@c9up/transit 0.1.1 → 0.1.3

package/dist/xml.js.map

@@ -1 +1 @@
-{"version":3,"file":"xml.js","sourceRoot":"","sources":["../src/xml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAC7D,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AAgDjD,MAAM,QAAS,SAAQ,KAAK;IAC3B,YAAY,OAAe;QAC1B,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACxB,CAAC;CACD;AAED,oDAAoD;AACpD,MAAM,UAAU,QAAQ,CAAC,MAAc;IACtC,sEAAsE;IACtE,qEAAqE;IACrE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAC5B,OAAmB,EACnB,MAAc;IAEd,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACpC,KACC,IAAI,IAAI,GAA2B,OAAO,EAC1C,IAAI,KAAK,SAAS,EAClB,IAAI,GAAG,IAAI,CAAC,MAAM,EACjB,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED,sEAAsE;AACtE,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,OAAmB;IACxC,MAAM,OAAO,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAC9B,IAAgB,EAChB,SAAiB,EACjB,KAAa;IAEb,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IACC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EACzE,CAAC;YACF,OAAO,OAAO,CAAC;QAChB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAC5B,OAAmB,EACnB,YAAoB,EACpB,KAAa;IAEb,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAuB,EAAE,CAC9B,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,KAAK,KAAK,KAAK;QACrB,KAAK,CAAC,YAAY,KAAK,YAAY,CACpC,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,MAAM,CAAC,OAAmB;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC;aACzC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,MAAM;IAEkB;IAD7B,GAAG,GAAG,CAAC,CAAC;IACR,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,QAAQ;QACP,IAAI,IAA4B,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM;YAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,QAAQ,CACjB,6GAA6G,CAC7G,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,QAAQ,CAAC,MAA8B;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAe;YAC3B,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE;YACT,KAAK;YACL,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,EAAE;YACZ,MAAM;SACN,CAAC;QAEF,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,GAAG,GAA4C,EAAE,CAAC;QACxD,SAAS,CAAC;YACT,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,MAAM,KAAK,EAAE;oBAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC;gBAChE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;QACD,IACC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACrD,OAAO,CAAC,UAAU,CAAC,MAAM,EACxB,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,2BAA2B,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CACjB,YAAY,KAAK,8BAA8B,MAAM,GAAG,CACxD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC;QAE3B,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC5D,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,QAAQ,CACjB,cAAc,IAAI,8BAA8B,UAAU,GAAG,CAC7D,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,QAAQ,CAAC;YACpB,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,IAAI;gBACX,YAAY,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;gBACjD,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;QACD,IACC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;aACpE,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,MAAM,EACnC,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,oCAAoC,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElB,SAAS,CAAC;YACT,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;oBACvB,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,OAAO,GAAG,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,OAAO,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,GAAG,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC;gBAChE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,GAAG,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC;gBACtE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChD,IAAI,GAAG,KAAK,CAAC,CAAC;oBACb,MAAM,IAAI,QAAQ,CAAC,0CAA0C,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;oBAClD,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;iBAC/C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC9C,SAAS;YACV,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QAChB,CAAC;IACF,CAAC;IAED,eAAe;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QACvD,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,iDAAiD;QACjD,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK;QACJ,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,6BAA6B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,UAAU;QACT,OACC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,EACzC,CAAC;YACF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IAED,OAAO,CAAC,MAAc;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,IAAI,MAAM,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAY;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,CAAC,IAAY;QACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,aAAa,IAAI,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;CACD;AAED,SAAS,KAAK,CAAC,KAAa;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC;QACb,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAClB,gCAAgC,EAChC,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACvB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,KAAK;gBACT,OAAO,GAAG,CAAC;YACZ,KAAK,IAAI;gBACR,OAAO,GAAG,CAAC;YACZ,KAAK,IAAI;gBACR,OAAO,GAAG,CAAC;YACZ,KAAK,MAAM;gBACV,OAAO,GAAG,CAAC;YACZ,KAAK,MAAM;gBACV,OAAO,GAAG,CAAC;YACZ;gBACC,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,mBAAmB,KAAK,GAAG,CAAC,CAAC;IACjD,CAAC,CACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"xml.js","sourceRoot":"","sources":["../src/xml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAC7D,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AAgDjD,MAAM,QAAS,SAAQ,KAAK;IAC3B,YAAY,OAAe;QAC1B,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACxB,CAAC;CACD;AAsBD,MAAM,cAAc,GAAwB;IAC3C,SAAS,EAAE,IAAI,GAAG,IAAI;IACtB,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,MAAM;IAChB,aAAa,EAAE,GAAG;CAClB,CAAC;AAEF,oDAAoD;AACpD,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAkB;IAC1D,MAAM,QAAQ,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAClD,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CACjB,mBAAmB,MAAM,CAAC,MAAM,yBAAyB,QAAQ,CAAC,SAAS,UAAU,CACrF,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,qEAAqE;IACrE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAC5B,OAAmB,EACnB,MAAc;IAEd,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACpC,KACC,IAAI,IAAI,GAA2B,OAAO,EAC1C,IAAI,KAAK,SAAS,EAClB,IAAI,GAAG,IAAI,CAAC,MAAM,EACjB,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED,sEAAsE;AACtE,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,OAAmB;IACxC,MAAM,OAAO,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAC9B,IAAgB,EAChB,SAAiB,EACjB,KAAa;IAEb,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IACC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EACzE,CAAC;YACF,OAAO,OAAO,CAAC;QAChB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAC5B,OAAmB,EACnB,YAAoB,EACpB,KAAa;IAEb,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAuB,EAAE,CAC9B,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,KAAK,KAAK,KAAK;QACrB,KAAK,CAAC,YAAY,KAAK,YAAY,CACpC,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,MAAM,CAAC,OAAmB;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC;aACzC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,MAAM;IAKO;IACA;IALlB,GAAG,GAAG,CAAC,CAAC;IACR,qDAAqD;IACrD,MAAM,GAAG,CAAC,CAAC;IACX,YACkB,MAAc,EACd,MAA2B;QAD3B,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAqB;IAC1C,CAAC;IAEJ,uEAAuE;IACvE,KAAK;QACJ,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,QAAQ,CACjB,8BAA8B,IAAI,CAAC,MAAM,CAAC,QAAQ,QAAQ,CAC1D,CAAC;QACH,CAAC;IACF,CAAC;IAED,QAAQ;QACP,IAAI,IAA4B,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM;YAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,QAAQ,CACjB,6GAA6G,CAC7G,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACpB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACb,CAAC;IAED,QAAQ,CAAC,MAA8B,EAAE,KAAK,GAAG,CAAC;QACjD,kEAAkE;QAClE,wEAAwE;QACxE,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,QAAQ,CACjB,kCAAkC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CACxD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAe;YAC3B,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE;YACT,KAAK;YACL,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,EAAE;YACZ,MAAM;SACN,CAAC;QAEF,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,GAAG,GAA4C,EAAE,CAAC;QACxD,SAAS,CAAC;YACT,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC5C,MAAM,IAAI,QAAQ,CACjB,YAAY,KAAK,uBAAuB,IAAI,CAAC,MAAM,CAAC,aAAa,aAAa,CAC9E,CAAC;YACH,CAAC;QACF,CAAC;QAED,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,MAAM,KAAK,EAAE;oBAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC;gBAChE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;QACD,IACC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACrD,OAAO,CAAC,UAAU,CAAC,MAAM,EACxB,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,2BAA2B,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CACjB,YAAY,KAAK,8BAA8B,MAAM,GAAG,CACxD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC;QAE3B,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC;YAC1C,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC5D,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,QAAQ,CACjB,cAAc,IAAI,8BAA8B,UAAU,GAAG,CAC7D,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,QAAQ,CAAC;YACpB,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,IAAI;gBACX,YAAY,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;gBACjD,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;QACD,IACC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;aACpE,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,MAAM,EACnC,CAAC;YACF,MAAM,IAAI,QAAQ,CAAC,YAAY,KAAK,oCAAoC,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElB,SAAS,CAAC;YACT,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;oBACvB,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,OAAO,GAAG,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,OAAO,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,GAAG,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,2BAA2B,CAAC,CAAC;gBAChE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,GAAG,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC;gBACtE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC;iBAC3C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,QAAQ,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChD,IAAI,GAAG,KAAK,CAAC,CAAC;oBACb,MAAM,IAAI,QAAQ,CAAC,0CAA0C,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;oBAClD,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;iBAC/C,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;gBACnB,SAAS;YACV,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzD,SAAS;YACV,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QAChB,CAAC;IACF,CAAC;IAED,eAAe;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QACvD,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,iDAAiD;QACjD,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK;QACJ,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,6BAA6B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,UAAU;QACT,OACC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,EACzC,CAAC;YACF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IAED,OAAO,CAAC,MAAc;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,IAAI,MAAM,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAY;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,CAAC,IAAY;QACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,aAAa,IAAI,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;CACD;AAED,SAAS,KAAK,CAAC,KAAa;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC;QACb,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAClB,gCAAgC,EAChC,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACvB,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,KAAK;gBACT,OAAO,GAAG,CAAC;YACZ,KAAK,IAAI;gBACR,OAAO,GAAG,CAAC;YACZ,KAAK,IAAI;gBACR,OAAO,GAAG,CAAC;YACZ,KAAK,MAAM;gBACV,OAAO,GAAG,CAAC;YACZ,KAAK,MAAM;gBACV,OAAO,GAAG,CAAC;YACZ;gBACC,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,mBAAmB,KAAK,GAAG,CAAC,CAAC;IACjD,CAAC,CACD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c9up/transit",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Transit — federated sign-in for the Ream framework: SAML 2.0, LDAP, OpenID Connect, OAuth1, OAuth2",
   "license": "MIT",
   "type": "module",
@@ -37,14 +37,19 @@
     "@types/node": "^22.19.15",
     "@vitest/coverage-v8": "^4.1.5",
     "typescript": "^6.0.2",
-    "vitest": "^4.1.2"
+    "vitest": "^4.1.2",
+    "@c9up/ream": "^0.2.0"
   },
   "peerDependencies": {
-    "@c9up/quasar": "^0.1.0"
+    "@c9up/quasar": "^0.1.0",
+    "@c9up/ream": "^0.2.0"
   },
   "peerDependenciesMeta": {
     "@c9up/quasar": {
       "optional": true
+    },
+    "@c9up/ream": {
+      "optional": true
     }
   },
   "engines": {
@@ -66,7 +71,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "test": "vitest run",
-    "lint": "biome check src/",
+    "lint": "biome check src/ tests/",
     "test:coverage": "vitest run --coverage",
     "typecheck": "tsc --noEmit"
   }

package/src/TransitProvider.ts

@@ -6,8 +6,9 @@
  * usable from a host that is not Ream.
  */
 
+import "./augmentations.js";
 import type { TransitConfig } from "./config.js";
-import { setTransit } from "./services/main.js";
+import { clearTransit, getTransit, setTransit } from "./services/main.js";
 import { TransitManager } from "./TransitManager.js";
 
 interface TransitContainer {
@@ -25,6 +26,9 @@ export interface TransitAppContext {
 }
 
 export default class TransitProvider {
+	/** The manager this provider seated, so shutdown only clears its own. */
+	#manager: TransitManager | undefined;
+
 	constructor(protected app: TransitAppContext) {}
 
 	register(): void {
@@ -44,8 +48,20 @@ export default class TransitProvider {
 	}
 
 	async boot(): Promise<void> {
-		setTransit(
-			await this.app.container.resolve<TransitManager>(TransitManager),
-		);
+		const manager =
+			await this.app.container.resolve<TransitManager>(TransitManager);
+		this.#manager = manager;
+		setTransit(manager);
+	}
+
+	async shutdown(): Promise<void> {
+		// Release the module-level singleton, while it is still ours. A stopped
+		// application left a dead TransitManager reachable through
+		// `services/main` — and this one holds the SSO providers, so a stale one
+		// answers sign-ins for an application that no longer exists.
+		if (this.#manager !== undefined && getTransit() === this.#manager) {
+			clearTransit();
+		}
+		this.#manager = undefined;
 	}
 }

package/src/augmentations.ts

@@ -0,0 +1,28 @@
+/**
+ * Teach ream's `ContainerBindings` what `container.make(...)` returns for the
+ * tokens transit binds.
+ *
+ * ream declares that interface open on purpose: it registers its own entries
+ * and expects each package to contribute the ones it owns. Nothing filled
+ * these in, so resolving by the string token answered `unknown` and every call
+ * site had to assert a type it could not prove.
+ *
+ * Loaded from the package barrel, so importing Transit anywhere in the
+ * application is enough — nobody writes a `declare module` of their own.
+ *
+ * Type-only, and ream stays an OPTIONAL peer: nothing here reaches a runtime
+ * import, and a `declare module` for a specifier that does not resolve is
+ * simply inert.
+ */
+
+// Referenced so the augmentation below resolves the module it augments.
+import type {} from "@c9up/ream/types";
+
+import type { TransitManager } from "./TransitManager.js";
+
+declare module "@c9up/ream/types" {
+	interface ContainerBindings {
+		/** The SSO manager, bound by `TransitProvider`. */
+		transit: TransitManager;
+	}
+}

package/src/ber.ts

@@ -116,6 +116,16 @@ export function decodeString(value: Buffer): string {
 	return value.toString("utf8");
 }
 
+/**
+ * The largest message this will agree to assemble.
+ *
+ * A four-byte length header can declare 4 GiB, and the declaration arrives
+ * before any of the bytes do — so a five-byte reply could make the client sit
+ * on a growing buffer until the process died. A directory response is
+ * kilobytes; 8 MiB is generous for a paged search and still bounded.
+ */
+export const MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
+
 /**
  * How many bytes a whole message occupies, or `undefined` while it is still
  * arriving. LDAP runs over a stream, so a read can stop anywhere.
@@ -133,7 +143,15 @@ export function messageLength(buffer: Buffer): number | undefined {
 	for (let i = 0; i < count; i += 1) {
 		length = length * 256 + (buffer[2 + i] as number);
 	}
-	return 2 + count + length;
+	const total = 2 + count + length;
+	// Refused on the DECLARATION, not once the bytes have arrived: the point is
+	// never to buffer them.
+	if (total > MAX_MESSAGE_BYTES) {
+		throw new BerError(
+			`a message declares ${total} bytes, over the ${MAX_MESSAGE_BYTES} allowed`,
+		);
+	}
+	return total;
 }
 
 function encodeLength(length: number): Buffer {

package/src/drivers/OidcDriver.ts

@@ -306,7 +306,7 @@ export class OidcDriver implements TransitDriver {
 			!metadata.userinfo_endpoint ||
 			accessToken === ""
 		) {
-			return claims as unknown as Record<string, unknown>;
+			return { ...claims };
 		}
 		const info = await this.#userinfo(metadata.userinfo_endpoint, accessToken);
 		if (info.sub !== claims.sub) {
@@ -314,7 +314,7 @@ export class OidcDriver implements TransitDriver {
 				"[transit] the userinfo response describes a different subject than the id_token",
 			);
 		}
-		return { ...(claims as unknown as Record<string, unknown>), ...info };
+		return { ...claims, ...info };
 	}
 
 	async #userinfo(

package/src/drivers/SamlDriver.ts

@@ -14,7 +14,6 @@
 import { randomUUID } from "node:crypto";
 import { deflateRawSync } from "node:zlib";
 import { verifyXmlSignature } from "../dsig.js";
-import { inProduction } from "../nodeEnv.js";
 import {
 	type AssertionReplayStore,
 	MemoryAssertionReplayStore,
@@ -33,6 +32,7 @@ import type {
 	TransitUser,
 } from "../types.js";
 import { assertOAuthState } from "../types.js";
+import { inProduction } from "../vendor/nodeEnv.js";
 import { parseXml } from "../xml.js";
 
 const PROTOCOL_NS = "urn:oasis:names:tc:SAML:2.0:protocol";
@@ -188,6 +188,11 @@ export class SamlDriver implements TransitDriver {
 			);
 		}
 
+		// Parsed before anything is verified, because the signature is INSIDE the
+		// document — so these are bytes an unauthenticated caller chose, and the
+		// parser's limits (length, depth, node and attribute counts) are what
+		// stands between a POST and the heap or the stack. The defaults are sized
+		// for SAML: a large response is tens of kilobytes.
 		const document = parseXml(decode(code));
 		if (
 			document.namespaceUri !== PROTOCOL_NS ||

package/src/dsig.ts

@@ -164,12 +164,15 @@ export function verifyXmlSignature(
 		"base64",
 	);
 
-	const key = resolveKey(signature, options.certificates);
-	const holds = verifySignature(
-		spec.hash,
-		signedBytes,
-		spec.kind === "ec" ? { key, dsaEncoding: "ieee-p1363" } : key,
-		signatureValue,
+	// `some` stops at the first key that holds. Any of the provider's listed
+	// certificates is an acceptable signer; none of them is attacker-supplied.
+	const holds = resolveKeys(signature, options.certificates).some((key) =>
+		verifySignature(
+			spec.hash,
+			signedBytes,
+			spec.kind === "ec" ? { key, dsaEncoding: "ieee-p1363" } : key,
+			signatureValue,
+		),
 	);
 	if (!holds) {
 		throw new SignatureError("the signature does not verify");
@@ -318,13 +321,23 @@ function readTransforms(
 }
 
 /**
- * The key to verify with — the caller's, from the provider's metadata.
+ * The keys to verify with — the caller's, from the provider's metadata.
+ *
+ * When the document carries a certificate it must be one of them, and that one
+ * alone is returned. The check gives a clear error instead of an opaque "does
+ * not verify" when a provider has rotated and the metadata has not been
+ * updated.
  *
- * When the document carries a certificate it must be one of them. That check
- * gives a clear error instead of an opaque "does not verify" when a provider
- * has rotated and the metadata has not been updated.
+ * Without one, every certificate the metadata lists is a candidate. A provider
+ * mid-rotation publishes the outgoing and the incoming certificate together and
+ * signs with either; trying only the first would reject every assertion signed
+ * with the other, for the whole rotation window, under a message blaming the
+ * signature. `certificates` is plural for this reason.
  */
-function resolveKey(signature: XmlElement, certificates: string[]): KeyObject {
+function resolveKeys(
+	signature: XmlElement,
+	certificates: string[],
+): KeyObject[] {
 	if (certificates.length === 0) {
 		throw new SignatureError(
 			"no certificate was supplied — the key has to come from the provider's metadata, never from the document itself",
@@ -339,11 +352,9 @@ function resolveKey(signature: XmlElement, certificates: string[]): KeyObject {
 				"the document is signed with a certificate the provider's metadata does not list",
 			);
 		}
-		return match.publicKey;
+		return [match.publicKey];
 	}
-	// No certificate in the document: the metadata is all there is, which is
-	// the safer of the two cases.
-	return (known[0] as X509Certificate).publicKey;
+	return known.map((cert) => cert.publicKey);
 }
 
 function embeddedCertificate(

package/src/index.ts

@@ -6,6 +6,8 @@
  * that speak them.
  */
 
+import "./augmentations.js";
+
 export { type AppleKey, appleClientSecret, parseAppleUser } from "./apple.js";
 export { type CanonicalizeOptions, canonicalize } from "./c14n.js";
 export type {

package/src/jwt.ts

@@ -113,7 +113,7 @@ export function verifyJwsSignature(
 ): boolean {
 	const spec = SUPPORTED[alg];
 	assertKeyMatchesAlg(jwk, alg);
-	const key = createPublicKey({ key: jwk as never, format: "jwk" });
+	const key = createPublicKey({ key: jwk, format: "jwk" });
 
 	const data = Buffer.from(parts.signingInput, "ascii");
 	if (spec.kind === "ec") {
@@ -173,7 +173,7 @@ export function assertIdTokenClaims(
 	const now = expected.now ?? Math.floor(Date.now() / 1000);
 
 	const iss = payload.iss;
-	if (iss !== expected.issuer) {
+	if (typeof iss !== "string" || iss !== expected.issuer) {
 		throw new Error(
 			`[transit] id_token issuer mismatch: expected '${expected.issuer}'`,
 		);
@@ -185,6 +185,14 @@ export function assertIdTokenClaims(
 	}
 
 	const aud = payload.aud;
+	if (!isAudience(aud)) {
+		// Checked, not assumed: `includes` below would pass on a list holding the
+		// right string among arbitrary junk, and the claim would then be handed
+		// on described as a string it is not.
+		throw new Error(
+			"[transit] id_token audience is not a string or a list of strings",
+		);
+	}
 	const audiences = Array.isArray(aud) ? aud : [aud];
 	if (!audiences.includes(expected.audience)) {
 		throw new Error(
@@ -221,7 +229,17 @@ export function assertIdTokenClaims(
 		throw new Error("[transit] id_token nonce does not match this sign-in");
 	}
 
-	return payload as unknown as IdTokenClaims;
+	// Built from the locals each check narrowed, not asserted over the bag it
+	// came from. The cast that used to stand here promised `iss`, `sub`, `aud`
+	// and `exp` were strings and numbers on the strength of the checks above —
+	// and `iss` was never actually type-checked, only compared.
+	return { ...payload, iss, sub, aud, exp };
+}
+
+/** An `aud` claim, in the two shapes the spec allows. */
+function isAudience(value: unknown): value is string | string[] {
+	if (typeof value === "string") return true;
+	return Array.isArray(value) && value.every((one) => typeof one === "string");
 }
 
 function decodeSegment(segment: string, what: string): Record<string, unknown> {

package/src/ldap.ts

@@ -33,6 +33,7 @@ import {
 	encodeInteger,
 	encodeSequence,
 	encodeString,
+	MAX_MESSAGE_BYTES,
 	messageLength,
 	OCTET_STRING,
 } from "./ber.js";
@@ -255,6 +256,22 @@ export class LdapConnection {
 
 	#receive(chunk: Buffer): void {
 		this.#buffer = Buffer.concat([this.#buffer, chunk]);
+		// A stream that never completes a message must not grow the buffer
+		// forever. `messageLength` refuses an oversized DECLARATION, but a peer
+		// can also just keep sending bytes that never form one — the length
+		// header itself is only read once two bytes are in hand.
+		if (this.#buffer.length > MAX_MESSAGE_BYTES) {
+			this.#buffer = Buffer.alloc(0);
+			// The socket goes too: a peer that behaves this way is not one to keep
+			// reading from, and closing it is what stops the flood.
+			this.#socket?.destroy();
+			this.#failAll(
+				new LdapError(
+					`the directory sent more than ${MAX_MESSAGE_BYTES} bytes without completing a message`,
+				),
+			);
+			return;
+		}
 		for (;;) {
 			const length = messageLength(this.#buffer);
 			if (length === undefined || this.#buffer.length < length) return;

package/src/quasar.ts

@@ -1,64 +1,27 @@
 /**
  * Resolving a Redis connection by name, from `@c9up/quasar`.
  *
- * Transit does not depend on quasar: it is an optional peer, and this module
- * never imports it statically — the specifier is built at runtime so the
- * TypeScript build stays free of it too.
+ * The loading, the shape check and the messages are the same in every package
+ * that offers a Redis-backed option, so they are vendored rather than written
+ * again: `src/vendor/quasarConnection.ts`, generated from one source. What is
+ * specific stays at the call site — transit has several stores, each issuing
+ * its own commands, so unlike its siblings it passes them per call rather than
+ * fixing one list here.
  */
 
-interface ConnectionSource {
-	connection(name?: string): unknown;
-}
-
-function isConnectionSource(value: unknown): value is ConnectionSource {
-	return (
-		typeof value === "object" &&
-		value !== null &&
-		typeof Reflect.get(value, "connection") === "function"
-	);
-}
+import { quasarConnection as loadQuasarConnection } from "./vendor/quasarConnection.js";
 
-/**
- * The named connection, checked for the commands the caller needs before it is
- * handed over — a connection missing one would fail on the first sign-in, far
- * from the cause.
- */
+/** The named connection, checked for the commands the caller will issue. */
 export async function quasarConnection<T>(
 	name: string | undefined,
 	required: readonly string[],
 	what: string,
 ): Promise<T> {
-	const specifier = "@c9up/quasar/services/main";
-	let loaded: unknown;
-	try {
-		loaded = await import(/* @vite-ignore */ specifier);
-	} catch (cause) {
-		throw new Error(
-			`[transit] naming a Redis connection needs @c9up/quasar, which is not installed.\n  pnpm add @c9up/quasar`,
-			{ cause },
-		);
-	}
-
-	const manager = isConnectionSource(loaded)
-		? loaded
-		: Reflect.get(Object(loaded), "default");
-	if (!isConnectionSource(manager)) {
-		throw new Error(
-			"[transit] @c9up/quasar/services/main did not expose a connection() manager",
-		);
-	}
-
-	const connection = manager.connection(name);
-	const missing = required.filter(
-		(command) =>
-			typeof connection !== "object" ||
-			connection === null ||
-			typeof Reflect.get(connection, command) !== "function",
-	);
-	if (missing.length > 0) {
-		throw new Error(
-			`[transit] the quasar connection${name ? ` '${name}'` : ""} is missing ${missing.join(", ")}, which ${what} issues`,
-		);
-	}
-	return connection as T;
+	return loadQuasarConnection<T>({
+		pkg: "transit",
+		name,
+		required,
+		what,
+		raise: (_reason, message, cause) => new Error(message, { cause }),
+	});
 }

package/src/services/main.ts

@@ -15,7 +15,19 @@ export function setTransit(manager: TransitManager): void {
 	instance = manager;
 }
 
-/** @internal Test helper — forget the manager between cases. */
+/** @internal Read the seated manager, if there is one. */
+export function getTransit(): TransitManager | undefined {
+	return instance;
+}
+
+/**
+ * @internal Forget the manager — called by the provider on shutdown, and by
+ * tests between cases.
+ *
+ * The caller checks ownership first (`getTransit() === mine`): two applications
+ * share this module in one process, and the one shutting down must not clear a
+ * manager the other has since seated.
+ */
 export function clearTransit(): void {
 	instance = undefined;
 }

package/src/types.ts

@@ -2,6 +2,7 @@
  * The shapes every provider answers with, whatever protocol it speaks.
  */
 
+import { timingSafeEqual } from "node:crypto";
 export interface OAuthConfig {
 	clientId: string;
 	clientSecret: string;
@@ -144,7 +145,25 @@ export function assertOAuthState(
 				"Store the state given to redirectUrl() in the session and pass it here.",
 		);
 	}
-	if (state !== expectedState) {
+	if (state === undefined || !sameSecret(state, expectedState)) {
 		throw new Error("OAuth state mismatch — possible CSRF attack");
 	}
 }
+
+/**
+ * Compare two states without leaking where they diverge.
+ *
+ * `!==` on strings stops at the first differing byte, and the state is the only
+ * thing standing between an attacker's authorization code and the victim's
+ * session. The leak is small against network noise, but every other secret
+ * comparison in the framework is already constant-time and this one is the
+ * outlier.
+ *
+ * The lengths are checked first because `timingSafeEqual` throws when they
+ * differ. A state's length is not the secret; its content is.
+ */
+function sameSecret(given: string, expected: string): boolean {
+	const left = Buffer.from(given, "utf8");
+	const right = Buffer.from(expected, "utf8");
+	return left.length === right.length && timingSafeEqual(left, right);
+}

package/src/{nodeEnv.ts → vendor/nodeEnv.ts}

@@ -1,14 +1,20 @@
+// Generated from scripts/vendor/nodeEnv.ts — do not edit.
+//
+// This package is published and built from its own repository, so the file
+// has to exist here rather than be imported. `pnpm vendor:sync` rewrites it,
+// and `pnpm vendor:check` fails if this copy has drifted from the original.
+
 /**
- * Reading `NODE_ENV`, with the aliases people actually set.
+ * `NODE_ENV`, read the way every runtime actually spells it.
  *
- * `NODE_ENV=prod` is ordinary in a Dockerfile or a platform dashboard. Read
- * verbatim it answers "not production" — and here that means the in-process
- * SAML replay store is accepted on a production deployment, where it bounds
- * replay within one replica and not beyond it.
+ * `NODE_ENV=prod` is ordinary in a Dockerfile or a platform dashboard, and a
+ * bare `=== "production"` answers "not production" for it. What that costs
+ * differs per package, so the consequence is stated where the decision is
+ * taken, not here.
  *
- * Duplicated rather than imported: transit depends on no other package in this
- * workspace, and a security decision that only holds when an optional peer is
- * installed is not a decision.
+ * The tables mirror the framework's (`@c9up/ream`, src/env/nodeEnv.ts), which
+ * is the origin rather than a peer: it formats to different rules and exposes
+ * `currentNodeEnv()` instead of `inProduction()`.
  */
 
 const DEV_ENVS = ["dev", "develop", "development"];