@cotal-ai/core 0.13.1 → 0.13.2

package/dist/endpoint.d.ts

@@ -256,10 +256,26 @@ export declare class CotalEndpoint extends EventEmitter {
     /** How soon a FAILED creds refresh retries. Successful refreshes schedule by lifetime fraction
      *  (75% of iat→exp), not a fixed margin — standing creds span hours to days, bearers minutes. */
     private static readonly CREDS_RETRY_MS;
+    /** The disposable-preflight connect bound for the EXPLICIT reload proof (D5 class-2 adoption). A
+     *  rogue or unreachable candidate must resolve well UNDER the manager's delivery-admin request
+     *  bound, so this stays a few seconds and never blocks the responder. */
+    private static readonly PREFLIGHT_MS;
+    /** How long the resident wire swap is deferred past the reply on the EXPLICIT reload path. The
+     *  delivery-admin responder rides THIS connection, so `nc.reconnect()` must not run until the
+     *  reply has flushed on the still-live old cred; the old cred stays valid until its exp, so a short
+     *  deferral is safe. */
+    private static readonly RESIDENT_SWAP_DEFER_MS;
+    /** The daemon-side deadline for the WHOLE prove-then-adopt transaction (source fetch + preflight +
+     *  commit), kept strictly BELOW the manager's delivery-admin request bound so a slow or hung hosted
+     *  store returns a structured component failure rather than an ambiguous client timeout, and a late
+     *  fetch can never commit after the caller gave up. */
+    private static readonly RELOAD_DEADLINE_MS;
     /** Fetch fresh creds from the source, pin their identity to ours, cache them, and arm the next
      *  refresh at 75% of the new JWT's lifetime. THROWS on fetch/pin failure — the callers decide the
      *  failure posture (loud-and-retry for the timer, a structured error reply for an explicit
-     *  {@link reloadCreds}). */
+     *  {@link reloadCreds}). This is the PASSIVE-BACKSTOP fetch; the explicit auditable path
+     *  ({@link reloadCreds}) does its own fetch so it can preflight the candidate on a disposable
+     *  connection BEFORE mutating this live cache. */
     private fetchFreshCreds;
     /** Swap the live connection onto the freshest cached cred with a controlled `nc.reconnect()`
      *  (nats.js re-evaluates the creds getter per attempt). Swapping now, instead of waiting for the
@@ -269,20 +285,64 @@ export declare class CotalEndpoint extends EventEmitter {
      *  supervise loop's to own (its rebuild re-fetches); an already-disconnected client is a no-op
      *  (its own reconnect loop presents the fresh cred). */
     private swapConnectionOntoFreshCreds;
-    /** The 75%-of-lifetime renewal timer tick (and rebuild re-fetch) — the passive BACKSTOP behind the
-     *  explicit {@link reloadCreds}. Failure shape mirrors {@link refreshBearer}: THROWS when
-     *  `initial`, else emits "error" and retries. */
+    /** The connectAndBind PRE-CONNECT fetch: pull the freshest source cred and pin it into
+     *  {@link currentCreds} so the connect() that immediately follows presents it — that connect IS the
+     *  proof, so NO preflight and NO live swap here. THROWS when `initial` (no cred to start from), else
+     *  emits and retries. The LIVE-SWAP paths — the 75% timer {@link renewCredsOnTimer} and the explicit
+     *  {@link reloadCreds} — preflight the candidate on a disposable connection instead, so they never
+     *  reconnect the live connection onto an unproven cred. */
     private refreshCreds;
+    /** Serializes every prove-then-adopt transaction (the 75% timer and the explicit reload) so a timer
+     *  tick and an explicit reload can never interleave their fetch/preflight/commit — the design's
+     *  single-flight requirement. Runs `fn` after any in-flight transaction settles, whatever its
+     *  outcome; the internal chain never rejects. */
+    private credsTxn;
+    private runCredsTxn;
+    /** Race `p` against a `ms` deadline so a slow/hung SecretStore fetch (or preflight) cannot exceed
+     *  the daemon transaction bound. The underlying promise is not cancellable, so callers also FENCE a
+     *  late commit by re-checking the deadline before mutating {@link currentCreds}. */
+    private static withDeadline;
+    /** The one PROVE-then-adopt transaction shared by the 75% timer and the explicit reload (run under
+     *  {@link runCredsTxn}). Fetch (deadline-bounded) → identity-pin → optional `expected` fingerprint →
+     *  PREFLIGHT the candidate on a disposable connection → fence a late commit against the deadline →
+     *  commit {@link currentCreds} → arm the next 75% timer. Because currentCreds is written ONLY after
+     *  the preflight proves broker acceptance, the resident authenticator getter can never present an
+     *  unproven cred (not even on an incidental reconnect), and a rejected candidate leaves the resident
+     *  connection untouched on BOTH the timer and explicit paths. THROWS (structured) on any failure. */
+    private adoptFreshCreds;
+    /** The 75%-of-lifetime renewal timer tick: prove + adopt + swap the LIVE connection. Preflights (it
+     *  reconnects a live connection, so the candidate must be broker-proven first) and is serialized
+     *  with the explicit reload. Never throws — a failed renewal logs and retries while the old cred
+     *  stays live until its expiry. */
+    private renewCredsOnTimer;
     /** EXPLICIT credential reload — the auditable adoption step of D5 class-2 standing renewal (served
-     *  to the renewal owner via the delivery-admin rail). Re-invokes the source NOW, pins + adopts the
-     *  fresh cred on the live connection, and returns the adopted JWT's window so the caller can record
-     *  proof of adoption. THROWS (structured for the reply) when the source fails — e.g. the creds file
-     *  was not actually re-signed — so "file written" can never masquerade as "daemon adopted". */
-    reloadCreds(): Promise<{
+     *  to the renewal owner via the delivery-admin rail). The PROOF-OF-RECORD is a DISPOSABLE PREFLIGHT
+     *  connection that presents exactly the candidate: it succeeds only when the BROKER accepts this
+     *  re-signed generation, and it runs BEFORE the live cache is touched. So a cred the broker refuses
+     *  throws HERE (structured), the resident connection — and the delivery-admin rail this very reply
+     *  rides — is never disturbed, and "file re-signed" can never masquerade as "daemon adopted".
+     *  `expected` is the renewal owner's generation token (SHA-256 of the JWT it re-signed): a re-read
+     *  that does not match is rejected before the preflight even runs. On success the candidate becomes
+     *  the resident connection's next-presented cred; the wire swap is NOT forced here — the caller
+     *  ({@link handleDeliveryAdmin}) schedules it AFTER the aggregate reply, because the responder rides
+     *  this connection and reconnecting before the reply flushes would strand it (see
+     *  adoption-false-green.smoke.ts). Returns the BROKER-ACCEPTED generation's window (identity/iat/exp):
+     *  the resident wire swap is best-effort and self-healing (the 75% timer + the broker's expiry-close),
+     *  NOT witnessed, so the caller must claim broker acceptance, not verified resident reauth. NEVER a
+     *  fingerprint. */
+    reloadCreds(expected?: string): Promise<{
         identity: string;
         iat?: number;
         exp?: number;
     }>;
+    /** Arm the resident wire swap for the delivery-admin `reloadCreds` path. Called by
+     *  {@link handleDeliveryAdmin} ONLY after BOTH component proofs have settled and immediately before
+     *  the reply is returned+responded — never from inside {@link reloadCreds} while the aggregate is
+     *  still open, or a slow co-component proof would let `nc.reconnect()` reconnect the admin rail
+     *  before the reply flushes and silently strand it. The short deferral lets the reply flush on the
+     *  still-live old cred first. Best-effort — the proof was the preflight; a transient swap failure is
+     *  retried by the 75% timer and the broker's own expiry-close, both presenting the adopted candidate. */
+    private scheduleResidentSwap;
     private armCredsRefresh;
     /** Open the connection and bind everything that hangs off it: status watch, presence
      *  watch + heartbeat, channel registry, and the durable consumers. Re-runnable — a
@@ -697,7 +757,7 @@ export declare class CotalEndpoint extends EventEmitter {
      *  {@link armPlane3} on EVERY (re)connect — a reconnect drains the old connection, so re-binding both
      *  is required, not optional (the responder would otherwise be lost on a broker blip). */
     startPlane3(aclFor: (owner: string, lifecycleUid: string) => MaybePromise<string[] | undefined>, opts?: {
-        reloadMembershipCreds?: () => Promise<unknown>;
+        reloadMembershipCreds?: (expected?: string) => Promise<unknown>;
         evictPrincipal?: (principal: string) => Promise<unknown>;
         planeConnLiveness?: (query: unknown) => Promise<unknown>;
     }): Promise<void>;

package/dist/endpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkC3C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAElB,WAAW,EAEX,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EAIb,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AAYpB,OAAO,EAAwB,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4DjG,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAStD,uFAAuF;AACvF,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;;;oGAIgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;0EAasE;IACtE,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC;;;;;;;;;;;;;2FAauF;IACvF,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C;oGACgG;IAChG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;iGAG6F;IAC7F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;uFACmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;yDAEyD;AACzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAoBD;0DAC0D;AAC1D,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B;wGACoG;IACpG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAwB;IACrD,gGAAgG;IAChG,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAiB;IACpC,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,gGAAgG;IAChG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAwB;IACtD,qEAAqE;IACrE,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAC,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAE7C,OAAO,CAAC,EAAE,CAAC,CAAiB;IAC5B,OAAO,CAAC,EAAE,CAAC,CAAkB;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAmB;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAK;IAChB,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB;oCACgC;IAChC,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB,OAAO,CAAC,KAAK,CAAC,CAAK;IACnB,OAAO,CAAC,UAAU,CAAC,CAAK;IACxB,OAAO,CAAC,cAAc,CAAC,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAK;IAC9B;wFACoF;IACpF,OAAO,CAAC,gBAAgB,CAAC,CAAiD;IAC1E,OAAO,CAAC,qBAAqB,CAAC,CAAiD;IAC/E;;iGAE6F;IAC7F,OAAO,CAAC,MAAM,CAAC,CAYb;IACF,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;sFAGkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD;;oBAEgB;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD;;;;;;oFAMgF;IAChF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D;;;;0FAIsF;IACtF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;IACjE;;;;yGAIqG;IACrG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD;;2EAEuE;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD;;;iEAG6D;IAC7D,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,8FAA8F;IAC9F,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;wFACoF;IACpF,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAC,CAA8B;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB;;sFAEkF;IAClF,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC;2FACuF;IACvF,OAAO,CAAC,YAAY,CAAS;IAC7B,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAS;IAC/B;oDACgD;IAChD,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAEhC;;;4GAGwG;IACxG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,6FAA6F;IAC7F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,uGAAuG;IACvG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAS;IAE1C;sGACkG;IAClG,OAAO,CAAC,mBAAmB;gBAQf,IAAI,EAAE,eAAe;IAoGjC,GAAG,IAAI,WAAW;IAIlB;;0FAEsF;IACtF,OAAO,KAAK,MAAM,GAEjB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;6EAEyE;IACzE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAU;IAEjD;;;sFAGkF;YACpE,aAAa;IAe3B,OAAO,CAAC,gBAAgB;IAOxB;qGACiG;IACjG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEhD;;;gCAG4B;YACd,eAAe;IAW7B;;;;;;4DAMwD;YAC1C,4BAA4B;IAI1C;;qDAEiD;YACnC,YAAY;IAW1B;;;;mGAI+F;IACzF,WAAW,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ9E,OAAO,CAAC,eAAe;IASvB;;;kGAG8F;YAChF,cAAc;IA6H5B;;sEAEkE;IAClE,OAAO,CAAC,qBAAqB;IAiC7B;;;;6EAIyE;YAC3D,iBAAiB;IAa/B;;;;;oDAKgD;IAChD,OAAO,CAAC,mBAAmB;IAe3B;;;oGAGgG;IAChG,OAAO,CAAC,OAAO;IASf;;;mEAG+D;YACjD,SAAS;IAiCvB;;;iDAG6C;YAC/B,eAAe;IAqB7B;8EAC0E;IAC1E,OAAO,CAAC,WAAW;IAQnB;;;;;yBAKqB;IACf,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC3B,qDAAqD;IAC/C,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,YAAY,CAAC;IAwBxB,wDAAwD;IAClD,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAsBxB,6FAA6F;IACvF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB;;;;gGAI4F;IAC5F,GAAG,CACD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,SAAS,KAAK,IAAI,EACjE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,IAAI;IAmBP;;;;;;;;;;iEAU6D;IAC7D,YAAY,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,EACtE,IAAI,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GAClC,OAAO,yBAAyB,EAAE,YAAY;IA+CjD;;;;;;;;;;;6GAWyG;IACnG,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,SAAS,SAAO,GACf,OAAO,CAAC,YAAY,CAAC;IASxB;;;;sFAIkF;YACpE,eAAe;IAe7B;;;;;4FAKwF;IAClF,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAW9G,SAAS,IAAI,QAAQ,EAAE;IAMvB;oFACgF;IAC1E,uBAAuB,CAAC,SAAS,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtD;0EACsE;IAChE,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D;kEAC8D;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE;;;mEAG+D;IACzD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAalE,qFAAqF;IACrF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D;6EACyE;IACzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIvC;2FACuF;IACvF,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxD;;0DAEsD;IACtD,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa;IAMpD,0FAA0F;IAC1F,cAAc,IAAI,MAAM,EAAE;IAI1B;;;;;;;OAOG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwDtF;;;;;oDAKgD;IAC1C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IA0B/D;;oDAEgD;IAC1C,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IA+B9F;;;;;;;;;;OAUG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACzD,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAqC7D;;;wGAGoG;YACtF,sBAAsB;IAMpC;;;;;;OAMG;IACG,cAAc,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAmBnD;;;iDAG6C;IACvC,eAAe,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;QAAE,IAAI,IAAI,IAAI,CAAA;KAAE,CAAC;IAStE,gEAAgE;IAC1D,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IAS1B;;qEAEiE;IAC3D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IASnE;;;gGAG4F;YAC9E,aAAa;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;2DAGuD;IACvD,OAAO,CAAC,UAAU;YAMJ,UAAU;IAMxB;2EACuE;YACzD,aAAa;IAU3B;;;;;;OAMG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF;;;;;;;;;;;;;;uDAcmD;YACrC,eAAe;IAwB7B;;;;;;OAMG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1F;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD,yFAAyF;YAC3E,eAAe;IAM7B;8FAC0F;YAC5E,WAAW;IAMzB;;;;6FAIyF;IACnF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhG;;;oDAGgD;IAC1C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC;IAIrF;;;qFAGiF;IAC3E,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAK7G,mGAAmG;YACrF,gBAAgB;IAM9B,OAAO,CAAC,WAAW;IAInB;;;;iGAI6F;IACvF,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/D;;6CAEyC;IACnC,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAInF;;mCAE+B;IACzB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/E;gEAC4D;IACtD,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D;;2EAEuE;IACjE,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAMnF;;;;;;;;2BAQuB;YACT,oBAAoB;IAelC,OAAO,CAAC,kBAAkB;IAG1B;;6EAEyE;IACnE,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAGjF;qEACiE;IAC3D,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAGjG;;+GAE2G;IACrG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3D;yFACqF;IAC/E,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAY/D;;;;;oCAKgC;IAC1B,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAYnI;qGACiG;YACnF,kBAAkB;IAShC;;iEAE6D;IAC7D,OAAO,CAAC,kBAAkB;IAK1B;;;oGAGgG;YAClF,aAAa;IAY3B;+FAC2F;YAC7E,kBAAkB;IAKhC;;;;;;;;;;OAUG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiDtE;4GACwG;IAClG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvH;;;sGAGkG;YACpF,WAAW;IAmDzB;;;;;;8FAM0F;IACpF,WAAW,CACf,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,EACnF,IAAI,GAAE;QAAE,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAAO,GAChL,OAAO,CAAC,IAAI,CAAC;IAMhB;;;gDAG4C;YAC9B,qBAAqB;IAgBnC;mFAC+E;IAC/E,OAAO,CAAC,sBAAsB;IAS9B;qCACiC;YACnB,YAAY;IAkB1B;;;;;oGAKgG;YAClF,aAAa;IAuB3B;;;;kEAI8D;YAChD,SAAS;IAQvB;;;;;6GAKyG;IACzG,OAAO,CAAC,kBAAkB;IAe1B;;;;;0FAKsF;YACxE,mBAAmB;IAyCjC;gDAC4C;YAC9B,SAAS;IAcvB;;wGAEoG;YACtF,aAAa;IAoC3B;iCAC6B;YACf,SAAS;IAcvB;;uGAEmG;YACrF,YAAY;IAkE1B;;;;0GAIsG;YACxF,OAAO;IAgCrB;;4GAEwG;IAClG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAM9G;;;wFAGoF;IAC9E,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9E;;;;;;wHAMoH;YACtG,sBAAsB;IAoBpC;;8DAE0D;IAC1D,oBAAoB,IAAI,MAAM,EAAE;IAIhC;;4CAEwC;IACxC,OAAO,CAAC,cAAc;IAItB;;;4GAGwG;YAC1F,gBAAgB;IAY9B;;;;;;;uEAOmE;YACrD,yBAAyB;IAiBvC;;;;;kHAK8G;YAChG,iBAAiB;IAyB/B;;8GAE0G;IAC1G,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI9C;gEAC4D;YAC9C,OAAO;IAMrB,8FAA8F;YAChF,cAAc;IA8D5B,0GAA0G;YAC5F,IAAI;IA+DlB;;;;2BAIuB;IACvB,OAAO,CAAC,aAAa;IAyDrB,gEAAgE;IAChE,OAAO,CAAC,eAAe;IAcvB;;sFAEkF;YACpE,cAAc;IAU5B;;oDAEgD;IAChD,OAAO,CAAC,aAAa;IAOrB;gFAC4E;YAC9D,YAAY;IAS1B;oGACgG;IAC1F,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAKrC;;;uEAGmE;YACrD,OAAO;IAUrB;+DAC2D;YAC7C,aAAa;IAS3B;;mGAE+F;YACjF,eAAe;IAY7B;;;;;;;;;;OAUG;YACW,cAAc;YAad,mBAAmB;IA+CjC;;;qGAGiG;YACnF,eAAe;IA6B7B;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA8B1D;;;;;;oBAMgB;YACF,cAAc;IAgB5B;;2CAEuC;YACzB,gBAAgB;YAWhB,eAAe;YAoBf,kBAAkB;IAmBhC;;iEAE6D;YAC/C,iBAAiB;IAQ/B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,aAAa;IAsDrB;;qEAEiE;IACjE,OAAO,CAAC,SAAS;IAIjB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,KAAK;CAad;AAgFD;;kGAEkG;AAClG,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;wFACoF;IACpF,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AA+FD;;;;;4FAK4F;AAC5F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAItD;AAoDD;;;;;;;0GAO0G;AAC1G,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAuB,EAChC,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;;;;;;kFAOkF;AAClF,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAEzC;;;;oDAIoD;AACpD,wBAAsB,YAAY,CAChC,MAAM,GAAE,MAAuB,EAC/B,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,WAAW,CAAC,CA6BtB"}
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../src/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkC3C,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAEb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAElB,WAAW,EAEX,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EAIb,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AAYpB,OAAO,EAAwB,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4DjG,eAAO,MAAM,cAAc,0BAA0B,CAAC;AAStD,uFAAuF;AACvF,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;;;oGAIgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;0EAasE;IACtE,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC;;;;;;;;;;;;;2FAauF;IACvF,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C;oGACgG;IAChG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;iGAG6F;IAC7F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;uFACmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;yDAEyD;AACzD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAoBD;0DAC0D;AAC1D,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B;wGACoG;IACpG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAwB;IACrD,gGAAgG;IAChG,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAiB;IACpC,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,gGAAgG;IAChG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAwB;IACtD,qEAAqE;IACrE,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAC,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAE7C,OAAO,CAAC,EAAE,CAAC,CAAiB;IAC5B,OAAO,CAAC,EAAE,CAAC,CAAkB;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAmB;IAC/B,OAAO,CAAC,EAAE,CAAC,CAAK;IAChB,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB;oCACgC;IAChC,OAAO,CAAC,SAAS,CAAC,CAAK;IACvB,OAAO,CAAC,KAAK,CAAC,CAAK;IACnB,OAAO,CAAC,UAAU,CAAC,CAAK;IACxB,OAAO,CAAC,cAAc,CAAC,CAAK;IAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAK;IAC9B;wFACoF;IACpF,OAAO,CAAC,gBAAgB,CAAC,CAAiD;IAC1E,OAAO,CAAC,qBAAqB,CAAC,CAAiD;IAC/E;;iGAE6F;IAC7F,OAAO,CAAC,MAAM,CAAC,CAab;IACF,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;sFAGkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD;;oBAEgB;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D;qGACiG;IACjG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD;;;;;;oFAMgF;IAChF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D;;;;0FAIsF;IACtF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;IACjE;;;;yGAIqG;IACrG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD;;2EAEuE;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD;;;iEAG6D;IAC7D,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,cAAc,CAAC,CAAiC;IACxD,OAAO,CAAC,UAAU,CAAC,CAAiC;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,8FAA8F;IAC9F,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B;wFACoF;IACpF,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,YAAY,CAAC,CAA8B;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB;;sFAEkF;IAClF,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC;2FACuF;IACvF,OAAO,CAAC,YAAY,CAAS;IAC7B,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAS;IAC/B;oDACgD;IAChD,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,YAAY,CAAC,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAEhC;;;4GAGwG;IACxG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,6FAA6F;IAC7F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,uGAAuG;IACvG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAS;IAE1C;sGACkG;IAClG,OAAO,CAAC,mBAAmB;gBAQf,IAAI,EAAE,eAAe;IAoGjC,GAAG,IAAI,WAAW;IAIlB;;0FAEsF;IACtF,OAAO,KAAK,MAAM,GAEjB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;6EAEyE;IACzE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAU;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAU;IAEjD;;;sFAGkF;YACpE,aAAa;IAe3B,OAAO,CAAC,gBAAgB;IAOxB;qGACiG;IACjG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEhD;;6EAEyE;IACzE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAS;IAE7C;;;4BAGwB;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAO;IAErD;;;2DAGuD;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAEpD;;;;;sDAKkD;YACpC,eAAe;IAW7B;;;;;;4DAMwD;YAC1C,4BAA4B;IAI1C;;;;;+DAK2D;YAC7C,YAAY;IAU1B;;;qDAGiD;IACjD,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,WAAW;IAMnB;;wFAEoF;mBAC/D,YAAY;IAOjC;;;;;;yGAMqG;YACvF,eAAe;IAkC7B;;;uCAGmC;YACrB,iBAAiB;IAY/B;;;;;;;;;;;;;;uBAcmB;IACb,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAc/F;;;;;;6GAMyG;IACzG,OAAO,CAAC,oBAAoB;IAK5B,OAAO,CAAC,eAAe;IASvB;;;kGAG8F;YAChF,cAAc;IA6H5B;;sEAEkE;IAClE,OAAO,CAAC,qBAAqB;IAiC7B;;;;6EAIyE;YAC3D,iBAAiB;IAa/B;;;;;oDAKgD;IAChD,OAAO,CAAC,mBAAmB;IAe3B;;;oGAGgG;IAChG,OAAO,CAAC,OAAO;IASf;;;mEAG+D;YACjD,SAAS;IAiCvB;;;iDAG6C;YAC/B,eAAe;IAqB7B;8EAC0E;IAC1E,OAAO,CAAC,WAAW;IAQnB;;;;;yBAKqB;IACf,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAW1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkC3B,qDAAqD;IAC/C,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACrG,OAAO,CAAC,YAAY,CAAC;IAwBxB,wDAAwD;IAClD,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAsBxB,6FAA6F;IACvF,OAAO,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9D,OAAO,CAAC,YAAY,CAAC;IAexB;;;;gGAI4F;IAC5F,GAAG,CACD,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,SAAS,KAAK,IAAI,EACjE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,IAAI;IAmBP;;;;;;;;;;iEAU6D;IAC7D,YAAY,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,EACtE,IAAI,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GAClC,OAAO,yBAAyB,EAAE,YAAY;IA+CjD;;;;;;;;;;;6GAWyG;IACnG,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,SAAS,SAAO,GACf,OAAO,CAAC,YAAY,CAAC;IASxB;;;;sFAIkF;YACpE,eAAe;IAe7B;;;;;4FAKwF;IAClF,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAW9G,SAAS,IAAI,QAAQ,EAAE;IAMvB;oFACgF;IAC1E,uBAAuB,CAAC,SAAS,SAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5C,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtD;0EACsE;IAChE,YAAY,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D;kEAC8D;IACxD,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE;;;mEAG+D;IACzD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAalE,qFAAqF;IACrF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D;6EACyE;IACzE,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIvC;2FACuF;IACvF,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxD;;0DAEsD;IACtD,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa;IAMpD,0FAA0F;IAC1F,cAAc,IAAI,MAAM,EAAE;IAI1B;;;;;;;OAOG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwDtF;;;;;oDAKgD;IAC1C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IA0B/D;;oDAEgD;IAC1C,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EAAE,CAAC;IA+B9F;;;;;;;;;;OAUG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACzD,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAqC7D;;;wGAGoG;YACtF,sBAAsB;IAMpC;;;;;;OAMG;IACG,cAAc,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAmBnD;;;iDAG6C;IACvC,eAAe,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;QAAE,IAAI,IAAI,IAAI,CAAA;KAAE,CAAC;IAStE,gEAAgE;IAC1D,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IAS1B;;qEAEiE;IAC3D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IASnE;;;gGAG4F;YAC9E,aAAa;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;2DAGuD;IACvD,OAAO,CAAC,UAAU;YAMJ,UAAU;IAMxB;2EACuE;YACzD,aAAa;IAU3B;;;;;;OAMG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF;;;;;;;;;;;;;;uDAcmD;YACrC,eAAe;IAwB7B;;;;;;OAMG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1F;;;;;OAKG;IACG,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD,yFAAyF;YAC3E,eAAe;IAM7B;8FAC0F;YAC5E,WAAW;IAMzB;;;;6FAIyF;IACnF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhG;;;oDAGgD;IAC1C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC;IAIrF;;;qFAGiF;IAC3E,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAK7G,mGAAmG;YACrF,gBAAgB;IAM9B,OAAO,CAAC,WAAW;IAInB;;;;iGAI6F;IACvF,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/D;;6CAEyC;IACnC,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAInF;;mCAE+B;IACzB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/E;gEAC4D;IACtD,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D;;2EAEuE;IACjE,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAMnF;;;;;;;;2BAQuB;YACT,oBAAoB;IAelC,OAAO,CAAC,kBAAkB;IAG1B;;6EAEyE;IACnE,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAGjF;qEACiE;IAC3D,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAGjG;;+GAE2G;IACrG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3D;yFACqF;IAC/E,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAY/D;;;;;oCAKgC;IAC1B,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAYnI;qGACiG;YACnF,kBAAkB;IAShC;;iEAE6D;IAC7D,OAAO,CAAC,kBAAkB;IAK1B;;;oGAGgG;YAClF,aAAa;IAY3B;+FAC2F;YAC7E,kBAAkB;IAKhC;;;;;;;;;;OAUG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiDtE;4GACwG;IAClG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvH;;;sGAGkG;YACpF,WAAW;IAmDzB;;;;;;8FAM0F;IACpF,WAAW,CACf,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,EACnF,IAAI,GAAE;QAAE,qBAAqB,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAAO,GACjM,OAAO,CAAC,IAAI,CAAC;IAMhB;;;gDAG4C;YAC9B,qBAAqB;IAgBnC;mFAC+E;IAC/E,OAAO,CAAC,sBAAsB;IAS9B;qCACiC;YACnB,YAAY;IAkB1B;;;;;oGAKgG;YAClF,aAAa;IAuB3B;;;;kEAI8D;YAChD,SAAS;IAQvB;;;;;6GAKyG;IACzG,OAAO,CAAC,kBAAkB;IAe1B;;;;;0FAKsF;YACxE,mBAAmB;IAmEjC;gDAC4C;YAC9B,SAAS;IAcvB;;wGAEoG;YACtF,aAAa;IAoC3B;iCAC6B;YACf,SAAS;IAcvB;;uGAEmG;YACrF,YAAY;IAkE1B;;;;0GAIsG;YACxF,OAAO;IAgCrB;;4GAEwG;IAClG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAM9G;;;wFAGoF;IAC9E,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9E;;;;;;wHAMoH;YACtG,sBAAsB;IAoBpC;;8DAE0D;IAC1D,oBAAoB,IAAI,MAAM,EAAE;IAIhC;;4CAEwC;IACxC,OAAO,CAAC,cAAc;IAItB;;;4GAGwG;YAC1F,gBAAgB;IAY9B;;;;;;;uEAOmE;YACrD,yBAAyB;IAiBvC;;;;;kHAK8G;YAChG,iBAAiB;IAyB/B;;8GAE0G;IAC1G,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI9C;gEAC4D;YAC9C,OAAO;IAMrB,8FAA8F;YAChF,cAAc;IA8D5B,0GAA0G;YAC5F,IAAI;IA+DlB;;;;2BAIuB;IACvB,OAAO,CAAC,aAAa;IAyDrB,gEAAgE;IAChE,OAAO,CAAC,eAAe;IAcvB;;sFAEkF;YACpE,cAAc;IAU5B;;oDAEgD;IAChD,OAAO,CAAC,aAAa;IAOrB;gFAC4E;YAC9D,YAAY;IAS1B;oGACgG;IAC1F,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAKrC;;;uEAGmE;YACrD,OAAO;IAUrB;+DAC2D;YAC7C,aAAa;IAS3B;;mGAE+F;YACjF,eAAe;IAY7B;;;;;;;;;;OAUG;YACW,cAAc;YAad,mBAAmB;IA+CjC;;;qGAGiG;YACnF,eAAe;IA6B7B;;;;;;;;;;;OAWG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA8B1D;;;;;;oBAMgB;YACF,cAAc;IAgB5B;;2CAEuC;YACzB,gBAAgB;YAWhB,eAAe;YAoBf,kBAAkB;IAmBhC;;iEAE6D;YAC/C,iBAAiB;IAQ/B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,aAAa;IAsDrB;;qEAEiE;IACjE,OAAO,CAAC,SAAS;IAIjB,gFAAgF;IAChF,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,KAAK;CAad;AAgFD;;kGAEkG;AAClG,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;wFACoF;IACpF,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAiFD;;;;;4FAK4F;AAC5F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAItD;AAoDD;;;;;;;0GAO0G;AAC1G,wBAAsB,WAAW,CAC/B,OAAO,GAAE,MAAuB,EAChC,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;;;;;;kFAOkF;AAClF,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAEzC;;;;oDAIoD;AACpD,wBAAsB,YAAY,CAChC,MAAM,GAAE,MAAuB,EAC/B,IAAI,GAAE,QAAQ,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,WAAW,CAAC,CA6BtB"}

package/dist/endpoint.js

@@ -2,7 +2,7 @@ import { EventEmitter } from "node:events";
 import { randomUUID } from "node:crypto";
 import { createConnection } from "node:net";
 import { connect, credsAuthenticator, headers, tokenAuthenticator, nanos, AuthorizationError, PermissionViolationError, UserAuthenticationExpiredError, NoRespondersError, RequestError, } from "@nats-io/transport-node";
-import { credsClaims, idFromCreds } from "./identity.js";
+import { credsClaims, credsFingerprint, credsRenewalDelayMs, idFromCreds } from "./identity.js";
 import { inspectCredHealth } from "./provision.js";
 import { assertValidName } from "./resolve.js";
 import { createSpaceStreams, dmDurableConfig, dlvDurableConfig, taskDurableConfig, fanoutDurableConfig, inboxReaderConfig, MAX_MSGS_PER_SUBJECT, MANAGER_LEASE_TTL_MS } from "./streams.js";
@@ -331,10 +331,26 @@ export class CotalEndpoint extends EventEmitter {
     /** How soon a FAILED creds refresh retries. Successful refreshes schedule by lifetime fraction
      *  (75% of iat→exp), not a fixed margin — standing creds span hours to days, bearers minutes. */
     static CREDS_RETRY_MS = 60_000;
+    /** The disposable-preflight connect bound for the EXPLICIT reload proof (D5 class-2 adoption). A
+     *  rogue or unreachable candidate must resolve well UNDER the manager's delivery-admin request
+     *  bound, so this stays a few seconds and never blocks the responder. */
+    static PREFLIGHT_MS = 4_000;
+    /** How long the resident wire swap is deferred past the reply on the EXPLICIT reload path. The
+     *  delivery-admin responder rides THIS connection, so `nc.reconnect()` must not run until the
+     *  reply has flushed on the still-live old cred; the old cred stays valid until its exp, so a short
+     *  deferral is safe. */
+    static RESIDENT_SWAP_DEFER_MS = 250;
+    /** The daemon-side deadline for the WHOLE prove-then-adopt transaction (source fetch + preflight +
+     *  commit), kept strictly BELOW the manager's delivery-admin request bound so a slow or hung hosted
+     *  store returns a structured component failure rather than an ambiguous client timeout, and a late
+     *  fetch can never commit after the caller gave up. */
+    static RELOAD_DEADLINE_MS = 12_000;
     /** Fetch fresh creds from the source, pin their identity to ours, cache them, and arm the next
      *  refresh at 75% of the new JWT's lifetime. THROWS on fetch/pin failure — the callers decide the
      *  failure posture (loud-and-retry for the timer, a structured error reply for an explicit
-     *  {@link reloadCreds}). */
+     *  {@link reloadCreds}). This is the PASSIVE-BACKSTOP fetch; the explicit auditable path
+     *  ({@link reloadCreds}) does its own fetch so it can preflight the candidate on a disposable
+     *  connection BEFORE mutating this live cache. */
     async fetchFreshCreds() {
         const creds = await this.credsSource();
         const id = idFromCreds(creds);
@@ -356,14 +372,15 @@ export class CotalEndpoint extends EventEmitter {
         if (this.nc && !this.stopped)
             await this.nc.reconnect().catch(() => { });
     }
-    /** The 75%-of-lifetime renewal timer tick (and rebuild re-fetch) — the passive BACKSTOP behind the
-     *  explicit {@link reloadCreds}. Failure shape mirrors {@link refreshBearer}: THROWS when
-     *  `initial`, else emits "error" and retries. */
+    /** The connectAndBind PRE-CONNECT fetch: pull the freshest source cred and pin it into
+     *  {@link currentCreds} so the connect() that immediately follows presents it — that connect IS the
+     *  proof, so NO preflight and NO live swap here. THROWS when `initial` (no cred to start from), else
+     *  emits and retries. The LIVE-SWAP paths — the 75% timer {@link renewCredsOnTimer} and the explicit
+     *  {@link reloadCreds} — preflight the candidate on a disposable connection instead, so they never
+     *  reconnect the live connection onto an unproven cred. */
     async refreshCreds(initial = false) {
         try {
             await this.fetchFreshCreds();
-            if (!initial)
-                await this.swapConnectionOntoFreshCreds();
         }
         catch (e) {
             if (initial)
@@ -372,25 +389,133 @@ export class CotalEndpoint extends EventEmitter {
             this.armCredsRefresh(CotalEndpoint.CREDS_RETRY_MS);
         }
     }
+    /** Serializes every prove-then-adopt transaction (the 75% timer and the explicit reload) so a timer
+     *  tick and an explicit reload can never interleave their fetch/preflight/commit — the design's
+     *  single-flight requirement. Runs `fn` after any in-flight transaction settles, whatever its
+     *  outcome; the internal chain never rejects. */
+    credsTxn = Promise.resolve();
+    runCredsTxn(fn) {
+        const next = this.credsTxn.then(fn, fn);
+        this.credsTxn = next.then(() => undefined, () => undefined);
+        return next;
+    }
+    /** Race `p` against a `ms` deadline so a slow/hung SecretStore fetch (or preflight) cannot exceed
+     *  the daemon transaction bound. The underlying promise is not cancellable, so callers also FENCE a
+     *  late commit by re-checking the deadline before mutating {@link currentCreds}. */
+    static async withDeadline(p, ms, msg) {
+        let timer;
+        const timeout = new Promise((_, rej) => { timer = setTimeout(() => rej(new Error(msg)), Math.max(1, ms)); });
+        try {
+            return await Promise.race([p, timeout]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    /** The one PROVE-then-adopt transaction shared by the 75% timer and the explicit reload (run under
+     *  {@link runCredsTxn}). Fetch (deadline-bounded) → identity-pin → optional `expected` fingerprint →
+     *  PREFLIGHT the candidate on a disposable connection → fence a late commit against the deadline →
+     *  commit {@link currentCreds} → arm the next 75% timer. Because currentCreds is written ONLY after
+     *  the preflight proves broker acceptance, the resident authenticator getter can never present an
+     *  unproven cred (not even on an incidental reconnect), and a rejected candidate leaves the resident
+     *  connection untouched on BOTH the timer and explicit paths. THROWS (structured) on any failure. */
+    async adoptFreshCreds(opts = {}) {
+        // ABSOLUTE deadline, captured at the CALLER's entry (reloadCreds / renewCredsOnTimer) BEFORE the
+        // single-flight enqueue, so the queue wait behind an in-flight transaction counts against it. A
+        // reload queued behind a hung-store timer tick can never receive a FRESH budget and commit after
+        // the renewal owner's request bound already elapsed.
+        const deadline = opts.deadline ?? Date.now() + CotalEndpoint.RELOAD_DEADLINE_MS;
+        // Fence BEFORE any source I/O: if the queue wait already burned the budget, fail structured now and
+        // never touch the store, the preflight, or currentCreds.
+        if (Date.now() > deadline)
+            throw new Error("reloadCreds: the request deadline elapsed while queued behind another credential transaction; nothing adopted");
+        const candidate = await CotalEndpoint.withDeadline(this.credsSource(), deadline - Date.now(), "reloadCreds: the creds source did not return before the daemon deadline; nothing adopted");
+        const id = idFromCreds(candidate);
+        if (id !== this.connId)
+            throw new Error(`creds source returned identity ${id}, expected ${this.connId} - renewal may not swap the connection's nkey`);
+        // Non-material message ON PURPOSE: this text flows to the manager's persisted
+        // `RenewalRecord.adoption.error`, so neither the observed nor the expected digest may appear.
+        if (opts.expected !== undefined && credsFingerprint(candidate) !== opts.expected)
+            throw new Error("reloadCreds: re-read credential generation did not match the expected re-signed generation (a different store, or a torn/stale read); nothing adopted");
+        // PREFLIGHT = the proof. A disposable connection presenting exactly the candidate BEFORE the live
+        // cache is touched; a refused cred throws here, leaving the resident connection untouched.
+        const probe = await probeConnect(this.servers, { creds: candidate, tls: this.tls, timeoutMs: Math.max(500, Math.min(CotalEndpoint.PREFLIGHT_MS, deadline - Date.now())) });
+        if (!probe.ok)
+            throw new Error(`reloadCreds: the broker did not accept the re-signed credential (${probe.reason}); nothing adopted`);
+        if (Date.now() > deadline)
+            throw new Error("reloadCreds: the proof exceeded the daemon deadline; nothing adopted"); // fence a late commit
+        // Validate the bounded-window renewal delay BEFORE the commit: credsRenewalDelayMs throws on a cred
+        // lacking a numeric `exp`, and that throw must not leave currentCreds flipped to a candidate the
+        // authenticator would present on the next reconnect (a post-preflight validation failure is a no-op).
+        const delay = credsRenewalDelayMs(candidate);
+        this.currentCreds = candidate;
+        this.armCredsRefresh(delay);
+        return credsClaims(candidate);
+    }
+    /** The 75%-of-lifetime renewal timer tick: prove + adopt + swap the LIVE connection. Preflights (it
+     *  reconnects a live connection, so the candidate must be broker-proven first) and is serialized
+     *  with the explicit reload. Never throws — a failed renewal logs and retries while the old cred
+     *  stays live until its expiry. */
+    async renewCredsOnTimer() {
+        // Deadline captured HERE, before the enqueue, for the same reason as the explicit reload.
+        const deadline = Date.now() + CotalEndpoint.RELOAD_DEADLINE_MS;
+        try {
+            await this.runCredsTxn(() => this.adoptFreshCreds({ deadline }));
+            await this.swapConnectionOntoFreshCreds();
+        }
+        catch (e) {
+            this.emit("error", new Error(`creds refresh failed (${e instanceof Error ? e.message : String(e)}) - retrying; this connection dies at its current JWT's expiry if renewal keeps failing`));
+            this.armCredsRefresh(CotalEndpoint.CREDS_RETRY_MS);
+        }
+    }
     /** EXPLICIT credential reload — the auditable adoption step of D5 class-2 standing renewal (served
-     *  to the renewal owner via the delivery-admin rail). Re-invokes the source NOW, pins + adopts the
-     *  fresh cred on the live connection, and returns the adopted JWT's window so the caller can record
-     *  proof of adoption. THROWS (structured for the reply) when the source fails — e.g. the creds file
-     *  was not actually re-signed — so "file written" can never masquerade as "daemon adopted". */
-    async reloadCreds() {
+     *  to the renewal owner via the delivery-admin rail). The PROOF-OF-RECORD is a DISPOSABLE PREFLIGHT
+     *  connection that presents exactly the candidate: it succeeds only when the BROKER accepts this
+     *  re-signed generation, and it runs BEFORE the live cache is touched. So a cred the broker refuses
+     *  throws HERE (structured), the resident connection — and the delivery-admin rail this very reply
+     *  rides — is never disturbed, and "file re-signed" can never masquerade as "daemon adopted".
+     *  `expected` is the renewal owner's generation token (SHA-256 of the JWT it re-signed): a re-read
+     *  that does not match is rejected before the preflight even runs. On success the candidate becomes
+     *  the resident connection's next-presented cred; the wire swap is NOT forced here — the caller
+     *  ({@link handleDeliveryAdmin}) schedules it AFTER the aggregate reply, because the responder rides
+     *  this connection and reconnecting before the reply flushes would strand it (see
+     *  adoption-false-green.smoke.ts). Returns the BROKER-ACCEPTED generation's window (identity/iat/exp):
+     *  the resident wire swap is best-effort and self-healing (the 75% timer + the broker's expiry-close),
+     *  NOT witnessed, so the caller must claim broker acceptance, not verified resident reauth. NEVER a
+     *  fingerprint. */
+    async reloadCreds(expected) {
         if (!this.credsSource)
             throw new Error("reloadCreds: this endpoint has no creds source (a static cred cannot be renewed in place)");
-        const { iat, exp } = await this.fetchFreshCreds();
-        await this.swapConnectionOntoFreshCreds();
+        // Capture the ABSOLUTE deadline at ENTRY, before enqueue, so a reload queued behind a hung-store
+        // 75% timer tick is bounded by the SAME window (queue wait included) and cannot commit/swap after
+        // the renewal owner's request bound has already elapsed and it recorded "no responder".
+        const deadline = Date.now() + CotalEndpoint.RELOAD_DEADLINE_MS;
+        // The prove-then-adopt transaction (fetch + preflight + commit) runs under the single-flight so it
+        // cannot interleave with the 75% timer; the wire swap is scheduled by {@link handleDeliveryAdmin}
+        // after the aggregate reply (the responder rides this connection).
+        const { iat, exp } = await this.runCredsTxn(() => this.adoptFreshCreds({ expected, deadline }));
         return { identity: this.connId, iat, exp };
     }
+    /** Arm the resident wire swap for the delivery-admin `reloadCreds` path. Called by
+     *  {@link handleDeliveryAdmin} ONLY after BOTH component proofs have settled and immediately before
+     *  the reply is returned+responded — never from inside {@link reloadCreds} while the aggregate is
+     *  still open, or a slow co-component proof would let `nc.reconnect()` reconnect the admin rail
+     *  before the reply flushes and silently strand it. The short deferral lets the reply flush on the
+     *  still-live old cred first. Best-effort — the proof was the preflight; a transient swap failure is
+     *  retried by the 75% timer and the broker's own expiry-close, both presenting the adopted candidate. */
+    scheduleResidentSwap() {
+        if (this.stopped)
+            return;
+        setTimeout(() => { void this.swapConnectionOntoFreshCreds(); }, CotalEndpoint.RESIDENT_SWAP_DEFER_MS).unref?.();
+    }
     armCredsRefresh(delayMs) {
         if (this.stopped)
             return;
         clearTimeout(this.credsTimer);
         // 1s floor (vs the bearer's 5s): standing-renewal smokes exercise second-scale TTLs; production
         // lifetimes are hours+ so the floor never engages there.
-        this.credsTimer = setTimeout(() => void this.refreshCreds(), Math.max(1_000, delayMs));
+        this.credsTimer = setTimeout(() => void this.renewCredsOnTimer(), Math.max(1_000, delayMs));
         this.credsTimer.unref?.();
     }
     /** Open the connection and bind everything that hangs off it: status watch, presence
@@ -1938,14 +2063,34 @@ export class CotalEndpoint extends EventEmitter {
      *  structured failure (e.g. the file was never re-signed), never a silent partial. */
     async handleDeliveryAdmin(req) {
         if (req.op === "reloadCreds") {
-            try {
-                const delivery = await this.reloadCreds();
-                const membership = this.plane3?.reloadMembershipCreds ? await this.plane3.reloadMembershipCreds() : undefined;
-                return { ok: true, data: { delivery, ...(membership !== undefined ? { membership } : {}) } };
-            }
-            catch (e) {
-                return { ok: false, error: e.message };
-            }
+            // The renewal owner's EXPECTED-generation tokens (SHA-256 of each JWT it re-signed), per
+            // component. A missing entry means "no expectation" (the passive backstop still adopts).
+            const expected = (req.args?.expected ?? {});
+            // Prove BOTH components INDEPENDENTLY (non-short-circuit): one failing must neither hide the
+            // other's outcome nor be masked by it. Top-level `ok` is false if EITHER proof failed, so the
+            // manager can never record a green adoption while a component was refused.
+            // Each component's outcome claims only what is PROVEN: `brokerAccepted` (the preflight) carries
+            // the accepted generation's window; `residentSwap` records that the wire swap is best-effort and
+            // self-healing, NOT witnessed. Neither claims verified resident reauth (that would need a
+            // generation-tied reconnect witness on both connections).
+            const [delivery, membership] = await Promise.all([
+                this.reloadCreds(expected.delivery).then((brokerAccepted) => ({ ok: true, brokerAccepted, residentSwap: "scheduled" }), (e) => ({ ok: false, error: e.message })),
+                this.plane3?.reloadMembershipCreds
+                    ? this.plane3.reloadMembershipCreds(expected.membership).then((result) => ({ ok: true, ...result }), (e) => ({ ok: false, error: e.message }))
+                    : Promise.resolve({ ok: true, skipped: "no-membership-hook" }),
+            ]);
+            const failures = [
+                delivery.ok ? undefined : `delivery: ${delivery.error}`,
+                membership.ok ? undefined : `membership: ${membership.error}`,
+            ].filter((m) => m !== undefined);
+            // Arm the resident wire swap ONLY now — after BOTH proofs settled, right before the reply is
+            // returned+responded — so a slow membership proof can never let the delivery reconnect strand
+            // this reply. Only when delivery actually adopted a new candidate (currentCreds was updated).
+            if (delivery.ok)
+                this.scheduleResidentSwap();
+            return failures.length
+                ? { ok: false, error: failures.join("; "), data: { delivery, membership } }
+                : { ok: true, data: { delivery, membership } };
         }
         if (req.op === "evictPrincipal") {
             // The LIVE-EVICTION executor (D5 slice 6): force-drop a denied principal's connections.
@@ -3158,19 +3303,6 @@ function authOpts(a) {
  *  bearer) is the real boundary, so a client that lied to itself would just be denied. Per the token
  *  claim semantics the OWNER is the JWT `sub` (`act.owner` merely restates it) and the ACTOR is
  *  `act.actor`. Throws on a structurally-unusable bearer (fail-loud). */
-/** Ms until a source-fed cred's RENEWAL point — 75% of its iat→exp lifetime (the cert-manager-style
- *  renew-early convention: the remaining 25% is the loud-failure window, wide for day-scale standing
- *  creds). Negative when already past it. A source-fed cred WITHOUT a numeric `exp` is fail-loud:
- *  the renewal seam exists precisely for bounded creds, so an unbounded one signals a matrix/caller
- *  mismatch, not a cred to keep silently forever. */
-function credsRenewalDelayMs(creds) {
-    const claims = credsClaims(creds); // throws on a structurally-unusable file (fail-loud)
-    if (typeof claims.exp !== "number")
-        throw new Error("creds source returned a cred without a numeric exp - a standing-renewal endpoint requires bounded creds (mint with a lifetime, or pass a static string instead of a source)");
-    const iatMs = (typeof claims.iat === "number" ? claims.iat : Date.now() / 1000) * 1000;
-    const expMs = claims.exp * 1000;
-    return iatMs + 0.75 * (expMs - iatMs) - Date.now();
-}
 /** The bearer's `exp` as epoch ms — what the refresh schedule keys on. A bearer without a numeric
  *  `exp` is structurally unusable for a refreshing endpoint (fail-loud, like the principal decode). */
 function bearerExpiryMs(bearer) {