@cotal-ai/core 0.11.6 → 0.13.0

package/dist/endpoint-journal.js

@@ -0,0 +1,431 @@
+/**
+ * v0.4 journal-contract helpers (SPEC §13.4) — the semantic fingerprint, the decision and
+ * quarantine fact shapes with their consuming-boundary validators, and the create-only
+ * decision CAS the canonicalizer decides with.
+ *
+ * The journal is an explicitly UNTRUSTED at-least-once submission log (`epj`) feeding
+ * canonical accepted-fact subjects (`epf`) through ONE mediated writer, the canonicalizer.
+ * Effects consume only canonical facts, never raw submissions. Submissions append PLAIN —
+ * a conformant submitter never sets `Nats-Msg-Id` (native stream-wide dedupe is a
+ * cross-caller suppression vector, §13.4 item 1); every transport retry simply appends again,
+ * and the caller-scoped decision CAS resolves every copy to one durable decision.
+ */
+import { headers as natsHeaders } from "@nats-io/transport-node";
+import { token } from "./subjects.js";
+import { contractDigest, rawDigest } from "./canonical.js";
+import { epfSubject, parseEpSubject, endpointToken, assertBoundedOwner, assertIdToken, assertLifecycleToken, } from "./endpoint-subjects.js";
+import { EpEnvelopeError, isEpErrorCode, parseEndpointRequest } from "./endpoint-envelope.js";
+import { isCasLoss } from "./endpoint-records.js";
+/** §13.12 stream names for the two journal-side streams. */
+export function epjStreamName(space) { return `EPJ_${token(space)}`; }
+export function epfStreamName(space) { return `EPF_${token(space)}`; }
+/** The canonicalizer's durable (§13.9 consumer-name grammar): `canon_<e>`. Uses the fail-loud
+ *  {@link endpointToken} (not the lenient `token`) so a malformed endpoint is refused, never
+ *  silently sanitized into a colliding durable name. */
+export function canonDurable(endpoint) { return `canon_${endpointToken(endpoint)}`; }
+/** Decision facts live on the caller-scoped subject — distinct callers can never squat each
+ *  other's ids because the caller triple IS part of the subject (§13.4 item 3). Provenance is
+ *  STRUCTURAL, as for {@link deriveReplySubject}: the builder takes the broker-authenticated
+ *  PARSED submission and derives endpoint + caller internally — there is no argument through
+ *  which a body-supplied `from`/`op.endpoint` could address another caller's rail (the
+ *  canonicalizer holds broad `epf.<e>.dec.>` authority; the broker cannot catch a confused
+ *  call site, so the API must). */
+export function epfDecisionSubject(space, request, id) {
+    const c = request.caller;
+    return epfSubject(space, request.endpoint, ["dec", c.owner, c.actor, c.uid, id]);
+}
+/** Quarantine facts key on the source SEQUENCE — a family disjoint from caller-chosen `dec`
+ *  ids by construction, so no legal request id can collide with a quarantine key. */
+export function epfQuarantineSubject(space, endpoint, sourceSeq) {
+    if (!Number.isSafeInteger(sourceSeq) || sourceSeq < 1)
+        throw new Error(`sourceSeq ${sourceSeq} is not a positive integer`);
+    return epfSubject(space, endpoint, ["quar", String(sourceSeq)]);
+}
+/** The per-goal first-wins bind (§13.4 item 3): stops a second id naming one goalId BEFORE
+ *  acceptance and effect. Structural provenance as {@link epfDecisionSubject}. */
+export function epfGoalBindSubject(space, source, goalId) {
+    const c = source.caller;
+    return epfSubject(space, source.endpoint, ["goal", c.owner, c.actor, c.uid, goalId, "bind"]);
+}
+/** The non-action effects completion fact (§13.9 ack barrier):
+ *  `epf.<e>.eff.<caller triple>.<id>`. */
+export function epfEffectSubject(space, endpoint, caller, id) {
+    return epfSubject(space, endpoint, ["eff", caller.owner, caller.actor, caller.uid, assertIdToken(id, "effect id")]);
+}
+/** Default idempotency horizon (§13.4 item 6; space-configurable). The horizon is REALIZED by
+ *  decision-fact retention, never by a clock: the create-only CAS returns the recorded decision
+ *  for exactly as long as the fact exists. */
+export const IDEMPOTENCY_HORIZON_MS_DEFAULT = 24 * 60 * 60 * 1000;
+// ---- the semantic fingerprint (§13.4 item 2) -------------------------------------------------
+const FINGERPRINT_FIELDS = ["id", "goalId", "class", "args"];
+/** Build the §13.4 fingerprint for a PARSEABLE submission: the effect-defining subset it
+ *  carries — absent optional fields are OMITTED, never `null`, so two implementations digest
+ *  identical bytes; an incomplete envelope fingerprints the subset it has. The caller identity
+ *  and authorization mode come from the broker-authenticated SUBJECT, never the body. Throws
+ *  when the carried values are not canonicalizable I-JSON (lone surrogate, duplicate names
+ *  survive parsing as last-wins so cannot reach here, non-finite number) — that submission has
+ *  no interoperable RFC 8785 form, hence NO fingerprint, and takes the quarantine path. */
+export function submissionFingerprint(raw, subject) {
+    const body = (raw !== null && typeof raw === "object" && !Array.isArray(raw) ? raw : {});
+    const op = (body.op !== null && typeof body.op === "object" && !Array.isArray(body.op) ? body.op : {});
+    const object = {};
+    if (op.endpoint !== undefined)
+        object.endpoint = op.endpoint;
+    if (op.command !== undefined)
+        object.command = op.command;
+    for (const k of FINGERPRINT_FIELDS)
+        if (body[k] !== undefined)
+            object[k] = body[k];
+    if (op.inputDigest !== undefined)
+        object.inputDigest = op.inputDigest;
+    if (op.outputDigest !== undefined)
+        object.outputDigest = op.outputDigest;
+    if (subject.target)
+        object.authz = subject.target.mode;
+    if (body.target !== undefined)
+        object.target = body.target;
+    if (body.auth !== undefined) {
+        if (typeof body.auth === "string")
+            object.authDigest = rawDigest(body.auth); // throws on a lone surrogate → quarantine
+        // Wrong-typed but canonicalizable auth is CARRIED effect-defining content: fingerprint it
+        // as carried (distinct from absent auth AND from a real authDigest), never collapse it.
+        else
+            object.auth = body.auth;
+    }
+    object.caller = { id: `${subject.caller.owner}.${subject.caller.actor}`, lifecycleUid: subject.caller.uid };
+    return { object, fingerprint: contractDigest(object) }; // contractDigest throws on non-I-JSON → quarantine
+}
+/** Build the durable completion marker for one validated non-action `effects` acceptance. */
+export function effectFactOf(acceptance, ts) {
+    if (acceptance.route !== "effects" || typeof acceptance.request.goalId === "string")
+        throw new EpEnvelopeError("failed-precondition", "an effect completion fact is only for a non-action route:effects acceptance (actions complete through goal.result)");
+    if (!isDigest(acceptance.fingerprint) || !posInt(acceptance.sourceSeq) || !wireInt(ts))
+        throw new EpEnvelopeError("failed-precondition", "an effect completion fact requires a validated acceptance fingerprint/sourceSeq and non-negative timestamp");
+    const caller = checkCaller(acceptance.caller, "effect acceptance caller");
+    return { v: 1, id: assertIdToken(acceptance.id, "effect id"), fingerprint: acceptance.fingerprint, caller, sourceSeq: acceptance.sourceSeq, ts, outcome: "ran" };
+}
+/** Build the retirement-cancelled completion marker for one validated non-action `effects`
+ *  acceptance (§13.8 option (i)): the acceptance's own identity spine + the retirement binding.
+ *  The caller supplies the retirement's `opId` and the RETIRING target; the acceptance's own
+ *  `target` must name that same lifecycle (a retirement never cancels a foreign target's work). */
+export function effectCancelledFactOf(acceptance, cancelled, ts) {
+    const base = effectFactOf(acceptance, ts);
+    if (typeof cancelled.opId !== "string" || cancelled.opId.length === 0 || cancelled.opId.length > 64)
+        throw new EpEnvelopeError("failed-precondition", "a cancelled effect marker requires the retirement opId (SPEC 13.8)");
+    const t = cancelled.target;
+    if (typeof t?.owner !== "string" || t.owner.length === 0 || typeof t.actor !== "string" || t.actor.length === 0 || typeof t.lifecycleUid !== "string" || t.lifecycleUid.length === 0)
+        throw new EpEnvelopeError("failed-precondition", "a cancelled effect marker requires the retiring target triple (SPEC 13.8)");
+    if (acceptance.target === undefined || acceptance.target.lifecycleUid !== t.lifecycleUid)
+        throw new EpEnvelopeError("failed-precondition", `a retirement cancels only ITS target's accepted work: the acceptance targets ${acceptance.target?.lifecycleUid ?? "(none)"}, not ${t.lifecycleUid} (SPEC 13.8)`);
+    return { ...base, outcome: "cancelled", cancelled: { opId: cancelled.opId, target: { owner: t.owner, actor: t.actor, lifecycleUid: t.lifecycleUid } } };
+}
+function factFail(what) {
+    throw new EpEnvelopeError("internal", `fact does not validate: ${what}`);
+}
+const isRec = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const wireInt = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 0;
+const posInt = (v) => typeof v === "number" && Number.isSafeInteger(v) && v >= 1;
+const isDigest = (v) => typeof v === "string" && /^sha256:[0-9a-f]{64}$/.test(v);
+function assertClosedKeys(o, allowed, what) {
+    const ok = new Set(allowed);
+    for (const k of Object.keys(o))
+        if (!ok.has(k))
+            factFail(`${what} carries unknown field ${k}`);
+}
+function checkError(v, what) {
+    if (!isRec(v) || typeof v.code !== "string" || !isEpErrorCode(v.code))
+        factFail(`${what}.code`);
+    if (v.detail !== undefined && (typeof v.detail !== "string" || Buffer.byteLength(v.detail, "utf8") > 256))
+        factFail(`${what}.detail exceeds 256 bytes`);
+    return v;
+}
+function checkCaller(v, what) {
+    if (!isRec(v) || typeof v.id !== "string" || typeof v.lifecycleUid !== "string")
+        factFail(what);
+    const toks = v.id.split(".");
+    if (toks.length !== 2)
+        factFail(`${what}.id is not an <owner>.<actor> principal`);
+    try {
+        assertBoundedOwner(toks[0], `${what} owner`);
+        assertBoundedOwner(toks[1], `${what} actor`);
+        assertLifecycleToken(v.lifecycleUid, `${what}.lifecycleUid`);
+    }
+    catch (e) {
+        factFail(`${what}: ${e.message}`);
+    }
+    return v;
+}
+function checkAuthzDecision(v, what) {
+    if (!isRec(v) || !wireInt(v.revision) || !wireInt(v.epoch))
+        factFail(what);
+}
+function checkTarget(v) {
+    if (!isRec(v) || typeof v.owner !== "string" || typeof v.actor !== "string" || typeof v.lifecycleUid !== "string")
+        factFail("target");
+    try {
+        assertBoundedOwner(v.owner, "target owner");
+        assertBoundedOwner(v.actor, "target actor");
+        assertLifecycleToken(v.lifecycleUid, "target lifecycleUid");
+    }
+    catch (e) {
+        factFail(`target: ${e.message}`);
+    }
+    if (v.mappingRevision !== undefined && !wireInt(v.mappingRevision))
+        factFail("target.mappingRevision");
+}
+/** The embedded canonical request of an acceptance: it MUST be a fully valid canonical
+ *  `EndpointRequest` (§13.3/§13.4), not merely a `{v,id,class,op}` shell — so it is routed
+ *  through the SAME {@link parseEndpointRequest} the request boundary uses (its boundary error,
+ *  a caller-facing code, maps to `internal` here because a malformed STORED request is a writer
+ *  bug, not a caller error). Then it is cross-checked against the fact address so a stored
+ *  acceptance can never smuggle a request for a different id/endpoint/caller into effects or
+ *  replay: journal class, id, op.endpoint, and the request's own `from.id` must all agree with
+ *  the broker-authenticated fact subject. Returns the parsed request for the target cross-check. */
+function checkEmbeddedRequest(v, addr) {
+    let req;
+    try {
+        req = parseEndpointRequest(v);
+    }
+    catch (e) {
+        return factFail(`request is not a canonical EndpointRequest: ${e.message}`);
+    }
+    if (req.class !== "journal")
+        factFail("request.class (only journal-class submissions produce decision facts)");
+    if (req.id !== addr.id)
+        factFail("request.id disagrees with the fact address");
+    if (req.op.endpoint !== addr.endpoint)
+        factFail("request.op.endpoint disagrees with the fact address");
+    if (req.from.id !== addr.caller.id)
+        factFail("request.from.id disagrees with the authenticated fact caller");
+    return req;
+}
+/** Parse a decision-fact subject into its address — the mandatory seam through which every
+ *  consuming boundary proves body↔subject agreement. Throws `internal` on a non-decision
+ *  subject (a consumer wired to the wrong subject family is a bug, never a data error). */
+export function parseDecisionFactSubject(subject) {
+    const p = parseEpSubject(subject);
+    if (!p || p.plane !== "fact" || p.topic.length !== 5 || p.topic[0] !== "dec")
+        throw new EpEnvelopeError("internal", `${subject} is not a decision-fact subject`);
+    return { endpoint: p.endpoint, caller: { id: `${p.topic[1]}.${p.topic[2]}`, lifecycleUid: p.topic[3] }, id: p.topic[4] };
+}
+/** Parse an effect-completion fact subject into its authenticated acceptance identity. */
+export function parseEffectFactSubject(subject) {
+    const p = parseEpSubject(subject);
+    if (!p || p.plane !== "fact" || p.topic.length !== 5 || p.topic[0] !== "eff")
+        throw new EpEnvelopeError("internal", `${subject} is not an effect-completion fact subject`);
+    return { endpoint: p.endpoint, caller: { id: `${p.topic[1]}.${p.topic[2]}`, lifecycleUid: p.topic[3] }, id: p.topic[4] };
+}
+/** Validate a decision fact at its consuming boundary (§13.3: every plane is runtime-validated;
+ *  effects and replay read THE FACT, never the raw submission). The fact must be
+ *  SELF-SUFFICIENT canonical authority: every field is grammar-validated (caller principal,
+ *  positive source sequence/timestamp, digest forms, the embedded canonical request, the
+ *  resolved target triple), and the body's id/caller/endpoint must AGREE with the
+ *  broker-authenticated fact subject — a mismatch is a writer bug or corrupt store and fails
+ *  loud before effects or replay can attribute the decision. */
+export function parseDecisionFact(raw, subject) {
+    const addr = parseDecisionFactSubject(subject);
+    const o = isRec(raw) ? raw : factFail("not an object");
+    if (o.v !== 1)
+        factFail("v");
+    if (typeof o.id !== "string")
+        factFail("id");
+    try {
+        assertIdToken(o.id, "fact id");
+    }
+    catch {
+        factFail("id grammar");
+    }
+    if (o.id !== addr.id)
+        factFail("id disagrees with the fact subject");
+    if (!isDigest(o.fingerprint))
+        factFail("fingerprint");
+    // sourceSeq is a stream sequence (>= 1); ts is a wire timestamp (>= 0, §13.7).
+    if (!posInt(o.sourceSeq))
+        factFail("sourceSeq must be a positive stream sequence");
+    if (!wireInt(o.ts))
+        factFail("ts must be a non-negative integer");
+    const caller = checkCaller(o.caller, "caller");
+    if (caller.id !== addr.caller.id || caller.lifecycleUid !== addr.caller.lifecycleUid)
+        factFail("caller disagrees with the fact subject");
+    if (o.decision === "rejected") {
+        checkError(o.error, "error");
+        if (o.authzDecision !== undefined)
+            checkAuthzDecision(o.authzDecision, "authzDecision");
+        return o;
+    }
+    if (o.decision !== "accepted")
+        factFail(`decision ${JSON.stringify(o.decision)}`);
+    const req = checkEmbeddedRequest(o.request, addr);
+    // The stored acceptance must expose ONE coherent effect authority (§13.4: self-sufficient for
+    // effect and replay) — target presence is EQUIVALENT to the request's (§13.3: a body target
+    // exists exactly for the targeted modes): a targeted acceptance that dropped its target is not
+    // replayable, and an untargeted request with a spurious fact target smuggles authority the
+    // caller never asked for.
+    if ((req.target !== undefined) !== (o.target !== undefined))
+        factFail(req.target !== undefined
+            ? "a targeted request's acceptance must persist the resolved target"
+            : "an untargeted request's acceptance must not carry a target");
+    if (o.target !== undefined && req.target !== undefined) {
+        checkTarget(o.target);
+        // The fact target must equal the request's FULL tuple. lifecycleUid is the caller's EXPECTED
+        // binding, validator-checked against the current mapping (§13.3) — resolution validates it,
+        // never replaces it; goals bind (principal, lifecycleUid) (§13.6), so a substituted UID
+        // redirects effect/replay to a recycled alias. A caller-pinned mappingRevision pins the
+        // exact observed revision; only an OMITTED one may be filled by resolution.
+        const ft = o.target;
+        if (req.target.owner !== ft.owner || req.target.actor !== ft.actor || req.target.lifecycleUid !== ft.lifecycleUid)
+            factFail("the fact target does not equal the embedded request's target tuple");
+        if (req.target.mappingRevision !== undefined && ft.mappingRevision !== req.target.mappingRevision)
+            factFail("the fact target does not carry the mappingRevision the request pinned");
+    }
+    const cd = o.contractDigests;
+    if (!isRec(cd) || !isDigest(cd.input) || !isDigest(cd.output))
+        factFail("contractDigests");
+    // Where the request pinned contract digests (§13.3: required on every command except
+    // `describe`), the fact's contractDigests must EQUAL them — otherwise consumers validate and
+    // effect under a different contract than the caller accepted. An omitted digest (describe)
+    // is the only fill: the fact then carries the canonicalizer-resolved digest uncompared.
+    if (req.op.inputDigest !== undefined && cd.input !== req.op.inputDigest)
+        factFail("contractDigests.input disagrees with the embedded request's pinned op.inputDigest");
+    if (req.op.outputDigest !== undefined && cd.output !== req.op.outputDigest)
+        factFail("contractDigests.output disagrees with the embedded request's pinned op.outputDigest");
+    checkAuthzDecision(o.authzDecision, "authzDecision");
+    if (o.route !== "effects" && !(typeof o.route === "string" && /^pool\.[a-z0-9-]{1,32}$/.test(o.route)))
+        factFail("route");
+    if (o.readinessDeadlineMs !== undefined && !wireInt(o.readinessDeadlineMs))
+        factFail("readinessDeadlineMs must be a non-negative integer");
+    if (o.workExpiry !== undefined && !posInt(o.workExpiry))
+        factFail("workExpiry");
+    if (String(o.route).startsWith("pool.") !== (o.workExpiry !== undefined))
+        factFail("workExpiry is present iff the route is a pool");
+    return o;
+}
+/** Validate a non-action effects completion fact at the consuming boundary — the CLOSED
+ *  two-member union: the effect ran ({@link EffectFact}) or it was retirement-cancelled
+ *  ({@link EffectCancelledFact}; the `cancelled` discriminator, whose block must itself be
+ *  closed and complete). A bare marker on the right subject is not enough: the body must bind
+ *  the accepted fingerprint and source sequence so the drain can compare it to the decision
+ *  that authorized this exact effect — for BOTH members. */
+export function parseEffectFact(raw, subject) {
+    const addr = parseEffectFactSubject(subject);
+    const o = isRec(raw) ? raw : factFail("effect fact is not an object");
+    // The SYMMETRIC outcome discriminant (the goal union's bar): every member declares its outcome,
+    // so a fact missing it — or claiming one outcome while carrying the other's fields — refuses.
+    if (o.outcome !== "ran" && o.outcome !== "cancelled")
+        factFail("effect.outcome must be \"ran\" or \"cancelled\"");
+    const isCancelled = o.outcome === "cancelled";
+    assertClosedKeys(o, isCancelled ? ["v", "id", "fingerprint", "caller", "sourceSeq", "ts", "outcome", "cancelled"] : ["v", "id", "fingerprint", "caller", "sourceSeq", "ts", "outcome"], `effect fact on ${subject}`);
+    if (o.v !== 1)
+        factFail("effect.v");
+    if (o.id !== addr.id)
+        factFail("effect.id disagrees with the fact subject");
+    if (!isDigest(o.fingerprint))
+        factFail("effect.fingerprint");
+    if (!posInt(o.sourceSeq))
+        factFail("effect.sourceSeq must be a positive stream sequence");
+    if (!wireInt(o.ts))
+        factFail("effect.ts must be a non-negative integer");
+    const caller = checkCaller(o.caller, "effect.caller");
+    if (caller.id !== addr.caller.id || caller.lifecycleUid !== addr.caller.lifecycleUid)
+        factFail("effect.caller disagrees with the fact subject");
+    const base = { v: 1, id: addr.id, fingerprint: o.fingerprint, caller, sourceSeq: o.sourceSeq, ts: o.ts };
+    if (!isCancelled)
+        return { ...base, outcome: "ran" };
+    const c = o.cancelled;
+    if (!isRec(c))
+        factFail("effect.cancelled is not an object");
+    assertClosedKeys(c, ["opId", "target"], `effect.cancelled on ${subject}`);
+    if (typeof c.opId !== "string" || c.opId.length === 0 || c.opId.length > 64)
+        factFail("effect.cancelled.opId");
+    const t = c.target;
+    if (!isRec(t))
+        factFail("effect.cancelled.target is not an object");
+    assertClosedKeys(t, ["owner", "actor", "lifecycleUid"], `effect.cancelled.target on ${subject}`);
+    if (typeof t.owner !== "string" || t.owner.length === 0 || typeof t.actor !== "string" || t.actor.length === 0 || typeof t.lifecycleUid !== "string" || t.lifecycleUid.length === 0)
+        factFail("effect.cancelled.target triple");
+    return { ...base, outcome: "cancelled", cancelled: { opId: c.opId, target: { owner: t.owner, actor: t.actor, lifecycleUid: t.lifecycleUid } } };
+}
+/** Validate a quarantine fact at its consuming boundary; the body's source sequence must agree
+ *  with the `epf….quar.<seq>` subject it was stored under. */
+export function parseQuarantineFact(raw, subject) {
+    const p = parseEpSubject(subject);
+    if (!p || p.plane !== "fact" || p.topic.length !== 2 || p.topic[0] !== "quar")
+        throw new EpEnvelopeError("internal", `${subject} is not a quarantine-fact subject`);
+    const o = isRec(raw) ? raw : factFail("not an object");
+    if (o.v !== 1 || o.decision !== "quarantined")
+        factFail("v/decision");
+    if (!posInt(o.sourceSeq))
+        factFail("sourceSeq must be a positive integer");
+    if (String(o.sourceSeq) !== p.topic[1])
+        factFail("sourceSeq disagrees with the fact subject");
+    if (!isDigest(o.submissionDigest))
+        factFail("submissionDigest");
+    checkError(o.error, "error");
+    if (o.caller !== undefined)
+        checkCaller(o.caller, "caller");
+    if (!wireInt(o.ts))
+        factFail("ts must be a non-negative integer");
+    return o;
+}
+/** Preflight a fact's SERIALIZED size against the broker's max_payload (§13.4 item 5): an
+ *  acceptance that would not fit is rejected `resource-exhausted` BEFORE any decision exists
+ *  (the rejection fact always fits by construction — every field bounded or fixed-size). */
+export function assertFactFits(fact, maxPayload) {
+    const bytes = new TextEncoder().encode(JSON.stringify(fact));
+    if (bytes.length > maxPayload)
+        throw new EpEnvelopeError("resource-exhausted", `the serialized decision fact is ${bytes.length} bytes (max_payload ${maxPayload}); a submission whose acceptance cannot fit is refused loudly, never spilled into storage`);
+    return bytes;
+}
+// ---- the decision CAS (§13.4 item 3: first decision wins atomically) -------------------------
+/** Append a submission PLAIN (§13.4 item 1): never a `Nats-Msg-Id`, no dedupe header of any
+ *  kind — the guarantee rests on the header rule, not the window. Returns the stream ack. */
+export async function appendSubmission(js, subject, envelope) {
+    const pa = await js.publish(subject, new TextEncoder().encode(JSON.stringify(envelope)));
+    return { seq: pa.seq };
+}
+/** Publish a fact with create-only CAS (expected last sequence ON THE SUBJECT = 0). Returns
+ *  `{ won: true, seq }` or `{ won: false }` on a lost CAS — the loser then READS the winning
+ *  fact ({@link readLastFact}) instead of deciding again. Any non-CAS failure propagates. */
+export async function publishFactCreateOnly(js, subject, factBytes) {
+    const h = natsHeaders();
+    h.set("Nats-Expected-Last-Subject-Sequence", "0");
+    try {
+        const pa = await js.publish(subject, factBytes, { headers: h });
+        return { won: true, seq: pa.seq };
+    }
+    catch (e) {
+        // The SHARED structured classifier (err_code, never message text): a missed classification
+        // here would turn a benign concurrent decision into an unhandled throw in the mediated
+        // writer — a normal race becoming an error/stall is exactly the failure text-matching risks.
+        if (isCasLoss(e))
+            return { won: false };
+        throw e;
+    }
+}
+/** Last-by-subject read of a fact — LEADER-SERVED (`STREAM.MSG.GET`, never `DIRECT.GET`). The
+ *  §13.4 loser-reads-winner contract needs read-your-writes against the leader that just
+ *  rejected the CAS: a follower-served Direct Get carries no such guarantee and, after legal
+ *  post-horizon id reuse, can return a STALE prior fact (semantically a DIFFERENT decision) or
+ *  nothing — and no retry can distinguish a stale nonempty fact from the current winner. EPF
+ *  keeps `allow_direct=true` for other trusted subject-confined reads (§13.12); the CAS-winner
+ *  read is deliberately not one of them. `undefined` when no fact exists on the subject. */
+export async function readLastFact(jsm, stream, subject) {
+    let m;
+    try {
+        m = await jsm.streams.getMessage(stream, { last_by_subj: subject });
+    }
+    catch (e) {
+        if (e.code === 10037)
+            return undefined; // no message found on the subject
+        throw e;
+    }
+    if (!m)
+        return undefined;
+    try {
+        return JSON.parse(new TextDecoder().decode(m.data));
+    }
+    catch (e) {
+        throw new EpEnvelopeError("internal", `fact on ${subject} does not decode as JSON: ${e.message}`);
+    }
+}
+//# sourceMappingURL=endpoint-journal.js.map

package/dist/endpoint-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-journal.js","sourceRoot":"","sources":["../src/endpoint-journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAC5E,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAwB,MAAM,wBAAwB,CAAC;AACpH,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,KAAa,IAAY,OAAO,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACtF,MAAM,UAAU,aAAa,CAAC,KAAa,IAAY,OAAO,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACtF;;wDAEwD;AACxD,MAAM,UAAU,YAAY,CAAC,QAAgB,IAAY,OAAO,SAAS,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAErG;;;;;;mCAMmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAAwB,EAAE,EAAU;IACpF,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACnF,CAAC;AACD;qFACqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;IACrF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,4BAA4B,CAAC,CAAC;IAC3H,OAAO,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AACD;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAmF,EAAE,MAAc;IACnJ,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,OAAO,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/F,CAAC;AACD;0CAC0C;AAC1C,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,QAAgB,EAAE,MAAgB,EAAE,EAAU;IAC5F,OAAO,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AAED;;8CAE8C;AAC9C,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,iGAAiG;AAEjG,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAEtE;;;;;;2FAM2F;AAC3F,MAAM,UAAU,qBAAqB,CACnC,GAAY,EACZ,OAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACpH,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IAClI,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,EAAE,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC7D,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,kBAAkB;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC;IACtE,IAAI,EAAE,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C;QACvH,0FAA0F;QAC1F,wFAAwF;;YACnF,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC5G,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,mDAAmD;AAC7G,CAAC;AAuFD,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,UAA0B,EAAE,EAAU;IACjE,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;QACjF,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oHAAoH,CAAC,CAAC;IACzK,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,4GAA4G,CAAC,CAAC;IACjK,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAC1E,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnK,CAAC;AAED;;;mGAGmG;AACnG,MAAM,UAAU,qBAAqB,CACnC,UAA0B,EAC1B,SAA2F,EAC3F,EAAU;IAEV,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;QACjG,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,oEAAoE,CAAC,CAAC;IACzH,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAClL,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,2EAA2E,CAAC,CAAC;IAChI,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACtF,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,gFAAgF,UAAU,CAAC,MAAM,EAAE,YAAY,IAAI,QAAQ,SAAS,CAAC,CAAC,YAAY,cAAc,CAAC,CAAC;IACrN,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC;AAC1J,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,2BAA2B,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrH,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxG,MAAM,MAAM,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvG,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEvG,SAAS,gBAAgB,CAAC,CAA0B,EAAE,OAA0B,EAAE,IAAY;IAC5F,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,IAAI,0BAA0B,CAAC,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,UAAU,CAAC,CAAU,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC;QAAE,QAAQ,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IACxJ,OAAO,CAAsC,CAAC;AAChD,CAAC;AACD,SAAS,WAAW,CAAC,CAAU,EAAE,IAAY;IAC3C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QAC7C,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QAC7C,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,CAAC,GAAG,IAAI,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAA0B,CAAC;AACpC,CAAC;AACD,SAAS,kBAAkB,CAAC,CAAU,EAAE,IAAY;IAClD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AACD,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtI,IAAI,CAAC;QACH,kBAAkB,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC5C,kBAAkB,CAAC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC5C,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,CAAC,WAAY,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAC;AACzG,CAAC;AACD;;;;;;;oGAOoG;AACpG,SAAS,oBAAoB,CAAC,CAAU,EAAE,IAAiB;IACzD,IAAI,GAAoB,CAAC;IACzB,IAAI,CAAC;QACH,GAAG,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC,+CAAgD,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,QAAQ,CAAC,uEAAuE,CAAC,CAAC;IAC/G,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAAE,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACvG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,8DAA8D,CAAC,CAAC;IAC7G,OAAO,GAAG,CAAC;AACb,CAAC;AAMD;;2FAE2F;AAC3F,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAC1E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,OAAO,iCAAiC,CAAC,CAAC;IACrF,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;QAC1E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,OAAO,2CAA2C,CAAC,CAAC;IAC/F,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED;;;;;;gEAMgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,OAAe;IAC7D,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,oCAAoC,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtD,+EAA+E;IAC/E,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,8CAA8C,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY;QAClF,QAAQ,CAAC,wCAAwC,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC9B,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS;YAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACxF,OAAO,CAA6B,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;QAAE,QAAQ,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,8FAA8F;IAC9F,4FAA4F;IAC5F,+FAA+F;IAC/F,2FAA2F;IAC3F,0BAA0B;IAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QACzD,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;YAC/B,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,4DAA4D,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvD,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtB,6FAA6F;QAC7F,4FAA4F;QAC5F,wFAAwF;QACxF,wFAAwF;QACxF,4EAA4E;QAC5E,MAAM,EAAE,GAAG,CAAC,CAAC,MAA0F,CAAC;QACxG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,EAAE,CAAC,YAAY;YAC/G,QAAQ,CAAC,oEAAoE,CAAC,CAAC;QACjF,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,CAAC,eAAe,KAAK,GAAG,CAAC,MAAM,CAAC,eAAe;YAC/F,QAAQ,CAAC,uEAAuE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC3F,qFAAqF;IACrF,6FAA6F;IAC7F,2FAA2F;IAC3F,wFAAwF;IACxF,IAAI,GAAG,CAAC,EAAE,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW;QACrE,QAAQ,CAAC,mFAAmF,CAAC,CAAC;IAChG,IAAI,GAAG,CAAC,EAAE,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,YAAY;QACxE,QAAQ,CAAC,qFAAqF,CAAC,CAAC;IAClG,kBAAkB,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,mBAAmB,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAAE,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC3I,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC;QAAE,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACpI,OAAO,CAA8B,CAAC;AACxC,CAAC;AAED;;;;;4DAK4D;AAC5D,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,OAAe;IAC3D,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IACtE,gGAAgG;IAChG,8FAA8F;IAC9F,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW;QAAE,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IAClH,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC;IAC9C,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAC;IACrN,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IAC1F,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,QAAQ,CAAC,0CAA0C,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY;QAClF,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAY,EAAE,CAAC;IAChJ,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAC7D,gBAAgB,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,uBAAuB,OAAO,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAC/G,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,QAAQ,CAAC,0CAA0C,CAAC,CAAC;IACpE,gBAAgB,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,8BAA8B,OAAO,EAAE,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACjL,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC;AAClJ,CAAC;AAED;8DAC8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;QAC3E,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,OAAO,mCAAmC,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,aAAa;QAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,sCAAsC,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IAC9F,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAChE,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAClE,OAAO,CAA8B,CAAC;AACxC,CAAC;AAED;;4FAE4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAmC,EAAE,UAAkB;IACpF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU;QAC3B,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,mCAAmC,KAAK,CAAC,MAAM,uBAAuB,UAAU,2FAA2F,CAAC,CAAC;IAC/N,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iGAAiG;AAEjG;6FAC6F;AAC7F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAmB,EAAE,OAAe,EAAE,QAAiB;IAC5F,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;6FAE6F;AAC7F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAmB,EACnB,OAAe,EACf,SAAqB;IAErB,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,GAAG,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2FAA2F;QAC3F,uFAAuF;QACvF,6FAA6F;QAC7F,IAAI,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;;;;;;4FAM4F;AAC5F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,MAAc,EACd,OAAe;IAEf,IAAI,CAAC,CAAC;IACN,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAAwB,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,CAAC,kCAAkC;QAClG,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,WAAW,OAAO,6BAA8B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC"}