@crvouga/mockingbird-service-otel 3.1.0 → 3.3.0

package/CHANGELOG.md

@@ -1,14 +1,26 @@
 # Changelog — @crvouga/mockingbird-service-otel
 
-## 3.1.0 (2026-10-08)
+## 3.3.0 (2026-10-11)
 
 ### Features
 
-- redesign emulator experience ([d6038c2](https://github.com/crvouga/mockingbird/commit/d6038c27eebbaa1751f02bc9305002a5b1304779))
+- resolve reported emulator coverage gaps ([6edc643](https://github.com/crvouga/mockingbird/commit/6edc6438444853a51aca27849c4c8c0449109ea0))
+
+### Fixes and improvements
 
-### Dependencies
+- make README examples pass consumer smoke ([9f5bf6a](https://github.com/crvouga/mockingbird/commit/9f5bf6a212fffb03b1f70fb67bce7fcb49f08c40))
+
+## 3.2.0 (2026-10-08)
+
+### Features
 
-- `@crvouga/mockingbird-service-sqlite`
+- match Emulate provider coverage ([16b65ce](https://github.com/crvouga/mockingbird/commit/16b65ce791fa216f28ec1521df636f57771d9c5e))
+
+## 3.1.0 (2026-10-08)
+
+### Features
+
+- redesign emulator experience ([d6038c2](https://github.com/crvouga/mockingbird/commit/d6038c27eebbaa1751f02bc9305002a5b1304779))
 
 ## 3.0.0 (2026-10-07)
 

package/README.md

@@ -30,6 +30,10 @@ any base64 `user:password` unless `--search-auth` is set.
 
 ```bash
 npx mockingbird-otel serve --port 8809 --ingest-token "$OTEL_AUTH_TOKEN"
+# a local collector that takes no credentials, with a browser exporter allowed in
+npx mockingbird-otel serve --ingest-auth none --cors-origins http://localhost:5173
+# a hosted OTLP gateway: Authorization: Basic base64(instanceId:token)
+npx mockingbird-otel serve --ingest-basic-auth "$OTLP_INSTANCE_ID:$OTLP_TOKEN"
 ```
 
 ```ts
@@ -80,10 +84,61 @@ const search = await call("/api/30rBqcDevOrg7Hn2KmQ4xW9sLtY/_search", {
 | `POST /v1/traces` | `ExportTraceServiceRequest`, `application/json` or `application/x-protobuf` (optionally `content-encoding: gzip`) → `200 {partialSuccess: {}}` (an empty protobuf response for protobuf requests). |
 | `POST /v1/logs` | `ExportLogsServiceRequest`, same encodings and answers. |
 | `POST /v1/metrics` | Accepted and counted (`GET /__admin/otlp-metrics`), never stored. |
+| `OPTIONS /v1/traces`, `/v1/logs`, `/v1/metrics` | A browser exporter's CORS preflight, answered when `cors.allowedOrigins` is set (see *Browser CORS*); otherwise `405`. |
 
-`Authorization: Bearer <token>` is required (401 without); with `--ingest-token` only that token
-is accepted. Undecodable payloads are 400, other content types 415. The optional `stream-name`
-header picks the stream (default `default`).
+Undecodable payloads are 400, other content types 415. Every receiver error is a
+`google.rpc.Status` (`{code, message}`) in the request's encoding: binary protobuf for an
+`application/x-protobuf` request, JSON otherwise. The optional `stream-name` header picks the
+stream (default `default`).
+
+**Collector auth.** The receiver authenticates exports the way the collector it stands in for
+does, so the exporter under test keeps its real headers. The mode is the `ingestAuth` setting
+(`createRuntime({settings})`, `PUT /__admin/settings` per namespace, or `--ingest-auth`):
+
+| `ingestAuth` | An export needs | Narrowed by |
+| --- | --- | --- |
+| `bearer` (default) | `Authorization: Bearer <token>`: any token, 401 without one. | `ingestTokens` / `--ingest-token`: only those tokens. |
+| `basic` | `Authorization: Basic base64(user:password)`, the header a hosted OTLP gateway takes (Grafana Cloud: `instanceId:token`): any credentials, 401 without them. | `ingestUsers: [{username, password}]` / `--ingest-basic-auth <user:password>`: only those. |
+| `none` | Nothing: a local collector. An `Authorization` header an exporter still sends is ignored. | — |
+
+A refused export is `401 {"code": 16, "message": "Unauthenticated"}`. A mode takes only its own
+scheme (a bearer token is a 401 in `basic` mode and the reverse), credentials are checked before
+the payload is parsed, and in every mode an accepted payload is parsed and stored the same way.
+Only the receiver changes: O2 search always wants Basic credentials.
+
+**Browser CORS.** Off by default: `OPTIONS /v1/*` is `405` and no response carries CORS headers.
+Set `cors` (same three places; `--cors-origins`, `--cors-headers`) to answer a browser exporter as
+the OpenTelemetry Collector's `cors:` block does:
+
+```ts
+import { createRuntime } from "@crvouga/mockingbird-service-otel"
+
+createRuntime({
+  settings: {
+    ingestAuth: "none",
+    cors: {
+      allowedOrigins: ["https://app.example.test", "https://*.preview.example.test"], // or "*"
+      allowedHeaders: ["authorization", "content-type", "traceparent", "tracestate"], // or "*"
+      allowedMethods: ["POST"], // default GET, POST, HEAD
+      exposedHeaders: [], // Access-Control-Expose-Headers on the export
+      maxAge: 600, // Access-Control-Max-Age, seconds
+    },
+  },
+})
+```
+
+A preflight (`OPTIONS` with `Origin` and `Access-Control-Request-Method`) is answered before
+authentication, always `204`. When the origin, the requested method and every name in
+`Access-Control-Request-Headers` are allowed it carries `Access-Control-Allow-Origin` (the
+origin, or `*`), `-Allow-Methods`, `-Allow-Headers` (both echoing the request),
+`-Allow-Credentials: true` and `-Max-Age`; otherwise it carries none of them, which is what
+fails it in the browser. The export's own response, errors included, carries
+`Access-Control-Allow-Origin`, `-Allow-Credentials` and `Vary: Origin` for an allowed origin.
+With `allowedHeaders` unset only `accept`, `content-type` and `x-requested-with` pass; once it
+is set the list is exact, so name `content-type` (an OTLP content type is never CORS-safelisted)
+and the propagation headers your exporter adds. A preflight has no credential to pick a
+namespace by: it reads the default namespace's settings unless the endpoint uses the
+`/__admin/ns/<name>` prefix (settings passed to `createRuntime` apply to every namespace).
 
 **Storage, as O2 stores it.** Every field name is lowercased and flattened (`clientUserId` →
 `clientuserid`, `http.status_code` → `http_status_code`, nested maps joined with `_`); resource
@@ -92,7 +147,8 @@ attributes get a `service_` prefix (`service_service_version`,
 dropped. Logs carry `_timestamp` (µs), `severity_text`, `severity_number`, `trace_id`, `span_id`
 and their attributes (`event`, …). Spans carry `operation_name`, `trace_id`, `span_id`,
 `reference_parent_span_id`, `span_kind`, `span_status` (`UNSET`/`OK`/`ERROR`), `start_time` /
-`end_time` (ns), `duration` (µs), `events` (JSON) and their attributes. **Log bodies are dropped**
+`end_time` (ns), `duration` (µs), `events` (JSON: each event's name, time and attributes) and
+their attributes, with ids exactly as exported. **Log bodies are dropped**
 unless `--keep-bodies` (a body can hold a prompt or PHI; truncation is not protection); the
 `body` column still exists in the schema so recipes that select it keep working.
 
@@ -133,18 +189,27 @@ expect. A query on a stream with no data answers empty hits.
 | `GET /__admin/spans?service=&name=&trace_id=&org=` | Stored span rows. |
 | `POST /__admin/wait` | `{kind: "log"\|"span", where: {event: "…", …}, count?: 1, timeoutMs?: 5000, org?}`: long-polls until `count` rows match (200 `{matched, count}`) or times out (408 with what matched). `where` keys may be spelt as emitted (`clientUserId`, `service.name`) or as stored. |
 | `GET /__admin/otlp-metrics` | `{requests, bytes, metrics}` for `/v1/metrics`. |
-| `PUT /__admin/settings` | `{ingestTokens?, searchUsers?: [{username, password}], organizations?: [{identifier, name}], routing?: {byEnvironment, default}, keepBodies?}` for the calling namespace. |
+| `GET /__admin/settings` | The calling namespace's settings. |
+| `PUT /__admin/settings` | `{ingestAuth?: "bearer"\|"basic"\|"none", ingestTokens?, ingestUsers?: [{username, password}], cors?: {allowedOrigins, allowedHeaders?, allowedMethods?, exposedHeaders?, maxAge?}, searchUsers?: [{username, password}], organizations?: [{identifier, name}], routing?: {byEnvironment, default}, keepBodies?}` for the calling namespace; only the keys sent change. |
+
+`/__admin/spans`, `/__admin/logs` and `/__admin/wait` are the export of what was ingested: one
+normalized row per span or log record, every attribute kept (see *Storage* above). The original
+OTLP request batches are not kept, and `GET /__admin/requests` records each export without its
+body.
 
 Fault presets (`POST /__admin/faults {"preset": "<name>", "count"?: n}`): `rate_limited` (429 +
 `retry-after: 1`), `bad_gateway` (502), `unavailable` (503), `gateway_timeout` (504) — all
 retried by the SDK — `server_error` (500) and `unauthorized` (401), which the SDK drops,
 `partial_success` (200 rejecting every item, JSON only) and `search_unavailable` (O2 search 503).
+They work in every auth mode and fault the export `POST` only, never a CORS preflight; their
+bodies are JSON whatever the request's encoding.
 
 ### Namespaces
 
 `x-mockingbird-namespace`, a `/__admin/ns/<name>` prefix on the endpoint and base URL, or by credential:
 `PUT /__admin/credentials {"credentials": {"<OTEL_AUTH_TOKEN>": "w1", "<O2 username>": "w1"}}`
-(map both so a worker's exports and searches meet).
+(map both so a worker's exports and searches meet). In `basic` mode the credential is the Basic
+username (the instance id); in `none` mode there is none, so use the header or the path prefix.
 
 ### Deliberately not modelled
 
@@ -155,6 +220,14 @@ retried by the SDK — `server_error` (500) and `unauthorized` (401), which the
 - O2 ingestion via `/api/{org}/{stream}/_json` or `/api/{org}/v1/logs`, dashboards, alerts and
   the UI; the collector's own batching, tail sampling and transform processors.
 - `partialSuccess` for protobuf requests (an empty success response is sent).
+- The original OTLP batches, and the span fields no row holds: links, trace state, flags, the
+  status message, the scope version and the dropped-item counts. `start_time` / `end_time` are
+  JSON numbers, so nanoseconds past 2^53 round (`_timestamp` and `duration`, in µs, are exact).
+- A hosted gateway's own surface: its `/otlp` path prefix (point the exporter at the emulator's
+  root, or set the per-signal endpoint), its token scopes and the wording of its 401. The 401 is
+  the OTLP `Status` above.
+- The Collector's CORS library also refuses a preflight whose `Access-Control-Request-Headers`
+  is not the lowercase, sorted list browsers send; here the names match in any order and case.
 - Log bodies by default (see `--keep-bodies`).
 
 ## API
@@ -162,12 +235,12 @@ retried by the SDK — `server_error` (500) and `unauthorized` (401), which the
 | Export | Kind | Description |
 | --- | --- | --- |
 | `OtelAPI` | class | The in-process emulator: `fetch(request)`, `reset()`, `logs()`, `spans()`, `state`. Options: `sqlite`, `now`, `namespace`, `settings`. |
-| `createRuntime` | function | The emulator with the full service contract (health, admin, wait, namespaces, credentials, presets). Options: `settings`, `clock`, `seed`, `adminKey`, `onLog`, `sqlite`. |
+| `createRuntime` | function | The emulator with the full service contract (health, admin, wait, namespaces, credentials, presets). Options: `settings` (`ingestAuth`, `ingestTokens`, `ingestUsers`, `cors`, `searchUsers`, `organizations`, `routing`, `keepBodies`), `clock`, `seed`, `adminKey`, `onLog`, `sqlite`. |
 | `OTEL_PRESETS` | object | Every named fault preset. |
 | `OTEL_NAMESPACE` | string | The service name, `"otel"`. |
-| `otelCredential` | function | The OTLP bearer token or the O2 Basic username (how credentials map to namespaces). |
+| `otelCredential` | function | The OTLP bearer token or the Basic username (how credentials map to namespaces). |
 | `adminRow` | function | A stored row as the admin routes show it (`_org`, `_stream` plus its columns). |
-| `DEFAULT_ORGANIZATIONS`, `DEFAULT_SETTINGS` | values | The seeded orgs and settings. |
+| `DEFAULT_ORGANIZATIONS`, `DEFAULT_SETTINGS`, `INGEST_AUTH_MODES` | values | The seeded orgs and settings (`ingestAuth: "bearer"`, CORS off), and the auth modes. |
 | `logRows`, `spanRows`, `formatKey` | functions | OTLP/JSON export → O2 rows, and O2's field-name normalisation. |
 | `decodeLogsRequest`, `decodeTraceRequest`, `ProtobufError` | functions, class | The protobuf decoder: OTLP protobuf → OTLP/JSON shape. |
 | `parseSql`, `execute`, `referencedColumns`, `SqlError` | functions, class | The SQL subset: parse, run over rows, list the columns a query reads. |

package/SUPPORT.md

@@ -2,15 +2,18 @@
 
 Generated from `openapi.yaml`; do not edit by hand.
 
-- operations in spec: **7**
-- supported by the emulator: **7**
-- parity enabled: **7**
+- operations in spec: **10**
+- supported by the emulator: **10**
+- parity enabled: **10**
 
 | operationId | route | emulator | parity | notes |
 | --- | --- | --- | --- | --- |
 | `ExportTraces` | `POST /v1/traces` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PreflightTraces` | `OPTIONS /v1/traces` | ✅ supported | ✅ |  |
 | `ExportLogs` | `POST /v1/logs` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PreflightLogs` | `OPTIONS /v1/logs` | ✅ supported | ✅ |  |
 | `ExportMetrics` | `POST /v1/metrics` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PreflightMetrics` | `OPTIONS /v1/metrics` | ✅ supported | ✅ |  |
 | `ListOrganizations` | `GET /api/organizations` | ✅ supported | ✅ |  |
 | `ListStreams` | `GET /api/{org}/streams` | ✅ supported | ✅ |  |
 | `GetStreamSchema` | `GET /api/{org}/streams/{stream}/schema` | ✅ supported | ✅ |  |

package/dist/{chunk-7SFIMWGE.js → chunk-JZ6IVZNV.js}

@@ -1,9 +1,10 @@
 import {
+  INGEST_AUTH_MODES,
   createClock,
   createRuntime,
   parseDuration,
   resolveAdminPrefix
-} from "./chunk-7CKPCSVD.js";
+} from "./chunk-T4AU5UCQ.js";
 
 // ../../adapters/node/dist/cli.js
 import { readFile as readFile2 } from "node:fs/promises";
@@ -163,7 +164,9 @@ var httpChild = async (target, entry, options) => {
     adminPrefix: resolveAdminPrefix(entry.adminPrefix),
     adminKey: entry.adminKey,
     seed: entry.seed,
-    onLog: options.onLog
+    onLog: options.onLog,
+    ...entry.fixtures !== void 0 ? { fixtures: entry.fixtures } : {},
+    ...entry.baseUrl !== void 0 ? { baseUrl: entry.baseUrl } : {}
   });
   const adminPrefix = resolveAdminPrefix(entry.adminPrefix);
   runtime.isolateNamespaces();
@@ -801,15 +804,40 @@ var createServer2 = async (options = {}) => {
   return { ...listening, runtime };
 };
 var text = (value) => typeof value === "string" ? value : void 0;
+var credentials = (auth) => {
+  const colon = auth.indexOf(":");
+  return colon < 0 ? { username: auth, password: "" } : { username: auth.slice(0, colon), password: auth.slice(colon + 1) };
+};
+var csv = (value) => (value ?? "").split(",").map((item) => item.trim()).filter((item) => item !== "");
 var serveTarget = {
   name: "otel",
   defaultPort: DEFAULT_PORT,
   options: {
+    "ingest-auth": {
+      type: "string",
+      value: "<bearer|basic|none>",
+      description: "What the OTLP receiver asks of an export: a bearer token, Basic credentials, or nothing (an unauthenticated collector); default bearer"
+    },
     "ingest-token": {
       type: "string",
       value: "<token>",
       description: "Only accept this OTLP bearer token (the app's OTEL_AUTH_TOKEN); default any"
     },
+    "ingest-basic-auth": {
+      type: "string",
+      value: "<user:password>",
+      description: "Only accept these OTLP Basic credentials (a hosted gateway's instanceId:token); implies --ingest-auth basic"
+    },
+    "cors-origins": {
+      type: "string",
+      value: "<origin,\u2026>",
+      description: "Origins a browser exporter may send from (https://app.example, https://*.example, or *); default no CORS"
+    },
+    "cors-headers": {
+      type: "string",
+      value: "<header,\u2026>",
+      description: "Request headers a preflight may name (or *); default accept, content-type, x-requested-with"
+    },
     "search-auth": {
       type: "string",
       value: "<user:password>",
@@ -823,15 +851,25 @@ var serveTarget = {
   create: (values, common) => {
     const token = text(values["ingest-token"]);
     const auth = text(values["search-auth"]);
-    const colon = auth?.indexOf(":") ?? -1;
+    const ingestBasic = text(values["ingest-basic-auth"]);
+    const ingestAuth = text(values["ingest-auth"]) ?? (ingestBasic ? "basic" : "bearer");
+    if (!INGEST_AUTH_MODES.includes(ingestAuth)) {
+      throw new Error(`--ingest-auth must be one of ${INGEST_AUTH_MODES.join(", ")}`);
+    }
+    const origins = csv(text(values["cors-origins"]));
+    const headers = csv(text(values["cors-headers"]));
     return createRuntime({
       settings: {
+        ingestAuth,
         ...token ? { ingestTokens: [token] } : {},
-        ...auth ? {
-          searchUsers: [
-            colon < 0 ? { username: auth, password: "" } : { username: auth.slice(0, colon), password: auth.slice(colon + 1) }
-          ]
+        ...ingestBasic ? { ingestUsers: [credentials(ingestBasic)] } : {},
+        ...origins.length > 0 ? {
+          cors: {
+            allowedOrigins: origins,
+            ...headers.length > 0 ? { allowedHeaders: headers } : {}
+          }
         } : {},
+        ...auth ? { searchUsers: [credentials(auth)] } : {},
         ...values["keep-bodies"] === true ? { keepBodies: true } : {}
       },
       ...common.adminPrefix !== void 0 ? { adminPrefix: common.adminPrefix } : {},
@@ -841,7 +879,7 @@ var serveTarget = {
     });
   },
   banner: () => [
-    "otlp: OTEL_EXPORTER_OTLP_ENDPOINT=<this> (POST /v1/traces, /v1/logs, /v1/metrics; JSON or protobuf), Authorization: Bearer <OTEL_AUTH_TOKEN>",
+    "otlp: OTEL_EXPORTER_OTLP_ENDPOINT=<this> (POST /v1/traces, /v1/logs, /v1/metrics; JSON or protobuf), Authorization: Bearer <OTEL_AUTH_TOKEN> (--ingest-auth basic|none for a Basic or unauthenticated collector)",
     "o2: O2_BASE_URL=<this>, Basic O2_BASIC_AUTH; orgs development=30rBqcDevOrg7Hn2KmQ4xW9sLtY production=3HSzeProdOrg5Jd8VpN1cR6gTfB",
     "admin: GET /__admin/logs?event=\u2026, POST /__admin/wait {kind, where, count, timeoutMs}"
   ]
@@ -854,4 +892,4 @@ export {
   createServer2 as createServer,
   serveTarget
 };
-//# sourceMappingURL=chunk-7SFIMWGE.js.map
+//# sourceMappingURL=chunk-JZ6IVZNV.js.map

package/dist/chunk-JZ6IVZNV.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../adapters/node/src/cli.ts", "../../../adapters/node/src/fleet.ts", "../../../adapters/node/src/serve.ts", "../../../adapters/node/src/listen.ts", "../src/server.ts"],
+  "sourcesContent": ["import type { EventEmitter } from \"node:events\"\nimport { readFile } from \"node:fs/promises\"\nimport { createRequire } from \"node:module\"\nimport { resolve } from \"node:path\"\nimport { pathToFileURL } from \"node:url\"\nimport { type ParseArgsConfig, parseArgs } from \"node:util\"\nimport type { RequestLog, ServiceInstance, ServiceRuntime } from \"@crvouga/mockingbird-service\"\nimport { resolveAdminPrefix } from \"@crvouga/mockingbird-service\"\nimport { type FleetTarget, startFleet } from \"./fleet.js\"\nimport { type Listening, listen } from \"./listen.js\"\n\nexport type CliOption = {\n  type: \"string\" | \"boolean\"\n  description: string\n  /** Shown in help; the value placeholder, e.g. `<port>`. */\n  value?: string\n  default?: string | boolean\n}\n\nexport type CliValues = Record<string, string | boolean | undefined>\n\nexport type CliCommand = {\n  summary: string\n  usage?: string\n  options?: Record<string, CliOption>\n  /** Resolves to an exit code; a server command resolves only when it stops. */\n  run(values: CliValues, positionals: string[]): Promise<number>\n}\n\nexport type CliSpec = {\n  bin: string\n  description: string\n  commands: Record<string, CliCommand>\n}\n\nconst optionHelp = (options: Record<string, CliOption>): string[] =>\n  Object.entries(options).map(([name, option]) => {\n    const flag = `--${name}${option.type === \"string\" ? ` ${option.value ?? \"<value>\"}` : \"\"}`\n    const fallback = option.default !== undefined ? ` (default: ${String(option.default)})` : \"\"\n    return `  ${flag.padEnd(30)} ${option.description}${fallback}`\n  })\n\nconst help = (spec: CliSpec): string =>\n  [\n    `${spec.bin} \u2014 ${spec.description}`,\n    \"\",\n    \"Usage:\",\n    `  ${spec.bin} <command> [options]`,\n    \"\",\n    \"Commands:\",\n    ...Object.entries(spec.commands).map(([name, c]) => `  ${name.padEnd(30)} ${c.summary}`),\n    \"\",\n    `Run \\`${spec.bin} <command> --help\\` for a command's options.`,\n  ].join(\"\\n\")\n\nconst commandHelp = (spec: CliSpec, name: string, command: CliCommand): string =>\n  [\n    `${spec.bin} ${name} \u2014 ${command.summary}`,\n    \"\",\n    \"Usage:\",\n    `  ${command.usage ?? `${spec.bin} ${name} [options]`}`,\n    ...(command.options ? [\"\", \"Options:\", ...optionHelp(command.options)] : []),\n  ].join(\"\\n\")\n\n/** Parse `argv` against `spec` and run the chosen command. Resolves to an exit code. */\nexport const runCli = async (spec: CliSpec, argv: string[]): Promise<number> => {\n  // Two-word commands (`corpus pull`) win over one-word ones.\n  const pair = argv.length >= 2 ? `${argv[0]} ${argv[1]}` : undefined\n  const words = pair !== undefined && spec.commands[pair] ? 2 : 1\n  const name = words === 2 ? pair : argv[0]\n  const rest = argv.slice(words)\n  if (name === undefined || name === \"--help\" || name === \"-h\" || name === \"help\") {\n    console.log(help(spec))\n    return 0\n  }\n  const command = spec.commands[name]\n  if (!command) {\n    console.error(`${spec.bin}: unknown command ${JSON.stringify(name)}\\n\\n${help(spec)}`)\n    return 2\n  }\n  if (rest.includes(\"--help\") || rest.includes(\"-h\")) {\n    console.log(commandHelp(spec, name, command))\n    return 0\n  }\n  let parsed: { values: CliValues; positionals: string[] }\n  try {\n    parsed = parseArgs({\n      args: rest,\n      allowPositionals: true,\n      strict: true,\n      options: Object.fromEntries(\n        Object.entries(command.options ?? {}).map(([key, option]) => [\n          key,\n          {\n            type: option.type,\n            ...(option.default !== undefined ? { default: option.default } : {}),\n          },\n        ]),\n      ) as ParseArgsConfig[\"options\"],\n    }) as { values: CliValues; positionals: string[] }\n  } catch (error) {\n    console.error(\n      `${spec.bin} ${name}: ${error instanceof Error ? error.message : String(error)}\\n\\n${commandHelp(spec, name, command)}`,\n    )\n    return 2\n  }\n  return command.run(parsed.values, parsed.positionals)\n}\n\n// \u2500\u2500 serve \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport type LogFormat = \"pretty\" | \"json\" | \"off\"\n\nexport type CommonServeOptions = {\n  adminPrefix?: string\n  adminKey: string | undefined\n  seed: string | undefined\n  onLog: ((entry: RequestLog) => void) | undefined\n  /** Synthetic provider fixture objects supplied by a fleet entry. */\n  fixtures?: Record<string, unknown>\n  baseUrl?: string\n}\n\n/**\n * What a service contributes to `serve`: how to build its runtime from CLI flags,\n * and what to say at startup. Every service's `./server` entry exports one as\n * `serveTarget`, which is also how `serve --config` finds services by name.\n */\nexport type ServeTarget = {\n  name: string\n  defaultPort: number\n  /** Serve flags beyond the common ones. */\n  options?: Record<string, CliOption>\n  create(\n    values: CliValues,\n    common: CommonServeOptions,\n  ): Promise<ServiceRuntime<ServiceInstance>> | ServiceRuntime<ServiceInstance>\n  /** Startup lines after the listen address, e.g. the loaded corpus version. */\n  banner?(runtime: ServiceRuntime<ServiceInstance>): string[]\n  /** After the HTTP server is bound. A service that speaks more than HTTP attaches it here. */\n  listening?(server: Listening): void\n}\n\nconst COMMON_SERVE_OPTIONS: Record<string, CliOption> = {\n  port: { type: \"string\", value: \"<port>\", description: \"Port to listen on\" },\n  host: { type: \"string\", value: \"<host>\", description: \"Interface to bind\", default: \"127.0.0.1\" },\n  \"admin-prefix\": {\n    type: \"string\",\n    value: \"<path>\",\n    description: \"Internal API prefix (default /__admin; env MOCKINGBIRD_ADMIN_PREFIX)\",\n  },\n  \"admin-key\": {\n    type: \"string\",\n    value: \"<key>\",\n    description: \"Require x-mockingbird-admin-key on /__admin/* (env MOCKINGBIRD_ADMIN_KEY)\",\n  },\n  seed: { type: \"string\", value: \"<seed>\", description: \"Seed for every random choice\" },\n  log: {\n    type: \"string\",\n    value: \"<pretty|json|off>\",\n    description: \"Request log format\",\n    default: \"pretty\",\n  },\n  \"log-requests\": {\n    type: \"boolean\",\n    description:\n      \"One JSON line per request: namespace, operationId, status, ids touched (never bodies). Same as --log json\",\n  },\n  config: {\n    type: \"string\",\n    value: \"<file>\",\n    description: \"Serve every service in a mockingbird.json config instead\",\n  },\n  \"ready-file\": {\n    type: \"string\",\n    description: \"Atomically publish fleet endpoint JSON\",\n    value: \"<file>\",\n  },\n  \"connections-file\": {\n    type: \"string\",\n    description: \"Write private connection URLs with mode 0600\",\n    value: \"<file>\",\n  },\n  \"ready-json\": {\n    type: \"boolean\",\n    description: \"Emit one public JSON record after fleet readiness\",\n  },\n}\n\nconst formatLog = (format: LogFormat) => {\n  if (format === \"off\") return undefined\n  if (format === \"json\") return (entry: RequestLog) => console.log(JSON.stringify(entry))\n  return (entry: RequestLog) => {\n    const op = entry.operationId ?? (entry.unmatched ? \"UNMATCHED\" : \"-\")\n    const ns = entry.namespace === \"default\" ? \"\" : ` [${entry.namespace}]`\n    const fault = entry.faultId ? ` fault=${entry.faultId}` : \"\"\n    const adopted = entry.adopted ? \" adopted\" : \"\"\n    // A rejection says what arrived (never the body) and why the service refused it.\n    const received = entry.request\n      ? ` received=${entry.request.bodyBytes === null ? \"?\" : `${entry.request.bodyBytes}B`} ct=${entry.request.contentType ?? \"-\"}${\n          entry.request.transferEncoding ? ` te=${entry.request.transferEncoding}` : \"\"\n        }`\n      : \"\"\n    const issues = entry.issues?.length\n      ? ` issues=${entry.issues\n          .slice(0, 3)\n          .map((issue) => `${issue.path || \"$\"}: ${issue.message}`)\n          .join(\"; \")}${entry.issues.length > 3 ? ` (+${entry.issues.length - 3})` : \"\"}`\n      : \"\"\n    console.log(\n      `${entry.service} ${entry.method} ${entry.path} ${entry.status} ${op} ${entry.durationMs}ms${ns}${fault}${adopted}${received}${issues}`,\n    )\n  }\n}\n\nconst asString = (value: string | boolean | undefined): string | undefined =>\n  typeof value === \"string\" ? value : undefined\n\n/** A service entry in `mockingbird.json`. */\nexport type ConfigService = {\n  protocol?: \"http\" | \"postgres\" | \"redis\"\n  port?: number\n  host?: string\n  adminPrefix?: string\n  adminKey?: string\n  seed?: string\n  fixtures?: Record<string, unknown>\n  baseUrl?: string\n  password?: string\n  user?: string\n  database?: string\n  /** Protocol namespace selectors: database names for Postgres, logical DB indexes for Redis. */\n  namespaces?: Record<string, string | number>\n  /** Service-specific serve flags, by long name: `{ \"webhook-url\": \"\u2026\" }`. */\n  options?: Record<string, string | boolean>\n}\n\nexport type MockingbirdConfig = {\n  /** Keyed by service name: `junction` loads `@crvouga/mockingbird-service-junction`. */\n  services: Record<string, ConfigService>\n  log?: LogFormat\n  adminPrefix?: string\n  adminKey?: string\n  namespace?: string\n  control?: { host?: string; port?: number }\n}\n\nconst loadTarget = async (name: string, own: FleetTarget): Promise<FleetTarget> => {\n  if (name === own.name) return own\n  const specifier = `@crvouga/mockingbird-service-${name}/server`\n  try {\n    // A CLI run with npx may live outside the consumer project. Discover its locally\n    // installed services as well as siblings of the bundled CLI.\n    let mod: { serveTarget?: FleetTarget }\n    try {\n      mod = (await import(specifier)) as { serveTarget?: FleetTarget }\n    } catch {\n      const fromProject = createRequire(resolve(process.cwd(), \"package.json\"))\n      mod = (await import(pathToFileURL(fromProject.resolve(specifier)).href)) as {\n        serveTarget?: FleetTarget\n      }\n    }\n    if (!mod.serveTarget) throw new Error(`${specifier} exports no serveTarget`)\n    return mod.serveTarget\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error)\n    throw new Error(\n      `cannot load service \"${name}\": ${reason}. Install @crvouga/mockingbird-service-${name}.`,\n    )\n  }\n}\n\nconst start = async (\n  target: ServeTarget,\n  values: CliValues,\n  config: {\n    port: number\n    host: string\n    adminPrefix?: string\n    adminKey?: string\n    seed?: string\n    log: LogFormat\n  },\n): Promise<Listening> => {\n  const adminPrefix = resolveAdminPrefix(config.adminPrefix)\n  const runtime = await target.create(values, {\n    adminPrefix,\n    adminKey: config.adminKey,\n    seed: config.seed,\n    onLog: formatLog(config.log),\n  })\n  const listening = await listen(runtime, { port: config.port, host: config.host })\n  target.listening?.(listening)\n  console.log(`${target.name} emulator listening on ${listening.url}`)\n  console.log(`${target.name} health: GET ${listening.url}${adminPrefix}/health`)\n  console.log(\n    `${target.name} admin: ${listening.url}${adminPrefix} (${config.adminKey ? \"x-mockingbird-admin-key required\" : \"open \u2014 pass --admin-key to lock\"})`,\n  )\n  console.log(`${target.name} admin ui: ${listening.url}${adminPrefix}/ui`)\n  for (const line of target.banner?.(runtime) ?? [])\n    console.log(`${target.name} ${line.replaceAll(\"/__admin\", adminPrefix)}`)\n  return listening\n}\n\nconst untilSignal = async (servers: { close(): Promise<void> }[]): Promise<number> =>\n  new Promise((resolve) => {\n    const stop = async () => {\n      ;(process as EventEmitter).removeListener(\"SIGINT\", stop)\n      ;(process as EventEmitter).removeListener(\"SIGTERM\", stop)\n      await Promise.allSettled(servers.map((s) => s.close()))\n      resolve(0)\n    }\n    process.once(\"SIGINT\", stop)\n    process.once(\"SIGTERM\", stop)\n  })\n\n/** The standard `serve` command for a service, including multi-service `--config`. */\nexport const serveCommand = (target: FleetTarget): CliCommand => ({\n  summary: `Serve the ${target.name} emulator or a configured fleet`,\n  options: { ...COMMON_SERVE_OPTIONS, ...(\"options\" in target ? target.options : {}) },\n  async run(values) {\n    const log = (\n      values[\"log-requests\"] === true ? \"json\" : (asString(values.log) ?? \"pretty\")\n    ) as LogFormat\n    if (![\"pretty\", \"json\", \"off\"].includes(log)) {\n      console.error(`--log must be pretty, json or off (got ${log})`)\n      return 2\n    }\n    const configPath = asString(values.config)\n    if (configPath !== undefined) {\n      try {\n        const config = JSON.parse(await readFile(configPath, \"utf8\")) as MockingbirdConfig\n        config.adminPrefix = resolveAdminPrefix(\n          config.adminPrefix ??\n            asString(values[\"admin-prefix\"]) ??\n            process.env.MOCKINGBIRD_ADMIN_PREFIX,\n        )\n        const adminKey =\n          config.adminKey ?? asString(values[\"admin-key\"]) ?? process.env.MOCKINGBIRD_ADMIN_KEY\n        if (adminKey !== undefined) config.adminKey = adminKey\n        const fleet = await startFleet(config, {\n          load: (name) => loadTarget(name, target),\n          onLog: formatLog(config.log ?? log),\n          ...(asString(values[\"ready-file\"]) ? { readyFile: asString(values[\"ready-file\"]) } : {}),\n          ...(asString(values[\"connections-file\"])\n            ? { connectionsFile: asString(values[\"connections-file\"]) }\n            : {}),\n          onReady: (manifest) => {\n            if (values[\"ready-json\"]) console.log(JSON.stringify(manifest))\n            else\n              for (const [name, endpoint] of Object.entries(manifest.services))\n                console.log(`${name} emulator listening on ${endpoint.url}`)\n          },\n        })\n        return untilSignal([fleet])\n      } catch (error) {\n        console.error(error instanceof Error ? error.message : String(error))\n        return 1\n      }\n    }\n    if (\"start\" in target) {\n      console.error(\"Use --config to supervise protocol services with this command\")\n      return 2\n    }\n    const port = asString(values.port)\n    const adminKey = asString(values[\"admin-key\"]) ?? process.env.MOCKINGBIRD_ADMIN_KEY\n    const seed = asString(values.seed)\n    let listening: Listening\n    try {\n      listening = await start(target, values, {\n        adminPrefix: resolveAdminPrefix(\n          asString(values[\"admin-prefix\"]) ?? process.env.MOCKINGBIRD_ADMIN_PREFIX,\n        ),\n        port: port === undefined ? target.defaultPort : Number.parseInt(port, 10),\n        host: asString(values.host) ?? \"127.0.0.1\",\n        ...(adminKey !== undefined ? { adminKey } : {}),\n        ...(seed !== undefined ? { seed } : {}),\n        log,\n      })\n    } catch (error) {\n      console.error(error instanceof Error ? error.message : String(error))\n      return 1\n    }\n    return untilSignal([listening])\n  },\n})\n", "import { randomUUID } from \"node:crypto\"\nimport { chmod, readFile, rename, rm, writeFile } from \"node:fs/promises\"\nimport type { FetchAPI } from \"@crvouga/mockingbird-core\"\nimport type { Clock, ServiceInstance, ServiceRuntime } from \"@crvouga/mockingbird-service\"\nimport { createClock, parseDuration, resolveAdminPrefix } from \"@crvouga/mockingbird-service\"\nimport type { CommonServeOptions, ConfigService, MockingbirdConfig, ServeTarget } from \"./cli.js\"\nimport type { EndpointManifest } from \"./fleet-manifest.js\"\nimport { type Listening, listen } from \"./listen.js\"\n\nexport type { EndpointManifest } from \"./fleet-manifest.js\"\n\nexport type FleetDiagnostics = {\n  activeRequests: number\n  activeConnections: number\n  blockedCommands: number\n  pendingJobs: number\n  activeJobs?: number\n  pendingWebhooks: number\n  unmatchedRequests: number\n}\n\n/** Protocol packages own their state, listeners, credentials and namespace selection. */\nexport type FleetChild = {\n  protocol: \"http\" | \"postgres\" | \"redis\"\n  url: string\n  connection?: string\n  connections?: Record<string, string>\n  healthUrl?: string\n  adminUrl?: string\n  namespaces: Record<string, unknown>\n  ready(): Promise<boolean>\n  close(): Promise<void>\n  /** Fence new work synchronously; diagnostics must also account for work already in flight. */\n  lock(namespace: string): () => void\n  diagnostics(namespace: string): FleetDiagnostics\n  checkpoint(namespace: string): Promise<unknown>\n  restore(namespace: string, checkpoint: unknown): Promise<void>\n  reset(namespace: string): Promise<void>\n  clock(namespace: string): Clock\n  settle?(namespace: string): Promise<void>\n}\n\nexport type ProtocolTarget = {\n  name: string\n  protocol: \"postgres\" | \"redis\"\n  defaultPort: number\n  start(entry: ConfigService): Promise<FleetChild>\n}\nexport type FleetTarget = ServeTarget | ProtocolTarget\n\nexport type FleetOptions = {\n  load(name: string): Promise<FleetTarget>\n  onLog?: CommonServeOptions[\"onLog\"]\n  readyFile?: string | undefined\n  connectionsFile?: string | undefined\n  onReady?(manifest: EndpointManifest): void\n}\n\nconst EMPTY: FleetDiagnostics = {\n  activeRequests: 0,\n  activeConnections: 0,\n  blockedCommands: 0,\n  pendingJobs: 0,\n  pendingWebhooks: 0,\n  unmatchedRequests: 0,\n}\nconst NS = /^[A-Za-z0-9_.-]{1,64}$/\nconst json = (status: number, value: unknown) => Response.json(value, { status })\nconst isObject = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value)\nconst pending = (d: FleetDiagnostics) =>\n  d.activeRequests + d.blockedCommands + d.pendingJobs + d.pendingWebhooks\n\nconst publicUrl = (raw: string): string => {\n  const url = new URL(raw)\n  url.password = \"\"\n  return url.href\n}\n\n/** Atomic publication; credentials only go in an explicitly requested 0600 file. */\nconst atomicWrite = async (path: string, value: unknown) => {\n  const temp = `${path}.${randomUUID()}.tmp`\n  try {\n    await writeFile(temp, `${JSON.stringify(value, null, 2)}\\n`, { mode: 0o600, flag: \"wx\" })\n    await chmod(temp, 0o600)\n    await rename(temp, path)\n  } finally {\n    await rm(temp, { force: true })\n  }\n}\n\nconst removeOwned = async (path: string | undefined, id: string) => {\n  if (!path) return\n  try {\n    const value: unknown = JSON.parse(await readFile(path, \"utf8\"))\n    if (isObject(value) && value.id === id) await rm(path, { force: true })\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error\n  }\n}\n\nconst httpChild = async (\n  target: ServeTarget,\n  entry: ConfigService,\n  options: FleetOptions,\n): Promise<FleetChild> => {\n  const runtime: ServiceRuntime<ServiceInstance> = await target.create(entry.options ?? {}, {\n    adminPrefix: resolveAdminPrefix(entry.adminPrefix),\n    adminKey: entry.adminKey,\n    seed: entry.seed,\n    onLog: options.onLog,\n    ...(entry.fixtures !== undefined ? { fixtures: entry.fixtures } : {}),\n    ...(entry.baseUrl !== undefined ? { baseUrl: entry.baseUrl } : {}),\n  })\n  const adminPrefix = resolveAdminPrefix(entry.adminPrefix)\n  runtime.isolateNamespaces()\n  const locked = new Set<string>()\n  const active = new Map<string, number>()\n  const api: FetchAPI = {\n    async fetch(request) {\n      const namespace = runtime.namespaceOf(request)\n      if (locked.has(namespace)) return json(409, { error: \"fleet control in progress\", namespace })\n      active.set(namespace, (active.get(namespace) ?? 0) + 1)\n      try {\n        return await runtime.fetch(request)\n      } finally {\n        active.set(namespace, (active.get(namespace) ?? 1) - 1)\n      }\n    },\n  }\n  let server: Listening | undefined\n  try {\n    server = await listen(api, {\n      port: entry.port ?? target.defaultPort,\n      host: entry.host ?? \"127.0.0.1\",\n    })\n    target.listening?.(server)\n  } catch (error) {\n    runtime.stop?.()\n    await server?.close()\n    runtime.webhooks?.clear()\n    await runtime.webhooks?.idle()\n    throw error\n  }\n  return {\n    protocol: \"http\",\n    url: server.url,\n    healthUrl: `${server.url}${adminPrefix}/health`,\n    adminUrl: `${server.url}${adminPrefix}`,\n    namespaces: { header: \"x-mockingbird-namespace\", path: `${adminPrefix}/ns/{name}` },\n    ready: async () => {\n      try {\n        return (\n          await fetch(`${server.url}${adminPrefix}/health`, { signal: AbortSignal.timeout(2000) })\n        ).ok\n      } catch {\n        return false\n      }\n    },\n    async close() {\n      runtime.stop?.()\n      runtime.webhooks?.clear()\n      await server.close()\n      await runtime.webhooks?.idle()\n    },\n    lock(namespace) {\n      if (locked.has(namespace)) throw new Error(\"namespace already locked\")\n      locked.add(namespace)\n      return () => locked.delete(namespace)\n    },\n    diagnostics(namespace) {\n      return {\n        ...EMPTY,\n        activeRequests: active.get(namespace) ?? 0,\n        pendingWebhooks: runtime.webhooks?.pending(namespace) ?? 0,\n        unmatchedRequests: runtime.metrics\n          .report(namespace)\n          .unmatched.reduce((n, r) => n + r.count, 0),\n      }\n    },\n    async checkpoint(namespace) {\n      return runtime.fleetSnapshot(namespace)\n    },\n    async restore(namespace, checkpoint) {\n      runtime.fleetRestore(checkpoint, namespace)\n    },\n    reset: (namespace) => runtime.reset(namespace),\n    clock: (namespace) => runtime.namespaceClock(namespace),\n    async settle(namespace) {\n      const instance = runtime.instance(namespace) as ServiceInstance & { tick?(): unknown }\n      instance.tick?.()\n      await runtime.webhooks?.idle()\n    },\n  }\n}\n\nexport type Fleet = {\n  readonly manifest: EndpointManifest\n  readonly children: ReadonlyMap<string, FleetChild>\n  fetch(request: Request): Promise<Response>\n  close(): Promise<void>\n}\n\n/** Resolves only after every child and the aggregate control listener are healthy. */\nexport async function startFleet(config: MockingbirdConfig, options: FleetOptions): Promise<Fleet> {\n  const id = randomUUID()\n  const startedAt = new Date().toISOString()\n  const children = new Map<string, FleetChild>()\n  const clocks = new Map<string, Clock>()\n  const checkpoints = new Map<\n    string,\n    { namespace: string; values: Map<string, unknown>; clock: ReturnType<Clock[\"state\"]> }\n  >()\n  let supervisor: Listening | undefined\n  let stopped = false\n  let controlling = false\n  const close = async () => {\n    if (stopped) return\n    stopped = true\n    await Promise.allSettled([...children.values()].map((child) => child.close()))\n    await supervisor?.close()\n    await removeOwned(options.readyFile, id)\n    await removeOwned(options.connectionsFile, id)\n  }\n  // Invalidate a previous process's artifacts before attempting startup.\n  if (options.readyFile) await rm(options.readyFile, { force: true })\n  if (options.connectionsFile) await rm(options.connectionsFile, { force: true })\n\n  const clock = (namespace: string) => {\n    let value = clocks.get(namespace)\n    if (!value) {\n      value = createClock()\n      clocks.set(namespace, value)\n    }\n    return value\n  }\n  const select = (body: Record<string, unknown>): Map<string, FleetChild> => {\n    if (body.services === undefined) return children\n    if (!Array.isArray(body.services) || body.services.length === 0)\n      throw new Error(\"services must be a nonempty list\")\n    const selected = new Map<string, FleetChild>()\n    for (const name of body.services) {\n      if (typeof name !== \"string\" || !children.has(name))\n        throw new Error(\"unknown service in selection\")\n      selected.set(name, children.get(name) as FleetChild)\n    }\n    return selected\n  }\n  const diagnostics = (namespace: string) =>\n    Object.fromEntries([...children].map(([name, child]) => [name, child.diagnostics(namespace)]))\n  const transaction = async (\n    namespace: string,\n    selected: Map<string, FleetChild>,\n    run: (name: string, child: FleetChild) => Promise<unknown>,\n  ): Promise<Response> => {\n    if (controlling) return json(409, { error: \"another fleet operation is in progress\" })\n    controlling = true\n    const release: (() => void)[] = []\n    const before = new Map<string, unknown>()\n    const results: Record<string, unknown> = {}\n    let failure: string | undefined\n    try {\n      for (const [name, child] of selected) {\n        failure = name\n        release.push(child.lock(namespace))\n      }\n      const busy = Object.fromEntries(\n        [...selected]\n          .filter(([, child]) => {\n            const state = child.diagnostics(namespace)\n            return (\n              state.activeRequests +\n                state.blockedCommands +\n                state.pendingWebhooks +\n                (state.activeJobs ?? 0) >\n              0\n            )\n          })\n          .map(([name, child]) => [name, child.diagnostics(namespace)]),\n      )\n      if (Object.keys(busy).length)\n        return json(409, { error: \"namespace is not quiescent\", services: busy })\n      for (const [name, child] of selected) {\n        failure = name\n        before.set(name, await child.checkpoint(namespace))\n      }\n      for (const [name, child] of selected) {\n        failure = name\n        results[name] = { status: \"ok\", result: await run(name, child) }\n      }\n      return json(200, { status: \"ok\", namespace, services: results })\n    } catch {\n      const rollback: Record<string, string> = {}\n      // Roll back even the child whose mutation failed; it may have partially changed state.\n      for (const [name, point] of before) {\n        try {\n          await selected.get(name)?.restore(namespace, point)\n          rollback[name] = \"restored\"\n        } catch {\n          rollback[name] = \"failed\"\n        }\n      }\n      return json(500, {\n        status: \"failed\",\n        namespace,\n        failedService: failure,\n        services: results,\n        rollback,\n        rolledBack:\n          before.size > 0 && Object.values(rollback).every((value) => value === \"restored\"),\n      })\n    } finally {\n      for (const unlock of release.reverse()) unlock()\n      controlling = false\n    }\n  }\n\n  const api: FetchAPI = {\n    async fetch(request) {\n      const url = new URL(request.url)\n      const adminPrefix = resolveAdminPrefix(config.adminPrefix)\n      const path = url.pathname.startsWith(`${adminPrefix}/`)\n        ? url.pathname.slice(adminPrefix.length)\n        : \"\"\n      if (path === \"/health\" && request.method === \"GET\") {\n        const states = await Promise.all(\n          [...children].map(async ([name, child]) => {\n            let protocolReady = false\n            try {\n              protocolReady = await child.ready()\n            } catch {\n              /* reported as failed */\n            }\n            return [\n              name,\n              {\n                processReady: !stopped,\n                protocolReady,\n                status: protocolReady ? \"ready\" : \"failed\",\n                url: publicUrl(child.url),\n              },\n            ]\n          }),\n        )\n        const ready =\n          !stopped &&\n          states.every(([, state]) => (state as { protocolReady: boolean }).protocolReady)\n        return json(ready ? 200 : 503, {\n          status: ready ? \"ready\" : \"failed\",\n          id,\n          services: Object.fromEntries(states),\n        })\n      }\n      if (!path.startsWith(\"/fleet/\")) return json(404, { error: \"not found\" })\n      const adminKey = config.adminKey ?? process.env.MOCKINGBIRD_ADMIN_KEY\n      if (adminKey !== undefined && request.headers.get(\"x-mockingbird-admin-key\") !== adminKey)\n        return json(401, { error: \"admin key required\" })\n      const route = /^\\/fleet\\/namespaces\\/([^/]+)\\/(reset|snapshots)(?:\\/([^/]+)\\/restore)?$/.exec(\n        path,\n      )\n      const namespace = route\n        ? decodeURIComponent(route[1] as string)\n        : (url.searchParams.get(\"namespace\") ??\n          request.headers.get(\"x-mockingbird-namespace\") ??\n          config.namespace ??\n          \"default\")\n      if (!NS.test(namespace)) return json(400, { error: \"invalid namespace\" })\n      if (request.method === \"GET\" && path === \"/fleet/metrics\")\n        return json(200, { namespace, services: diagnostics(namespace) })\n      if (request.method === \"GET\" && path === \"/fleet/clock\")\n        return json(200, {\n          namespace,\n          ...clock(namespace).state(),\n          services: Object.fromEntries(\n            [...children].map(([name, child]) => [name, child.clock(namespace).state()]),\n          ),\n        })\n      if (request.method !== \"POST\") return json(405, { error: \"method not allowed\" })\n      let body: Record<string, unknown>\n      try {\n        const text = await request.text()\n        const value: unknown = text ? JSON.parse(text) : {}\n        if (!isObject(value)) throw new Error(\"expected object\")\n        body = value\n      } catch {\n        return json(400, { error: \"expected JSON object\" })\n      }\n      let selected: Map<string, FleetChild>\n      try {\n        selected = select(body)\n      } catch (error) {\n        return json(400, { error: error instanceof Error ? error.message : \"bad selection\" })\n      }\n      if (path === \"/fleet/wait-until-idle\") {\n        const services = diagnostics(namespace)\n        const idle = Object.values(services).every((d) => pending(d) === 0)\n        return json(idle ? 200 : 409, { status: idle ? \"idle\" : \"busy\", namespace, services })\n      }\n      if (path === \"/fleet/clock\") {\n        const current = clock(namespace)\n        let target = current.now()\n        if (body.set !== undefined) {\n          target =\n            typeof body.set === \"number\"\n              ? body.set\n              : typeof body.set === \"string\"\n                ? Date.parse(body.set)\n                : NaN\n          if (!Number.isFinite(target))\n            return json(400, { error: \"set must be epoch ms or ISO-8601\" })\n        }\n        if (body.advance !== undefined) {\n          const delta = parseDuration(body.advance)\n          if (delta === undefined) return json(400, { error: \"invalid advance\" })\n          target += delta\n        }\n        const frozen = body.freeze === undefined ? current.state().frozen : body.freeze\n        if (typeof frozen !== \"boolean\") return json(400, { error: \"freeze must be boolean\" })\n        const response = await transaction(namespace, selected, async (_name, child) => {\n          const childClock = child.clock(namespace)\n          childClock.freeze()\n          childClock.set(target)\n          if (!frozen) childClock.unfreeze()\n          await child.settle?.(namespace)\n          return childClock.state()\n        })\n        if (response.ok) {\n          current.freeze()\n          current.set(target)\n          if (!frozen) current.unfreeze()\n        }\n        return response\n      }\n      if (!route) return json(404, { error: \"not found\" })\n      if (route[2] === \"reset\") {\n        if (route[3]) return json(404, { error: \"not found\" })\n        const response = await transaction(namespace, selected, async (_name, child) =>\n          child.reset(namespace),\n        )\n        if (response.ok && selected.size === children.size) clock(namespace).reset()\n        return response\n      }\n      if (route[3]) {\n        const point = checkpoints.get(route[3])\n        if (!point || point.namespace !== namespace)\n          return json(404, { error: \"no snapshot in this namespace\" })\n        const restored = new Map(\n          [...point.values].map(([name]) => [name, children.get(name) as FleetChild]),\n        )\n        const response = await transaction(namespace, restored, async (name, child) =>\n          child.restore(namespace, point.values.get(name)),\n        )\n        if (response.ok) {\n          const current = clock(namespace)\n          current.freeze()\n          current.set(point.clock.now)\n          if (!point.clock.frozen) current.unfreeze()\n        }\n        return response\n      }\n      const snapshotId = randomUUID()\n      const values = new Map<string, unknown>()\n      const response = await transaction(namespace, selected, async (name, child) => {\n        values.set(name, await child.checkpoint(namespace))\n        return { checkpoint: `${snapshotId}:${name}` }\n      })\n      if (!response.ok) return response\n      checkpoints.set(snapshotId, { namespace, values, clock: clock(namespace).state() })\n      return json(201, {\n        ...((await response.json()) as Record<string, unknown>),\n        id: snapshotId,\n        label: body.label,\n      })\n    },\n  }\n  try {\n    const adminPrefix = resolveAdminPrefix(config.adminPrefix)\n    if (!isObject(config.services) || Object.keys(config.services).length === 0)\n      throw new Error(\"config must contain at least one service\")\n    for (const [name, entry] of Object.entries(config.services)) {\n      if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name)) throw new Error(\"invalid service name\")\n      try {\n        const target = await options.load(name)\n        if (entry.protocol && entry.protocol !== (\"protocol\" in target ? target.protocol : \"http\"))\n          throw new Error(\"configured protocol does not match target\")\n        const adminKey = entry.adminKey ?? config.adminKey ?? process.env.MOCKINGBIRD_ADMIN_KEY\n        const child =\n          \"start\" in target\n            ? await target.start(entry)\n            : await httpChild(\n                target,\n                {\n                  ...entry,\n                  adminPrefix: resolveAdminPrefix(entry.adminPrefix ?? adminPrefix),\n                  ...(adminKey !== undefined ? { adminKey } : {}),\n                },\n                options,\n              )\n        children.set(name, child)\n        if (!(await child.ready())) throw new Error(\"protocol readiness failed\")\n      } catch {\n        throw new Error(`service ${name} failed to start; all started listeners were closed`)\n      }\n    }\n    supervisor = await listen(api, {\n      port: config.control?.port ?? 0,\n      host: config.control?.host ?? \"127.0.0.1\",\n    })\n    const manifest: EndpointManifest = {\n      version: 1,\n      state: \"ready\",\n      pid: process.pid,\n      id,\n      startedAt,\n      adminBase: `${supervisor.url}${adminPrefix}/fleet`,\n      healthUrl: `${supervisor.url}${adminPrefix}/health`,\n      services: Object.fromEntries(\n        [...children].map(([name, child]) => [\n          name,\n          {\n            protocol: child.protocol,\n            url: publicUrl(child.url),\n            healthUrl: child.healthUrl ?? `${supervisor?.url}${adminPrefix}/health`,\n            adminUrl: child.adminUrl ?? `${supervisor?.url}${adminPrefix}/fleet`,\n            namespaces: child.namespaces,\n            processReady: true,\n            protocolReady: true,\n          },\n        ]),\n      ),\n    }\n    if (options.connectionsFile)\n      await atomicWrite(options.connectionsFile, {\n        version: 1,\n        id,\n        pid: process.pid,\n        services: Object.fromEntries(\n          [...children].map(([name, child]) => [\n            name,\n            { url: child.connection ?? child.url, namespaces: child.connections },\n          ]),\n        ),\n      })\n    if (options.readyFile) await atomicWrite(options.readyFile, manifest)\n    options.onReady?.(manifest)\n    return { manifest, children, fetch: api.fetch, close }\n  } catch (error) {\n    await close()\n    throw error\n  }\n}\n", "import { createServer } from \"node:http\"\nimport type { FetchAPI } from \"@crvouga/mockingbird-core\"\n\n/** Options for {@link serve}. */\nexport type NodeServeOptions = {\n  port?: number\n  host?: string\n}\n\n/**\n * Serve any Mockingbird {@link FetchAPI} over `node:http`.\n * Port defaults to `0`, so the OS assigns an ephemeral port (read from `server.address()`).\n */\nexport const serve = async (api: FetchAPI, options: NodeServeOptions = {}) => {\n  const server = createServer(async (req, res) => {\n    const chunks: Buffer[] = []\n    for await (const chunk of req) {\n      chunks.push(Buffer.from(chunk))\n    }\n    const body = Buffer.concat(chunks)\n    const address = server.address()\n    const port = typeof address === \"object\" && address !== null ? address.port : undefined\n    const base = `http://${req.headers.host ?? `localhost:${port ?? 80}`}`\n    const raw = req.url ?? \"/\"\n    const url = new URL(raw.replace(/^\\/+/, \"/\"), base)\n    const method = req.method ?? \"GET\"\n    const init: RequestInit = { method, headers: req.headers as Record<string, string> }\n    if (method !== \"GET\" && method !== \"HEAD\" && body.length > 0) {\n      init.body = body\n    }\n    const aborted = new AbortController()\n    res.once(\"close\", () => {\n      if (!res.writableFinished) aborted.abort()\n    })\n    init.signal = aborted.signal\n    const request = new Request(url, init)\n    let response: Response\n    try {\n      response = await api.fetch(request)\n    } catch (error) {\n      // A `drop` fault: destroy the socket so the client sees the connection die.\n      if ((error as { code?: string }).code === \"MOCKINGBIRD_DROP\") {\n        req.socket.destroy()\n        return\n      }\n      res.writeHead(500, { \"content-type\": \"application/json\" })\n      res.end(\n        JSON.stringify({\n          error: {\n            type: \"mockingbird_internal\",\n            message: error instanceof Error ? error.message : String(error),\n          },\n        }),\n      )\n      return\n    }\n    // Headers#entries() joins repeated headers; Set-Cookie must stay one header per cookie.\n    const headers: Record<string, string | string[]> = Object.fromEntries(response.headers)\n    const cookies = response.headers.getSetCookie()\n    if (cookies.length > 0) headers[\"set-cookie\"] = cookies\n    if (!response.body) {\n      res.writeHead(response.status, headers)\n      res.end()\n      return\n    }\n    // Stream the body chunk by chunk: event streams and long-polls must not be buffered.\n    res.writeHead(response.status, headers)\n    res.flushHeaders()\n    const reader = response.body.getReader()\n    try {\n      for (;;) {\n        const { done, value } = await reader.read()\n        if (done) break\n        if (!res.write(value)) await new Promise<void>((resolve) => res.once(\"drain\", resolve))\n      }\n      res.end()\n    } catch {\n      res.destroy()\n    } finally {\n      reader.releaseLock()\n    }\n  })\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject)\n    server.listen(options.port ?? 0, options.host, resolve)\n  })\n  return server\n}\n", "import type { Server } from \"node:http\"\nimport type { FetchAPI } from \"@crvouga/mockingbird-core\"\nimport { serve } from \"./serve.js\"\n\nexport type ListenOptions = {\n  /** Default `0`: the OS picks a free port. */\n  port?: number\n  /** Default `127.0.0.1`: a mock should not be reachable off the machine by accident. */\n  host?: string\n}\n\n/** A running server, with the address it actually bound. */\nexport type Listening = {\n  url: string\n  port: number\n  host: string\n  server: Server\n  close(): Promise<void>\n}\n\nexport const listen = async (api: FetchAPI, options: ListenOptions = {}): Promise<Listening> => {\n  const host = options.host ?? \"127.0.0.1\"\n  const server = await serve(api, { port: options.port ?? 0, host })\n  const address = server.address()\n  const port = typeof address === \"object\" && address !== null ? address.port : (options.port ?? 0)\n  const shown = host.includes(\":\") ? `[${host}]` : host\n  return {\n    url: `http://${shown}:${port}`,\n    port,\n    host,\n    server,\n    close: () =>\n      new Promise<void>((resolve, reject) => {\n        // Stop accepting first, then drop keep-alive sockets so close() can finish.\n        server.close((error) => {\n          if (error && (error as { code?: string }).code !== \"ERR_SERVER_NOT_RUNNING\") reject(error)\n          else resolve()\n        })\n        server.closeAllConnections?.()\n      }),\n  }\n}\n", "/// <reference types=\"node\" />\nimport { type Listening, listen, type ServeTarget } from \"@crvouga/mockingbird-adapter-node\"\nimport { createRuntime, type OtelRuntime, type OtelRuntimeOptions } from \"./runtime.js\"\nimport { INGEST_AUTH_MODES, type IngestAuth } from \"./state.js\"\n\n/** Port `mockingbird-otel serve` listens on when none is given. */\nexport const DEFAULT_PORT = 8809\n\nexport type OtelServerOptions = OtelRuntimeOptions & {\n  /** Default `0`: the OS picks a free port. */\n  port?: number\n  /** Default `127.0.0.1`. */\n  host?: string\n}\n\nexport type OtelServer = Listening & { runtime: OtelRuntime }\n\n/** Serve the OTLP collector + O2 search mock over `node:http`. */\nexport const createServer = async (options: OtelServerOptions = {}): Promise<OtelServer> => {\n  const { port, host, ...rest } = options\n  const runtime = createRuntime(rest)\n  const listening = await listen(runtime, {\n    port: port ?? 0,\n    ...(host !== undefined ? { host } : {}),\n  })\n  return { ...listening, runtime }\n}\n\nconst text = (value: string | boolean | undefined) =>\n  typeof value === \"string\" ? value : undefined\n\n/** `user:password` as the flags take it (a bare `user` has an empty password). */\nconst credentials = (auth: string) => {\n  const colon = auth.indexOf(\":\")\n  return colon < 0\n    ? { username: auth, password: \"\" }\n    : { username: auth.slice(0, colon), password: auth.slice(colon + 1) }\n}\n\nconst csv = (value: string | undefined): string[] =>\n  (value ?? \"\")\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter((item) => item !== \"\")\n\n/** How `serve` (and `serve --config`) builds the OTel mock from flags. */\nexport const serveTarget: ServeTarget = {\n  name: \"otel\",\n  defaultPort: DEFAULT_PORT,\n  options: {\n    \"ingest-auth\": {\n      type: \"string\",\n      value: \"<bearer|basic|none>\",\n      description:\n        \"What the OTLP receiver asks of an export: a bearer token, Basic credentials, or nothing (an unauthenticated collector); default bearer\",\n    },\n    \"ingest-token\": {\n      type: \"string\",\n      value: \"<token>\",\n      description: \"Only accept this OTLP bearer token (the app's OTEL_AUTH_TOKEN); default any\",\n    },\n    \"ingest-basic-auth\": {\n      type: \"string\",\n      value: \"<user:password>\",\n      description:\n        \"Only accept these OTLP Basic credentials (a hosted gateway's instanceId:token); implies --ingest-auth basic\",\n    },\n    \"cors-origins\": {\n      type: \"string\",\n      value: \"<origin,\u2026>\",\n      description:\n        \"Origins a browser exporter may send from (https://app.example, https://*.example, or *); default no CORS\",\n    },\n    \"cors-headers\": {\n      type: \"string\",\n      value: \"<header,\u2026>\",\n      description:\n        \"Request headers a preflight may name (or *); default accept, content-type, x-requested-with\",\n    },\n    \"search-auth\": {\n      type: \"string\",\n      value: \"<user:password>\",\n      description: \"Only accept these O2 Basic credentials (decoded O2_BASIC_AUTH); default any\",\n    },\n    \"keep-bodies\": {\n      type: \"boolean\",\n      description:\n        \"Store log bodies (local debugging only: bodies can hold prompts or PHI); default drop\",\n    },\n  },\n  create: (values, common) => {\n    const token = text(values[\"ingest-token\"])\n    const auth = text(values[\"search-auth\"])\n    const ingestBasic = text(values[\"ingest-basic-auth\"])\n    const ingestAuth = text(values[\"ingest-auth\"]) ?? (ingestBasic ? \"basic\" : \"bearer\")\n    if (!INGEST_AUTH_MODES.includes(ingestAuth as IngestAuth)) {\n      throw new Error(`--ingest-auth must be one of ${INGEST_AUTH_MODES.join(\", \")}`)\n    }\n    const origins = csv(text(values[\"cors-origins\"]))\n    const headers = csv(text(values[\"cors-headers\"]))\n    return createRuntime({\n      settings: {\n        ingestAuth: ingestAuth as IngestAuth,\n        ...(token ? { ingestTokens: [token] } : {}),\n        ...(ingestBasic ? { ingestUsers: [credentials(ingestBasic)] } : {}),\n        ...(origins.length > 0\n          ? {\n              cors: {\n                allowedOrigins: origins,\n                ...(headers.length > 0 ? { allowedHeaders: headers } : {}),\n              },\n            }\n          : {}),\n        ...(auth ? { searchUsers: [credentials(auth)] } : {}),\n        ...(values[\"keep-bodies\"] === true ? { keepBodies: true } : {}),\n      },\n      ...(common.adminPrefix !== undefined ? { adminPrefix: common.adminPrefix } : {}),\n      ...(common.adminKey !== undefined ? { adminKey: common.adminKey } : {}),\n      ...(common.seed !== undefined ? { seed: common.seed } : {}),\n      ...(common.onLog ? { onLog: common.onLog } : {}),\n    })\n  },\n  banner: () => [\n    \"otlp: OTEL_EXPORTER_OTLP_ENDPOINT=<this> (POST /v1/traces, /v1/logs, /v1/metrics; JSON or protobuf), Authorization: Bearer <OTEL_AUTH_TOKEN> (--ingest-auth basic|none for a Basic or unauthenticated collector)\",\n    \"o2: O2_BASE_URL=<this>, Basic O2_BASIC_AUTH; orgs development=30rBqcDevOrg7Hn2KmQ4xW9sLtY production=3HSzeProdOrg5Jd8VpN1cR6gTfB\",\n    \"admin: GET /__admin/logs?event=\u2026, POST /__admin/wait {kind, where, count, timeoutMs}\",\n  ],\n}\n"],
+  "mappings": ";;;;;;;;;AACA,SAAS,YAAAA,iBAAgB;AACzB,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,qBAAqB;AAC9B,SAA+B,iBAAiB;;;ACLhD,SAAS,kBAAkB;AAC3B,SAAS,OAAO,UAAU,QAAQ,IAAI,iBAAiB;;;ACDvD,SAAS,oBAAoB;AAatB,IAAM,QAAQ,OAAO,KAAe,UAA4B,CAAA,MAAM;AAC3E,QAAM,SAAS,aAAa,OAAO,KAAK,QAAO;AAC7C,UAAM,SAAmB,CAAA;AACzB,qBAAiB,SAAS,KAAK;AAC7B,aAAO,KAAK,OAAO,KAAK,KAAK,CAAC;IAChC;AACA,UAAM,OAAO,OAAO,OAAO,MAAM;AACjC,UAAM,UAAU,OAAO,QAAO;AAC9B,UAAM,OAAO,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO;AAC9E,UAAM,OAAO,UAAU,IAAI,QAAQ,QAAQ,aAAa,QAAQ,EAAE,EAAE;AACpE,UAAM,MAAM,IAAI,OAAO;AACvB,UAAM,MAAM,IAAI,IAAI,IAAI,QAAQ,QAAQ,GAAG,GAAG,IAAI;AAClD,UAAM,SAAS,IAAI,UAAU;AAC7B,UAAM,OAAoB,EAAE,QAAQ,SAAS,IAAI,QAAiC;AAClF,QAAI,WAAW,SAAS,WAAW,UAAU,KAAK,SAAS,GAAG;AAC5D,WAAK,OAAO;IACd;AACA,UAAM,UAAU,IAAI,gBAAe;AACnC,QAAI,KAAK,SAAS,MAAK;AACrB,UAAI,CAAC,IAAI;AAAkB,gBAAQ,MAAK;IAC1C,CAAC;AACD,SAAK,SAAS,QAAQ;AACtB,UAAM,UAAU,IAAI,QAAQ,KAAK,IAAI;AACrC,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,IAAI,MAAM,OAAO;IACpC,SAAS,OAAO;AAEd,UAAK,MAA4B,SAAS,oBAAoB;AAC5D,YAAI,OAAO,QAAO;AAClB;MACF;AACA,UAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAkB,CAAE;AACzD,UAAI,IACF,KAAK,UAAU;QACb,OAAO;UACL,MAAM;UACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;;OAEjE,CAAC;AAEJ;IACF;AAEA,UAAM,UAA6C,OAAO,YAAY,SAAS,OAAO;AACtF,UAAM,UAAU,SAAS,QAAQ,aAAY;AAC7C,QAAI,QAAQ,SAAS;AAAG,cAAQ,YAAY,IAAI;AAChD,QAAI,CAAC,SAAS,MAAM;AAClB,UAAI,UAAU,SAAS,QAAQ,OAAO;AACtC,UAAI,IAAG;AACP;IACF;AAEA,QAAI,UAAU,SAAS,QAAQ,OAAO;AACtC,QAAI,aAAY;AAChB,UAAM,SAAS,SAAS,KAAK,UAAS;AACtC,QAAI;AACF,iBAAS;AACP,cAAM,EAAE,MAAM,MAAK,IAAK,MAAM,OAAO,KAAI;AACzC,YAAI;AAAM;AACV,YAAI,CAAC,IAAI,MAAM,KAAK;AAAG,gBAAM,IAAI,QAAc,CAACC,aAAY,IAAI,KAAK,SAASA,QAAO,CAAC;MACxF;AACA,UAAI,IAAG;IACT,QAAQ;AACN,UAAI,QAAO;IACb;AACE,aAAO,YAAW;IACpB;EACF,CAAC;AACD,QAAM,IAAI,QAAc,CAACA,UAAS,WAAU;AAC1C,WAAO,KAAK,SAAS,MAAM;AAC3B,WAAO,OAAO,QAAQ,QAAQ,GAAG,QAAQ,MAAMA,QAAO;EACxD,CAAC;AACD,SAAO;AACT;;;ACnEO,IAAM,SAAS,OAAO,KAAe,UAAyB,CAAA,MAA0B;AAC7F,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,SAAS,MAAM,MAAM,KAAK,EAAE,MAAM,QAAQ,QAAQ,GAAG,KAAI,CAAE;AACjE,QAAM,UAAU,OAAO,QAAO;AAC9B,QAAM,OAAO,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAQ,QAAQ,QAAQ;AAC/F,QAAM,QAAQ,KAAK,SAAS,GAAG,IAAI,IAAI,IAAI,MAAM;AACjD,SAAO;IACL,KAAK,UAAU,KAAK,IAAI,IAAI;IAC5B;IACA;IACA;IACA,OAAO,MACL,IAAI,QAAc,CAACC,UAAS,WAAU;AAEpC,aAAO,MAAM,CAAC,UAAS;AACrB,YAAI,SAAU,MAA4B,SAAS;AAA0B,iBAAO,KAAK;;AACpF,UAAAA,SAAO;MACd,CAAC;AACD,aAAO,sBAAqB;IAC9B,CAAC;;AAEP;;;AFiBA,IAAM,QAA0B;EAC9B,gBAAgB;EAChB,mBAAmB;EACnB,iBAAiB;EACjB,aAAa;EACb,iBAAiB;EACjB,mBAAmB;;AAErB,IAAM,KAAK;AACX,IAAM,OAAO,CAAC,QAAgB,UAAmB,SAAS,KAAK,OAAO,EAAE,OAAM,CAAE;AAChF,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AACrE,IAAM,UAAU,CAAC,MACf,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE;AAE3D,IAAM,YAAY,CAAC,QAAuB;AACxC,QAAM,MAAM,IAAI,IAAI,GAAG;AACvB,MAAI,WAAW;AACf,SAAO,IAAI;AACb;AAGA,IAAM,cAAc,OAAO,MAAc,UAAkB;AACzD,QAAM,OAAO,GAAG,IAAI,IAAI,WAAU,CAAE;AACpC,MAAI;AACF,UAAM,UAAU,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;GAAM,EAAE,MAAM,KAAO,MAAM,KAAI,CAAE;AACxF,UAAM,MAAM,MAAM,GAAK;AACvB,UAAM,OAAO,MAAM,IAAI;EACzB;AACE,UAAM,GAAG,MAAM,EAAE,OAAO,KAAI,CAAE;EAChC;AACF;AAEA,IAAM,cAAc,OAAO,MAA0B,OAAc;AACjE,MAAI,CAAC;AAAM;AACX,MAAI;AACF,UAAM,QAAiB,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAC9D,QAAI,SAAS,KAAK,KAAK,MAAM,OAAO;AAAI,YAAM,GAAG,MAAM,EAAE,OAAO,KAAI,CAAE;EACxE,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS;AAAU,YAAM;EAChE;AACF;AAEA,IAAM,YAAY,OAChB,QACA,OACA,YACuB;AACvB,QAAM,UAA2C,MAAM,OAAO,OAAO,MAAM,WAAW,CAAA,GAAI;IACxF,aAAa,mBAAmB,MAAM,WAAW;IACjD,UAAU,MAAM;IAChB,MAAM,MAAM;IACZ,OAAO,QAAQ;IACf,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAQ,IAAK,CAAA;IAClE,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAO,IAAK,CAAA;GAChE;AACD,QAAM,cAAc,mBAAmB,MAAM,WAAW;AACxD,UAAQ,kBAAiB;AACzB,QAAM,SAAS,oBAAI,IAAG;AACtB,QAAM,SAAS,oBAAI,IAAG;AACtB,QAAM,MAAgB;IACpB,MAAM,MAAM,SAAO;AACjB,YAAM,YAAY,QAAQ,YAAY,OAAO;AAC7C,UAAI,OAAO,IAAI,SAAS;AAAG,eAAO,KAAK,KAAK,EAAE,OAAO,6BAA6B,UAAS,CAAE;AAC7F,aAAO,IAAI,YAAY,OAAO,IAAI,SAAS,KAAK,KAAK,CAAC;AACtD,UAAI;AACF,eAAO,MAAM,QAAQ,MAAM,OAAO;MACpC;AACE,eAAO,IAAI,YAAY,OAAO,IAAI,SAAS,KAAK,KAAK,CAAC;MACxD;IACF;;AAEF,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,OAAO,KAAK;MACzB,MAAM,MAAM,QAAQ,OAAO;MAC3B,MAAM,MAAM,QAAQ;KACrB;AACD,WAAO,YAAY,MAAM;EAC3B,SAAS,OAAO;AACd,YAAQ,OAAM;AACd,UAAM,QAAQ,MAAK;AACnB,YAAQ,UAAU,MAAK;AACvB,UAAM,QAAQ,UAAU,KAAI;AAC5B,UAAM;EACR;AACA,SAAO;IACL,UAAU;IACV,KAAK,OAAO;IACZ,WAAW,GAAG,OAAO,GAAG,GAAG,WAAW;IACtC,UAAU,GAAG,OAAO,GAAG,GAAG,WAAW;IACrC,YAAY,EAAE,QAAQ,2BAA2B,MAAM,GAAG,WAAW,aAAY;IACjF,OAAO,YAAW;AAChB,UAAI;AACF,gBACE,MAAM,MAAM,GAAG,OAAO,GAAG,GAAG,WAAW,WAAW,EAAE,QAAQ,YAAY,QAAQ,GAAI,EAAC,CAAE,GACvF;MACJ,QAAQ;AACN,eAAO;MACT;IACF;IACA,MAAM,QAAK;AACT,cAAQ,OAAM;AACd,cAAQ,UAAU,MAAK;AACvB,YAAM,OAAO,MAAK;AAClB,YAAM,QAAQ,UAAU,KAAI;IAC9B;IACA,KAAK,WAAS;AACZ,UAAI,OAAO,IAAI,SAAS;AAAG,cAAM,IAAI,MAAM,0BAA0B;AACrE,aAAO,IAAI,SAAS;AACpB,aAAO,MAAM,OAAO,OAAO,SAAS;IACtC;IACA,YAAY,WAAS;AACnB,aAAO;QACL,GAAG;QACH,gBAAgB,OAAO,IAAI,SAAS,KAAK;QACzC,iBAAiB,QAAQ,UAAU,QAAQ,SAAS,KAAK;QACzD,mBAAmB,QAAQ,QACxB,OAAO,SAAS,EAChB,UAAU,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,OAAO,CAAC;;IAEhD;IACA,MAAM,WAAW,WAAS;AACxB,aAAO,QAAQ,cAAc,SAAS;IACxC;IACA,MAAM,QAAQ,WAAW,YAAU;AACjC,cAAQ,aAAa,YAAY,SAAS;IAC5C;IACA,OAAO,CAAC,cAAc,QAAQ,MAAM,SAAS;IAC7C,OAAO,CAAC,cAAc,QAAQ,eAAe,SAAS;IACtD,MAAM,OAAO,WAAS;AACpB,YAAM,WAAW,QAAQ,SAAS,SAAS;AAC3C,eAAS,OAAM;AACf,YAAM,QAAQ,UAAU,KAAI;IAC9B;;AAEJ;AAUA,eAAsB,WAAW,QAA2B,SAAqB;AAC/E,QAAM,KAAK,WAAU;AACrB,QAAM,aAAY,oBAAI,KAAI,GAAG,YAAW;AACxC,QAAM,WAAW,oBAAI,IAAG;AACxB,QAAM,SAAS,oBAAI,IAAG;AACtB,QAAM,cAAc,oBAAI,IAAG;AAI3B,MAAI;AACJ,MAAI,UAAU;AACd,MAAI,cAAc;AAClB,QAAM,QAAQ,YAAW;AACvB,QAAI;AAAS;AACb,cAAU;AACV,UAAM,QAAQ,WAAW,CAAC,GAAG,SAAS,OAAM,CAAE,EAAE,IAAI,CAAC,UAAU,MAAM,MAAK,CAAE,CAAC;AAC7E,UAAM,YAAY,MAAK;AACvB,UAAM,YAAY,QAAQ,WAAW,EAAE;AACvC,UAAM,YAAY,QAAQ,iBAAiB,EAAE;EAC/C;AAEA,MAAI,QAAQ;AAAW,UAAM,GAAG,QAAQ,WAAW,EAAE,OAAO,KAAI,CAAE;AAClE,MAAI,QAAQ;AAAiB,UAAM,GAAG,QAAQ,iBAAiB,EAAE,OAAO,KAAI,CAAE;AAE9E,QAAM,QAAQ,CAAC,cAAqB;AAClC,QAAI,QAAQ,OAAO,IAAI,SAAS;AAChC,QAAI,CAAC,OAAO;AACV,cAAQ,YAAW;AACnB,aAAO,IAAI,WAAW,KAAK;IAC7B;AACA,WAAO;EACT;AACA,QAAM,SAAS,CAAC,SAA0D;AACxE,QAAI,KAAK,aAAa;AAAW,aAAO;AACxC,QAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,KAAK,KAAK,SAAS,WAAW;AAC5D,YAAM,IAAI,MAAM,kCAAkC;AACpD,UAAM,WAAW,oBAAI,IAAG;AACxB,eAAW,QAAQ,KAAK,UAAU;AAChC,UAAI,OAAO,SAAS,YAAY,CAAC,SAAS,IAAI,IAAI;AAChD,cAAM,IAAI,MAAM,8BAA8B;AAChD,eAAS,IAAI,MAAM,SAAS,IAAI,IAAI,CAAe;IACrD;AACA,WAAO;EACT;AACA,QAAM,cAAc,CAAC,cACnB,OAAO,YAAY,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,MAAM,YAAY,SAAS,CAAC,CAAC,CAAC;AAC/F,QAAM,cAAc,OAClB,WACA,UACA,QACqB;AACrB,QAAI;AAAa,aAAO,KAAK,KAAK,EAAE,OAAO,yCAAwC,CAAE;AACrF,kBAAc;AACd,UAAM,UAA0B,CAAA;AAChC,UAAM,SAAS,oBAAI,IAAG;AACtB,UAAM,UAAmC,CAAA;AACzC,QAAI;AACJ,QAAI;AACF,iBAAW,CAAC,MAAM,KAAK,KAAK,UAAU;AACpC,kBAAU;AACV,gBAAQ,KAAK,MAAM,KAAK,SAAS,CAAC;MACpC;AACA,YAAM,OAAO,OAAO,YAClB,CAAC,GAAG,QAAQ,EACT,OAAO,CAAC,CAAC,EAAE,KAAK,MAAK;AACpB,cAAM,QAAQ,MAAM,YAAY,SAAS;AACzC,eACE,MAAM,iBACJ,MAAM,kBACN,MAAM,mBACL,MAAM,cAAc,KACvB;MAEJ,CAAC,EACA,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,MAAM,YAAY,SAAS,CAAC,CAAC,CAAC;AAEjE,UAAI,OAAO,KAAK,IAAI,EAAE;AACpB,eAAO,KAAK,KAAK,EAAE,OAAO,8BAA8B,UAAU,KAAI,CAAE;AAC1E,iBAAW,CAAC,MAAM,KAAK,KAAK,UAAU;AACpC,kBAAU;AACV,eAAO,IAAI,MAAM,MAAM,MAAM,WAAW,SAAS,CAAC;MACpD;AACA,iBAAW,CAAC,MAAM,KAAK,KAAK,UAAU;AACpC,kBAAU;AACV,gBAAQ,IAAI,IAAI,EAAE,QAAQ,MAAM,QAAQ,MAAM,IAAI,MAAM,KAAK,EAAC;MAChE;AACA,aAAO,KAAK,KAAK,EAAE,QAAQ,MAAM,WAAW,UAAU,QAAO,CAAE;IACjE,QAAQ;AACN,YAAM,WAAmC,CAAA;AAEzC,iBAAW,CAAC,MAAM,KAAK,KAAK,QAAQ;AAClC,YAAI;AACF,gBAAM,SAAS,IAAI,IAAI,GAAG,QAAQ,WAAW,KAAK;AAClD,mBAAS,IAAI,IAAI;QACnB,QAAQ;AACN,mBAAS,IAAI,IAAI;QACnB;MACF;AACA,aAAO,KAAK,KAAK;QACf,QAAQ;QACR;QACA,eAAe;QACf,UAAU;QACV;QACA,YACE,OAAO,OAAO,KAAK,OAAO,OAAO,QAAQ,EAAE,MAAM,CAAC,UAAU,UAAU,UAAU;OACnF;IACH;AACE,iBAAW,UAAU,QAAQ,QAAO;AAAI,eAAM;AAC9C,oBAAc;IAChB;EACF;AAEA,QAAM,MAAgB;IACpB,MAAM,MAAM,SAAO;AACjB,YAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,YAAM,cAAc,mBAAmB,OAAO,WAAW;AACzD,YAAM,OAAO,IAAI,SAAS,WAAW,GAAG,WAAW,GAAG,IAClD,IAAI,SAAS,MAAM,YAAY,MAAM,IACrC;AACJ,UAAI,SAAS,aAAa,QAAQ,WAAW,OAAO;AAClD,cAAM,SAAS,MAAM,QAAQ,IAC3B,CAAC,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAK;AACxC,cAAI,gBAAgB;AACpB,cAAI;AACF,4BAAgB,MAAM,MAAM,MAAK;UACnC,QAAQ;UAER;AACA,iBAAO;YACL;YACA;cACE,cAAc,CAAC;cACf;cACA,QAAQ,gBAAgB,UAAU;cAClC,KAAK,UAAU,MAAM,GAAG;;;QAG9B,CAAC,CAAC;AAEJ,cAAM,QACJ,CAAC,WACD,OAAO,MAAM,CAAC,CAAC,EAAE,KAAK,MAAO,MAAqC,aAAa;AACjF,eAAO,KAAK,QAAQ,MAAM,KAAK;UAC7B,QAAQ,QAAQ,UAAU;UAC1B;UACA,UAAU,OAAO,YAAY,MAAM;SACpC;MACH;AACA,UAAI,CAAC,KAAK,WAAW,SAAS;AAAG,eAAO,KAAK,KAAK,EAAE,OAAO,YAAW,CAAE;AACxE,YAAM,WAAW,OAAO,YAAY,QAAQ,IAAI;AAChD,UAAI,aAAa,UAAa,QAAQ,QAAQ,IAAI,yBAAyB,MAAM;AAC/E,eAAO,KAAK,KAAK,EAAE,OAAO,qBAAoB,CAAE;AAClD,YAAM,QAAQ,2EAA2E,KACvF,IAAI;AAEN,YAAM,YAAY,QACd,mBAAmB,MAAM,CAAC,CAAW,IACpC,IAAI,aAAa,IAAI,WAAW,KACjC,QAAQ,QAAQ,IAAI,yBAAyB,KAC7C,OAAO,aACP;AACJ,UAAI,CAAC,GAAG,KAAK,SAAS;AAAG,eAAO,KAAK,KAAK,EAAE,OAAO,oBAAmB,CAAE;AACxE,UAAI,QAAQ,WAAW,SAAS,SAAS;AACvC,eAAO,KAAK,KAAK,EAAE,WAAW,UAAU,YAAY,SAAS,EAAC,CAAE;AAClE,UAAI,QAAQ,WAAW,SAAS,SAAS;AACvC,eAAO,KAAK,KAAK;UACf;UACA,GAAG,MAAM,SAAS,EAAE,MAAK;UACzB,UAAU,OAAO,YACf,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,MAAM,MAAM,SAAS,EAAE,MAAK,CAAE,CAAC,CAAC;SAE/E;AACH,UAAI,QAAQ,WAAW;AAAQ,eAAO,KAAK,KAAK,EAAE,OAAO,qBAAoB,CAAE;AAC/E,UAAI;AACJ,UAAI;AACF,cAAMC,QAAO,MAAM,QAAQ,KAAI;AAC/B,cAAM,QAAiBA,QAAO,KAAK,MAAMA,KAAI,IAAI,CAAA;AACjD,YAAI,CAAC,SAAS,KAAK;AAAG,gBAAM,IAAI,MAAM,iBAAiB;AACvD,eAAO;MACT,QAAQ;AACN,eAAO,KAAK,KAAK,EAAE,OAAO,uBAAsB,CAAE;MACpD;AACA,UAAI;AACJ,UAAI;AACF,mBAAW,OAAO,IAAI;MACxB,SAAS,OAAO;AACd,eAAO,KAAK,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,gBAAe,CAAE;MACtF;AACA,UAAI,SAAS,0BAA0B;AACrC,cAAM,WAAW,YAAY,SAAS;AACtC,cAAM,OAAO,OAAO,OAAO,QAAQ,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC;AAClE,eAAO,KAAK,OAAO,MAAM,KAAK,EAAE,QAAQ,OAAO,SAAS,QAAQ,WAAW,SAAQ,CAAE;MACvF;AACA,UAAI,SAAS,gBAAgB;AAC3B,cAAM,UAAU,MAAM,SAAS;AAC/B,YAAI,SAAS,QAAQ,IAAG;AACxB,YAAI,KAAK,QAAQ,QAAW;AAC1B,mBACE,OAAO,KAAK,QAAQ,WAChB,KAAK,MACL,OAAO,KAAK,QAAQ,WAClB,KAAK,MAAM,KAAK,GAAG,IACnB;AACR,cAAI,CAAC,OAAO,SAAS,MAAM;AACzB,mBAAO,KAAK,KAAK,EAAE,OAAO,mCAAkC,CAAE;QAClE;AACA,YAAI,KAAK,YAAY,QAAW;AAC9B,gBAAM,QAAQ,cAAc,KAAK,OAAO;AACxC,cAAI,UAAU;AAAW,mBAAO,KAAK,KAAK,EAAE,OAAO,kBAAiB,CAAE;AACtE,oBAAU;QACZ;AACA,cAAM,SAAS,KAAK,WAAW,SAAY,QAAQ,MAAK,EAAG,SAAS,KAAK;AACzE,YAAI,OAAO,WAAW;AAAW,iBAAO,KAAK,KAAK,EAAE,OAAO,yBAAwB,CAAE;AACrF,cAAMC,YAAW,MAAM,YAAY,WAAW,UAAU,OAAO,OAAO,UAAS;AAC7E,gBAAM,aAAa,MAAM,MAAM,SAAS;AACxC,qBAAW,OAAM;AACjB,qBAAW,IAAI,MAAM;AACrB,cAAI,CAAC;AAAQ,uBAAW,SAAQ;AAChC,gBAAM,MAAM,SAAS,SAAS;AAC9B,iBAAO,WAAW,MAAK;QACzB,CAAC;AACD,YAAIA,UAAS,IAAI;AACf,kBAAQ,OAAM;AACd,kBAAQ,IAAI,MAAM;AAClB,cAAI,CAAC;AAAQ,oBAAQ,SAAQ;QAC/B;AACA,eAAOA;MACT;AACA,UAAI,CAAC;AAAO,eAAO,KAAK,KAAK,EAAE,OAAO,YAAW,CAAE;AACnD,UAAI,MAAM,CAAC,MAAM,SAAS;AACxB,YAAI,MAAM,CAAC;AAAG,iBAAO,KAAK,KAAK,EAAE,OAAO,YAAW,CAAE;AACrD,cAAMA,YAAW,MAAM,YAAY,WAAW,UAAU,OAAO,OAAO,UACpE,MAAM,MAAM,SAAS,CAAC;AAExB,YAAIA,UAAS,MAAM,SAAS,SAAS,SAAS;AAAM,gBAAM,SAAS,EAAE,MAAK;AAC1E,eAAOA;MACT;AACA,UAAI,MAAM,CAAC,GAAG;AACZ,cAAM,QAAQ,YAAY,IAAI,MAAM,CAAC,CAAC;AACtC,YAAI,CAAC,SAAS,MAAM,cAAc;AAChC,iBAAO,KAAK,KAAK,EAAE,OAAO,gCAA+B,CAAE;AAC7D,cAAM,WAAW,IAAI,IACnB,CAAC,GAAG,MAAM,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,SAAS,IAAI,IAAI,CAAe,CAAC,CAAC;AAE7E,cAAMA,YAAW,MAAM,YAAY,WAAW,UAAU,OAAO,MAAM,UACnE,MAAM,QAAQ,WAAW,MAAM,OAAO,IAAI,IAAI,CAAC,CAAC;AAElD,YAAIA,UAAS,IAAI;AACf,gBAAM,UAAU,MAAM,SAAS;AAC/B,kBAAQ,OAAM;AACd,kBAAQ,IAAI,MAAM,MAAM,GAAG;AAC3B,cAAI,CAAC,MAAM,MAAM;AAAQ,oBAAQ,SAAQ;QAC3C;AACA,eAAOA;MACT;AACA,YAAM,aAAa,WAAU;AAC7B,YAAM,SAAS,oBAAI,IAAG;AACtB,YAAM,WAAW,MAAM,YAAY,WAAW,UAAU,OAAO,MAAM,UAAS;AAC5E,eAAO,IAAI,MAAM,MAAM,MAAM,WAAW,SAAS,CAAC;AAClD,eAAO,EAAE,YAAY,GAAG,UAAU,IAAI,IAAI,GAAE;MAC9C,CAAC;AACD,UAAI,CAAC,SAAS;AAAI,eAAO;AACzB,kBAAY,IAAI,YAAY,EAAE,WAAW,QAAQ,OAAO,MAAM,SAAS,EAAE,MAAK,EAAE,CAAE;AAClF,aAAO,KAAK,KAAK;QACf,GAAK,MAAM,SAAS,KAAI;QACxB,IAAI;QACJ,OAAO,KAAK;OACb;IACH;;AAEF,MAAI;AACF,UAAM,cAAc,mBAAmB,OAAO,WAAW;AACzD,QAAI,CAAC,SAAS,OAAO,QAAQ,KAAK,OAAO,KAAK,OAAO,QAAQ,EAAE,WAAW;AACxE,YAAM,IAAI,MAAM,0CAA0C;AAC5D,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,QAAQ,GAAG;AAC3D,UAAI,CAAC,6BAA6B,KAAK,IAAI;AAAG,cAAM,IAAI,MAAM,sBAAsB;AACpF,UAAI;AACF,cAAM,SAAS,MAAM,QAAQ,KAAK,IAAI;AACtC,YAAI,MAAM,YAAY,MAAM,cAAc,cAAc,SAAS,OAAO,WAAW;AACjF,gBAAM,IAAI,MAAM,2CAA2C;AAC7D,cAAM,WAAW,MAAM,YAAY,OAAO,YAAY,QAAQ,IAAI;AAClE,cAAM,QACJ,WAAW,SACP,MAAM,OAAO,MAAM,KAAK,IACxB,MAAM,UACJ,QACA;UACE,GAAG;UACH,aAAa,mBAAmB,MAAM,eAAe,WAAW;UAChE,GAAI,aAAa,SAAY,EAAE,SAAQ,IAAK,CAAA;WAE9C,OAAO;AAEf,iBAAS,IAAI,MAAM,KAAK;AACxB,YAAI,CAAE,MAAM,MAAM,MAAK;AAAK,gBAAM,IAAI,MAAM,2BAA2B;MACzE,QAAQ;AACN,cAAM,IAAI,MAAM,WAAW,IAAI,qDAAqD;MACtF;IACF;AACA,iBAAa,MAAM,OAAO,KAAK;MAC7B,MAAM,OAAO,SAAS,QAAQ;MAC9B,MAAM,OAAO,SAAS,QAAQ;KAC/B;AACD,UAAM,WAA6B;MACjC,SAAS;MACT,OAAO;MACP,KAAK,QAAQ;MACb;MACA;MACA,WAAW,GAAG,WAAW,GAAG,GAAG,WAAW;MAC1C,WAAW,GAAG,WAAW,GAAG,GAAG,WAAW;MAC1C,UAAU,OAAO,YACf,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;QACnC;QACA;UACE,UAAU,MAAM;UAChB,KAAK,UAAU,MAAM,GAAG;UACxB,WAAW,MAAM,aAAa,GAAG,YAAY,GAAG,GAAG,WAAW;UAC9D,UAAU,MAAM,YAAY,GAAG,YAAY,GAAG,GAAG,WAAW;UAC5D,YAAY,MAAM;UAClB,cAAc;UACd,eAAe;;OAElB,CAAC;;AAGN,QAAI,QAAQ;AACV,YAAM,YAAY,QAAQ,iBAAiB;QACzC,SAAS;QACT;QACA,KAAK,QAAQ;QACb,UAAU,OAAO,YACf,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;UACnC;UACA,EAAE,KAAK,MAAM,cAAc,MAAM,KAAK,YAAY,MAAM,YAAW;SACpE,CAAC;OAEL;AACH,QAAI,QAAQ;AAAW,YAAM,YAAY,QAAQ,WAAW,QAAQ;AACpE,YAAQ,UAAU,QAAQ;AAC1B,WAAO,EAAE,UAAU,UAAU,OAAO,IAAI,OAAO,MAAK;EACtD,SAAS,OAAO;AACd,UAAM,MAAK;AACX,UAAM;EACR;AACF;;;ADngBA,IAAM,aAAa,CAAC,YAClB,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,MAAK;AAC7C,QAAM,OAAO,KAAK,IAAI,GAAG,OAAO,SAAS,WAAW,IAAI,OAAO,SAAS,SAAS,KAAK,EAAE;AACxF,QAAM,WAAW,OAAO,YAAY,SAAY,cAAc,OAAO,OAAO,OAAO,CAAC,MAAM;AAC1F,SAAO,KAAK,KAAK,OAAO,EAAE,CAAC,IAAI,OAAO,WAAW,GAAG,QAAQ;AAC9D,CAAC;AAEH,IAAM,OAAO,CAAC,SACZ;EACE,GAAG,KAAK,GAAG,WAAM,KAAK,WAAW;EACjC;EACA;EACA,KAAK,KAAK,GAAG;EACb;EACA;EACA,GAAG,OAAO,QAAQ,KAAK,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE;EACvF;EACA,SAAS,KAAK,GAAG;EACjB,KAAK,IAAI;AAEb,IAAM,cAAc,CAAC,MAAe,MAAc,YAChD;EACE,GAAG,KAAK,GAAG,IAAI,IAAI,WAAM,QAAQ,OAAO;EACxC;EACA;EACA,KAAK,QAAQ,SAAS,GAAG,KAAK,GAAG,IAAI,IAAI,YAAY;EACrD,GAAI,QAAQ,UAAU,CAAC,IAAI,YAAY,GAAG,WAAW,QAAQ,OAAO,CAAC,IAAI,CAAA;EACzE,KAAK,IAAI;AAGN,IAAM,SAAS,OAAO,MAAe,SAAmC;AAE7E,QAAM,OAAO,KAAK,UAAU,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK;AAC1D,QAAM,QAAQ,SAAS,UAAa,KAAK,SAAS,IAAI,IAAI,IAAI;AAC9D,QAAM,OAAO,UAAU,IAAI,OAAO,KAAK,CAAC;AACxC,QAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,MAAI,SAAS,UAAa,SAAS,YAAY,SAAS,QAAQ,SAAS,QAAQ;AAC/E,YAAQ,IAAI,KAAK,IAAI,CAAC;AACtB,WAAO;EACT;AACA,QAAM,UAAU,KAAK,SAAS,IAAI;AAClC,MAAI,CAAC,SAAS;AACZ,YAAQ,MAAM,GAAG,KAAK,GAAG,qBAAqB,KAAK,UAAU,IAAI,CAAC;;EAAO,KAAK,IAAI,CAAC,EAAE;AACrF,WAAO;EACT;AACA,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AAClD,YAAQ,IAAI,YAAY,MAAM,MAAM,OAAO,CAAC;AAC5C,WAAO;EACT;AACA,MAAI;AACJ,MAAI;AACF,aAAS,UAAU;MACjB,MAAM;MACN,kBAAkB;MAClB,QAAQ;MACR,SAAS,OAAO,YACd,OAAO,QAAQ,QAAQ,WAAW,CAAA,CAAE,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM;QAC3D;QACA;UACE,MAAM,OAAO;UACb,GAAI,OAAO,YAAY,SAAY,EAAE,SAAS,OAAO,QAAO,IAAK,CAAA;;OAEpE,CAAC;KAEL;EACH,SAAS,OAAO;AACd,YAAQ,MACN,GAAG,KAAK,GAAG,IAAI,IAAI,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;;EAAO,YAAY,MAAM,MAAM,OAAO,CAAC,EAAE;AAEzH,WAAO;EACT;AACA,SAAO,QAAQ,IAAI,OAAO,QAAQ,OAAO,WAAW;AACtD;AAoCA,IAAM,uBAAkD;EACtD,MAAM,EAAE,MAAM,UAAU,OAAO,UAAU,aAAa,oBAAmB;EACzE,MAAM,EAAE,MAAM,UAAU,OAAO,UAAU,aAAa,qBAAqB,SAAS,YAAW;EAC/F,gBAAgB;IACd,MAAM;IACN,OAAO;IACP,aAAa;;EAEf,aAAa;IACX,MAAM;IACN,OAAO;IACP,aAAa;;EAEf,MAAM,EAAE,MAAM,UAAU,OAAO,UAAU,aAAa,+BAA8B;EACpF,KAAK;IACH,MAAM;IACN,OAAO;IACP,aAAa;IACb,SAAS;;EAEX,gBAAgB;IACd,MAAM;IACN,aACE;;EAEJ,QAAQ;IACN,MAAM;IACN,OAAO;IACP,aAAa;;EAEf,cAAc;IACZ,MAAM;IACN,aAAa;IACb,OAAO;;EAET,oBAAoB;IAClB,MAAM;IACN,aAAa;IACb,OAAO;;EAET,cAAc;IACZ,MAAM;IACN,aAAa;;;AAIjB,IAAM,YAAY,CAAC,WAAqB;AACtC,MAAI,WAAW;AAAO,WAAO;AAC7B,MAAI,WAAW;AAAQ,WAAO,CAAC,UAAsB,QAAQ,IAAI,KAAK,UAAU,KAAK,CAAC;AACtF,SAAO,CAAC,UAAqB;AAC3B,UAAM,KAAK,MAAM,gBAAgB,MAAM,YAAY,cAAc;AACjE,UAAM,KAAK,MAAM,cAAc,YAAY,KAAK,KAAK,MAAM,SAAS;AACpE,UAAM,QAAQ,MAAM,UAAU,UAAU,MAAM,OAAO,KAAK;AAC1D,UAAM,UAAU,MAAM,UAAU,aAAa;AAE7C,UAAM,WAAW,MAAM,UACnB,aAAa,MAAM,QAAQ,cAAc,OAAO,MAAM,GAAG,MAAM,QAAQ,SAAS,GAAG,OAAO,MAAM,QAAQ,eAAe,GAAG,GACxH,MAAM,QAAQ,mBAAmB,OAAO,MAAM,QAAQ,gBAAgB,KAAK,EAC7E,KACA;AACJ,UAAM,SAAS,MAAM,QAAQ,SACzB,WAAW,MAAM,OACd,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,UAAU,GAAG,MAAM,QAAQ,GAAG,KAAK,MAAM,OAAO,EAAE,EACvD,KAAK,IAAI,CAAC,GAAG,MAAM,OAAO,SAAS,IAAI,MAAM,MAAM,OAAO,SAAS,CAAC,MAAM,EAAE,KAC/E;AACJ,YAAQ,IACN,GAAG,MAAM,OAAO,IAAI,MAAM,MAAM,IAAI,MAAM,IAAI,IAAI,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM,UAAU,KAAK,EAAE,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,EAAE;EAE3I;AACF;AAEA,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,WAAW,QAAQ;AA+BtC,IAAM,aAAa,OAAO,MAAc,QAA0C;AAChF,MAAI,SAAS,IAAI;AAAM,WAAO;AAC9B,QAAM,YAAY,gCAAgC,IAAI;AACtD,MAAI;AAGF,QAAI;AACJ,QAAI;AACF,YAAO,MAAM,OAAO;IACtB,QAAQ;AACN,YAAM,cAAc,cAAc,QAAQ,QAAQ,IAAG,GAAI,cAAc,CAAC;AACxE,YAAO,MAAM,OAAO,cAAc,YAAY,QAAQ,SAAS,CAAC,EAAE;IAGpE;AACA,QAAI,CAAC,IAAI;AAAa,YAAM,IAAI,MAAM,GAAG,SAAS,yBAAyB;AAC3E,WAAO,IAAI;EACb,SAAS,OAAO;AACd,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,UAAM,IAAI,MACR,wBAAwB,IAAI,MAAM,MAAM,0CAA0C,IAAI,GAAG;EAE7F;AACF;AAEA,IAAM,QAAQ,OACZ,QACA,QACA,WAQsB;AACtB,QAAM,cAAc,mBAAmB,OAAO,WAAW;AACzD,QAAM,UAAU,MAAM,OAAO,OAAO,QAAQ;IAC1C;IACA,UAAU,OAAO;IACjB,MAAM,OAAO;IACb,OAAO,UAAU,OAAO,GAAG;GAC5B;AACD,QAAM,YAAY,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,KAAI,CAAE;AAChF,SAAO,YAAY,SAAS;AAC5B,UAAQ,IAAI,GAAG,OAAO,IAAI,0BAA0B,UAAU,GAAG,EAAE;AACnE,UAAQ,IAAI,GAAG,OAAO,IAAI,gBAAgB,UAAU,GAAG,GAAG,WAAW,SAAS;AAC9E,UAAQ,IACN,GAAG,OAAO,IAAI,WAAW,UAAU,GAAG,GAAG,WAAW,KAAK,OAAO,WAAW,qCAAqC,sCAAiC,GAAG;AAEtJ,UAAQ,IAAI,GAAG,OAAO,IAAI,cAAc,UAAU,GAAG,GAAG,WAAW,KAAK;AACxE,aAAW,QAAQ,OAAO,SAAS,OAAO,KAAK,CAAA;AAC7C,YAAQ,IAAI,GAAG,OAAO,IAAI,IAAI,KAAK,WAAW,YAAY,WAAW,CAAC,EAAE;AAC1E,SAAO;AACT;AAEA,IAAM,cAAc,OAAO,YACzB,IAAI,QAAQ,CAACC,aAAW;AACtB,QAAM,OAAO,YAAW;AACtB;AAAE,YAAyB,eAAe,UAAU,IAAI;AACtD,YAAyB,eAAe,WAAW,IAAI;AACzD,UAAM,QAAQ,WAAW,QAAQ,IAAI,CAAC,MAAM,EAAE,MAAK,CAAE,CAAC;AACtD,IAAAA,SAAQ,CAAC;EACX;AACA,UAAQ,KAAK,UAAU,IAAI;AAC3B,UAAQ,KAAK,WAAW,IAAI;AAC9B,CAAC;AAGI,IAAM,eAAe,CAAC,YAAqC;EAChE,SAAS,aAAa,OAAO,IAAI;EACjC,SAAS,EAAE,GAAG,sBAAsB,GAAI,aAAa,SAAS,OAAO,UAAU,CAAA,EAAG;EAClF,MAAM,IAAI,QAAM;AACd,UAAM,MACJ,OAAO,cAAc,MAAM,OAAO,SAAU,SAAS,OAAO,GAAG,KAAK;AAEtE,QAAI,CAAC,CAAC,UAAU,QAAQ,KAAK,EAAE,SAAS,GAAG,GAAG;AAC5C,cAAQ,MAAM,0CAA0C,GAAG,GAAG;AAC9D,aAAO;IACT;AACA,UAAM,aAAa,SAAS,OAAO,MAAM;AACzC,QAAI,eAAe,QAAW;AAC5B,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAMC,UAAS,YAAY,MAAM,CAAC;AAC5D,eAAO,cAAc,mBACnB,OAAO,eACL,SAAS,OAAO,cAAc,CAAC,KAC/B,QAAQ,IAAI,wBAAwB;AAExC,cAAMC,YACJ,OAAO,YAAY,SAAS,OAAO,WAAW,CAAC,KAAK,QAAQ,IAAI;AAClE,YAAIA,cAAa;AAAW,iBAAO,WAAWA;AAC9C,cAAM,QAAQ,MAAM,WAAW,QAAQ;UACrC,MAAM,CAAC,SAAS,WAAW,MAAM,MAAM;UACvC,OAAO,UAAU,OAAO,OAAO,GAAG;UAClC,GAAI,SAAS,OAAO,YAAY,CAAC,IAAI,EAAE,WAAW,SAAS,OAAO,YAAY,CAAC,EAAC,IAAK,CAAA;UACrF,GAAI,SAAS,OAAO,kBAAkB,CAAC,IACnC,EAAE,iBAAiB,SAAS,OAAO,kBAAkB,CAAC,EAAC,IACvD,CAAA;UACJ,SAAS,CAAC,aAAY;AACpB,gBAAI,OAAO,YAAY;AAAG,sBAAQ,IAAI,KAAK,UAAU,QAAQ,CAAC;;AAE5D,yBAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,SAAS,QAAQ;AAC7D,wBAAQ,IAAI,GAAG,IAAI,0BAA0B,SAAS,GAAG,EAAE;UACjE;SACD;AACD,eAAO,YAAY,CAAC,KAAK,CAAC;MAC5B,SAAS,OAAO;AACd,gBAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,eAAO;MACT;IACF;AACA,QAAI,WAAW,QAAQ;AACrB,cAAQ,MAAM,+DAA+D;AAC7E,aAAO;IACT;AACA,UAAM,OAAO,SAAS,OAAO,IAAI;AACjC,UAAM,WAAW,SAAS,OAAO,WAAW,CAAC,KAAK,QAAQ,IAAI;AAC9D,UAAM,OAAO,SAAS,OAAO,IAAI;AACjC,QAAI;AACJ,QAAI;AACF,kBAAY,MAAM,MAAM,QAAQ,QAAQ;QACtC,aAAa,mBACX,SAAS,OAAO,cAAc,CAAC,KAAK,QAAQ,IAAI,wBAAwB;QAE1E,MAAM,SAAS,SAAY,OAAO,cAAc,OAAO,SAAS,MAAM,EAAE;QACxE,MAAM,SAAS,OAAO,IAAI,KAAK;QAC/B,GAAI,aAAa,SAAY,EAAE,SAAQ,IAAK,CAAA;QAC5C,GAAI,SAAS,SAAY,EAAE,KAAI,IAAK,CAAA;QACpC;OACD;IACH,SAAS,OAAO;AACd,cAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,aAAO;IACT;AACA,WAAO,YAAY,CAAC,SAAS,CAAC;EAChC;;;;AI1XK,IAAM,eAAe;AAYrB,IAAMC,gBAAe,OAAO,UAA6B,CAAC,MAA2B;AAC1F,QAAM,EAAE,MAAM,MAAM,GAAG,KAAK,IAAI;AAChC,QAAM,UAAU,cAAc,IAAI;AAClC,QAAM,YAAY,MAAM,OAAO,SAAS;AAAA,IACtC,MAAM,QAAQ;AAAA,IACd,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,EACvC,CAAC;AACD,SAAO,EAAE,GAAG,WAAW,QAAQ;AACjC;AAEA,IAAM,OAAO,CAAC,UACZ,OAAO,UAAU,WAAW,QAAQ;AAGtC,IAAM,cAAc,CAAC,SAAiB;AACpC,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,SAAO,QAAQ,IACX,EAAE,UAAU,MAAM,UAAU,GAAG,IAC/B,EAAE,UAAU,KAAK,MAAM,GAAG,KAAK,GAAG,UAAU,KAAK,MAAM,QAAQ,CAAC,EAAE;AACxE;AAEA,IAAM,MAAM,CAAC,WACV,SAAS,IACP,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE;AAG1B,IAAM,cAA2B;AAAA,EACtC,MAAM;AAAA,EACN,aAAa;AAAA,EACb,SAAS;AAAA,IACP,eAAe;AAAA,MACb,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aACE;AAAA,IACJ;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,IACf;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aACE;AAAA,IACJ;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aACE;AAAA,IACJ;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aACE;AAAA,IACJ;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,IACf;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,aACE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,QAAQ,CAAC,QAAQ,WAAW;AAC1B,UAAM,QAAQ,KAAK,OAAO,cAAc,CAAC;AACzC,UAAM,OAAO,KAAK,OAAO,aAAa,CAAC;AACvC,UAAM,cAAc,KAAK,OAAO,mBAAmB,CAAC;AACpD,UAAM,aAAa,KAAK,OAAO,aAAa,CAAC,MAAM,cAAc,UAAU;AAC3E,QAAI,CAAC,kBAAkB,SAAS,UAAwB,GAAG;AACzD,YAAM,IAAI,MAAM,gCAAgC,kBAAkB,KAAK,IAAI,CAAC,EAAE;AAAA,IAChF;AACA,UAAM,UAAU,IAAI,KAAK,OAAO,cAAc,CAAC,CAAC;AAChD,UAAM,UAAU,IAAI,KAAK,OAAO,cAAc,CAAC,CAAC;AAChD,WAAO,cAAc;AAAA,MACnB,UAAU;AAAA,QACR;AAAA,QACA,GAAI,QAAQ,EAAE,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC;AAAA,QACzC,GAAI,cAAc,EAAE,aAAa,CAAC,YAAY,WAAW,CAAC,EAAE,IAAI,CAAC;AAAA,QACjE,GAAI,QAAQ,SAAS,IACjB;AAAA,UACE,MAAM;AAAA,YACJ,gBAAgB;AAAA,YAChB,GAAI,QAAQ,SAAS,IAAI,EAAE,gBAAgB,QAAQ,IAAI,CAAC;AAAA,UAC1D;AAAA,QACF,IACA,CAAC;AAAA,QACL,GAAI,OAAO,EAAE,aAAa,CAAC,YAAY,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,QACnD,GAAI,OAAO,aAAa,MAAM,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;AAAA,MAC/D;AAAA,MACA,GAAI,OAAO,gBAAgB,SAAY,EAAE,aAAa,OAAO,YAAY,IAAI,CAAC;AAAA,MAC9E,GAAI,OAAO,aAAa,SAAY,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACrE,GAAI,OAAO,SAAS,SAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,MACzD,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AAAA,EACA,QAAQ,MAAM;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": ["readFile", "resolve", "resolve", "text", "response", "resolve", "readFile", "adminKey", "createServer"]
+}