAO,KAAK,MAAM,QAAQ,EAAE,IAAI,QAAM,mBAAmB,OAAO,EAAE,CAAE,EAAE,OAAO,OAAO;AAAA,EAC7F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,WAAW,WAA0D;AACzE,eAAW,WAAW,YAAY;AAClC,WAAO,mBAAmB,MAAM,KAAK,KAAK,GAAG,SAAS;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,mBAAmB,UAA0D;AACjF,eAAW,UAAU,WAAW;AAChC,WAAO,UAAU,MAAM,KAAK,KAAK,GAAG,QAAQ;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,kBAAkB,MAA2C;AACjE,UAAM,KAAK,OAAO,WAAS;AACzB,UAAI,CAAC,MAAM,SAAS,KAAK,QAAQ,OAAO,EAAE,KAAK,CAAC,MAAM,SAAS,KAAK,QAAQ,OAAO,EAAE,EAAG,OAAM,IAAI,MAAM,qCAAqC;AAC7I,UAAI,UAAU,SAAS,MAAM,SAAS,KAAK,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,UAAU,SAAS,KAAK,QAAQ,MAAM,CAAC,KAAK,UAAU,SAAS,MAAM,SAAS,KAAK,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,UAAU,SAAS,KAAK,QAAQ,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,0CAA0C;AACpR,YAAM,WAAW,MAAM,SAAS,eAAe,KAAK,EAAE;AACtD,UAAI,YAAY,UAAU,QAAQ,MAAM,UAAU,IAAI,EAAG,OAAM,IAAI,MAAM,qDAAqD;AAC9H,YAAM,UAAU,MAAM,SAAS,iBAAiB,KAAK,EAAE;AACvD,UAAI,SAAS,WAAW,aAAa,SAAS,WAAW,cAAe,OAAM,IAAI,MAAM,sCAAsC;AAC9H,YAAM,SAAS,eAAe,KAAK,EAAE,IAAI,gBAAgB,IAAI;AAC7D,YAAM,SAAS,iBAAiB,KAAK,EAAE,MAAM,EAAE,QAAQ,WAAW,WAAW,KAAK,QAAQ,YAAY;AAAA,IACxG,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,iBAAiB,aAA2D;AAChF,eAAW,aAAa,cAAc;AACtC,UAAM,QAAQ,MAAM,KAAK,KAAK;AAC9B,UAAM,OAAO,MAAM,SAAS,eAAe,WAAW;AACtD,WAAO,OAAO,gBAAgB,IAAI,IAAI;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,mBAAmB,aAAuE;AAC9F,eAAW,aAAa,cAAc;AACtC,UAAM,UAAU,MAAM,KAAK,KAAK,GAAG,SAAS,iBAAiB,WAAW;AACxE,WAAO,SAAS,gBAAgB,MAAM,IAAI;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,wBAAwB,OAYoC;AAChE,eAAW,MAAM,UAAU,WAAW;AAAG,eAAW,MAAM,aAAa,cAAc;AAAG,eAAW,MAAM,aAAa,cAAc;AACpI,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,OAAO,MAAM,SAAS,eAAe,MAAM,WAAW;AAC5D,YAAM,SAAS,MAAM,SAAS,iBAAiB,MAAM,WAAW;AAChE,UAAI,CAAC,QAAQ,CAAC,OAAQ,OAAM,IAAI,MAAM,0BAA0B;AAChE,UAAI,KAAK,QAAQ,MAAM,SAAS,aAAa,CAAC,KAAK,QAAQ,MAAM,UAAU,SAAS,MAAM,QAAQ,EAAG,OAAM,IAAI,MAAM,gCAAgC;AACrJ,UAAI,OAAO,WAAW,aAAa,OAAO,WAAW,cAAe,QAAO,gBAAgB,MAAM;AACjG,WAAK,OAAO,WAAW,aAAa,OAAO,WAAW,eAAe,OAAO,gBAAgB,MAAM,YAAa,OAAM,IAAI,MAAM,yCAAyC;AACxK,UAAI,OAAO,WAAW,cAAe,OAAM,IAAI,MAAM,gDAAgD;AACrG,aAAO,SAAS;AAChB,aAAO,cAAc,MAAM;AAC3B,aAAO,QAAQ;AACf,aAAO,YAAY,KAAK,IAAI,EAAE,YAAY;AAC1C,aAAO,gBAAgB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,4BAA4B,OAoB6C;AAC7E,eAAW,MAAM,UAAU,WAAW;AAAG,eAAW,MAAM,aAAa,cAAc;AACrF,kCAA8B,MAAM,MAAM,MAAM,cAAc,MAAM,OAAO;AAC3E,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,QAAQ,MAAM,SAAS,eAAe,MAAM,KAAK,EAAE;AACzD,YAAM,SAAS,MAAM,SAAS,iBAAiB,MAAM,KAAK,EAAE;AAC5D,UAAI,CAAC,SAAS,UAAU,KAAK,MAAM,UAAU,MAAM,IAAI,KAAK,CAAC,OAAQ,OAAM,IAAI,MAAM,0CAA0C;AAC/H,UAAI,MAAM,KAAK,QAAQ,MAAM,SAAS,aAAa,CAAC,MAAM,KAAK,QAAQ,MAAM,UAAU,SAAS,MAAM,QAAQ,EAAG,OAAM,IAAI,MAAM,gCAAgC;AACjK,UAAI,OAAO,gBAAgB,MAAM,eAAe,CAAC,CAAC,WAAW,UAAU,EAAE,SAAS,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACrJ,UAAI,OAAO,WAAW,cAAc,UAAU,OAAO,YAAY,MAAM,UAAU,MAAM,YAAY,EAAG,OAAM,IAAI,MAAM,6CAA6C;AACnK,aAAO,SAAS;AAChB,aAAO,eAAe,gBAAgB,MAAM,YAAY;AACxD,aAAO,UAAU,gBAAgB,MAAM,OAAO;AAC9C,aAAO,YAAY,KAAK,IAAI,EAAE,YAAY;AAC1C,aAAO,gBAAgB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,qBAAqB,OAgBmC;AAC5D,eAAW,MAAM,aAAa,cAAc;AAAG,SAAK,MAAM,SAAS,qBAAqB,IAAI;AAC5F,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,SAAS,MAAM,SAAS,iBAAiB,MAAM,WAAW;AAChE,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,0BAA0B;AACvD,UAAI,MAAM,eAAe,OAAO,gBAAgB,MAAM,YAAa,OAAM,IAAI,MAAM,oCAAoC;AACvH,UAAI,OAAO,WAAW,aAAa,OAAO,WAAW,cAAe,OAAM,IAAI,MAAM,6CAA6C;AACjI,aAAO,SAAS,MAAM;AACtB,aAAO,QAAQ,EAAE,SAAS,MAAM,SAAS,YAAY,KAAK,IAAI,EAAE,YAAY,EAAE;AAC9E,aAAO,YAAY,KAAK,IAAI,EAAE,YAAY;AAC1C,aAAO,gBAAgB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,mBAAmB,OAYkC;AACzD,eAAW,MAAM,aAAa,cAAc;AAAG,SAAK,MAAM,MAAM,uBAAuB,IAAI;AAC3F,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,SAAS,MAAM,SAAS,iBAAiB,MAAM,WAAW;AAChE,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,0BAA0B;AACvD,UAAI,MAAM,WAAW,SAAS;AAC5B,YAAI,CAAC,CAAC,UAAU,aAAa,EAAE,SAAS,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,sDAAsD;AAC9H,eAAO,SAAS;AAAW,eAAO,cAAc;AAAW,eAAO,eAAe;AAAW,eAAO,UAAU;AAAA,MAC/G,WAAW,MAAM,WAAW,eAAe;AACzC,YAAI,OAAO,WAAW,aAAa,OAAO,WAAW,cAAe,OAAM,IAAI,MAAM,6CAA6C;AACjI,eAAO,SAAS;AAAA,MAClB,WAAW,MAAM,WAAW,oBAAoB;AAC9C,YAAI,OAAO,WAAW,aAAa,OAAO,WAAW,cAAe,OAAM,IAAI,MAAM,0CAA0C;AAC9H,eAAO,SAAS;AAAA,MAClB;AACA,aAAO,QAAQ,EAAE,SAAS,MAAM,MAAM,YAAY,KAAK,IAAI,EAAE,YAAY,EAAE;AAC3E,aAAO,YAAY,KAAK,IAAI,EAAE,YAAY;AAC1C,aAAO,gBAAgB,MAAM;AAAA,IAC/B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,mBAAmB,OAgB6B;AACpD,eAAW,MAAM,UAAU,WAAW;AAAG,eAAW,MAAM,aAAa,cAAc;AAAG,SAAK,MAAM,QAAQ,mBAAmB,IAAI;AAClI,cAAU,MAAM,aAAa,sBAAsB;AACnD,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,WAAW,MAAM,SAAS,iBAAiB,MAAM,WAAW;AAClE,YAAM,eAAe,MAAM,SAAS,eAAe,MAAM,WAAW;AACpE,UAAI,CAAC,YAAY,CAAC,gBAAgB,SAAS,WAAW,UAAW,OAAM,IAAI,MAAM,+CAA+C;AAChI,UAAI,SAAS,eAAgB,OAAM,IAAI,MAAM,mCAAmC;AAChF,YAAM,UAAU,UAAU,OAAO,MAAM,QAAQ;AAC/C,UAAI,CAAC,WAAW,QAAQ,QAAQ,OAAO,aAAa,QAAQ,OAAO,GAAI,OAAM,IAAI,MAAM,qDAAqD;AAC5I,YAAM,WAAW,qBAAqB;AAAA,QACpC,aAAa,YAAY,OAAO,WAAW,CAAC;AAAA,QAC5C,QAAQ,aAAa,QAAQ;AAAA,QAC7B,QAAQ,aAAa,QAAQ;AAAA,QAC7B,OAAO,aAAa,QAAQ;AAAA,QAC5B,WAAW,aAAa,QAAQ;AAAA,QAChC,aAAa,MAAM;AAAA,QACnB,QAAQ,MAAM;AAAA,MAChB,CAAC;AACD,YAAM,SAAS,eAAe,SAAS,EAAE,IAAI,gBAAgB,QAAQ;AACrE,YAAM,SAAS,iBAAiB,SAAS,EAAE,IAAI,EAAE,QAAQ,WAAW,WAAW,MAAM,aAAa,YAAY,MAAM,YAAY;AAChI,eAAS,iBAAiB,SAAS;AACnC,eAAS,YAAY,KAAK,IAAI,EAAE,YAAY;AAC5C,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,sBAAsB,OAYyC;AACnE,eAAW,MAAM,UAAU,WAAW;AACtC,WAAO,KAAK,OAAO,WAAS;AAC1B,YAAM,EAAE,MAAM,QAAQ,IAAI;AAC1B,YAAM,QAAQ,MAAM,SAAS,eAAe,KAAK,EAAE;AACnD,YAAM,SAAS,MAAM,SAAS,iBAAiB,KAAK,EAAE;AACtD,UAAI,CAAC,SAAS,UAAU,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,OAAQ,OAAM,IAAI,MAAM,0CAA0C;AACzH,UAAI,KAAK,QAAQ,MAAM,SAAS,aAAa,CAAC,KAAK,QAAQ,MAAM,UAAU,SAAS,MAAM,QAAQ,EAAG,OAAM,IAAI,MAAM,gCAAgC;AACrJ,UAAI,OAAO,WAAW,UAAW,QAAO,UAAU,OAAO,MAAM,QAAQ;AACvE,UAAI,OAAO,WAAW,cAAc,CAAC,OAAO,eAAe,CAAC,OAAO,gBAAgB,CAAC,OAAO,WAAW,UAAU,OAAO,OAAO,MAAM,UAAU,OAAO,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACnN,UAAI,QAAQ,gBAAgB,KAAK,QAAQ,eAAe,QAAQ,oBAAoB,KAAK,QAAQ,OAAO,MAAM,QAAQ,mBAAmB,QAAQ,CAAC,OAAO,cAAc,QAAQ,eAAe,KAAK,QAAQ,kBAAkB,KAAK,CAAC,OAAO,SAAS,KAAK,MAAM,QAAQ,SAAS,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AAC9T,YAAM,UAAU,UAAU,OAAO,MAAM,QAAQ;AAC/C,UAAI,CAAC,WAAW,QAAQ,QAAQ,OAAO,KAAK,QAAQ,OAAO,MAAM,QAAQ,QAAQ,eAAe,KAAK,QAAQ,OAAO,WAAY,OAAM,IAAI,MAAM,yBAAyB;AACzK,UAAI,QAAQ,mBAAmB,QAAQ,gBAAiB,OAAM,IAAI,MAAM,yCAAyC;AACjH,YAAM,SAAS,mBAAmB,OAAO,KAAK,QAAQ,OAAO,EAAE;AAC/D,UAAI,CAAC,UAAU,UAAU,SAAS,MAAM,CAAC,MAAM,UAAU,SAAS,KAAK,QAAQ,MAAM,CAAC,EAAG,OAAM,IAAI,MAAM,kCAAkC;AAC3I,UAAI,OAAO,SAAS,eAAe,OAAO,aAAa,MAAM,SAAU,OAAM,IAAI,MAAM,kCAAkC;AAEzH,YAAM,SAAS,OAAO,QAAQ,MAAM,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,MAAM,WAAW,cAAc,KAAK,QAAQ,OAAO,MAAM,WAAW,aAAa,MAAM,YAAY,WAAW,OAAO;AAC3L,YAAM,UAAU,IAAI,IAAI,KAAK,QAAQ,SAAS;AAC9C,iBAAW,CAAC,EAAE,UAAU,KAAK,QAAQ;AACnC,YAAI,CAAC,QAAQ,IAAI,WAAW,QAAQ,EAAG,OAAM,IAAI,MAAM,kDAAkD,WAAW,QAAQ,EAAE;AAC9H,cAAM,eAAe,MAAM,cAAc,IAAI,KAAK,QAAQ,OAAO,IAAI,WAAW,QAAQ,CAAC;AACzF,YAAI,CAAC,gBAAgB,aAAa,WAAW,YAAa,OAAM,IAAI,MAAM,+CAA+C,WAAW,QAAQ,EAAE;AAAA,MAChJ;AACA,iBAAW,CAAC,eAAe,UAAU,KAAK,QAAQ;AAChD,mBAAW,UAAU;AACrB,cAAM,YAAY,IAAI,KAAK,QAAQ,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ;AACjF,cAAM,eAAe,MAAM,cAAc,IAAI,KAAK,QAAQ,OAAO,IAAI,WAAW,QAAQ,CAAC;AACzF,cAAM,YAAY,SAAS,IAAI,EAAE,GAAG,YAAY,WAAW,KAAK,QAAQ,OAAO,IAAI,QAAQ,aAAa,QAAQ,SAAS,KAAK;AAC9H,cAAM,YAAY,aAAa,IAAI;AAAA,MACrC;AACA,YAAM,SAAS,WAAW,MAAM,QAAQ,IAAI,EAAE,UAAU,MAAM,UAAU,WAAW,KAAK,QAAQ,OAAO,IAAI,iBAAiB,QAAQ,iBAAiB,WAAW,UAAU,QAAQ,WAAW,cAAc,EAAE;AAC7M,aAAO,SAAS;AAChB,aAAO,YAAY,KAAK,IAAI,EAAE,YAAY;AAC1C,aAAO,UAAU,gBAAgB,OAAO;AACxC,UAAI,OAAO,YAAY;AACrB,cAAM,WAAW,MAAM,SAAS,iBAAiB,OAAO,UAAU;AAClE,YAAI,UAAU;AAAE,mBAAS,SAAS;AAAe,mBAAS,YAAY,KAAK,IAAI,EAAE,YAAY;AAAG,mBAAS,iBAAiB,KAAK;AAAA,QAAG;AAAA,MACpI;AACA,aAAO,UAAU,OAAO,MAAM,QAAQ;AAAA,IACxC,CAAC;AAAA,EACH;AACF;","names":[]}