@cotal-ai/core 0.48.2 → 0.50.0

package/dist/secret-store.d.ts

@@ -28,6 +28,12 @@
  * (e.g. `mintCreds`).
  */
 export interface SecretStore {
+    /** Stable, non-secret identity of the authority this adapter reads and writes. A first-party
+     *  filesystem adapter declares this intrinsically. A hosted adapter may declare its Vault/KMS
+     *  coordinate here, so callers do not have to reconstruct the adapter's authority from cwd or
+     *  another local root. Optional for compatibility; a composition that needs identity proof must
+     *  otherwise supply an explicit coordinate at its boundary. */
+    readonly identity?: SecretStoreIdentity;
     /** The stored value for `key`, or `undefined` if absent. */
     get(key: string): Promise<string | undefined>;
     /** Store `value` under `key`, replacing any prior value AS A WHOLE: a concurrent `get` observes
@@ -43,4 +49,42 @@ export interface SecretStore {
      *  are mint / renewal / eviction concerns, not `SecretStore`). */
     delete(key: string): Promise<void>;
 }
+/**
+ * How a process names the SecretStore it uses as the standing-daemon credential authority.
+ *
+ * Fingerprint-only `reloadCreds` is safe only when the renewal owner and the delivery daemon
+ * genuinely read one store. This identity is that proof: it names the store, never a secret.
+ * Two workstation filesystem stores agree only when they resolve the same directory. An
+ * injected (hosted) store is identified by an operator-supplied coordinate, never guessed from
+ * a local root. A store may declare this identity itself; otherwise the composition root must
+ * provide it explicitly. There is no fallback between the two shapes.
+ */
+export type SecretStoreIdentity = {
+    kind: "fs";
+    root: string;
+} | {
+    kind: "injected";
+    coordinate: string;
+};
+/** Compare two store identities. Filesystem roots are compared after POSIX-style trailing-slash trim. */
+export declare function sameSecretStoreIdentity(a: SecretStoreIdentity, b: SecretStoreIdentity): boolean;
+/** Operator-facing label used in the divergence notice that names both stores. */
+export declare function formatSecretStoreIdentity(id: SecretStoreIdentity): string;
+/**
+ * Parse a store identity off the delivery-admin rail. Unknown fields, extra keys, blank
+ * values, and mixed fs/injected shapes are refused rather than guessed.
+ */
+export declare function parseSecretStoreIdentity(raw: unknown): SecretStoreIdentity;
+/**
+ * The notice a manager logs when its remint store and the daemon's reload source are not one
+ * authority. That manager is not the daemon-credential renewal owner: it serves the space and
+ * leaves those credentials to the manager whose store the daemon reloads from (#1634). Both
+ * identities appear, because a notice that declines ownership without naming them leaves the
+ * operator no way to find the owner.
+ *
+ * Matching this identity is NECESSARY but NOT SUFFICIENT for ownership. It is pure equality with
+ * no holder and no tiebreak, so every manager sharing one store passes it; the per-space renewal
+ * lease is what makes the owner single.
+ */
+export declare function divergentSecretStoreNotice(owner: SecretStoreIdentity, daemon: SecretStoreIdentity): string;
 //# sourceMappingURL=secret-store.d.ts.map

package/dist/secret-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-store.d.ts","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE9C;;;;0GAIsG;IACtG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;sEAIkE;IAClE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC"}
+{"version":3,"file":"secret-store.d.ts","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;mEAI+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAExC,4DAA4D;IAC5D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE9C;;;;0GAIsG;IACtG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;sEAIkE;IAClE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,yGAAyG;AACzG,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAK/F;AAMD,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,mBAAmB,GAAG,MAAM,CAEzE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,CAoB1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAQ1G"}

package/dist/secret-store.js

@@ -1,2 +1,61 @@
-export {};
+/** Compare two store identities. Filesystem roots are compared after POSIX-style trailing-slash trim. */
+export function sameSecretStoreIdentity(a, b) {
+    if (a.kind !== b.kind)
+        return false;
+    if (a.kind === "fs" && b.kind === "fs")
+        return trimStorePath(a.root) === trimStorePath(b.root);
+    if (a.kind === "injected" && b.kind === "injected")
+        return a.coordinate === b.coordinate;
+    return false;
+}
+function trimStorePath(p) {
+    return p.replace(/[/\\]+$/, "") || p;
+}
+/** Operator-facing label used in the divergence notice that names both stores. */
+export function formatSecretStoreIdentity(id) {
+    return id.kind === "fs" ? id.root : `injected:${id.coordinate}`;
+}
+/**
+ * Parse a store identity off the delivery-admin rail. Unknown fields, extra keys, blank
+ * values, and mixed fs/injected shapes are refused rather than guessed.
+ */
+export function parseSecretStoreIdentity(raw) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        throw new Error("secret-store identity must be an object");
+    const o = raw;
+    const keys = Object.keys(o);
+    if (o.kind === "fs") {
+        if (keys.some((k) => k !== "kind" && k !== "root"))
+            throw new Error("secret-store identity of kind fs admits only {kind, root}");
+        if (typeof o.root !== "string" || !o.root.trim())
+            throw new Error("secret-store identity of kind fs requires a non-blank root");
+        return { kind: "fs", root: o.root };
+    }
+    if (o.kind === "injected") {
+        if (keys.some((k) => k !== "kind" && k !== "coordinate"))
+            throw new Error("secret-store identity of kind injected admits only {kind, coordinate}");
+        if (typeof o.coordinate !== "string" || !o.coordinate.trim())
+            throw new Error("secret-store identity of kind injected requires a non-blank coordinate");
+        return { kind: "injected", coordinate: o.coordinate };
+    }
+    throw new Error('secret-store identity kind must be "fs" or "injected"');
+}
+/**
+ * The notice a manager logs when its remint store and the daemon's reload source are not one
+ * authority. That manager is not the daemon-credential renewal owner: it serves the space and
+ * leaves those credentials to the manager whose store the daemon reloads from (#1634). Both
+ * identities appear, because a notice that declines ownership without naming them leaves the
+ * operator no way to find the owner.
+ *
+ * Matching this identity is NECESSARY but NOT SUFFICIENT for ownership. It is pure equality with
+ * no holder and no tiebreak, so every manager sharing one store passes it; the per-space renewal
+ * lease is what makes the owner single.
+ */
+export function divergentSecretStoreNotice(owner, daemon) {
+    return (`not the daemon-credential renewal owner for this space: ` +
+        `this manager remints through ${formatSecretStoreIdentity(owner)} while the delivery daemon ` +
+        `reloads from ${formatSecretStoreIdentity(daemon)}, so it leaves those credentials to the ` +
+        `manager on the daemon's own store. Give both processes the same store ` +
+        `(one explicit SecretStore coordinate, or one shared filesystem root) to renew from here.`);
+}
 //# sourceMappingURL=secret-store.js.map

package/dist/secret-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-store.js","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":""}
+{"version":3,"file":"secret-store.js","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":"AAqEA,yGAAyG;AACzG,MAAM,UAAU,uBAAuB,CAAC,CAAsB,EAAE,CAAsB;IACpF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,yBAAyB,CAAC,EAAuB;IAC/D,OAAO,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;YAC9C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,YAAY,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE;YAC1D,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA0B,EAAE,MAA2B;IAChG,OAAO,CACL,0DAA0D;QAC1D,gCAAgC,yBAAyB,CAAC,KAAK,CAAC,6BAA6B;QAC7F,gBAAgB,yBAAyB,CAAC,MAAM,CAAC,0CAA0C;QAC3F,wEAAwE;QACxE,0FAA0F,CAC3F,CAAC;AACJ,CAAC"}

package/dist/streams.d.ts

@@ -1,4 +1,4 @@
-import { type ConsumerConfig, type JetStreamManager } from "@nats-io/jetstream";
+import { type ConsumerConfig, type JetStreamClient, type JetStreamManager } from "@nats-io/jetstream";
 import { type NatsConnection } from "@nats-io/transport-node";
 /** Per-(sender,channel)-subject retention cap on the chat stream — the bound past which the
  *  oldest message on a subject is discarded (`DiscardPolicy.Old`). Also the horizon of focus
@@ -179,82 +179,30 @@ export declare function fanoutDurableConfig(space: string, opts?: {
 }): Partial<ConsumerConfig>;
 /** Connect with the given (privileged) creds, create the space's streams, and disconnect.
  *  Used by `cotal up` to pre-create streams once at setup. */
-/** #286: reconcile a TTL'd KV bucket's `max_age` to `ttlMs`. `kvm.create` NEVER updates an existing
- *  bucket's config, so a presence/lease bucket created by a cotal that predated the TTL (or created
- *  without it) keeps NO expiry forever — dead presence records and stale leases never age out, and a
- *  raw-KV reader (a dashboard) shows a crashed agent as live indefinitely. Run at every `cotal up`, this
- *  `STREAM.UPDATE`s the backing stream when its `max_age` has drifted. Lowering `max_age` immediately
- *  ages out already-expired messages (the intended liveness effect; active leases are younger than their
- *  TTL and survive, a stale one dies and its holder self-fences on its next failed renewal). NATS requires
- *  `duplicate_window <= max_age`; an old unlimited bucket's 120s window would otherwise reject the update,
- *  so the window is lowered in the SAME update. Idempotent (a matching bucket is skipped). The `provisioner`
- *  cred holds `STREAM.UPDATE` on exactly these three streams (see provision.ts).
- *
- *  WHAT THE READ-BACK PROVES, AND WHAT IT CANNOT. It verifies exactly two things: **`max_age` came back
- *  EXACTLY as intended**, and **`duplicate_window` does not violate the NATS constraint** (it is not
- *  above `max_age`). A no-op update, a `max_age` that came back other than intended, or a server that
- *  answers OK without changing anything is caught here and throws.
- *
- *  Note what that does NOT include: the update sends a computed `dupNs`, but the read-back never checks
- *  the window came back as sent — omitted, zeroed, or clamped smaller all pass. Deliberate: any window
- *  `<= max_age` is legal and harmless for a liveness bucket, and demanding equality would turn a
- *  legitimate server-side clamp into a failed `cotal up`. (Confirmed by probe: the real function accepts
- *  a read-back with exact `max_age` and the window OMITTED.) It does NOT prove that file-store expiry is
- *  in force either, and the distinction is
- *  not theoretical — on the supported floor (nats-server 2.12.1) the effect is applied in two places and
- *  only one of them is visible to us:
- *    - `stream.go` assigns the new in-memory `mset.cfg`, then calls `mset.store.UpdateConfig(cfg)` and
- *      IGNORES its returned error;
- *    - `filestore.go`'s `UpdateConfig` restores the previous config and returns early when
- *      `writeStreamMeta()` fails — BEFORE `expireMsgs()`/age enforcement is ever started;
- *    - `STREAM.INFO` is answered from `mset.config()`, i.e. the in-memory copy.
- *  So a metadata-write fault (EACCES, ENOSPC) yields UPDATE OK, a read-back showing the intended
- *  `max_age`, and a backing store still running unlimited with no expiry timer. **This check cannot see
- *  that**, because both fields it reads come from the config that DID get updated.
- *
- *  It is NOT, however, invisible everywhere — an earlier version of this comment said no check at this
- *  seam could see it, and that was false. `$JS.API.STREAM.SNAPSHOT` splits the useful way: the snapshot
- *  INITIATION response copies `mset.config()` and false-greens like INFO, but the STREAMED archive's
- *  first `meta.inf` entry marshals `fs.cfg` — the file store's own, rolled-back config. Reproduced live
- *  against an EACCES split: INFO and the initiation response both reported the requested TTL while the
- *  streamed `meta.inf` reported the old one. So a store-side detector EXISTS in the protocol, and this
- *  codebase has `downloadStreamSnapshot` plus a per-stream-scoped snapshot grant MODEL (`backup.ts`).
- *
- *  **It is NOT available under current authority, and that — not the cost — is what blocks it.**
- *  `assertBackupStream` runs every scope through `canonicalBackupStreamConfig`, which accepts only the
- *  durable registries (channel / acl / members) among KV buckets and THROWS for presence, delivery and
- *  manager. So wiring this in needs a NEW EXACT SCOPE, or a widening of the reconcile credential to
- *  whole-body snapshot authority over liveness data — an unsettled authority question on the credential
- *  this change otherwise keeps to three `STREAM.UPDATE` subjects. The cost is real too (it scales with
- *  bucket size, and a snapshot carries the bucket's records), but quoting only the cost would read as
- *  "available but expensive", which is the wrong summary. See the tracking issue for the full spec.
- *
- *  Stated here rather than left implied: this guard is a drift detector, not proof of enforcement — and
- *  "cannot be detected here" is the stronger claim it does NOT license.
+export declare const TTL_RECONCILE_CANARY_KEY = "_cotal_ttl_reconcile";
+/** The server accepted and reported a TTL update, but its backing store did not enforce it. */
+export declare class TtlPersistenceError extends Error {
+    readonly stream: string;
+    readonly ttlMs: number;
+    readonly canarySubject: string;
+    constructor(stream: string, ttlMs: number, canarySubject: string);
+}
+/** #286/#404: reconcile a TTL'd KV bucket and prove the backing store enforces the result.
  *
- *  CONSEQUENCE OF READING FIRST, which follows from the same split and is worth naming because the
- *  skip is deliberate: once `STREAM.INFO` reports the intended `max_age`, later reconciles see no
- *  drift and issue no update, so a bucket left unenforced by a metadata-write fault is not retried
- *  for as long as that server process lives.
+ * `STREAM.INFO` alone is not evidence. nats-server updates the stream's in-memory config before asking
+ * the backing store to persist it, ignores the store's `UpdateConfig` error, and serves INFO from the
+ * in-memory copy. A file-store metadata fault can therefore report UPDATE success and the requested
+ * `max_age` while the store rolls back and never starts age enforcement.
  *
- *  WHERE THAT GOES depends on WHEN the write failed, and an earlier version of this comment got it
- *  wrong by generalising from one case. `writeStreamMeta` performs TWO writes — `meta.inf`, then
- *  `meta.sum` — and `UpdateConfig` rolls `fs.cfg` back if either fails:
- *    - **Failure BEFORE the first write commits** (the original EACCES reproduction): persisted state
- *      is coherent and old, so a restart makes `INFO` report the old value again and the next
- *      reconcile repairs it. Here the skip DEFERS a repair.
- *    - **Failure BETWEEN the two** (reproduced live by pointing `meta.sum.tmp` at `/dev/full`):
- *      `meta.inf` commits NEW while `meta.sum` stays OLD — a torn pair. On restart the server logs
- *      `checksums do not match` and recovery `continue`s past the stream, so it is SKIPPED: `INFO`
- *      returns **stream not found**, and the reconcile cannot repair it because its own first `INFO`
- *      gets not-found. **That case does not defer a repair, it loses the stream until an operator
- *      intervenes.**
- *  So "the persisted metadata is ground truth, restart repairs it" is TRUE ONLY of the
- *  before-first-atomic case, and "defers, never loses" is false in general. The read-first skip is
- *  still right — it keeps a healthy repeat `cotal up` to reads and no writes — but its worst case is
- *  worse than a deferred repair. Both branches reproduced live against 2.12.1 during review; see the
- *  tracking issue. */
-export declare function reconcileBucketTtl(jsm: JetStreamManager, streamName: string, ttlMs: number): Promise<TtlReconciled | undefined>;
+ * Before an update, this writes a durable marker on a reserved KV subject so an interrupted or false-green
+ * attempt cannot disappear behind a later matching INFO read. After the update, it writes the enforcement
+ * canary on that same subject and waits for subject-filtered stream state to report it gone within
+ * `max_age` plus fixed grace. The post-update write is the timed proof even when the prior TTL was shorter
+ * and expired the marker during the update. A clean matching bucket has no canary and stays a fast read-only
+ * no-op. The transition is proof of enforcement rather than config: the false-green store leaves the canary
+ * present and causes a named {@link TtlPersistenceError}, which `cotal up` surfaces. Successful canaries
+ * self-delete through the policy they verify. */
+export declare function reconcileBucketTtl(jsm: JetStreamManager, js: Pick<JetStreamClient, "publish">, streamName: string, bucket: string, ttlMs: number): Promise<TtlReconciled | undefined>;
 /** The TTL'd buckets and their intended `max_age`, in ONE place — and the ONLY place any of them is
  *  created.
  *

package/dist/streams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"streams.d.ts","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAA0D,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA8CtH;;4FAE4F;AAC5F,eAAO,MAAM,oBAAoB,OAA8B,CAAC;AAEhE;;;;;;;;;0GAS0G;AAC1G,eAAO,MAAM,sBAAsB,QAAgC,CAAC;AAEpE;oFACoF;AACpF,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;mHAKmH;AACnH,eAAO,MAAM,YAAY,QAAS,CAAC;AAEnC;;;yEAGyE;AACzE,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;uDAoBuD;AACvD,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAC/D,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C;;;8GAG8G;AAC9G,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD;;;;;;;;;;;qEAWqE;AACrE,eAAO,MAAM,wBAAwB,QAAyB,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;+CAE+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;sEAgBkE;IAClE,GAAG,EAAE,OAAO,CAAC;CACd;AAED;;;;;;;;;gGASgG;AAChG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoCnF;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3F,OAAO,CAAC,cAAc,CAAC,CAsBzB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAOzB;AAID;;;;uDAIuD;AACvD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACjE,OAAO,CAAC,cAAc,CAAC,CASzB;AAED;;;;kBAIkB;AAClB,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,OAAO,CAAC,cAAc,CAAC,CAYzB;AAED;;yGAEyG;AACzG,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACjE,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED;8DAC8D;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA0EsB;AACtB,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAoBrI;AAED;;;;;;;;;;;oFAWoF;AACpF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAclF;AAED;;;uEAGuE;AACvE,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;;;;;;4FAU4F;AAC5F,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAa3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4D1F;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChB;AAED;kDACkD;AAClD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAWnC;AAED;;;;;oFAKoF;AACpF,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wGAAwG;IACxG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAmB/C;AAED;;;;;;;;;;;;;uGAauG;AACvG,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB"}
+{"version":3,"file":"streams.d.ts","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAA0D,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA8CtH;;4FAE4F;AAC5F,eAAO,MAAM,oBAAoB,OAA8B,CAAC;AAEhE;;;;;;;;;0GAS0G;AAC1G,eAAO,MAAM,sBAAsB,QAAgC,CAAC;AAEpE;oFACoF;AACpF,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;mHAKmH;AACnH,eAAO,MAAM,YAAY,QAAS,CAAC;AAEnC;;;yEAGyE;AACzE,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;uDAoBuD;AACvD,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAC/D,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C;;;8GAG8G;AAC9G,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD;;;;;;;;;;;qEAWqE;AACrE,eAAO,MAAM,wBAAwB,QAAyB,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;+CAE+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;sEAgBkE;IAClE,GAAG,EAAE,OAAO,CAAC;CACd;AAED;;;;;;;;;gGASgG;AAChG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoCnF;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3F,OAAO,CAAC,cAAc,CAAC,CAsBzB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAOzB;AAID;;;;uDAIuD;AACvD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACjE,OAAO,CAAC,cAAc,CAAC,CASzB;AAED;;;;kBAIkB;AAClB,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,OAAO,CAAC,cAAc,CAAC,CAYzB;AAED;;yGAEyG;AACzG,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACjE,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED;8DAC8D;AAC9D,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAI/D,+FAA+F;AAC/F,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM;gBAAtE,MAAM,EAAE,MAAM,EAAW,KAAK,EAAE,MAAM,EAAW,aAAa,EAAE,MAAM;CAO5F;AA2BD;;;;;;;;;;;;;;iDAciD;AACjD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,gBAAgB,EACrB,EAAE,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EACpC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAiCpC;AAED;;;;;;;;;;;oFAWoF;AACpF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAclF;AAED;;;uEAGuE;AACvE,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;;;;;;4FAU4F;AAC5F,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAY3B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4D1F;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6ChB;AAED;kDACkD;AAClD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAWnC;AAED;;;;;oFAKoF;AACpF,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wGAAwG;IACxG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAmB/C;AAED;;;;;;;;;;;;;uGAauG;AACvG,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB"}

package/dist/streams.js

@@ -241,88 +241,70 @@ export function fanoutDurableConfig(space, opts = {}) {
 }
 /** Connect with the given (privileged) creds, create the space's streams, and disconnect.
  *  Used by `cotal up` to pre-create streams once at setup. */
-/** #286: reconcile a TTL'd KV bucket's `max_age` to `ttlMs`. `kvm.create` NEVER updates an existing
- *  bucket's config, so a presence/lease bucket created by a cotal that predated the TTL (or created
- *  without it) keeps NO expiry forever — dead presence records and stale leases never age out, and a
- *  raw-KV reader (a dashboard) shows a crashed agent as live indefinitely. Run at every `cotal up`, this
- *  `STREAM.UPDATE`s the backing stream when its `max_age` has drifted. Lowering `max_age` immediately
- *  ages out already-expired messages (the intended liveness effect; active leases are younger than their
- *  TTL and survive, a stale one dies and its holder self-fences on its next failed renewal). NATS requires
- *  `duplicate_window <= max_age`; an old unlimited bucket's 120s window would otherwise reject the update,
- *  so the window is lowered in the SAME update. Idempotent (a matching bucket is skipped). The `provisioner`
- *  cred holds `STREAM.UPDATE` on exactly these three streams (see provision.ts).
- *
- *  WHAT THE READ-BACK PROVES, AND WHAT IT CANNOT. It verifies exactly two things: **`max_age` came back
- *  EXACTLY as intended**, and **`duplicate_window` does not violate the NATS constraint** (it is not
- *  above `max_age`). A no-op update, a `max_age` that came back other than intended, or a server that
- *  answers OK without changing anything is caught here and throws.
- *
- *  Note what that does NOT include: the update sends a computed `dupNs`, but the read-back never checks
- *  the window came back as sent — omitted, zeroed, or clamped smaller all pass. Deliberate: any window
- *  `<= max_age` is legal and harmless for a liveness bucket, and demanding equality would turn a
- *  legitimate server-side clamp into a failed `cotal up`. (Confirmed by probe: the real function accepts
- *  a read-back with exact `max_age` and the window OMITTED.) It does NOT prove that file-store expiry is
- *  in force either, and the distinction is
- *  not theoretical — on the supported floor (nats-server 2.12.1) the effect is applied in two places and
- *  only one of them is visible to us:
- *    - `stream.go` assigns the new in-memory `mset.cfg`, then calls `mset.store.UpdateConfig(cfg)` and
- *      IGNORES its returned error;
- *    - `filestore.go`'s `UpdateConfig` restores the previous config and returns early when
- *      `writeStreamMeta()` fails — BEFORE `expireMsgs()`/age enforcement is ever started;
- *    - `STREAM.INFO` is answered from `mset.config()`, i.e. the in-memory copy.
- *  So a metadata-write fault (EACCES, ENOSPC) yields UPDATE OK, a read-back showing the intended
- *  `max_age`, and a backing store still running unlimited with no expiry timer. **This check cannot see
- *  that**, because both fields it reads come from the config that DID get updated.
- *
- *  It is NOT, however, invisible everywhere — an earlier version of this comment said no check at this
- *  seam could see it, and that was false. `$JS.API.STREAM.SNAPSHOT` splits the useful way: the snapshot
- *  INITIATION response copies `mset.config()` and false-greens like INFO, but the STREAMED archive's
- *  first `meta.inf` entry marshals `fs.cfg` — the file store's own, rolled-back config. Reproduced live
- *  against an EACCES split: INFO and the initiation response both reported the requested TTL while the
- *  streamed `meta.inf` reported the old one. So a store-side detector EXISTS in the protocol, and this
- *  codebase has `downloadStreamSnapshot` plus a per-stream-scoped snapshot grant MODEL (`backup.ts`).
- *
- *  **It is NOT available under current authority, and that — not the cost — is what blocks it.**
- *  `assertBackupStream` runs every scope through `canonicalBackupStreamConfig`, which accepts only the
- *  durable registries (channel / acl / members) among KV buckets and THROWS for presence, delivery and
- *  manager. So wiring this in needs a NEW EXACT SCOPE, or a widening of the reconcile credential to
- *  whole-body snapshot authority over liveness data — an unsettled authority question on the credential
- *  this change otherwise keeps to three `STREAM.UPDATE` subjects. The cost is real too (it scales with
- *  bucket size, and a snapshot carries the bucket's records), but quoting only the cost would read as
- *  "available but expensive", which is the wrong summary. See the tracking issue for the full spec.
- *
- *  Stated here rather than left implied: this guard is a drift detector, not proof of enforcement — and
- *  "cannot be detected here" is the stronger claim it does NOT license.
+export const TTL_RECONCILE_CANARY_KEY = "_cotal_ttl_reconcile";
+const TTL_RECONCILE_POLL_MS = 100;
+const TTL_RECONCILE_GRACE_MS = 2_000;
+/** The server accepted and reported a TTL update, but its backing store did not enforce it. */
+export class TtlPersistenceError extends Error {
+    stream;
+    ttlMs;
+    canarySubject;
+    constructor(stream, ttlMs, canarySubject) {
+        super(`TTL reconcile persistence failed for ${stream}: the server accepted max_age=${ttlMs}ms, ` +
+            "but the backing store did not persist or enforce it (the enforcement canary remained past max_age plus grace)");
+        this.stream = stream;
+        this.ttlMs = ttlMs;
+        this.canarySubject = canarySubject;
+        this.name = "TtlPersistenceError";
+    }
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function ttlCanaryCount(jsm, streamName, canarySubject) {
+    const info = await jsm.streams.info(streamName, { subjects_filter: canarySubject });
+    return info.state.subjects?.[canarySubject] ?? 0;
+}
+async function awaitTtlCanaryExpiry(jsm, streamName, canarySubject, ttlMs) {
+    const deadline = Date.now() + ttlMs + TTL_RECONCILE_GRACE_MS;
+    while (Date.now() <= deadline) {
+        if (await ttlCanaryCount(jsm, streamName, canarySubject) === 0)
+            return;
+        await sleep(Math.min(TTL_RECONCILE_POLL_MS, Math.max(1, deadline - Date.now())));
+    }
+    throw new TtlPersistenceError(streamName, ttlMs, canarySubject);
+}
+/** #286/#404: reconcile a TTL'd KV bucket and prove the backing store enforces the result.
  *
- *  CONSEQUENCE OF READING FIRST, which follows from the same split and is worth naming because the
- *  skip is deliberate: once `STREAM.INFO` reports the intended `max_age`, later reconciles see no
- *  drift and issue no update, so a bucket left unenforced by a metadata-write fault is not retried
- *  for as long as that server process lives.
+ * `STREAM.INFO` alone is not evidence. nats-server updates the stream's in-memory config before asking
+ * the backing store to persist it, ignores the store's `UpdateConfig` error, and serves INFO from the
+ * in-memory copy. A file-store metadata fault can therefore report UPDATE success and the requested
+ * `max_age` while the store rolls back and never starts age enforcement.
  *
- *  WHERE THAT GOES depends on WHEN the write failed, and an earlier version of this comment got it
- *  wrong by generalising from one case. `writeStreamMeta` performs TWO writes — `meta.inf`, then
- *  `meta.sum` — and `UpdateConfig` rolls `fs.cfg` back if either fails:
- *    - **Failure BEFORE the first write commits** (the original EACCES reproduction): persisted state
- *      is coherent and old, so a restart makes `INFO` report the old value again and the next
- *      reconcile repairs it. Here the skip DEFERS a repair.
- *    - **Failure BETWEEN the two** (reproduced live by pointing `meta.sum.tmp` at `/dev/full`):
- *      `meta.inf` commits NEW while `meta.sum` stays OLD — a torn pair. On restart the server logs
- *      `checksums do not match` and recovery `continue`s past the stream, so it is SKIPPED: `INFO`
- *      returns **stream not found**, and the reconcile cannot repair it because its own first `INFO`
- *      gets not-found. **That case does not defer a repair, it loses the stream until an operator
- *      intervenes.**
- *  So "the persisted metadata is ground truth, restart repairs it" is TRUE ONLY of the
- *  before-first-atomic case, and "defers, never loses" is false in general. The read-first skip is
- *  still right — it keeps a healthy repeat `cotal up` to reads and no writes — but its worst case is
- *  worse than a deferred repair. Both branches reproduced live against 2.12.1 during review; see the
- *  tracking issue. */
-export async function reconcileBucketTtl(jsm, streamName, ttlMs) {
+ * Before an update, this writes a durable marker on a reserved KV subject so an interrupted or false-green
+ * attempt cannot disappear behind a later matching INFO read. After the update, it writes the enforcement
+ * canary on that same subject and waits for subject-filtered stream state to report it gone within
+ * `max_age` plus fixed grace. The post-update write is the timed proof even when the prior TTL was shorter
+ * and expired the marker during the update. A clean matching bucket has no canary and stays a fast read-only
+ * no-op. The transition is proof of enforcement rather than config: the false-green store leaves the canary
+ * present and causes a named {@link TtlPersistenceError}, which `cotal up` surfaces. Successful canaries
+ * self-delete through the policy they verify. */
+export async function reconcileBucketTtl(jsm, js, streamName, bucket, ttlMs) {
     const wantNs = nanos(ttlMs);
+    const canarySubject = `$KV.${bucket}.${TTL_RECONCILE_CANARY_KEY}`;
     const info = await jsm.streams.info(streamName);
-    if (info.config.max_age === wantNs)
-        return undefined; // already at the intended TTL — no update
+    // A prior attempt may have left its durable canary behind. Reissue the desired config in case the
+    // store recovered, then prove it. Never accept the matching in-memory config on its own.
+    if (info.config.max_age === wantNs) {
+        if (await ttlCanaryCount(jsm, streamName, canarySubject) === 0)
+            return undefined;
+        const dupNs = Math.min(info.config.duplicate_window ?? wantNs, wantNs);
+        await jsm.streams.update(streamName, { max_age: wantNs, duplicate_window: dupNs });
+        await js.publish(canarySubject, new TextEncoder().encode("cotal ttl enforcement canary"));
+        await awaitTtlCanaryExpiry(jsm, streamName, canarySubject, ttlMs);
+        return undefined;
+    }
     const fromNs = info.config.max_age;
     const dupNs = Math.min(info.config.duplicate_window ?? wantNs, wantNs); // NATS constraint: duplicate_window <= max_age
+    await js.publish(canarySubject, new TextEncoder().encode("cotal ttl enforcement canary"));
     await jsm.streams.update(streamName, { max_age: wantNs, duplicate_window: dupNs });
     const after = await jsm.streams.info(streamName);
     if (after.config.max_age !== wantNs)
@@ -336,6 +318,8 @@ export async function reconcileBucketTtl(jsm, streamName, ttlMs) {
     // written to remove. (Semantics confirmed at the NATS source rather than reasoned from our seam.)
     if ((after.config.duplicate_window ?? 0) > wantNs)
         throw new Error(`TTL reconcile left ${streamName} inconsistent: duplicate_window is ${after.config.duplicate_window}ns, which exceeds max_age ${wantNs}ns (a conforming server rejects this combination, so the update was applied partially)`);
+    await js.publish(canarySubject, new TextEncoder().encode("cotal ttl enforcement canary"));
+    await awaitTtlCanaryExpiry(jsm, streamName, canarySubject, ttlMs);
     return { stream: streamName, fromMs: fromNs / 1e6, toMs: wantNs / 1e6 };
 }
 /** The TTL'd buckets and their intended `max_age`, in ONE place — and the ONLY place any of them is
@@ -380,13 +364,9 @@ export async function reconcileSpaceTtls(opts) {
     const nc = await connect({ servers: opts.servers, ...standaloneConnectOpts({ creds: opts.creds, tls: false }) });
     try {
         const jsm = await jetstreamManager(nc);
-        const changed = [];
-        for (const [bucket, ttl] of ttlBuckets(opts.space)) {
-            const done = await reconcileBucketTtl(jsm, `KV_${bucket}`, ttl);
-            if (done)
-                changed.push(done);
-        }
-        return changed;
+        const js = jetstream(nc);
+        const reconciled = await Promise.all(ttlBuckets(opts.space).map(([bucket, ttl]) => reconcileBucketTtl(jsm, js, `KV_${bucket}`, bucket, ttl)));
+        return reconciled.filter((done) => done !== undefined);
     }
     finally {
         await nc.drain();
@@ -515,8 +495,8 @@ export async function setupSpaceStreams(opts) {
         // stale leases. Reconcile the three TTL'd buckets' `max_age` here (STREAM.UPDATE), idempotently.
         // Same list as `reconcileSpaceTtls`, from one source: two copies would let a fourth TTL'd bucket
         // be added to the create path and silently miss the upgrade path, which is this defect exactly.
-        for (const [bucket, ttl] of ttlBuckets(opts.space))
-            await reconcileBucketTtl(jsm, `KV_${bucket}`, ttl);
+        const js = jetstream(nc);
+        await Promise.all(ttlBuckets(opts.space).map(([bucket, ttl]) => reconcileBucketTtl(jsm, js, `KV_${bucket}`, bucket, ttl)));
         // Artifact Object Store (SPEC section 5): the bytes an `artifact` reference part points at.
         // Create-or-VERIFY, drift fails loud - see ensureArtifactStore for why create alone is not enough.
         await ensureArtifactStore(nc, opts.space);

package/dist/streams.js.map

@@ -1 +1 @@
-{"version":3,"file":"streams.js","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAuB,MAAM,yBAAyB,CAAC;AACtH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EACL,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,aAAa,EACb,aAAa,EACb,SAAS,EACT,YAAY,EACZ,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAE5B,+FAA+F;AAC/F,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;4FAE4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;;;;;;0GAS0G;AAC1G,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE;oFACoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;;mHAKmH;AACnH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAEnC;;;yEAGyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;uDAoBuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,GAAG,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAE9C;;;8GAG8G;AAC9G,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;;;;;;;;;qEAWqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAkC/D;;;;;;;;;gGASgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,2FAA2F;IAC3F,iGAAiG;IACjG,EAAE;IACF,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,6FAA6F;IAC7F,iGAAiG;IACjG,YAAY;IACZ,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS;QACzB,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC7F,yFAAyF;YACzF,sFAAsF,CACvF,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa;YACrB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,UAAU,KAAK,EAAE;YAC9B,aAAa,EAAE,CAAC,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClH,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK;QACf,CAAC,CAAC;YACE,aAAa,EAAE,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,WAAW,EAAE,UAAU,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAChD,GAAG,MAAM;SACV;QACH,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAqB,EACrB,KAAa;IAEb,KAAK,MAAM,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChH,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,KAAa,EACb,KAAa,EACb,YAAoB,EACpB,OAA0F,EAAE;IAE5F,6FAA6F;IAC7F,iGAAiG;IACjG,mGAAmG;IACnG,6FAA6F;IAC7F,6FAA6F;IAC7F,mGAAmG;IACnG,yFAAyF;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,0EAA0E,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChH,MAAM,GAAG,GAA4B;QACnC,YAAY,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC;QACnD,cAAc,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,0CAA0C;QAClG,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,GAAG,CAAC,QAAQ,GAAG,CAAC;YACd,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,GAAG,CAAC,EAAE;YAC9E,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC;KAC3C,CAAC;IACF,IAAI,IAAI,CAAC,mBAAmB;QAAE,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,IAAY,EACZ,OAA+B,EAAE;IAEjC,OAAO;QACL,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC;QAC/B,cAAc,EAAE,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,2CAA2C;QAC5F,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,wCAAwC;AAExC;;;;uDAIuD;AACvD,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,OAAgE,EAAE;IAElE,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACpD,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW;QAChD,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;QACjC,eAAe,EAAE,sBAAsB;KACxC,CAAC;AACJ,CAAC;AAED;;;;kBAIkB;AAClB,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,KAAa,EACb,KAAa,EACb,YAAoB,EACpB,OAA6D,EAAE;IAE/D,MAAM,GAAG,GAA4B;QACnC,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC;QACpD,wFAAwF;QACxF,8FAA8F;QAC9F,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC;QAC7D,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,mBAAmB;QAAE,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;yGAEyG;AACzG,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,OAAgE,EAAE;IAElE,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACpD,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC;QACnC,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;KAClC,CAAC;AACJ,CAAC;AAED;8DAC8D;AAC9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA0EsB;AACtB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAqB,EAAE,UAAkB,EAAE,KAAa;IAC/F,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,CAAC,0CAA0C;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,+CAA+C;IACvH,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM;QACjC,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,gBAAgB,KAAK,CAAC,MAAM,CAAC,OAAO,gBAAgB,MAAM,qCAAqC,CAAC,CAAC;IACzJ,8FAA8F;IAC9F,iGAAiG;IACjG,+FAA+F;IAC/F,gGAAgG;IAChG,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,MAAM;QAC/C,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,sCAAsC,KAAK,CAAC,MAAM,CAAC,gBAAgB,6BAA6B,MAAM,wFAAwF,CAAC,CAAC;IAClP,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;oFAWoF;AACpF,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO;QACL,4FAA4F;QAC5F,8EAA8E;QAC9E,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;QACxC,gGAAgG;QAChG,0FAA0F;QAC1F,2DAA2D;QAC3D,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;QACrC,2FAA2F;QAC3F,8FAA8F;QAC9F,iGAAiG;QACjG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;KACpC,CAAC;AACb,CAAC;AAQD;;;;;;;;;;4FAU4F;AAC5F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAKxC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAkB,EAAE,KAAa;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACtF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,+FAA+F;IAC/F,iGAAiG;IACjG,8FAA8F;IAC9F,6FAA6F;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,MAAM,MAAM,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxG,+FAA+F;IAC/F,iGAAiG;IACjG,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,SAAS,KAAK,wBAAwB;QAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,cAAc,wBAAwB,EAAE,CAAC,CAAC;IACvF,mGAAmG;IACnG,6FAA6F;IAC7F,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAC/F,mGAAmG;IACnG,0EAA0E;IAC1E,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;IACjG,iGAAiG;IACjG,2CAA2C;IAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,mBAAmB,CAAC,CAAC;IAC3G,mGAAmG;IACnG,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,EAAE;IACF,iGAAiG;IACjG,0FAA0F;IAC1F,4DAA4D;IAC5D,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACtH,8FAA8F;IAC9F,iGAAiG;IACjG,mGAAmG;IACnG,6EAA6E;IAC7E,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,iEAAiE,CAAC,CAAC;IACpI,iGAAiG;IACjG,mGAAmG;IACnG,mGAAmG;IACnG,uFAAuF;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC5F,+FAA+F;IAC/F,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,6EAA6E;IAC7E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,MAAM,CAAC,oBAAoB,CAAC;QACpF,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAU;QAC3E,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,KAAK,mEAAmE,CAAC,CAAC;IACxH,IAAI,KAAK,CAAC,MAAM;QACd,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;YAC9F,uFAAuF,CACxF,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAChM,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,4FAA4F;QAC5F,4FAA4F;QAC5F,wFAAwF;QACxF,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,4FAA4F;QAC5F,iGAAiG;QACjG,6BAA6B;QAC7B,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,iGAAiG;QACjG,8FAA8F;QAC9F,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,2FAA2F;QAC3F,sGAAsG;QACtG,uGAAuG;QACvG,oDAAoD;QACpD,MAAM,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAChG,uFAAuF;QACvF,4FAA4F;QAC5F,6FAA6F;QAC7F,0FAA0F;QAC1F,oBAAoB;QACpB,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,mGAAmG;QACnG,kGAAkG;QAClG,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACvG,4FAA4F;QAC5F,mGAAmG;QACnG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAQvC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACtL,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;oFAKoF;AACpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAQlC;IACC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,0CAA0C,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACtL,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnE,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;QAC3F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;uGAauG;AACvG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAMtC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAC1I,gGAAgG;QAChG,qGAAqG;QACrG,oGAAoG;QACpG,+DAA+D;QAC/D,oBAAoB,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,IAAI,CAAC;QACH,gGAAgG;QAChG,sFAAsF;QACtF,6FAA6F;QAC7F,MAAM,CAAC,GAAG,0BAA0B,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACvG,MAAM,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACzG,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC7G,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;4DAE4D;AAC5D,KAAK,UAAU,wBAAwB,CAAC,GAAqB,EAAE,MAAc,EAAE,IAAY;IACzF,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uFAAuF;QACvF,gGAAgG;QAChG,kGAAkG;QAClG,gGAAgG;QAChG,IAAK,CAAuB,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAE,CAAW,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,CAAC;IACnH,CAAC;AACH,CAAC"}
+{"version":3,"file":"streams.js","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,aAAa,GAId,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAuB,MAAM,yBAAyB,CAAC;AACtH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EACL,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,aAAa,EACb,aAAa,EACb,SAAS,EACT,YAAY,EACZ,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAE5B,+FAA+F;AAC/F,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;4FAE4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;;;;;;0GAS0G;AAC1G,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE;oFACoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;;mHAKmH;AACnH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAEnC;;;yEAGyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;uDAoBuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,GAAG,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAE9C;;;8GAG8G;AAC9G,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;;;;;;;;;qEAWqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAkC/D;;;;;;;;;gGASgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,2FAA2F;IAC3F,iGAAiG;IACjG,EAAE;IACF,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,6FAA6F;IAC7F,iGAAiG;IACjG,YAAY;IACZ,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS;QACzB,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC7F,yFAAyF;YACzF,sFAAsF,CACvF,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa;YACrB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,UAAU,KAAK,EAAE;YAC9B,aAAa,EAAE,CAAC,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClH,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK;QACf,CAAC,CAAC;YACE,aAAa,EAAE,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,WAAW,EAAE,UAAU,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAChD,GAAG,MAAM;SACV;QACH,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAqB,EACrB,KAAa;IAEb,KAAK,MAAM,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAChH,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,KAAa,EACb,KAAa,EACb,YAAoB,EACpB,OAA0F,EAAE;IAE5F,6FAA6F;IAC7F,iGAAiG;IACjG,mGAAmG;IACnG,6FAA6F;IAC7F,6FAA6F;IAC7F,mGAAmG;IACnG,yFAAyF;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,0EAA0E,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChH,MAAM,GAAG,GAA4B;QACnC,YAAY,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC;QACnD,cAAc,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,0CAA0C;QAClG,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,GAAG,CAAC,QAAQ,GAAG,CAAC;YACd,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,GAAG,CAAC,EAAE;YAC9E,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC;KAC3C,CAAC;IACF,IAAI,IAAI,CAAC,mBAAmB;QAAE,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,IAAY,EACZ,OAA+B,EAAE;IAEjC,OAAO;QACL,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC;QAC/B,cAAc,EAAE,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,2CAA2C;QAC5F,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,wCAAwC;AAExC;;;;uDAIuD;AACvD,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,OAAgE,EAAE;IAElE,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACpD,cAAc,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW;QAChD,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;QACjC,eAAe,EAAE,sBAAsB;KACxC,CAAC;AACJ,CAAC;AAED;;;;kBAIkB;AAClB,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,KAAa,EACb,KAAa,EACb,YAAoB,EACpB,OAA6D,EAAE;IAE/D,MAAM,GAAG,GAA4B;QACnC,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC;QACpD,wFAAwF;QACxF,8FAA8F;QAC9F,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC;QAC7D,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,mBAAmB;QAAE,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;yGAEyG;AACzG,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,OAAgE,EAAE;IAElE,OAAO;QACL,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;QACpD,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC;QACnC,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;KAClC,CAAC;AACJ,CAAC;AAED;8DAC8D;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAC/D,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,+FAA+F;AAC/F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACvB;IAAyB;IAAwB;IAAtE,YAAqB,MAAc,EAAW,KAAa,EAAW,aAAqB;QACzF,KAAK,CACH,wCAAwC,MAAM,iCAAiC,KAAK,MAAM;YAC1F,+GAA+G,CAChH,CAAC;QAJiB,WAAM,GAAN,MAAM,CAAQ;QAAW,UAAK,GAAL,KAAK,CAAQ;QAAW,kBAAa,GAAb,aAAa,CAAQ;QAKzF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtF,KAAK,UAAU,cAAc,CAC3B,GAAqB,EACrB,UAAkB,EAClB,aAAqB;IAErB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,GAAqB,EACrB,UAAkB,EAClB,aAAqB,EACrB,KAAa;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,sBAAsB,CAAC;IAC7D,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO;QACvE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;iDAciD;AACjD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAqB,EACrB,EAAoC,EACpC,UAAkB,EAClB,MAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAO,MAAM,IAAI,wBAAwB,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,kGAAkG;IAClG,yFAAyF;IACzF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACnC,IAAI,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC1F,MAAM,oBAAoB,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,+CAA+C;IACvH,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM;QACjC,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,gBAAgB,KAAK,CAAC,MAAM,CAAC,OAAO,gBAAgB,MAAM,qCAAqC,CAAC,CAAC;IACzJ,8FAA8F;IAC9F,iGAAiG;IACjG,+FAA+F;IAC/F,gGAAgG;IAChG,+FAA+F;IAC/F,kGAAkG;IAClG,kGAAkG;IAClG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,MAAM;QAC/C,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,sCAAsC,KAAK,CAAC,MAAM,CAAC,gBAAgB,6BAA6B,MAAM,wFAAwF,CAAC,CAAC;IAClP,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAC1F,MAAM,oBAAoB,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;oFAWoF;AACpF,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO;QACL,4FAA4F;QAC5F,8EAA8E;QAC9E,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;QACxC,gGAAgG;QAChG,0FAA0F;QAC1F,2DAA2D;QAC3D,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;QACrC,2FAA2F;QAC3F,8FAA8F;QAC9F,iGAAiG;QACjG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;KACpC,CAAC;AACb,CAAC;AAQD;;;;;;;;;;4FAU4F;AAC5F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAKxC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CACxG,CAAC;QACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAyB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAkB,EAAE,KAAa;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACtF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,+FAA+F;IAC/F,iGAAiG;IACjG,8FAA8F;IAC9F,6FAA6F;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,MAAM,EAAE,MAAM,MAAM,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxG,+FAA+F;IAC/F,iGAAiG;IACjG,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,SAAS,KAAK,wBAAwB;QAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,cAAc,wBAAwB,EAAE,CAAC,CAAC;IACvF,mGAAmG;IACnG,6FAA6F;IAC7F,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAC/F,mGAAmG;IACnG,0EAA0E;IAC1E,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;IACjG,iGAAiG;IACjG,2CAA2C;IAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,mBAAmB,CAAC,CAAC;IAC3G,mGAAmG;IACnG,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,EAAE;IACF,iGAAiG;IACjG,0FAA0F;IAC1F,4DAA4D;IAC5D,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACtH,8FAA8F;IAC9F,iGAAiG;IACjG,mGAAmG;IACnG,6EAA6E;IAC7E,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,OAAO,iEAAiE,CAAC,CAAC;IACpI,iGAAiG;IACjG,mGAAmG;IACnG,mGAAmG;IACnG,uFAAuF;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC5F,+FAA+F;IAC/F,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,6EAA6E;IAC7E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAsB,EAAE,MAAM,CAAC,oBAAoB,CAAC;QACpF,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAU;QAC3E,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,KAAK,mEAAmE,CAAC,CAAC;IACxH,IAAI,KAAK,CAAC,MAAM;QACd,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;YAC9F,uFAAuF,CACxF,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAChM,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,4FAA4F;QAC5F,4FAA4F;QAC5F,wFAAwF;QACxF,4EAA4E;QAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,4FAA4F;QAC5F,iGAAiG;QACjG,6BAA6B;QAC7B,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAClG,iGAAiG;QACjG,8FAA8F;QAC9F,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,2FAA2F;QAC3F,sGAAsG;QACtG,uGAAuG;QACvG,oDAAoD;QACpD,MAAM,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAChG,uFAAuF;QACvF,4FAA4F;QAC5F,6FAA6F;QAC7F,0FAA0F;QAC1F,oBAAoB;QACpB,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,mGAAmG;QACnG,kGAAkG;QAClG,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CACxG,CAAC;QACF,4FAA4F;QAC5F,mGAAmG;QACnG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;kDACkD;AAClD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAQvC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACtL,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;oFAKoF;AACpF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAQlC;IACC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,0CAA0C,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACtL,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnE,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;QAC3F,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;uGAauG;AACvG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAMtC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,8EAA8E,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAC1I,gGAAgG;QAChG,qGAAqG;QACrG,oGAAoG;QACpG,+DAA+D;QAC/D,oBAAoB,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,IAAI,CAAC;QACH,gGAAgG;QAChG,sFAAsF;QACtF,6FAA6F;QAC7F,MAAM,CAAC,GAAG,0BAA0B,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACvG,MAAM,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACzG,MAAM,SAAS,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC7G,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;4DAE4D;AAC5D,KAAK,UAAU,wBAAwB,CAAC,GAAqB,EAAE,MAAc,EAAE,IAAY;IACzF,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uFAAuF;QACvF,gGAAgG;QAChG,kGAAkG;QAClG,gGAAgG;QAChG,IAAK,CAAuB,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAE,CAAW,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,CAAC;IACnH,CAAC;AACH,CAAC"}

package/dist/subjects.d.ts

@@ -318,7 +318,9 @@ export declare function controlServiceSubject(space: string, service: string, ow
 export declare const CONTROL_DELIVERY: "delivery";
 /** The delivery daemon's PRIVILEGED admin rail (the D5 rail-split): control-plane ops the daemon
  *  EXECUTES for the mesh's renewal/repair owner — credential reload (`reloadCreds`, the class-2
- *  standing-renewal adoption step) now; the live-eviction executor rides here next. Cred-enforced
+ *  standing-renewal adoption step); the store-identity challenge (`reloadStoreIdentity`,
+ *  so a two-root composition is refused before that remint, including a late-binding daemon); the live-eviction executor
+ *  rides here next. Cred-enforced
  *  caller set: only the manager's `supervisor` profile holds the request-publish grant (every agent
  *  cred is default-denied — nats-server is the boundary);
  *  the `delivery` cred holds the serve + bounded-reply side. */
@@ -501,6 +503,14 @@ export declare const MANAGER_LEASE_KEY = "lease";
 /** The per-logical-instance liveness key in {@link managerBucket}. `instanceId` is a single lifecycle-uid
  *  token (lowercase alnum, no dots/wildcards), so it is a safe trailing subject token under `lease.*`. */
 export declare function managerLeaseKey(instanceId: string): string;
+/** The per-SPACE daemon-credential renewal lease in {@link managerBucket} (#1634). Store identity
+ *  alone cannot pick one renewal owner: `sameSecretStoreIdentity` is pure equality, carrying no
+ *  holder and no tiebreak, so N managers sharing one store (a shared root, or one injected
+ *  coordinate on both) all satisfy it at once and all remint. Whoever holds this one key remints;
+ *  everyone else serves the space and skips it. Bucket TTL expires a crashed holder's key so a
+ *  survivor takes over. Deliberately OUTSIDE the `lease.*` subtree, which is per-instance liveness:
+ *  a manager's own-lease-only grant must not reach this one. */
+export declare const MANAGER_RENEWAL_LEASE_KEY = "renewal";
 /** Deterministic FNV-1a (32-bit) hash of `key` into `[0, n)` — stable across processes/restarts, so a
  *  shard assignment never moves under a running daemon. The Plane-3 partition seam (sharding):
  *  **N=1 is the only operating mode shipped** (`shards > 1` is hard-rejected at the daemon entrypoint)