@byok-sdk/core 0.1.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/tenant.ts","../src/principals.ts","../src/time.ts","../src/mailbox.ts","../src/board.ts","../src/truth.ts","../src/presence.ts","../src/blob.ts","../src/quota.ts","../src/capabilities.ts","../src/stores.ts","../src/ports-contract.ts","../src/attestation.ts","../src/in-memory/presence.ts","../src/in-memory/board.ts","../src/in-memory/mailbox.ts","../src/in-memory/blob.ts","../src/in-memory/quota.ts","../src/in-memory/truth.ts","../src/in-memory/clock.ts","../src/in-memory/index.ts"],"names":["parts","z","DEFAULT_LIST_LIMIT"],"mappings":";;;AA+BO,IAAM,gBAAA,GAAmB;AAAA;AAAA,EAE9B,iBAAA,EAAmB,mBAAA;AAAA,EACnB,oBAAA,EAAsB,sBAAA;AAAA;AAAA,EAGtB,uBAAA,EAAyB,yBAAA;AAAA;AAAA,EAGzB,8BAAA,EAAgC,gCAAA;AAAA,EAChC,sBAAA,EAAwB,wBAAA;AAAA;AAAA,EAGxB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,6BAAA,EAA+B,+BAAA;AAAA;AAAA,EAG/B,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,yBAAA,EAA2B,2BAAA;AAAA;AAAA,EAG3B,oBAAA,EAAsB,sBAAA;AAAA,EACtB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,wBAAA,EAA0B,0BAAA;AAAA,EAC1B,qBAAA,EAAuB,uBAAA;AAAA,EACvB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,cAAA,EAAgB,gBAAA;AAAA;AAAA,EAGhB,sBAAA,EAAwB,wBAAA;AAAA,EACxB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,uBAAA,EAAyB,yBAAA;AAAA;AAAA,EAGzB,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,sBAAA,EAAwB,wBAAA;AAAA,EACxB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,iBAAA,EAAmB,mBAAA;AAAA;AAAA,EAGnB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,oBAAA,EAAsB,sBAAA;AAAA;AAAA,EAGtB,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,oCAAA,EAAsC,sCAAA;AAAA,EACtC,6BAAA,EAA+B,+BAAA;AAAA,EAC/B,wBAAA,EAA0B,0BAAA;AAAA,EAC1B,sBAAA,EAAwB,wBAAA;AAAA,EACxB,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,uBAAA,EAAyB;AAC3B;AAKO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvB,IAAA;AAAA,EAEhB,WAAA,CAAY,IAAA,EAAqB,OAAA,EAAiB,OAAA,EAAwB;AACxE,IAAA,KAAA,CAAM,SAAS,OAAO,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;AAUO,IAAM,iBAAA,GAAN,cAA0C,aAAA,CAAc;AAAA,EAC7C,OAAA;AAAA,EACA,UAAA;AAAA,EAEhB,WAAA,CACE,IAAA,EACA,OAAA,EACA,OAAA,EACA,YACA,OAAA,EACA;AACA,IAAA,KAAA,CAAM,IAAA,EAAM,SAAS,OAAO,CAAA;AAC5B,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAAA,EACpB;AACF;AAGO,SAAS,WAAA,CAAY,OAAgB,IAAA,EAA8C;AACxF,EAAA,IAAI,EAAE,KAAA,YAAiB,aAAA,CAAA,EAAgB,OAAO,KAAA;AAC9C,EAAA,OAAO,IAAA,KAAS,MAAA,IAAa,KAAA,CAAM,IAAA,KAAS,IAAA;AAC9C;AAGO,SAAS,mBAAA,CACd,OACA,IAAA,EACsC;AACtC,EAAA,IAAI,EAAE,KAAA,YAAiB,iBAAA,CAAA,EAAoB,OAAO,KAAA;AAClD,EAAA,OAAO,IAAA,KAAS,MAAA,IAAa,KAAA,CAAM,IAAA,KAAS,IAAA;AAC9C;;;AC1GO,IAAM,oBAAA,GAAuB;AAQ7B,IAAM,oBAAA,GAAuB;AAa7B,SAAS,SAAS,KAAA,EAAyB;AAChD,EAAA,MAAM,SAAA,GAAqB,KAAA;AAC3B,EAAA,IAAI,OAAO,cAAc,QAAA,EAAU;AACjC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,mBAAA;AAAA,MACA,CAAA,qCAAA,EAAwC,OAAO,SAAS,CAAA,CAAA;AAAA,KAC1D;AAAA,EACF;AACA,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,8BAA8B,CAAA;AAAA,EAC7E;AACA,EAAA,IAAI,SAAA,CAAU,IAAA,EAAK,KAAM,SAAA,EAAW;AAClC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,mBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,SAAA,CAAU,SAAS,oBAAA,EAAsB;AAC3C,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,mBAAA;AAAA,MACA,6BAA6B,oBAAoB,CAAA,YAAA;AAAA,KACnD;AAAA,EACF;AACA,EAAA,IAAI,SAAA,CAAU,QAAA,CAAS,oBAAoB,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,6CAA6C,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO,SAAA;AACT;AAOO,SAAS,WAAW,KAAA,EAAmC;AAC5D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,OACE,KAAA,CAAM,MAAA,GAAS,CAAA,IACf,KAAA,CAAM,IAAA,EAAK,KAAM,KAAA,IACjB,KAAA,CAAM,MAAA,IAAU,oBAAA,IAChB,CAAC,KAAA,CAAM,SAAS,oBAAoB,CAAA;AAExC;AAQO,SAAS,SAAA,CAAU,WAAqB,KAAA,EAAkC;AAC/E,EAAA,OAAO,CAAC,MAAA,EAAkB,GAAG,KAAK,CAAA,CAAE,KAAK,oBAAoB,CAAA;AAC/D;;;ACrFO,IAAM,eAAA,GAAkB,CAAC,QAAA,EAAU,eAAe;AA8BlD,SAAS,kBAAkB,SAAA,EAAoD;AACpF,EAAA,OAAO,UAAU,IAAA,KAAS,QAAA;AAC5B;AAEO,SAAS,wBACd,SAAA,EACoC;AACpC,EAAA,OAAO,UAAU,IAAA,KAAS,eAAA;AAC5B;AASO,SAAS,gBAAgB,SAAA,EAAgC;AAC9D,EAAA,OAAO,SAAA,CAAU,QAAA;AACnB;;;AChCO,IAAM,2BAAA,GACX;AASK,SAAS,qBAAqB,KAAA,EAAiC;AACpE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,IAAI,CAAC,2BAAA,CAA4B,IAAA,CAAK,KAAK,GAAG,OAAO,KAAA;AACrD,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,MAAM,GAAG,OAAO,KAAA;AACrC,EAAA,OAAO,IAAI,IAAA,CAAK,MAAM,CAAA,CAAE,aAAY,KAAM,KAAA;AAC5C;AAWO,SAAS,wBAAA,CAAyB,OAAe,KAAA,EAAuB;AAC7E,EAAA,IAAI,CAAC,oBAAA,CAAqB,KAAK,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,yBAAA;AAAA,MACA,GAAG,KAAK,CAAA,+EAAA,EAAkF,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACjH;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;;;AChDO,IAAM,sBAAA,GAAyB,CAAC,SAAA,EAAW,OAAA,EAAS,SAAS;;;ACA7D,IAAM,iBAAiB,CAAC,MAAA,EAAQ,aAAA,EAAe,WAAA,EAAa,QAAQ,QAAQ;AAW5E,IAAM,iBAAA,GAA2E;AAAA,EACtF,IAAA,EAAM,CAAC,aAAA,EAAe,QAAQ,CAAA;AAAA,EAC9B,WAAA,EAAa,CAAC,MAAA,EAAQ,WAAA,EAAa,QAAQ,CAAA;AAAA,EAC3C,SAAA,EAAW,CAAC,aAAA,EAAe,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAC3C,MAAM,EAAC;AAAA,EACP,QAAQ;AACV;AAEO,SAAS,sBAAA,CAAuB,MAAmB,EAAA,EAA0B;AAClF,EAAA,OAAO,iBAAA,CAAkB,IAAI,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA;AAC5C;;;ACtBO,IAAM,kBAAA,GAAqB,CAAC,eAAA,EAAiB,SAAA,EAAW,QAAQ;;;ACDhE,IAAM,kBAAkB,CAAC,QAAA,EAAU,UAAA,EAAY,SAAA,EAAW,SAAS,SAAS;AAkF5E,IAAM,yBAAA,GAA4B;;;ACpFlC,IAAM,oBAAA,GAAuB;AAc7B,SAAS,YAAY,KAAA,EAA4B;AACtD,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,KAAK,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,sBAAA;AAAA,MACA,2BAA2B,oBAAA,CAAqB,MAAM,cAAc,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KAC3F;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,cAAc,KAAA,EAAsC;AAClE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,oBAAA,CAAqB,KAAK,KAAK,CAAA;AACrE;AAMO,SAAS,eAAA,CAAgB,QAAkB,IAAA,EAA2B;AAC3E,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA;AACvC,EAAA,OAAO,CAAA,QAAA,EAAW,MAAgB,CAAA,gBAAA,EAAmB,GAAG,CAAA,CAAA;AAC1D;AAUO,IAAM,aAAA,GAAgB,CAAC,SAAA,EAAW,WAAA,EAAa,kBAAkB,SAAS;AAI1E,IAAM,wBAAA,GAAkF;AAAA,EAC7F,OAAA,EAAS,CAAC,WAAA,EAAa,gBAAgB,CAAA;AAAA,EACvC,SAAA,EAAW,CAAC,gBAAgB,CAAA;AAAA,EAC5B,cAAA,EAAgB,CAAC,SAAA,EAAW,WAAW,CAAA;AAAA,EACvC,SAAS;AACX;AAEO,SAAS,uBAAA,CAAwB,MAAmB,EAAA,EAA0B;AACnF,EAAA,OAAO,wBAAA,CAAyB,IAAI,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA;AACnD;;;ACAO,IAAM,mBAAA,GAAsB,CAAC,QAAA,EAAU,QAAQ;AAG/C,IAAM,0BAAA,GAA6B;AAAA,EACxC,UAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AAsDO,IAAM,sBAAA,GAAyB,CAAC,QAAA,EAAU,SAAA,EAAW,WAAW,WAAW;AAgB3E,IAAM,mBAAA,GAAsB;AAAA,EACjC,0BAAA;AAAA,EACA,wBAAA;AAAA,EACA,6BAAA;AAAA,EACA,4BAAA;AAAA,EACA;AACF;AAKO,IAAM,yBAAA,GAA4B;AAAA,EACvC,wBAAA,EAA0B,GAAA;AAAA,EAC1B,sBAAA,EAAwB,GAAA;AAAA,EACxB,2BAAA,EAA6B,GAAA;AAAA,EAC7B,0BAAA,EAA4B,GAAA;AAAA,EAC5B,uBAAA,EAAyB;AAC3B;AC7JO,IAAM,gCAAA,GAAmC;AAGzC,IAAM,uBAAA,GAA0B;AAEhC,IAAM,2BAAA,GAA8B,EACxC,MAAA,CAAO;AAAA,EACN,MAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,gCAAgC,CAAA;AAAA;AAAA,EAElD,SAAS,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACtC,YAAA,EAAc,EAAE,KAAA,CAAM,CAAA,CAAE,QAAO,CAAE,KAAA,CAAM,uBAAuB,CAAC;AACjE,CAAC,CAAA,CACA,WAAA,CAAY,CAAC,WAAA,EAAa,GAAA,KAAQ;AACjC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,IAAI,KAAK,WAAA,CAAY,YAAA,CAAa,SAAQ,EAAG;AAC9D,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,EAAG;AAClB,MAAA,GAAA,CAAI,QAAA,CAAS;AAAA,QACX,IAAA,EAAM,QAAA;AAAA,QACN,IAAA,EAAM,CAAC,cAAA,EAAgB,KAAK,CAAA;AAAA,QAC5B,OAAA,EAAS,CAAA,qBAAA,EAAwB,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA,CAAA;AAAA,OACtD,CAAA;AAAA,IACH;AACA,IAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AAAA,EACf;AACF,CAAC;AASI,SAAS,2BAA2B,KAAA,EAAuC;AAChF,EAAA,MAAM,MAAA,GAAS,2BAAA,CAA4B,SAAA,CAAU,KAAK,CAAA;AAC1D,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gCAAA;AAAA,MACA,CAAA,gCAAA,EAAmC,OAAO,KAAA,CAAM,MAAA,CAC7C,IAAI,CAAC,KAAA,KAAU,GAAG,KAAA,CAAM,IAAA,CAAK,KAAK,GAAG,CAAA,IAAK,QAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA,CACtE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MACb,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA;AAAM,KACxB;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,IAAA;AAChB;AAEO,SAAS,aAAA,CACd,aACA,UAAA,EACS;AACT,EAAA,OAAO,WAAA,CAAY,YAAA,CAAa,QAAA,CAAS,UAAU,CAAA;AACrD;AASO,SAAS,gBAAA,CACd,aACA,UAAA,EACM;AACN,EAAA,IAAI,CAAC,aAAA,CAAc,WAAA,EAAa,UAAU,CAAA,EAAG;AAC3C,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,wBAAA;AAAA,MACA,CAAA,WAAA,EAAc,IAAA,CAAK,SAAA,CAAU,UAAU,CAAC,CAAA,oCAAA;AAAA,KAC1C;AAAA,EACF;AACF;;;AC9BO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,SAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;;;ACzCO,IAAM,iBAAA,GAAwE;AAAA,EACnF,SAAS,CAAC,QAAA,EAAU,WAAA,EAAa,eAAA,EAAiB,cAAc,gBAAgB,CAAA;AAAA,EAChF,OAAO,CAAC,QAAA,EAAU,OAAO,MAAA,EAAQ,OAAA,EAAS,WAAW,cAAc,CAAA;AAAA,EACnE,KAAA,EAAO,CAAC,eAAA,EAAiB,eAAA,EAAiB,aAAa,cAAc,CAAA;AAAA,EACrE,QAAA,EAAU,CAAC,SAAA,EAAW,MAAA,EAAQ,MAAM,CAAA;AAAA,EACpC,QAAA,EAAU,CAAC,QAAA,EAAU,MAAM,CAAA;AAAA,EAC3B,OAAA,EAAS;AAAA,IACP,aAAA;AAAA,IACA,QAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA;AAAA,IACA,iBAAA;AAAA,IACA,mBAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,KAAA,EAAO;AAAA,IACL,iBAAA;AAAA,IACA,kBAAA;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,iBAAA;AAAA,IACA,SAAA;AAAA,IACA,qBAAA;AAAA,IACA,kBAAA;AAAA,IACA,oBAAA;AAAA,IACA;AAAA;AAEJ;AAGO,IAAM,oBAAA,GAAgE;AAAA,EAC3E,OAAA,EAAS,cAAA;AAAA,EACT,KAAA,EAAO,YAAA;AAAA,EACP,KAAA,EAAO,YAAA;AAAA,EACP,QAAA,EAAU,eAAA;AAAA,EACV,QAAA,EAAU,eAAA;AAAA,EACV,OAAA,EAAS,aAAA;AAAA,EACT,KAAA,EAAO;AACT;AC/BO,IAAM,sBAAA,GAAyB;AAO/B,IAAM,0BAAA,GAA6B;AAEnC,IAAM,oBAAA,GAAuB;AAG7B,IAAM,uBAAA,GAA0B,CAAC,SAAS;AAGjD,IAAM,iBAAA,GAAoB,kBAAA;AAC1B,IAAM,mBAAA,GAAsB,UAAA;AAU5B,SAAS,uBAAA,CAAwB,MAAc,MAAA,EAA+B;AAC5E,EAAA,OAAO,IAAI,aAAA;AAAA,IACT,+BAAA;AAAA,IACA,CAAA,oBAAA,EAAuB,IAAI,CAAA,EAAA,EAAK,MAAM,CAAA;AAAA,GACxC;AACF;AAEA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,MAAM,SAAA,GAAqB,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA;AACtD,EAAA,OAAO,SAAA,KAAc,MAAA,CAAO,SAAA,IAAa,SAAA,KAAc,IAAA;AACzD;AAEA,SAAS,iBAAA,CAAkB,KAAA,EAAgB,IAAA,EAAc,IAAA,EAA2B;AAClF,EAAA,IAAI,KAAA,KAAU,MAAM,OAAO,MAAA;AAE3B,EAAA,QAAQ,OAAO,KAAA;AAAO,IACpB,KAAK,SAAA;AACH,MAAA,OAAO,QAAQ,MAAA,GAAS,OAAA;AAAA,IAC1B,KAAK,QAAA;AAGH,MAAA,OAAO,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,IAC7B,KAAK,QAAA,EAAU;AACb,MAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA,EAAG;AAChC,QAAA,MAAM,uBAAA;AAAA,UACJ,IAAA;AAAA,UACA,CAAA,iDAAA,EAAoD,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,SACnE;AAAA,MACF;AAEA,MAAA,OAAO,MAAA,CAAO,KAAA,KAAU,CAAA,GAAI,CAAA,GAAI,KAAK,CAAA;AAAA,IACvC;AAAA,IACA,KAAK,WAAA;AACH,MAAA,MAAM,uBAAA,CAAwB,MAAM,iCAAiC,CAAA;AAAA,IACvE,KAAK,QAAA;AACH,MAAA,MAAM,uBAAA,CAAwB,MAAM,2BAA2B,CAAA;AAAA,IACjE,KAAK,UAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,MAAM,uBAAA,CAAwB,IAAA,EAAM,CAAA,EAAG,OAAO,KAAK,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC1E,KAAK,QAAA;AACH,MAAA;AAAA,IACF;AACE,MAAA,MAAM,uBAAA,CAAwB,IAAA,EAAM,CAAA,iBAAA,EAAoB,OAAO,KAAK,CAAA,CAAE,CAAA;AAAA;AAG1E,EAAA,MAAM,WAAA,GAAc,KAAA;AACpB,EAAA,IAAI,IAAA,CAAK,GAAA,CAAI,WAAW,CAAA,EAAG;AACzB,IAAA,MAAM,uBAAA,CAAwB,MAAM,oBAAoB,CAAA;AAAA,EAC1D;AACA,EAAA,IAAA,CAAK,IAAI,WAAW,CAAA;AACpB,EAAA,IAAI;AACF,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AAC9B,MAAA,MAAMA,SAAQ,WAAA,CAAY,GAAA;AAAA,QAAI,CAAC,KAAA,EAAO,KAAA,KACpC,iBAAA,CAAkB,KAAA,EAAO,GAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,CAAA,EAAK,IAAI;AAAA,OACpD;AACA,MAAA,OAAO,CAAA,CAAA,EAAIA,MAAAA,CAAM,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,IAC5B;AACA,IAAA,IAAI,CAAC,aAAA,CAAc,WAAW,CAAA,EAAG;AAC/B,MAAA,MAAM,uBAAA;AAAA,QACJ,IAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAGA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,WAAW,EAAE,IAAA,EAAK;AAC3C,IAAA,MAAM,MAAA,GAAS,WAAA;AACf,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ;AAC9B,MAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,GAAG,CAAA;AACrC,MAAA,MAAM,YAAA,GAAe,iBAAA,CAAkB,MAAA,CAAO,GAAG,CAAA,EAAG,GAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA;AAC1E,MAAA,OAAO,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AAAA,IACtC,CAAC,CAAA;AACD,IAAA,OAAO,CAAA,CAAA,EAAI,KAAA,CAAM,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,EAC5B,CAAA,SAAE;AACA,IAAA,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,EACzB;AACF;AAOO,SAAS,iBAAiB,KAAA,EAA0B;AACzD,EAAA,OAAO,iBAAA,CAAkB,KAAA,EAAO,QAAA,kBAAU,IAAI,KAAK,CAAA;AACrD;AAGO,SAAS,sBAAsB,KAAA,EAA8B;AAClE,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,gBAAA,CAAiB,KAAK,CAAC,CAAA;AACzD;AAcO,IAAM,gCAAA,GAAmCC,EAC7C,YAAA,CAAa;AAAA,EACZ,OAAA,EAASA,CAAAA,CAAE,OAAA,CAAQ,oBAAoB,CAAA;AAAA,EACvC,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC3B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE1B,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEvB,UAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA;AAAA,EAEvC,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE3B,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE3B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,QAAQA,CAAAA,CAAE,MAAA,GAAS,KAAA,CAAM,mBAAmB,EAAE,QAAA,EAAS;AAAA,EACvD,MAAMA,CAAAA,CAAE,MAAA,GAAS,UAAA,CAAW,GAAG,EAAE,QAAA,EAAS;AAAA,EAC1C,aAAaA,CAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACxC,UAAA,EAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,MAAM,oBAAoB,CAAA;AAAA;AAAA,EAEjD,UAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACvC,QAAA,EAAUA,CAAAA,CAAE,GAAA,CAAI,QAAA,EAAS;AAAA,EACzB,SAAA,EAAWA,CAAAA,CAAE,GAAA,CAAI,QAAA,GAAW,QAAA,EAAS;AAAA,EACrC,OAAOA,CAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA;AAC3B,CAAC,CAAA,CACA,WAAA,CAAY,CAAC,MAAA,EAAQ,GAAA,KAAQ;AAC5B,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,MAAA,KAAW,MAAA,IAAa,OAAO,IAAA,KAAS,MAAA;AACtE,EAAA,MAAM,cAAA,GAAiB,OAAO,WAAA,KAAgB,MAAA;AAC9C,EAAA,IAAI,mBAAmB,cAAA,EAAgB;AACrC,IAAA,GAAA,CAAI,QAAA,CAAS;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,OAAA,EACE;AAAA,KACH,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAAC,cAAA,KAAmB,MAAA,CAAO,WAAW,MAAA,IAAa,MAAA,CAAO,SAAS,MAAA,CAAA,EAAY;AACjF,IAAA,GAAA,CAAI,QAAA,CAAS;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH;AACF,CAAC;AAII,IAAM,2BAAA,GAA8BA,EAAE,YAAA,CAAa;AAAA,EACxD,MAAA,EAAQA,CAAAA,CAAE,OAAA,CAAQ,sBAAsB,CAAA;AAAA,EACxC,SAAA,EAAWA,CAAAA,CAAE,IAAA,CAAK,uBAAuB,CAAA;AAAA,EACzC,SAAA,EAAW,gCAAA;AAAA;AAAA,EAEX,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,MAAM,iBAAiB;AAC/C,CAAC;AASM,SAAS,yBAAyB,KAAA,EAAuC;AAC9E,EAAA,MAAM,MAAA,GAAS,2BAAA,CAA4B,SAAA,CAAU,KAAK,CAAA;AAC1D,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,wBAAA;AAAA,MACA,CAAA,+BAAA,EAAkC,OAAO,KAAA,CAAM,MAAA,CAC5C,IAAI,CAAC,KAAA,KAAU,GAAG,KAAA,CAAM,IAAA,CAAK,KAAK,GAAG,CAAA,IAAK,QAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA,CACtE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MACb,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA;AAAM,KACxB;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,IAAA;AAChB;AAWO,SAAS,2BAA2B,MAAA,EAAgD;AACzF,EAAA,MAAM,SAAA,GAAuC;AAAA,IAC3C,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,YAAY,MAAA,CAAO,UAAA;AAAA,IACnB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,UAAU,MAAA,CAAO;AAAA,GACnB;AACA,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,EAAW,SAAA,CAAU,QAAQ,IAAI,MAAA,CAAO,MAAA;AAC9D,EAAA,IAAI,OAAO,IAAA,KAAS,MAAA,EAAW,SAAA,CAAU,MAAM,IAAI,MAAA,CAAO,IAAA;AAC1D,EAAA,IAAI,OAAO,WAAA,KAAgB,MAAA,EAAW,SAAA,CAAU,aAAa,IAAI,MAAA,CAAO,WAAA;AACxE,EAAA,IAAI,OAAO,SAAA,KAAc,MAAA,EAAW,SAAA,CAAU,WAAW,IAAI,MAAA,CAAO,SAAA;AACpE,EAAA,IAAI,OAAO,KAAA,KAAU,MAAA,EAAW,SAAA,CAAU,OAAO,IAAI,MAAA,CAAO,KAAA;AAC5D,EAAA,OAAO,SAAA;AACT;AAGO,SAAS,yBAAyB,MAAA,EAA4C;AACnF,EAAA,OAAO,gBAAA,CAAiB,0BAAA,CAA2B,MAAM,CAAC,CAAA;AAC5D;AAQO,SAAS,wBAAwB,MAAA,EAAgD;AACtF,EAAA,OAAO,IAAI,aAAY,CAAE,MAAA;AAAA,IACvB,0BAAA,GAA6B,yBAAyB,MAAM;AAAA,GAC9D;AACF;;;ACtQA,SAAS,UAAU,KAAA,EAAqB;AACtC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,kBAAA;AAAA,MACA,CAAA,6DAAA,EAAgE,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAAA,KAC/E;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,iBAAA,EAAiC;AAC9D,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,iBAAiB,CAAA,IAAK,oBAAoB,CAAA,EAAG;AAChE,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,kBAAA;AAAA,MACA,CAAA,8EAAA,EAAiF,MAAA,CAAO,iBAAiB,CAAC,CAAA,CAAA;AAAA,KAC5G;AAAA,EACF;AACF;AAEO,IAAM,wBAAN,MAAqD;AAAA,EACjD,MAAA,uBAAa,GAAA,EAA0B;AAAA,EACvC,MAAA;AAAA,EAET,YAAY,KAAA,EAAc;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAkB,KAAA,EAAiD;AAC/E,IAAA,SAAA,CAAU,MAAM,KAAK,CAAA;AACrB,IAAA,qBAAA,CAAsB,MAAM,iBAAiB,CAAA;AAC7C,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI;AAC5B,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,QAAQ,CAAA;AAC5C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACpC,IAAA,IACE,aAAa,MAAA,IACb,GAAA,CAAI,WAAA,EAAY,GAAI,SAAS,SAAA,IAC7B,GAAA,CAAI,OAAA,EAAQ,GAAI,KAAK,KAAA,CAAM,QAAA,CAAS,UAAU,CAAA,GAAI,MAAM,iBAAA,EACxD;AACA,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,mBAAA;AAAA,QACA,CAAA,aAAA,EAAgB,MAAM,QAAQ,CAAA,kEAAA;AAAA,OAChC;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAqB;AAAA,MACzB,QAAA,EAAU,MAAA;AAAA,MACV,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,GAAI,MAAM,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAO;AAAA,MAC7D,UAAA,EAAY,IAAI,WAAA,EAAY;AAAA,MAC5B,SAAA,EAAW,IAAI,IAAA,CAAK,GAAA,CAAI,SAAQ,GAAI,KAAA,CAAM,KAAK,CAAA,CAAE,WAAA;AAAY,KAC/D;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,IAAA,CAAK,MAAA,EAAkB,QAAA,EAAqD;AAChF,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,QAAQ,CAAA;AACtC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,IAAA,KAAS,QAAW,OAAO,MAAA;AAC/B,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,SAAS,CAAA,EAAG;AACnC,MAAA,IAAA,CAAK,MAAA,CAAO,OAAO,GAAG,CAAA;AACtB,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,MAAA,EAAoD;AAC7D,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,MAAA,EAAQ,EAAE,CAAA;AACnC,IAAA,MAAM,OAAuB,EAAC;AAC9B,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,CAAA,IAAK,CAAC,GAAG,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,CAAA,EAAG;AACpD,MAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,MAAA,IAAI,IAAA,CAAK,UAAA,CAAW,IAAA,CAAK,SAAS,CAAA,EAAG;AACnC,QAAA,IAAA,CAAK,MAAA,CAAO,OAAO,GAAG,CAAA;AACtB,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AAAA,IAChB;AACA,IAAA,IAAA,CAAK,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAU,KAAK,QAAA,CAAS,aAAA,CAAc,KAAA,CAAM,QAAQ,CAAC,CAAA;AACtE,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,WAAW,SAAA,EAA4B;AACrC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,aAAY,IAAK,SAAA;AAAA,EAC5C;AACF;AAEO,IAAM,wBAAN,MAAqD;AAAA,EACjD,MAAA,uBAAa,GAAA,EAA0B;AAAA,EACvC,MAAA;AAAA,EAET,YAAY,KAAA,EAAc;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAEA,MAAM,MAAA,CAAO,MAAA,EAAkB,KAAA,EAAmD;AAChF,IAAA,SAAA,CAAU,MAAM,KAAK,CAAA;AACrB,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,IAAY,yBAAA;AACnC,IAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,QAAQ,CAAA,IAAK,YAAY,CAAA,EAAG;AACpD,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,2BAAA;AAAA,QACA,CAAA,uDAAA,EAA0D,MAAA,CAAO,QAAQ,CAAC,CAAA,CAAA;AAAA,OAC5E;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAA,KAAW,CAAA,IAAK,CAAC,MAAA,CAAO,aAAA,CAAc,KAAA,CAAM,OAAO,CAAA,IAAK,KAAA,CAAM,OAAA,GAAU,CAAA,EAAG;AAC3F,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,wBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI;AAC5B,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,MAAM,CAAA;AAC1C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACpC,IAAA,MAAM,IAAA,GACJ,aAAa,MAAA,IAAa,GAAA,CAAI,aAAY,GAAI,QAAA,CAAS,YAAY,QAAA,GAAW,MAAA;AAEhF,IAAA,MAAM,QAAA,GAA4B,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY;AAAA,MAC/D,EAAA,EAAI,IAAI,WAAA,EAAY;AAAA,MACpB;AAAA,KACF,CAAE,CAAA;AACF,IAAA,MAAM,OAAA,GAAU,CAAC,GAAI,IAAA,EAAM,WAAW,EAAC,EAAI,GAAG,QAAQ,CAAA;AACtD,IAAA,IAAI,OAAA,GAAA,CAAW,IAAA,EAAM,OAAA,IAAW,CAAA,IAAK,KAAA,CAAM,OAAA;AAC3C,IAAA,OAAO,OAAA,CAAQ,SAAS,QAAA,EAAU;AAChC,MAAA,OAAA,CAAQ,KAAA,EAAM;AAGd,MAAA,OAAA,IAAW,CAAA;AAAA,IACb;AAEA,IAAA,MAAM,IAAA,GAAqB;AAAA,MACzB,QAAA,EAAU,MAAA;AAAA,MACV,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,OAAA;AAAA,MACA,OAAA;AAAA,MACA,QAAA;AAAA,MACA,SAAA,EAAW,IAAI,IAAA,CAAK,GAAA,CAAI,SAAQ,GAAI,KAAA,CAAM,KAAK,CAAA,CAAE,WAAA;AAAY,KAC/D;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,IAAA,CAAK,MAAA,EAAkB,MAAA,EAAmD;AAC9E,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAA;AACpC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,IAAA,KAAS,QAAW,OAAO,MAAA;AAC/B,IAAA,IAAI,KAAK,MAAA,CAAO,GAAA,GAAM,WAAA,EAAY,IAAK,KAAK,SAAA,EAAW;AACrD,MAAA,IAAA,CAAK,MAAA,CAAO,OAAO,GAAG,CAAA;AACtB,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AChJA,IAAM,kBAAA,GAAqB,EAAA;AAEpB,IAAM,qBAAN,MAA+C;AAAA,EAC3C,MAAA,uBAAa,GAAA,EAAuB;AAAA,EACpC,YAAA,uBAAmB,GAAA,EAAoB;AAAA,EACvC,MAAA;AAAA,EAET,YAAY,KAAA,EAAc;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAEA,MAAM,MAAA,CAAO,MAAA,EAAkB,KAAA,EAA2C;AACxE,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,MAAM,CAAA;AAC1C,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,EAAG;AACxB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,mBAAA;AAAA,QACA,CAAA,WAAA,EAAc,MAAM,MAAM,CAAA,+BAAA;AAAA,OAC5B;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,IAAA,GAAkB;AAAA,MACtB,QAAA,EAAU,MAAA;AAAA,MACV,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,SAAS,KAAA,CAAM,OAAA;AAAA,MACf,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,MAAA,EAAQ,MAAM,MAAA,IAAU,MAAA;AAAA,MACxB,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAAA,MAC9B,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACb;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,GAAA,CAAI,MAAA,EAAkB,MAAA,EAAgD;AAC1E,IAAA,OAAO,KAAK,MAAA,CAAO,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,EAClD;AAAA,EAEA,MAAM,IAAA,CAAK,MAAA,EAAkB,KAAA,EAA2C;AACtE,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,IAAY,CAAA;AACnC,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,kBAAA;AAC7B,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,MAAA,EAAQ,EAAE,CAAA;AACnC,IAAA,MAAM,UAAuB,EAAC;AAC9B,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,KAAK,IAAA,CAAK,MAAA,CAAO,SAAQ,EAAG;AAC/C,MAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,MAAA,IAAI,IAAA,CAAK,YAAY,QAAA,EAAU;AAC/B,MAAA,IAAI,MAAM,OAAA,KAAY,MAAA,IAAa,IAAA,CAAK,OAAA,KAAY,MAAM,OAAA,EAAS;AACnE,MAAA,IAAI,MAAM,MAAA,KAAW,MAAA,IAAa,IAAA,CAAK,MAAA,KAAW,MAAM,MAAA,EAAQ;AAChE,MAAA,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,IACnB;AACA,IAAA,OAAA,CAAQ,KAAK,CAAC,IAAA,EAAM,UAAU,IAAA,CAAK,QAAA,GAAW,MAAM,QAAQ,CAAA;AAC5D,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AACnC,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,IAAA;AAAA,MACP,OAAA,EAAS,IAAA,CAAK,EAAA,CAAG,EAAE,GAAG,QAAA,IAAY,QAAA;AAAA,MAClC,OAAA,EAAS,OAAA,CAAQ,MAAA,GAAS,IAAA,CAAK;AAAA,KACjC;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,MAAA,EAAkB,KAAA,EAA4C;AACxE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,MAAM,MAAM,CAAA;AAC/C,IAAA,MAAM,cAAA,GAAiB,MAAM,cAAA,IAAkB,MAAA;AAE/C,IAAA,IAAI,IAAA,CAAK,aAAa,MAAA,EAAW;AAC/B,MAAA,IAAI,IAAA,CAAK,QAAA,CAAS,QAAA,KAAa,KAAA,CAAM,QAAA,EAAU;AAM7C,QAAA,IAAI,MAAM,cAAA,KAAmB,MAAA,IAAa,IAAA,CAAK,MAAA,KAAW,MAAM,cAAA,EAAgB;AAC9E,UAAA,MAAM,IAAI,iBAAA;AAAA,YACR,uBAAA;AAAA,YACA,CAAA,WAAA,EAAc,MAAM,MAAM,CAAA,IAAA,EAAO,KAAK,MAAM,CAAA,MAAA,EAAS,MAAM,cAAc,CAAA,CAAA,CAAA;AAAA,YACzE,IAAA;AAAA,YACA,KAAK,IAAA;AAAK,WACZ;AAAA,QACF;AACA,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,sBAAA;AAAA,QACA,cAAc,KAAA,CAAM,MAAM,CAAA,YAAA,EAAe,IAAA,CAAK,SAAS,QAAQ,CAAA,CAAA,CAAA;AAAA,QAC/D,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,WAAW,cAAA,EAAgB;AAClC,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,uBAAA;AAAA,QACA,cAAc,KAAA,CAAM,MAAM,OAAO,IAAA,CAAK,MAAM,SAAS,cAAc,CAAA,CAAA,CAAA;AAAA,QACnE,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,IAAU,IAAA,CAAK,WAAW,aAAA,EAAe;AAC3D,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,0BAAA;AAAA,QACA,CAAA,WAAA,EAAc,KAAA,CAAM,MAAM,CAAA,wBAAA,EAA2B,KAAK,MAAM,CAAA,CAAA,CAAA;AAAA,QAChE,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AAEA,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,OAAA,GAAqB;AAAA,MACzB,GAAG,IAAA;AAAA,MACH,MAAA,EAAQ,IAAA,CAAK,MAAA,KAAW,MAAA,GAAS,gBAAgB,IAAA,CAAK,MAAA;AAAA,MACtD,UAAU,EAAE,QAAA,EAAU,KAAA,CAAM,QAAA,EAAU,WAAW,GAAA,EAAI;AAAA,MACrD,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAAA,MAC9B,SAAA,EAAW;AAAA,KACb;AACA,IAAA,IAAA,CAAK,OAAO,GAAA,CAAI,SAAA,CAAU,QAAQ,KAAA,CAAM,MAAM,GAAG,OAAO,CAAA;AACxD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,OAAA,CAAQ,MAAA,EAAkB,KAAA,EAA8C;AAC5E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,MAAM,MAAM,CAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,aAAa,MAAA,EAAW;AAC/B,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,gBAAA;AAAA,QACA,CAAA,WAAA,EAAc,MAAM,MAAM,CAAA,uBAAA;AAAA,OAC5B;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,QAAA,CAAS,QAAA,KAAa,KAAA,CAAM,QAAA,EAAU;AAC7C,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,sBAAA;AAAA,QACA,CAAA,WAAA,EAAc,MAAM,MAAM,CAAA,YAAA,EAAe,KAAK,QAAA,CAAS,QAAQ,CAAA,MAAA,EAAS,KAAA,CAAM,QAAQ,CAAA,CAAA,CAAA;AAAA,QACtF,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,QAAA,GAAsB;AAAA,MAC1B,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,MAAA,EAAQ,IAAA,CAAK,MAAA,KAAW,aAAA,GAAgB,SAAS,IAAA,CAAK,MAAA;AAAA,MACtD,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAAA,MAC9B,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,SAAA,EAAW;AAAA,KACb;AACA,IAAA,IAAA,CAAK,OAAO,GAAA,CAAI,SAAA,CAAU,QAAQ,KAAA,CAAM,MAAM,GAAG,QAAQ,CAAA;AACzD,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,MAAM,YAAA,CAAa,MAAA,EAAkB,KAAA,EAAmD;AACtF,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,MAAM,MAAM,CAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,KAAA,CAAM,cAAA,EAAgB;AACxC,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,uBAAA;AAAA,QACA,CAAA,WAAA,EAAc,MAAM,MAAM,CAAA,IAAA,EAAO,KAAK,MAAM,CAAA,MAAA,EAAS,MAAM,cAAc,CAAA,CAAA,CAAA;AAAA,QACzE,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,IAAI,MAAM,QAAA,KAAa,MAAA,IAAa,KAAK,QAAA,EAAU,QAAA,KAAa,MAAM,QAAA,EAAU;AAC9E,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,sBAAA;AAAA,QACA,CAAA,WAAA,EAAc,KAAA,CAAM,MAAM,CAAA,gBAAA,EAAmB,MAAM,QAAQ,CAAA,CAAA,CAAA;AAAA,QAC3D,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,CAAM,cAAA,EAAgB,KAAA,CAAM,MAAM,CAAA,EAAG;AAC/D,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,0BAAA;AAAA,QACA,CAAA,EAAG,KAAA,CAAM,cAAc,CAAA,IAAA,EAAO,MAAM,MAAM,CAAA,iCAAA,CAAA;AAAA,QAC1C,IAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,OAAA,GAAqB;AAAA,MACzB,GAAG,IAAA;AAAA,MACH,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAAA,MAC9B,SAAA,EAAW;AAAA,KACb;AACA,IAAA,IAAA,CAAK,OAAO,GAAA,CAAI,SAAA,CAAU,QAAQ,KAAA,CAAM,MAAM,GAAG,OAAO,CAAA;AACxD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,QAAA,CAAS,QAAkB,MAAA,EAA2B;AACpD,IAAA,MAAM,OAAO,IAAA,CAAK,MAAA,CAAO,IAAI,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AACtD,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,sBAAA;AAAA,QACA,cAAc,MAAM,CAAA,+BAAA;AAAA,OACtB;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,SAAS,MAAA,EAA0B;AACjC,IAAA,MAAM,QAAQ,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,MAAM,KAAK,CAAA,IAAK,CAAA;AACpD,IAAA,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAClC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,IAAA,GAAe;AACb,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,WAAA,EAAY;AAAA,EACvC;AACF;;;AChNA,IAAM,kBAAA,GAAqB,EAAA;AAUpB,IAAM,uBAAN,MAAmD;AAAA,EAC/C,QAAA,uBAAe,GAAA,EAA2B;AAAA,EAC1C,MAAA;AAAA,EAET,YAAY,KAAA,EAAc;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAEA,MAAM,MAAA,CAAO,MAAA,EAAkB,KAAA,EAAoD;AACjF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,MAAM,QAAQ,CAAA;AAClD,IAAA,MAAM,QAAA,GAAW,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,MAAM,SAAS,CAAA;AACvD,IAAA,IAAI,QAAA,KAAa,QAAW,OAAO,QAAA;AAEnC,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC9B,QAAA,EAAU,MAAA;AAAA,MACV,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,KAAK,MAAA,CAAO,OAAA;AAAA,MACZ,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,KAAA,EAAO,SAAA;AAAA,MACP,UAAA,EAAY,KAAK,IAAA;AAAK,KACxB;AACA,IAAA,MAAA,CAAO,OAAA,IAAW,CAAA;AAClB,IAAA,MAAA,CAAO,QAAA,CAAS,KAAK,OAAO,CAAA;AAC5B,IAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,CAAA;AACjD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,CAAU,MAAA,EAAkB,KAAA,EAA+C;AAC/E,IAAA,MAAM,MAAA,GAAS,KAAK,QAAA,CAAS,GAAA,CAAI,UAAU,MAAA,EAAQ,KAAA,CAAM,QAAQ,CAAC,CAAA;AAClE,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,kBAAA;AAC7B,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,OAAO,EAAE,UAAU,EAAC,EAAG,SAAS,KAAA,CAAM,QAAA,EAAU,SAAS,KAAA,EAAM;AAAA,IACjE;AACA,IAAA,MAAM,OAAA,GAAU,OAAO,QAAA,CACpB,MAAA,CAAO,CAAC,OAAA,KAAY,OAAA,CAAQ,UAAU,SAAA,IAAa,OAAA,CAAQ,MAAM,KAAA,CAAM,QAAQ,EAC/E,IAAA,CAAK,CAAC,MAAM,KAAA,KAAU,IAAA,CAAK,GAAA,GAAM,KAAA,CAAM,GAAG,CAAA;AAC7C,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AACnC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,EAAA,CAAG,EAAE,CAAA;AACvB,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,IAAA;AAAA;AAAA;AAAA,MAGV,OAAA,EAAS,IAAA,EAAM,GAAA,IAAO,KAAA,CAAM,QAAA;AAAA,MAC5B,OAAA,EAAS,OAAA,CAAQ,MAAA,GAAS,IAAA,CAAK;AAAA,KACjC;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CACJ,MAAA,EACA,KAAA,EAC6B;AAC7B,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,MAAM,QAAQ,CAAA;AAClD,IAAA,IAAI,KAAA,CAAM,QAAA,GAAW,MAAA,CAAO,QAAA,EAAU;AACpC,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,2BAAA;AAAA,QACA,CAAA,kBAAA,EAAqB,MAAM,QAAQ,CAAA,OAAA,EAAU,OAAO,QAAQ,CAAA,8BAAA,EAAiC,MAAM,QAAQ,CAAA,CAAA,CAAA;AAAA,QAC3G,IAAA,CAAK,YAAA,CAAa,MAAA,EAAQ,KAAA,CAAM,UAAU,MAAM,CAAA;AAAA,QAChD,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,MAAA,CAAO,WAAW,KAAA,CAAM,QAAA;AACxB,IAAA,MAAA,CAAO,eAAA,GAAkB,KAAK,IAAA,EAAK;AACnC,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,MAAA,CAAO,QAAA,CAAS,SAAQ,EAAG;AACxD,MAAA,IAAI,QAAQ,KAAA,KAAU,SAAA,IAAa,OAAA,CAAQ,GAAA,IAAO,MAAM,QAAA,EAAU;AAChE,QAAA,MAAA,CAAO,SAAS,KAAK,CAAA,GAAI,EAAE,GAAG,OAAA,EAAS,OAAO,OAAA,EAAQ;AACtD,QAAA,MAAA,CAAO,YAAY,GAAA,CAAI,OAAA,CAAQ,WAAW,MAAA,CAAO,QAAA,CAAS,KAAK,CAAE,CAAA;AAAA,MACnE;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,MAAA,EAAQ,KAAA,CAAM,UAAU,MAAM,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,UAAA,CAAW,MAAA,EAAkB,QAAA,EAA+C;AAChF,IAAA,MAAM,SAAS,IAAA,CAAK,QAAA,CAAS,IAAI,SAAA,CAAU,MAAA,EAAQ,QAAQ,CAAC,CAAA;AAC5D,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,OAAO,EAAE,UAAU,MAAA,EAAQ,QAAA,EAAU,UAAU,CAAA,EAAG,SAAA,EAAW,IAAA,CAAK,IAAA,EAAK,EAAE;AAAA,IAC3E;AACA,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,MAAA,EAAQ,QAAA,EAAU,MAAM,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,cAAA,CACJ,MAAA,EACA,KAAA,EACiC;AAIjC,IAAA,wBAAA,CAAyB,KAAA,CAAM,aAAa,aAAa,CAAA;AACzD,IAAA,wBAAA,CAAyB,KAAA,CAAM,qBAAqB,qBAAqB,CAAA;AAEzE,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,IAAI,YAAA,GAAe,CAAA;AACnB,IAAA,IAAI,aAAA,GAAgB,EAAA;AAEpB,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,MAAM,KAAK,IAAA,CAAK,QAAA,CAAS,SAAQ,EAAG;AACnD,MAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,MAAA,EAAQ,EAAE,CAAC,CAAA,EAAG;AAC5C,MAAA,IAAI,KAAA,CAAM,aAAa,MAAA,IAAa,GAAA,KAAQ,UAAU,MAAA,EAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG;AAE/E,MAAA,KAAA,IAAS,KAAA,GAAQ,OAAO,QAAA,CAAS,MAAA,GAAS,GAAG,KAAA,IAAS,CAAA,EAAG,SAAS,CAAA,EAAG;AACnE,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA;AACrC,QAAA,IAAI,QAAQ,KAAA,KAAU,OAAA,IAAW,OAAA,CAAQ,UAAA,GAAa,MAAM,WAAA,EAAa;AACvE,UAAA,MAAA,CAAO,QAAA,CAAS,MAAA,CAAO,KAAA,EAAO,CAAC,CAAA;AAC/B,UAAA,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA;AAC3C,UAAA,YAAA,IAAgB,CAAA;AAChB,UAAA,aAAA,IAAiB,OAAA,CAAQ,QAAA;AACzB,UAAA;AAAA,QACF;AACA,QAAA,IAAI,QAAQ,KAAA,KAAU,SAAA,IAAa,OAAA,CAAQ,UAAA,GAAa,MAAM,mBAAA,EAAqB;AAGjF,UAAA,MAAM,OAAA,GAA0B,EAAE,GAAG,OAAA,EAAS,OAAO,SAAA,EAAU;AAC/D,UAAA,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,GAAI,OAAA;AACzB,UAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,CAAA;AACjD,UAAA,YAAA,IAAgB,CAAA;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,YAAA,EAAc,YAAA,EAAc,aAAA,EAAc;AAAA,EACrD;AAAA,EAEA,OAAA,CAAQ,QAAkB,QAAA,EAAiC;AACzD,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,aAAA,CAAc,2BAAA,EAA6B,8BAA8B,CAAA;AAAA,IACrF;AACA,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,QAAQ,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AACtC,IAAA,IAAI,QAAA,KAAa,QAAW,OAAO,QAAA;AACnC,IAAA,MAAM,OAAA,GAAyB;AAAA,MAC7B,OAAA,EAAS,CAAA;AAAA,MACT,QAAA,EAAU,CAAA;AAAA,MACV,eAAA,EAAiB,KAAK,IAAA,EAAK;AAAA,MAC3B,UAAU,EAAC;AAAA,MACX,WAAA,sBAAiB,GAAA;AAAI,KACvB;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAC9B,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,YAAA,CACE,MAAA,EACA,QAAA,EACA,MAAA,EACoB;AACpB,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,MAAA;AAAA,MACV,QAAA;AAAA,MACA,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,WAAW,MAAA,CAAO;AAAA,KACpB;AAAA,EACF;AAAA,EAEA,IAAA,GAAe;AACb,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,WAAA,EAAY;AAAA,EACvC;AACF;;;ACtKA,IAAMC,mBAAAA,GAAqB,GAAA;AAEpB,IAAM,sBAAN,MAAiD;AAAA,EAC7C,SAAA,uBAAgB,GAAA,EAAiC;AAAA,EACjD,WAAA,uBAAkB,GAAA,EAA6B;AAAA,EAC/C,MAAA;AAAA,EAET,YAAY,KAAA,EAAc;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAEA,MAAM,WAAA,CACJ,MAAA,EACA,KAAA,EAC8B;AAC9B,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,IAAI,CAAA;AACxC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AACvC,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,QAAA,CAAS,KAAA,KAAU,WAAW,OAAO,QAAA;AAEnE,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,KAAA,GAA6B;AAAA,MACjC,QAAA,EAAU,MAAA;AAAA,MACV,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,KAAA,EAAO,SAAA;AAAA,MACP,QAAA,EAAU,CAAA;AAAA,MACV,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACb;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,MAAA,CAAO,MAAA,EAAkB,KAAA,EAAwD;AACrF,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAI,CAAA;AAC9C,IAAA,IACE,MAAM,QAAA,KAAa,KAAA,CAAM,oBACzB,KAAA,CAAM,WAAA,KAAgB,MAAM,mBAAA,EAC5B;AACA,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,4BAAA;AAAA,QACA,CAAA,gBAAA,EAAmB,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,MAAA,CAAO,MAAM,gBAAgB,CAAC,CAAA,QAAA,EAAW,KAAA,CAAM,mBAAmB,CAAA,uCAAA;AAAA,OACtG;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,KAAA,KAAU,WAAA,EAAa,OAAO,KAAA;AACxC,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,WAAW,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,GAAA,CAAI,MAAA,EAAkB,IAAA,EAA6D;AACvF,IAAA,OAAO,KAAK,SAAA,CAAU,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,IAAI,CAAC,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,IAAA,CACJ,MAAA,EACA,KAAA,EACyC;AAIzC,IAAA,IAAI,KAAA,CAAM,wBAAwB,MAAA,EAAW;AAC3C,MAAA,wBAAA,CAAyB,KAAA,CAAM,qBAAqB,qBAAqB,CAAA;AAAA,IAC3E;AACA,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,MAAA,EAAQ,EAAE,CAAA;AACnC,IAAA,MAAM,UAAiC,EAAC;AACxC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,IAAA,CAAK,SAAA,CAAU,SAAQ,EAAG;AACnD,MAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,MAAA,IAAI,MAAM,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,KAAA,KAAU,MAAM,KAAA,EAAO;AAC9D,MAAA,IAAI,KAAA,CAAM,wBAAwB,MAAA,EAAW;AAC3C,QAAA,IAAI,KAAA,CAAM,oBAAoB,MAAA,EAAW;AACzC,QAAA,IAAI,KAAA,CAAM,eAAA,IAAmB,KAAA,CAAM,mBAAA,EAAqB;AAAA,MAC1D;AACA,MAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IACpB;AACA,IAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAU,KAAK,IAAA,CAAK,aAAA,CAAc,KAAA,CAAM,IAAI,CAAC,CAAA;AACjE,IAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,KAAA,CAAM,SAASA,mBAAkB,CAAA;AAAA,EAC3D;AAAA,EAEA,MAAM,YAAA,CACJ,MAAA,EACA,KAAA,EAC8B;AAC9B,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAI,CAAA;AAC9C,IAAA,IAAI,KAAA,CAAM,UAAU,WAAA,EAAa;AAC/B,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,sBAAA;AAAA,QACA,CAAA,0CAAA,EAA6C,KAAA,CAAM,IAAI,CAAA,IAAA,EAAO,MAAM,KAAK,CAAA,CAAA;AAAA,OAC3E;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,UAAU,MAAA,EAAQ,KAAA,CAAM,MAAM,KAAA,CAAM,OAAA,EAAS,MAAM,KAAK,CAAA;AACvE,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG;AACjC,MAAA,IAAA,CAAK,WAAA,CAAY,IAAI,MAAA,EAAQ;AAAA,QAC3B,QAAA,EAAU,MAAA;AAAA,QACV,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,SAAA,EAAW,KAAK,IAAA;AAAK,OACtB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpC;AAAA,EAEA,MAAM,eAAA,CACJ,MAAA,EACA,KAAA,EAC8B;AAC9B,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,MAAM,IAAI,CAAA;AAC9C,IAAA,IAAA,CAAK,WAAA,CAAY,MAAA,CAAO,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,MAAM,KAAA,CAAM,OAAA,EAAS,KAAA,CAAM,KAAK,CAAC,CAAA;AACjF,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpC;AAAA,EAEA,MAAM,iBAAA,CACJ,MAAA,EACA,IAAA,EAC8B;AAC9B,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AACxC,IAAA,IAAI,KAAA,CAAM,aAAa,CAAA,EAAG;AACxB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,sBAAA;AAAA,QACA,CAAA,OAAA,EAAU,IAAI,CAAA,WAAA,EAAc,KAAA,CAAM,QAAQ,CAAA,cAAA;AAAA,OAC5C;AAAA,IACF;AACA,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,gBAAgB,CAAA;AAAA,EACzD;AAAA,EAEA,MAAM,WAAA,CAAY,MAAA,EAAkB,IAAA,EAAiD;AACnF,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAA,EAAQ,IAAI,CAAA;AACxC,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAA;AAAA,EAClD;AAAA,EAEA,WAAA,CACE,MAAA,EACA,KAAA,EACA,IAAA,EACqB;AACrB,IAAA,IAAI,CAAC,uBAAA,CAAwB,KAAA,CAAM,KAAA,EAAO,IAAI,CAAA,EAAG;AAC/C,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,sBAAA;AAAA,QACA,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,IAAA,EAAO,IAAI,CAAA,2CAAA;AAAA,OAC3B;AAAA,IACF;AACA,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,OAAA,GAA+B;AAAA,MACnC,GAAG,KAAA;AAAA,MACH,KAAA,EAAO,IAAA;AAAA,MACP,SAAA,EAAW,GAAA;AAAA,MACX,GAAI,IAAA,KAAS,gBAAA,GAAmB,EAAE,eAAA,EAAiB,GAAA,KAAQ;AAAC,KAC9D;AACA,IAAA,IAAA,CAAK,UAAU,GAAA,CAAI,SAAA,CAAU,QAAQ,KAAA,CAAM,IAAI,GAAG,OAAO,CAAA;AACzD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,QAAA,CAAS,QAAkB,KAAA,EAAiD;AAC1E,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,MAAM,EAAE,CAAA;AAClD,IAAA,IAAI,QAAA,GAAW,CAAA;AACf,IAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,WAAA,CAAY,IAAA,EAAK,EAAG;AACzC,MAAA,IAAI,GAAA,CAAI,UAAA,CAAW,SAAS,CAAA,EAAG,QAAA,IAAY,CAAA;AAAA,IAC7C;AACA,IAAA,MAAM,OAAA,GAA+B,EAAE,GAAG,KAAA,EAAO,UAAU,SAAA,EAAW,IAAA,CAAK,MAAK,EAAE;AAClF,IAAA,IAAA,CAAK,UAAU,GAAA,CAAI,SAAA,CAAU,QAAQ,KAAA,CAAM,IAAI,GAAG,OAAO,CAAA;AACzD,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,QAAA,CAAS,QAAkB,IAAA,EAAwC;AACjE,IAAA,MAAM,QAAQ,IAAA,CAAK,SAAA,CAAU,IAAI,SAAA,CAAU,MAAA,EAAQ,IAAI,CAAC,CAAA;AACxD,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,kBAAA;AAAA,QACA,UAAU,IAAI,CAAA,oCAAA;AAAA,OAChB;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,IAAA,GAAe;AACb,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,WAAA,EAAY;AAAA,EACvC;AACF;;;ACrKA,IAAM,iBAAA,GAAoB,GAAA;AAC1B,IAAM,mBAAA,GAAsB,IAAA;AAOrB,IAAM,qBAAN,MAA+C;AAAA,EAC3C,aAAA,uBAAoB,GAAA,EAAsC;AAAA,EAC1D,MAAA,uBAAa,GAAA,EAAgC;AAAA,EAC7C,aAAA,uBAAoB,GAAA,EAA+B;AAAA,EACnD,gBAAA,uBAAuB,GAAA,EAAyB;AAAA,EAChD,MAAA;AAAA,EACA,QAAA;AAAA,EAET,WAAA,CAAY,OAAc,OAAA,EAAsB;AAC9C,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AACd,IAAA,IAAA,CAAK,QAAA,GAAW,OAAA;AAAA,EAClB;AAAA,EAEA,MAAM,gBAAgB,MAAA,EAAiE;AACrF,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,gBAAA,CACJ,MAAA,EACA,KAAA,EACmC;AAInC,IAAA,IAAI,KAAA,CAAM,wBAAwB,MAAA,EAAW;AAC3C,MAAA,wBAAA,CAAyB,KAAA,CAAM,qBAAqB,qBAAqB,CAAA;AAAA,IAC3E;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AAC9C,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,KAAA,CAAM,OAAA,IAAW,SAAS,OAAA,EAAS;AAC/D,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,sCAAA;AAAA,QACA,CAAA,0BAAA,EAA6B,OAAO,QAAA,CAAS,OAAO,CAAC,CAAA,4BAAA,EAA+B,MAAA,CAAO,KAAA,CAAM,OAAO,CAAC,CAAA,CAAA,CAAA;AAAA,QACzG,QAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,MAAM,WAAA,GAAwC;AAAA,MAC5C,QAAA,EAAU,MAAA;AAAA,MACV,SAAS,KAAA,CAAM,OAAA;AAAA,MACf,gBAAgB,KAAA,CAAM,cAAA;AAAA,MACtB,gBAAgB,KAAA,CAAM,cAAA;AAAA,MACtB,gBAAgB,KAAA,CAAM,cAAA;AAAA,MACtB,mBAAmB,KAAA,CAAM,iBAAA;AAAA,MACzB,mBAAmB,KAAA,CAAM,iBAAA;AAAA,MACzB,GAAI,MAAM,mBAAA,KAAwB,MAAA,GAC9B,EAAC,GACD,EAAE,mBAAA,EAAqB,KAAA,CAAM,mBAAA;AAAoB,KACvD;AACA,IAAA,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAA,EAAQ,WAAW,CAAA;AAC1C,IAAA,OAAO,WAAA;AAAA,EACT;AAAA,EAEA,MAAM,UAAU,MAAA,EAA+C;AAC7D,IAAA,OAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW,MAAA,EAA0C;AACzD,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,mBAAA,CAAoB,MAAM,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAClC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA;AAClC,IAAA,MAAM,cACJ,WAAA,CAAY,mBAAA,KAAwB,UACpC,IAAA,CAAK,IAAA,KAAS,WAAA,CAAY,mBAAA;AAC5B,IAAA,OAAO;AAAA,MACL,WAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAA,EAAS,IAAA,CAAK,QAAA,CAAS,WAAA,EAAa,OAAO,WAAW,CAAA;AAAA,MACtD,gBACE,IAAA,IAAQ,WAAA,CAAY,cAAA,GAAiB,EAAA,GAAK,YAAY,cAAA,GAAiB,IAAA;AAAA,MACzE;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,eAAA,CACJ,MAAA,EACA,aAAA,EACyC;AACzC,IAAA,OAAO,KAAK,aAAA,CAAc,GAAA,CAAI,UAAU,MAAA,EAAQ,aAAa,CAAC,CAAA,EAAG,WAAA;AAAA,EACnE;AAAA,EAEA,MAAM,OAAA,CACJ,MAAA,EACA,KAAA,EAC6B;AAC7B,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,mBAAA,CAAoB,MAAM,CAAA;AAInD,IAAA,MAAM,IAAA,CAAK,mBAAmB,MAAM,CAAA;AACpC,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,aAAa,CAAA;AACjD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA;AAC3C,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,IAAI,QAAA,CAAS,WAAA,CAAY,KAAA,KAAU,UAAA,EAAY;AAC7C,QAAA,IACE,SAAS,WAAA,CAAY,IAAA,KAAS,MAAM,IAAA,IACpC,QAAA,CAAS,YAAY,aAAA,KAAkB,KAAA,CAAM,iBAC7C,QAAA,CAAS,WAAA,CAAY,gBAAgB,KAAA,CAAM,WAAA,IAC3C,SAAS,WAAA,CAAY,WAAA,KAAgB,MAAM,WAAA,EAC3C;AACA,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,4BAAA;AAAA,YACA,CAAA,YAAA,EAAe,MAAM,aAAa,CAAA,+CAAA;AAAA,WACpC;AAAA,QACF;AACA,QAAA,OAAO,QAAA,CAAS,WAAA;AAAA,MAClB;AACA,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,6BAAA;AAAA,QACA,eAAe,KAAA,CAAM,aAAa,CAAA,YAAA,EAAe,QAAA,CAAS,YAAY,KAAK,CAAA,CAAA;AAAA,OAC7E;AAAA,IACF;AAEA,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAClC,IAAA,MAAM,cACJ,WAAA,CAAY,mBAAA,KAAwB,UACpC,IAAA,CAAK,IAAA,KAAS,WAAA,CAAY,mBAAA;AAC5B,IAAA,IAAI,KAAK,QAAA,CAAS,WAAA,EAAa,KAAA,EAAO,WAAW,MAAM,WAAA,EAAa;AAClE,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,yBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,iBACJ,KAAA,CAAM,IAAA,KAAS,QAAA,GAAW,WAAA,CAAY,iBAAiB,WAAA,CAAY,cAAA;AACrE,IAAA,IAAI,KAAA,CAAM,gBAAgB,cAAA,EAAgB;AACxC,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,0BAAA;AAAA,QACA,CAAA,EAAG,MAAA,CAAO,KAAA,CAAM,aAAa,CAAC,CAAA,mBAAA,EAAsB,KAAA,CAAM,IAAI,CAAA,UAAA,EAAa,MAAA,CAAO,cAAc,CAAC,CAAA,OAAA;AAAA,OACnG;AAAA,IACF;AACA,IAAA,IAAI,KAAK,UAAA,CAAW,KAAK,IAAI,KAAA,CAAM,aAAA,GAAgB,YAAY,cAAA,EAAgB;AAC7E,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,wBAAA;AAAA,QACA,CAAA,UAAA,EAAa,OAAO,KAAA,CAAM,aAAa,CAAC,CAAA,sCAAA,EAAyC,MAAA,CAAO,WAAA,CAAY,cAAc,CAAC,CAAA,OAAA;AAAA,OACrH;AAAA,IACF;AAEA,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,WAAA,GAAkC;AAAA,MACtC,QAAA,EAAU,MAAA;AAAA,MACV,eAAe,KAAA,CAAM,aAAA;AAAA,MACrB,KAAA,EAAO,UAAA;AAAA,MACP,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,eAAe,KAAA,CAAM,aAAA;AAAA,MACrB,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW,IAAI,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,OAAA,EAAQ,GAAI,KAAA,CAAM,KAAK,CAAA,CAAE,WAAA;AAAY,KAC7E;AACA,IAAA,IAAA,CAAK,cAAc,GAAA,CAAI,GAAA,EAAK,EAAE,WAAA,EAAa,YAAA,EAAc,OAAO,CAAA;AAChE,IAAA,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,EAAE,GAAG,KAAA,EAAO,eAAe,KAAA,CAAM,aAAA,GAAgB,KAAA,CAAM,aAAA,EAAe,CAAA;AAC7F,IAAA,OAAO,WAAA;AAAA,EACT;AAAA,EAEA,MAAM,mBAAA,CACJ,MAAA,EACA,KAAA,EACgC;AAChC,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,aAAa,CAAA;AACjD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,mBAAA,CAAoB,MAAA,EAAQ,MAAM,aAAa,CAAA;AACnE,IAAA,MAAM,cAAc,MAAA,CAAO,WAAA;AAE3B,IAAA,IAAI,WAAA,CAAY,UAAU,WAAA,EAAa;AACrC,MAAA,OAAO;AAAA,QACL,WAAA;AAAA,QACA,KAAA,EAAO,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAAA,QAC3B,cAAc,MAAA,CAAO;AAAA,OACvB;AAAA,IACF;AACA,IAAA,IAAI,WAAA,CAAY,UAAU,UAAA,EAAY;AACpC,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,6BAAA;AAAA,QACA,CAAA,YAAA,EAAe,KAAA,CAAM,aAAa,CAAA,IAAA,EAAO,YAAY,KAAK,CAAA,CAAA;AAAA,OAC5D;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,IAAA,EAAK,IAAK,WAAA,CAAY,SAAA,EAAW;AACxC,MAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,SAAS,CAAA;AAC3C,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,6BAAA;AAAA,QACA,CAAA,YAAA,EAAe,KAAA,CAAM,aAAa,CAAA,YAAA,EAAe,YAAY,SAAS,CAAA,CAAA;AAAA,OACxE;AAAA,IACF;AACA,IAAA,IACE,MAAM,gBAAA,KAAqB,WAAA,CAAY,iBACvC,KAAA,CAAM,mBAAA,KAAwB,YAAY,WAAA,EAC1C;AAGA,MAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,SAAS,CAAA;AAC3C,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,4BAAA;AAAA,QACA,CAAA,2CAAA,EAA8C,MAAM,aAAa,CAAA,CAAA;AAAA,OACnE;AAAA,IACF;AAEA,IAAA,IAAI,WAAA,CAAY,SAAS,QAAA,EAAU;AACjC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,MAAA,EAAQ;AAAA,UACjC,MAAM,WAAA,CAAY,WAAA;AAAA,UAClB,kBAAkB,KAAA,CAAM,gBAAA;AAAA,UACxB,qBAAqB,KAAA,CAAM;AAAA,SAC5B,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AACd,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAQ,SAAS,CAAA;AAC3C,QAAA,IACE,iBAAiB,aAAA,KAChB,KAAA,CAAM,SAAS,kBAAA,IAAsB,KAAA,CAAM,SAAS,sBAAA,CAAA,EACrD;AACA,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,4BAAA;AAAA,YACA,CAAA,YAAA,EAAe,MAAM,aAAa,CAAA,oCAAA,CAAA;AAAA,YAClC,EAAE,OAAO,KAAA;AAAM,WACjB;AAAA,QACF;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF;AAEA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAGpC,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,GAAA,CAAI,WAAA,CAAY,WAAW,CAAA;AACvD,IAAA,MAAM,UAAU,IAAA,CAAK,OAAA,CAAQ,QAAQ,GAAA,EAAK,MAAA,EAAQ,aAAa,YAAY,CAAA;AAE3E,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAA,CAAO,GAAA,CAAI,YAAY,WAAW,CAAA;AAClC,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AACpC,MAAA,IAAA,CAAK,UAAU,MAAA,EAAQ;AAAA,QACrB,GAAG,OAAA;AAAA,QACH,oBAAA,EACE,YAAY,IAAA,KAAS,QAAA,GACjB,QAAQ,oBAAA,GAAuB,WAAA,CAAY,gBAC3C,OAAA,CAAQ,oBAAA;AAAA,QACd,oBAAA,EACE,YAAY,IAAA,KAAS,QAAA,GACjB,QAAQ,oBAAA,GAAuB,WAAA,CAAY,gBAC3C,OAAA,CAAQ,oBAAA;AAAA,QACd,aACE,WAAA,CAAY,IAAA,KAAS,WAAW,OAAA,CAAQ,WAAA,GAAc,KAAK,OAAA,CAAQ;AAAA,OACtE,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,EAAE,aAAa,OAAA,EAAS,KAAA,EAAO,KAAK,QAAA,CAAS,MAAM,GAAG,YAAA,EAAa;AAAA,EAC5E;AAAA,EAEA,MAAM,gBAAA,CACJ,MAAA,EACA,aAAA,EAC6B;AAC7B,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,aAAa,CAAA;AAC3C,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,mBAAA,CAAoB,MAAA,EAAQ,aAAa,CAAA;AAC7D,IAAA,IAAI,MAAA,CAAO,WAAA,CAAY,KAAA,KAAU,UAAA,SAAmB,MAAA,CAAO,WAAA;AAC3D,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,QAAQ,SAAS,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,mBAAmB,MAAA,EAA0D;AACjF,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,MAAA,EAAQ,EAAE,CAAA;AACnC,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,EAAK;AACtB,IAAA,MAAM,UAAgC,EAAC;AACvC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,MAAM,CAAA,IAAK,CAAC,GAAG,IAAA,CAAK,aAAA,CAAc,OAAA,EAAS,CAAA,EAAG;AAC7D,MAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,MAAA,IAAI,MAAA,CAAO,WAAA,CAAY,KAAA,KAAU,UAAA,EAAY;AAC7C,MAAA,IAAI,GAAA,GAAM,MAAA,CAAO,WAAA,CAAY,SAAA,EAAW;AACxC,MAAA,OAAA,CAAQ,KAAK,IAAA,CAAK,OAAA,CAAQ,QAAQ,GAAA,EAAK,MAAA,EAAQ,SAAS,CAAC,CAAA;AAAA,IAC3D;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,iBAAA,CACJ,MAAA,EACA,KAAA,EAC6B;AAC7B,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,mBAAA,CAAoB,MAAM,CAAA;AACnD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAClC,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,YAAA,GAAe,KAAA,CAAM,UAAA;AACxC,IAAA,IAAI,KAAA,CAAM,UAAA,GAAa,EAAA,IAAM,IAAA,GAAO,YAAY,iBAAA,EAAmB;AACjE,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,wBAAA;AAAA,QACA,CAAA,oBAAA,EAAuB,OAAO,IAAI,CAAC,6BAA6B,MAAA,CAAO,WAAA,CAAY,iBAAiB,CAAC,CAAA,OAAA;AAAA,OACvG;AAAA,IACF;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,EAAE,GAAG,KAAA,EAAO,cAAc,IAAA,GAAO,EAAA,GAAK,EAAA,GAAK,IAAA,EAAM,CAAA;AACxE,IAAA,OAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAAA,EAC7B;AAAA,EAEA,QACE,MAAA,EACA,GAAA,EACA,MAAA,EACA,KAAA,EACA,eAAe,KAAA,EACK;AACpB,IAAA,MAAM,OAAA,GAA8B;AAAA,MAClC,GAAG,MAAA,CAAO,WAAA;AAAA,MACV,KAAA;AAAA,MACA,SAAA,EAAW,KAAK,IAAA;AAAK,KACvB;AACA,IAAA,IAAA,CAAK,cAAc,GAAA,CAAI,GAAA,EAAK,EAAE,WAAA,EAAa,OAAA,EAAS,cAAc,CAAA;AAClE,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAClC,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,aAAA;AAC1D,IAAA,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,EAAE,GAAG,KAAA,EAAO,eAAe,QAAA,GAAW,EAAA,GAAK,EAAA,GAAK,QAAA,EAAU,CAAA;AACjF,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,QAAA,CACE,WAAA,EACA,KAAA,EACA,WAAA,EACqB;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA;AAClC,IAAA,IAAI,IAAA,IAAQ,YAAY,cAAA,EAAgB;AAItC,MAAA,MAAM,eAAA,GAAkB,YAAY,mBAAA,KAAwB,MAAA;AAC5D,MAAA,OAAO,eAAA,IAAmB,CAAC,WAAA,GAAc,WAAA,GAAc,SAAA;AAAA,IACzD;AACA,IAAA,IACE,YAAY,cAAA,GAAiB,EAAA,IAC7B,OAAO,mBAAA,IAAuB,WAAA,CAAY,iBAAiB,iBAAA,EAC3D;AACA,MAAA,OAAO,SAAA;AAAA,IACT;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,WAAW,KAAA,EAAmC;AAC5C,IAAA,OAAO,KAAA,CAAM,oBAAA,GAAuB,KAAA,CAAM,oBAAA,GAAuB,KAAA,CAAM,aAAA;AAAA,EACzE;AAAA,EAEA,SAAS,MAAA,EAAsC;AAC7C,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,MAAM,CAAA;AACvC,IAAA,IAAI,QAAA,KAAa,QAAW,OAAO,QAAA;AACnC,IAAA,MAAM,KAAA,GAA4B;AAAA,MAChC,oBAAA,EAAsB,EAAA;AAAA,MACtB,oBAAA,EAAsB,EAAA;AAAA,MACtB,aAAA,EAAe,EAAA;AAAA,MACf,YAAA,EAAc,EAAA;AAAA,MACd,WAAA,EAAa,EAAA;AAAA,MACb,SAAA,EAAW,KAAK,IAAA;AAAK,KACvB;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,KAAK,CAAA;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,SAAA,CAAU,QAAkB,KAAA,EAAiC;AAC3D,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,EAAE,GAAG,OAAO,SAAA,EAAW,IAAA,CAAK,IAAA,EAAK,EAAG,CAAA;AAAA,EAC9D;AAAA,EAEA,UAAU,MAAA,EAA+B;AACvC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,MAAM,CAAA;AACjD,IAAA,IAAI,QAAA,KAAa,QAAW,OAAO,QAAA;AACnC,IAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,IAAA,IAAA,CAAK,gBAAA,CAAiB,GAAA,CAAI,MAAA,EAAQ,OAAO,CAAA;AACzC,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,oBAAoB,MAAA,EAA4C;AAC9D,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,MAAM,CAAA;AACjD,IAAA,IAAI,gBAAgB,MAAA,EAAW;AAC7B,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,6BAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,WAAA;AAAA,EACT;AAAA,EAEA,mBAAA,CAAoB,QAAkB,aAAA,EAA0C;AAC9E,IAAA,MAAM,SAAS,IAAA,CAAK,aAAA,CAAc,IAAI,SAAA,CAAU,MAAA,EAAQ,aAAa,CAAC,CAAA;AACtE,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,+BAAA;AAAA,QACA,eAAe,aAAa,CAAA,+BAAA;AAAA,OAC9B;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,IAAA,GAAe;AACb,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,WAAA,EAAY;AAAA,EACvC;AACF;;;ACtZA,IAAM,sBAAA,GAAyB,GAAA;AAExB,IAAM,qBAAN,MAA+C;AAAA,EAC3C,QAAA,uBAAe,GAAA,EAAyB;AAAA,EACxC,MAAA;AAAA,EAET,YAAY,KAAA,EAAc;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,KAAA;AAAA,EAChB;AAAA,EAEA,MAAM,aAAA,CAAc,MAAA,EAAkB,KAAA,EAAiD;AACrF,IAAA,MAAM,GAAA,GAAM,SAAA,CAAU,MAAA,EAAQ,eAAA,EAAiB,MAAM,MAAM,CAAA;AAC3D,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AACtC,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,IAAI,QAAA,CAAS,WAAA,KAAgB,KAAA,CAAM,WAAA,EAAa;AAE9C,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,mBAAA;AAAA,QACA,CAAA,KAAA,EAAQ,MAAM,MAAM,CAAA,gEAAA,CAAA;AAAA,QACpB,QAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAsB;AAAA,MAC1B,QAAA,EAAU,MAAA;AAAA,MACV,IAAA,EAAM,eAAA;AAAA,MACN,WAAW,KAAA,CAAM,MAAA;AAAA,MACjB,GAAA,EAAK,CAAA;AAAA,MACL,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,GAAI,MAAM,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAM;AAAA,MAC1D,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAC,GAAI,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU;AAAA,MACtE,SAAA,EAAW,KAAK,IAAA;AAAK,KACvB;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,MAAM,CAAA;AAC7B,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAM,aAAA,CAAc,MAAA,EAAkB,KAAA,EAAiD;AACrF,IAAA,MAAM,MAAM,SAAA,CAAU,MAAA,EAAQ,KAAA,CAAM,IAAA,EAAM,MAAM,SAAS,CAAA;AACzD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AACtC,IAAA,MAAM,UAAA,GAAa,UAAU,GAAA,IAAO,CAAA;AACpC,IAAA,IAAI,KAAA,CAAM,gBAAgB,UAAA,EAAY;AACpC,MAAA,MAAM,IAAI,iBAAA;AAAA,QACR,yBAAA;AAAA,QACA,CAAA,OAAA,EAAU,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,SAAS,CAAA,WAAA,EAAc,UAAU,CAAA,MAAA,EAAS,KAAA,CAAM,WAAW,CAAA,CAAA,CAAA;AAAA,QACzF,QAAA;AAAA,QACA,KAAK,IAAA;AAAK,OACZ;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAsB;AAAA,MAC1B,QAAA,EAAU,MAAA;AAAA,MACV,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,KAAK,UAAA,GAAa,CAAA;AAAA,MAClB,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,GAAI,MAAM,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAM;AAAA,MAC1D,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAC,GAAI,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU;AAAA,MACtE,SAAA,EAAW,KAAK,IAAA;AAAK,KACvB;AACA,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,GAAA,EAAK,MAAM,CAAA;AAC7B,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,CACJ,MAAA,EACA,QAAA,EACkC;AAClC,IAAA,OAAO,IAAA,CAAK,SAAS,GAAA,CAAI,SAAA,CAAU,QAAQ,QAAA,CAAS,IAAA,EAAM,QAAA,CAAS,SAAS,CAAC,CAAA;AAAA,EAC/E;AAAA,EAEA,MAAM,YAAA,CACJ,MAAA,EACA,KAAA,EACwC;AACxC,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,MAAA,EAAQ,EAAE,CAAA;AACnC,IAAA,MAAM,UAAgC,EAAC;AACvC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,MAAM,KAAK,IAAA,CAAK,QAAA,CAAS,SAAQ,EAAG;AACnD,MAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,MAAA,IAAI,MAAM,IAAA,KAAS,MAAA,IAAa,MAAA,CAAO,IAAA,KAAS,MAAM,IAAA,EAAM;AAC5D,MAAA,IAAI,KAAA,CAAM,cAAc,MAAA,IAAa,CAAC,OAAO,SAAA,CAAU,UAAA,CAAW,KAAA,CAAM,SAAS,CAAA,EAAG;AAClF,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,QACX,MAAM,MAAA,CAAO,IAAA;AAAA,QACb,WAAW,MAAA,CAAO,SAAA;AAAA,QAClB,KAAK,MAAA,CAAO,GAAA;AAAA,QACZ,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,GAAI,OAAO,KAAA,KAAU,MAAA,GAAY,EAAC,GAAI,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM;AAAA,QAC5D,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAAA,IACH;AACA,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,CAAC,IAAA,EAAM,KAAA,KACL,IAAA,CAAK,IAAA,CAAK,aAAA,CAAc,KAAA,CAAM,IAAI,CAAA,IAAK,IAAA,CAAK,SAAA,CAAU,aAAA,CAAc,MAAM,SAAS;AAAA,KACvF;AACA,IAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,KAAA,CAAM,SAAS,sBAAsB,CAAA;AAAA,EAC/D;AAAA,EAEA,IAAA,GAAe;AACb,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,EAAI,CAAE,WAAA,EAAY;AAAA,EACvC;AACF;;;ACvHO,IAAM,qBAAA,GAAwB;AAE9B,SAAS,kBAAA,CAAmB,KAAA,GAAc,IAAI,IAAA,CAAK,qBAAqB,CAAA,EAAiB;AAC9F,EAAA,IAAI,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC5B,EAAA,OAAO;AAAA,IACL,GAAA,GAAY;AACV,MAAA,OAAO,IAAI,KAAK,OAAO,CAAA;AAAA,IACzB,CAAA;AAAA,IACA,QAAQ,EAAA,EAAkB;AACxB,MAAA,OAAA,IAAW,EAAA;AAAA,IACb,CAAA;AAAA,IACA,IAAI,OAAA,EAAqB;AACvB,MAAA,OAAA,GAAU,QAAQ,OAAA,EAAQ;AAAA,IAC5B;AAAA,GACF;AACF;;;ACYO,SAAS,wBAAA,CACd,OAAA,GAA+B,EAAC,EACP;AACzB,EAAA,MAAM,KAAA,GAAe,OAAA,CAAQ,KAAA,IAAS,kBAAA,EAAmB;AACzD,EAAA,MAAM,OAAA,GAAU,IAAI,mBAAA,CAAoB,KAAK,CAAA;AAC7C,EAAA,MAAM,MAAA,GAAqB;AAAA,IACzB,OAAA,EAAS,IAAI,oBAAA,CAAqB,KAAK,CAAA;AAAA,IACvC,KAAA,EAAO,IAAI,kBAAA,CAAmB,KAAK,CAAA;AAAA,IACnC,KAAA,EAAO,IAAI,kBAAA,CAAmB,KAAK,CAAA;AAAA,IACnC,QAAA,EAAU,IAAI,qBAAA,CAAsB,KAAK,CAAA;AAAA,IACzC,QAAA,EAAU,IAAI,qBAAA,CAAsB,KAAK,CAAA;AAAA,IACzC,OAAA;AAAA,IACA,KAAA,EAAO,IAAI,kBAAA,CAAmB,KAAA,EAAO,OAAO;AAAA,GAC9C;AACA,EAAA,OAAO,EAAE,QAAQ,KAAA,EAAM;AACzB;AAGO,SAAS,sCAAA,GAGd;AACA,EAAA,MAAM,QAAQ,kBAAA,EAAmB;AACjC,EAAA,OAAO,EAAE,QAAQ,wBAAA,CAAyB,EAAE,OAAO,CAAA,CAAE,QAAQ,KAAA,EAAM;AACrE","file":"index.js","sourcesContent":["/**\n * The one error taxonomy for `@byok-sdk/core`.\n *\n * Two rules the rest of the package is built around:\n *\n * 1. **One class, code-based branching.** Consumers switch on `error.code`, not\n *    on class identity — the same idiom `@byok-sdk/keys` uses. A composition that\n *    maps core errors onto HTTP does it with a code table, so adding a code is\n *    an additive change instead of a new `instanceof` chain everywhere.\n * 2. **Every conflict carries the current snapshot.** A CAS failure that\n *    reports only \"conflict\" forces the caller into a second round trip and\n *    invites last-write-wins retries. {@link CoreConflictError} therefore\n *    carries `current` — the authoritative state the caller lost to — plus the\n *    `observedAt` instant it was read at.\n *\n * This module imports nothing. It is the graph sink: `quota.ts` narrows\n * {@link StorageErrorCode} out of this union and maps it to HTTP status, and\n * every port module documents which codes it can raise. That keeps the code\n * list in one place while letting each domain own its own status mapping.\n */\n\n/**\n * Every error code this package can raise.\n *\n * Codes are stable strings. Two groups are additionally **wire-stable** — a\n * composition is expected to surface them verbatim to clients, so renaming one\n * is a breaking change:\n *\n * - `terminal_conflict` (§12.6.4, HTTP 409)\n * - the five `storage_*` codes (§12.7.7, see `quota.ts`)\n */\nexport const CORE_ERROR_CODES = {\n  // identity + content addressing\n  tenant_id_invalid: 'tenant_id_invalid',\n  content_hash_invalid: 'content_hash_invalid',\n\n  // caller-supplied instants (see `time.ts`)\n  timestamp_not_canonical: 'timestamp_not_canonical',\n\n  // capability declaration (ADR-010)\n  capability_declaration_invalid: 'capability_declaration_invalid',\n  capability_unavailable: 'capability_unavailable',\n\n  // device proof (§12.6.3)\n  proof_envelope_invalid: 'proof_envelope_invalid',\n  proof_canonicalization_failed: 'proof_canonicalization_failed',\n\n  // mailbox (§12.7.3)\n  mailbox_message_not_found: 'mailbox_message_not_found',\n  mailbox_cursor_regression: 'mailbox_cursor_regression',\n\n  // board coordination (§12.3)\n  board_item_not_found: 'board_item_not_found',\n  board_item_exists: 'board_item_exists',\n  board_transition_invalid: 'board_transition_invalid',\n  board_status_conflict: 'board_status_conflict',\n  board_claim_conflict: 'board_claim_conflict',\n  board_not_held: 'board_not_held',\n\n  // truth records (§12.3, §12.6.4)\n  truth_record_not_found: 'truth_record_not_found',\n  terminal_conflict: 'terminal_conflict',\n  truth_revision_conflict: 'truth_revision_conflict',\n\n  // presence + activity hints (§12.3)\n  activity_capacity_invalid: 'activity_capacity_invalid',\n  activity_batch_invalid: 'activity_batch_invalid',\n  hint_ttl_invalid: 'hint_ttl_invalid',\n  hint_rate_limited: 'hint_rate_limited',\n\n  // object manifest (§12.7.4, §12.7.8)\n  object_not_found: 'object_not_found',\n  object_state_invalid: 'object_state_invalid',\n\n  // storage entitlement / usage / reservation (§12.7.6-12.7.7)\n  storage_entitlement_missing: 'storage_entitlement_missing',\n  storage_entitlement_version_conflict: 'storage_entitlement_version_conflict',\n  storage_reservation_not_found: 'storage_reservation_not_found',\n  storage_object_too_large: 'storage_object_too_large',\n  storage_quota_exceeded: 'storage_quota_exceeded',\n  storage_reservation_expired: 'storage_reservation_expired',\n  storage_integrity_mismatch: 'storage_integrity_mismatch',\n  storage_write_suspended: 'storage_write_suspended',\n} as const;\n\nexport type CoreErrorCode = (typeof CORE_ERROR_CODES)[keyof typeof CORE_ERROR_CODES];\n\n/** Base error for every failure this package raises. */\nexport class ByokCoreError extends Error {\n  public readonly code: CoreErrorCode;\n\n  constructor(code: CoreErrorCode, message: string, options?: ErrorOptions) {\n    super(message, options);\n    this.name = 'ByokCoreError';\n    this.code = code;\n  }\n}\n\n/**\n * A compare-and-set failure.\n *\n * `current` is the authoritative state at the moment the write was rejected —\n * the board item whose status moved, the terminal record already committed, the\n * entitlement row at a newer version. The caller re-decides against it; the\n * store never merges (§12.3: \"不做 silent last-write-wins\", §12.6.4: 不覆写第一份事实).\n */\nexport class CoreConflictError<TCurrent> extends ByokCoreError {\n  public readonly current: TCurrent;\n  public readonly observedAt: string;\n\n  constructor(\n    code: CoreErrorCode,\n    message: string,\n    current: TCurrent,\n    observedAt: string,\n    options?: ErrorOptions,\n  ) {\n    super(code, message, options);\n    this.name = 'CoreConflictError';\n    this.current = current;\n    this.observedAt = observedAt;\n  }\n}\n\n/** Narrows an unknown thrown value to a core error, optionally to one code. */\nexport function isCoreError(value: unknown, code?: CoreErrorCode): value is ByokCoreError {\n  if (!(value instanceof ByokCoreError)) return false;\n  return code === undefined || value.code === code;\n}\n\n/** Narrows an unknown thrown value to a conflict error carrying a snapshot. */\nexport function isCoreConflictError<TCurrent>(\n  value: unknown,\n  code?: CoreErrorCode,\n): value is CoreConflictError<TCurrent> {\n  if (!(value instanceof CoreConflictError)) return false;\n  return code === undefined || value.code === code;\n}\n","/**\n * Tenant identity — layer 1 of the six-layer isolation model\n * (`docs/architecture/sdk-architecture.md` §12.6.2).\n *\n * `TenantId` is a branded string and this module is the **only** place that may\n * produce one: every other module receives a `TenantId` it cannot forge without\n * calling {@link tenantId}. The brand carries no runtime value — it exists so a\n * bare `string` (a path segment, a claim from an unverified proof, a\n * device-supplied query parameter) can never silently slide into a store port's\n * first parameter.\n *\n * `src/__tests__/constraints.test.ts` greps the package for `as TenantId`: this\n * file and test fixtures are the only allowed sites. A module that needs a\n * `TenantId` takes one as a parameter or mints it here.\n */\nimport { ByokCoreError } from './errors';\n\n/**\n * A validated tenant identifier.\n *\n * Nominal by construction: structurally a `string`, but the phantom brand makes\n * it unassignable from an arbitrary string. Assignment the other way\n * (`TenantId` → `string`) stays legal on purpose, so composition code can pass\n * it as a SQL parameter or key prefix without a cast.\n */\nexport type TenantId = string & { readonly __byokTenantId: unique symbol };\n\n/**\n * Upper bound on tenant id length. Not a security boundary — a bound so a\n * pathological id cannot become an unbounded key prefix inside a store.\n */\nexport const TENANT_ID_MAX_LENGTH = 200;\n\n/**\n * Separator for flat composite keys. `NUL` cannot appear in a tenant id that a\n * control plane can express in a URL, a header, or a SQL identifier, and\n * {@link tenantId} rejects it outright — so a composite key is never ambiguous\n * between `(a, bc)` and `(ab, c)`.\n */\nexport const TENANT_KEY_SEPARATOR = '\\u0000';\n\n/**\n * The single mint point for {@link TenantId}.\n *\n * Fail-closed: empty, whitespace-padded, over-long, non-string, or\n * `NUL`-bearing values are rejected rather than normalized. Normalizing here\n * would create a second source of truth for \"which tenant is this\", because the\n * control plane that issued the id would then disagree with the SDK about its\n * canonical form.\n *\n * @throws {ByokCoreError} code `tenant_id_invalid`.\n */\nexport function tenantId(value: string): TenantId {\n  const candidate: unknown = value;\n  if (typeof candidate !== 'string') {\n    throw new ByokCoreError(\n      'tenant_id_invalid',\n      `Tenant id must be a string, received ${typeof candidate}.`,\n    );\n  }\n  if (candidate.length === 0) {\n    throw new ByokCoreError('tenant_id_invalid', 'Tenant id must not be empty.');\n  }\n  if (candidate.trim() !== candidate) {\n    throw new ByokCoreError(\n      'tenant_id_invalid',\n      'Tenant id must not have leading or trailing whitespace.',\n    );\n  }\n  if (candidate.length > TENANT_ID_MAX_LENGTH) {\n    throw new ByokCoreError(\n      'tenant_id_invalid',\n      `Tenant id must be at most ${TENANT_ID_MAX_LENGTH} characters.`,\n    );\n  }\n  if (candidate.includes(TENANT_KEY_SEPARATOR)) {\n    throw new ByokCoreError('tenant_id_invalid', 'Tenant id must not contain a NUL character.');\n  }\n  return candidate as TenantId;\n}\n\n/**\n * Non-throwing form of {@link tenantId}, for surfaces that must answer \"is this\n * a tenant id?\" without building an error (route matching, log redaction).\n * Accepts exactly what {@link tenantId} accepts, never more.\n */\nexport function isTenantId(value: unknown): value is TenantId {\n  if (typeof value !== 'string') return false;\n  return (\n    value.length > 0 &&\n    value.trim() === value &&\n    value.length <= TENANT_ID_MAX_LENGTH &&\n    !value.includes(TENANT_KEY_SEPARATOR)\n  );\n}\n\n/**\n * Composite key helper for compositions that need a flat key space (in-memory\n * maps, KV namespaces). SQL compositions use a tenant-prefixed composite\n * primary key instead — §12.6.2 layer 3 forbids a bare device/task index\n * regardless of which representation a composition picks.\n */\nexport function tenantKey(tenant: TenantId, ...parts: readonly string[]): string {\n  return [tenant as string, ...parts].join(TENANT_KEY_SEPARATOR);\n}\n","/**\n * Authenticated principals — layer 2 of the isolation model (§12.6.2).\n *\n * A handler never receives a raw tenant string; it receives a principal that\n * already carries a minted {@link TenantId}. The two principal shapes are\n * deliberately not one type with an optional `deviceId`: a control-plane caller\n * that can write entitlements and a device that can write truth records have\n * different authority, and a discriminated union makes a handler state which\n * one it accepts.\n *\n * `keyId`/`keyEpoch` are **not** here. They are device-proof semantics\n * (`plans/sprints/…sprint.md` §S6.2): the signing key's identity and rotation\n * generation, resolved by looking up the device row during proof verification.\n * Putting them on the principal would create permanently-empty fields on every\n * principal minted by a non-proof path.\n */\nimport type { TenantId } from './tenant';\n\n/** Principal kinds. A composition may not invent a third without a contract change. */\nexport const PRINCIPAL_KINDS = ['device', 'control-plane'] as const;\nexport type PrincipalKind = (typeof PRINCIPAL_KINDS)[number];\n\n/**\n * A paired device acting inside one tenant/product.\n *\n * Built only from a device row loaded with the tenant as part of the lookup key\n * (§12.6.2 layer 5) — never from claims a device asserted about itself.\n */\nexport interface DevicePrincipal {\n  readonly kind: 'device';\n  readonly tenantId: TenantId;\n  readonly productId: string;\n  readonly deviceId: string;\n}\n\n/**\n * The host's control plane acting on a tenant: entitlement writes, retention\n * policy, administrative reads. Carries the operator identity for audit, which\n * is opaque to the SDK.\n */\nexport interface ControlPlanePrincipal {\n  readonly kind: 'control-plane';\n  readonly tenantId: TenantId;\n  readonly operatorId: string;\n}\n\n/** Anything that can address a tenant-scoped store. */\nexport type Principal = DevicePrincipal | ControlPlanePrincipal;\n\nexport function isDevicePrincipal(principal: Principal): principal is DevicePrincipal {\n  return principal.kind === 'device';\n}\n\nexport function isControlPlanePrincipal(\n  principal: Principal,\n): principal is ControlPlanePrincipal {\n  return principal.kind === 'control-plane';\n}\n\n/**\n * The tenant every store call must be scoped to.\n *\n * Exists so a handler cannot accidentally read `principal.tenantId` off one\n * principal and pass a different tenant to a store: the facade that binds\n * stores to a tenant takes this, not a loose string.\n */\nexport function principalTenant(principal: Principal): TenantId {\n  return principal.tenantId;\n}\n","/**\n * The one timestamp format this package accepts across every composition.\n *\n * Every instant that crosses a store port is an ISO-8601 UTC string, and the\n * in-memory reference compares those strings with `<` / `>=` — a downgrade\n * grace deadline, a retention cutoff, a reservation expiry. Lexicographic\n * order equals chronological order **only** for the canonical\n * `YYYY-MM-DDTHH:mm:ss.sssZ` shape that `Date.prototype.toISOString` emits.\n * Feed the same store `2026-08-08T00:00:00+08:00` and the string comparison\n * silently answers a different question than a SQL `timestamptz` comparison\n * would, so the in-memory and Postgres compositions would diverge on an input\n * the conformance suite never sees.\n *\n * The fix is a format contract rather than a normalizer: a caller-supplied\n * timestamp that is not already canonical is **rejected**, not rewritten.\n * Rewriting would make this module a second authority on what instant the\n * caller meant, and an offset-bearing or second-precision string is exactly the\n * case where that guess is worth refusing.\n *\n * Store-produced timestamps are canonical by construction (they come from\n * `Clock.now().toISOString()`); this module guards the *inbound* direction —\n * `downgradeGraceUntil`, `deletePendingBefore`, `ackedBefore`,\n * `expireUnackedBefore`.\n *\n * No `node:` import and no clock read: validation is pure, so a Workers\n * composition and the constraint test (`Date.now()` is banned package-wide)\n * both stay happy. `Date.parse` is used for *calendar validity only* — the\n * pattern is what pins the shape.\n */\nimport { ByokCoreError } from './errors';\n\n/**\n * Exactly what `toISOString()` produces: four-digit year, `T` separator,\n * millisecond precision, literal `Z`. No offsets, no omitted milliseconds, no\n * expanded-year form — each of those breaks the lexicographic-order property.\n */\nexport const CANONICAL_TIMESTAMP_PATTERN =\n  /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\n\n/**\n * True when `value` is a canonical ISO-8601 UTC instant.\n *\n * Two checks, in order: the pattern pins the *shape*, then a round trip\n * through `Date` pins *calendar validity* — `2026-02-30T00:00:00.000Z` matches\n * the pattern and is not an instant.\n */\nexport function isCanonicalTimestamp(value: unknown): value is string {\n  if (typeof value !== 'string') return false;\n  if (!CANONICAL_TIMESTAMP_PATTERN.test(value)) return false;\n  const parsed = Date.parse(value);\n  if (!Number.isFinite(parsed)) return false;\n  return new Date(parsed).toISOString() === value;\n}\n\n/**\n * Fail-closed gate for a caller-supplied instant.\n *\n * @param value The timestamp as received from the caller.\n * @param field Field name, so the failure names the contract that was missed\n *   rather than just the bad string.\n * @returns The same string, so call sites can validate and assign in one step.\n * @throws {ByokCoreError} code `timestamp_not_canonical`.\n */\nexport function assertCanonicalTimestamp(value: string, field: string): string {\n  if (!isCanonicalTimestamp(value)) {\n    throw new ByokCoreError(\n      'timestamp_not_canonical',\n      `${field} must be a canonical ISO-8601 UTC instant (YYYY-MM-DDTHH:mm:ss.sssZ), received ${JSON.stringify(value)}.`,\n    );\n  }\n  return value;\n}\n","/**\n * Hosted mailbox contract (§12.7.3).\n *\n * The load-bearing rule of this file: **reading is not acknowledging.**\n * `readAfter` never mutates the cursor. The only ack is the cursor the daemon\n * brings back on its next poll, after it has durably appended the envelope to\n * its local journal. \"领走即弃\" means *cursor-advanced-then-deleted*, not\n * *read-then-deleted* — read-deletes would break the frozen at-least-once\n * semantics the client's stall recovery is built on (§8.3).\n *\n * The mailbox transports opaque envelope bytes and is **not** an\n * execution-state authority. `body` is a string here rather than a parsed\n * message because core is protocol-free: the frozen v1 shape lives in\n * `@byok-sdk/protocol`, and core must not grow an edge to it (§12.1 invariant).\n */\nimport type { ContentHash } from './blob';\nimport type { TenantId } from './tenant';\n\n/**\n * Row lifecycle. `pending` and `acked` are derived from the device cursor;\n * `expired` is the dead-letter state for rows that aged out before ever being\n * acked — §12.7.5 requires those to be visible, not silently dropped.\n */\nexport const MAILBOX_MESSAGE_STATES = ['pending', 'acked', 'expired'] as const;\nexport type MailboxMessageState = (typeof MAILBOX_MESSAGE_STATES)[number];\n\n/** One mailbox row. `seq` is monotonic per (tenant, device) — never global. */\nexport interface MailboxMessage {\n  readonly tenantId: TenantId;\n  readonly deviceId: string;\n  readonly seq: number;\n  readonly messageId: string;\n  /** Opaque encoded envelope. Core never parses it. */\n  readonly body: string;\n  readonly bodyHash: ContentHash;\n  readonly byteSize: bigint;\n  readonly state: MailboxMessageState;\n  readonly appendedAt: string;\n}\n\nexport interface MailboxAppendInput {\n  readonly deviceId: string;\n  readonly body: string;\n  readonly bodyHash: ContentHash;\n  readonly byteSize: bigint;\n  /**\n   * Producer-supplied idempotency key. A second append with the same\n   * `messageId` returns the existing row instead of enqueuing a duplicate.\n   */\n  readonly messageId: string;\n}\n\nexport interface MailboxReadQuery {\n  readonly deviceId: string;\n  /** Exclusive lower bound. `0` reads from the beginning of the retained window. */\n  readonly afterSeq: number;\n  readonly limit?: number;\n}\n\nexport interface MailboxPage {\n  readonly messages: readonly MailboxMessage[];\n  /**\n   * The seq to poll after next. Equal to `afterSeq` when the page is empty —\n   * reading never moves the ack cursor, so a caller that only reads can replay\n   * the same page forever without losing anything.\n   */\n  readonly nextSeq: number;\n  readonly hasMore: boolean;\n}\n\nexport interface MailboxAdvanceCursorInput {\n  readonly deviceId: string;\n  /** Highest seq the device has durably journaled. */\n  readonly ackedSeq: number;\n}\n\n/** The device's durable acknowledgement position. */\nexport interface MailboxCursorState {\n  readonly tenantId: TenantId;\n  readonly deviceId: string;\n  readonly ackedSeq: number;\n  readonly updatedAt: string;\n}\n\n/**\n * Retention cutoffs.\n *\n * Both instants must be **canonical ISO-8601 UTC** (`YYYY-MM-DDTHH:mm:ss.sssZ`);\n * anything else is rejected with `timestamp_not_canonical`. A retention sweep\n * deletes rows, so an offset-bearing string that a string comparison and a SQL\n * `timestamptz` comparison read differently is the worst place to guess — see\n * `time.ts`.\n */\nexport interface MailboxRetentionInput {\n  readonly deviceId?: string;\n  /** Acked rows appended before this instant are deleted. */\n  readonly ackedBefore: string;\n  /** Unacked rows appended before this instant move to `expired`, never deleted here. */\n  readonly expireUnackedBefore: string;\n}\n\nexport interface MailboxRetentionResult {\n  readonly deletedCount: number;\n  readonly expiredCount: number;\n  readonly releasedBytes: bigint;\n}\n\n/**\n * Mailbox port. Tenant-first, async.\n *\n * Raises: `mailbox_cursor_regression` (an ack that moves the cursor backwards,\n * which would silently re-deliver already-journaled work),\n * `timestamp_not_canonical` (a retention cutoff that is not a canonical\n * ISO-8601 UTC instant).\n */\nexport interface MailboxStore {\n  append(tenant: TenantId, input: MailboxAppendInput): Promise<MailboxMessage>;\n  /** Pure read. Never advances the cursor, never deletes, never marks acked. */\n  readAfter(tenant: TenantId, query: MailboxReadQuery): Promise<MailboxPage>;\n  /** The one and only ack. Monotonic; a lower `ackedSeq` is rejected. */\n  advanceCursor(\n    tenant: TenantId,\n    input: MailboxAdvanceCursorInput,\n  ): Promise<MailboxCursorState>;\n  readCursor(tenant: TenantId, deviceId: string): Promise<MailboxCursorState>;\n  /** Retention hook: delete acked rows, dead-letter unacked ones. */\n  collectRetired(\n    tenant: TenantId,\n    input: MailboxRetentionInput,\n  ): Promise<MailboxRetentionResult>;\n}\n","/**\n * Board coordination state (§12.3).\n *\n * This is the *human and multi-device* collaboration lifecycle, and it is a\n * separate vocabulary from the frozen wire execution vocabulary on purpose. One\n * run attempt is not one work item: an item can outlive several attempts, and a\n * finished attempt does not mean a human accepted the result. The constraint\n * test asserts that no wire execution state name appears in this file — if the\n * two vocabularies ever merge, status sniffing comes back and the board becomes\n * a second, unreliable execution authority.\n *\n * Three invariants the ports below encode:\n *\n * - **assignee and status are two fields**, not one enum. \"Who holds it\" and\n *   \"where it is\" change independently.\n * - **every mutation is a CAS.** `claim` compares against \"unheld\"; every status\n *   move carries `expectedStatus`. There is no last-write-wins path.\n * - **conflicts return the snapshot they lost to**, so the caller re-decides\n *   against real state instead of retrying blind.\n */\nimport type { TenantId } from './tenant';\n\n/** The five board statuses. `closed` means \"terminated, unaccepted\" (§12.3). */\nexport const BOARD_STATUSES = ['todo', 'in_progress', 'in_review', 'done', 'closed'] as const;\nexport type BoardStatus = (typeof BOARD_STATUSES)[number];\n\n/**\n * Legal transitions, transcribed from the §12.3 state diagram.\n *\n * `in_review → done` is the human acceptance step: a device reporting a\n * terminal record can push an item to `in_review`, never straight to `done`.\n * `done` and `closed` are sinks — if archival semantics are ever needed, §12.3\n * pins the answer to an `archivedAt` field, not a sixth status.\n */\nexport const BOARD_TRANSITIONS: Readonly<Record<BoardStatus, readonly BoardStatus[]>> = {\n  todo: ['in_progress', 'closed'],\n  in_progress: ['todo', 'in_review', 'closed'],\n  in_review: ['in_progress', 'done', 'closed'],\n  done: [],\n  closed: [],\n};\n\nexport function isLegalBoardTransition(from: BoardStatus, to: BoardStatus): boolean {\n  return BOARD_TRANSITIONS[from].includes(to);\n}\n\n/** Who currently holds the item. Separate from {@link BoardItem.status}. */\nexport interface BoardAssignee {\n  readonly holderId: string;\n  readonly heldSince: string;\n}\n\n/**\n * One work item.\n *\n * `boardSeq` is monotonic **per tenant** and bumps on every mutation, which is\n * what makes incremental list polling possible without a cross-tenant sequence\n * (a global sequence would leak other tenants' write rate).\n */\nexport interface BoardItem {\n  readonly tenantId: TenantId;\n  readonly itemId: string;\n  readonly channel: string;\n  readonly title: string;\n  readonly status: BoardStatus;\n  readonly assignee?: BoardAssignee;\n  readonly boardSeq: number;\n  readonly createdAt: string;\n  readonly updatedAt: string;\n}\n\nexport interface BoardItemInput {\n  readonly itemId: string;\n  readonly channel: string;\n  readonly title: string;\n  /** Defaults to `todo`. Creating directly into a sink status is legal but explicit. */\n  readonly status?: BoardStatus;\n}\n\nexport interface BoardListQuery {\n  /** Exclusive lower bound on `boardSeq`, for incremental polling. */\n  readonly afterSeq?: number;\n  readonly channel?: string;\n  readonly status?: BoardStatus;\n  readonly limit?: number;\n}\n\nexport interface BoardPage {\n  readonly items: readonly BoardItem[];\n  /** Highest `boardSeq` in this page, or the requested `afterSeq` when empty. */\n  readonly nextSeq: number;\n  readonly hasMore: boolean;\n}\n\nexport interface BoardClaimInput {\n  readonly itemId: string;\n  readonly holderId: string;\n  /**\n   * Status the claimer believes the item is in. Defaults to `todo`; supplying\n   * it explicitly makes the claim a full CAS rather than an assignee-only one.\n   *\n   * The CAS holds on the idempotent path too: a re-claim by the current holder\n   * that supplies a stale `expectedStatus` fails with `board_status_conflict`\n   * and the current item. The default is *not* applied there — a retry of a\n   * successful claim legitimately observes `in_progress`.\n   */\n  readonly expectedStatus?: BoardStatus;\n}\n\nexport interface BoardUnclaimInput {\n  readonly itemId: string;\n  /** Must match the current holder — releasing someone else's item is not a legal move. */\n  readonly holderId: string;\n}\n\nexport interface BoardStatusUpdateInput {\n  readonly itemId: string;\n  readonly expectedStatus: BoardStatus;\n  readonly status: BoardStatus;\n  /** Optional holder assertion, for transitions only the holder may make. */\n  readonly holderId?: string;\n}\n\n/**\n * Board port. Tenant-first, async.\n *\n * Raises: `board_item_not_found`, `board_claim_conflict` (loser gets the\n * winner's holder snapshot), `board_status_conflict` (`expectedStatus` missed —\n * carries the current item), `board_transition_invalid` (move not in\n * {@link BOARD_TRANSITIONS} — also carries the current item), `board_not_held`.\n */\nexport interface BoardStore {\n  create(tenant: TenantId, input: BoardItemInput): Promise<BoardItem>;\n  get(tenant: TenantId, itemId: string): Promise<BoardItem | undefined>;\n  list(tenant: TenantId, query: BoardListQuery): Promise<BoardPage>;\n  /** CAS on \"unheld\". Exactly one concurrent caller wins; losers get the holder snapshot. */\n  claim(tenant: TenantId, input: BoardClaimInput): Promise<BoardItem>;\n  unclaim(tenant: TenantId, input: BoardUnclaimInput): Promise<BoardItem>;\n  updateStatus(tenant: TenantId, input: BoardStatusUpdateInput): Promise<BoardItem>;\n}\n","/**\n * Truth records: attested metadata with two different write models (§12.3, §12.6.4).\n *\n * | kind            | write model                    | conflict model                          |\n * | --------------- | ------------------------------ | --------------------------------------- |\n * | `task.terminal` | first write per task, immutable | different hash → `terminal_conflict`    |\n * | `profile`       | per-key snapshot                | `expectedRev` CAS                       |\n * | `memory`        | per-key snapshot                | `expectedRev` CAS                       |\n *\n * The store is deliberately dumb about content. It can match, sort, and return\n * by tenant/kind/key/rev/hash, and that is the whole of its authority: no\n * summarizing, no merging, no relevance ranking (§12.3). Merge decisions belong\n * to the device that holds the context, which is why a conflict hands back the\n * current snapshot and stops.\n *\n * The manifest listing returns metadata only — never bodies. Selecting which\n * bodies to fetch is a local decision (§S6.4), so shipping bodies in the list\n * response would both defeat that and make the response unbounded.\n */\nimport type { ContentHash } from './blob';\nimport type { TenantId } from './tenant';\n\nexport const TRUTH_RECORD_KINDS = ['task.terminal', 'profile', 'memory'] as const;\nexport type TruthRecordKind = (typeof TRUTH_RECORD_KINDS)[number];\n\n/**\n * Where the record body lives. Small payloads may be inline and still count\n * against tenant usage (§12.7.6); larger ones are an object reference.\n */\nexport type TruthBodyRef =\n  | { readonly kind: 'inline'; readonly body: string }\n  | { readonly kind: 'object'; readonly hash: ContentHash };\n\nexport interface TruthRecord {\n  readonly tenantId: TenantId;\n  readonly kind: TruthRecordKind;\n  /** For `task.terminal` this is the task id; for snapshots, the host's key. */\n  readonly recordKey: string;\n  /** `1` for the first write. Terminal records never advance past `1`. */\n  readonly rev: number;\n  readonly contentHash: ContentHash;\n  readonly byteSize: bigint;\n  readonly body: TruthBodyRef;\n  readonly label?: string;\n  /** Idempotency key of the accepted write, for replay detection. */\n  readonly requestId?: string;\n  readonly writtenAt: string;\n}\n\n/** Manifest projection: everything needed to decide *whether* to fetch a body. */\nexport interface TruthManifestEntry {\n  readonly kind: TruthRecordKind;\n  readonly recordKey: string;\n  readonly rev: number;\n  readonly contentHash: ContentHash;\n  readonly byteSize: bigint;\n  readonly label?: string;\n  readonly updatedAt: string;\n}\n\nexport interface TerminalWriteInput {\n  readonly taskId: string;\n  readonly contentHash: ContentHash;\n  readonly byteSize: bigint;\n  readonly body: TruthBodyRef;\n  readonly label?: string;\n  readonly requestId?: string;\n}\n\nexport interface SnapshotWriteInput {\n  readonly kind: 'profile' | 'memory';\n  readonly recordKey: string;\n  /** `0` asserts \"no record yet\". Any other value must equal the stored `rev`. */\n  readonly expectedRev: number;\n  readonly contentHash: ContentHash;\n  readonly byteSize: bigint;\n  readonly body: TruthBodyRef;\n  readonly label?: string;\n  readonly requestId?: string;\n}\n\nexport interface TruthRecordSelector {\n  readonly kind: TruthRecordKind;\n  readonly recordKey: string;\n}\n\nexport interface TruthManifestQuery {\n  readonly kind?: TruthRecordKind;\n  readonly keyPrefix?: string;\n  readonly limit?: number;\n}\n\n/**\n * Truth port. Tenant-first, async.\n *\n * Raises: `terminal_conflict` (same task, different hash — carries the record\n * already committed), `truth_revision_conflict` (`expectedRev` missed — carries\n * the current record), `truth_record_not_found`.\n */\nexport interface TruthStore {\n  /**\n   * Writes the first terminal record for a task.\n   *\n   * Replaying the identical hash returns the original record unchanged, so a\n   * retry after a lost response is safe. A different hash for the same task is\n   * a conflict: the first fact is never overwritten.\n   */\n  writeTerminal(tenant: TenantId, input: TerminalWriteInput): Promise<TruthRecord>;\n  /** Per-key snapshot write under `expectedRev` CAS. The store never merges bodies. */\n  writeSnapshot(tenant: TenantId, input: SnapshotWriteInput): Promise<TruthRecord>;\n  getRecord(tenant: TenantId, selector: TruthRecordSelector): Promise<TruthRecord | undefined>;\n  /** Metadata only — key/rev/hash/size/label, no bodies. */\n  listManifest(\n    tenant: TenantId,\n    query: TruthManifestQuery,\n  ): Promise<readonly TruthManifestEntry[]>;\n}\n","/**\n * Presence and activity hints (§12.3).\n *\n * Both are lossy, TTL-bounded, unsigned, and never authoritative. Expiry means\n * *absence*, not a stale value: a hint past its TTL is invisible to readers, so\n * nothing downstream can mistake an old level for a live one.\n *\n * These hints must never be used to derive coordination state, execution state,\n * authorization, billing, or recovery — which is why this module shares no\n * vocabulary with `board.ts` and no vocabulary with the frozen wire states. The\n * constraint test enforces that separation by scanning this file for those\n * names. A device that looks busy is not evidence that any particular work item\n * moved anywhere.\n *\n * The activity tail is bounded by count and carries an explicit `dropped`\n * counter: lossiness is written into the data instead of being hidden behind a\n * stream that pretends to be complete.\n */\nimport type { TenantId } from './tenant';\n\n/** The five presence levels. */\nexport const PRESENCE_LEVELS = ['online', 'thinking', 'working', 'error', 'offline'] as const;\nexport type PresenceLevel = (typeof PRESENCE_LEVELS)[number];\n\n/** A device-level hint. `expiresAt` is authoritative: past it, the hint does not exist. */\nexport interface PresenceHint {\n  readonly tenantId: TenantId;\n  readonly deviceId: string;\n  readonly level: PresenceLevel;\n  /** Free-form host label, bounded by the composition. Never parsed by core. */\n  readonly detail?: string;\n  readonly observedAt: string;\n  readonly expiresAt: string;\n}\n\nexport interface PresenceHintInput {\n  readonly deviceId: string;\n  readonly level: PresenceLevel;\n  readonly detail?: string;\n  /** Hint lifetime. §12.7.5 suggests 60-120s for presence. */\n  readonly ttlMs: number;\n  /** Minimum time between accepted publications for this device. `0` explicitly disables throttling. */\n  readonly minimumIntervalMs: number;\n}\n\n/** One entry of a task's lossy tail. */\nexport interface ActivityEntry {\n  readonly at: string;\n  readonly detail: string;\n}\n\n/**\n * A task's bounded tail.\n *\n * `dropped` counts entries evicted by `capacity`, so a reader can tell the\n * difference between \"nothing happened\" and \"we lost the middle\".\n */\nexport interface ActivityTail {\n  readonly tenantId: TenantId;\n  readonly taskId: string;\n  readonly entries: readonly ActivityEntry[];\n  readonly dropped: number;\n  readonly capacity: number;\n  readonly expiresAt: string;\n}\n\nexport interface ActivityAppendInput {\n  readonly taskId: string;\n  /** One ProgressBatcher-shaped batch. Empty batches are rejected. */\n  readonly details: readonly string[];\n  /** Events the producer dropped before this batch reached the store. */\n  readonly dropped: number;\n  /** Tail lifetime. §12.7.5 suggests 5-15 minutes for activity. */\n  readonly ttlMs: number;\n  /** Maximum retained entries. Must be a positive integer. */\n  readonly capacity?: number;\n}\n\n/**\n * Presence port. Tenant-first, async.\n *\n * Reads filter expired hints out rather than returning them with a flag: an\n * expired hint is indistinguishable from one that was never written.\n */\nexport interface PresenceStore {\n  publish(tenant: TenantId, input: PresenceHintInput): Promise<PresenceHint>;\n  read(tenant: TenantId, deviceId: string): Promise<PresenceHint | undefined>;\n  list(tenant: TenantId): Promise<readonly PresenceHint[]>;\n}\n\n/**\n * Activity port. Tenant-first, async.\n *\n * Raises: `activity_capacity_invalid` (non-positive or non-integer capacity —\n * an unbounded tail is exactly what this contract exists to prevent),\n * `activity_batch_invalid` (empty batch or invalid producer drop count).\n */\nexport interface ActivityStore {\n  append(tenant: TenantId, input: ActivityAppendInput): Promise<ActivityTail>;\n  read(tenant: TenantId, taskId: string): Promise<ActivityTail | undefined>;\n}\n\n/** Default tail capacity when an append does not specify one. */\nexport const DEFAULT_ACTIVITY_CAPACITY = 50;\n","/**\n * Content addressing and the object manifest (§12.7.4, §12.7.8).\n *\n * This module is **metadata only**. No byte transport, no presigning, no\n * hashing: R2/S3 URL signing and digest computation are composition concerns\n * that need platform crypto, and core stays Node-free. What core owns is the\n * shape everyone must agree on — the hash format, the manifest state machine,\n * and reference counting — so that Postgres, D1, and the in-memory reference\n * cannot disagree about when an object is safe to delete.\n *\n * Object keys are tenant-scoped by construction ({@link tenantObjectKey}).\n * A global `sha256/<hex>` key space would turn object existence into a\n * cross-tenant oracle, which is why §12.7.4 forbids it even though it would\n * deduplicate better.\n */\nimport { ByokCoreError } from './errors';\nimport type { TenantId } from './tenant';\n\n/** `sha256:<64 lowercase hex>`. The only content-address form core accepts. */\nexport const CONTENT_HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;\n\n/** A validated content address. Branded so an unvalidated digest cannot stand in for one. */\nexport type ContentHash = string & { readonly __byokContentHash: unique symbol };\n\n/**\n * The single mint point for {@link ContentHash}.\n *\n * Fail-closed on uppercase hex: accepting both cases would make the same bytes\n * addressable under two keys, which breaks per-tenant deduplication and the\n * \"count each hash once\" billing rule (§12.7.6).\n *\n * @throws {ByokCoreError} code `content_hash_invalid`.\n */\nexport function contentHash(value: string): ContentHash {\n  if (!CONTENT_HASH_PATTERN.test(value)) {\n    throw new ByokCoreError(\n      'content_hash_invalid',\n      `Content hash must match ${CONTENT_HASH_PATTERN.source}, received ${JSON.stringify(value)}.`,\n    );\n  }\n  return value as ContentHash;\n}\n\n/** Non-throwing form of {@link contentHash}. */\nexport function isContentHash(value: unknown): value is ContentHash {\n  return typeof value === 'string' && CONTENT_HASH_PATTERN.test(value);\n}\n\n/**\n * Tenant-scoped object key, e.g.\n * `tenants/<tenantId>/objects/sha256/<hex>` (§12.7.4).\n */\nexport function tenantObjectKey(tenant: TenantId, hash: ContentHash): string {\n  const hex = hash.slice('sha256:'.length);\n  return `tenants/${tenant as string}/objects/sha256/${hex}`;\n}\n\n/**\n * Object manifest lifecycle (§12.7.8).\n *\n * `pending` exists because Postgres and R2 have no shared transaction: the row\n * is written before the bytes land, and only `committed` rows may be referenced\n * by a truth record. `delete_pending` is the tombstone the GC worker drives, so\n * a failed R2 delete is retryable instead of leaving usage silently wrong.\n */\nexport const OBJECT_STATES = ['pending', 'committed', 'delete_pending', 'deleted'] as const;\nexport type ObjectState = (typeof OBJECT_STATES)[number];\n\n/** Legal manifest transitions. Anything else raises `object_state_invalid`. */\nexport const OBJECT_STATE_TRANSITIONS: Readonly<Record<ObjectState, readonly ObjectState[]>> = {\n  pending: ['committed', 'delete_pending'],\n  committed: ['delete_pending'],\n  delete_pending: ['deleted', 'committed'],\n  deleted: [],\n};\n\nexport function isLegalObjectTransition(from: ObjectState, to: ObjectState): boolean {\n  return OBJECT_STATE_TRANSITIONS[from].includes(to);\n}\n\n/** One row of `object_manifest` (§12.7.6). */\nexport interface ObjectManifestEntry {\n  readonly tenantId: TenantId;\n  readonly hash: ContentHash;\n  /** Declared at reservation time, re-verified at commit against the store's `HEAD`. */\n  readonly byteSize: bigint;\n  readonly contentType: string;\n  readonly state: ObjectState;\n  /** Number of live {@link ObjectReference} rows. `0` makes the object GC-eligible after grace. */\n  readonly refCount: number;\n  readonly createdAt: string;\n  readonly updatedAt: string;\n  /** Set when the row entered `delete_pending`; the grace window is measured from here. */\n  readonly deletePendingAt?: string;\n}\n\n/** What references an object. `refKind`/`refId` are opaque to core. */\nexport interface ObjectReference {\n  readonly tenantId: TenantId;\n  readonly hash: ContentHash;\n  readonly refKind: string;\n  readonly refId: string;\n  readonly createdAt: string;\n}\n\nexport interface ObjectManifestInput {\n  readonly hash: ContentHash;\n  readonly byteSize: bigint;\n  readonly contentType: string;\n}\n\n/**\n * Finalize input. `byteSize`/`contentType` are what the composition actually\n * observed on the object store, not what the client declared — the whole point\n * of the check is that the two can differ (§12.7.7 step 4).\n */\nexport interface ObjectCommitInput {\n  readonly hash: ContentHash;\n  readonly observedByteSize: bigint;\n  readonly observedContentType: string;\n}\n\nexport interface ObjectReferenceInput {\n  readonly hash: ContentHash;\n  readonly refKind: string;\n  readonly refId: string;\n}\n\nexport interface ObjectListQuery {\n  readonly state?: ObjectState;\n  /**\n   * Only rows whose `deletePendingAt` is at or before this instant.\n   *\n   * Must be a **canonical ISO-8601 UTC instant** (`YYYY-MM-DDTHH:mm:ss.sssZ`);\n   * anything else is rejected with `timestamp_not_canonical`, because the\n   * in-memory composition compares it as a string and a SQL composition\n   * compares it as a `timestamptz` — see `time.ts`.\n   */\n  readonly deletePendingBefore?: string;\n  readonly limit?: number;\n}\n\n/**\n * Object manifest port. Tenant-first, async, metadata only.\n *\n * Raises: `object_not_found`, `object_state_invalid`,\n * `storage_integrity_mismatch` (commit observed size/type disagreeing with the\n * declared manifest row), `timestamp_not_canonical` (a `list` query whose\n * `deletePendingBefore` is not a canonical ISO-8601 UTC instant).\n */\nexport interface ObjectStore {\n  /** Creates or returns the `pending` row for `hash`. Idempotent per (tenant, hash). */\n  putManifest(tenant: TenantId, input: ObjectManifestInput): Promise<ObjectManifestEntry>;\n  /** `pending` → `committed` after verifying observed size/type. */\n  commit(tenant: TenantId, input: ObjectCommitInput): Promise<ObjectManifestEntry>;\n  get(tenant: TenantId, hash: ContentHash): Promise<ObjectManifestEntry | undefined>;\n  list(tenant: TenantId, query: ObjectListQuery): Promise<readonly ObjectManifestEntry[]>;\n  /** Idempotent per (tenant, hash, refKind, refId) — re-adding does not double-count. */\n  addReference(tenant: TenantId, input: ObjectReferenceInput): Promise<ObjectManifestEntry>;\n  removeReference(tenant: TenantId, input: ObjectReferenceInput): Promise<ObjectManifestEntry>;\n  /** Tombstone step 1: only legal at `refCount === 0`. */\n  markDeletePending(tenant: TenantId, hash: ContentHash): Promise<ObjectManifestEntry>;\n  /** Tombstone step 3: the object store delete succeeded. */\n  markDeleted(tenant: TenantId, hash: ContentHash): Promise<ObjectManifestEntry>;\n}\n","/**\n * Tenant storage entitlement, usage, reservation and retention (§12.7.6-12.7.7).\n *\n * The SDK does not know what a plan is. It never sees `free`, `pro`, a price, a\n * currency, or a purchase flow — those belong to the host SaaS. What crosses\n * this boundary is a *numeric, versioned* entitlement the host issues, and the\n * constraint test asserts this file contains no plan-name or price vocabulary.\n * The moment the SDK hardcodes a tier, every host is stuck with the SDK's\n * commercial model.\n *\n * Byte counts are `bigint`. Serialization is a composition concern: JSON has no\n * bigint, so a cloud handler renders them as decimal strings on the wire. Using\n * `number` here would put a silent 2^53 ceiling into a storage quota contract.\n *\n * Reservation exists because Postgres and R2 have no shared transaction\n * (§12.7.7). Every durable write reserves first, uploads second, finalizes\n * third; the invariant `committed + reserved + expected <= hardLimit` is\n * checked under the reservation lock, which is what makes concurrent uploads\n * unable to oversell the tenant.\n */\nimport type { ContentHash } from './blob';\nimport type { CoreErrorCode } from './errors';\nimport type { TenantId } from './tenant';\n\n/**\n * The host-issued numeric entitlement (§12.7.6, verbatim).\n *\n * `version` is monotonic and CAS-checked on write: a delayed control-plane\n * update must not resurrect an older plan over a newer one.\n */\nexport interface TenantStorageEntitlement {\n  tenantId: TenantId;\n  version: bigint;\n  hardLimitBytes: bigint;\n  maxObjectBytes: bigint;\n  maxInlineBytes: bigint;\n  mailboxLimitBytes: bigint;\n  retentionPolicyId: string;\n  /** Canonical ISO-8601 UTC instant — see {@link TenantStorageEntitlementInput}. */\n  downgradeGraceUntil?: string;\n}\n\n/**\n * Measured tenant usage (§12.7.6, verbatim).\n *\n * Carries no `tenantId` because it is always read through a tenant-scoped port\n * call — the tenant is the query, not a field of the answer.\n */\nexport interface TenantStorageUsage {\n  committedObjectBytes: bigint;\n  committedInlineBytes: bigint;\n  reservedBytes: bigint;\n  mailboxBytes: bigint;\n  objectCount: bigint;\n  updatedAt: string;\n}\n\n/** Entitlement write payload. `tenantId` comes from the port's first parameter. */\nexport interface TenantStorageEntitlementInput {\n  readonly version: bigint;\n  readonly hardLimitBytes: bigint;\n  readonly maxObjectBytes: bigint;\n  readonly maxInlineBytes: bigint;\n  readonly mailboxLimitBytes: bigint;\n  readonly retentionPolicyId: string;\n  /**\n   * Deadline after which an over-limit tenant is suspended rather than blocked.\n   *\n   * Must be a **canonical ISO-8601 UTC instant** (`YYYY-MM-DDTHH:mm:ss.sssZ`);\n   * anything else is rejected with `timestamp_not_canonical`. The in-memory\n   * composition compares this deadline as a string and a SQL composition\n   * compares it as a `timestamptz`, and those two agree only on the canonical\n   * form — see `time.ts`.\n   */\n  readonly downgradeGraceUntil?: string;\n}\n\n/** Durable write classes a reservation can cover. */\nexport const STORAGE_WRITE_KINDS = ['object', 'inline'] as const;\nexport type StorageWriteKind = (typeof STORAGE_WRITE_KINDS)[number];\n\nexport const STORAGE_RESERVATION_STATES = [\n  'reserved',\n  'committed',\n  'aborted',\n  'expired',\n] as const;\nexport type StorageReservationState = (typeof STORAGE_RESERVATION_STATES)[number];\n\nexport interface StorageReservation {\n  readonly tenantId: TenantId;\n  readonly reservationId: string;\n  readonly state: StorageReservationState;\n  readonly kind: StorageWriteKind;\n  readonly expectedBytes: bigint;\n  readonly contentHash: ContentHash;\n  readonly contentType: string;\n  readonly createdAt: string;\n  readonly expiresAt: string;\n  readonly settledAt?: string;\n}\n\nexport interface StorageReservationInput {\n  readonly reservationId: string;\n  readonly kind: StorageWriteKind;\n  readonly expectedBytes: bigint;\n  readonly contentHash: ContentHash;\n  readonly contentType: string;\n  readonly ttlMs: number;\n}\n\n/**\n * Finalize payload. Size/type are what the composition observed on the object\n * store, not what the client promised — disagreement is\n * `storage_integrity_mismatch`.\n *\n * Hash identity stays on the reservation as the authenticated daemon's\n * declaration (ADR-024). Object-store HEAD does not independently observe a\n * SHA-256 digest, so accepting one here would turn a copied declaration into a\n * false verification claim.\n */\nexport interface StorageFinalizeInput {\n  readonly reservationId: string;\n  readonly observedByteSize: bigint;\n  readonly observedContentType: string;\n}\n\nexport interface StorageFinalizeResult {\n  readonly reservation: StorageReservation;\n  readonly usage: TenantStorageUsage;\n  /**\n   * True when this tenant already had the same content hash committed. The\n   * reserved bytes are released and nothing is added: same tenant, same hash,\n   * counted once (§12.7.6). Cross-tenant sharing never happens — usage is\n   * per-tenant even when the bytes are identical.\n   */\n  readonly deduplicated: boolean;\n}\n\n/** Effective write posture derived from entitlement + usage + clock (§12.7.8). */\nexport const STORAGE_WRITE_POSTURES = ['normal', 'warning', 'blocked', 'suspended'] as const;\nexport type StorageWritePosture = (typeof STORAGE_WRITE_POSTURES)[number];\n\nexport interface StorageStatus {\n  readonly entitlement: TenantStorageEntitlement;\n  readonly usage: TenantStorageUsage;\n  readonly posture: StorageWritePosture;\n  /** `committed + reserved` against `hardLimitBytes`, for host UI. */\n  readonly availableBytes: bigint;\n  readonly graceActive: boolean;\n}\n\n/**\n * The five wire-stable storage error codes (§12.7.7). Renaming one is a\n * breaking change for every host that branches on them.\n */\nexport const STORAGE_ERROR_CODES = [\n  'storage_object_too_large',\n  'storage_quota_exceeded',\n  'storage_reservation_expired',\n  'storage_integrity_mismatch',\n  'storage_write_suspended',\n] as const satisfies readonly CoreErrorCode[];\n\nexport type StorageErrorCode = (typeof STORAGE_ERROR_CODES)[number];\n\n/** HTTP status mapping from §12.7.7. Compositions render these verbatim. */\nexport const STORAGE_ERROR_HTTP_STATUS = {\n  storage_object_too_large: 413,\n  storage_quota_exceeded: 507,\n  storage_reservation_expired: 409,\n  storage_integrity_mismatch: 422,\n  storage_write_suspended: 423,\n} as const satisfies Record<StorageErrorCode, number>;\n\nexport interface MailboxUsageDeltaInput {\n  /** Signed. Negative deltas release bytes after retention deletes rows. */\n  readonly deltaBytes: bigint;\n}\n\n/**\n * Quota port. Tenant-first, async.\n *\n * Raises: `storage_entitlement_missing`,\n * `storage_entitlement_version_conflict` (carries the current entitlement),\n * `storage_reservation_not_found`, and the five wire-stable codes above.\n */\nexport interface QuotaStore {\n  readEntitlement(tenant: TenantId): Promise<TenantStorageEntitlement | undefined>;\n  /**\n   * Version CAS: a write at or below the stored version is rejected with the\n   * current row. Raises `timestamp_not_canonical` when `downgradeGraceUntil` is\n   * not a canonical ISO-8601 UTC instant.\n   */\n  writeEntitlement(\n    tenant: TenantId,\n    input: TenantStorageEntitlementInput,\n  ): Promise<TenantStorageEntitlement>;\n  readUsage(tenant: TenantId): Promise<TenantStorageUsage>;\n  readStatus(tenant: TenantId): Promise<StorageStatus>;\n  /** Tenant-scoped lookup used to bind a finalize request to its reservation. */\n  readReservation(tenant: TenantId, reservationId: string): Promise<StorageReservation | undefined>;\n  /**\n   * Atomically checks `committed + reserved + expected <= hardLimitBytes` and,\n   * on success, adds `expectedBytes` to `reservedBytes`.\n   */\n  reserve(tenant: TenantId, input: StorageReservationInput): Promise<StorageReservation>;\n  /**\n   * Moves reserved bytes to committed after verifying the observed object.\n   * For object reservations, the composition commits the matching manifest in\n   * the same authority step as reservation/accounting settlement.\n   */\n  finalizeReservation(\n    tenant: TenantId,\n    input: StorageFinalizeInput,\n  ): Promise<StorageFinalizeResult>;\n  /** Idempotent release. Already-settled reservations return their settled row. */\n  abortReservation(tenant: TenantId, reservationId: string): Promise<StorageReservation>;\n  /** Cleanup hook: expires reservations past their TTL and releases their bytes. */\n  expireReservations(tenant: TenantId): Promise<readonly StorageReservation[]>;\n  /** Mailbox bytes are platform-protection accounting, bounded by `mailboxLimitBytes`. */\n  applyMailboxDelta(\n    tenant: TenantId,\n    input: MailboxUsageDeltaInput,\n  ): Promise<TenantStorageUsage>;\n}\n","/**\n * Capability declaration (ADR-010).\n *\n * A client learns what a deployment supports by reading a declaration, never by\n * probing endpoints and interpreting 404/405/501. Status-code sniffing conflates\n * \"this build does not have that feature\" with \"that request was wrong\" and\n * with \"a proxy ate it\", and every consumer ends up with its own guess.\n *\n * The schema is intentionally the minimum that supports that rule: an opaque\n * string set plus a monotonic declaration version. Capability names are host and\n * deployment vocabulary — core validates their shape, never their meaning, so a\n * new capability never requires a core release.\n */\nimport { z } from 'zod';\nimport { ByokCoreError } from './errors';\n\nexport const CAPABILITY_DECLARATION_SCHEMA_ID = 'byok-capabilities-v1';\n\n/** Capability names: lowercase dotted segments, e.g. `board.sse`, `storage.reservations`. */\nexport const CAPABILITY_NAME_PATTERN = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;\n\nexport const CapabilityDeclarationSchema = z\n  .object({\n    schema: z.literal(CAPABILITY_DECLARATION_SCHEMA_ID),\n    /** Monotonic per deployment. Lets a client cache and detect a rollout. */\n    version: z.number().int().nonnegative(),\n    capabilities: z.array(z.string().regex(CAPABILITY_NAME_PATTERN)),\n  })\n  .superRefine((declaration, ctx) => {\n    const seen = new Set<string>();\n    for (const [index, name] of declaration.capabilities.entries()) {\n      if (seen.has(name)) {\n        ctx.addIssue({\n          code: 'custom',\n          path: ['capabilities', index],\n          message: `Duplicate capability ${JSON.stringify(name)}.`,\n        });\n      }\n      seen.add(name);\n    }\n  });\n\nexport type CapabilityDeclaration = z.infer<typeof CapabilityDeclarationSchema>;\n\n/**\n * Parses a declaration fail-closed.\n *\n * @throws {ByokCoreError} code `capability_declaration_invalid`.\n */\nexport function parseCapabilityDeclaration(input: unknown): CapabilityDeclaration {\n  const result = CapabilityDeclarationSchema.safeParse(input);\n  if (!result.success) {\n    throw new ByokCoreError(\n      'capability_declaration_invalid',\n      `Invalid capability declaration: ${result.error.issues\n        .map((issue) => `${issue.path.join('.') || '<root>'}: ${issue.message}`)\n        .join('; ')}`,\n      { cause: result.error },\n    );\n  }\n  return result.data;\n}\n\nexport function hasCapability(\n  declaration: CapabilityDeclaration,\n  capability: string,\n): boolean {\n  return declaration.capabilities.includes(capability);\n}\n\n/**\n * The enforcement point ADR-010 exists for: a caller asserts the capability up\n * front and gets a named failure, instead of issuing the request and guessing\n * what the status code meant.\n *\n * @throws {ByokCoreError} code `capability_unavailable`.\n */\nexport function assertCapability(\n  declaration: CapabilityDeclaration,\n  capability: string,\n): void {\n  if (!hasCapability(declaration, capability)) {\n    throw new ByokCoreError(\n      'capability_unavailable',\n      `Capability ${JSON.stringify(capability)} is not declared by this deployment.`,\n    );\n  }\n}\n","/**\n * The composition contract: the full set of store ports, plus the clock seam.\n *\n * Every method on every port in this package obeys two rules, and\n * `src/__tests__/constraints.test.ts` enumerates them method by method to prove\n * it (sprint I7):\n *\n * 1. **Async.** Every method returns a `Promise`. A synchronous port would\n *    silently exclude SQL and object-store compositions from the contract.\n * 2. **Tenant-first.** Every method's first parameter is a required\n *    {@link TenantId}. There is no bare `deviceId`/`taskId` lookup anywhere —\n *    §12.6.2 layer 3 forbids the index such a lookup would need, and layer 5\n *    requires the tenant to be part of the lookup key rather than a second\n *    comparison step that can be forgotten.\n *\n * No port method can change the tenant of an existing row. That is not an\n * omission: \"move this to another tenant\" is the one operation that would make\n * every cross-tenant assertion in the conformance suite unfalsifiable.\n */\nimport type { ActivityStore, PresenceStore } from './presence';\nimport type { BoardStore } from './board';\nimport type { MailboxStore } from './mailbox';\nimport type { ObjectStore } from './blob';\nimport type { QuotaStore } from './quota';\nimport type { TenantId } from './tenant';\nimport type { TruthStore } from './truth';\n\n/**\n * Injected time.\n *\n * TTL semantics (presence expiry, activity expiry, reservation expiry) are\n * behavior the conformance suite has to assert deterministically, which is\n * impossible against a wall clock. Compositions inject one; nothing in core\n * calls `Date.now()` directly.\n */\nexport interface Clock {\n  now(): Date;\n}\n\n/** A clock pinned to a fixed instant, advanced explicitly. Used by tests and the in-memory reference. */\nexport interface MutableClock extends Clock {\n  advance(ms: number): void;\n  set(instant: Date): void;\n}\n\n/** Every port a composition must supply. */\nexport interface CoreStores {\n  readonly mailbox: MailboxStore;\n  readonly board: BoardStore;\n  readonly truth: TruthStore;\n  readonly presence: PresenceStore;\n  readonly activity: ActivityStore;\n  readonly objects: ObjectStore;\n  readonly quota: QuotaStore;\n}\n\n/** Names of the ports in {@link CoreStores}, in contract order. */\nexport const CORE_STORE_NAMES = [\n  'mailbox',\n  'board',\n  'truth',\n  'presence',\n  'activity',\n  'objects',\n  'quota',\n] as const;\n\nexport type CoreStoreName = (typeof CORE_STORE_NAMES)[number];\n\n// Layer 2 of §12.6.2 — the tenant-closed facade a handler actually receives —\n// is deliberately not here. It is shaped by how handlers are written, and the\n// first handlers land in `@byok-sdk/cloud` (S3). Defining it now would mean\n// guessing that shape and freezing the guess into the contract package that\n// every later sprint depends on. The tenant-first ports below are what make\n// that facade a thin binding rather than a new authority.\n","/**\n * The declared method inventory of every core port (sprint I7).\n *\n * This table is contract data, not test data — it says what a port IS, and it\n * is enforced from two directions that must read the same table:\n *\n * - `__tests__/constraints.test.ts` scans the *source interfaces* in this\n *   package and asserts each listed method exists, is async, and takes a\n *   required `TenantId` first.\n * - `@byok-sdk/conformance`'s port-inventory dimension asserts every *composition\n *   under test* implements exactly these methods — no missing method, and no\n *   extra one that the contract has not pinned down and that therefore no\n *   other composition would implement.\n *\n * It lives in shipped source rather than under `__tests__/` because the second\n * enforcer is now a separate package (S4A story O-005): a `core → conformance`\n * devDependency for a table `core` itself asserts against would be a cycle,\n * and the direction that has to hold is `conformance → core`.\n *\n * Adding a port method means editing this table, which is the point: a port\n * grows by contract, not by whichever composition needed something.\n */\nimport type { CoreStoreName } from './stores';\n\nexport const CORE_PORT_METHODS: Readonly<Record<CoreStoreName, readonly string[]>> = {\n  mailbox: ['append', 'readAfter', 'advanceCursor', 'readCursor', 'collectRetired'],\n  board: ['create', 'get', 'list', 'claim', 'unclaim', 'updateStatus'],\n  truth: ['writeTerminal', 'writeSnapshot', 'getRecord', 'listManifest'],\n  presence: ['publish', 'read', 'list'],\n  activity: ['append', 'read'],\n  objects: [\n    'putManifest',\n    'commit',\n    'get',\n    'list',\n    'addReference',\n    'removeReference',\n    'markDeletePending',\n    'markDeleted',\n  ],\n  quota: [\n    'readEntitlement',\n    'writeEntitlement',\n    'readUsage',\n    'readStatus',\n    'readReservation',\n    'reserve',\n    'finalizeReservation',\n    'abortReservation',\n    'expireReservations',\n    'applyMailboxDelta',\n  ],\n};\n\n/** The interface each port name is declared as, for the source-side scan. */\nexport const CORE_PORT_INTERFACES: Readonly<Record<CoreStoreName, string>> = {\n  mailbox: 'MailboxStore',\n  board: 'BoardStore',\n  truth: 'TruthStore',\n  presence: 'PresenceStore',\n  activity: 'ActivityStore',\n  objects: 'ObjectStore',\n  quota: 'QuotaStore',\n};\n","/**\n * Device proof envelope and canonical signing bytes (§12.6.3, sprint §S6.2).\n *\n * Three things live here and nothing else:\n *\n * 1. **The protected-claims schema.** Every field a signature must cover so the\n *    proof binds a *specific request*: tenant, product, device, key + epoch,\n *    request id, operation, resource, the request line (method+path or a stable\n *    operation id), and the body's hash *and* size. Signing only the body is\n *    forbidden — it would let a valid proof be replayed against a different\n *    operation or resource.\n * 2. **A dependency-free deterministic canonicalizer.** RFC 8785 (JCS) in the\n *    narrow subset the envelope allows. Node and Workers must produce\n *    byte-identical output, so the accepted value space is deliberately small:\n *    strings, booleans, null, safe integers, plain objects, arrays. Floats,\n *    non-safe integers, `NaN`, `Infinity`, `undefined`, `bigint`, dates and\n *    class instances throw instead of being coerced — a signature over a value\n *    whose serialization is implementation-defined is not a signature.\n * 3. **The verify port.** An interface, never an implementation: core is\n *    Node-free and Workers-safe, and `node:crypto` and WebCrypto disagree about\n *    key handling. The composition brings its own verifier.\n *\n * Claims are **untrusted input**. `tenantId` here is a plain string, not a\n * branded `TenantId`, because a device asserting a tenant proves nothing: the\n * claim is a lookup key used to load the device row, and the row is the\n * authority (§12.6.2 layer 5). Branding happens after that lookup, not here.\n */\nimport { z } from 'zod';\nimport { CONTENT_HASH_PATTERN } from './blob';\nimport { ByokCoreError } from './errors';\n\n/** Envelope schema id, self-consistent with the domain prefix below. */\nexport const DEVICE_PROOF_SCHEMA_ID = 'byok-device-proof-v1';\n\n/**\n * Domain separation prefix (§12.6.3). Prepended to the canonical claim bytes\n * before signing so a device-proof signature can never be replayed as a nonce\n * signature (`byok-nonce-v1\\n`) or a record attestation.\n */\nexport const DEVICE_PROOF_DOMAIN_PREFIX = 'byok-device-proof-v1\\n';\n\nexport const DEVICE_PROOF_VERSION = 1;\n\n/** Signature algorithms this envelope version admits. */\nexport const DEVICE_PROOF_ALGORITHMS = ['ed25519'] as const;\nexport type DeviceProofAlgorithm = (typeof DEVICE_PROOF_ALGORITHMS)[number];\n\nconst BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;\nconst HTTP_METHOD_PATTERN = /^[A-Z]+$/;\n\n// ---------------------------------------------------------------------------\n// Canonicalization (RFC 8785 subset)\n// ---------------------------------------------------------------------------\n\nexport type JsonPrimitive = string | number | boolean | null;\nexport type JsonValue = JsonPrimitive | readonly JsonValue[] | { readonly [key: string]: JsonValue };\nexport type JsonObject = { readonly [key: string]: JsonValue };\n\nfunction canonicalizationFailure(path: string, reason: string): ByokCoreError {\n  return new ByokCoreError(\n    'proof_canonicalization_failed',\n    `Cannot canonicalize ${path}: ${reason}`,\n  );\n}\n\nfunction isPlainObject(value: object): boolean {\n  const prototype: unknown = Object.getPrototypeOf(value);\n  return prototype === Object.prototype || prototype === null;\n}\n\nfunction canonicalizeValue(value: unknown, path: string, seen: Set<object>): string {\n  if (value === null) return 'null';\n\n  switch (typeof value) {\n    case 'boolean':\n      return value ? 'true' : 'false';\n    case 'string':\n      // JSON.stringify implements exactly the ECMAScript string serialization\n      // RFC 8785 mandates, including well-formed escaping of lone surrogates.\n      return JSON.stringify(value);\n    case 'number': {\n      if (!Number.isSafeInteger(value)) {\n        throw canonicalizationFailure(\n          path,\n          `only safe integers are canonicalizable, received ${String(value)}`,\n        );\n      }\n      // Normalizes -0 to 0; RFC 8785 has no signed zero.\n      return String(value === 0 ? 0 : value);\n    }\n    case 'undefined':\n      throw canonicalizationFailure(path, 'undefined has no canonical form');\n    case 'bigint':\n      throw canonicalizationFailure(path, 'bigint is not a JSON type');\n    case 'function':\n    case 'symbol':\n      throw canonicalizationFailure(path, `${typeof value} is not a JSON type`);\n    case 'object':\n      break;\n    default:\n      throw canonicalizationFailure(path, `unsupported type ${typeof value}`);\n  }\n\n  const objectValue = value as object;\n  if (seen.has(objectValue)) {\n    throw canonicalizationFailure(path, 'circular reference');\n  }\n  seen.add(objectValue);\n  try {\n    if (Array.isArray(objectValue)) {\n      const parts = objectValue.map((entry, index) =>\n        canonicalizeValue(entry, `${path}[${index}]`, seen),\n      );\n      return `[${parts.join(',')}]`;\n    }\n    if (!isPlainObject(objectValue)) {\n      throw canonicalizationFailure(\n        path,\n        'only plain objects and arrays are canonicalizable',\n      );\n    }\n    // Default string sort compares UTF-16 code units, which is what RFC 8785\n    // specifies for member ordering.\n    const keys = Object.keys(objectValue).sort();\n    const record = objectValue as Record<string, unknown>;\n    const parts = keys.map((key) => {\n      const encodedKey = JSON.stringify(key);\n      const encodedValue = canonicalizeValue(record[key], `${path}.${key}`, seen);\n      return `${encodedKey}:${encodedValue}`;\n    });\n    return `{${parts.join(',')}}`;\n  } finally {\n    seen.delete(objectValue);\n  }\n}\n\n/**\n * Canonical JSON text for `value`, per RFC 8785 restricted to the value space\n * above. Key insertion order never affects the output; anything outside the\n * accepted space throws `proof_canonicalization_failed`.\n */\nexport function canonicalizeJson(value: JsonValue): string {\n  return canonicalizeValue(value, '<root>', new Set());\n}\n\n/** UTF-8 bytes of {@link canonicalizeJson}. `TextEncoder` is a platform global on Node and Workers. */\nexport function canonicalizeJsonBytes(value: JsonValue): Uint8Array {\n  return new TextEncoder().encode(canonicalizeJson(value));\n}\n\n// ---------------------------------------------------------------------------\n// Protected claims\n// ---------------------------------------------------------------------------\n\n/**\n * The signed claim set (§S6.2).\n *\n * The request line is expressible two ways — `method` + `path`, or a stable\n * `operationId` — and exactly one form must be present. Allowing both at once\n * would create two different canonical byte strings for one request; allowing\n * neither would drop the operation binding the whole design rests on.\n */\nexport const DeviceProofProtectedClaimsSchema = z\n  .strictObject({\n    version: z.literal(DEVICE_PROOF_VERSION),\n    tenantId: z.string().min(1),\n    productId: z.string().min(1),\n    deviceId: z.string().min(1),\n    /** Identity of the signing key, resolved against the device row at verify time. */\n    keyId: z.string().min(1),\n    /** Rotation generation. An older epoch is rejected by the verifier, not here. */\n    keyEpoch: z.number().int().nonnegative(),\n    /** Idempotency key: exact replay returns the original result, reuse with a different body is a conflict. */\n    requestId: z.string().min(1),\n    /** Logical operation, e.g. `truth.write`. */\n    operation: z.string().min(1),\n    /** Tenant-scoped resource the operation targets. */\n    resource: z.string().min(1),\n    method: z.string().regex(HTTP_METHOD_PATTERN).optional(),\n    path: z.string().startsWith('/').optional(),\n    operationId: z.string().min(1).optional(),\n    bodySha256: z.string().regex(CONTENT_HASH_PATTERN),\n    /** Bound alongside the hash so a truncation attack cannot hide behind a hash collision claim. */\n    bodySize: z.number().int().nonnegative(),\n    issuedAt: z.iso.datetime(),\n    expiresAt: z.iso.datetime().optional(),\n    nonce: z.string().min(1).optional(),\n  })\n  .superRefine((claims, ctx) => {\n    const hasRequestLine = claims.method !== undefined && claims.path !== undefined;\n    const hasOperationId = claims.operationId !== undefined;\n    if (hasRequestLine === hasOperationId) {\n      ctx.addIssue({\n        code: 'custom',\n        message:\n          'Claims must carry exactly one request binding: both `method` and `path`, or `operationId`.',\n      });\n    }\n    if (!hasRequestLine && (claims.method !== undefined || claims.path !== undefined)) {\n      ctx.addIssue({\n        code: 'custom',\n        message: '`method` and `path` must be supplied together.',\n      });\n    }\n  });\n\nexport type DeviceProofProtectedClaims = z.infer<typeof DeviceProofProtectedClaimsSchema>;\n\nexport const DeviceProofEnvelopeV1Schema = z.strictObject({\n  schema: z.literal(DEVICE_PROOF_SCHEMA_ID),\n  algorithm: z.enum(DEVICE_PROOF_ALGORITHMS),\n  protected: DeviceProofProtectedClaimsSchema,\n  /** base64url, unpadded. */\n  signature: z.string().regex(BASE64URL_PATTERN),\n});\n\nexport type DeviceProofEnvelopeV1 = z.infer<typeof DeviceProofEnvelopeV1Schema>;\n\n/**\n * Parses an envelope fail-closed.\n *\n * @throws {ByokCoreError} code `proof_envelope_invalid`.\n */\nexport function parseDeviceProofEnvelope(input: unknown): DeviceProofEnvelopeV1 {\n  const result = DeviceProofEnvelopeV1Schema.safeParse(input);\n  if (!result.success) {\n    throw new ByokCoreError(\n      'proof_envelope_invalid',\n      `Invalid device proof envelope: ${result.error.issues\n        .map((issue) => `${issue.path.join('.') || '<root>'}: ${issue.message}`)\n        .join('; ')}`,\n      { cause: result.error },\n    );\n  }\n  return result.data;\n}\n\n/**\n * Projects claims into the exact JSON object that gets canonicalized.\n *\n * Built field by field rather than by spreading the parsed object: an absent\n * optional must be an *absent key*, never a key holding `undefined`, or\n * `{nonce: undefined}` and `{}` would be the same request with two different\n * signatures. The canonicalizer refuses `undefined` outright, so this\n * projection is where absence is decided.\n */\nexport function deviceProofCanonicalClaims(claims: DeviceProofProtectedClaims): JsonObject {\n  const canonical: Record<string, JsonValue> = {\n    version: claims.version,\n    tenantId: claims.tenantId,\n    productId: claims.productId,\n    deviceId: claims.deviceId,\n    keyId: claims.keyId,\n    keyEpoch: claims.keyEpoch,\n    requestId: claims.requestId,\n    operation: claims.operation,\n    resource: claims.resource,\n    bodySha256: claims.bodySha256,\n    bodySize: claims.bodySize,\n    issuedAt: claims.issuedAt,\n  };\n  if (claims.method !== undefined) canonical['method'] = claims.method;\n  if (claims.path !== undefined) canonical['path'] = claims.path;\n  if (claims.operationId !== undefined) canonical['operationId'] = claims.operationId;\n  if (claims.expiresAt !== undefined) canonical['expiresAt'] = claims.expiresAt;\n  if (claims.nonce !== undefined) canonical['nonce'] = claims.nonce;\n  return canonical;\n}\n\n/** Canonical JSON text of the protected claim set, without the domain prefix. */\nexport function deviceProofCanonicalJson(claims: DeviceProofProtectedClaims): string {\n  return canonicalizeJson(deviceProofCanonicalClaims(claims));\n}\n\n/**\n * The exact bytes a device signs and a verifier reconstructs:\n * `byok-device-proof-v1\\n` followed by the canonical claim JSON, UTF-8 encoded.\n *\n * Frozen by `src/__tests__/golden/device-proof-v1.canonical.json`.\n */\nexport function deviceProofSigningInput(claims: DeviceProofProtectedClaims): Uint8Array {\n  return new TextEncoder().encode(\n    DEVICE_PROOF_DOMAIN_PREFIX + deviceProofCanonicalJson(claims),\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Verify port\n// ---------------------------------------------------------------------------\n\nexport interface DeviceProofVerifyInput {\n  readonly algorithm: DeviceProofAlgorithm;\n  /** Raw public key, base64url — the JWK `x` encoding the device registry stores. */\n  readonly publicKey: string;\n  readonly signature: string;\n  readonly signingInput: Uint8Array;\n}\n\n/**\n * Injected signature verification.\n *\n * Not a store port, so it has no tenant parameter: it answers a pure\n * cryptographic question about bytes. Deciding *which* key to check against is\n * the caller's tenant-scoped device-row lookup, and keeping that out of here is\n * what stops a verifier from becoming a second authority on device identity.\n */\nexport interface DeviceProofVerifier {\n  verify(input: DeviceProofVerifyInput): Promise<boolean>;\n}\n","/**\n * In-memory {@link PresenceStore} and {@link ActivityStore} reference (§12.3).\n *\n * Expiry is absence. A hint past its `expiresAt` is filtered out of every read\n * and lazily dropped, so no reader can ever observe a stale level and mistake\n * it for a live one. Both stores read time from the injected clock, which is\n * what lets the conformance suite assert expiry without sleeping.\n */\nimport { ByokCoreError } from '../errors';\nimport {\n  DEFAULT_ACTIVITY_CAPACITY,\n  type ActivityAppendInput,\n  type ActivityEntry,\n  type ActivityStore,\n  type ActivityTail,\n  type PresenceHint,\n  type PresenceHintInput,\n  type PresenceStore,\n} from '../presence';\nimport type { Clock } from '../stores';\nimport { tenantKey, type TenantId } from '../tenant';\n\nfunction assertTtl(ttlMs: number): void {\n  if (!Number.isFinite(ttlMs) || ttlMs <= 0) {\n    throw new ByokCoreError(\n      'hint_ttl_invalid',\n      `Hint ttl must be a positive number of milliseconds, received ${String(ttlMs)}.`,\n    );\n  }\n}\n\nfunction assertMinimumInterval(minimumIntervalMs: number): void {\n  if (!Number.isFinite(minimumIntervalMs) || minimumIntervalMs < 0) {\n    throw new ByokCoreError(\n      'hint_ttl_invalid',\n      `Hint minimum interval must be a non-negative number of milliseconds, received ${String(minimumIntervalMs)}.`,\n    );\n  }\n}\n\nexport class InMemoryPresenceStore implements PresenceStore {\n  readonly #hints = new Map<string, PresenceHint>();\n  readonly #clock: Clock;\n\n  constructor(clock: Clock) {\n    this.#clock = clock;\n  }\n\n  async publish(tenant: TenantId, input: PresenceHintInput): Promise<PresenceHint> {\n    assertTtl(input.ttlMs);\n    assertMinimumInterval(input.minimumIntervalMs);\n    const now = this.#clock.now();\n    const key = tenantKey(tenant, input.deviceId);\n    const existing = this.#hints.get(key);\n    if (\n      existing !== undefined &&\n      now.toISOString() < existing.expiresAt &&\n      now.getTime() - Date.parse(existing.observedAt) < input.minimumIntervalMs\n    ) {\n      throw new ByokCoreError(\n        'hint_rate_limited',\n        `Presence for ${input.deviceId} was published more recently than the configured minimum interval.`,\n      );\n    }\n    const hint: PresenceHint = {\n      tenantId: tenant,\n      deviceId: input.deviceId,\n      level: input.level,\n      ...(input.detail === undefined ? {} : { detail: input.detail }),\n      observedAt: now.toISOString(),\n      expiresAt: new Date(now.getTime() + input.ttlMs).toISOString(),\n    };\n    this.#hints.set(key, hint);\n    return hint;\n  }\n\n  async read(tenant: TenantId, deviceId: string): Promise<PresenceHint | undefined> {\n    const key = tenantKey(tenant, deviceId);\n    const hint = this.#hints.get(key);\n    if (hint === undefined) return undefined;\n    if (this.#isExpired(hint.expiresAt)) {\n      this.#hints.delete(key);\n      return undefined;\n    }\n    return hint;\n  }\n\n  async list(tenant: TenantId): Promise<readonly PresenceHint[]> {\n    const prefix = tenantKey(tenant, '');\n    const live: PresenceHint[] = [];\n    for (const [key, hint] of [...this.#hints.entries()]) {\n      if (!key.startsWith(prefix)) continue;\n      if (this.#isExpired(hint.expiresAt)) {\n        this.#hints.delete(key);\n        continue;\n      }\n      live.push(hint);\n    }\n    live.sort((left, right) => left.deviceId.localeCompare(right.deviceId));\n    return live;\n  }\n\n  #isExpired(expiresAt: string): boolean {\n    return this.#clock.now().toISOString() >= expiresAt;\n  }\n}\n\nexport class InMemoryActivityStore implements ActivityStore {\n  readonly #tails = new Map<string, ActivityTail>();\n  readonly #clock: Clock;\n\n  constructor(clock: Clock) {\n    this.#clock = clock;\n  }\n\n  async append(tenant: TenantId, input: ActivityAppendInput): Promise<ActivityTail> {\n    assertTtl(input.ttlMs);\n    const capacity = input.capacity ?? DEFAULT_ACTIVITY_CAPACITY;\n    if (!Number.isSafeInteger(capacity) || capacity <= 0) {\n      throw new ByokCoreError(\n        'activity_capacity_invalid',\n        `Activity capacity must be a positive integer, received ${String(capacity)}.`,\n      );\n    }\n    if (input.details.length === 0 || !Number.isSafeInteger(input.dropped) || input.dropped < 0) {\n      throw new ByokCoreError(\n        'activity_batch_invalid',\n        'Activity batches require at least one detail and a non-negative integer dropped count.',\n      );\n    }\n\n    const now = this.#clock.now();\n    const key = tenantKey(tenant, input.taskId);\n    const existing = this.#tails.get(key);\n    const live =\n      existing !== undefined && now.toISOString() < existing.expiresAt ? existing : undefined;\n\n    const appended: ActivityEntry[] = input.details.map((detail) => ({\n      at: now.toISOString(),\n      detail,\n    }));\n    const entries = [...(live?.entries ?? []), ...appended];\n    let dropped = (live?.dropped ?? 0) + input.dropped;\n    while (entries.length > capacity) {\n      entries.shift();\n      // Lossiness is data, not an omission: a reader can tell \"nothing\n      // happened\" from \"we lost the middle\".\n      dropped += 1;\n    }\n\n    const tail: ActivityTail = {\n      tenantId: tenant,\n      taskId: input.taskId,\n      entries,\n      dropped,\n      capacity,\n      expiresAt: new Date(now.getTime() + input.ttlMs).toISOString(),\n    };\n    this.#tails.set(key, tail);\n    return tail;\n  }\n\n  async read(tenant: TenantId, taskId: string): Promise<ActivityTail | undefined> {\n    const key = tenantKey(tenant, taskId);\n    const tail = this.#tails.get(key);\n    if (tail === undefined) return undefined;\n    if (this.#clock.now().toISOString() >= tail.expiresAt) {\n      this.#tails.delete(key);\n      return undefined;\n    }\n    return tail;\n  }\n}\n","/**\n * In-memory {@link BoardStore} reference (§12.3).\n *\n * The claim path is the interesting one: because JavaScript resolves each\n * `await` boundary atomically here, N concurrent `claim` calls serialize and\n * exactly one finds `assignee === undefined`. A SQL composition gets the same\n * outcome from a conditional `UPDATE ... WHERE assignee IS NULL`; the\n * conformance suite asserts the outcome, not the mechanism.\n *\n * `boardSeq` is per tenant and bumps on every mutation, which is what makes\n * `list({ afterSeq })` an incremental feed that cannot leak another tenant's\n * write rate.\n */\nimport {\n  isLegalBoardTransition,\n  type BoardClaimInput,\n  type BoardItem,\n  type BoardItemInput,\n  type BoardListQuery,\n  type BoardPage,\n  type BoardStatusUpdateInput,\n  type BoardStore,\n  type BoardUnclaimInput,\n} from '../board';\nimport { ByokCoreError, CoreConflictError } from '../errors';\nimport type { Clock } from '../stores';\nimport { tenantKey, type TenantId } from '../tenant';\n\nconst DEFAULT_LIST_LIMIT = 50;\n\nexport class InMemoryBoardStore implements BoardStore {\n  readonly #items = new Map<string, BoardItem>();\n  readonly #seqByTenant = new Map<string, number>();\n  readonly #clock: Clock;\n\n  constructor(clock: Clock) {\n    this.#clock = clock;\n  }\n\n  async create(tenant: TenantId, input: BoardItemInput): Promise<BoardItem> {\n    const key = tenantKey(tenant, input.itemId);\n    if (this.#items.has(key)) {\n      throw new ByokCoreError(\n        'board_item_exists',\n        `Board item ${input.itemId} already exists in this tenant.`,\n      );\n    }\n    const now = this.#now();\n    const item: BoardItem = {\n      tenantId: tenant,\n      itemId: input.itemId,\n      channel: input.channel,\n      title: input.title,\n      status: input.status ?? 'todo',\n      boardSeq: this.#nextSeq(tenant),\n      createdAt: now,\n      updatedAt: now,\n    };\n    this.#items.set(key, item);\n    return item;\n  }\n\n  async get(tenant: TenantId, itemId: string): Promise<BoardItem | undefined> {\n    return this.#items.get(tenantKey(tenant, itemId));\n  }\n\n  async list(tenant: TenantId, query: BoardListQuery): Promise<BoardPage> {\n    const afterSeq = query.afterSeq ?? 0;\n    const limit = query.limit ?? DEFAULT_LIST_LIMIT;\n    const prefix = tenantKey(tenant, '');\n    const matches: BoardItem[] = [];\n    for (const [key, item] of this.#items.entries()) {\n      if (!key.startsWith(prefix)) continue;\n      if (item.boardSeq <= afterSeq) continue;\n      if (query.channel !== undefined && item.channel !== query.channel) continue;\n      if (query.status !== undefined && item.status !== query.status) continue;\n      matches.push(item);\n    }\n    matches.sort((left, right) => left.boardSeq - right.boardSeq);\n    const page = matches.slice(0, limit);\n    return {\n      items: page,\n      nextSeq: page.at(-1)?.boardSeq ?? afterSeq,\n      hasMore: matches.length > page.length,\n    };\n  }\n\n  async claim(tenant: TenantId, input: BoardClaimInput): Promise<BoardItem> {\n    const item = this.#require(tenant, input.itemId);\n    const expectedStatus = input.expectedStatus ?? 'todo';\n\n    if (item.assignee !== undefined) {\n      if (item.assignee.holderId === input.holderId) {\n        // The same holder retrying is not a second winner. But an *explicit*\n        // expectedStatus is a full CAS by contract, and skipping it here would\n        // let the holder's retry succeed against a status it no longer believes\n        // in — a CAS in name only. The default is not applied on this path: a\n        // retry of a successful claim legitimately observes `in_progress`.\n        if (input.expectedStatus !== undefined && item.status !== input.expectedStatus) {\n          throw new CoreConflictError(\n            'board_status_conflict',\n            `Board item ${input.itemId} is ${item.status}, not ${input.expectedStatus}.`,\n            item,\n            this.#now(),\n          );\n        }\n        return item;\n      }\n      throw new CoreConflictError(\n        'board_claim_conflict',\n        `Board item ${input.itemId} is held by ${item.assignee.holderId}.`,\n        item,\n        this.#now(),\n      );\n    }\n    if (item.status !== expectedStatus) {\n      throw new CoreConflictError(\n        'board_status_conflict',\n        `Board item ${input.itemId} is ${item.status}, not ${expectedStatus}.`,\n        item,\n        this.#now(),\n      );\n    }\n    if (item.status !== 'todo' && item.status !== 'in_progress') {\n      throw new CoreConflictError(\n        'board_transition_invalid',\n        `Board item ${input.itemId} cannot be claimed from ${item.status}.`,\n        item,\n        this.#now(),\n      );\n    }\n\n    const now = this.#now();\n    const claimed: BoardItem = {\n      ...item,\n      status: item.status === 'todo' ? 'in_progress' : item.status,\n      assignee: { holderId: input.holderId, heldSince: now },\n      boardSeq: this.#nextSeq(tenant),\n      updatedAt: now,\n    };\n    this.#items.set(tenantKey(tenant, input.itemId), claimed);\n    return claimed;\n  }\n\n  async unclaim(tenant: TenantId, input: BoardUnclaimInput): Promise<BoardItem> {\n    const item = this.#require(tenant, input.itemId);\n    if (item.assignee === undefined) {\n      throw new ByokCoreError(\n        'board_not_held',\n        `Board item ${input.itemId} is not held by anyone.`,\n      );\n    }\n    if (item.assignee.holderId !== input.holderId) {\n      throw new CoreConflictError(\n        'board_claim_conflict',\n        `Board item ${input.itemId} is held by ${item.assignee.holderId}, not ${input.holderId}.`,\n        item,\n        this.#now(),\n      );\n    }\n    const now = this.#now();\n    const released: BoardItem = {\n      tenantId: item.tenantId,\n      itemId: item.itemId,\n      channel: item.channel,\n      title: item.title,\n      status: item.status === 'in_progress' ? 'todo' : item.status,\n      boardSeq: this.#nextSeq(tenant),\n      createdAt: item.createdAt,\n      updatedAt: now,\n    };\n    this.#items.set(tenantKey(tenant, input.itemId), released);\n    return released;\n  }\n\n  async updateStatus(tenant: TenantId, input: BoardStatusUpdateInput): Promise<BoardItem> {\n    const item = this.#require(tenant, input.itemId);\n    if (item.status !== input.expectedStatus) {\n      throw new CoreConflictError(\n        'board_status_conflict',\n        `Board item ${input.itemId} is ${item.status}, not ${input.expectedStatus}.`,\n        item,\n        this.#now(),\n      );\n    }\n    if (input.holderId !== undefined && item.assignee?.holderId !== input.holderId) {\n      throw new CoreConflictError(\n        'board_claim_conflict',\n        `Board item ${input.itemId} is not held by ${input.holderId}.`,\n        item,\n        this.#now(),\n      );\n    }\n    if (!isLegalBoardTransition(input.expectedStatus, input.status)) {\n      throw new CoreConflictError(\n        'board_transition_invalid',\n        `${input.expectedStatus} to ${input.status} is not a legal board transition.`,\n        item,\n        this.#now(),\n      );\n    }\n    const now = this.#now();\n    const updated: BoardItem = {\n      ...item,\n      status: input.status,\n      boardSeq: this.#nextSeq(tenant),\n      updatedAt: now,\n    };\n    this.#items.set(tenantKey(tenant, input.itemId), updated);\n    return updated;\n  }\n\n  #require(tenant: TenantId, itemId: string): BoardItem {\n    const item = this.#items.get(tenantKey(tenant, itemId));\n    if (item === undefined) {\n      throw new ByokCoreError(\n        'board_item_not_found',\n        `Board item ${itemId} does not exist in this tenant.`,\n      );\n    }\n    return item;\n  }\n\n  #nextSeq(tenant: TenantId): number {\n    const next = (this.#seqByTenant.get(tenant) ?? 0) + 1;\n    this.#seqByTenant.set(tenant, next);\n    return next;\n  }\n\n  #now(): string {\n    return this.#clock.now().toISOString();\n  }\n}\n","/**\n * In-memory {@link MailboxStore} reference (§12.7.3).\n *\n * Every row lives under a `(tenant, device)` composite key, so a cross-tenant\n * read is not \"denied\" — it addresses a different key space and finds nothing.\n * That is the in-memory expression of §12.6.2 layer 3: there is no bare device\n * index to accidentally query.\n */\nimport { ByokCoreError, CoreConflictError } from '../errors';\nimport type {\n  MailboxAdvanceCursorInput,\n  MailboxAppendInput,\n  MailboxCursorState,\n  MailboxMessage,\n  MailboxPage,\n  MailboxReadQuery,\n  MailboxRetentionInput,\n  MailboxRetentionResult,\n  MailboxStore,\n} from '../mailbox';\nimport type { Clock } from '../stores';\nimport { tenantKey, type TenantId } from '../tenant';\nimport { assertCanonicalTimestamp } from '../time';\n\nconst DEFAULT_READ_LIMIT = 50;\n\ninterface DeviceMailbox {\n  nextSeq: number;\n  ackedSeq: number;\n  cursorUpdatedAt: string;\n  readonly messages: MailboxMessage[];\n  readonly byMessageId: Map<string, MailboxMessage>;\n}\n\nexport class InMemoryMailboxStore implements MailboxStore {\n  readonly #devices = new Map<string, DeviceMailbox>();\n  readonly #clock: Clock;\n\n  constructor(clock: Clock) {\n    this.#clock = clock;\n  }\n\n  async append(tenant: TenantId, input: MailboxAppendInput): Promise<MailboxMessage> {\n    const device = this.#device(tenant, input.deviceId);\n    const existing = device.byMessageId.get(input.messageId);\n    if (existing !== undefined) return existing;\n\n    const message: MailboxMessage = {\n      tenantId: tenant,\n      deviceId: input.deviceId,\n      seq: device.nextSeq,\n      messageId: input.messageId,\n      body: input.body,\n      bodyHash: input.bodyHash,\n      byteSize: input.byteSize,\n      state: 'pending',\n      appendedAt: this.#now(),\n    };\n    device.nextSeq += 1;\n    device.messages.push(message);\n    device.byMessageId.set(message.messageId, message);\n    return message;\n  }\n\n  async readAfter(tenant: TenantId, query: MailboxReadQuery): Promise<MailboxPage> {\n    const device = this.#devices.get(tenantKey(tenant, query.deviceId));\n    const limit = query.limit ?? DEFAULT_READ_LIMIT;\n    if (device === undefined) {\n      return { messages: [], nextSeq: query.afterSeq, hasMore: false };\n    }\n    const pending = device.messages\n      .filter((message) => message.state === 'pending' && message.seq > query.afterSeq)\n      .sort((left, right) => left.seq - right.seq);\n    const page = pending.slice(0, limit);\n    const last = page.at(-1);\n    return {\n      messages: page,\n      // Reading is not acknowledging: the returned position is a *read* cursor.\n      // Nothing above was mutated, so an identical call replays the same page.\n      nextSeq: last?.seq ?? query.afterSeq,\n      hasMore: pending.length > page.length,\n    };\n  }\n\n  async advanceCursor(\n    tenant: TenantId,\n    input: MailboxAdvanceCursorInput,\n  ): Promise<MailboxCursorState> {\n    const device = this.#device(tenant, input.deviceId);\n    if (input.ackedSeq < device.ackedSeq) {\n      throw new CoreConflictError(\n        'mailbox_cursor_regression',\n        `Cursor for device ${input.deviceId} is at ${device.ackedSeq}; refusing to move it back to ${input.ackedSeq}.`,\n        this.#cursorState(tenant, input.deviceId, device),\n        this.#now(),\n      );\n    }\n    device.ackedSeq = input.ackedSeq;\n    device.cursorUpdatedAt = this.#now();\n    for (const [index, message] of device.messages.entries()) {\n      if (message.state === 'pending' && message.seq <= input.ackedSeq) {\n        device.messages[index] = { ...message, state: 'acked' };\n        device.byMessageId.set(message.messageId, device.messages[index]!);\n      }\n    }\n    return this.#cursorState(tenant, input.deviceId, device);\n  }\n\n  async readCursor(tenant: TenantId, deviceId: string): Promise<MailboxCursorState> {\n    const device = this.#devices.get(tenantKey(tenant, deviceId));\n    if (device === undefined) {\n      return { tenantId: tenant, deviceId, ackedSeq: 0, updatedAt: this.#now() };\n    }\n    return this.#cursorState(tenant, deviceId, device);\n  }\n\n  async collectRetired(\n    tenant: TenantId,\n    input: MailboxRetentionInput,\n  ): Promise<MailboxRetentionResult> {\n    // Both cutoffs are compared against `appendedAt` as strings; the canonical\n    // form is what makes that a time comparison. Validate before the sweep so a\n    // malformed cutoff deletes nothing rather than a wrong prefix of history.\n    assertCanonicalTimestamp(input.ackedBefore, 'ackedBefore');\n    assertCanonicalTimestamp(input.expireUnackedBefore, 'expireUnackedBefore');\n\n    let deletedCount = 0;\n    let expiredCount = 0;\n    let releasedBytes = 0n;\n\n    for (const [key, device] of this.#devices.entries()) {\n      if (!key.startsWith(tenantKey(tenant, ''))) continue;\n      if (input.deviceId !== undefined && key !== tenantKey(tenant, input.deviceId)) continue;\n\n      for (let index = device.messages.length - 1; index >= 0; index -= 1) {\n        const message = device.messages[index]!;\n        if (message.state === 'acked' && message.appendedAt < input.ackedBefore) {\n          device.messages.splice(index, 1);\n          device.byMessageId.delete(message.messageId);\n          deletedCount += 1;\n          releasedBytes += message.byteSize;\n          continue;\n        }\n        if (message.state === 'pending' && message.appendedAt < input.expireUnackedBefore) {\n          // Dead-letter, never delete: §12.7.5 requires an unacked row that\n          // aged out to stay visible instead of disappearing silently.\n          const expired: MailboxMessage = { ...message, state: 'expired' };\n          device.messages[index] = expired;\n          device.byMessageId.set(expired.messageId, expired);\n          expiredCount += 1;\n        }\n      }\n    }\n\n    return { deletedCount, expiredCount, releasedBytes };\n  }\n\n  #device(tenant: TenantId, deviceId: string): DeviceMailbox {\n    if (deviceId.length === 0) {\n      throw new ByokCoreError('mailbox_message_not_found', 'Device id must not be empty.');\n    }\n    const key = tenantKey(tenant, deviceId);\n    const existing = this.#devices.get(key);\n    if (existing !== undefined) return existing;\n    const created: DeviceMailbox = {\n      nextSeq: 1,\n      ackedSeq: 0,\n      cursorUpdatedAt: this.#now(),\n      messages: [],\n      byMessageId: new Map(),\n    };\n    this.#devices.set(key, created);\n    return created;\n  }\n\n  #cursorState(\n    tenant: TenantId,\n    deviceId: string,\n    device: DeviceMailbox,\n  ): MailboxCursorState {\n    return {\n      tenantId: tenant,\n      deviceId,\n      ackedSeq: device.ackedSeq,\n      updatedAt: device.cursorUpdatedAt,\n    };\n  }\n\n  #now(): string {\n    return this.#clock.now().toISOString();\n  }\n}\n","/**\n * In-memory {@link ObjectStore} reference (§12.7.4, §12.7.8).\n *\n * Metadata only — there are no bytes here, and there are none in the Postgres\n * composition either: the manifest is the transaction authority and the object\n * store holds the payload. `refCount` is derived from the reference rows rather\n * than incremented in place, so a double `addReference` for the same\n * `(refKind, refId)` cannot inflate it and strand an object forever.\n */\nimport {\n  isLegalObjectTransition,\n  type ContentHash,\n  type ObjectCommitInput,\n  type ObjectListQuery,\n  type ObjectManifestEntry,\n  type ObjectManifestInput,\n  type ObjectReference,\n  type ObjectReferenceInput,\n  type ObjectStore,\n} from '../blob';\nimport { ByokCoreError } from '../errors';\nimport type { Clock } from '../stores';\nimport { tenantKey, type TenantId } from '../tenant';\nimport { assertCanonicalTimestamp } from '../time';\n\nconst DEFAULT_LIST_LIMIT = 100;\n\nexport class InMemoryObjectStore implements ObjectStore {\n  readonly #manifest = new Map<string, ObjectManifestEntry>();\n  readonly #references = new Map<string, ObjectReference>();\n  readonly #clock: Clock;\n\n  constructor(clock: Clock) {\n    this.#clock = clock;\n  }\n\n  async putManifest(\n    tenant: TenantId,\n    input: ObjectManifestInput,\n  ): Promise<ObjectManifestEntry> {\n    const key = tenantKey(tenant, input.hash);\n    const existing = this.#manifest.get(key);\n    if (existing !== undefined && existing.state !== 'deleted') return existing;\n\n    const now = this.#now();\n    const entry: ObjectManifestEntry = {\n      tenantId: tenant,\n      hash: input.hash,\n      byteSize: input.byteSize,\n      contentType: input.contentType,\n      state: 'pending',\n      refCount: 0,\n      createdAt: now,\n      updatedAt: now,\n    };\n    this.#manifest.set(key, entry);\n    return entry;\n  }\n\n  async commit(tenant: TenantId, input: ObjectCommitInput): Promise<ObjectManifestEntry> {\n    const entry = this.#require(tenant, input.hash);\n    if (\n      entry.byteSize !== input.observedByteSize ||\n      entry.contentType !== input.observedContentType\n    ) {\n      throw new ByokCoreError(\n        'storage_integrity_mismatch',\n        `Observed object ${input.hash} (${String(input.observedByteSize)} bytes, ${input.observedContentType}) does not match the declared manifest.`,\n      );\n    }\n    if (entry.state === 'committed') return entry;\n    return this.#transition(tenant, entry, 'committed');\n  }\n\n  async get(tenant: TenantId, hash: ContentHash): Promise<ObjectManifestEntry | undefined> {\n    return this.#manifest.get(tenantKey(tenant, hash));\n  }\n\n  async list(\n    tenant: TenantId,\n    query: ObjectListQuery,\n  ): Promise<readonly ObjectManifestEntry[]> {\n    // The cutoff is compared against `deletePendingAt` as a string below, which\n    // only equals a time comparison for the canonical form. A GC sweep reading\n    // a mis-parsed cutoff would either miss tombstones or take live ones.\n    if (query.deletePendingBefore !== undefined) {\n      assertCanonicalTimestamp(query.deletePendingBefore, 'deletePendingBefore');\n    }\n    const prefix = tenantKey(tenant, '');\n    const matches: ObjectManifestEntry[] = [];\n    for (const [key, entry] of this.#manifest.entries()) {\n      if (!key.startsWith(prefix)) continue;\n      if (query.state !== undefined && entry.state !== query.state) continue;\n      if (query.deletePendingBefore !== undefined) {\n        if (entry.deletePendingAt === undefined) continue;\n        if (entry.deletePendingAt >= query.deletePendingBefore) continue;\n      }\n      matches.push(entry);\n    }\n    matches.sort((left, right) => left.hash.localeCompare(right.hash));\n    return matches.slice(0, query.limit ?? DEFAULT_LIST_LIMIT);\n  }\n\n  async addReference(\n    tenant: TenantId,\n    input: ObjectReferenceInput,\n  ): Promise<ObjectManifestEntry> {\n    const entry = this.#require(tenant, input.hash);\n    if (entry.state !== 'committed') {\n      throw new ByokCoreError(\n        'object_state_invalid',\n        `Only committed objects can be referenced; ${input.hash} is ${entry.state}.`,\n      );\n    }\n    const refKey = tenantKey(tenant, input.hash, input.refKind, input.refId);\n    if (!this.#references.has(refKey)) {\n      this.#references.set(refKey, {\n        tenantId: tenant,\n        hash: input.hash,\n        refKind: input.refKind,\n        refId: input.refId,\n        createdAt: this.#now(),\n      });\n    }\n    return this.#recount(tenant, entry);\n  }\n\n  async removeReference(\n    tenant: TenantId,\n    input: ObjectReferenceInput,\n  ): Promise<ObjectManifestEntry> {\n    const entry = this.#require(tenant, input.hash);\n    this.#references.delete(tenantKey(tenant, input.hash, input.refKind, input.refId));\n    return this.#recount(tenant, entry);\n  }\n\n  async markDeletePending(\n    tenant: TenantId,\n    hash: ContentHash,\n  ): Promise<ObjectManifestEntry> {\n    const entry = this.#require(tenant, hash);\n    if (entry.refCount !== 0) {\n      throw new ByokCoreError(\n        'object_state_invalid',\n        `Object ${hash} still has ${entry.refCount} reference(s).`,\n      );\n    }\n    return this.#transition(tenant, entry, 'delete_pending');\n  }\n\n  async markDeleted(tenant: TenantId, hash: ContentHash): Promise<ObjectManifestEntry> {\n    const entry = this.#require(tenant, hash);\n    return this.#transition(tenant, entry, 'deleted');\n  }\n\n  #transition(\n    tenant: TenantId,\n    entry: ObjectManifestEntry,\n    next: ObjectManifestEntry['state'],\n  ): ObjectManifestEntry {\n    if (!isLegalObjectTransition(entry.state, next)) {\n      throw new ByokCoreError(\n        'object_state_invalid',\n        `${entry.state} to ${next} is not a legal object manifest transition.`,\n      );\n    }\n    const now = this.#now();\n    const updated: ObjectManifestEntry = {\n      ...entry,\n      state: next,\n      updatedAt: now,\n      ...(next === 'delete_pending' ? { deletePendingAt: now } : {}),\n    };\n    this.#manifest.set(tenantKey(tenant, entry.hash), updated);\n    return updated;\n  }\n\n  #recount(tenant: TenantId, entry: ObjectManifestEntry): ObjectManifestEntry {\n    const refPrefix = tenantKey(tenant, entry.hash, '');\n    let refCount = 0;\n    for (const key of this.#references.keys()) {\n      if (key.startsWith(refPrefix)) refCount += 1;\n    }\n    const updated: ObjectManifestEntry = { ...entry, refCount, updatedAt: this.#now() };\n    this.#manifest.set(tenantKey(tenant, entry.hash), updated);\n    return updated;\n  }\n\n  #require(tenant: TenantId, hash: ContentHash): ObjectManifestEntry {\n    const entry = this.#manifest.get(tenantKey(tenant, hash));\n    if (entry === undefined) {\n      throw new ByokCoreError(\n        'object_not_found',\n        `Object ${hash} has no manifest row in this tenant.`,\n      );\n    }\n    return entry;\n  }\n\n  #now(): string {\n    return this.#clock.now().toISOString();\n  }\n}\n","/**\n * In-memory {@link QuotaStore} reference (§12.7.6-12.7.7).\n *\n * The invariant this file exists to hold is\n * `committed + reserved + expected <= hardLimitBytes`, checked inside\n * {@link InMemoryQuotaStore.reserve} before any bytes are handed out. A\n * Postgres composition does the same check inside a row-locked transaction;\n * both must reject the same set of concurrent reservations, which is what the\n * conformance suite asserts.\n *\n * Per-tenant hash deduplication lives here rather than in the object manifest\n * because usage accounting is what deduplication is *for* (§12.7.6: same\n * tenant, same hash, counted once). In SQL this set is a join against\n * `object_manifest`; here it is an explicit set, and the observable behavior is\n * identical: finalizing an already-committed hash releases the reservation and\n * adds nothing.\n */\nimport { ByokCoreError, CoreConflictError } from '../errors';\nimport type { ObjectStore } from '../blob';\nimport type {\n  MailboxUsageDeltaInput,\n  StorageFinalizeInput,\n  StorageFinalizeResult,\n  StorageReservation,\n  StorageReservationInput,\n  StorageStatus,\n  StorageWritePosture,\n  QuotaStore,\n  TenantStorageEntitlement,\n  TenantStorageEntitlementInput,\n  TenantStorageUsage,\n} from '../quota';\nimport type { Clock } from '../stores';\nimport { tenantKey, type TenantId } from '../tenant';\nimport { assertCanonicalTimestamp } from '../time';\n\n/** Warning threshold from §12.7.8: 80% of the hard limit. */\nconst WARNING_NUMERATOR = 80n;\nconst WARNING_DENOMINATOR = 100n;\n\ninterface ReservationRecord {\n  reservation: StorageReservation;\n  deduplicated: boolean;\n}\n\nexport class InMemoryQuotaStore implements QuotaStore {\n  readonly #entitlements = new Map<string, TenantStorageEntitlement>();\n  readonly #usage = new Map<string, TenantStorageUsage>();\n  readonly #reservations = new Map<string, ReservationRecord>();\n  readonly #committedHashes = new Map<string, Set<string>>();\n  readonly #clock: Clock;\n  readonly #objects: ObjectStore;\n\n  constructor(clock: Clock, objects: ObjectStore) {\n    this.#clock = clock;\n    this.#objects = objects;\n  }\n\n  async readEntitlement(tenant: TenantId): Promise<TenantStorageEntitlement | undefined> {\n    return this.#entitlements.get(tenant);\n  }\n\n  async writeEntitlement(\n    tenant: TenantId,\n    input: TenantStorageEntitlementInput,\n  ): Promise<TenantStorageEntitlement> {\n    // Validated before the version CAS: an unusable deadline is a bad write\n    // regardless of which version wins, and `readStatus` compares this field as\n    // a string (canonical form is what makes that equal a time comparison).\n    if (input.downgradeGraceUntil !== undefined) {\n      assertCanonicalTimestamp(input.downgradeGraceUntil, 'downgradeGraceUntil');\n    }\n    const existing = this.#entitlements.get(tenant);\n    if (existing !== undefined && input.version <= existing.version) {\n      throw new CoreConflictError(\n        'storage_entitlement_version_conflict',\n        `Entitlement is at version ${String(existing.version)}; refusing to apply version ${String(input.version)}.`,\n        existing,\n        this.#now(),\n      );\n    }\n    const entitlement: TenantStorageEntitlement = {\n      tenantId: tenant,\n      version: input.version,\n      hardLimitBytes: input.hardLimitBytes,\n      maxObjectBytes: input.maxObjectBytes,\n      maxInlineBytes: input.maxInlineBytes,\n      mailboxLimitBytes: input.mailboxLimitBytes,\n      retentionPolicyId: input.retentionPolicyId,\n      ...(input.downgradeGraceUntil === undefined\n        ? {}\n        : { downgradeGraceUntil: input.downgradeGraceUntil }),\n    };\n    this.#entitlements.set(tenant, entitlement);\n    return entitlement;\n  }\n\n  async readUsage(tenant: TenantId): Promise<TenantStorageUsage> {\n    return this.#usageOf(tenant);\n  }\n\n  async readStatus(tenant: TenantId): Promise<StorageStatus> {\n    const entitlement = this.#requireEntitlement(tenant);\n    const usage = this.#usageOf(tenant);\n    const used = this.#usedBytes(usage);\n    const graceActive =\n      entitlement.downgradeGraceUntil !== undefined &&\n      this.#now() < entitlement.downgradeGraceUntil;\n    return {\n      entitlement,\n      usage,\n      posture: this.#posture(entitlement, usage, graceActive),\n      availableBytes:\n        used >= entitlement.hardLimitBytes ? 0n : entitlement.hardLimitBytes - used,\n      graceActive,\n    };\n  }\n\n  async readReservation(\n    tenant: TenantId,\n    reservationId: string,\n  ): Promise<StorageReservation | undefined> {\n    return this.#reservations.get(tenantKey(tenant, reservationId))?.reservation;\n  }\n\n  async reserve(\n    tenant: TenantId,\n    input: StorageReservationInput,\n  ): Promise<StorageReservation> {\n    const entitlement = this.#requireEntitlement(tenant);\n    // Admission is the bounded product-side reap point. A daemon may die\n    // after receiving a grant and never call finalize/abort; expired holds\n    // therefore have to be settled before they can deny the next write.\n    await this.expireReservations(tenant);\n    const key = tenantKey(tenant, input.reservationId);\n    const existing = this.#reservations.get(key);\n    if (existing !== undefined) {\n      if (existing.reservation.state === 'reserved') {\n        if (\n          existing.reservation.kind !== input.kind ||\n          existing.reservation.expectedBytes !== input.expectedBytes ||\n          existing.reservation.contentHash !== input.contentHash ||\n          existing.reservation.contentType !== input.contentType\n        ) {\n          throw new ByokCoreError(\n            'storage_integrity_mismatch',\n            `Reservation ${input.reservationId} already binds a different storage declaration.`,\n          );\n        }\n        return existing.reservation;\n      }\n      throw new ByokCoreError(\n        'storage_reservation_expired',\n        `Reservation ${input.reservationId} is already ${existing.reservation.state}.`,\n      );\n    }\n\n    const usage = this.#usageOf(tenant);\n    const graceActive =\n      entitlement.downgradeGraceUntil !== undefined &&\n      this.#now() < entitlement.downgradeGraceUntil;\n    if (this.#posture(entitlement, usage, graceActive) === 'suspended') {\n      throw new ByokCoreError(\n        'storage_write_suspended',\n        'Tenant is over its hard limit and its downgrade grace has ended; durable writes are suspended.',\n      );\n    }\n\n    const perObjectLimit =\n      input.kind === 'object' ? entitlement.maxObjectBytes : entitlement.maxInlineBytes;\n    if (input.expectedBytes > perObjectLimit) {\n      throw new ByokCoreError(\n        'storage_object_too_large',\n        `${String(input.expectedBytes)} bytes exceeds the ${input.kind} limit of ${String(perObjectLimit)} bytes.`,\n      );\n    }\n    if (this.#usedBytes(usage) + input.expectedBytes > entitlement.hardLimitBytes) {\n      throw new ByokCoreError(\n        'storage_quota_exceeded',\n        `Reserving ${String(input.expectedBytes)} bytes would exceed the hard limit of ${String(entitlement.hardLimitBytes)} bytes.`,\n      );\n    }\n\n    const now = this.#now();\n    const reservation: StorageReservation = {\n      tenantId: tenant,\n      reservationId: input.reservationId,\n      state: 'reserved',\n      kind: input.kind,\n      expectedBytes: input.expectedBytes,\n      contentHash: input.contentHash,\n      contentType: input.contentType,\n      createdAt: now,\n      expiresAt: new Date(this.#clock.now().getTime() + input.ttlMs).toISOString(),\n    };\n    this.#reservations.set(key, { reservation, deduplicated: false });\n    this.#setUsage(tenant, { ...usage, reservedBytes: usage.reservedBytes + input.expectedBytes });\n    return reservation;\n  }\n\n  async finalizeReservation(\n    tenant: TenantId,\n    input: StorageFinalizeInput,\n  ): Promise<StorageFinalizeResult> {\n    const key = tenantKey(tenant, input.reservationId);\n    const record = this.#requireReservation(tenant, input.reservationId);\n    const reservation = record.reservation;\n\n    if (reservation.state === 'committed') {\n      return {\n        reservation,\n        usage: this.#usageOf(tenant),\n        deduplicated: record.deduplicated,\n      };\n    }\n    if (reservation.state !== 'reserved') {\n      throw new ByokCoreError(\n        'storage_reservation_expired',\n        `Reservation ${input.reservationId} is ${reservation.state}.`,\n      );\n    }\n    if (this.#now() >= reservation.expiresAt) {\n      this.#settle(tenant, key, record, 'expired');\n      throw new ByokCoreError(\n        'storage_reservation_expired',\n        `Reservation ${input.reservationId} expired at ${reservation.expiresAt}.`,\n      );\n    }\n    if (\n      input.observedByteSize !== reservation.expectedBytes ||\n      input.observedContentType !== reservation.contentType\n    ) {\n      // §12.7.7 step 6: a failed finalize releases the bytes; the uploaded\n      // object becomes an orphan candidate for the GC worker.\n      this.#settle(tenant, key, record, 'aborted');\n      throw new ByokCoreError(\n        'storage_integrity_mismatch',\n        `Observed object does not match reservation ${input.reservationId}.`,\n      );\n    }\n\n    if (reservation.kind === 'object') {\n      try {\n        await this.#objects.commit(tenant, {\n          hash: reservation.contentHash,\n          observedByteSize: input.observedByteSize,\n          observedContentType: input.observedContentType,\n        });\n      } catch (error) {\n        this.#settle(tenant, key, record, 'aborted');\n        if (\n          error instanceof ByokCoreError &&\n          (error.code === 'object_not_found' || error.code === 'object_state_invalid')\n        ) {\n          throw new ByokCoreError(\n            'storage_integrity_mismatch',\n            `Reservation ${input.reservationId} has no committable object manifest.`,\n            { cause: error },\n          );\n        }\n        throw error;\n      }\n    }\n\n    const hashes = this.#hashesOf(tenant);\n    // Same tenant, same hash, counted once (§12.7.6). `#settle` has already\n    // released the reserved bytes, so a deduplicated finalize adds nothing.\n    const deduplicated = hashes.has(reservation.contentHash);\n    const settled = this.#settle(tenant, key, record, 'committed', deduplicated);\n\n    if (!deduplicated) {\n      hashes.add(reservation.contentHash);\n      const current = this.#usageOf(tenant);\n      this.#setUsage(tenant, {\n        ...current,\n        committedObjectBytes:\n          reservation.kind === 'object'\n            ? current.committedObjectBytes + reservation.expectedBytes\n            : current.committedObjectBytes,\n        committedInlineBytes:\n          reservation.kind === 'inline'\n            ? current.committedInlineBytes + reservation.expectedBytes\n            : current.committedInlineBytes,\n        objectCount:\n          reservation.kind === 'object' ? current.objectCount + 1n : current.objectCount,\n      });\n    }\n\n    return { reservation: settled, usage: this.#usageOf(tenant), deduplicated };\n  }\n\n  async abortReservation(\n    tenant: TenantId,\n    reservationId: string,\n  ): Promise<StorageReservation> {\n    const key = tenantKey(tenant, reservationId);\n    const record = this.#requireReservation(tenant, reservationId);\n    if (record.reservation.state !== 'reserved') return record.reservation;\n    return this.#settle(tenant, key, record, 'aborted');\n  }\n\n  async expireReservations(tenant: TenantId): Promise<readonly StorageReservation[]> {\n    const prefix = tenantKey(tenant, '');\n    const now = this.#now();\n    const expired: StorageReservation[] = [];\n    for (const [key, record] of [...this.#reservations.entries()]) {\n      if (!key.startsWith(prefix)) continue;\n      if (record.reservation.state !== 'reserved') continue;\n      if (now < record.reservation.expiresAt) continue;\n      expired.push(this.#settle(tenant, key, record, 'expired'));\n    }\n    return expired;\n  }\n\n  async applyMailboxDelta(\n    tenant: TenantId,\n    input: MailboxUsageDeltaInput,\n  ): Promise<TenantStorageUsage> {\n    const entitlement = this.#requireEntitlement(tenant);\n    const usage = this.#usageOf(tenant);\n    const next = usage.mailboxBytes + input.deltaBytes;\n    if (input.deltaBytes > 0n && next > entitlement.mailboxLimitBytes) {\n      throw new ByokCoreError(\n        'storage_quota_exceeded',\n        `Mailbox would reach ${String(next)} bytes, over the limit of ${String(entitlement.mailboxLimitBytes)} bytes.`,\n      );\n    }\n    this.#setUsage(tenant, { ...usage, mailboxBytes: next < 0n ? 0n : next });\n    return this.#usageOf(tenant);\n  }\n\n  #settle(\n    tenant: TenantId,\n    key: string,\n    record: ReservationRecord,\n    state: Exclude<StorageReservation['state'], 'reserved'>,\n    deduplicated = false,\n  ): StorageReservation {\n    const settled: StorageReservation = {\n      ...record.reservation,\n      state,\n      settledAt: this.#now(),\n    };\n    this.#reservations.set(key, { reservation: settled, deduplicated });\n    const usage = this.#usageOf(tenant);\n    const released = usage.reservedBytes - record.reservation.expectedBytes;\n    this.#setUsage(tenant, { ...usage, reservedBytes: released < 0n ? 0n : released });\n    return settled;\n  }\n\n  #posture(\n    entitlement: TenantStorageEntitlement,\n    usage: TenantStorageUsage,\n    graceActive: boolean,\n  ): StorageWritePosture {\n    const used = this.#usedBytes(usage);\n    if (used >= entitlement.hardLimitBytes) {\n      // A tenant that was downgraded gets its configured grace window; once it\n      // ends and usage is still over the limit, the tenant is read-only (423)\n      // rather than merely unable to add bytes (507).\n      const graceConfigured = entitlement.downgradeGraceUntil !== undefined;\n      return graceConfigured && !graceActive ? 'suspended' : 'blocked';\n    }\n    if (\n      entitlement.hardLimitBytes > 0n &&\n      used * WARNING_DENOMINATOR >= entitlement.hardLimitBytes * WARNING_NUMERATOR\n    ) {\n      return 'warning';\n    }\n    return 'normal';\n  }\n\n  #usedBytes(usage: TenantStorageUsage): bigint {\n    return usage.committedObjectBytes + usage.committedInlineBytes + usage.reservedBytes;\n  }\n\n  #usageOf(tenant: TenantId): TenantStorageUsage {\n    const existing = this.#usage.get(tenant);\n    if (existing !== undefined) return existing;\n    const empty: TenantStorageUsage = {\n      committedObjectBytes: 0n,\n      committedInlineBytes: 0n,\n      reservedBytes: 0n,\n      mailboxBytes: 0n,\n      objectCount: 0n,\n      updatedAt: this.#now(),\n    };\n    this.#usage.set(tenant, empty);\n    return empty;\n  }\n\n  #setUsage(tenant: TenantId, usage: TenantStorageUsage): void {\n    this.#usage.set(tenant, { ...usage, updatedAt: this.#now() });\n  }\n\n  #hashesOf(tenant: TenantId): Set<string> {\n    const existing = this.#committedHashes.get(tenant);\n    if (existing !== undefined) return existing;\n    const created = new Set<string>();\n    this.#committedHashes.set(tenant, created);\n    return created;\n  }\n\n  #requireEntitlement(tenant: TenantId): TenantStorageEntitlement {\n    const entitlement = this.#entitlements.get(tenant);\n    if (entitlement === undefined) {\n      throw new ByokCoreError(\n        'storage_entitlement_missing',\n        'No storage entitlement has been issued for this tenant.',\n      );\n    }\n    return entitlement;\n  }\n\n  #requireReservation(tenant: TenantId, reservationId: string): ReservationRecord {\n    const record = this.#reservations.get(tenantKey(tenant, reservationId));\n    if (record === undefined) {\n      throw new ByokCoreError(\n        'storage_reservation_not_found',\n        `Reservation ${reservationId} does not exist in this tenant.`,\n      );\n    }\n    return record;\n  }\n\n  #now(): string {\n    return this.#clock.now().toISOString();\n  }\n}\n","/**\n * In-memory {@link TruthStore} reference (§12.3, §12.6.4).\n *\n * Two write models, one storage shape. The terminal path is first-write-wins\n * with hash-equality replay; the snapshot path is `expectedRev` CAS. Neither\n * ever merges bodies — a conflict hands back the record it lost to and stops,\n * because the device holding the context is the only party that can decide what\n * the merged truth should be.\n */\nimport { CoreConflictError } from '../errors';\nimport type { Clock } from '../stores';\nimport { tenantKey, type TenantId } from '../tenant';\nimport type {\n  SnapshotWriteInput,\n  TerminalWriteInput,\n  TruthManifestEntry,\n  TruthManifestQuery,\n  TruthRecord,\n  TruthRecordSelector,\n  TruthStore,\n} from '../truth';\n\nconst DEFAULT_MANIFEST_LIMIT = 100;\n\nexport class InMemoryTruthStore implements TruthStore {\n  readonly #records = new Map<string, TruthRecord>();\n  readonly #clock: Clock;\n\n  constructor(clock: Clock) {\n    this.#clock = clock;\n  }\n\n  async writeTerminal(tenant: TenantId, input: TerminalWriteInput): Promise<TruthRecord> {\n    const key = tenantKey(tenant, 'task.terminal', input.taskId);\n    const existing = this.#records.get(key);\n    if (existing !== undefined) {\n      if (existing.contentHash === input.contentHash) {\n        // Exact replay of a committed fact: return the original, unchanged.\n        return existing;\n      }\n      throw new CoreConflictError(\n        'terminal_conflict',\n        `Task ${input.taskId} already has an immutable terminal record with a different hash.`,\n        existing,\n        this.#now(),\n      );\n    }\n    const record: TruthRecord = {\n      tenantId: tenant,\n      kind: 'task.terminal',\n      recordKey: input.taskId,\n      rev: 1,\n      contentHash: input.contentHash,\n      byteSize: input.byteSize,\n      body: input.body,\n      ...(input.label === undefined ? {} : { label: input.label }),\n      ...(input.requestId === undefined ? {} : { requestId: input.requestId }),\n      writtenAt: this.#now(),\n    };\n    this.#records.set(key, record);\n    return record;\n  }\n\n  async writeSnapshot(tenant: TenantId, input: SnapshotWriteInput): Promise<TruthRecord> {\n    const key = tenantKey(tenant, input.kind, input.recordKey);\n    const existing = this.#records.get(key);\n    const currentRev = existing?.rev ?? 0;\n    if (input.expectedRev !== currentRev) {\n      throw new CoreConflictError<TruthRecord | undefined>(\n        'truth_revision_conflict',\n        `Record ${input.kind}/${input.recordKey} is at rev ${currentRev}, not ${input.expectedRev}.`,\n        existing,\n        this.#now(),\n      );\n    }\n    const record: TruthRecord = {\n      tenantId: tenant,\n      kind: input.kind,\n      recordKey: input.recordKey,\n      rev: currentRev + 1,\n      contentHash: input.contentHash,\n      byteSize: input.byteSize,\n      body: input.body,\n      ...(input.label === undefined ? {} : { label: input.label }),\n      ...(input.requestId === undefined ? {} : { requestId: input.requestId }),\n      writtenAt: this.#now(),\n    };\n    this.#records.set(key, record);\n    return record;\n  }\n\n  async getRecord(\n    tenant: TenantId,\n    selector: TruthRecordSelector,\n  ): Promise<TruthRecord | undefined> {\n    return this.#records.get(tenantKey(tenant, selector.kind, selector.recordKey));\n  }\n\n  async listManifest(\n    tenant: TenantId,\n    query: TruthManifestQuery,\n  ): Promise<readonly TruthManifestEntry[]> {\n    const prefix = tenantKey(tenant, '');\n    const entries: TruthManifestEntry[] = [];\n    for (const [key, record] of this.#records.entries()) {\n      if (!key.startsWith(prefix)) continue;\n      if (query.kind !== undefined && record.kind !== query.kind) continue;\n      if (query.keyPrefix !== undefined && !record.recordKey.startsWith(query.keyPrefix)) {\n        continue;\n      }\n      entries.push({\n        kind: record.kind,\n        recordKey: record.recordKey,\n        rev: record.rev,\n        contentHash: record.contentHash,\n        byteSize: record.byteSize,\n        ...(record.label === undefined ? {} : { label: record.label }),\n        updatedAt: record.writtenAt,\n      });\n    }\n    entries.sort(\n      (left, right) =>\n        left.kind.localeCompare(right.kind) || left.recordKey.localeCompare(right.recordKey),\n    );\n    return entries.slice(0, query.limit ?? DEFAULT_MANIFEST_LIMIT);\n  }\n\n  #now(): string {\n    return this.#clock.now().toISOString();\n  }\n}\n","/**\n * A deterministic clock for the in-memory reference and the conformance suite.\n *\n * TTL behavior (presence expiry, activity expiry, reservation expiry) is part\n * of the contract, and asserting it against a wall clock means either sleeping\n * or accepting flakes. A composition under test injects one of these and moves\n * time explicitly.\n */\nimport type { MutableClock } from '../stores';\n\n/** Fixed start instant, so golden-ish assertions in the suite read the same on every run. */\nexport const IN_MEMORY_CLOCK_EPOCH = '2026-01-01T00:00:00.000Z';\n\nexport function createMutableClock(start: Date = new Date(IN_MEMORY_CLOCK_EPOCH)): MutableClock {\n  let current = start.getTime();\n  return {\n    now(): Date {\n      return new Date(current);\n    },\n    advance(ms: number): void {\n      current += ms;\n    },\n    set(instant: Date): void {\n      current = instant.getTime();\n    },\n  };\n}\n","/**\n * The in-memory reference composition.\n *\n * This exists to be the first thing that passes the conformance suite, and to\n * stay the cheapest way to run it. It is a reference, not a production store:\n * everything lives in process memory and nothing survives a restart. What it\n * *does* guarantee is that the behavior the suite asserts is achievable without\n * a database, which is what makes the same assertions meaningful when a\n * Postgres + R2 composition runs them later.\n */\nimport { InMemoryActivityStore, InMemoryPresenceStore } from './presence';\nimport { InMemoryBoardStore } from './board';\nimport { InMemoryMailboxStore } from './mailbox';\nimport { InMemoryObjectStore } from './blob';\nimport { InMemoryQuotaStore } from './quota';\nimport { InMemoryTruthStore } from './truth';\nimport { createMutableClock } from './clock';\nimport type { Clock, CoreStores, MutableClock } from '../stores';\n\nexport { createMutableClock, IN_MEMORY_CLOCK_EPOCH } from './clock';\nexport { InMemoryMailboxStore } from './mailbox';\nexport { InMemoryBoardStore } from './board';\nexport { InMemoryTruthStore } from './truth';\nexport { InMemoryPresenceStore, InMemoryActivityStore } from './presence';\nexport { InMemoryObjectStore } from './blob';\nexport { InMemoryQuotaStore } from './quota';\n\nexport interface InMemoryCoreOptions {\n  /** Defaults to a fresh {@link createMutableClock}, so TTL behavior is deterministic. */\n  readonly clock?: Clock;\n}\n\nexport interface InMemoryCoreComposition {\n  readonly stores: CoreStores;\n  /** The clock the stores read. Mutable only when the caller did not inject its own. */\n  readonly clock: Clock;\n}\n\nexport function createInMemoryCoreStores(\n  options: InMemoryCoreOptions = {},\n): InMemoryCoreComposition {\n  const clock: Clock = options.clock ?? createMutableClock();\n  const objects = new InMemoryObjectStore(clock);\n  const stores: CoreStores = {\n    mailbox: new InMemoryMailboxStore(clock),\n    board: new InMemoryBoardStore(clock),\n    truth: new InMemoryTruthStore(clock),\n    presence: new InMemoryPresenceStore(clock),\n    activity: new InMemoryActivityStore(clock),\n    objects,\n    quota: new InMemoryQuotaStore(clock, objects),\n  };\n  return { stores, clock };\n}\n\n/** Convenience for tests that need to move time: returns the composition and its mutable clock. */\nexport function createInMemoryCoreCompositionWithClock(): {\n  readonly stores: CoreStores;\n  readonly clock: MutableClock;\n} {\n  const clock = createMutableClock();\n  return { stores: createInMemoryCoreStores({ clock }).stores, clock };\n}\n"]}

package/dist/mailbox.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Hosted mailbox contract (§12.7.3).
+ *
+ * The load-bearing rule of this file: **reading is not acknowledging.**
+ * `readAfter` never mutates the cursor. The only ack is the cursor the daemon
+ * brings back on its next poll, after it has durably appended the envelope to
+ * its local journal. "领走即弃" means *cursor-advanced-then-deleted*, not
+ * *read-then-deleted* — read-deletes would break the frozen at-least-once
+ * semantics the client's stall recovery is built on (§8.3).
+ *
+ * The mailbox transports opaque envelope bytes and is **not** an
+ * execution-state authority. `body` is a string here rather than a parsed
+ * message because core is protocol-free: the frozen v1 shape lives in
+ * `@byok-sdk/protocol`, and core must not grow an edge to it (§12.1 invariant).
+ */
+import type { ContentHash } from './blob';
+import type { TenantId } from './tenant';
+/**
+ * Row lifecycle. `pending` and `acked` are derived from the device cursor;
+ * `expired` is the dead-letter state for rows that aged out before ever being
+ * acked — §12.7.5 requires those to be visible, not silently dropped.
+ */
+export declare const MAILBOX_MESSAGE_STATES: readonly ['pending', 'acked', 'expired'];
+export type MailboxMessageState = (typeof MAILBOX_MESSAGE_STATES)[number];
+/** One mailbox row. `seq` is monotonic per (tenant, device) — never global. */
+export interface MailboxMessage {
+    readonly tenantId: TenantId;
+    readonly deviceId: string;
+    readonly seq: number;
+    readonly messageId: string;
+    /** Opaque encoded envelope. Core never parses it. */
+    readonly body: string;
+    readonly bodyHash: ContentHash;
+    readonly byteSize: bigint;
+    readonly state: MailboxMessageState;
+    readonly appendedAt: string;
+}
+export interface MailboxAppendInput {
+    readonly deviceId: string;
+    readonly body: string;
+    readonly bodyHash: ContentHash;
+    readonly byteSize: bigint;
+    /**
+     * Producer-supplied idempotency key. A second append with the same
+     * `messageId` returns the existing row instead of enqueuing a duplicate.
+     */
+    readonly messageId: string;
+}
+export interface MailboxReadQuery {
+    readonly deviceId: string;
+    /** Exclusive lower bound. `0` reads from the beginning of the retained window. */
+    readonly afterSeq: number;
+    readonly limit?: number;
+}
+export interface MailboxPage {
+    readonly messages: readonly MailboxMessage[];
+    /**
+     * The seq to poll after next. Equal to `afterSeq` when the page is empty —
+     * reading never moves the ack cursor, so a caller that only reads can replay
+     * the same page forever without losing anything.
+     */
+    readonly nextSeq: number;
+    readonly hasMore: boolean;
+}
+export interface MailboxAdvanceCursorInput {
+    readonly deviceId: string;
+    /** Highest seq the device has durably journaled. */
+    readonly ackedSeq: number;
+}
+/** The device's durable acknowledgement position. */
+export interface MailboxCursorState {
+    readonly tenantId: TenantId;
+    readonly deviceId: string;
+    readonly ackedSeq: number;
+    readonly updatedAt: string;
+}
+/**
+ * Retention cutoffs.
+ *
+ * Both instants must be **canonical ISO-8601 UTC** (`YYYY-MM-DDTHH:mm:ss.sssZ`);
+ * anything else is rejected with `timestamp_not_canonical`. A retention sweep
+ * deletes rows, so an offset-bearing string that a string comparison and a SQL
+ * `timestamptz` comparison read differently is the worst place to guess — see
+ * `time.ts`.
+ */
+export interface MailboxRetentionInput {
+    readonly deviceId?: string;
+    /** Acked rows appended before this instant are deleted. */
+    readonly ackedBefore: string;
+    /** Unacked rows appended before this instant move to `expired`, never deleted here. */
+    readonly expireUnackedBefore: string;
+}
+export interface MailboxRetentionResult {
+    readonly deletedCount: number;
+    readonly expiredCount: number;
+    readonly releasedBytes: bigint;
+}
+/**
+ * Mailbox port. Tenant-first, async.
+ *
+ * Raises: `mailbox_cursor_regression` (an ack that moves the cursor backwards,
+ * which would silently re-deliver already-journaled work),
+ * `timestamp_not_canonical` (a retention cutoff that is not a canonical
+ * ISO-8601 UTC instant).
+ */
+export interface MailboxStore {
+    append(tenant: TenantId, input: MailboxAppendInput): Promise<MailboxMessage>;
+    /** Pure read. Never advances the cursor, never deletes, never marks acked. */
+    readAfter(tenant: TenantId, query: MailboxReadQuery): Promise<MailboxPage>;
+    /** The one and only ack. Monotonic; a lower `ackedSeq` is rejected. */
+    advanceCursor(tenant: TenantId, input: MailboxAdvanceCursorInput): Promise<MailboxCursorState>;
+    readCursor(tenant: TenantId, deviceId: string): Promise<MailboxCursorState>;
+    /** Retention hook: delete acked rows, dead-letter unacked ones. */
+    collectRetired(tenant: TenantId, input: MailboxRetentionInput): Promise<MailboxRetentionResult>;
+}

package/dist/ports-contract.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The declared method inventory of every core port (sprint I7).
+ *
+ * This table is contract data, not test data — it says what a port IS, and it
+ * is enforced from two directions that must read the same table:
+ *
+ * - `__tests__/constraints.test.ts` scans the *source interfaces* in this
+ *   package and asserts each listed method exists, is async, and takes a
+ *   required `TenantId` first.
+ * - `@byok-sdk/conformance`'s port-inventory dimension asserts every *composition
+ *   under test* implements exactly these methods — no missing method, and no
+ *   extra one that the contract has not pinned down and that therefore no
+ *   other composition would implement.
+ *
+ * It lives in shipped source rather than under `__tests__/` because the second
+ * enforcer is now a separate package (S4A story O-005): a `core → conformance`
+ * devDependency for a table `core` itself asserts against would be a cycle,
+ * and the direction that has to hold is `conformance → core`.
+ *
+ * Adding a port method means editing this table, which is the point: a port
+ * grows by contract, not by whichever composition needed something.
+ */
+import type { CoreStoreName } from './stores';
+export declare const CORE_PORT_METHODS: Readonly<Record<CoreStoreName, readonly string[]>>;
+/** The interface each port name is declared as, for the source-side scan. */
+export declare const CORE_PORT_INTERFACES: Readonly<Record<CoreStoreName, string>>;