@directive-run/core 0.8.1 → 0.8.3

package/dist/chunk-GO63IIN5.js

@@ -0,0 +1,2 @@
+async function w(n,i,s){let o,a=new Promise((g,d)=>{o=setTimeout(()=>d(new Error(s)),i);});try{return await Promise.race([n,a])}finally{clearTimeout(o);}}function m(n,i=50){let s=new WeakSet;function o(r){if(r===null)return "null";if(r===void 0)return "undefined";let e=typeof r;if(e==="string")return JSON.stringify(r);if(e==="number"||e==="boolean")return String(r);if(e==="function")return '"[function]"';if(e==="symbol")return '"[symbol]"'}function a(r,e){if(s.has(r))return '"[circular]"';s.add(r);let t=e();return s.delete(r),t}function g(r,e){return a(r,()=>`[${r.map(t=>c(t,e+1)).join(",")}]`)}function d(r,e){return a(r,()=>`{${Object.keys(r).sort().map(f=>`${JSON.stringify(f)}:${c(r[f],e+1)}`).join(",")}}`)}function c(r,e){if(e>i)return '"[max depth exceeded]"';let t=o(r);return t!==void 0?t:Array.isArray(r)?g(r,e):typeof r=="object"?d(r,e):'"[unknown]"'}return c(n,0)}function b(n,i=50){let s=new Set(["__proto__","constructor","prototype"]),o=new WeakSet;function a(r,e){if(o.has(r))return  true;o.add(r);let t=e();return o.delete(r),t}function g(r,e){for(let t of r)if(!c(t,e+1))return  false;return  true}function d(r,e){for(let t of Object.keys(r))if(s.has(t)||!c(r[t],e+1))return  false;return  true}function c(r,e){if(e>i)return  false;if(r==null||typeof r!="object")return  true;let t=r;return Array.isArray(t)?a(t,()=>g(t,e)):a(t,()=>d(t,e))}return c(n,0)}function S(n,i){if(n===i)return  true;if(!n||!i)return  false;let s=Object.keys(n),o=Object.keys(i);if(s.length!==o.length)return  false;for(let a of s)if(n[a]!==i[a])return  false;return  true}function A(n){let i=m(n),s=5381;for(let o=0;o<i.length;o++)s=(s<<5)+s^i.charCodeAt(o);return (s>>>0).toString(16)}function k(n,i=Date.now()){return n.expiresAt!==void 0&&i>n.expiresAt}function x(n,i=Date.now()){if(!n||typeof n!="object")throw new Error("[Directive] Invalid snapshot: expected an object with 'data' and 'createdAt' properties.");if(!("data"in n))throw new Error("[Directive] Invalid snapshot: missing required 'data' property.");if(!("createdAt"in n)||typeof n.createdAt!="number")throw new Error("[Directive] Invalid snapshot: missing or invalid 'createdAt' property (expected number).");if(k(n,i)){let s=new Date(n.expiresAt).toISOString();throw new Error(`[Directive] Snapshot expired at ${s}. Obtain a fresh snapshot from the source.`)}return n.data}function T(n,i){let s=[];function o(e,t,u,f){s.push({path:e,oldValue:t,newValue:u,type:f});}function a(e,t,u){return e==null?(t!=null&&o(u,e,t,"added"),true):t==null?(o(u,e,t,"removed"),true):false}function g(e,t,u){if(e.length!==t.length){o(u,e,t,"changed");return}for(let f=0;f<e.length;f++)c(e[f],t[f],`${u}[${f}]`);}function d(e,t,u){let f=new Set([...Object.keys(e),...Object.keys(t)]);for(let y of f){let l=u?`${u}.${y}`:y;y in e?y in t?c(e[y],t[y],l):o(l,e[y],void 0,"removed"):o(l,void 0,t[y],"added");}}function c(e,t,u){if(!a(e,t,u)){if(typeof e!="object"||typeof t!="object"){Object.is(e,t)||o(u,e,t,"changed");return}if(Array.isArray(e)&&Array.isArray(t)){g(e,t,u);return}d(e,t,u);}}c(n.data,i.data,"");let r=n.version!==i.version&&(n.version!==void 0||i.version!==void 0);return {identical:s.length===0,changes:s,versionChanged:r,oldVersion:n.version,newVersion:i.version}}function v(n){return "signature"in n&&typeof n.signature=="string"}async function D(n,i){let s=m({data:n.data,createdAt:n.createdAt,expiresAt:n.expiresAt,version:n.version,metadata:n.metadata}),o=await p(s,i);return {...n,signature:o,algorithm:"hmac-sha256"}}async function E(n,i){if(!n.signature||n.algorithm!=="hmac-sha256")return  false;let s=m({data:n.data,createdAt:n.createdAt,expiresAt:n.expiresAt,version:n.version,metadata:n.metadata}),o=await p(s,i);return h(n.signature,o)}async function p(n,i){let s=typeof i=="string"?new TextEncoder().encode(i):i,o={name:"HMAC",hash:{name:"SHA-256"}},a=await crypto.subtle.importKey("raw",s,o,false,["sign"]),g=new TextEncoder().encode(n),d=await crypto.subtle.sign("HMAC",a,g);return Array.from(new Uint8Array(d)).map(c=>c.toString(16).padStart(2,"0")).join("")}function h(n,i){if(n.length!==i.length)return  false;let s=0;for(let o=0;o<n.length;o++)s|=n.charCodeAt(o)^i.charCodeAt(o);return s===0}export{w as a,m as b,b as c,S as d,A as e,k as f,x as g,T as h,v as i,D as j,E as k};//# sourceMappingURL=chunk-GO63IIN5.js.map
+//# sourceMappingURL=chunk-GO63IIN5.js.map

package/dist/chunk-GO63IIN5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/utils.ts"],"names":["withTimeout","promise","ms","errorMessage","timeoutId","timeoutPromise","_","reject","stableStringify","value","maxDepth","seen","stringifyPrimitive","val","type","withCircularGuard","obj","fn","result","stringifyArray","depth","v","stringify","stringifyObject","k","primitive","isPrototypeSafe","dangerousKeys","objVal","checkArray","arr","item","check","checkObject","key","shallowEqual","a","b","keysA","keysB","hashObject","str","hash","i","isSnapshotExpired","snapshot","now","validateSnapshot","expiredAt","diffSnapshots","oldSnapshot","newSnapshot","changes","pushChange","path","oldValue","newValue","compareNullish","oldObj","newObj","compareArrays","oldArr","newArr","compare","compareObjects","oldRecord","newRecord","allKeys","childPath","versionChanged","isSignedSnapshot","signSnapshot","secret","payload","signature","hmacSha256","verifySnapshotSignature","signedSnapshot","expectedSignature","timingSafeEqual","message","secretBytes","algorithm","messageBytes"],"mappings":"AAcA,eAAsBA,CAAAA,CACpBC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACY,CACZ,IAAIC,CAAAA,CAEEC,CAAAA,CAAiB,IAAI,OAAA,CAAe,CAACC,CAAAA,CAAGC,CAAAA,GAAW,CACvDH,CAAAA,CAAY,UAAA,CAAW,IAAMG,CAAAA,CAAO,IAAI,KAAA,CAAMJ,CAAY,CAAC,CAAA,CAAGD,CAAE,EAClE,CAAC,CAAA,CAED,GAAI,CACF,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,CAACD,CAAAA,CAASI,CAAc,CAAC,CACrD,CAAA,OAAE,CACA,YAAA,CAAaD,CAAU,EACzB,CACF,CAwBO,SAASI,CAAAA,CAAgBC,CAAAA,CAAgBC,CAAAA,CAAW,EAAA,CAAY,CACrE,IAAMC,CAAAA,CAAO,IAAI,OAAA,CAGjB,SAASC,CAAAA,CAAmBC,CAAAA,CAAkC,CAC5D,GAAIA,CAAAA,GAAQ,IAAA,CAAM,OAAO,MAAA,CACzB,GAAIA,CAAAA,GAAQ,MAAA,CAAW,OAAO,WAAA,CAE9B,IAAMC,CAAAA,CAAO,OAAOD,CAAAA,CACpB,GAAIC,CAAAA,GAAS,QAAA,CAAU,OAAO,IAAA,CAAK,SAAA,CAAUD,CAAG,CAAA,CAChD,GAAIC,CAAAA,GAAS,QAAA,EAAYA,CAAAA,GAAS,SAAA,CAAW,OAAO,MAAA,CAAOD,CAAG,CAAA,CAC9D,GAAIC,CAAAA,GAAS,UAAA,CAAY,OAAO,cAAA,CAChC,GAAIA,CAAAA,GAAS,QAAA,CAAU,OAAO,YAGhC,CAGA,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACQ,CACR,GAAIN,CAAAA,CAAK,GAAA,CAAIK,CAAG,CAAA,CACd,OAAO,cAAA,CAETL,CAAAA,CAAK,GAAA,CAAIK,CAAG,CAAA,CACZ,IAAME,CAAAA,CAASD,CAAAA,EAAG,CAClB,OAAAN,CAAAA,CAAK,MAAA,CAAOK,CAAG,CAAA,CAERE,CACT,CAGA,SAASC,CAAAA,CAAeN,CAAAA,CAAgBO,CAAAA,CAAuB,CAC7D,OAAOL,CAAAA,CAAkBF,CAAAA,CAAK,IAC5B,CAAA,CAAA,EAAIA,CAAAA,CAAI,GAAA,CAAKQ,CAAAA,EAAMC,CAAAA,CAAUD,CAAAA,CAAGD,CAAAA,CAAQ,CAAC,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CACvD,CACF,CAGA,SAASG,CAAAA,CAAgBP,CAAAA,CAA8BI,CAAAA,CAAuB,CAC5E,OAAOL,CAAAA,CAAkBC,CAAAA,CAAK,IAMrB,CAAA,CAAA,EALM,MAAA,CAAO,IAAA,CAAKA,CAAG,CAAA,CAAE,IAAA,EAAK,CAChB,GAAA,CAChBQ,CAAAA,EAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAUA,CAAC,CAAC,CAAA,CAAA,EAAIF,CAAAA,CAAUN,CAAAA,CAAIQ,CAAC,CAAA,CAAGJ,CAAAA,CAAQ,CAAC,CAAC,CAAA,CAC7D,CAAA,CAEiB,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAC3B,CACH,CAGA,SAASE,CAAAA,CAAUT,CAAAA,CAAcO,CAAAA,CAAuB,CACtD,GAAIA,CAAAA,CAAQV,CAAAA,CACV,OAAO,wBAAA,CAGT,IAAMe,CAAAA,CAAYb,CAAAA,CAAmBC,CAAG,CAAA,CACxC,OAAIY,CAAAA,GAAc,MAAA,CACTA,CAAAA,CAGL,KAAA,CAAM,OAAA,CAAQZ,CAAG,CAAA,CACZM,CAAAA,CAAeN,CAAAA,CAAKO,CAAK,CAAA,CAG9B,OAAOP,CAAAA,EAAQ,QAAA,CACVU,CAAAA,CAAgBV,CAAAA,CAAgCO,CAAK,CAAA,CAGvD,aACT,CAEA,OAAOE,CAAAA,CAAUb,CAAAA,CAAO,CAAC,CAC3B,CAUO,SAASiB,CAAAA,CAAgBV,CAAAA,CAAcN,CAAAA,CAAW,EAAA,CAAa,CACpE,IAAMiB,CAAAA,CAAgB,IAAI,GAAA,CAAI,CAAC,WAAA,CAAa,aAAA,CAAe,WAAW,CAAC,CAAA,CACjEhB,CAAAA,CAAO,IAAI,OAAA,CAGjB,SAASI,CAAAA,CACPa,CAAAA,CACAX,CAAAA,CACS,CACT,GAAIN,CAAAA,CAAK,GAAA,CAAIiB,CAAM,CAAA,CAAG,OAAO,KAAA,CAC7BjB,CAAAA,CAAK,GAAA,CAAIiB,CAAM,CAAA,CACf,IAAMV,CAAAA,CAASD,CAAAA,EAAG,CAClB,OAAAN,CAAAA,CAAK,MAAA,CAAOiB,CAAM,CAAA,CAEXV,CACT,CAGA,SAASW,CAAAA,CAAWC,CAAAA,CAAgBV,CAAAA,CAAwB,CAC1D,IAAA,IAAWW,CAAAA,IAAQD,CAAAA,CACjB,GAAI,CAACE,CAAAA,CAAMD,CAAAA,CAAMX,CAAAA,CAAQ,CAAC,CAAA,CACxB,OAAO,MAAA,CAIX,OAAO,KACT,CAGA,SAASa,CAAAA,CAAYL,CAAAA,CAAiCR,CAAAA,CAAwB,CAC5E,IAAA,IAAWc,CAAAA,IAAO,MAAA,CAAO,IAAA,CAAKN,CAAM,CAAA,CAIlC,GAHID,CAAAA,CAAc,GAAA,CAAIO,CAAG,CAAA,EAGrB,CAACF,CAAAA,CAAMJ,CAAAA,CAAOM,CAAG,CAAA,CAAGd,CAAAA,CAAQ,CAAC,CAAA,CAC/B,OAAO,MAAA,CAIX,OAAO,KACT,CAGA,SAASY,CAAAA,CAAMnB,CAAAA,CAAcO,CAAAA,CAAwB,CACnD,GAAIA,CAAAA,CAAQV,CAAAA,CAAU,OAAO,MAAA,CAE7B,GADIG,CAAAA,EAAQ,IAAA,EACR,OAAOA,CAAAA,EAAQ,QAAA,CAAU,OAAO,KAAA,CAEpC,IAAMe,CAAAA,CAASf,CAAAA,CAEf,OAAI,KAAA,CAAM,OAAA,CAAQe,CAAM,CAAA,CACfb,CAAAA,CAAkBa,CAAAA,CAAQ,IAAMC,CAAAA,CAAWD,CAAAA,CAAQR,CAAK,CAAC,CAAA,CAG3DL,CAAAA,CAAkBa,CAAAA,CAAQ,IAAMK,CAAAA,CAAYL,CAAAA,CAAQR,CAAK,CAAC,CACnE,CAEA,OAAOY,CAAAA,CAAMhB,CAAAA,CAAK,CAAC,CACrB,CAUO,SAASmB,CAAAA,CACdC,CAAAA,CACAC,CAAAA,CACS,CACT,GAAID,CAAAA,GAAMC,CAAAA,CAAG,OAAO,KAAA,CACpB,GAAI,CAACD,CAAAA,EAAK,CAACC,CAAAA,CAAG,OAAO,MAAA,CAErB,IAAMC,CAAAA,CAAQ,MAAA,CAAO,IAAA,CAAKF,CAAC,CAAA,CACrBG,CAAAA,CAAQ,MAAA,CAAO,IAAA,CAAKF,CAAC,CAAA,CAE3B,GAAIC,CAAAA,CAAM,MAAA,GAAWC,CAAAA,CAAM,MAAA,CAAQ,OAAO,MAAA,CAE1C,IAAA,IAAWL,CAAAA,IAAOI,CAAAA,CAChB,GAAIF,CAAAA,CAAEF,CAAG,CAAA,GAAMG,CAAAA,CAAEH,CAAG,CAAA,CAAG,OAAO,MAAA,CAGhC,OAAO,KACT,CAkBO,SAASM,CAAAA,CAAW/B,CAAAA,CAAwB,CACjD,IAAMgC,CAAAA,CAAMjC,CAAAA,CAAgBC,CAAK,CAAA,CAC7BiC,CAAAA,CAAO,IAAA,CACX,IAAA,IAASC,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAIF,CAAAA,CAAI,MAAA,CAAQE,CAAAA,EAAAA,CAC9BD,CAAAA,CAAAA,CAASA,CAAAA,EAAQ,CAAA,EAAKA,CAAAA,CAAQD,CAAAA,CAAI,UAAA,CAAWE,CAAC,CAAA,CAGhD,OAAA,CAAQD,CAAAA,GAAS,CAAA,EAAG,QAAA,CAAS,EAAE,CACjC,CAkCO,SAASE,CAAAA,CACdC,CAAAA,CACAC,CAAAA,CAAc,IAAA,CAAK,GAAA,EAAI,CACd,CACT,OAAOD,CAAAA,CAAS,SAAA,GAAc,MAAA,EAAaC,CAAAA,CAAMD,CAAAA,CAAS,SAC5D,CA6BO,SAASE,CAAAA,CACdF,CAAAA,CACAC,CAAAA,CAAc,IAAA,CAAK,GAAA,EAAI,CACpB,CAEH,GAAI,CAACD,CAAAA,EAAY,OAAOA,CAAAA,EAAa,QAAA,CACnC,MAAM,IAAI,KAAA,CACR,0FACF,CAAA,CAEF,GAAI,EAAE,MAAA,GAAUA,CAAAA,CAAAA,CACd,MAAM,IAAI,KAAA,CACR,iEACF,CAAA,CAEF,GAAI,EAAE,WAAA,GAAeA,CAAAA,CAAAA,EAAa,OAAOA,CAAAA,CAAS,SAAA,EAAc,QAAA,CAC9D,MAAM,IAAI,KAAA,CACR,0FACF,CAAA,CAIF,GAAID,CAAAA,CAAkBC,CAAAA,CAAUC,CAAG,CAAA,CAAG,CACpC,IAAME,CAAAA,CAAY,IAAI,IAAA,CAAKH,CAAAA,CAAS,SAAU,CAAA,CAAE,WAAA,EAAY,CAC5D,MAAM,IAAI,KAAA,CACR,CAAA,gCAAA,EAAmCG,CAAS,CAAA,0CAAA,CAC9C,CACF,CACA,OAAOH,CAAAA,CAAS,IAClB,CAqDO,SAASI,CAAAA,CACdC,CAAAA,CACAC,CAAAA,CACc,CACd,IAAMC,CAAAA,CAA+B,EAAC,CAGtC,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACA1C,CAAAA,CACM,CACNsC,CAAAA,CAAQ,IAAA,CAAK,CAAE,IAAA,CAAAE,CAAAA,CAAM,QAAA,CAAAC,CAAAA,CAAU,QAAA,CAAAC,CAAAA,CAAU,IAAA,CAAA1C,CAAK,CAAC,EACjD,CAGA,SAAS2C,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAL,CAAAA,CACS,CACT,OAAII,CAAAA,EAAW,IAAA,EACTC,CAAAA,EAAW,IAAA,EACbN,CAAAA,CAAWC,CAAAA,CAAMI,CAAAA,CAAQC,CAAAA,CAAQ,OAAO,CAAA,CAGnC,IAAA,EAELA,CAAAA,EAAW,IAAA,EACbN,CAAAA,CAAWC,CAAAA,CAAMI,CAAAA,CAAQC,CAAAA,CAAQ,SAAS,CAAA,CAEnC,IAAA,EAGF,KACT,CAGA,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAR,CAAAA,CACM,CACN,GAAIO,CAAAA,CAAO,MAAA,GAAWC,CAAAA,CAAO,MAAA,CAAQ,CACnCT,CAAAA,CAAWC,CAAAA,CAAMO,CAAAA,CAAQC,CAAAA,CAAQ,SAAS,CAAA,CAE1C,MACF,CACA,IAAA,IAASnB,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAIkB,CAAAA,CAAO,MAAA,CAAQlB,CAAAA,EAAAA,CACjCoB,CAAAA,CAAQF,CAAAA,CAAOlB,CAAC,CAAA,CAAGmB,CAAAA,CAAOnB,CAAC,CAAA,CAAG,CAAA,EAAGW,CAAI,CAAA,CAAA,EAAIX,CAAC,CAAA,CAAA,CAAG,EAEjD,CAGA,SAASqB,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAZ,CAAAA,CACM,CACN,IAAMa,CAAAA,CAAU,IAAI,GAAA,CAAI,CACtB,GAAG,MAAA,CAAO,IAAA,CAAKF,CAAS,CAAA,CACxB,GAAG,MAAA,CAAO,IAAA,CAAKC,CAAS,CAC1B,CAAC,CAAA,CAED,IAAA,IAAWhC,CAAAA,IAAOiC,CAAAA,CAAS,CACzB,IAAMC,CAAAA,CAAYd,CAAAA,CAAO,CAAA,EAAGA,CAAI,CAAA,CAAA,EAAIpB,CAAG,CAAA,CAAA,CAAKA,CAAAA,CACtCA,CAAAA,IAAO+B,CAAAA,CAEA/B,CAAAA,IAAOgC,CAAAA,CAGlBH,CAAAA,CAAQE,CAAAA,CAAU/B,CAAG,CAAA,CAAGgC,CAAAA,CAAUhC,CAAG,CAAA,CAAGkC,CAAS,CAAA,CAFjDf,CAAAA,CAAWe,CAAAA,CAAWH,CAAAA,CAAU/B,CAAG,CAAA,CAAG,MAAA,CAAW,SAAS,CAAA,CAF1DmB,CAAAA,CAAWe,CAAAA,CAAW,MAAA,CAAWF,CAAAA,CAAUhC,CAAG,CAAA,CAAG,OAAO,EAM5D,CACF,CAGA,SAAS6B,CAAAA,CAAQL,CAAAA,CAAiBC,CAAAA,CAAiBL,CAAAA,CAAoB,CACrE,GAAI,CAAAG,CAAAA,CAAeC,CAAAA,CAAQC,CAAAA,CAAQL,CAAI,CAAA,CAKvC,CAAA,GAAI,OAAOI,CAAAA,EAAW,QAAA,EAAY,OAAOC,CAAAA,EAAW,QAAA,CAAU,CACvD,MAAA,CAAO,EAAA,CAAGD,CAAAA,CAAQC,CAAM,CAAA,EAC3BN,CAAAA,CAAWC,CAAAA,CAAMI,CAAAA,CAAQC,CAAAA,CAAQ,SAAS,CAAA,CAG5C,MACF,CAGA,GAAI,KAAA,CAAM,OAAA,CAAQD,CAAM,CAAA,EAAK,KAAA,CAAM,OAAA,CAAQC,CAAM,CAAA,CAAG,CAClDC,CAAAA,CAAcF,CAAAA,CAAQC,CAAAA,CAAQL,CAAI,CAAA,CAElC,MACF,CAGAU,CAAAA,CACEN,CAAAA,CACAC,CAAAA,CACAL,CACF,EAAA,CACF,CAGAS,CAAAA,CAAQb,CAAAA,CAAY,IAAA,CAAMC,CAAAA,CAAY,IAAA,CAAM,EAAE,CAAA,CAG9C,IAAMkB,CAAAA,CACJnB,CAAAA,CAAY,OAAA,GAAYC,CAAAA,CAAY,OAAA,GACnCD,CAAAA,CAAY,OAAA,GAAY,MAAA,EAAaC,CAAAA,CAAY,OAAA,GAAY,MAAA,CAAA,CAEhE,OAAO,CACL,SAAA,CAAWC,CAAAA,CAAQ,MAAA,GAAW,CAAA,CAC9B,OAAA,CAAAA,CAAAA,CACA,cAAA,CAAAiB,CAAAA,CACA,UAAA,CAAYnB,CAAAA,CAAY,OAAA,CACxB,UAAA,CAAYC,CAAAA,CAAY,OAC1B,CACF,CAwBO,SAASmB,CAAAA,CACdzB,CAAAA,CAC+B,CAC/B,OAAO,WAAA,GAAeA,CAAAA,EAAY,OAAOA,CAAAA,CAAS,SAAA,EAAc,QAClE,CAoCA,eAAsB0B,CAAAA,CACpB1B,CAAAA,CACA2B,CAAAA,CAC4B,CAE5B,IAAMC,CAAAA,CAAUjE,CAAAA,CAAgB,CAC9B,IAAA,CAAMqC,CAAAA,CAAS,IAAA,CACf,SAAA,CAAWA,CAAAA,CAAS,SAAA,CACpB,SAAA,CAAWA,CAAAA,CAAS,SAAA,CACpB,OAAA,CAASA,CAAAA,CAAS,OAAA,CAClB,QAAA,CAAUA,CAAAA,CAAS,QACrB,CAAC,CAAA,CAEK6B,CAAAA,CAAY,MAAMC,CAAAA,CAAWF,CAAAA,CAASD,CAAM,CAAA,CAElD,OAAO,CACL,GAAG3B,CAAAA,CACH,SAAA,CAAA6B,CAAAA,CACA,SAAA,CAAW,aACb,CACF,CA8BA,eAAsBE,CAAAA,CACpBC,CAAAA,CACAL,CAAAA,CACkB,CAClB,GAAI,CAACK,CAAAA,CAAe,SAAA,EAAaA,CAAAA,CAAe,SAAA,GAAc,aAAA,CAC5D,OAAO,MAAA,CAIT,IAAMJ,CAAAA,CAAUjE,CAAAA,CAAgB,CAC9B,IAAA,CAAMqE,CAAAA,CAAe,IAAA,CACrB,SAAA,CAAWA,CAAAA,CAAe,SAAA,CAC1B,SAAA,CAAWA,CAAAA,CAAe,SAAA,CAC1B,OAAA,CAASA,CAAAA,CAAe,OAAA,CACxB,QAAA,CAAUA,CAAAA,CAAe,QAC3B,CAAC,CAAA,CAEKC,CAAAA,CAAoB,MAAMH,CAAAA,CAAWF,CAAAA,CAASD,CAAM,CAAA,CAG1D,OAAOO,CAAAA,CAAgBF,CAAAA,CAAe,SAAA,CAAWC,CAAiB,CACpE,CAMA,eAAeH,CAAAA,CACbK,CAAAA,CACAR,CAAAA,CACiB,CAEjB,IAAMS,CAAAA,CACJ,OAAOT,CAAAA,EAAW,QAAA,CAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAOA,CAAM,CAAA,CAAIA,CAAAA,CAG5DU,CAAAA,CAA8B,CAClC,IAAA,CAAM,MAAA,CACN,IAAA,CAAM,CAAE,IAAA,CAAM,SAAU,CAC1B,CAAA,CACMhD,CAAAA,CAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAC9B,KAAA,CACA+C,CAAAA,CACAC,CAAAA,CACA,KAAA,CACA,CAAC,MAAM,CACT,CAAA,CAGMC,CAAAA,CAAe,IAAI,WAAA,EAAY,CAAE,MAAA,CAAOH,CAAO,CAAA,CAC/CN,CAAAA,CAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAQxC,CAAAA,CAAKiD,CAAY,CAAA,CAGpE,OAAO,KAAA,CAAM,IAAA,CAAK,IAAI,UAAA,CAAWT,CAAS,CAAC,CAAA,CACxC,GAAA,CAAKrC,CAAAA,EAAMA,CAAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,CAAG,GAAG,CAAC,CAAA,CAC1C,IAAA,CAAK,EAAE,CACZ,CAMA,SAAS0C,CAAAA,CAAgB3C,CAAAA,CAAWC,CAAAA,CAAoB,CACtD,GAAID,CAAAA,CAAE,MAAA,GAAWC,CAAAA,CAAE,MAAA,CACjB,OAAO,MAAA,CAGT,IAAInB,CAAAA,CAAS,CAAA,CACb,IAAA,IAASyB,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAIP,CAAAA,CAAE,MAAA,CAAQO,CAAAA,EAAAA,CAC5BzB,CAAAA,EAAUkB,CAAAA,CAAE,UAAA,CAAWO,CAAC,CAAA,CAAIN,CAAAA,CAAE,UAAA,CAAWM,CAAC,CAAA,CAE5C,OAAOzB,CAAAA,GAAW,CACpB","file":"chunk-GO63IIN5.js","sourcesContent":["/**\n * Shared utilities for Directive\n */\n\n/**\n * Execute a promise with a timeout, properly cleaning up the timer.\n * Used by both constraints and resolvers for timeout handling.\n *\n * @param promise - The promise to wrap with a timeout\n * @param ms - Timeout duration in milliseconds\n * @param errorMessage - Error message if timeout occurs\n * @returns The promise result\n * @throws Error if timeout is exceeded\n */\nexport async function withTimeout<T>(\n  promise: Promise<T>,\n  ms: number,\n  errorMessage: string,\n): Promise<T> {\n  let timeoutId: ReturnType<typeof setTimeout>;\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timeoutId = setTimeout(() => reject(new Error(errorMessage)), ms);\n  });\n\n  try {\n    return await Promise.race([promise, timeoutPromise]);\n  } finally {\n    clearTimeout(timeoutId!);\n  }\n}\n\n/**\n * Normalize an error to an Error instance.\n * Ensures consistent error handling throughout the library.\n *\n * @param error - The error to normalize (can be anything)\n * @returns An Error instance\n */\nexport function normalizeError(error: unknown): Error {\n  if (error instanceof Error) {\n    return error;\n  }\n  return new Error(String(error));\n}\n\n/**\n * Create a stable JSON string with sorted keys.\n * Handles circular references and deeply nested objects safely.\n *\n * @param value - The value to stringify\n * @param maxDepth - Maximum nesting depth (default: 50)\n * @returns A stable JSON string\n */\nexport function stableStringify(value: unknown, maxDepth = 50): string {\n  const seen = new WeakSet();\n\n  /** Stringify a primitive value (null, undefined, string, number, boolean, function, symbol). */\n  function stringifyPrimitive(val: unknown): string | undefined {\n    if (val === null) return \"null\";\n    if (val === undefined) return \"undefined\";\n\n    const type = typeof val;\n    if (type === \"string\") return JSON.stringify(val);\n    if (type === \"number\" || type === \"boolean\") return String(val);\n    if (type === \"function\") return '\"[function]\"';\n    if (type === \"symbol\") return '\"[symbol]\"';\n\n    return undefined;\n  }\n\n  /** Guard against circular references using a seen-set, then delegate to fn. */\n  function withCircularGuard(\n    obj: object,\n    fn: () => string,\n  ): string {\n    if (seen.has(obj)) {\n      return '\"[circular]\"';\n    }\n    seen.add(obj);\n    const result = fn();\n    seen.delete(obj);\n\n    return result;\n  }\n\n  /** Stringify an array with circular reference protection. */\n  function stringifyArray(val: unknown[], depth: number): string {\n    return withCircularGuard(val, () =>\n      `[${val.map((v) => stringify(v, depth + 1)).join(\",\")}]`,\n    );\n  }\n\n  /** Stringify an object with sorted keys and circular reference protection. */\n  function stringifyObject(obj: Record<string, unknown>, depth: number): string {\n    return withCircularGuard(obj, () => {\n      const keys = Object.keys(obj).sort();\n      const pairs = keys.map(\n        (k) => `${JSON.stringify(k)}:${stringify(obj[k], depth + 1)}`,\n      );\n\n      return `{${pairs.join(\",\")}}`;\n    });\n  }\n\n  /** Recursively stringify a value with depth limit and circular detection. */\n  function stringify(val: unknown, depth: number): string {\n    if (depth > maxDepth) {\n      return '\"[max depth exceeded]\"';\n    }\n\n    const primitive = stringifyPrimitive(val);\n    if (primitive !== undefined) {\n      return primitive;\n    }\n\n    if (Array.isArray(val)) {\n      return stringifyArray(val, depth);\n    }\n\n    if (typeof val === \"object\") {\n      return stringifyObject(val as Record<string, unknown>, depth);\n    }\n\n    return '\"[unknown]\"';\n  }\n\n  return stringify(value, 0);\n}\n\n/**\n * Check for prototype pollution in an object, including nested objects.\n * Returns true if the object is safe, false if dangerous keys are found.\n *\n * @param obj - The object to check\n * @param maxDepth - Maximum nesting depth to check (default: 50)\n * @returns True if safe, false if dangerous keys found\n */\nexport function isPrototypeSafe(obj: unknown, maxDepth = 50): boolean {\n  const dangerousKeys = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n  const seen = new WeakSet();\n\n  /** Guard against circular references using a seen-set, then delegate to fn. */\n  function withCircularGuard(\n    objVal: object,\n    fn: () => boolean,\n  ): boolean {\n    if (seen.has(objVal)) return true;\n    seen.add(objVal);\n    const result = fn();\n    seen.delete(objVal);\n\n    return result;\n  }\n\n  /** Check array elements for prototype pollution keys. */\n  function checkArray(arr: unknown[], depth: number): boolean {\n    for (const item of arr) {\n      if (!check(item, depth + 1)) {\n        return false;\n      }\n    }\n\n    return true;\n  }\n\n  /** Check object keys and values for prototype pollution. */\n  function checkObject(objVal: Record<string, unknown>, depth: number): boolean {\n    for (const key of Object.keys(objVal)) {\n      if (dangerousKeys.has(key)) {\n        return false;\n      }\n      if (!check(objVal[key], depth + 1)) {\n        return false;\n      }\n    }\n\n    return true;\n  }\n\n  /** Recursively check a value tree for dangerous prototype keys. */\n  function check(val: unknown, depth: number): boolean {\n    if (depth > maxDepth) return false; // Fail safe at max depth - don't assume safety\n    if (val === null || val === undefined) return true;\n    if (typeof val !== \"object\") return true;\n\n    const objVal = val as Record<string, unknown>;\n\n    if (Array.isArray(objVal)) {\n      return withCircularGuard(objVal, () => checkArray(objVal, depth));\n    }\n\n    return withCircularGuard(objVal, () => checkObject(objVal, depth));\n  }\n\n  return check(obj, 0);\n}\n\n/**\n * Shallow equality comparison for objects.\n * Used by React hooks to avoid unnecessary re-renders.\n *\n * @param a - First object\n * @param b - Second object\n * @returns True if objects are shallowly equal\n */\nexport function shallowEqual<T extends Record<string, unknown>>(\n  a: T,\n  b: T,\n): boolean {\n  if (a === b) return true;\n  if (!a || !b) return false;\n\n  const keysA = Object.keys(a);\n  const keysB = Object.keys(b);\n\n  if (keysA.length !== keysB.length) return false;\n\n  for (const key of keysA) {\n    if (a[key] !== b[key]) return false;\n  }\n\n  return true;\n}\n\n/**\n * Generate a simple hash string from an object.\n * Uses djb2 algorithm on the stable stringified value.\n *\n * **Limitations:**\n * - 32-bit hash output means collision probability increases with data set size\n *   (birthday paradox: ~50% collision chance at ~77,000 distinct values)\n * - Suitable for: cache invalidation, change detection, deduplication of small sets\n * - NOT suitable for: cryptographic use, security-sensitive operations, large-scale deduplication\n *\n * For security-sensitive use cases requiring stronger collision resistance,\n * consider using a cryptographic hash like SHA-256.\n *\n * @param value - The value to hash\n * @returns A hex hash string (8 characters, 32 bits)\n */\nexport function hashObject(value: unknown): string {\n  const str = stableStringify(value);\n  let hash = 5381;\n  for (let i = 0; i < str.length; i++) {\n    hash = ((hash << 5) + hash) ^ str.charCodeAt(i);\n  }\n  // Convert to unsigned 32-bit and then to hex\n  return (hash >>> 0).toString(16);\n}\n\n// ============================================================================\n// Distributable Snapshot Utilities\n// ============================================================================\n\n/**\n * Distributable snapshot type for type-safe helper functions.\n */\nexport interface DistributableSnapshotLike<T = Record<string, unknown>> {\n  data: T;\n  createdAt: number;\n  expiresAt?: number;\n  version?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Check if a distributable snapshot has expired.\n * Returns false if the snapshot has no expiresAt field.\n *\n * @example\n * ```typescript\n * const snapshot = system.getDistributableSnapshot({ ttlSeconds: 3600 });\n * // ... later ...\n * if (isSnapshotExpired(snapshot)) {\n *   // Refresh the snapshot\n * }\n * ```\n *\n * @param snapshot - The snapshot to check\n * @param now - Optional current timestamp (defaults to Date.now())\n * @returns True if the snapshot has expired, false otherwise\n */\nexport function isSnapshotExpired<T>(\n  snapshot: DistributableSnapshotLike<T>,\n  now: number = Date.now(),\n): boolean {\n  return snapshot.expiresAt !== undefined && now > snapshot.expiresAt;\n}\n\n/**\n * Validate a distributable snapshot and return its data.\n * Throws if the snapshot is malformed or has expired.\n *\n * @example\n * ```typescript\n * const cached = JSON.parse(await redis.get(`entitlements:${userId}`));\n * try {\n *   const data = validateSnapshot(cached);\n *   // Use data.canUseFeature, etc.\n * } catch (e) {\n *   // Snapshot invalid or expired, refresh it\n * }\n * ```\n *\n * @example Using custom timestamp for testing\n * ```typescript\n * const snapshot = { data: { test: true }, createdAt: 1000, expiresAt: 2000 };\n * validateSnapshot(snapshot, 1500); // Returns { test: true }\n * validateSnapshot(snapshot, 2500); // Throws: Snapshot expired\n * ```\n *\n * @param snapshot - The snapshot to validate\n * @param now - Optional current timestamp (defaults to Date.now())\n * @returns The snapshot data if valid\n * @throws Error if the snapshot is malformed or has expired\n */\nexport function validateSnapshot<T>(\n  snapshot: DistributableSnapshotLike<T>,\n  now: number = Date.now(),\n): T {\n  // Structural validation\n  if (!snapshot || typeof snapshot !== \"object\") {\n    throw new Error(\n      \"[Directive] Invalid snapshot: expected an object with 'data' and 'createdAt' properties.\",\n    );\n  }\n  if (!(\"data\" in snapshot)) {\n    throw new Error(\n      \"[Directive] Invalid snapshot: missing required 'data' property.\",\n    );\n  }\n  if (!(\"createdAt\" in snapshot) || typeof snapshot.createdAt !== \"number\") {\n    throw new Error(\n      \"[Directive] Invalid snapshot: missing or invalid 'createdAt' property (expected number).\",\n    );\n  }\n\n  // Expiration validation\n  if (isSnapshotExpired(snapshot, now)) {\n    const expiredAt = new Date(snapshot.expiresAt!).toISOString();\n    throw new Error(\n      `[Directive] Snapshot expired at ${expiredAt}. Obtain a fresh snapshot from the source.`,\n    );\n  }\n  return snapshot.data;\n}\n\n/**\n * Diff result for a single changed value.\n */\nexport interface SnapshotDiffEntry {\n  /** The key path that changed (e.g., \"canUseApi\" or \"limits.apiCalls\") */\n  path: string;\n  /** The value in the old snapshot */\n  oldValue: unknown;\n  /** The value in the new snapshot */\n  newValue: unknown;\n  /** Type of change: \"added\", \"removed\", or \"changed\" */\n  type: \"added\" | \"removed\" | \"changed\";\n}\n\n/**\n * Result of diffing two snapshots.\n */\nexport interface SnapshotDiff {\n  /** Whether the snapshots are identical */\n  identical: boolean;\n  /** List of changes between snapshots */\n  changes: SnapshotDiffEntry[];\n  /** Whether the version changed (if both have versions) */\n  versionChanged: boolean;\n  /** Old version (if available) */\n  oldVersion?: string;\n  /** New version (if available) */\n  newVersion?: string;\n}\n\n/**\n * Compare two distributable snapshots and return the differences.\n * Useful for debugging, audit logs, and webhook payloads.\n *\n * @example\n * ```typescript\n * const oldSnapshot = system.getDistributableSnapshot({ includeVersion: true });\n * system.dispatch({ type: \"upgradePlan\", plan: \"pro\" });\n * const newSnapshot = system.getDistributableSnapshot({ includeVersion: true });\n *\n * const diff = diffSnapshots(oldSnapshot, newSnapshot);\n * if (!diff.identical) {\n *   console.log(\"Changes:\", diff.changes);\n *   // [{ path: \"canUseApi\", oldValue: false, newValue: true, type: \"changed\" }]\n * }\n * ```\n *\n * @param oldSnapshot - The previous snapshot\n * @param newSnapshot - The new snapshot\n * @returns A diff result with all changes\n */\nexport function diffSnapshots<T = Record<string, unknown>>(\n  oldSnapshot: DistributableSnapshotLike<T>,\n  newSnapshot: DistributableSnapshotLike<T>,\n): SnapshotDiff {\n  const changes: SnapshotDiffEntry[] = [];\n\n  /** Push a change entry to the diff results. */\n  function pushChange(\n    path: string,\n    oldValue: unknown,\n    newValue: unknown,\n    type: SnapshotDiffEntry[\"type\"],\n  ): void {\n    changes.push({ path, oldValue, newValue, type });\n  }\n\n  /** Handle null/undefined comparison cases. Returns true if fully handled. */\n  function compareNullish(\n    oldObj: unknown,\n    newObj: unknown,\n    path: string,\n  ): boolean {\n    if (oldObj === null || oldObj === undefined) {\n      if (newObj !== null && newObj !== undefined) {\n        pushChange(path, oldObj, newObj, \"added\");\n      }\n\n      return true;\n    }\n    if (newObj === null || newObj === undefined) {\n      pushChange(path, oldObj, newObj, \"removed\");\n\n      return true;\n    }\n\n    return false;\n  }\n\n  /** Compare two arrays element by element, recursing into each. */\n  function compareArrays(\n    oldArr: unknown[],\n    newArr: unknown[],\n    path: string,\n  ): void {\n    if (oldArr.length !== newArr.length) {\n      pushChange(path, oldArr, newArr, \"changed\");\n\n      return;\n    }\n    for (let i = 0; i < oldArr.length; i++) {\n      compare(oldArr[i], newArr[i], `${path}[${i}]`);\n    }\n  }\n\n  /** Compare two objects by key union, detecting added/removed/changed. */\n  function compareObjects(\n    oldRecord: Record<string, unknown>,\n    newRecord: Record<string, unknown>,\n    path: string,\n  ): void {\n    const allKeys = new Set([\n      ...Object.keys(oldRecord),\n      ...Object.keys(newRecord),\n    ]);\n\n    for (const key of allKeys) {\n      const childPath = path ? `${path}.${key}` : key;\n      if (!(key in oldRecord)) {\n        pushChange(childPath, undefined, newRecord[key], \"added\");\n      } else if (!(key in newRecord)) {\n        pushChange(childPath, oldRecord[key], undefined, \"removed\");\n      } else {\n        compare(oldRecord[key], newRecord[key], childPath);\n      }\n    }\n  }\n\n  /** Recursively compare two values and record differences. */\n  function compare(oldObj: unknown, newObj: unknown, path: string): void {\n    if (compareNullish(oldObj, newObj, path)) {\n      return;\n    }\n\n    // Handle primitives\n    if (typeof oldObj !== \"object\" || typeof newObj !== \"object\") {\n      if (!Object.is(oldObj, newObj)) {\n        pushChange(path, oldObj, newObj, \"changed\");\n      }\n\n      return;\n    }\n\n    // Handle arrays\n    if (Array.isArray(oldObj) && Array.isArray(newObj)) {\n      compareArrays(oldObj, newObj, path);\n\n      return;\n    }\n\n    // Handle objects\n    compareObjects(\n      oldObj as Record<string, unknown>,\n      newObj as Record<string, unknown>,\n      path,\n    );\n  }\n\n  // Compare data\n  compare(oldSnapshot.data, newSnapshot.data, \"\");\n\n  // Check version change\n  const versionChanged =\n    oldSnapshot.version !== newSnapshot.version &&\n    (oldSnapshot.version !== undefined || newSnapshot.version !== undefined);\n\n  return {\n    identical: changes.length === 0,\n    changes,\n    versionChanged,\n    oldVersion: oldSnapshot.version,\n    newVersion: newSnapshot.version,\n  };\n}\n\n// ============================================================================\n// Snapshot Signing (HMAC)\n// ============================================================================\n\n/**\n * A signed distributable snapshot.\n * Contains the original snapshot plus a cryptographic signature.\n */\nexport interface SignedSnapshot<T = Record<string, unknown>>\n  extends DistributableSnapshotLike<T> {\n  /** HMAC-SHA256 signature in hex format */\n  signature: string;\n  /** Signing algorithm used */\n  algorithm: \"hmac-sha256\";\n}\n\n/**\n * Check if a snapshot is signed.\n *\n * @param snapshot - The snapshot to check\n * @returns True if the snapshot has a signature\n */\nexport function isSignedSnapshot<T>(\n  snapshot: DistributableSnapshotLike<T> | SignedSnapshot<T>,\n): snapshot is SignedSnapshot<T> {\n  return \"signature\" in snapshot && typeof snapshot.signature === \"string\";\n}\n\n/**\n * Sign a distributable snapshot using HMAC-SHA256.\n * Creates a tamper-proof signature that can be verified later.\n *\n * **Security Notes:**\n * - Use a cryptographically random secret of at least 32 bytes\n * - Store the secret securely (environment variable, secrets manager)\n * - Never expose the secret to clients\n * - The signature covers all snapshot fields for integrity\n *\n * @example\n * ```typescript\n * const snapshot = system.getDistributableSnapshot({\n *   includeDerivations: ['canUseFeature', 'limits'],\n *   ttlSeconds: 3600,\n * });\n *\n * // Sign the snapshot (server-side only)\n * const signed = await signSnapshot(snapshot, process.env.SNAPSHOT_SECRET);\n *\n * // Store in JWT, Redis, or send to client\n * const jwt = createJWT({ snapshot: signed });\n *\n * // Later, verify the signature\n * const isValid = await verifySnapshotSignature(signed, process.env.SNAPSHOT_SECRET);\n * if (!isValid) {\n *   throw new Error('Snapshot has been tampered with');\n * }\n * ```\n *\n * @param snapshot - The snapshot to sign\n * @param secret - The HMAC secret (string or Uint8Array)\n * @returns A signed snapshot with the signature attached\n */\nexport async function signSnapshot<T>(\n  snapshot: DistributableSnapshotLike<T>,\n  secret: string | Uint8Array,\n): Promise<SignedSnapshot<T>> {\n  // Create a canonical representation for signing\n  const payload = stableStringify({\n    data: snapshot.data,\n    createdAt: snapshot.createdAt,\n    expiresAt: snapshot.expiresAt,\n    version: snapshot.version,\n    metadata: snapshot.metadata,\n  });\n\n  const signature = await hmacSha256(payload, secret);\n\n  return {\n    ...snapshot,\n    signature,\n    algorithm: \"hmac-sha256\",\n  };\n}\n\n/**\n * Verify the signature of a signed snapshot.\n * Returns true if the signature is valid, false otherwise.\n *\n * **Important:** Always verify signatures before trusting snapshot data,\n * especially if the snapshot was received from an untrusted source (client, cache).\n *\n * @example\n * ```typescript\n * // Receive signed snapshot from client or cache\n * const snapshot = JSON.parse(cachedData);\n *\n * // Verify before using\n * const isValid = await verifySnapshotSignature(snapshot, process.env.SNAPSHOT_SECRET);\n * if (!isValid) {\n *   throw new Error('Invalid snapshot signature - possible tampering');\n * }\n *\n * // Now safe to use snapshot.data\n * if (snapshot.data.canUseFeature.api) {\n *   // Grant access\n * }\n * ```\n *\n * @param signedSnapshot - The signed snapshot to verify\n * @param secret - The HMAC secret (must match the signing secret)\n * @returns True if signature is valid, false otherwise\n */\nexport async function verifySnapshotSignature<T>(\n  signedSnapshot: SignedSnapshot<T>,\n  secret: string | Uint8Array,\n): Promise<boolean> {\n  if (!signedSnapshot.signature || signedSnapshot.algorithm !== \"hmac-sha256\") {\n    return false;\n  }\n\n  // Recreate the canonical payload (same as signing)\n  const payload = stableStringify({\n    data: signedSnapshot.data,\n    createdAt: signedSnapshot.createdAt,\n    expiresAt: signedSnapshot.expiresAt,\n    version: signedSnapshot.version,\n    metadata: signedSnapshot.metadata,\n  });\n\n  const expectedSignature = await hmacSha256(payload, secret);\n\n  // Use timing-safe comparison\n  return timingSafeEqual(signedSnapshot.signature, expectedSignature);\n}\n\n/**\n * Create HMAC-SHA256 signature of a message.\n * Uses Web Crypto API for cross-platform support (Node.js, browsers, Deno, Bun).\n */\nasync function hmacSha256(\n  message: string,\n  secret: string | Uint8Array,\n): Promise<string> {\n  // Convert secret to Uint8Array if string\n  const secretBytes: Uint8Array =\n    typeof secret === \"string\" ? new TextEncoder().encode(secret) : secret;\n\n  // Import key for HMAC\n  const algorithm: HmacImportParams = {\n    name: \"HMAC\",\n    hash: { name: \"SHA-256\" },\n  };\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    secretBytes as unknown as ArrayBuffer,\n    algorithm,\n    false,\n    [\"sign\"],\n  );\n\n  // Sign the message\n  const messageBytes = new TextEncoder().encode(message);\n  const signature = await crypto.subtle.sign(\"HMAC\", key, messageBytes);\n\n  // Convert to hex string\n  return Array.from(new Uint8Array(signature))\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\n/**\n * Timing-safe string comparison to prevent timing attacks.\n * Both strings should be the same length (hex signatures from same algorithm).\n */\nfunction timingSafeEqual(a: string, b: string): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (let i = 0; i < a.length; i++) {\n    result |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  }\n  return result === 0;\n}\n"]}

package/dist/chunk-KQKNE23L.cjs

@@ -0,0 +1,2 @@
+'use strict';async function w(n,i,s){let o,a=new Promise((g,d)=>{o=setTimeout(()=>d(new Error(s)),i);});try{return await Promise.race([n,a])}finally{clearTimeout(o);}}function m(n,i=50){let s=new WeakSet;function o(r){if(r===null)return "null";if(r===void 0)return "undefined";let e=typeof r;if(e==="string")return JSON.stringify(r);if(e==="number"||e==="boolean")return String(r);if(e==="function")return '"[function]"';if(e==="symbol")return '"[symbol]"'}function a(r,e){if(s.has(r))return '"[circular]"';s.add(r);let t=e();return s.delete(r),t}function g(r,e){return a(r,()=>`[${r.map(t=>c(t,e+1)).join(",")}]`)}function d(r,e){return a(r,()=>`{${Object.keys(r).sort().map(f=>`${JSON.stringify(f)}:${c(r[f],e+1)}`).join(",")}}`)}function c(r,e){if(e>i)return '"[max depth exceeded]"';let t=o(r);return t!==void 0?t:Array.isArray(r)?g(r,e):typeof r=="object"?d(r,e):'"[unknown]"'}return c(n,0)}function b(n,i=50){let s=new Set(["__proto__","constructor","prototype"]),o=new WeakSet;function a(r,e){if(o.has(r))return  true;o.add(r);let t=e();return o.delete(r),t}function g(r,e){for(let t of r)if(!c(t,e+1))return  false;return  true}function d(r,e){for(let t of Object.keys(r))if(s.has(t)||!c(r[t],e+1))return  false;return  true}function c(r,e){if(e>i)return  false;if(r==null||typeof r!="object")return  true;let t=r;return Array.isArray(t)?a(t,()=>g(t,e)):a(t,()=>d(t,e))}return c(n,0)}function S(n,i){if(n===i)return  true;if(!n||!i)return  false;let s=Object.keys(n),o=Object.keys(i);if(s.length!==o.length)return  false;for(let a of s)if(n[a]!==i[a])return  false;return  true}function A(n){let i=m(n),s=5381;for(let o=0;o<i.length;o++)s=(s<<5)+s^i.charCodeAt(o);return (s>>>0).toString(16)}function k(n,i=Date.now()){return n.expiresAt!==void 0&&i>n.expiresAt}function x(n,i=Date.now()){if(!n||typeof n!="object")throw new Error("[Directive] Invalid snapshot: expected an object with 'data' and 'createdAt' properties.");if(!("data"in n))throw new Error("[Directive] Invalid snapshot: missing required 'data' property.");if(!("createdAt"in n)||typeof n.createdAt!="number")throw new Error("[Directive] Invalid snapshot: missing or invalid 'createdAt' property (expected number).");if(k(n,i)){let s=new Date(n.expiresAt).toISOString();throw new Error(`[Directive] Snapshot expired at ${s}. Obtain a fresh snapshot from the source.`)}return n.data}function T(n,i){let s=[];function o(e,t,u,f){s.push({path:e,oldValue:t,newValue:u,type:f});}function a(e,t,u){return e==null?(t!=null&&o(u,e,t,"added"),true):t==null?(o(u,e,t,"removed"),true):false}function g(e,t,u){if(e.length!==t.length){o(u,e,t,"changed");return}for(let f=0;f<e.length;f++)c(e[f],t[f],`${u}[${f}]`);}function d(e,t,u){let f=new Set([...Object.keys(e),...Object.keys(t)]);for(let y of f){let l=u?`${u}.${y}`:y;y in e?y in t?c(e[y],t[y],l):o(l,e[y],void 0,"removed"):o(l,void 0,t[y],"added");}}function c(e,t,u){if(!a(e,t,u)){if(typeof e!="object"||typeof t!="object"){Object.is(e,t)||o(u,e,t,"changed");return}if(Array.isArray(e)&&Array.isArray(t)){g(e,t,u);return}d(e,t,u);}}c(n.data,i.data,"");let r=n.version!==i.version&&(n.version!==void 0||i.version!==void 0);return {identical:s.length===0,changes:s,versionChanged:r,oldVersion:n.version,newVersion:i.version}}function v(n){return "signature"in n&&typeof n.signature=="string"}async function D(n,i){let s=m({data:n.data,createdAt:n.createdAt,expiresAt:n.expiresAt,version:n.version,metadata:n.metadata}),o=await p(s,i);return {...n,signature:o,algorithm:"hmac-sha256"}}async function E(n,i){if(!n.signature||n.algorithm!=="hmac-sha256")return  false;let s=m({data:n.data,createdAt:n.createdAt,expiresAt:n.expiresAt,version:n.version,metadata:n.metadata}),o=await p(s,i);return h(n.signature,o)}async function p(n,i){let s=typeof i=="string"?new TextEncoder().encode(i):i,o={name:"HMAC",hash:{name:"SHA-256"}},a=await crypto.subtle.importKey("raw",s,o,false,["sign"]),g=new TextEncoder().encode(n),d=await crypto.subtle.sign("HMAC",a,g);return Array.from(new Uint8Array(d)).map(c=>c.toString(16).padStart(2,"0")).join("")}function h(n,i){if(n.length!==i.length)return  false;let s=0;for(let o=0;o<n.length;o++)s|=n.charCodeAt(o)^i.charCodeAt(o);return s===0}exports.a=w;exports.b=m;exports.c=b;exports.d=S;exports.e=A;exports.f=k;exports.g=x;exports.h=T;exports.i=v;exports.j=D;exports.k=E;//# sourceMappingURL=chunk-KQKNE23L.cjs.map
+//# sourceMappingURL=chunk-KQKNE23L.cjs.map

package/dist/chunk-KQKNE23L.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/utils.ts"],"names":["withTimeout","promise","ms","errorMessage","timeoutId","timeoutPromise","_","reject","stableStringify","value","maxDepth","seen","stringifyPrimitive","val","type","withCircularGuard","obj","fn","result","stringifyArray","depth","v","stringify","stringifyObject","k","primitive","isPrototypeSafe","dangerousKeys","objVal","checkArray","arr","item","check","checkObject","key","shallowEqual","a","b","keysA","keysB","hashObject","str","hash","i","isSnapshotExpired","snapshot","now","validateSnapshot","expiredAt","diffSnapshots","oldSnapshot","newSnapshot","changes","pushChange","path","oldValue","newValue","compareNullish","oldObj","newObj","compareArrays","oldArr","newArr","compare","compareObjects","oldRecord","newRecord","allKeys","childPath","versionChanged","isSignedSnapshot","signSnapshot","secret","payload","signature","hmacSha256","verifySnapshotSignature","signedSnapshot","expectedSignature","timingSafeEqual","message","secretBytes","algorithm","messageBytes"],"mappings":"aAcA,eAAsBA,CAAAA,CACpBC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACY,CACZ,IAAIC,CAAAA,CAEEC,CAAAA,CAAiB,IAAI,OAAA,CAAe,CAACC,CAAAA,CAAGC,CAAAA,GAAW,CACvDH,CAAAA,CAAY,UAAA,CAAW,IAAMG,CAAAA,CAAO,IAAI,KAAA,CAAMJ,CAAY,CAAC,CAAA,CAAGD,CAAE,EAClE,CAAC,CAAA,CAED,GAAI,CACF,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,CAACD,CAAAA,CAASI,CAAc,CAAC,CACrD,CAAA,OAAE,CACA,YAAA,CAAaD,CAAU,EACzB,CACF,CAwBO,SAASI,CAAAA,CAAgBC,CAAAA,CAAgBC,CAAAA,CAAW,EAAA,CAAY,CACrE,IAAMC,CAAAA,CAAO,IAAI,OAAA,CAGjB,SAASC,CAAAA,CAAmBC,CAAAA,CAAkC,CAC5D,GAAIA,CAAAA,GAAQ,IAAA,CAAM,OAAO,MAAA,CACzB,GAAIA,CAAAA,GAAQ,MAAA,CAAW,OAAO,WAAA,CAE9B,IAAMC,CAAAA,CAAO,OAAOD,CAAAA,CACpB,GAAIC,CAAAA,GAAS,QAAA,CAAU,OAAO,IAAA,CAAK,SAAA,CAAUD,CAAG,CAAA,CAChD,GAAIC,CAAAA,GAAS,QAAA,EAAYA,CAAAA,GAAS,SAAA,CAAW,OAAO,MAAA,CAAOD,CAAG,CAAA,CAC9D,GAAIC,CAAAA,GAAS,UAAA,CAAY,OAAO,cAAA,CAChC,GAAIA,CAAAA,GAAS,QAAA,CAAU,OAAO,YAGhC,CAGA,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACQ,CACR,GAAIN,CAAAA,CAAK,GAAA,CAAIK,CAAG,CAAA,CACd,OAAO,cAAA,CAETL,CAAAA,CAAK,GAAA,CAAIK,CAAG,CAAA,CACZ,IAAME,CAAAA,CAASD,CAAAA,EAAG,CAClB,OAAAN,CAAAA,CAAK,MAAA,CAAOK,CAAG,CAAA,CAERE,CACT,CAGA,SAASC,CAAAA,CAAeN,CAAAA,CAAgBO,CAAAA,CAAuB,CAC7D,OAAOL,CAAAA,CAAkBF,CAAAA,CAAK,IAC5B,CAAA,CAAA,EAAIA,CAAAA,CAAI,GAAA,CAAKQ,CAAAA,EAAMC,CAAAA,CAAUD,CAAAA,CAAGD,CAAAA,CAAQ,CAAC,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CACvD,CACF,CAGA,SAASG,CAAAA,CAAgBP,CAAAA,CAA8BI,CAAAA,CAAuB,CAC5E,OAAOL,CAAAA,CAAkBC,CAAAA,CAAK,IAMrB,CAAA,CAAA,EALM,MAAA,CAAO,IAAA,CAAKA,CAAG,CAAA,CAAE,IAAA,EAAK,CAChB,GAAA,CAChBQ,CAAAA,EAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAUA,CAAC,CAAC,CAAA,CAAA,EAAIF,CAAAA,CAAUN,CAAAA,CAAIQ,CAAC,CAAA,CAAGJ,CAAAA,CAAQ,CAAC,CAAC,CAAA,CAC7D,CAAA,CAEiB,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAC3B,CACH,CAGA,SAASE,CAAAA,CAAUT,CAAAA,CAAcO,CAAAA,CAAuB,CACtD,GAAIA,CAAAA,CAAQV,CAAAA,CACV,OAAO,wBAAA,CAGT,IAAMe,CAAAA,CAAYb,CAAAA,CAAmBC,CAAG,CAAA,CACxC,OAAIY,CAAAA,GAAc,MAAA,CACTA,CAAAA,CAGL,KAAA,CAAM,OAAA,CAAQZ,CAAG,CAAA,CACZM,CAAAA,CAAeN,CAAAA,CAAKO,CAAK,CAAA,CAG9B,OAAOP,CAAAA,EAAQ,QAAA,CACVU,CAAAA,CAAgBV,CAAAA,CAAgCO,CAAK,CAAA,CAGvD,aACT,CAEA,OAAOE,CAAAA,CAAUb,CAAAA,CAAO,CAAC,CAC3B,CAUO,SAASiB,CAAAA,CAAgBV,CAAAA,CAAcN,CAAAA,CAAW,EAAA,CAAa,CACpE,IAAMiB,CAAAA,CAAgB,IAAI,GAAA,CAAI,CAAC,WAAA,CAAa,aAAA,CAAe,WAAW,CAAC,CAAA,CACjEhB,CAAAA,CAAO,IAAI,OAAA,CAGjB,SAASI,CAAAA,CACPa,CAAAA,CACAX,CAAAA,CACS,CACT,GAAIN,CAAAA,CAAK,GAAA,CAAIiB,CAAM,CAAA,CAAG,OAAO,KAAA,CAC7BjB,CAAAA,CAAK,GAAA,CAAIiB,CAAM,CAAA,CACf,IAAMV,CAAAA,CAASD,CAAAA,EAAG,CAClB,OAAAN,CAAAA,CAAK,MAAA,CAAOiB,CAAM,CAAA,CAEXV,CACT,CAGA,SAASW,CAAAA,CAAWC,CAAAA,CAAgBV,CAAAA,CAAwB,CAC1D,IAAA,IAAWW,CAAAA,IAAQD,CAAAA,CACjB,GAAI,CAACE,CAAAA,CAAMD,CAAAA,CAAMX,CAAAA,CAAQ,CAAC,CAAA,CACxB,OAAO,MAAA,CAIX,OAAO,KACT,CAGA,SAASa,CAAAA,CAAYL,CAAAA,CAAiCR,CAAAA,CAAwB,CAC5E,IAAA,IAAWc,CAAAA,IAAO,MAAA,CAAO,IAAA,CAAKN,CAAM,CAAA,CAIlC,GAHID,CAAAA,CAAc,GAAA,CAAIO,CAAG,CAAA,EAGrB,CAACF,CAAAA,CAAMJ,CAAAA,CAAOM,CAAG,CAAA,CAAGd,CAAAA,CAAQ,CAAC,CAAA,CAC/B,OAAO,MAAA,CAIX,OAAO,KACT,CAGA,SAASY,CAAAA,CAAMnB,CAAAA,CAAcO,CAAAA,CAAwB,CACnD,GAAIA,CAAAA,CAAQV,CAAAA,CAAU,OAAO,MAAA,CAE7B,GADIG,CAAAA,EAAQ,IAAA,EACR,OAAOA,CAAAA,EAAQ,QAAA,CAAU,OAAO,KAAA,CAEpC,IAAMe,CAAAA,CAASf,CAAAA,CAEf,OAAI,KAAA,CAAM,OAAA,CAAQe,CAAM,CAAA,CACfb,CAAAA,CAAkBa,CAAAA,CAAQ,IAAMC,CAAAA,CAAWD,CAAAA,CAAQR,CAAK,CAAC,CAAA,CAG3DL,CAAAA,CAAkBa,CAAAA,CAAQ,IAAMK,CAAAA,CAAYL,CAAAA,CAAQR,CAAK,CAAC,CACnE,CAEA,OAAOY,CAAAA,CAAMhB,CAAAA,CAAK,CAAC,CACrB,CAUO,SAASmB,CAAAA,CACdC,CAAAA,CACAC,CAAAA,CACS,CACT,GAAID,CAAAA,GAAMC,CAAAA,CAAG,OAAO,KAAA,CACpB,GAAI,CAACD,CAAAA,EAAK,CAACC,CAAAA,CAAG,OAAO,MAAA,CAErB,IAAMC,CAAAA,CAAQ,MAAA,CAAO,IAAA,CAAKF,CAAC,CAAA,CACrBG,CAAAA,CAAQ,MAAA,CAAO,IAAA,CAAKF,CAAC,CAAA,CAE3B,GAAIC,CAAAA,CAAM,MAAA,GAAWC,CAAAA,CAAM,MAAA,CAAQ,OAAO,MAAA,CAE1C,IAAA,IAAWL,CAAAA,IAAOI,CAAAA,CAChB,GAAIF,CAAAA,CAAEF,CAAG,CAAA,GAAMG,CAAAA,CAAEH,CAAG,CAAA,CAAG,OAAO,MAAA,CAGhC,OAAO,KACT,CAkBO,SAASM,CAAAA,CAAW/B,CAAAA,CAAwB,CACjD,IAAMgC,CAAAA,CAAMjC,CAAAA,CAAgBC,CAAK,CAAA,CAC7BiC,CAAAA,CAAO,IAAA,CACX,IAAA,IAASC,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAIF,CAAAA,CAAI,MAAA,CAAQE,CAAAA,EAAAA,CAC9BD,CAAAA,CAAAA,CAASA,CAAAA,EAAQ,CAAA,EAAKA,CAAAA,CAAQD,CAAAA,CAAI,UAAA,CAAWE,CAAC,CAAA,CAGhD,OAAA,CAAQD,CAAAA,GAAS,CAAA,EAAG,QAAA,CAAS,EAAE,CACjC,CAkCO,SAASE,CAAAA,CACdC,CAAAA,CACAC,CAAAA,CAAc,IAAA,CAAK,GAAA,EAAI,CACd,CACT,OAAOD,CAAAA,CAAS,SAAA,GAAc,MAAA,EAAaC,CAAAA,CAAMD,CAAAA,CAAS,SAC5D,CA6BO,SAASE,CAAAA,CACdF,CAAAA,CACAC,CAAAA,CAAc,IAAA,CAAK,GAAA,EAAI,CACpB,CAEH,GAAI,CAACD,CAAAA,EAAY,OAAOA,CAAAA,EAAa,QAAA,CACnC,MAAM,IAAI,KAAA,CACR,0FACF,CAAA,CAEF,GAAI,EAAE,MAAA,GAAUA,CAAAA,CAAAA,CACd,MAAM,IAAI,KAAA,CACR,iEACF,CAAA,CAEF,GAAI,EAAE,WAAA,GAAeA,CAAAA,CAAAA,EAAa,OAAOA,CAAAA,CAAS,SAAA,EAAc,QAAA,CAC9D,MAAM,IAAI,KAAA,CACR,0FACF,CAAA,CAIF,GAAID,CAAAA,CAAkBC,CAAAA,CAAUC,CAAG,CAAA,CAAG,CACpC,IAAME,CAAAA,CAAY,IAAI,IAAA,CAAKH,CAAAA,CAAS,SAAU,CAAA,CAAE,WAAA,EAAY,CAC5D,MAAM,IAAI,KAAA,CACR,CAAA,gCAAA,EAAmCG,CAAS,CAAA,0CAAA,CAC9C,CACF,CACA,OAAOH,CAAAA,CAAS,IAClB,CAqDO,SAASI,CAAAA,CACdC,CAAAA,CACAC,CAAAA,CACc,CACd,IAAMC,CAAAA,CAA+B,EAAC,CAGtC,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAC,CAAAA,CACA1C,CAAAA,CACM,CACNsC,CAAAA,CAAQ,IAAA,CAAK,CAAE,IAAA,CAAAE,CAAAA,CAAM,QAAA,CAAAC,CAAAA,CAAU,QAAA,CAAAC,CAAAA,CAAU,IAAA,CAAA1C,CAAK,CAAC,EACjD,CAGA,SAAS2C,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAL,CAAAA,CACS,CACT,OAAII,CAAAA,EAAW,IAAA,EACTC,CAAAA,EAAW,IAAA,EACbN,CAAAA,CAAWC,CAAAA,CAAMI,CAAAA,CAAQC,CAAAA,CAAQ,OAAO,CAAA,CAGnC,IAAA,EAELA,CAAAA,EAAW,IAAA,EACbN,CAAAA,CAAWC,CAAAA,CAAMI,CAAAA,CAAQC,CAAAA,CAAQ,SAAS,CAAA,CAEnC,IAAA,EAGF,KACT,CAGA,SAASC,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAR,CAAAA,CACM,CACN,GAAIO,CAAAA,CAAO,MAAA,GAAWC,CAAAA,CAAO,MAAA,CAAQ,CACnCT,CAAAA,CAAWC,CAAAA,CAAMO,CAAAA,CAAQC,CAAAA,CAAQ,SAAS,CAAA,CAE1C,MACF,CACA,IAAA,IAASnB,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAIkB,CAAAA,CAAO,MAAA,CAAQlB,CAAAA,EAAAA,CACjCoB,CAAAA,CAAQF,CAAAA,CAAOlB,CAAC,CAAA,CAAGmB,CAAAA,CAAOnB,CAAC,CAAA,CAAG,CAAA,EAAGW,CAAI,CAAA,CAAA,EAAIX,CAAC,CAAA,CAAA,CAAG,EAEjD,CAGA,SAASqB,CAAAA,CACPC,CAAAA,CACAC,CAAAA,CACAZ,CAAAA,CACM,CACN,IAAMa,CAAAA,CAAU,IAAI,GAAA,CAAI,CACtB,GAAG,MAAA,CAAO,IAAA,CAAKF,CAAS,CAAA,CACxB,GAAG,MAAA,CAAO,IAAA,CAAKC,CAAS,CAC1B,CAAC,CAAA,CAED,IAAA,IAAWhC,CAAAA,IAAOiC,CAAAA,CAAS,CACzB,IAAMC,CAAAA,CAAYd,CAAAA,CAAO,CAAA,EAAGA,CAAI,CAAA,CAAA,EAAIpB,CAAG,CAAA,CAAA,CAAKA,CAAAA,CACtCA,CAAAA,IAAO+B,CAAAA,CAEA/B,CAAAA,IAAOgC,CAAAA,CAGlBH,CAAAA,CAAQE,CAAAA,CAAU/B,CAAG,CAAA,CAAGgC,CAAAA,CAAUhC,CAAG,CAAA,CAAGkC,CAAS,CAAA,CAFjDf,CAAAA,CAAWe,CAAAA,CAAWH,CAAAA,CAAU/B,CAAG,CAAA,CAAG,MAAA,CAAW,SAAS,CAAA,CAF1DmB,CAAAA,CAAWe,CAAAA,CAAW,MAAA,CAAWF,CAAAA,CAAUhC,CAAG,CAAA,CAAG,OAAO,EAM5D,CACF,CAGA,SAAS6B,CAAAA,CAAQL,CAAAA,CAAiBC,CAAAA,CAAiBL,CAAAA,CAAoB,CACrE,GAAI,CAAAG,CAAAA,CAAeC,CAAAA,CAAQC,CAAAA,CAAQL,CAAI,CAAA,CAKvC,CAAA,GAAI,OAAOI,CAAAA,EAAW,QAAA,EAAY,OAAOC,CAAAA,EAAW,QAAA,CAAU,CACvD,MAAA,CAAO,EAAA,CAAGD,CAAAA,CAAQC,CAAM,CAAA,EAC3BN,CAAAA,CAAWC,CAAAA,CAAMI,CAAAA,CAAQC,CAAAA,CAAQ,SAAS,CAAA,CAG5C,MACF,CAGA,GAAI,KAAA,CAAM,OAAA,CAAQD,CAAM,CAAA,EAAK,KAAA,CAAM,OAAA,CAAQC,CAAM,CAAA,CAAG,CAClDC,CAAAA,CAAcF,CAAAA,CAAQC,CAAAA,CAAQL,CAAI,CAAA,CAElC,MACF,CAGAU,CAAAA,CACEN,CAAAA,CACAC,CAAAA,CACAL,CACF,EAAA,CACF,CAGAS,CAAAA,CAAQb,CAAAA,CAAY,IAAA,CAAMC,CAAAA,CAAY,IAAA,CAAM,EAAE,CAAA,CAG9C,IAAMkB,CAAAA,CACJnB,CAAAA,CAAY,OAAA,GAAYC,CAAAA,CAAY,OAAA,GACnCD,CAAAA,CAAY,OAAA,GAAY,MAAA,EAAaC,CAAAA,CAAY,OAAA,GAAY,MAAA,CAAA,CAEhE,OAAO,CACL,SAAA,CAAWC,CAAAA,CAAQ,MAAA,GAAW,CAAA,CAC9B,OAAA,CAAAA,CAAAA,CACA,cAAA,CAAAiB,CAAAA,CACA,UAAA,CAAYnB,CAAAA,CAAY,OAAA,CACxB,UAAA,CAAYC,CAAAA,CAAY,OAC1B,CACF,CAwBO,SAASmB,CAAAA,CACdzB,CAAAA,CAC+B,CAC/B,OAAO,WAAA,GAAeA,CAAAA,EAAY,OAAOA,CAAAA,CAAS,SAAA,EAAc,QAClE,CAoCA,eAAsB0B,CAAAA,CACpB1B,CAAAA,CACA2B,CAAAA,CAC4B,CAE5B,IAAMC,CAAAA,CAAUjE,CAAAA,CAAgB,CAC9B,IAAA,CAAMqC,CAAAA,CAAS,IAAA,CACf,SAAA,CAAWA,CAAAA,CAAS,SAAA,CACpB,SAAA,CAAWA,CAAAA,CAAS,SAAA,CACpB,OAAA,CAASA,CAAAA,CAAS,OAAA,CAClB,QAAA,CAAUA,CAAAA,CAAS,QACrB,CAAC,CAAA,CAEK6B,CAAAA,CAAY,MAAMC,CAAAA,CAAWF,CAAAA,CAASD,CAAM,CAAA,CAElD,OAAO,CACL,GAAG3B,CAAAA,CACH,SAAA,CAAA6B,CAAAA,CACA,SAAA,CAAW,aACb,CACF,CA8BA,eAAsBE,CAAAA,CACpBC,CAAAA,CACAL,CAAAA,CACkB,CAClB,GAAI,CAACK,CAAAA,CAAe,SAAA,EAAaA,CAAAA,CAAe,SAAA,GAAc,aAAA,CAC5D,OAAO,MAAA,CAIT,IAAMJ,CAAAA,CAAUjE,CAAAA,CAAgB,CAC9B,IAAA,CAAMqE,CAAAA,CAAe,IAAA,CACrB,SAAA,CAAWA,CAAAA,CAAe,SAAA,CAC1B,SAAA,CAAWA,CAAAA,CAAe,SAAA,CAC1B,OAAA,CAASA,CAAAA,CAAe,OAAA,CACxB,QAAA,CAAUA,CAAAA,CAAe,QAC3B,CAAC,CAAA,CAEKC,CAAAA,CAAoB,MAAMH,CAAAA,CAAWF,CAAAA,CAASD,CAAM,CAAA,CAG1D,OAAOO,CAAAA,CAAgBF,CAAAA,CAAe,SAAA,CAAWC,CAAiB,CACpE,CAMA,eAAeH,CAAAA,CACbK,CAAAA,CACAR,CAAAA,CACiB,CAEjB,IAAMS,CAAAA,CACJ,OAAOT,CAAAA,EAAW,QAAA,CAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAOA,CAAM,CAAA,CAAIA,CAAAA,CAG5DU,CAAAA,CAA8B,CAClC,IAAA,CAAM,MAAA,CACN,IAAA,CAAM,CAAE,IAAA,CAAM,SAAU,CAC1B,CAAA,CACMhD,CAAAA,CAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAC9B,KAAA,CACA+C,CAAAA,CACAC,CAAAA,CACA,KAAA,CACA,CAAC,MAAM,CACT,CAAA,CAGMC,CAAAA,CAAe,IAAI,WAAA,EAAY,CAAE,MAAA,CAAOH,CAAO,CAAA,CAC/CN,CAAAA,CAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAQxC,CAAAA,CAAKiD,CAAY,CAAA,CAGpE,OAAO,KAAA,CAAM,IAAA,CAAK,IAAI,UAAA,CAAWT,CAAS,CAAC,CAAA,CACxC,GAAA,CAAKrC,CAAAA,EAAMA,CAAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,CAAG,GAAG,CAAC,CAAA,CAC1C,IAAA,CAAK,EAAE,CACZ,CAMA,SAAS0C,CAAAA,CAAgB3C,CAAAA,CAAWC,CAAAA,CAAoB,CACtD,GAAID,CAAAA,CAAE,MAAA,GAAWC,CAAAA,CAAE,MAAA,CACjB,OAAO,MAAA,CAGT,IAAInB,CAAAA,CAAS,CAAA,CACb,IAAA,IAASyB,CAAAA,CAAI,CAAA,CAAGA,CAAAA,CAAIP,CAAAA,CAAE,MAAA,CAAQO,CAAAA,EAAAA,CAC5BzB,CAAAA,EAAUkB,CAAAA,CAAE,UAAA,CAAWO,CAAC,CAAA,CAAIN,CAAAA,CAAE,UAAA,CAAWM,CAAC,CAAA,CAE5C,OAAOzB,CAAAA,GAAW,CACpB","file":"chunk-KQKNE23L.cjs","sourcesContent":["/**\n * Shared utilities for Directive\n */\n\n/**\n * Execute a promise with a timeout, properly cleaning up the timer.\n * Used by both constraints and resolvers for timeout handling.\n *\n * @param promise - The promise to wrap with a timeout\n * @param ms - Timeout duration in milliseconds\n * @param errorMessage - Error message if timeout occurs\n * @returns The promise result\n * @throws Error if timeout is exceeded\n */\nexport async function withTimeout<T>(\n  promise: Promise<T>,\n  ms: number,\n  errorMessage: string,\n): Promise<T> {\n  let timeoutId: ReturnType<typeof setTimeout>;\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timeoutId = setTimeout(() => reject(new Error(errorMessage)), ms);\n  });\n\n  try {\n    return await Promise.race([promise, timeoutPromise]);\n  } finally {\n    clearTimeout(timeoutId!);\n  }\n}\n\n/**\n * Normalize an error to an Error instance.\n * Ensures consistent error handling throughout the library.\n *\n * @param error - The error to normalize (can be anything)\n * @returns An Error instance\n */\nexport function normalizeError(error: unknown): Error {\n  if (error instanceof Error) {\n    return error;\n  }\n  return new Error(String(error));\n}\n\n/**\n * Create a stable JSON string with sorted keys.\n * Handles circular references and deeply nested objects safely.\n *\n * @param value - The value to stringify\n * @param maxDepth - Maximum nesting depth (default: 50)\n * @returns A stable JSON string\n */\nexport function stableStringify(value: unknown, maxDepth = 50): string {\n  const seen = new WeakSet();\n\n  /** Stringify a primitive value (null, undefined, string, number, boolean, function, symbol). */\n  function stringifyPrimitive(val: unknown): string | undefined {\n    if (val === null) return \"null\";\n    if (val === undefined) return \"undefined\";\n\n    const type = typeof val;\n    if (type === \"string\") return JSON.stringify(val);\n    if (type === \"number\" || type === \"boolean\") return String(val);\n    if (type === \"function\") return '\"[function]\"';\n    if (type === \"symbol\") return '\"[symbol]\"';\n\n    return undefined;\n  }\n\n  /** Guard against circular references using a seen-set, then delegate to fn. */\n  function withCircularGuard(\n    obj: object,\n    fn: () => string,\n  ): string {\n    if (seen.has(obj)) {\n      return '\"[circular]\"';\n    }\n    seen.add(obj);\n    const result = fn();\n    seen.delete(obj);\n\n    return result;\n  }\n\n  /** Stringify an array with circular reference protection. */\n  function stringifyArray(val: unknown[], depth: number): string {\n    return withCircularGuard(val, () =>\n      `[${val.map((v) => stringify(v, depth + 1)).join(\",\")}]`,\n    );\n  }\n\n  /** Stringify an object with sorted keys and circular reference protection. */\n  function stringifyObject(obj: Record<string, unknown>, depth: number): string {\n    return withCircularGuard(obj, () => {\n      const keys = Object.keys(obj).sort();\n      const pairs = keys.map(\n        (k) => `${JSON.stringify(k)}:${stringify(obj[k], depth + 1)}`,\n      );\n\n      return `{${pairs.join(\",\")}}`;\n    });\n  }\n\n  /** Recursively stringify a value with depth limit and circular detection. */\n  function stringify(val: unknown, depth: number): string {\n    if (depth > maxDepth) {\n      return '\"[max depth exceeded]\"';\n    }\n\n    const primitive = stringifyPrimitive(val);\n    if (primitive !== undefined) {\n      return primitive;\n    }\n\n    if (Array.isArray(val)) {\n      return stringifyArray(val, depth);\n    }\n\n    if (typeof val === \"object\") {\n      return stringifyObject(val as Record<string, unknown>, depth);\n    }\n\n    return '\"[unknown]\"';\n  }\n\n  return stringify(value, 0);\n}\n\n/**\n * Check for prototype pollution in an object, including nested objects.\n * Returns true if the object is safe, false if dangerous keys are found.\n *\n * @param obj - The object to check\n * @param maxDepth - Maximum nesting depth to check (default: 50)\n * @returns True if safe, false if dangerous keys found\n */\nexport function isPrototypeSafe(obj: unknown, maxDepth = 50): boolean {\n  const dangerousKeys = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n  const seen = new WeakSet();\n\n  /** Guard against circular references using a seen-set, then delegate to fn. */\n  function withCircularGuard(\n    objVal: object,\n    fn: () => boolean,\n  ): boolean {\n    if (seen.has(objVal)) return true;\n    seen.add(objVal);\n    const result = fn();\n    seen.delete(objVal);\n\n    return result;\n  }\n\n  /** Check array elements for prototype pollution keys. */\n  function checkArray(arr: unknown[], depth: number): boolean {\n    for (const item of arr) {\n      if (!check(item, depth + 1)) {\n        return false;\n      }\n    }\n\n    return true;\n  }\n\n  /** Check object keys and values for prototype pollution. */\n  function checkObject(objVal: Record<string, unknown>, depth: number): boolean {\n    for (const key of Object.keys(objVal)) {\n      if (dangerousKeys.has(key)) {\n        return false;\n      }\n      if (!check(objVal[key], depth + 1)) {\n        return false;\n      }\n    }\n\n    return true;\n  }\n\n  /** Recursively check a value tree for dangerous prototype keys. */\n  function check(val: unknown, depth: number): boolean {\n    if (depth > maxDepth) return false; // Fail safe at max depth - don't assume safety\n    if (val === null || val === undefined) return true;\n    if (typeof val !== \"object\") return true;\n\n    const objVal = val as Record<string, unknown>;\n\n    if (Array.isArray(objVal)) {\n      return withCircularGuard(objVal, () => checkArray(objVal, depth));\n    }\n\n    return withCircularGuard(objVal, () => checkObject(objVal, depth));\n  }\n\n  return check(obj, 0);\n}\n\n/**\n * Shallow equality comparison for objects.\n * Used by React hooks to avoid unnecessary re-renders.\n *\n * @param a - First object\n * @param b - Second object\n * @returns True if objects are shallowly equal\n */\nexport function shallowEqual<T extends Record<string, unknown>>(\n  a: T,\n  b: T,\n): boolean {\n  if (a === b) return true;\n  if (!a || !b) return false;\n\n  const keysA = Object.keys(a);\n  const keysB = Object.keys(b);\n\n  if (keysA.length !== keysB.length) return false;\n\n  for (const key of keysA) {\n    if (a[key] !== b[key]) return false;\n  }\n\n  return true;\n}\n\n/**\n * Generate a simple hash string from an object.\n * Uses djb2 algorithm on the stable stringified value.\n *\n * **Limitations:**\n * - 32-bit hash output means collision probability increases with data set size\n *   (birthday paradox: ~50% collision chance at ~77,000 distinct values)\n * - Suitable for: cache invalidation, change detection, deduplication of small sets\n * - NOT suitable for: cryptographic use, security-sensitive operations, large-scale deduplication\n *\n * For security-sensitive use cases requiring stronger collision resistance,\n * consider using a cryptographic hash like SHA-256.\n *\n * @param value - The value to hash\n * @returns A hex hash string (8 characters, 32 bits)\n */\nexport function hashObject(value: unknown): string {\n  const str = stableStringify(value);\n  let hash = 5381;\n  for (let i = 0; i < str.length; i++) {\n    hash = ((hash << 5) + hash) ^ str.charCodeAt(i);\n  }\n  // Convert to unsigned 32-bit and then to hex\n  return (hash >>> 0).toString(16);\n}\n\n// ============================================================================\n// Distributable Snapshot Utilities\n// ============================================================================\n\n/**\n * Distributable snapshot type for type-safe helper functions.\n */\nexport interface DistributableSnapshotLike<T = Record<string, unknown>> {\n  data: T;\n  createdAt: number;\n  expiresAt?: number;\n  version?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Check if a distributable snapshot has expired.\n * Returns false if the snapshot has no expiresAt field.\n *\n * @example\n * ```typescript\n * const snapshot = system.getDistributableSnapshot({ ttlSeconds: 3600 });\n * // ... later ...\n * if (isSnapshotExpired(snapshot)) {\n *   // Refresh the snapshot\n * }\n * ```\n *\n * @param snapshot - The snapshot to check\n * @param now - Optional current timestamp (defaults to Date.now())\n * @returns True if the snapshot has expired, false otherwise\n */\nexport function isSnapshotExpired<T>(\n  snapshot: DistributableSnapshotLike<T>,\n  now: number = Date.now(),\n): boolean {\n  return snapshot.expiresAt !== undefined && now > snapshot.expiresAt;\n}\n\n/**\n * Validate a distributable snapshot and return its data.\n * Throws if the snapshot is malformed or has expired.\n *\n * @example\n * ```typescript\n * const cached = JSON.parse(await redis.get(`entitlements:${userId}`));\n * try {\n *   const data = validateSnapshot(cached);\n *   // Use data.canUseFeature, etc.\n * } catch (e) {\n *   // Snapshot invalid or expired, refresh it\n * }\n * ```\n *\n * @example Using custom timestamp for testing\n * ```typescript\n * const snapshot = { data: { test: true }, createdAt: 1000, expiresAt: 2000 };\n * validateSnapshot(snapshot, 1500); // Returns { test: true }\n * validateSnapshot(snapshot, 2500); // Throws: Snapshot expired\n * ```\n *\n * @param snapshot - The snapshot to validate\n * @param now - Optional current timestamp (defaults to Date.now())\n * @returns The snapshot data if valid\n * @throws Error if the snapshot is malformed or has expired\n */\nexport function validateSnapshot<T>(\n  snapshot: DistributableSnapshotLike<T>,\n  now: number = Date.now(),\n): T {\n  // Structural validation\n  if (!snapshot || typeof snapshot !== \"object\") {\n    throw new Error(\n      \"[Directive] Invalid snapshot: expected an object with 'data' and 'createdAt' properties.\",\n    );\n  }\n  if (!(\"data\" in snapshot)) {\n    throw new Error(\n      \"[Directive] Invalid snapshot: missing required 'data' property.\",\n    );\n  }\n  if (!(\"createdAt\" in snapshot) || typeof snapshot.createdAt !== \"number\") {\n    throw new Error(\n      \"[Directive] Invalid snapshot: missing or invalid 'createdAt' property (expected number).\",\n    );\n  }\n\n  // Expiration validation\n  if (isSnapshotExpired(snapshot, now)) {\n    const expiredAt = new Date(snapshot.expiresAt!).toISOString();\n    throw new Error(\n      `[Directive] Snapshot expired at ${expiredAt}. Obtain a fresh snapshot from the source.`,\n    );\n  }\n  return snapshot.data;\n}\n\n/**\n * Diff result for a single changed value.\n */\nexport interface SnapshotDiffEntry {\n  /** The key path that changed (e.g., \"canUseApi\" or \"limits.apiCalls\") */\n  path: string;\n  /** The value in the old snapshot */\n  oldValue: unknown;\n  /** The value in the new snapshot */\n  newValue: unknown;\n  /** Type of change: \"added\", \"removed\", or \"changed\" */\n  type: \"added\" | \"removed\" | \"changed\";\n}\n\n/**\n * Result of diffing two snapshots.\n */\nexport interface SnapshotDiff {\n  /** Whether the snapshots are identical */\n  identical: boolean;\n  /** List of changes between snapshots */\n  changes: SnapshotDiffEntry[];\n  /** Whether the version changed (if both have versions) */\n  versionChanged: boolean;\n  /** Old version (if available) */\n  oldVersion?: string;\n  /** New version (if available) */\n  newVersion?: string;\n}\n\n/**\n * Compare two distributable snapshots and return the differences.\n * Useful for debugging, audit logs, and webhook payloads.\n *\n * @example\n * ```typescript\n * const oldSnapshot = system.getDistributableSnapshot({ includeVersion: true });\n * system.dispatch({ type: \"upgradePlan\", plan: \"pro\" });\n * const newSnapshot = system.getDistributableSnapshot({ includeVersion: true });\n *\n * const diff = diffSnapshots(oldSnapshot, newSnapshot);\n * if (!diff.identical) {\n *   console.log(\"Changes:\", diff.changes);\n *   // [{ path: \"canUseApi\", oldValue: false, newValue: true, type: \"changed\" }]\n * }\n * ```\n *\n * @param oldSnapshot - The previous snapshot\n * @param newSnapshot - The new snapshot\n * @returns A diff result with all changes\n */\nexport function diffSnapshots<T = Record<string, unknown>>(\n  oldSnapshot: DistributableSnapshotLike<T>,\n  newSnapshot: DistributableSnapshotLike<T>,\n): SnapshotDiff {\n  const changes: SnapshotDiffEntry[] = [];\n\n  /** Push a change entry to the diff results. */\n  function pushChange(\n    path: string,\n    oldValue: unknown,\n    newValue: unknown,\n    type: SnapshotDiffEntry[\"type\"],\n  ): void {\n    changes.push({ path, oldValue, newValue, type });\n  }\n\n  /** Handle null/undefined comparison cases. Returns true if fully handled. */\n  function compareNullish(\n    oldObj: unknown,\n    newObj: unknown,\n    path: string,\n  ): boolean {\n    if (oldObj === null || oldObj === undefined) {\n      if (newObj !== null && newObj !== undefined) {\n        pushChange(path, oldObj, newObj, \"added\");\n      }\n\n      return true;\n    }\n    if (newObj === null || newObj === undefined) {\n      pushChange(path, oldObj, newObj, \"removed\");\n\n      return true;\n    }\n\n    return false;\n  }\n\n  /** Compare two arrays element by element, recursing into each. */\n  function compareArrays(\n    oldArr: unknown[],\n    newArr: unknown[],\n    path: string,\n  ): void {\n    if (oldArr.length !== newArr.length) {\n      pushChange(path, oldArr, newArr, \"changed\");\n\n      return;\n    }\n    for (let i = 0; i < oldArr.length; i++) {\n      compare(oldArr[i], newArr[i], `${path}[${i}]`);\n    }\n  }\n\n  /** Compare two objects by key union, detecting added/removed/changed. */\n  function compareObjects(\n    oldRecord: Record<string, unknown>,\n    newRecord: Record<string, unknown>,\n    path: string,\n  ): void {\n    const allKeys = new Set([\n      ...Object.keys(oldRecord),\n      ...Object.keys(newRecord),\n    ]);\n\n    for (const key of allKeys) {\n      const childPath = path ? `${path}.${key}` : key;\n      if (!(key in oldRecord)) {\n        pushChange(childPath, undefined, newRecord[key], \"added\");\n      } else if (!(key in newRecord)) {\n        pushChange(childPath, oldRecord[key], undefined, \"removed\");\n      } else {\n        compare(oldRecord[key], newRecord[key], childPath);\n      }\n    }\n  }\n\n  /** Recursively compare two values and record differences. */\n  function compare(oldObj: unknown, newObj: unknown, path: string): void {\n    if (compareNullish(oldObj, newObj, path)) {\n      return;\n    }\n\n    // Handle primitives\n    if (typeof oldObj !== \"object\" || typeof newObj !== \"object\") {\n      if (!Object.is(oldObj, newObj)) {\n        pushChange(path, oldObj, newObj, \"changed\");\n      }\n\n      return;\n    }\n\n    // Handle arrays\n    if (Array.isArray(oldObj) && Array.isArray(newObj)) {\n      compareArrays(oldObj, newObj, path);\n\n      return;\n    }\n\n    // Handle objects\n    compareObjects(\n      oldObj as Record<string, unknown>,\n      newObj as Record<string, unknown>,\n      path,\n    );\n  }\n\n  // Compare data\n  compare(oldSnapshot.data, newSnapshot.data, \"\");\n\n  // Check version change\n  const versionChanged =\n    oldSnapshot.version !== newSnapshot.version &&\n    (oldSnapshot.version !== undefined || newSnapshot.version !== undefined);\n\n  return {\n    identical: changes.length === 0,\n    changes,\n    versionChanged,\n    oldVersion: oldSnapshot.version,\n    newVersion: newSnapshot.version,\n  };\n}\n\n// ============================================================================\n// Snapshot Signing (HMAC)\n// ============================================================================\n\n/**\n * A signed distributable snapshot.\n * Contains the original snapshot plus a cryptographic signature.\n */\nexport interface SignedSnapshot<T = Record<string, unknown>>\n  extends DistributableSnapshotLike<T> {\n  /** HMAC-SHA256 signature in hex format */\n  signature: string;\n  /** Signing algorithm used */\n  algorithm: \"hmac-sha256\";\n}\n\n/**\n * Check if a snapshot is signed.\n *\n * @param snapshot - The snapshot to check\n * @returns True if the snapshot has a signature\n */\nexport function isSignedSnapshot<T>(\n  snapshot: DistributableSnapshotLike<T> | SignedSnapshot<T>,\n): snapshot is SignedSnapshot<T> {\n  return \"signature\" in snapshot && typeof snapshot.signature === \"string\";\n}\n\n/**\n * Sign a distributable snapshot using HMAC-SHA256.\n * Creates a tamper-proof signature that can be verified later.\n *\n * **Security Notes:**\n * - Use a cryptographically random secret of at least 32 bytes\n * - Store the secret securely (environment variable, secrets manager)\n * - Never expose the secret to clients\n * - The signature covers all snapshot fields for integrity\n *\n * @example\n * ```typescript\n * const snapshot = system.getDistributableSnapshot({\n *   includeDerivations: ['canUseFeature', 'limits'],\n *   ttlSeconds: 3600,\n * });\n *\n * // Sign the snapshot (server-side only)\n * const signed = await signSnapshot(snapshot, process.env.SNAPSHOT_SECRET);\n *\n * // Store in JWT, Redis, or send to client\n * const jwt = createJWT({ snapshot: signed });\n *\n * // Later, verify the signature\n * const isValid = await verifySnapshotSignature(signed, process.env.SNAPSHOT_SECRET);\n * if (!isValid) {\n *   throw new Error('Snapshot has been tampered with');\n * }\n * ```\n *\n * @param snapshot - The snapshot to sign\n * @param secret - The HMAC secret (string or Uint8Array)\n * @returns A signed snapshot with the signature attached\n */\nexport async function signSnapshot<T>(\n  snapshot: DistributableSnapshotLike<T>,\n  secret: string | Uint8Array,\n): Promise<SignedSnapshot<T>> {\n  // Create a canonical representation for signing\n  const payload = stableStringify({\n    data: snapshot.data,\n    createdAt: snapshot.createdAt,\n    expiresAt: snapshot.expiresAt,\n    version: snapshot.version,\n    metadata: snapshot.metadata,\n  });\n\n  const signature = await hmacSha256(payload, secret);\n\n  return {\n    ...snapshot,\n    signature,\n    algorithm: \"hmac-sha256\",\n  };\n}\n\n/**\n * Verify the signature of a signed snapshot.\n * Returns true if the signature is valid, false otherwise.\n *\n * **Important:** Always verify signatures before trusting snapshot data,\n * especially if the snapshot was received from an untrusted source (client, cache).\n *\n * @example\n * ```typescript\n * // Receive signed snapshot from client or cache\n * const snapshot = JSON.parse(cachedData);\n *\n * // Verify before using\n * const isValid = await verifySnapshotSignature(snapshot, process.env.SNAPSHOT_SECRET);\n * if (!isValid) {\n *   throw new Error('Invalid snapshot signature - possible tampering');\n * }\n *\n * // Now safe to use snapshot.data\n * if (snapshot.data.canUseFeature.api) {\n *   // Grant access\n * }\n * ```\n *\n * @param signedSnapshot - The signed snapshot to verify\n * @param secret - The HMAC secret (must match the signing secret)\n * @returns True if signature is valid, false otherwise\n */\nexport async function verifySnapshotSignature<T>(\n  signedSnapshot: SignedSnapshot<T>,\n  secret: string | Uint8Array,\n): Promise<boolean> {\n  if (!signedSnapshot.signature || signedSnapshot.algorithm !== \"hmac-sha256\") {\n    return false;\n  }\n\n  // Recreate the canonical payload (same as signing)\n  const payload = stableStringify({\n    data: signedSnapshot.data,\n    createdAt: signedSnapshot.createdAt,\n    expiresAt: signedSnapshot.expiresAt,\n    version: signedSnapshot.version,\n    metadata: signedSnapshot.metadata,\n  });\n\n  const expectedSignature = await hmacSha256(payload, secret);\n\n  // Use timing-safe comparison\n  return timingSafeEqual(signedSnapshot.signature, expectedSignature);\n}\n\n/**\n * Create HMAC-SHA256 signature of a message.\n * Uses Web Crypto API for cross-platform support (Node.js, browsers, Deno, Bun).\n */\nasync function hmacSha256(\n  message: string,\n  secret: string | Uint8Array,\n): Promise<string> {\n  // Convert secret to Uint8Array if string\n  const secretBytes: Uint8Array =\n    typeof secret === \"string\" ? new TextEncoder().encode(secret) : secret;\n\n  // Import key for HMAC\n  const algorithm: HmacImportParams = {\n    name: \"HMAC\",\n    hash: { name: \"SHA-256\" },\n  };\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    secretBytes as unknown as ArrayBuffer,\n    algorithm,\n    false,\n    [\"sign\"],\n  );\n\n  // Sign the message\n  const messageBytes = new TextEncoder().encode(message);\n  const signature = await crypto.subtle.sign(\"HMAC\", key, messageBytes);\n\n  // Convert to hex string\n  return Array.from(new Uint8Array(signature))\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\n/**\n * Timing-safe string comparison to prevent timing attacks.\n * Both strings should be the same length (hex signatures from same algorithm).\n */\nfunction timingSafeEqual(a: string, b: string): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (let i = 0; i < a.length; i++) {\n    result |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  }\n  return result === 0;\n}\n"]}

package/dist/chunk-LAH2FMON.cjs

@@ -0,0 +1,16 @@
+'use strict';var chunk6WG7FPH7_cjs=require('./chunk-6WG7FPH7.cjs'),chunkPK2EH26L_cjs=require('./chunk-PK2EH26L.cjs'),chunkKQKNE23L_cjs=require('./chunk-KQKNE23L.cjs');var f="::";function R(n){return new Proxy({},{get(e,t){if(typeof t!="symbol"&&!chunkPK2EH26L_cjs.k.has(t))return n.get(t)},set(e,t,o){return typeof t=="symbol"||chunkPK2EH26L_cjs.k.has(t)?false:n.set?n.set(t,o):false},has(e,t){return typeof t=="symbol"||chunkPK2EH26L_cjs.k.has(t)?false:n.has?n.has(t):false},deleteProperty(e,t){return typeof t=="symbol"||chunkPK2EH26L_cjs.k.has(t)?false:n.delete?n.delete(t):false},ownKeys(){return n.ownKeys?n.ownKeys():[]},getOwnPropertyDescriptor(e,t){if(typeof t!="symbol"&&n.has&&typeof t=="string"&&n.has(t))return {configurable:true,enumerable:true}},defineProperty(){return  false},getPrototypeOf(){return null},setPrototypeOf(){return  false}})}var q=new WeakMap,I=new WeakMap,H=new WeakMap,V=new WeakMap,W=new WeakMap,z=new WeakMap;function S(n,e){let t=q.get(n);if(t){let r=t.get(e);if(r)return r}else t=new Map,q.set(n,t);let o=R({get:r=>r==="$store"||r==="$snapshot"?n[r]:n[`${e}${f}${r}`],set:(r,a)=>(n[`${e}${f}${r}`]=a,true),has:r=>`${e}${f}${r}`in n,delete:r=>(delete n[`${e}${f}${r}`],true)});return t.set(e,o),o}function U(n,e,t){let o=I.get(n);if(o)return o;let r=R({get:a=>{if(Object.hasOwn(e,a))return S(n,a)},has:a=>Object.hasOwn(e,a),ownKeys:()=>t()});return I.set(n,r),r}function G(n,e,t){let o=`${e}|${t.join(",")}`,r=W.get(n);if(r){let i=r.get(o);if(i)return i}else r=new Map,W.set(n,r);let a=new Set(t),u=["self",...t],y=R({get:i=>{if(i==="self")return S(n,e);if(a.has(i))return S(n,i);process.env.NODE_ENV!=="production"&&console.warn(`[Directive] Module "${e}" accessed undeclared cross-module property "${i}". Add it to crossModuleDeps or use "facts.self.${i}" for own module facts.`);},has:i=>i==="self"||a.has(i),ownKeys:()=>u});return r.set(o,y),y}function A(n,e){let t=V.get(n);if(t){let r=t.get(e);if(r)return r}else t=new Map,V.set(n,t);let o=R({get:r=>n[`${e}${f}${r}`],has:r=>`${e}${f}${r}`in n});return t.set(e,o),o}function L(n,e,t){let o=H.get(n);if(o)return o;let r=R({get:a=>{if(Object.hasOwn(e,a))return A(n,a)},has:a=>Object.hasOwn(e,a),ownKeys:()=>t()});return H.set(n,r),r}function Z(n,e,t){let o=z.get(n);return o||(o=new Map,z.set(n,o)),R({get:r=>{if(!Object.hasOwn(e,r))return;let a=o.get(r);if(a)return a;let u=R({get:y=>i=>{n.dispatch({type:`${r}${f}${y}`,...i});}});return o.set(r,u),u},has:r=>Object.hasOwn(e,r),ownKeys:()=>t()})}function v(n){if(n.includes(".")){let[e,...t]=n.split(".");return `${e}${f}${t.join(f)}`}return n}function F(n){let e={};for(let[t,o]of Object.entries(n)){let r=t.indexOf(f);if(r>0){let a=t.slice(0,r),u=t.slice(r+f.length);e[a]||(e[a]={}),e[a][u]=o;}else e._root||(e._root={}),e._root[t]=o;}return e}function O(n,e,t,o){return t?G(n,e,o):S(n,e)}function M(n,e){return `${n}${f}${e}`}function $(n){return Object.keys(n).length>0?n:void 0}function te(n,e){let t={};for(let[o,r]of Object.entries(n.schema.facts))t[M(e,o)]=r;return t}function re(n,e){if(n.init)return t=>{let o=S(t,e);n.init(o);}}function se(n,e,t,o){if(!n.derive)return;let r={};for(let[a,u]of Object.entries(n.derive))r[M(e,a)]=(y,i)=>{let k=O(y,e,t,o),g=A(i,e);return u(k,g)};return $(r)}function oe(n,e){if(!n.events)return;let t={};for(let[o,r]of Object.entries(n.events))t[M(e,o)]=(a,u)=>{let y=S(a,e);r(y,u);};return $(t)}function ie(n,e,t,o){if(!n.constraints)return;let r={};for(let[a,u]of Object.entries(n.constraints)){let y=u;r[M(e,a)]={...y,deps:y.deps?.map(i=>M(e,i)),after:y.after?.map(i=>i.includes(f)?i:M(e,i)),when:i=>{let k=O(i,e,t,o);return y.when(k)},require:typeof y.require=="function"?i=>{let k=O(i,e,t,o);return y.require(k)}:y.require};}return $(r)}function ae(n,e,t,o){if(!n.resolvers)return;let r={};for(let[u,y]of Object.entries(n.resolvers)){let k=function(g){return {facts:O(g.facts,e,t,o),signal:g.signal}};let i=y;r[M(e,u)]={...i,...i.resolve&&{resolve:async(g,d)=>{await i.resolve(g,k(d));}},...i.resolveBatch&&{resolveBatch:async(g,d)=>{await i.resolveBatch(g,k(d));}},...i.resolveBatchWithResults&&{resolveBatchWithResults:async(g,d)=>i.resolveBatchWithResults(g,k(d))}};}return $(r)}function ce(n,e,t,o){if(!n.effects)return;let r={};for(let[a,u]of Object.entries(n.effects)){let y=u;r[M(e,a)]={...y,run:(i,k)=>{let g=O(i,e,t,o),d=k?O(k,e,t,o):void 0;return y.run(g,d)},deps:y.deps?.map(i=>M(e,i))};}return $(r)}function ue(n,e,t){return {snapshotEvents:t&&!t.has(e)?[]:n.history?.snapshotEvents?.map(o=>M(e,o))}}function T(n){let{mod:e,namespace:t,snapshotModulesSet:o}=n,r=!!(e.crossModuleDeps&&Object.keys(e.crossModuleDeps).length>0),a=r?Object.keys(e.crossModuleDeps):[];return {id:e.id,schema:te(e,t),requirements:e.schema.requirements??{},init:re(e,t),derive:se(e,t,r,a),events:oe(e,t),effects:ce(e,t,r,a),constraints:ie(e,t,r,a),resolvers:ae(e,t,r,a),hooks:e.hooks,history:ue(e,t,o)}}function de(n){let e=Object.keys(n),t=new Set(e),o=new Set,r=new Set,a=[],u=[];function y(i){if(o.has(i))return;if(r.has(i)){let g=u.indexOf(i),d=[...u.slice(g),i].join(" \u2192 ");throw new Error(`[Directive] Circular dependency detected: ${d}. Modules cannot have circular crossModuleDeps. Break the cycle by removing one of the cross-module references.`)}r.add(i),u.push(i);let k=n[i];if(k?.crossModuleDeps)for(let g of Object.keys(k.crossModuleDeps))t.has(g)&&y(g);u.pop(),r.delete(i),o.add(i),a.push(i);}for(let i of e)y(i);return a}function J(n,e){let t=[];for(let o of Object.keys(e.schema.facts))t.push(`${n}${f}${o}`);if(e.schema.derivations)for(let o of Object.keys(e.schema.derivations))t.push(`${n}${f}${o}`);return t}function be(n){if("module"in n){if(!n.module)throw new Error("[Directive] createSystem requires a module. Got: "+typeof n.module);return fe(n)}let e=n;if(Array.isArray(e.modules))throw new Error(`[Directive] createSystem expects modules as an object, not an array.
+
+Instead of:
+  createSystem({ modules: [authModule, dataModule] })
+
+Use:
+  createSystem({ modules: { auth: authModule, data: dataModule } })
+
+Or for a single module:
+  createSystem({ module: counterModule })`);let t=e.modules;if(t&&typeof t=="object"&&"id"in t&&"schema"in t)throw new Error(`[Directive] A single module was passed to \`modules:\`. For a single module, use \`module:\` instead:
+
+  createSystem({ module: myModule })
+
+For multiple modules, wrap in an object:
+  createSystem({ modules: { myName: myModule } })`);return le(e)}function le(n){let e=n.modules,t=new Set(Object.keys(e)),o=typeof n.history=="object"?n.history:null,r=o?.snapshotModules?new Set(o.snapshotModules):null;if(n.tickMs!==void 0&&n.tickMs<=0)throw new Error("[Directive] tickMs must be a positive number");if(process.env.NODE_ENV!=="production"){for(let[s,c]of Object.entries(e))if(c.crossModuleDeps)for(let l of Object.keys(c.crossModuleDeps))l===s?console.warn(`[Directive] Module "${s}" references itself in crossModuleDeps. Use "facts.self" to access own module's facts instead.`):t.has(l)||console.warn(`[Directive] Module "${s}" declares crossModuleDeps.${l}, but no module with namespace "${l}" exists in the system. Available modules: ${[...t].join(", ")}`);}if(process.env.NODE_ENV!=="production"&&o?.snapshotModules)for(let s of o.snapshotModules)t.has(s)||console.warn(`[Directive] history.snapshotModules entry "${s}" doesn't match any module. Available modules: ${[...t].join(", ")}`);let a,u=n.initOrder??"auto";if(Array.isArray(u)){let s=u,c=Object.keys(e).filter(l=>!s.includes(l));if(c.length>0)throw new Error(`[Directive] initOrder is missing modules: ${c.join(", ")}. All modules must be included in the explicit order.`);a=s;}else u==="declaration"?a=Object.keys(e):a=de(e);let{history:y,trace:i,errorBoundary:k}=Q(n);for(let s of Object.keys(e)){if(s.includes(f))throw new Error(`[Directive] Module name "${s}" contains the reserved separator "${f}". Module names cannot contain "${f}".`);let c=e[s];if(c){for(let l of Object.keys(c.schema.facts))if(l.includes(f))throw new Error(`[Directive] Schema key "${l}" in module "${s}" contains the reserved separator "${f}". Schema keys cannot contain "${f}".`)}}let g={names:null};function d(){return g.names===null&&(g.names=Object.keys(e)),g.names}let w=a.map(s=>{let c=e[s];return c?T({mod:c,namespace:s,snapshotModulesSet:r}):null}).filter(s=>s!==null);process.env.NODE_ENV!=="production"&&n.tickMs&&n.tickMs>0&&(w.some(c=>c.events&&Object.keys(c.events).some(l=>l.endsWith(`${f}tick`)))||console.warn(`[Directive] tickMs is set to ${n.tickMs}ms but no module defines a "tick" event handler.`));let D=null,h=null;function _(s){for(let[c,l]of Object.entries(s)){if(chunkPK2EH26L_cjs.k.has(c)){process.env.NODE_ENV!=="production"&&console.warn(`[Directive] initialFacts/hydrate contains blocked namespace "${c}". Skipping.`);continue}if(!t.has(c)){process.env.NODE_ENV!=="production"&&console.warn(`[Directive] initialFacts/hydrate contains unknown namespace "${c}". Available modules: ${[...t].join(", ")}`);continue}if(l&&typeof l=="object"&&!chunkKQKNE23L_cjs.c(l))throw new Error(`[Directive] initialFacts/hydrate for namespace "${c}" contains potentially dangerous keys (__proto__, constructor, or prototype). This may indicate a prototype pollution attack.`);for(let[p,b]of Object.entries(l))chunkPK2EH26L_cjs.k.has(p)||(h.facts[`${c}${f}${p}`]=b);}}h=chunk6WG7FPH7_cjs.y({modules:w,plugins:n.plugins,history:y,trace:i,errorBoundary:k,tickMs:n.tickMs,cloud:n.cloud,onAfterModuleInit:()=>{n.initialFacts&&_(n.initialFacts),D&&(_(D),D=null);}});let x=new Map;for(let s of Object.keys(e)){let c=e[s];c&&x.set(s,J(s,c));}let B=U(h.facts,e,d),ee=L(h.derive,e,d),ne=Z(h,e,d),E=null,j=n.tickMs,N={_mode:"namespaced",facts:B,history:h.history,derive:ee,events:ne,constraints:h.constraints,effects:h.effects,resolvers:h.resolvers,async hydrate(s){if(h.isRunning)throw new Error("[Directive] hydrate() must be called before start(). The system is already running.");let c=await s();c&&typeof c=="object"&&(D=c);},initialize(){h.initialize();},start(){if(h.start(),j&&j>0){let s;for(let c of w)if(c?.events&&(s=Object.keys(c.events).find(l=>l.endsWith(`${f}tick`)),s))break;if(s){let c=s;E=setInterval(()=>{h.dispatch({type:c});},j);}}},stop(){E&&(clearInterval(E),E=null),h.stop();},destroy(){this.stop(),h.destroy();},dispatch(s){h.dispatch(s);},read(s){return h.read(v(s))},subscribe(s,c){let l=[];for(let p of s)if(p.endsWith(".*")){let b=p.slice(0,-2),K=x.get(b);K?l.push(...K):process.env.NODE_ENV!=="production"&&console.warn(`[Directive] subscribe wildcard "${p}" \u2014 namespace "${b}" not found.`);}else l.push(v(p));return h.subscribe(l,c)},subscribeModule(s,c){let l=x.get(s);return !l||l.length===0?(process.env.NODE_ENV!=="production"&&console.warn(`[Directive] subscribeModule("${s}") \u2014 namespace not found. Available: ${[...x.keys()].join(", ")}`),()=>{}):h.subscribe(l,c)},watch(s,c,l){return h.watch(v(s),c,l)},when(s,c){return h.when(()=>s(B),c)},getDistributableSnapshot(s){let c={...s,includeDerivations:s?.includeDerivations?.map(v),excludeDerivations:s?.excludeDerivations?.map(v),includeFacts:s?.includeFacts?.map(v)},l=h.getDistributableSnapshot(c);return {...l,data:F(l.data)}},watchDistributableSnapshot(s,c){let l={...s,includeDerivations:s?.includeDerivations?.map(v),excludeDerivations:s?.excludeDerivations?.map(v),includeFacts:s?.includeFacts?.map(v)};return h.watchDistributableSnapshot(l,p=>{c({...p,data:F(p.data)});})},registerModule(s,c){if(t.has(s))throw new Error(`[Directive] Module namespace "${s}" already exists. Cannot register a duplicate namespace.`);if(s.includes(f))throw new Error(`[Directive] Module name "${s}" contains the reserved separator "${f}".`);if(chunkPK2EH26L_cjs.k.has(s))throw new Error(`[Directive] Module name "${s}" is a blocked property.`);for(let b of Object.keys(c.schema.facts))if(b.includes(f))throw new Error(`[Directive] Schema key "${b}" in module "${s}" contains the reserved separator "${f}".`);let l=c,p=T({mod:l,namespace:s,snapshotModulesSet:r});t.add(s),e[s]=l,g.names=null,x.set(s,J(s,l)),h.registerModule(p);}};return X(N,h),Y(N),N}function Q(n){let e=n.history,t=n.trace,o=n.errorBoundary;if(n.zeroConfig){let r=process.env.NODE_ENV!=="production";e=e??r,o={onConstraintError:"skip",onResolverError:"skip",onEffectError:"skip",onDerivationError:"skip",...n.errorBoundary};}return {history:e,trace:t,errorBoundary:o}}function X(n,e){Object.defineProperties(n,{trace:{get(){return e.trace},enumerable:true,configurable:true},isRunning:{get(){return e.isRunning},enumerable:true,configurable:true},isSettled:{get(){return e.isSettled},enumerable:true,configurable:true},isInitialized:{get(){return e.isInitialized},enumerable:true,configurable:true},isReady:{get(){return e.isReady},enumerable:true,configurable:true}}),n.whenReady=e.whenReady.bind(e),n.batch=e.batch.bind(e),n.onSettledChange=e.onSettledChange.bind(e),n.onHistoryChange=e.onHistoryChange.bind(e),n.inspect=e.inspect.bind(e),n.settle=e.settle.bind(e),n.explain=e.explain.bind(e),n.getSnapshot=e.getSnapshot.bind(e),n.restore=e.restore.bind(e);let t=["dispatch","read","subscribe","watch","when","getDistributableSnapshot","watchDistributableSnapshot"];for(let o of t)o in n||(n[o]=e[o].bind(e));}function Y(n){process.env.NODE_ENV!=="production"&&process.env.NODE_ENV!=="test"&&setTimeout(()=>{!n.isRunning&&!n.isInitialized&&console.warn("[Directive] System created but start() was never called. Constraints, resolvers, and effects will not run until you call system.start().");},0);}function fe(n){let e=n.module;if(!e)throw new Error("[Directive] createSystem requires a module. Got: "+typeof e);if(n.tickMs!==void 0&&n.tickMs<=0)throw new Error("[Directive] tickMs must be a positive number");if(n.initialFacts&&!chunkKQKNE23L_cjs.c(n.initialFacts))throw new Error("[Directive] initialFacts contains potentially dangerous keys (__proto__, constructor, or prototype). This may indicate a prototype pollution attack.");process.env.NODE_ENV!=="production"&&(e.crossModuleDeps&&Object.keys(e.crossModuleDeps).length>0&&console.warn("[Directive] Single module mode ignores crossModuleDeps. Use multiple modules if cross-module access is needed: createSystem({ modules: { ... } })"),n.tickMs&&n.tickMs>0&&(e.events&&"tick"in e.events||console.warn(`[Directive] tickMs is set to ${n.tickMs}ms but module has no "tick" event handler.`)),(typeof n.history=="object"?n.history:null)?.snapshotModules&&console.warn("[Directive] history.snapshotModules has no effect in single-module mode. Use history.snapshotEvents on the module definition instead, or switch to createSystem({ modules: { ... } }) for multi-module filtering."));let{history:t,trace:o,errorBoundary:r}=Q(n),a=null,u=null;u=chunk6WG7FPH7_cjs.y({modules:[{id:e.id,schema:e.schema.facts,requirements:e.schema.requirements,init:e.init,derive:e.derive,events:e.events,effects:e.effects,constraints:e.constraints,resolvers:e.resolvers,hooks:e.hooks,history:e.history}],plugins:n.plugins,history:t,trace:o,errorBoundary:r,tickMs:n.tickMs,cloud:n.cloud,onAfterModuleInit:()=>{if(n.initialFacts)for(let[d,w]of Object.entries(n.initialFacts))chunkPK2EH26L_cjs.k.has(d)||(u.facts[d]=w);if(a){if(!chunkKQKNE23L_cjs.c(a))process.env.NODE_ENV!=="production"&&console.warn("[Directive] hydrate() data contains potentially dangerous keys. Skipping.");else for(let[d,w]of Object.entries(a))chunkPK2EH26L_cjs.k.has(d)||(u.facts[d]=w);a=null;}}});let y=new Proxy({},{get(d,w){if(typeof w!="symbol"&&!chunkPK2EH26L_cjs.k.has(w))return D=>{u.dispatch({type:w,...D});}},has(d,w){return typeof w=="symbol"||chunkPK2EH26L_cjs.k.has(w)?false:e.events?w in e.events:false},ownKeys(){return e.events?Object.keys(e.events):[]},getOwnPropertyDescriptor(d,w){if(typeof w!="symbol"&&!chunkPK2EH26L_cjs.k.has(w)&&e.events&&w in e.events)return {configurable:true,enumerable:true}},set(){return  false},deleteProperty(){return  false},defineProperty(){return  false},getPrototypeOf(){return null},setPrototypeOf(){return  false}}),i=null,k=n.tickMs,g={_mode:"single",facts:u.facts,history:u.history,derive:u.derive,events:y,constraints:u.constraints,effects:u.effects,resolvers:u.resolvers,async hydrate(d){if(u.isRunning)throw new Error("[Directive] hydrate() must be called before start(). The system is already running.");let w=await d();w&&typeof w=="object"&&(a=w);},initialize(){u.initialize();},start(){u.start(),k&&k>0&&e.events&&"tick"in e.events&&(i=setInterval(()=>{u.dispatch({type:"tick"});},k));},stop(){i&&(clearInterval(i),i=null),u.stop();},destroy(){this.stop(),u.destroy();},registerModule(d){u.registerModule({id:d.id,schema:d.schema.facts,requirements:d.schema.requirements,init:d.init,derive:d.derive,events:d.events,effects:d.effects,constraints:d.constraints,resolvers:d.resolvers,hooks:d.hooks,history:d.history});}};return X(g,u),Y(g),g}exports.a=be;//# sourceMappingURL=chunk-LAH2FMON.cjs.map
+//# sourceMappingURL=chunk-LAH2FMON.cjs.map

package/dist/chunk-LAH2FMON.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/system-proxies.ts","../src/core/system-module-transform.ts","../src/core/system.ts"],"names":["SEPARATOR","createHardenedProxy","config","_","prop","BLOCKED_PROPS","value","moduleFactsProxyCache","namespacedFactsProxyCache","namespacedDeriveProxyCache","moduleDeriveProxyCache","crossModuleFactsProxyCache","moduleEventsProxyCache","createModuleFactsProxy","facts","namespace","namespaceCache","cached","proxy","createNamespacedFactsProxy","modulesMap","getModuleNames","createCrossModuleFactsProxy","selfNamespace","depNamespaces","cacheKey","depNamesSet","allKeys","key","createModuleDeriveProxy","derive","createNamespacedDeriveProxy","createNamespacedEventsProxy","engine","moduleEventsProxy","eventName","payload","toInternalKey","rest","denormalizeFlatKeys","flatData","result","sepIndex","ns","local","createScopedFactsProxy","hasCrossModuleDeps","prefixKey","nonEmpty","rec","prefixSchema","mod","prefixInit","moduleFactsProxy","prefixDerive","fn","factsProxy","deriveProxy","prefixEventHandlers","handler","event","prefixConstraints","constraint","constraintDef","dep","prefixResolvers","resolver","wrapCtx","ctx","resolverDef","req","reqs","prefixEffects","effect","effectDef","prev","prevProxy","prefixHistory","snapshotModulesSet","e","prefixModuleDefinition","options","topologicalSort","namespaces","namespacesSet","visited","visiting","path","visit","cycleStart","cycle","depNamespace","collectNamespaceKeys","keys","createSystem","createSingleModuleSystem","namedOptions","mods","createNamespacedSystem","moduleNamespaces","historyConfig","name","orderedNamespaces","initOrder","explicitOrder","missingModules","history","trace","errorBoundary","applyZeroConfigDefaults","moduleNamesCache","flatModules","m","k","hydratedFacts","applyNamespacedFacts","namespacedFacts","isPrototypeSafe","createEngine","namespaceKeysMap","namespacedFactsProxy","namespacedDeriveProxy","namespacedEventsProxy","tickInterval","tickMs","system","loader","tickEventKey","derivationId","ids","listener","internalIds","id","callback","predicate","internalOptions","snapshot","moduleDef","flat","bindEnginePassthroughs","warnIfNotStarted","isDev","overridableMethods","method","eventsProxy"],"mappings":"uKAkBO,IAAMA,CAAAA,CAAY,KAoCzB,SAASC,CAAAA,CAAsCC,EAAgC,CAC7E,OAAO,IAAI,KAAA,CAAM,GAAS,CACxB,GAAA,CAAIC,EAAGC,CAAAA,CAAuB,CAC5B,GAAI,OAAOA,CAAAA,EAAS,QAAA,EAGhB,CAAAC,mBAAAA,CAAc,GAAA,CAAID,CAAI,CAAA,CAI1B,OAAOF,EAAO,GAAA,CAAIE,CAAI,CACxB,CAAA,CACA,GAAA,CAAID,CAAAA,CAAGC,CAAAA,CAAuBE,CAAAA,CAAgB,CAI5C,OAHI,OAAOF,CAAAA,EAAS,UAGhBC,mBAAAA,CAAc,GAAA,CAAID,CAAI,CAAA,CACjB,KAAA,CAGFF,CAAAA,CAAO,GAAA,CAAMA,CAAAA,CAAO,GAAA,CAAIE,EAAME,CAAK,CAAA,CAAI,KAChD,CAAA,CACA,GAAA,CAAIH,EAAGC,CAAAA,CAAuB,CAI5B,OAHI,OAAOA,CAAAA,EAAS,UAGhBC,mBAAAA,CAAc,GAAA,CAAID,CAAI,CAAA,CACjB,KAAA,CAGFF,EAAO,GAAA,CAAMA,CAAAA,CAAO,GAAA,CAAIE,CAAI,CAAA,CAAI,KACzC,EACA,cAAA,CAAeD,CAAAA,CAAGC,EAAuB,CAIvC,OAHI,OAAOA,CAAAA,EAAS,QAAA,EAGhBC,mBAAAA,CAAc,GAAA,CAAID,CAAI,CAAA,CACjB,MAGFF,CAAAA,CAAO,MAAA,CAASA,EAAO,MAAA,CAAOE,CAAI,EAAI,KAC/C,CAAA,CACA,OAAA,EAAU,CACR,OAAOF,CAAAA,CAAO,QAAUA,CAAAA,CAAO,OAAA,GAAY,EAC7C,EACA,wBAAA,CAAyBC,CAAAA,CAAGC,EAAuB,CACjD,GAAI,OAAOA,CAAAA,EAAS,QAAA,EAGhBF,EAAO,GAAA,EAAO,OAAOE,GAAS,QAAA,EAAYF,CAAAA,CAAO,GAAA,CAAIE,CAAI,CAAA,CAC3D,OAAO,CAAE,YAAA,CAAc,IAAA,CAAM,WAAY,IAAK,CAIlD,EACA,cAAA,EAAiB,CACf,OAAO,MACT,CAAA,CACA,cAAA,EAAiB,CACf,OAAO,IACT,EACA,cAAA,EAAiB,CACf,OAAO,MACT,CACF,CAAC,CACH,CAUA,IAAMG,EAAwB,IAAI,OAAA,CAQ5BC,EAA4B,IAAI,OAAA,CAQhCC,EAA6B,IAAI,OAAA,CAQjCC,CAAAA,CAAyB,IAAI,OAAA,CAS7BC,CAAAA,CAA6B,IAAI,OAAA,CAQjCC,CAAAA,CAAyB,IAAI,OAAA,CAsB5B,SAASC,EACdC,CAAAA,CACAC,CAAAA,CACyB,CAEzB,IAAIC,CAAAA,CAAiBT,CAAAA,CAAsB,IAAIO,CAAK,CAAA,CACpD,GAAIE,CAAAA,CAAgB,CAClB,IAAMC,CAAAA,CAASD,CAAAA,CAAe,GAAA,CAAID,CAAS,CAAA,CAC3C,GAAIE,EACF,OAAOA,CAEX,MACED,CAAAA,CAAiB,IAAI,IACrBT,CAAAA,CAAsB,GAAA,CAAIO,CAAAA,CAAOE,CAAc,CAAA,CAGjD,IAAME,EAAQjB,CAAAA,CAA6C,CACzD,IAAMG,CAAAA,EAEAA,CAAAA,GAAS,UAAYA,CAAAA,GAAS,WAAA,CACzBU,EAAMV,CAAI,CAAA,CAGZU,EAAM,CAAA,EAAGC,CAAS,GAAGf,CAAS,CAAA,EAAGI,CAAI,CAAA,CAAE,CAAA,CAEhD,GAAA,CAAK,CAACA,CAAAA,CAAME,CAAAA,IACVQ,EAAM,CAAA,EAAGC,CAAS,GAAGf,CAAS,CAAA,EAAGI,CAAI,CAAA,CAAE,CAAA,CAAIE,CAAAA,CAEpC,IAAA,CAAA,CAET,GAAA,CAAMF,CAAAA,EAAS,GAAGW,CAAS,CAAA,EAAGf,CAAS,CAAA,EAAGI,CAAI,KAAMU,CAAAA,CACpD,MAAA,CAASV,CAAAA,GACP,OAAOU,CAAAA,CAAM,CAAA,EAAGC,CAAS,CAAA,EAAGf,CAAS,GAAGI,CAAI,CAAA,CAAE,EAEvC,IAAA,CAEX,CAAC,EAED,OAAAY,CAAAA,CAAe,IAAID,CAAAA,CAAWG,CAAK,EAE5BA,CACT,CAmBO,SAASC,CAAAA,CACdL,CAAAA,CACAM,CAAAA,CACAC,CAAAA,CACyC,CAEzC,IAAMJ,EAAST,CAAAA,CAA0B,GAAA,CAAIM,CAAK,CAAA,CAClD,GAAIG,EACF,OAAOA,CAAAA,CAGT,IAAMC,CAAAA,CAAQjB,CAAAA,CAA6D,CACzE,IAAMc,CAAAA,EAAc,CAClB,GAAK,MAAA,CAAO,MAAA,CAAOK,EAAYL,CAAS,CAAA,CAIxC,OAAOF,CAAAA,CAAuBC,CAAAA,CAAOC,CAAS,CAChD,CAAA,CACA,GAAA,CAAMA,GAAc,MAAA,CAAO,MAAA,CAAOK,EAAYL,CAAS,CAAA,CACvD,QAAS,IAAMM,CAAAA,EACjB,CAAC,CAAA,CAED,OAAAb,CAAAA,CAA0B,GAAA,CAAIM,EAAOI,CAAK,CAAA,CAEnCA,CACT,CAoBO,SAASI,CAAAA,CACdR,EACAS,CAAAA,CACAC,CAAAA,CACyC,CAGzC,IAAMC,CAAAA,CAAW,GAAGF,CAAa,CAAA,CAAA,EAAIC,CAAAA,CAAc,IAAA,CAAK,GAAG,CAAC,GAGxDR,CAAAA,CAAiBL,CAAAA,CAA2B,IAAIG,CAAK,CAAA,CACzD,GAAIE,CAAAA,CAAgB,CAClB,IAAMC,CAAAA,CAASD,CAAAA,CAAe,GAAA,CAAIS,CAAQ,CAAA,CAC1C,GAAIR,EACF,OAAOA,CAEX,MACED,CAAAA,CAAiB,IAAI,GAAA,CACrBL,CAAAA,CAA2B,GAAA,CAAIG,CAAAA,CAAOE,CAAc,CAAA,CAGtD,IAAMU,EAAc,IAAI,GAAA,CAAIF,CAAa,CAAA,CACnCG,CAAAA,CAAU,CAAC,MAAA,CAAQ,GAAGH,CAAa,EAEnCN,CAAAA,CAAQjB,CAAAA,CAA6D,CACzE,GAAA,CAAM2B,CAAAA,EAAQ,CAEZ,GAAIA,CAAAA,GAAQ,MAAA,CACV,OAAOf,CAAAA,CAAuBC,CAAAA,CAAOS,CAAa,CAAA,CAIpD,GAAIG,EAAY,GAAA,CAAIE,CAAG,EACrB,OAAOf,CAAAA,CAAuBC,CAAAA,CAAOc,CAAG,CAAA,CAItC,OAAA,CAAQ,IAAI,QAAA,GAAa,YAAA,EAC3B,QAAQ,IAAA,CACN,CAAA,oBAAA,EAAuBL,CAAa,CAAA,6CAAA,EAAgDK,CAAG,mDACrCA,CAAG,CAAA,uBAAA,CACvD,EAIJ,CAAA,CACA,GAAA,CAAMA,GAAQA,CAAAA,GAAQ,MAAA,EAAUF,EAAY,GAAA,CAAIE,CAAG,CAAA,CACnD,OAAA,CAAS,IAAMD,CACjB,CAAC,CAAA,CAED,OAAAX,EAAe,GAAA,CAAIS,CAAAA,CAAUP,CAAK,CAAA,CAE3BA,CACT,CAkBO,SAASW,CAAAA,CACdC,CAAAA,CACAf,EACyB,CAEzB,IAAIC,EAAiBN,CAAAA,CAAuB,GAAA,CAAIoB,CAAM,CAAA,CACtD,GAAId,CAAAA,CAAgB,CAClB,IAAMC,CAAAA,CAASD,EAAe,GAAA,CAAID,CAAS,EAC3C,GAAIE,CAAAA,CACF,OAAOA,CAEX,CAAA,KACED,EAAiB,IAAI,GAAA,CACrBN,EAAuB,GAAA,CAAIoB,CAAAA,CAAQd,CAAc,CAAA,CAGnD,IAAME,EAAQjB,CAAAA,CAA6C,CACzD,GAAA,CAAMG,CAAAA,EAAS0B,CAAAA,CAAO,CAAA,EAAGf,CAAS,CAAA,EAAGf,CAAS,GAAGI,CAAI,CAAA,CAAE,EACvD,GAAA,CAAMA,CAAAA,EAAS,CAAA,EAAGW,CAAS,CAAA,EAAGf,CAAS,GAAGI,CAAI,CAAA,CAAA,GAAM0B,CACtD,CAAC,CAAA,CAED,OAAAd,CAAAA,CAAe,GAAA,CAAID,CAAAA,CAAWG,CAAK,CAAA,CAE5BA,CACT,CAmBO,SAASa,CAAAA,CACdD,EACAV,CAAAA,CACAC,CAAAA,CACyC,CAEzC,IAAMJ,CAAAA,CAASR,EAA2B,GAAA,CAAIqB,CAAM,EACpD,GAAIb,CAAAA,CACF,OAAOA,CAAAA,CAGT,IAAMC,EAAQjB,CAAAA,CAA6D,CACzE,GAAA,CAAMc,CAAAA,EAAc,CAClB,GAAK,OAAO,MAAA,CAAOK,CAAAA,CAAYL,CAAS,CAAA,CAIxC,OAAOc,EAAwBC,CAAAA,CAAQf,CAAS,CAClD,CAAA,CACA,GAAA,CAAMA,CAAAA,EAAc,OAAO,MAAA,CAAOK,CAAAA,CAAYL,CAAS,CAAA,CACvD,OAAA,CAAS,IAAMM,CAAAA,EACjB,CAAC,CAAA,CAED,OAAAZ,CAAAA,CAA2B,IAAIqB,CAAAA,CAAQZ,CAAK,EAErCA,CACT,CAmBO,SAASc,CAAAA,CAEdC,CAAAA,CACAb,CAAAA,CACAC,CAAAA,CAC6E,CAE7E,IAAIL,EAAiBJ,CAAAA,CAAuB,GAAA,CAAIqB,CAAM,CAAA,CACtD,OAAKjB,IACHA,CAAAA,CAAiB,IAAI,GAAA,CACrBJ,CAAAA,CAAuB,GAAA,CAAIqB,CAAAA,CAAQjB,CAAc,CAAA,CAAA,CAG5Cf,CAAAA,CAEL,CACA,GAAA,CAAMc,CAAAA,EAAc,CAClB,GAAI,CAAC,MAAA,CAAO,MAAA,CAAOK,CAAAA,CAAYL,CAAS,EACtC,OAIF,IAAME,EAASD,CAAAA,CAAgB,GAAA,CAAID,CAAS,CAAA,CAC5C,GAAIE,CAAAA,CACF,OAAOA,CAAAA,CAIT,IAAMiB,EAAoBjC,CAAAA,CAExB,CACA,IAAMkC,CAAAA,EACIC,CAAAA,EAAsC,CAC5CH,CAAAA,CAAO,QAAA,CAAS,CACd,IAAA,CAAM,CAAA,EAAGlB,CAAS,CAAA,EAAGf,CAAS,GAAGmC,CAAS,CAAA,CAAA,CAC1C,GAAGC,CACL,CAAC,EACH,CAEJ,CAAC,CAAA,CAED,OAAApB,CAAAA,CAAgB,GAAA,CAAID,EAAWmB,CAAiB,CAAA,CAEzCA,CACT,CAAA,CACA,GAAA,CAAMnB,CAAAA,EAAc,MAAA,CAAO,MAAA,CAAOK,CAAAA,CAAYL,CAAS,CAAA,CACvD,OAAA,CAAS,IAAMM,CAAAA,EACjB,CAAC,CACH,CAoBO,SAASgB,CAAAA,CAAcT,CAAAA,CAAqB,CAEjD,GAAIA,CAAAA,CAAI,QAAA,CAAS,GAAG,CAAA,CAAG,CACrB,GAAM,CAACb,CAAAA,CAAW,GAAGuB,CAAI,CAAA,CAAIV,EAAI,KAAA,CAAM,GAAG,EAE1C,OAAO,CAAA,EAAGb,CAAS,CAAA,EAAGf,CAAS,CAAA,EAAGsC,CAAAA,CAAK,IAAA,CAAKtC,CAAS,CAAC,CAAA,CACxD,CAGA,OAAO4B,CACT,CAiBO,SAASW,CAAAA,CACdC,CAAAA,CACyC,CACzC,IAAMC,CAAAA,CAAkD,GAExD,IAAA,GAAW,CAACb,EAAKtB,CAAK,CAAA,GAAK,OAAO,OAAA,CAAQkC,CAAQ,CAAA,CAAG,CACnD,IAAME,CAAAA,CAAWd,EAAI,OAAA,CAAQ5B,CAAS,EACtC,GAAI0C,CAAAA,CAAW,EAAG,CAChB,IAAMC,EAAKf,CAAAA,CAAI,KAAA,CAAM,EAAGc,CAAQ,CAAA,CAC1BE,EAAQhB,CAAAA,CAAI,KAAA,CAAMc,EAAW1C,CAAAA,CAAU,MAAM,CAAA,CAC9CyC,CAAAA,CAAOE,CAAE,CAAA,GACZF,EAAOE,CAAE,CAAA,CAAI,EAAC,CAAA,CAEhBF,CAAAA,CAAOE,CAAE,CAAA,CAAEC,CAAK,CAAA,CAAItC,EACtB,CAAA,KACOmC,CAAAA,CAAO,QACVA,CAAAA,CAAO,KAAA,CAAQ,EAAC,CAAA,CAElBA,CAAAA,CAAO,MAAMb,CAAG,CAAA,CAAItB,EAExB,CAEA,OAAOmC,CACT,CCngBA,SAASI,CAAAA,CACP/B,EACAC,CAAAA,CACA+B,CAAAA,CACAtB,EACyB,CACzB,OAAOsB,CAAAA,CACHxB,CAAAA,CAA4BR,CAAAA,CAAOC,CAAAA,CAAWS,CAAa,CAAA,CAC3DX,CAAAA,CAAuBC,EAAOC,CAAS,CAC7C,CAGA,SAASgC,CAAAA,CAAUhC,CAAAA,CAAmBa,CAAAA,CAAqB,CACzD,OAAO,GAAGb,CAAS,CAAA,EAAGf,CAAS,CAAA,EAAG4B,CAAG,EACvC,CAGA,SAASoB,CAAAA,CAA4CC,CAAAA,CAAuB,CAC1E,OAAO,OAAO,IAAA,CAAKA,CAAG,EAAE,MAAA,CAAS,CAAA,CAAIA,EAAM,MAC7C,CAGA,SAASC,EAAAA,CACPC,CAAAA,CACApC,CAAAA,CACyB,CACzB,IAAM0B,CAAAA,CAAkC,EAAC,CACzC,IAAA,GAAW,CAACb,CAAAA,CAAKtB,CAAK,IAAK,MAAA,CAAO,OAAA,CAAQ6C,EAAI,MAAA,CAAO,KAAK,EACxDV,CAAAA,CAAOM,CAAAA,CAAUhC,EAAWa,CAAG,CAAC,CAAA,CAAItB,CAAAA,CAGtC,OAAOmC,CACT,CAGA,SAASW,EAAAA,CACPD,EACApC,CAAAA,CACwD,CACxD,GAAKoC,CAAAA,CAAI,IAAA,CAKT,OAAQrC,CAAAA,EAAe,CACrB,IAAMuC,EAAmBxC,CAAAA,CAAuBC,CAAAA,CAAOC,CAAS,CAAA,CAE/DoC,CAAAA,CAAI,KAAaE,CAAgB,EACpC,CACF,CAGA,SAASC,EAAAA,CACPH,EACApC,CAAAA,CACA+B,CAAAA,CACAtB,EAC0E,CAC1E,GAAI,CAAC2B,CAAAA,CAAI,MAAA,CACP,OAGF,IAAMV,CAAAA,CACJ,EAAC,CACH,IAAA,GAAW,CAACb,CAAAA,CAAK2B,CAAE,IAAK,MAAA,CAAO,OAAA,CAAQJ,CAAAA,CAAI,MAAM,CAAA,CAC/CV,CAAAA,CAAOM,EAAUhC,CAAAA,CAAWa,CAAG,CAAC,CAAA,CAAI,CAACd,EAAgBgB,CAAAA,GAAoB,CACvE,IAAM0B,CAAAA,CAAaX,CAAAA,CACjB/B,CAAAA,CACAC,EACA+B,CAAAA,CACAtB,CACF,EACMiC,CAAAA,CAAc5B,CAAAA,CAClBC,EACAf,CACF,CAAA,CAEA,OAAQwC,CAAAA,CAAWC,CAAAA,CAAYC,CAAW,CAC5C,CAAA,CAGF,OAAOT,EAASP,CAAM,CACxB,CAGA,SAASiB,EAAAA,CACPP,EACApC,CAAAA,CACsE,CACtE,GAAI,CAACoC,CAAAA,CAAI,OACP,OAGF,IAAMV,EAAmE,EAAC,CAC1E,IAAA,GAAW,CAACb,CAAAA,CAAK+B,CAAO,IAAK,MAAA,CAAO,OAAA,CAAQR,EAAI,MAAM,CAAA,CACpDV,EAAOM,CAAAA,CAAUhC,CAAAA,CAAWa,CAAG,CAAC,CAAA,CAAI,CAACd,EAAgB8C,CAAAA,GAAmB,CACtE,IAAMP,CAAAA,CAAmBxC,CAAAA,CACvBC,EACAC,CACF,CAAA,CAEC4C,CAAAA,CAAgBN,CAAAA,CAAkBO,CAAK,EAC1C,EAGF,OAAOZ,CAAAA,CAASP,CAAM,CACxB,CAGA,SAASoB,EAAAA,CACPV,CAAAA,CACApC,CAAAA,CACA+B,CAAAA,CACAtB,CAAAA,CACqC,CACrC,GAAI,CAAC2B,CAAAA,CAAI,YACP,OAGF,IAAMV,EAAkC,EAAC,CACzC,IAAA,GAAW,CAACb,CAAAA,CAAKkC,CAAU,IAAK,MAAA,CAAO,OAAA,CAAQX,EAAI,WAAW,CAAA,CAAG,CAC/D,IAAMY,CAAAA,CAAgBD,CAAAA,CAUtBrB,CAAAA,CAAOM,CAAAA,CAAUhC,CAAAA,CAAWa,CAAG,CAAC,CAAA,CAAI,CAClC,GAAGmC,CAAAA,CACH,KAAMA,CAAAA,CAAc,IAAA,EAAM,GAAA,CAAKC,CAAAA,EAAQjB,CAAAA,CAAUhC,CAAAA,CAAWiD,CAAG,CAAC,CAAA,CAChE,MAAOD,CAAAA,CAAc,KAAA,EAAO,IAAKC,CAAAA,EAC/BA,CAAAA,CAAI,SAAShE,CAAS,CAAA,CAAIgE,EAAMjB,CAAAA,CAAUhC,CAAAA,CAAWiD,CAAG,CAC1D,CAAA,CACA,KAAOlD,CAAAA,EAAmB,CACxB,IAAM0C,CAAAA,CAAaX,CAAAA,CACjB/B,CAAAA,CACAC,EACA+B,CAAAA,CACAtB,CACF,EAEA,OAAOuC,CAAAA,CAAc,KAAKP,CAAU,CACtC,CAAA,CACA,OAAA,CACE,OAAOO,CAAAA,CAAc,SAAY,UAAA,CAC5BjD,CAAAA,EAAmB,CAClB,IAAM0C,CAAAA,CAAaX,EACjB/B,CAAAA,CACAC,CAAAA,CACA+B,CAAAA,CACAtB,CACF,CAAA,CAEA,OAAQuC,EAAc,OAAA,CACpBP,CACF,CACF,CAAA,CACAO,CAAAA,CAAc,OACtB,EACF,CAEA,OAAOf,CAAAA,CAASP,CAAM,CACxB,CAGA,SAASwB,GACPd,CAAAA,CACApC,CAAAA,CACA+B,EACAtB,CAAAA,CACqC,CACrC,GAAI,CAAC2B,CAAAA,CAAI,SAAA,CACP,OAGF,IAAMV,CAAAA,CAAkC,EAAC,CACzC,IAAA,GAAW,CAACb,CAAAA,CAAKsC,CAAQ,CAAA,GAAK,MAAA,CAAO,OAAA,CAAQf,CAAAA,CAAI,SAAS,CAAA,CAAG,CAqB3D,IAASgB,CAAAA,CAAT,SAAiBC,EAGf,CACA,OAAO,CACL,KAAA,CAAOvB,CAAAA,CACLuB,CAAAA,CAAI,MACJrD,CAAAA,CACA+B,CAAAA,CACAtB,CACF,CAAA,CACA,MAAA,CAAQ4C,EAAI,MACd,CACF,EAjCA,IAAMC,CAAAA,CAAcH,CAAAA,CAmCpBzB,EAAOM,CAAAA,CAAUhC,CAAAA,CAAWa,CAAG,CAAC,CAAA,CAAI,CAClC,GAAGyC,CAAAA,CACH,GAAIA,EAAY,OAAA,EAAW,CACzB,QAAS,MACPC,CAAAA,CACAF,IACG,CACH,MAAMC,CAAAA,CAAY,OAAA,CAASC,CAAAA,CAAKH,CAAAA,CAAQC,CAAG,CAAC,EAC9C,CACF,CAAA,CACA,GAAIC,EAAY,YAAA,EAAgB,CAC9B,YAAA,CAAc,MACZE,CAAAA,CACAH,CAAAA,GACG,CACH,MAAMC,CAAAA,CAAY,aAAcE,CAAAA,CAAMJ,CAAAA,CAAQC,CAAG,CAAC,EACpD,CACF,CAAA,CACA,GAAIC,CAAAA,CAAY,yBAA2B,CACzC,uBAAA,CAAyB,MACvBE,CAAAA,CACAH,CAAAA,GAEOC,EAAY,uBAAA,CAAyBE,CAAAA,CAAMJ,CAAAA,CAAQC,CAAG,CAAC,CAElE,CACF,EACF,CAEA,OAAOpB,CAAAA,CAASP,CAAM,CACxB,CAGA,SAAS+B,EAAAA,CACPrB,CAAAA,CACApC,CAAAA,CACA+B,CAAAA,CACAtB,EACqC,CACrC,GAAI,CAAC2B,CAAAA,CAAI,OAAA,CACP,OAGF,IAAMV,CAAAA,CAAkC,EAAC,CACzC,IAAA,GAAW,CAACb,EAAK6C,CAAM,CAAA,GAAK,OAAO,OAAA,CAAQtB,CAAAA,CAAI,OAAO,CAAA,CAAG,CACvD,IAAMuB,CAAAA,CAAYD,CAAAA,CAMlBhC,EAAOM,CAAAA,CAAUhC,CAAAA,CAAWa,CAAG,CAAC,CAAA,CAAI,CAClC,GAAG8C,CAAAA,CAEH,GAAA,CAAK,CAAC5D,CAAAA,CAAY6D,CAAAA,GAAc,CAC9B,IAAMnB,CAAAA,CAAaX,EACjB/B,CAAAA,CACAC,CAAAA,CACA+B,EACAtB,CACF,CAAA,CACMoD,CAAAA,CAAYD,CAAAA,CACd9B,CAAAA,CACE8B,CAAAA,CACA5D,EACA+B,CAAAA,CACAtB,CACF,EACA,MAAA,CAEJ,OAAOkD,EAAU,GAAA,CAAIlB,CAAAA,CAAYoB,CAAS,CAC5C,CAAA,CACA,IAAA,CAAMF,EAAU,IAAA,EAAM,GAAA,CAAKV,GAAQjB,CAAAA,CAAUhC,CAAAA,CAAWiD,CAAG,CAAC,CAC9D,EACF,CAEA,OAAOhB,EAASP,CAAM,CACxB,CAGA,SAASoC,EAAAA,CACP1B,EACApC,CAAAA,CACA+D,CAAAA,CAC+B,CAC/B,OAAO,CACL,cAAA,CACEA,GAAsB,CAACA,CAAAA,CAAmB,IAAI/D,CAAS,CAAA,CACnD,EAAC,CACDoC,CAAAA,CAAI,OAAA,EAAS,cAAA,EAAgB,GAAA,CAAK4B,CAAAA,EAChChC,EAAUhC,CAAAA,CAAWgE,CAAC,CACxB,CACR,CACF,CAYO,SAASC,CAAAA,CACdC,CAAAA,CACsB,CACtB,GAAM,CAAE,IAAA9B,CAAAA,CAAK,SAAA,CAAApC,EAAW,kBAAA,CAAA+D,CAAmB,EAAIG,CAAAA,CAGzCnC,CAAAA,CAAqB,CAAC,EAC1BK,CAAAA,CAAI,iBAAmB,MAAA,CAAO,IAAA,CAAKA,EAAI,eAAe,CAAA,CAAE,OAAS,CAAA,CAAA,CAE7D3B,CAAAA,CAAgBsB,CAAAA,CAClB,MAAA,CAAO,IAAA,CAAKK,CAAAA,CAAI,eAAgB,CAAA,CAChC,GAEJ,OAAO,CACL,GAAIA,CAAAA,CAAI,EAAA,CACR,MAAA,CAAQD,EAAAA,CAAaC,CAAAA,CAAKpC,CAAS,EACnC,YAAA,CAAcoC,CAAAA,CAAI,OAAO,YAAA,EAAgB,GACzC,IAAA,CAAMC,EAAAA,CAAWD,CAAAA,CAAKpC,CAAS,CAAA,CAC/B,MAAA,CAAQuC,GAAaH,CAAAA,CAAKpC,CAAAA,CAAW+B,EAAoBtB,CAAa,CAAA,CACtE,OAAQkC,EAAAA,CAAoBP,CAAAA,CAAKpC,CAAS,CAAA,CAC1C,OAAA,CAASyD,EAAAA,CAAcrB,EAAKpC,CAAAA,CAAW+B,CAAAA,CAAoBtB,CAAa,CAAA,CACxE,WAAA,CAAaqC,GACXV,CAAAA,CACApC,CAAAA,CACA+B,CAAAA,CACAtB,CACF,CAAA,CACA,SAAA,CAAWyC,GACTd,CAAAA,CACApC,CAAAA,CACA+B,EACAtB,CACF,CAAA,CACA,MAAO2B,CAAAA,CAAI,KAAA,CACX,OAAA,CAAS0B,EAAAA,CAAc1B,CAAAA,CAAKpC,CAAAA,CAAW+D,CAAkB,CAC3D,CACF,CC5WA,SAASI,EAAAA,CACP9D,EAC+B,CAC/B,IAAM+D,CAAAA,CAAa,MAAA,CAAO,IAAA,CAAK/D,CAAU,EACnCgE,CAAAA,CAAgB,IAAI,IAAYD,CAAU,CAAA,CAC1CE,EAAU,IAAI,GAAA,CACdC,EAAW,IAAI,GAAA,CACf7C,EAAwC,EAAC,CACzC8C,EAAiB,EAAC,CAExB,SAASC,CAAAA,CAAMzE,CAAAA,CAAyB,CACtC,GAAIsE,CAAAA,CAAQ,GAAA,CAAItE,CAAS,CAAA,CAAG,OAG5B,GAAIuE,CAAAA,CAAS,GAAA,CAAIvE,CAAS,CAAA,CAAG,CAC3B,IAAM0E,CAAAA,CAAaF,CAAAA,CAAK,OAAA,CAAQxE,CAAS,CAAA,CACnC2E,CAAAA,CAAQ,CAAC,GAAGH,CAAAA,CAAK,MAAME,CAAU,CAAA,CAAG1E,CAAS,CAAA,CAAE,IAAA,CAAK,UAAK,EAC/D,MAAM,IAAI,MACR,CAAA,0CAAA,EAA6C2E,CAAK,iHAGpD,CACF,CAEAJ,EAAS,GAAA,CAAIvE,CAAS,EACtBwE,CAAAA,CAAK,IAAA,CAAKxE,CAAS,CAAA,CAGnB,IAAMoC,EAAM/B,CAAAA,CAAWL,CAAS,CAAA,CAChC,GAAIoC,CAAAA,EAAK,eAAA,CACP,QAAWwC,CAAAA,IAAgB,MAAA,CAAO,KAAKxC,CAAAA,CAAI,eAAe,EACpDiC,CAAAA,CAAc,GAAA,CAAIO,CAAY,CAAA,EAChCH,CAAAA,CAAMG,CAAY,EAKxBJ,CAAAA,CAAK,GAAA,GACLD,CAAAA,CAAS,MAAA,CAAOvE,CAAS,CAAA,CACzBsE,CAAAA,CAAQ,GAAA,CAAItE,CAAS,CAAA,CACrB0B,CAAAA,CAAO,KAAK1B,CAAmC,EACjD,CAEA,IAAA,IAAWA,CAAAA,IAAaoE,EACtBK,CAAAA,CAAMzE,CAAS,EAGjB,OAAO0B,CACT,CAMA,SAASmD,CAAAA,CACP7E,EACAoC,CAAAA,CACU,CACV,IAAM0C,CAAAA,CAAiB,EAAC,CACxB,IAAA,IAAWjE,CAAAA,IAAO,MAAA,CAAO,KAAKuB,CAAAA,CAAI,MAAA,CAAO,KAAK,CAAA,CAC5C0C,CAAAA,CAAK,KAAK,CAAA,EAAG9E,CAAS,CAAA,EAAGf,CAAS,CAAA,EAAG4B,CAAG,EAAE,CAAA,CAE5C,GAAIuB,EAAI,MAAA,CAAO,WAAA,CACb,QAAWvB,CAAAA,IAAO,MAAA,CAAO,IAAA,CAAKuB,CAAAA,CAAI,MAAA,CAAO,WAAW,EAClD0C,CAAAA,CAAK,IAAA,CAAK,GAAG9E,CAAS,CAAA,EAAGf,CAAS,CAAA,EAAG4B,CAAG,CAAA,CAAE,CAAA,CAI9C,OAAOiE,CACT,CA8CO,SAASC,EAAAA,CAIdb,EACmD,CAEnD,GAAI,WAAYA,CAAAA,CAAS,CACvB,GAAI,CAACA,CAAAA,CAAQ,MAAA,CACX,MAAM,IAAI,KAAA,CACR,oDACE,OAAOA,CAAAA,CAAQ,MACnB,CAAA,CAEF,OAAOc,EAAAA,CACLd,CACF,CACF,CAGA,IAAMe,CAAAA,CAAef,CAAAA,CAGrB,GAAI,KAAA,CAAM,OAAA,CAAQe,EAAa,OAAO,CAAA,CACpC,MAAM,IAAI,KAAA,CACR,CAAA;;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA,yCAAA,CAOF,EAIF,IAAMC,CAAAA,CAAOD,CAAAA,CAAa,OAAA,CAC1B,GAAIC,CAAAA,EAAQ,OAAOA,CAAAA,EAAS,QAAA,EAAY,OAAQA,CAAAA,EAAQ,QAAA,GAAYA,CAAAA,CAClE,MAAM,IAAI,KAAA,CACR,CAAA;;AAAA;;AAAA;AAAA,iDAAA,CAKF,CAAA,CAGF,OAAOC,EAAAA,CAAuBF,CAAY,CAC5C,CAMA,SAASE,EAAAA,CACPjB,CAAAA,CAC2B,CAC3B,IAAM7D,CAAAA,CAAa6D,EAAQ,OAAA,CACrBkB,CAAAA,CAAmB,IAAI,GAAA,CAAI,MAAA,CAAO,IAAA,CAAK/E,CAAU,CAAC,CAAA,CAGlDgF,CAAAA,CACJ,OAAOnB,CAAAA,CAAQ,OAAA,EAAY,SAAWA,CAAAA,CAAQ,OAAA,CAAU,IAAA,CACpDH,CAAAA,CAAqBsB,CAAAA,EAAe,eAAA,CACtC,IAAI,GAAA,CAAIA,CAAAA,CAAc,eAAe,CAAA,CACrC,IAAA,CAGJ,GAAInB,EAAQ,MAAA,GAAW,MAAA,EAAaA,CAAAA,CAAQ,MAAA,EAAU,CAAA,CACpD,MAAM,IAAI,KAAA,CAAM,8CAA8C,CAAA,CAIhE,GAAI,OAAA,CAAQ,GAAA,CAAI,WAAa,YAAA,CAAA,CAC3B,IAAA,GAAW,CAAClE,CAAAA,CAAWoC,CAAG,CAAA,GAAK,OAAO,OAAA,CAAQ/B,CAAU,CAAA,CACtD,GAAI+B,CAAAA,CAAI,eAAA,CACN,QAAWwC,CAAAA,IAAgB,MAAA,CAAO,IAAA,CAAKxC,CAAAA,CAAI,eAAe,CAAA,CACpDwC,IAAiB5E,CAAAA,CACnB,OAAA,CAAQ,IAAA,CACN,CAAA,oBAAA,EAAuBA,CAAS,CAAA,8FAAA,CAElC,EACUoF,CAAAA,CAAiB,GAAA,CAAIR,CAAY,CAAA,EAC3C,OAAA,CAAQ,IAAA,CACN,uBAAuB5E,CAAS,CAAA,2BAAA,EAA8B4E,CAAY,CAAA,gCAAA,EACvCA,CAAY,CAAA,2CAAA,EACvB,CAAC,GAAGQ,CAAgB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,EAC1D,EAAA,CAQV,GAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,YAAA,EAAgBC,GAAe,eAAA,CAC1D,IAAA,IAAWC,CAAAA,IAAQD,CAAAA,CAAc,eAAA,CAC1BD,CAAAA,CAAiB,IAAIE,CAAI,CAAA,EAC5B,OAAA,CAAQ,IAAA,CACN,CAAA,2CAAA,EAA8CA,CAAI,kDAC1B,CAAC,GAAGF,CAAgB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAC1D,CAAA,CAMN,IAAIG,CAAAA,CACEC,CAAAA,CAAYtB,CAAAA,CAAQ,WAAa,MAAA,CAEvC,GAAI,KAAA,CAAM,OAAA,CAAQsB,CAAS,CAAA,CAAG,CAE5B,IAAMC,CAAAA,CAAgBD,CAAAA,CAChBE,CAAAA,CAAiB,MAAA,CAAO,IAAA,CAAKrF,CAAU,CAAA,CAAE,MAAA,CAC5CuB,CAAAA,EAAO,CAAC6D,CAAAA,CAAc,QAAA,CAAS7D,CAA4B,CAC9D,CAAA,CACA,GAAI8D,CAAAA,CAAe,MAAA,CAAS,CAAA,CAC1B,MAAM,IAAI,KAAA,CACR,CAAA,0CAAA,EAA6CA,CAAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,qDAAA,CAExE,CAAA,CAEFH,CAAAA,CAAoBE,EACtB,CAAA,KAAWD,CAAAA,GAAc,cAEvBD,CAAAA,CAAoB,MAAA,CAAO,IAAA,CAAKlF,CAAU,CAAA,CAK1CkF,CAAAA,CAAoBpB,GAAgB9D,CAAU,CAAA,CAIhD,GAAM,CAAE,OAAA,CAAAsF,CAAAA,CAAS,MAAAC,CAAAA,CAAO,aAAA,CAAAC,CAAc,CAAA,CAAIC,CAAAA,CAAwB5B,CAAO,EAGzE,IAAA,IAAWlE,CAAAA,IAAa,MAAA,CAAO,IAAA,CAAKK,CAAU,CAAA,CAAG,CAC/C,GAAIL,CAAAA,CAAU,QAAA,CAASf,CAAS,CAAA,CAC9B,MAAM,IAAI,KAAA,CACR,CAAA,yBAAA,EAA4Be,CAAS,CAAA,mCAAA,EAAsCf,CAAS,CAAA,gCAAA,EAClDA,CAAS,CAAA,EAAA,CAC7C,CAAA,CAEF,IAAMmD,CAAAA,CAAM/B,CAAAA,CAAWL,CAAS,EAChC,GAAIoC,CAAAA,CAAAA,CACF,IAAA,IAAWvB,CAAAA,IAAO,MAAA,CAAO,IAAA,CAAKuB,EAAI,MAAA,CAAO,KAAK,CAAA,CAC5C,GAAIvB,CAAAA,CAAI,QAAA,CAAS5B,CAAS,CAAA,CACxB,MAAM,IAAI,KAAA,CACR,CAAA,wBAAA,EAA2B4B,CAAG,gBAAgBb,CAAS,CAAA,mCAAA,EAAsCf,CAAS,CAAA,+BAAA,EACrEA,CAAS,CAAA,EAAA,CAC5C,EAIR,CAIA,IAAM8G,CAAAA,CAA+C,CAAE,KAAA,CAAO,IAAK,EACnE,SAASzF,CAAAA,EAA2B,CAClC,OAAIyF,CAAAA,CAAiB,KAAA,GAAU,OAC7BA,CAAAA,CAAiB,KAAA,CAAQ,MAAA,CAAO,IAAA,CAAK1F,CAAU,CAAA,CAAA,CAG1C0F,EAAiB,KAC1B,CAKA,IAAMC,CAAAA,CAAcT,CAAAA,CACjB,GAAA,CAAKvF,GAAc,CAClB,IAAMoC,CAAAA,CAAM/B,CAAAA,CAAWL,CAAS,CAAA,CAChC,OAAKoC,CAAAA,CAEE6B,CAAAA,CAAuB,CAC5B,GAAA,CAAA7B,CAAAA,CACA,SAAA,CAAApC,EACA,kBAAA,CAAA+D,CACF,CAAC,CAAA,CANgB,IAOnB,CAAC,EACA,MAAA,CAAQkC,CAAAA,EAAkCA,CAAAA,GAAM,IAAI,CAAA,CAIrD,OAAA,CAAQ,IAAI,QAAA,GAAa,YAAA,EACzB/B,CAAAA,CAAQ,MAAA,EACRA,CAAAA,CAAQ,MAAA,CAAS,IAEM8B,CAAAA,CAAY,IAAA,CAChCC,CAAAA,EACCA,CAAAA,CAAE,MAAA,EACF,MAAA,CAAO,KAAKA,CAAAA,CAAE,MAAM,CAAA,CAAE,IAAA,CAAMC,CAAAA,EAAMA,CAAAA,CAAE,SAAS,CAAA,EAAGjH,CAAS,CAAA,IAAA,CAAM,CAAC,CACpE,CAAA,EAEE,QAAQ,IAAA,CACN,CAAA,6BAAA,EAAgCiF,CAAAA,CAAQ,MAAM,CAAA,gDAAA,CAChD,CAAA,CAAA,CAKJ,IAAIiC,CAAAA,CAAgE,IAAA,CAIhEjF,CAAAA,CAAc,IAAA,CAOlB,SAASkF,CAAAA,CACPC,EACM,CACN,IAAA,GAAW,CAACrG,CAAAA,CAAWD,CAAK,CAAA,GAAK,OAAO,OAAA,CAAQsG,CAAe,CAAA,CAAG,CAEhE,GAAI/G,mBAAAA,CAAc,IAAIU,CAAS,CAAA,CAAG,CAC5B,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,cAC3B,OAAA,CAAQ,IAAA,CACN,CAAA,6DAAA,EAAgEA,CAAS,CAAA,YAAA,CAC3E,CAAA,CAEF,QACF,CAEA,GAAI,CAACoF,CAAAA,CAAiB,GAAA,CAAIpF,CAAS,EAAG,CAChC,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,YAAA,EAC3B,OAAA,CAAQ,KACN,CAAA,6DAAA,EAAgEA,CAAS,CAAA,sBAAA,EACjD,CAAC,GAAGoF,CAAgB,EAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAC1D,CAAA,CAEF,QACF,CAGA,GAAIrF,CAAAA,EAAS,OAAOA,CAAAA,EAAU,QAAA,EAAY,CAACuG,oBAAgBvG,CAAK,CAAA,CAC9D,MAAM,IAAI,KAAA,CACR,CAAA,gDAAA,EAAmDC,CAAS,CAAA,6HAAA,CAG9D,CAAA,CAGF,IAAA,GAAW,CAACa,CAAAA,CAAKtB,CAAK,IAAK,MAAA,CAAO,OAAA,CAAQQ,CAAK,CAAA,CAEzCT,mBAAAA,CAAc,GAAA,CAAIuB,CAAG,CAAA,GACxBK,CAAAA,CAAO,KAAA,CACN,CAAA,EAAGlB,CAAS,CAAA,EAAGf,CAAS,CAAA,EAAG4B,CAAG,CAAA,CAChC,CAAA,CAAItB,CAAAA,EAER,CACF,CAGA2B,CAAAA,CAASqF,mBAAAA,CAAa,CAEpB,OAAA,CAASP,CAAAA,CACT,OAAA,CAAS9B,EAAQ,OAAA,CACjB,OAAA,CAAAyB,CAAAA,CACA,KAAA,CAAAC,CAAAA,CACA,aAAA,CAAAC,EACA,MAAA,CAAQ3B,CAAAA,CAAQ,MAAA,CAChB,KAAA,CAAOA,CAAAA,CAAQ,KAAA,CAEf,kBAAmB,IAAM,CAEnBA,CAAAA,CAAQ,YAAA,EACVkC,CAAAA,CACElC,CAAAA,CAAQ,YACV,CAAA,CAGEiC,CAAAA,GACFC,CAAAA,CAAqBD,CAAa,CAAA,CAClCA,CAAAA,CAAgB,MAEpB,CACF,CAAC,CAAA,CAGD,IAAMK,CAAAA,CAAmB,IAAI,IAC7B,IAAA,IAAWxG,CAAAA,IAAa,MAAA,CAAO,IAAA,CAAKK,CAAU,CAAA,CAAG,CAC/C,IAAM+B,CAAAA,CAAM/B,CAAAA,CAAWL,CAAS,CAAA,CAC3BoC,CAAAA,EACLoE,EAAiB,GAAA,CAAIxG,CAAAA,CAAW6E,CAAAA,CAAqB7E,CAAAA,CAAWoC,CAAG,CAAC,EACtE,CAGA,IAAMqE,CAAAA,CAAuBrG,CAAAA,CAC3Bc,CAAAA,CAAO,KAAA,CACPb,EACAC,CACF,CAAA,CACMoG,EAAAA,CAAwB1F,CAAAA,CAC5BE,CAAAA,CAAO,MAAA,CACPb,EACAC,CACF,CAAA,CACMqG,EAAAA,CAAwB1F,CAAAA,CAC5BC,CAAAA,CACAb,CAAAA,CACAC,CACF,CAAA,CAGIsG,CAAAA,CAAsD,IAAA,CACpDC,CAAAA,CAAS3C,CAAAA,CAAQ,MAAA,CAEjB4C,EAAoC,CACxC,KAAA,CAAO,YAAA,CACP,KAAA,CAAOL,CAAAA,CACP,OAAA,CAASvF,EAAO,OAAA,CAChB,MAAA,CAAQwF,EAAAA,CACR,MAAA,CAAQC,EAAAA,CACR,WAAA,CAAazF,EAAO,WAAA,CACpB,OAAA,CAASA,CAAAA,CAAO,OAAA,CAChB,SAAA,CAAWA,CAAAA,CAAO,UAElB,MAAM,OAAA,CACJ6F,CAAAA,CAGA,CACA,GAAI7F,CAAAA,CAAO,UACT,MAAM,IAAI,KAAA,CACR,qFAEF,CAAA,CAGF,IAAMQ,EAAS,MAAMqF,CAAAA,EAAO,CACxBrF,CAAAA,EAAU,OAAOA,CAAAA,EAAW,WAC9ByE,CAAAA,CAAgBzE,CAAAA,EAEpB,CAAA,CAEA,UAAA,EAAmB,CACjBR,CAAAA,CAAO,aACT,CAAA,CAEA,KAAA,EAAc,CAIZ,GAFAA,CAAAA,CAAO,OAAM,CAET2F,CAAAA,EAAUA,CAAAA,CAAS,CAAA,CAAG,CAExB,IAAIG,EACJ,IAAA,IAAWf,CAAAA,IAAKD,CAAAA,CACd,GAAIC,CAAAA,EAAG,MAAA,GACLe,EAAe,MAAA,CAAO,IAAA,CAAKf,CAAAA,CAAE,MAAM,CAAA,CAAE,IAAA,CAAMC,GACzCA,CAAAA,CAAE,QAAA,CAAS,CAAA,EAAGjH,CAAS,CAAA,IAAA,CAAM,CAC/B,EACI+H,CAAAA,CAAAA,CAAc,MAGtB,GAAIA,CAAAA,CAAc,CAChB,IAAMnG,EAAMmG,CAAAA,CACZJ,CAAAA,CAAe,WAAA,CAAY,IAAM,CAC/B1F,CAAAA,CAAO,SAAS,CAAE,IAAA,CAAML,CAAI,CAAC,EAC/B,CAAA,CAAGgG,CAAM,EACX,CACF,CACF,CAAA,CAEA,IAAA,EAAa,CACPD,IACF,aAAA,CAAcA,CAAY,CAAA,CAC1BA,CAAAA,CAAe,IAAA,CAAA,CAEjB1F,CAAAA,CAAO,OACT,CAAA,CAEA,OAAA,EAAgB,CACd,IAAA,CAAK,IAAA,GACLA,CAAAA,CAAO,OAAA,GACT,CAAA,CAEA,QAAA,CAAS2B,CAAAA,CAAiD,CACxD3B,CAAAA,CAAO,QAAA,CAAS2B,CAAK,EACvB,CAAA,CAUA,IAAA,CAAkBoE,EAAyB,CACzC,OAAO/F,CAAAA,CAAO,IAAA,CAAKI,CAAAA,CAAc2F,CAAY,CAAC,CAChD,CAAA,CAeA,SAAA,CAAUC,CAAAA,CAAeC,CAAAA,CAAkC,CACzD,IAAMC,CAAAA,CAAwB,EAAC,CAC/B,IAAA,IAAWC,CAAAA,IAAMH,CAAAA,CACf,GAAIG,CAAAA,CAAG,QAAA,CAAS,IAAI,CAAA,CAAG,CACrB,IAAMzF,EAAKyF,CAAAA,CAAG,KAAA,CAAM,CAAA,CAAG,EAAE,CAAA,CACnBvC,CAAAA,CAAO0B,EAAiB,GAAA,CAAI5E,CAAE,CAAA,CAChCkD,CAAAA,CACFsC,CAAAA,CAAY,IAAA,CAAK,GAAGtC,CAAI,CAAA,CACf,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,YAAA,EAClC,QAAQ,IAAA,CACN,CAAA,gCAAA,EAAmCuC,CAAE,CAAA,oBAAA,EAAkBzF,CAAE,CAAA,YAAA,CAC3D,EAEJ,CAAA,KACEwF,CAAAA,CAAY,IAAA,CAAK9F,CAAAA,CAAc+F,CAAE,CAAC,EAGtC,OAAOnG,CAAAA,CAAO,SAAA,CAAUkG,CAAAA,CAAaD,CAAQ,CAC/C,EASA,eAAA,CAAgBnH,CAAAA,CAAmBmH,CAAAA,CAAkC,CACnE,IAAMrC,CAAAA,CAAO0B,EAAiB,GAAA,CAAIxG,CAAS,CAAA,CAC3C,OAAI,CAAC8E,CAAAA,EAAQA,EAAK,MAAA,GAAW,CAAA,EACvB,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,YAAA,EAC3B,QAAQ,IAAA,CACN,CAAA,6BAAA,EAAgC9E,CAAS,CAAA,0CAAA,EACzB,CAAC,GAAGwG,EAAiB,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,EACzD,CAAA,CAEK,IAAM,CAAC,CAAA,EAETtF,CAAAA,CAAO,SAAA,CAAU4D,EAAMqC,CAAQ,CACxC,CAAA,CAWA,KAAA,CACEE,CAAAA,CACAC,CAAAA,CACApD,EACY,CACZ,OAAOhD,CAAAA,CAAO,KAAA,CAAMI,CAAAA,CAAc+F,CAAE,EAAGC,CAAAA,CAAUpD,CAAO,CAC1D,CAAA,CAMA,IAAA,CACEqD,CAAAA,CACArD,EACe,CAEf,OAAOhD,CAAAA,CAAO,IAAA,CACZ,IACEqG,CAAAA,CAAUd,CAA0D,CAAA,CACtEvC,CACF,CACF,CAAA,CAOA,wBAAA,CAAsDA,CAAAA,CAapD,CAEA,IAAMsD,CAAAA,CAAkB,CACtB,GAAGtD,CAAAA,CACH,kBAAA,CAAoBA,GAAS,kBAAA,EAAoB,GAAA,CAAI5C,CAAa,CAAA,CAClE,kBAAA,CAAoB4C,CAAAA,EAAS,oBAAoB,GAAA,CAAI5C,CAAa,CAAA,CAClE,YAAA,CAAc4C,CAAAA,EAAS,YAAA,EAAc,IAAI5C,CAAa,CACxD,CAAA,CAEMmG,CAAAA,CAAWvG,CAAAA,CAAO,wBAAA,CAAyBsG,CAAe,CAAA,CAGhE,OAAO,CACL,GAAGC,CAAAA,CACH,IAAA,CAAMjG,EACJiG,CAAAA,CAAS,IACX,CACF,CACF,CAAA,CAOA,0BAAA,CACEvD,EAQAoD,CAAAA,CAOY,CAEZ,IAAME,CAAAA,CAAkB,CACtB,GAAGtD,EACH,kBAAA,CAAoBA,CAAAA,EAAS,kBAAA,EAAoB,GAAA,CAAI5C,CAAa,CAAA,CAClE,kBAAA,CAAoB4C,CAAAA,EAAS,kBAAA,EAAoB,GAAA,CAAI5C,CAAa,CAAA,CAClE,YAAA,CAAc4C,CAAAA,EAAS,cAAc,GAAA,CAAI5C,CAAa,CACxD,CAAA,CAEA,OAAOJ,CAAAA,CAAO,2BACZsG,CAAAA,CACCC,CAAAA,EAMK,CAEJH,CAAAA,CAAS,CACP,GAAGG,EACH,IAAA,CAAMjG,CAAAA,CACJiG,CAAAA,CAAS,IACX,CACF,CAAC,EACH,CACF,CACF,CAAA,CACA,cAAA,CACEzH,CAAAA,CACA0H,CAAAA,CACM,CAEN,GAAItC,CAAAA,CAAiB,GAAA,CAAIpF,CAAS,CAAA,CAChC,MAAM,IAAI,KAAA,CACR,CAAA,8BAAA,EAAiCA,CAAS,CAAA,wDAAA,CAE5C,CAAA,CAEF,GAAIA,EAAU,QAAA,CAASf,CAAS,CAAA,CAC9B,MAAM,IAAI,KAAA,CACR,4BAA4Be,CAAS,CAAA,mCAAA,EAAsCf,CAAS,CAAA,EAAA,CACtF,CAAA,CAEF,GAAIK,oBAAc,GAAA,CAAIU,CAAS,CAAA,CAC7B,MAAM,IAAI,KAAA,CACR,4BAA4BA,CAAS,CAAA,wBAAA,CACvC,CAAA,CAIF,IAAA,IAAWa,CAAAA,IAAO,MAAA,CAAO,KAAK6G,CAAAA,CAAU,MAAA,CAAO,KAAK,CAAA,CAClD,GAAI7G,CAAAA,CAAI,SAAS5B,CAAS,CAAA,CACxB,MAAM,IAAI,KAAA,CACR,CAAA,wBAAA,EAA2B4B,CAAG,CAAA,aAAA,EAAgBb,CAAS,CAAA,mCAAA,EAAsCf,CAAS,CAAA,EAAA,CACxG,CAAA,CAIJ,IAAMmD,CAAAA,CAAMsF,CAAAA,CAGNC,CAAAA,CAAO1D,CAAAA,CAAuB,CAClC,GAAA,CAAA7B,EACA,SAAA,CAAApC,CAAAA,CACA,kBAAA,CAAA+D,CACF,CAAC,CAAA,CAGDqB,EAAiB,GAAA,CAAIpF,CAAS,CAAA,CAC7BK,CAAAA,CAAuDL,CAAS,CAAA,CAAIoC,EAErE2D,CAAAA,CAAiB,KAAA,CAAQ,IAAA,CAGzBS,CAAAA,CAAiB,GAAA,CAAIxG,CAAAA,CAAW6E,EAAqB7E,CAAAA,CAAWoC,CAAG,CAAC,CAAA,CAInElB,CAAAA,CAAe,cAAA,CAAeyG,CAAI,EACrC,CAGF,CAAA,CAEA,OAAAC,CAAAA,CAAuBd,CAAAA,CAAQ5F,CAAM,CAAA,CACrC2G,CAAAA,CAAiBf,CAAM,CAAA,CAEhBA,CACT,CAUA,SAAShB,CAAAA,CAAwB5B,CAAAA,CAS/B,CACA,IAAIyB,CAAAA,CAAqCzB,CAAAA,CAAQ,QAC3C0B,CAAAA,CAAiC1B,CAAAA,CAAQ,KAAA,CAC3C2B,CAAAA,CAAiD3B,CAAAA,CAAQ,aAAA,CAE7D,GAAIA,CAAAA,CAAQ,UAAA,CAAY,CACtB,IAAM4D,CAAAA,CAAQ,OAAA,CAAQ,IAAI,QAAA,GAAa,YAAA,CAEvCnC,CAAAA,CAAUA,CAAAA,EAAWmC,CAAAA,CAErBjC,CAAAA,CAAgB,CACd,iBAAA,CAAmB,MAAA,CACnB,eAAA,CAAiB,MAAA,CACjB,aAAA,CAAe,MAAA,CACf,kBAAmB,MAAA,CACnB,GAAG3B,CAAAA,CAAQ,aACb,EACF,CAEA,OAAO,CAAE,OAAA,CAAAyB,CAAAA,CAAS,KAAA,CAAAC,CAAAA,CAAO,aAAA,CAAAC,CAAc,CACzC,CAUA,SAAS+B,CAAAA,CAEPd,CAAAA,CAEA5F,CAAAA,CACM,CACN,MAAA,CAAO,gBAAA,CAAiB4F,CAAAA,CAAQ,CAC9B,KAAA,CAAO,CACL,KAAM,CACJ,OAAO5F,CAAAA,CAAO,KAChB,CAAA,CACA,UAAA,CAAY,KACZ,YAAA,CAAc,IAChB,CAAA,CACA,SAAA,CAAW,CACT,GAAA,EAAM,CACJ,OAAOA,CAAAA,CAAO,SAChB,CAAA,CACA,UAAA,CAAY,IAAA,CACZ,aAAc,IAChB,CAAA,CACA,SAAA,CAAW,CACT,GAAA,EAAM,CACJ,OAAOA,CAAAA,CAAO,SAChB,CAAA,CACA,UAAA,CAAY,IAAA,CACZ,YAAA,CAAc,IAChB,CAAA,CACA,aAAA,CAAe,CACb,GAAA,EAAM,CACJ,OAAOA,EAAO,aAChB,CAAA,CACA,UAAA,CAAY,IAAA,CACZ,YAAA,CAAc,IAChB,EACA,OAAA,CAAS,CACP,GAAA,EAAM,CACJ,OAAOA,CAAAA,CAAO,OAChB,CAAA,CACA,UAAA,CAAY,IAAA,CACZ,YAAA,CAAc,IAChB,CACF,CAAC,CAAA,CAED4F,CAAAA,CAAO,SAAA,CAAY5F,CAAAA,CAAO,SAAA,CAAU,IAAA,CAAKA,CAAM,CAAA,CAC/C4F,CAAAA,CAAO,KAAA,CAAQ5F,CAAAA,CAAO,KAAA,CAAM,IAAA,CAAKA,CAAM,CAAA,CACvC4F,CAAAA,CAAO,eAAA,CAAkB5F,CAAAA,CAAO,eAAA,CAAgB,IAAA,CAAKA,CAAM,CAAA,CAC3D4F,CAAAA,CAAO,eAAA,CAAkB5F,CAAAA,CAAO,eAAA,CAAgB,IAAA,CAAKA,CAAM,CAAA,CAC3D4F,CAAAA,CAAO,OAAA,CAAU5F,CAAAA,CAAO,OAAA,CAAQ,IAAA,CAAKA,CAAM,CAAA,CAC3C4F,CAAAA,CAAO,MAAA,CAAS5F,CAAAA,CAAO,MAAA,CAAO,IAAA,CAAKA,CAAM,CAAA,CACzC4F,CAAAA,CAAO,OAAA,CAAU5F,CAAAA,CAAO,OAAA,CAAQ,IAAA,CAAKA,CAAM,CAAA,CAC3C4F,CAAAA,CAAO,WAAA,CAAc5F,CAAAA,CAAO,WAAA,CAAY,IAAA,CAAKA,CAAM,CAAA,CACnD4F,CAAAA,CAAO,OAAA,CAAU5F,CAAAA,CAAO,OAAA,CAAQ,IAAA,CAAKA,CAAM,CAAA,CAI3C,IAAM6G,CAAAA,CAAqB,CACzB,UAAA,CACA,MAAA,CACA,YACA,OAAA,CACA,MAAA,CACA,0BAAA,CACA,4BACF,CAAA,CACA,IAAA,IAAWC,KAAUD,CAAAA,CACbC,CAAAA,IAAUlB,CAAAA,GACdA,CAAAA,CAAOkB,CAAM,CAAA,CAAI9G,EAAO8G,CAAM,CAAA,CAAE,IAAA,CAAK9G,CAAM,CAAA,EAGjD,CAKA,SAAS2G,CAAAA,CAEPf,CAAAA,CACM,CAEJ,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,cACzB,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,MAAA,EAEzB,UAAA,CAAW,IAAM,CACX,CAACA,CAAAA,CAAO,SAAA,EAAa,CAACA,CAAAA,CAAO,aAAA,EAC/B,QAAQ,IAAA,CACN,0IAEF,EAEJ,CAAA,CAAG,CAAC,EAER,CAYA,SAAS9B,EAAAA,CACPd,CAAAA,CACuB,CACvB,IAAM9B,CAAAA,CAAM8B,EAAQ,MAAA,CAGpB,GAAI,CAAC9B,CAAAA,CACH,MAAM,IAAI,MACR,mDAAA,CAAsD,OAAOA,CAC/D,CAAA,CAIF,GAAI8B,CAAAA,CAAQ,SAAW,MAAA,EAAaA,CAAAA,CAAQ,MAAA,EAAU,CAAA,CACpD,MAAM,IAAI,MAAM,8CAA8C,CAAA,CAIhE,GAAIA,CAAAA,CAAQ,YAAA,EAAgB,CAACoC,oBAAgBpC,CAAAA,CAAQ,YAAY,CAAA,CAC/D,MAAM,IAAI,KAAA,CACR,sJAGF,CAAA,CAIE,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,YAAA,GAEvB9B,CAAAA,CAAI,iBAAmB,MAAA,CAAO,IAAA,CAAKA,CAAAA,CAAI,eAAe,CAAA,CAAE,MAAA,CAAS,GACnE,OAAA,CAAQ,IAAA,CACN,mJAGF,CAAA,CAIE8B,CAAAA,CAAQ,MAAA,EAAUA,EAAQ,MAAA,CAAS,CAAA,GACd9B,CAAAA,CAAI,MAAA,EAAU,MAAA,GAAUA,CAAAA,CAAI,QAEjD,OAAA,CAAQ,IAAA,CACN,CAAA,6BAAA,EAAgC8B,CAAAA,CAAQ,MAAM,CAAA,0CAAA,CAChD,IAMF,OAAOA,CAAAA,CAAQ,OAAA,EAAY,QAAA,CAAWA,CAAAA,CAAQ,OAAA,CAAU,OACjC,eAAA,EACvB,OAAA,CAAQ,IAAA,CACN,mNAGF,CAAA,CAAA,CAKJ,GAAM,CAAE,OAAA,CAAAyB,CAAAA,CAAS,KAAA,CAAAC,CAAAA,CAAO,aAAA,CAAAC,CAAc,EAAIC,CAAAA,CAAwB5B,CAAO,CAAA,CAGrEiC,CAAAA,CAAgD,IAAA,CAIhDjF,CAAAA,CAAc,KAGlBA,CAAAA,CAASqF,mBAAAA,CAAa,CACpB,OAAA,CAAS,CACP,CACE,GAAInE,CAAAA,CAAI,EAAA,CACR,MAAA,CAAQA,CAAAA,CAAI,MAAA,CAAO,KAAA,CACnB,aAAcA,CAAAA,CAAI,MAAA,CAAO,YAAA,CACzB,IAAA,CAAMA,CAAAA,CAAI,IAAA,CACV,OAAQA,CAAAA,CAAI,MAAA,CACZ,MAAA,CAAQA,CAAAA,CAAI,MAAA,CACZ,OAAA,CAASA,EAAI,OAAA,CACb,WAAA,CAAaA,CAAAA,CAAI,WAAA,CACjB,SAAA,CAAWA,CAAAA,CAAI,UACf,KAAA,CAAOA,CAAAA,CAAI,KAAA,CACX,OAAA,CAASA,CAAAA,CAAI,OACf,CAEF,CAAA,CACA,OAAA,CAAS8B,CAAAA,CAAQ,OAAA,CACjB,OAAA,CAAAyB,CAAAA,CACA,MAAAC,CAAAA,CACA,aAAA,CAAAC,CAAAA,CACA,MAAA,CAAQ3B,CAAAA,CAAQ,MAAA,CAChB,MAAOA,CAAAA,CAAQ,KAAA,CACf,iBAAA,CAAmB,IAAM,CAEvB,GAAIA,EAAQ,YAAA,CACV,IAAA,GAAW,CAACrD,CAAAA,CAAKtB,CAAK,CAAA,GAAK,OAAO,OAAA,CAAQ2E,CAAAA,CAAQ,YAAY,CAAA,CACxD5E,mBAAAA,CAAc,GAAA,CAAIuB,CAAG,CAAA,GACxBK,CAAAA,CAAO,KAAA,CAAkCL,CAAG,CAAA,CAAItB,CAAAA,CAAAA,CAIrD,GAAI4G,CAAAA,CAAe,CACjB,GAAI,CAACG,mBAAAA,CAAgBH,CAAa,EAC5B,OAAA,CAAQ,GAAA,CAAI,QAAA,GAAa,YAAA,EAC3B,OAAA,CAAQ,IAAA,CACN,2EACF,CAAA,CAAA,KAGF,IAAA,GAAW,CAACtF,CAAAA,CAAKtB,CAAK,CAAA,GAAK,OAAO,OAAA,CAAQ4G,CAAa,CAAA,CACjD7G,mBAAAA,CAAc,GAAA,CAAIuB,CAAG,IACxBK,CAAAA,CAAO,KAAA,CAAkCL,CAAG,CAAA,CAAItB,CAAAA,CAAAA,CAGrD4G,CAAAA,CAAgB,KAClB,CACF,CACF,CAAC,CAAA,CAGD,IAAM8B,CAAAA,CAAc,IAAI,KAAA,CACtB,EAAC,CACD,CACE,GAAA,CAAI7I,CAAAA,CAAGgC,EAA4B,CACjC,GAAI,OAAOA,CAAAA,EAAc,QAAA,EAGrB,CAAA9B,oBAAc,GAAA,CAAI8B,CAAS,CAAA,CAI/B,OAAQC,CAAAA,EAAsC,CAC5CH,EAAO,QAAA,CAAS,CAAE,IAAA,CAAME,CAAAA,CAAW,GAAGC,CAAQ,CAAC,EACjD,CACF,CAAA,CACA,GAAA,CAAIjC,CAAAA,CAAGC,CAAAA,CAAuB,CAI5B,OAHI,OAAOA,CAAAA,EAAS,QAAA,EAGhBC,mBAAAA,CAAc,GAAA,CAAID,CAAI,CAAA,CACjB,KAAA,CAGF+C,CAAAA,CAAI,MAAA,CAAS/C,CAAAA,IAAQ+C,CAAAA,CAAI,OAAS,KAC3C,CAAA,CACA,OAAA,EAAU,CACR,OAAOA,CAAAA,CAAI,OAAS,MAAA,CAAO,IAAA,CAAKA,CAAAA,CAAI,MAAM,CAAA,CAAI,EAChD,CAAA,CACA,wBAAA,CAAyBhD,CAAAA,CAAGC,CAAAA,CAAuB,CACjD,GAAI,OAAOA,CAAAA,EAAS,QAAA,EAGhB,CAAAC,mBAAAA,CAAc,GAAA,CAAID,CAAI,GAGtB+C,CAAAA,CAAI,MAAA,EAAU/C,CAAAA,IAAQ+C,CAAAA,CAAI,MAAA,CAC5B,OAAO,CAAE,YAAA,CAAc,IAAA,CAAM,UAAA,CAAY,IAAK,CAIlD,CAAA,CACA,KAAM,CACJ,OAAO,MACT,CAAA,CACA,cAAA,EAAiB,CACf,OAAO,MACT,CAAA,CACA,cAAA,EAAiB,CACf,OAAO,MACT,EACA,cAAA,EAAiB,CACf,OAAO,IACT,CAAA,CACA,cAAA,EAAiB,CACf,OAAO,MACT,CACF,CACF,CAAA,CAGIwE,CAAAA,CAAsD,KACpDC,CAAAA,CAAS3C,CAAAA,CAAQ,MAAA,CAEjB4C,CAAAA,CAAgC,CACpC,KAAA,CAAO,SACP,KAAA,CAAO5F,CAAAA,CAAO,KAAA,CACd,OAAA,CAASA,CAAAA,CAAO,OAAA,CAChB,OAAQA,CAAAA,CAAO,MAAA,CACf,MAAA,CAAQ+G,CAAAA,CACR,WAAA,CAAa/G,CAAAA,CAAO,YACpB,OAAA,CAASA,CAAAA,CAAO,OAAA,CAChB,SAAA,CAAWA,CAAAA,CAAO,SAAA,CAElB,MAAM,OAAA,CACJ6F,CAAAA,CACA,CACA,GAAI7F,CAAAA,CAAO,SAAA,CACT,MAAM,IAAI,KAAA,CACR,qFAEF,CAAA,CAGF,IAAMQ,CAAAA,CAAS,MAAMqF,CAAAA,EAAO,CACxBrF,CAAAA,EAAU,OAAOA,CAAAA,EAAW,QAAA,GAC9ByE,EAAgBzE,CAAAA,EAEpB,CAAA,CAEA,UAAA,EAAmB,CACjBR,CAAAA,CAAO,UAAA,GACT,CAAA,CAEA,KAAA,EAAc,CACZA,CAAAA,CAAO,KAAA,EAAM,CAET2F,GAAUA,CAAAA,CAAS,CAAA,EACEzE,CAAAA,CAAI,MAAA,EAAU,MAAA,GAAUA,CAAAA,CAAI,SAEjDwE,CAAAA,CAAe,WAAA,CAAY,IAAM,CAC/B1F,CAAAA,CAAO,QAAA,CAAS,CAAE,IAAA,CAAM,MAAO,CAAC,EAClC,CAAA,CAAG2F,CAAM,GAGf,CAAA,CAEA,IAAA,EAAa,CACPD,CAAAA,GACF,aAAA,CAAcA,CAAY,EAC1BA,CAAAA,CAAe,IAAA,CAAA,CAEjB1F,CAAAA,CAAO,IAAA,GACT,CAAA,CAEA,SAAgB,CACd,IAAA,CAAK,IAAA,EAAK,CACVA,CAAAA,CAAO,OAAA,GACT,CAAA,CAEA,cAAA,CAAewG,CAAAA,CAA0C,CAEtDxG,CAAAA,CAAe,cAAA,CAAe,CAC7B,EAAA,CAAIwG,CAAAA,CAAU,EAAA,CACd,MAAA,CAAQA,CAAAA,CAAU,MAAA,CAAO,MACzB,YAAA,CAAcA,CAAAA,CAAU,MAAA,CAAO,YAAA,CAC/B,IAAA,CAAMA,CAAAA,CAAU,KAChB,MAAA,CAAQA,CAAAA,CAAU,MAAA,CAClB,MAAA,CAAQA,CAAAA,CAAU,MAAA,CAClB,QAASA,CAAAA,CAAU,OAAA,CACnB,WAAA,CAAaA,CAAAA,CAAU,WAAA,CACvB,SAAA,CAAWA,EAAU,SAAA,CACrB,KAAA,CAAOA,CAAAA,CAAU,KAAA,CACjB,OAAA,CAASA,CAAAA,CAAU,OACrB,CAAC,EACH,CAEF,CAAA,CAEA,OAAAE,CAAAA,CAAuBd,CAAAA,CAAQ5F,CAAM,CAAA,CACrC2G,CAAAA,CAAiBf,CAAM,CAAA,CAEhBA,CACT","file":"chunk-LAH2FMON.cjs","sourcesContent":["/**\n * Proxy factory functions for system-level namespace translation.\n *\n * Extracted from system.ts to reduce file size. All functions are pure\n * proxy factories — they create proxies that translate between unprefixed\n * module keys and prefixed internal keys (e.g., `token` ↔ `auth::token`).\n *\n * @internal\n */\n\nimport { BLOCKED_PROPS } from \"./tracking.js\";\nimport type { ModulesMap } from \"./types.js\";\n\n/**\n * Namespace separator for internal key prefixing (e.g., \"auth::token\").\n *\n * @internal\n */\nexport const SEPARATOR = \"::\";\n\n// ============================================================================\n// Hardened Proxy Factory\n// ============================================================================\n\n/**\n * Configuration for creating a hardened proxy with consistent security traps.\n *\n * @internal\n */\ninterface HardenedProxyConfig {\n  /** Return the value for a string property access */\n  get: (prop: string) => unknown;\n  /** Handle property assignment. Omit for read-only proxies (returns false). */\n  set?: (prop: string, value: unknown) => boolean;\n  /** Check if a string property exists */\n  has?: (prop: string) => boolean;\n  /** Return all own keys for enumeration */\n  ownKeys?: () => string[];\n  /** Handle property deletion. Omit to reject deletions. */\n  delete?: (prop: string) => boolean;\n}\n\n/**\n * Create a proxy with consistent security hardening.\n *\n * Every proxy created by this factory includes:\n * - Symbol access returns `undefined`\n * - BLOCKED_PROPS (`__proto__`, `constructor`, `prototype`) rejected\n * - `defineProperty` returns `false`\n * - `getPrototypeOf` returns `null`\n * - `setPrototypeOf` returns `false`\n *\n * @internal\n */\nfunction createHardenedProxy<T extends object>(config: HardenedProxyConfig): T {\n  return new Proxy({} as T, {\n    get(_, prop: string | symbol) {\n      if (typeof prop === \"symbol\") {\n        return undefined;\n      }\n      if (BLOCKED_PROPS.has(prop)) {\n        return undefined;\n      }\n\n      return config.get(prop);\n    },\n    set(_, prop: string | symbol, value: unknown) {\n      if (typeof prop === \"symbol\") {\n        return false;\n      }\n      if (BLOCKED_PROPS.has(prop)) {\n        return false;\n      }\n\n      return config.set ? config.set(prop, value) : false;\n    },\n    has(_, prop: string | symbol) {\n      if (typeof prop === \"symbol\") {\n        return false;\n      }\n      if (BLOCKED_PROPS.has(prop)) {\n        return false;\n      }\n\n      return config.has ? config.has(prop) : false;\n    },\n    deleteProperty(_, prop: string | symbol) {\n      if (typeof prop === \"symbol\") {\n        return false;\n      }\n      if (BLOCKED_PROPS.has(prop)) {\n        return false;\n      }\n\n      return config.delete ? config.delete(prop) : false;\n    },\n    ownKeys() {\n      return config.ownKeys ? config.ownKeys() : [];\n    },\n    getOwnPropertyDescriptor(_, prop: string | symbol) {\n      if (typeof prop === \"symbol\") {\n        return undefined;\n      }\n      if (config.has && typeof prop === \"string\" && config.has(prop)) {\n        return { configurable: true, enumerable: true };\n      }\n\n      return undefined;\n    },\n    defineProperty() {\n      return false;\n    },\n    getPrototypeOf() {\n      return null;\n    },\n    setPrototypeOf() {\n      return false;\n    },\n  });\n}\n\n// ============================================================================\n// Proxy Cache (Performance)\n// ============================================================================\n\n/**\n * WeakMap to cache module facts proxies. Keyed by the facts store object.\n * Inner map is keyed by namespace string.\n */\nconst moduleFactsProxyCache = new WeakMap<\n  Record<string, unknown>,\n  Map<string, Record<string, unknown>>\n>();\n\n/**\n * WeakMap to cache namespaced facts proxies.\n */\nconst namespacedFactsProxyCache = new WeakMap<\n  Record<string, unknown>,\n  Record<string, Record<string, unknown>>\n>();\n\n/**\n * WeakMap to cache namespaced derive proxies.\n */\nconst namespacedDeriveProxyCache = new WeakMap<\n  Record<string, unknown>,\n  Record<string, Record<string, unknown>>\n>();\n\n/**\n * WeakMap to cache module derive proxies.\n */\nconst moduleDeriveProxyCache = new WeakMap<\n  Record<string, unknown>,\n  Map<string, Record<string, unknown>>\n>();\n\n/**\n * WeakMap to cache cross-module facts proxies.\n * Keyed by facts store, then by \"selfNamespace|depKeys\" string.\n */\nconst crossModuleFactsProxyCache = new WeakMap<\n  Record<string, unknown>,\n  Map<string, Record<string, Record<string, unknown>>>\n>();\n\n/**\n * WeakMap to cache module events proxies.\n */\nconst moduleEventsProxyCache = new WeakMap<\n  // biome-ignore lint/suspicious/noExplicitAny: Engine type for cache key\n  any,\n  Map<string, Record<string, (payload?: Record<string, unknown>) => void>>\n>();\n\n// ============================================================================\n// Module Facts Proxy\n// ============================================================================\n\n/**\n * Create a proxy for a single module's facts (used in init, event handlers).\n * Translates unprefixed keys to prefixed: `token` → `auth::token`\n *\n * Proxies are cached per facts store and namespace for performance.\n *\n * @param facts - The flat facts store\n * @param namespace - The module namespace for key prefixing\n * @returns A proxy that translates property access to prefixed keys\n *\n * @internal\n */\nexport function createModuleFactsProxy(\n  facts: Record<string, unknown>,\n  namespace: string,\n): Record<string, unknown> {\n  // Check cache first\n  let namespaceCache = moduleFactsProxyCache.get(facts);\n  if (namespaceCache) {\n    const cached = namespaceCache.get(namespace);\n    if (cached) {\n      return cached;\n    }\n  } else {\n    namespaceCache = new Map();\n    moduleFactsProxyCache.set(facts, namespaceCache);\n  }\n\n  const proxy = createHardenedProxy<Record<string, unknown>>({\n    get: (prop) => {\n      // Reserved properties bypass namespace prefixing (used by engine internals)\n      if (prop === \"$store\" || prop === \"$snapshot\") {\n        return facts[prop];\n      }\n\n      return facts[`${namespace}${SEPARATOR}${prop}`];\n    },\n    set: (prop, value) => {\n      facts[`${namespace}${SEPARATOR}${prop}`] = value;\n\n      return true;\n    },\n    has: (prop) => `${namespace}${SEPARATOR}${prop}` in facts,\n    delete: (prop) => {\n      delete facts[`${namespace}${SEPARATOR}${prop}`];\n\n      return true;\n    },\n  });\n\n  namespaceCache.set(namespace, proxy);\n\n  return proxy;\n}\n\n// ============================================================================\n// Namespaced Facts Proxy\n// ============================================================================\n\n/**\n * Create a nested proxy for namespaced facts access.\n * `facts.auth.token` → reads `auth::token` from flat store\n *\n * Uses Set for O(1) namespace lookups and caches the outer proxy.\n *\n * @param facts - The flat facts store\n * @param modulesMap - Map of module namespaces to module definitions\n * @param getModuleNames - Function returning current module names (supports dynamic registration)\n * @returns A proxy that delegates to per-module facts proxies\n *\n * @internal\n */\nexport function createNamespacedFactsProxy(\n  facts: Record<string, unknown>,\n  modulesMap: ModulesMap,\n  getModuleNames: () => string[],\n): Record<string, Record<string, unknown>> {\n  // Check cache first\n  const cached = namespacedFactsProxyCache.get(facts);\n  if (cached) {\n    return cached;\n  }\n\n  const proxy = createHardenedProxy<Record<string, Record<string, unknown>>>({\n    get: (namespace) => {\n      if (!Object.hasOwn(modulesMap, namespace)) {\n        return undefined;\n      }\n\n      return createModuleFactsProxy(facts, namespace);\n    },\n    has: (namespace) => Object.hasOwn(modulesMap, namespace),\n    ownKeys: () => getModuleNames(),\n  });\n\n  namespacedFactsProxyCache.set(facts, proxy);\n\n  return proxy;\n}\n\n// ============================================================================\n// Cross-Module Facts Proxy\n// ============================================================================\n\n/**\n * Create a proxy for cross-module facts access with \"self\" for own module.\n * `facts.self.users` → reads own module's facts\n * `facts.auth.token` → reads dependency module's facts\n *\n * Used when a module has crossModuleDeps defined.\n *\n * @param facts - The flat facts store\n * @param selfNamespace - The namespace of the module that owns this proxy\n * @param depNamespaces - Array of declared dependency namespaces\n * @returns A proxy that provides `self` and declared dependency access\n *\n * @internal\n */\nexport function createCrossModuleFactsProxy(\n  facts: Record<string, unknown>,\n  selfNamespace: string,\n  depNamespaces: string[],\n): Record<string, Record<string, unknown>> {\n  // depNamespaces comes from Object.keys() which has stable order per module,\n  // so join is sufficient (no need to sort)\n  const cacheKey = `${selfNamespace}|${depNamespaces.join(\",\")}`;\n\n  // Check cache first\n  let namespaceCache = crossModuleFactsProxyCache.get(facts);\n  if (namespaceCache) {\n    const cached = namespaceCache.get(cacheKey);\n    if (cached) {\n      return cached;\n    }\n  } else {\n    namespaceCache = new Map();\n    crossModuleFactsProxyCache.set(facts, namespaceCache);\n  }\n\n  const depNamesSet = new Set(depNamespaces);\n  const allKeys = [\"self\", ...depNamespaces];\n\n  const proxy = createHardenedProxy<Record<string, Record<string, unknown>>>({\n    get: (key) => {\n      // \"self\" maps to own module's namespace\n      if (key === \"self\") {\n        return createModuleFactsProxy(facts, selfNamespace);\n      }\n\n      // Check if it's a declared dependency\n      if (depNamesSet.has(key)) {\n        return createModuleFactsProxy(facts, key);\n      }\n\n      // Dev-mode warning for undeclared cross-module access\n      if (process.env.NODE_ENV !== \"production\") {\n        console.warn(\n          `[Directive] Module \"${selfNamespace}\" accessed undeclared cross-module property \"${key}\". ` +\n            `Add it to crossModuleDeps or use \"facts.self.${key}\" for own module facts.`,\n        );\n      }\n\n      return undefined;\n    },\n    has: (key) => key === \"self\" || depNamesSet.has(key),\n    ownKeys: () => allKeys,\n  });\n\n  namespaceCache.set(cacheKey, proxy);\n\n  return proxy;\n}\n\n// ============================================================================\n// Module Derive Proxy\n// ============================================================================\n\n/**\n * Create a proxy for a single module's derivations.\n * Translates unprefixed keys to prefixed: `status` → `auth::status`\n *\n * Proxies are cached per derive store and namespace for performance.\n *\n * @param derive - The flat derivations store\n * @param namespace - The module namespace for key prefixing\n * @returns A read-only proxy that translates property access to prefixed keys\n *\n * @internal\n */\nexport function createModuleDeriveProxy(\n  derive: Record<string, unknown>,\n  namespace: string,\n): Record<string, unknown> {\n  // Check cache first\n  let namespaceCache = moduleDeriveProxyCache.get(derive);\n  if (namespaceCache) {\n    const cached = namespaceCache.get(namespace);\n    if (cached) {\n      return cached;\n    }\n  } else {\n    namespaceCache = new Map();\n    moduleDeriveProxyCache.set(derive, namespaceCache);\n  }\n\n  const proxy = createHardenedProxy<Record<string, unknown>>({\n    get: (prop) => derive[`${namespace}${SEPARATOR}${prop}`],\n    has: (prop) => `${namespace}${SEPARATOR}${prop}` in derive,\n  });\n\n  namespaceCache.set(namespace, proxy);\n\n  return proxy;\n}\n\n// ============================================================================\n// Namespaced Derive Proxy\n// ============================================================================\n\n/**\n * Create a nested proxy for namespaced derivations access.\n * `derive.auth.status` → reads `auth::status` from flat derive\n *\n * Uses Set for O(1) namespace lookups and caches the outer proxy.\n *\n * @param derive - The flat derivations store\n * @param modulesMap - Map of module namespaces to module definitions\n * @param getModuleNames - Function returning current module names\n * @returns A read-only proxy that delegates to per-module derive proxies\n *\n * @internal\n */\nexport function createNamespacedDeriveProxy(\n  derive: Record<string, unknown>,\n  modulesMap: ModulesMap,\n  getModuleNames: () => string[],\n): Record<string, Record<string, unknown>> {\n  // Check cache first\n  const cached = namespacedDeriveProxyCache.get(derive);\n  if (cached) {\n    return cached;\n  }\n\n  const proxy = createHardenedProxy<Record<string, Record<string, unknown>>>({\n    get: (namespace) => {\n      if (!Object.hasOwn(modulesMap, namespace)) {\n        return undefined;\n      }\n\n      return createModuleDeriveProxy(derive, namespace);\n    },\n    has: (namespace) => Object.hasOwn(modulesMap, namespace),\n    ownKeys: () => getModuleNames(),\n  });\n\n  namespacedDeriveProxyCache.set(derive, proxy);\n\n  return proxy;\n}\n\n// ============================================================================\n// Namespaced Events Proxy\n// ============================================================================\n\n/**\n * Create a nested proxy for namespaced events access.\n * `events.auth.login({ token })` → dispatches `{ type: \"auth::login\", token }`\n *\n * Uses Set for O(1) namespace lookups and caches proxies for performance.\n *\n * @param engine - The engine instance (used for dispatch)\n * @param modulesMap - Map of module namespaces to module definitions\n * @param getModuleNames - Function returning current module names\n * @returns A read-only proxy that returns event dispatcher functions per namespace\n *\n * @internal\n */\nexport function createNamespacedEventsProxy(\n  // biome-ignore lint/suspicious/noExplicitAny: Engine type\n  engine: any,\n  modulesMap: ModulesMap,\n  getModuleNames: () => string[],\n): Record<string, Record<string, (payload?: Record<string, unknown>) => void>> {\n  // Get or create the namespace cache for this engine\n  let namespaceCache = moduleEventsProxyCache.get(engine);\n  if (!namespaceCache) {\n    namespaceCache = new Map();\n    moduleEventsProxyCache.set(engine, namespaceCache);\n  }\n\n  return createHardenedProxy<\n    Record<string, Record<string, (payload?: Record<string, unknown>) => void>>\n  >({\n    get: (namespace) => {\n      if (!Object.hasOwn(modulesMap, namespace)) {\n        return undefined;\n      }\n\n      // Check cache for this namespace's event proxy\n      const cached = namespaceCache!.get(namespace);\n      if (cached) {\n        return cached;\n      }\n\n      // Create and cache the module events proxy\n      const moduleEventsProxy = createHardenedProxy<\n        Record<string, (payload?: Record<string, unknown>) => void>\n      >({\n        get: (eventName) => {\n          return (payload?: Record<string, unknown>) => {\n            engine.dispatch({\n              type: `${namespace}${SEPARATOR}${eventName}`,\n              ...payload,\n            });\n          };\n        },\n      });\n\n      namespaceCache!.set(namespace, moduleEventsProxy);\n\n      return moduleEventsProxy;\n    },\n    has: (namespace) => Object.hasOwn(modulesMap, namespace),\n    ownKeys: () => getModuleNames(),\n  });\n}\n\n// ============================================================================\n// Key Conversion Helpers\n// ============================================================================\n\n/**\n * Convert a namespaced key (e.g., \"auth.status\") to internal prefixed format (\"auth::status\").\n * If the key is already in prefixed format, returns it unchanged.\n *\n * @param key - The key to convert (dot-separated or already prefixed)\n * @returns The internal prefixed key\n *\n * @example\n * toInternalKey(\"auth.status\") // → \"auth::status\"\n * toInternalKey(\"auth::status\") // → \"auth::status\" (unchanged)\n * toInternalKey(\"status\")      // → \"status\" (unchanged)\n *\n * @internal\n */\nexport function toInternalKey(key: string): string {\n  // If key contains a dot, convert to separator format\n  if (key.includes(\".\")) {\n    const [namespace, ...rest] = key.split(\".\");\n\n    return `${namespace}${SEPARATOR}${rest.join(SEPARATOR)}`;\n  }\n  // Already in internal format or simple key\n\n  return key;\n}\n\n// ============================================================================\n// Snapshot Helpers\n// ============================================================================\n\n/**\n * Convert flat internal keys (e.g., `\"auth::token\"`) to nested namespaced\n * format (e.g., `{ auth: { token: ... } }`).\n *\n * Keys without a separator are grouped under `_root`.\n *\n * @param flatData - Object with internal prefixed keys\n * @returns Nested object grouped by namespace\n *\n * @internal\n */\nexport function denormalizeFlatKeys(\n  flatData: Record<string, unknown>,\n): Record<string, Record<string, unknown>> {\n  const result: Record<string, Record<string, unknown>> = {};\n\n  for (const [key, value] of Object.entries(flatData)) {\n    const sepIndex = key.indexOf(SEPARATOR);\n    if (sepIndex > 0) {\n      const ns = key.slice(0, sepIndex);\n      const local = key.slice(sepIndex + SEPARATOR.length);\n      if (!result[ns]) {\n        result[ns] = {};\n      }\n      result[ns][local] = value;\n    } else {\n      if (!result._root) {\n        result._root = {};\n      }\n      result._root[key] = value;\n    }\n  }\n\n  return result;\n}\n","/**\n * Module transformation for namespaced systems.\n *\n * Converts a module's unprefixed keys to prefixed internal format\n * (e.g., `token` → `auth::token`). Used by both the initial system\n * setup loop and `registerModule()`.\n *\n * @internal\n */\n\nimport {\n  SEPARATOR,\n  createCrossModuleFactsProxy,\n  createModuleDeriveProxy,\n  createModuleFactsProxy,\n} from \"./system-proxies.js\";\nimport type { ModuleDef, ModuleSchema } from \"./types.js\";\n\n/**\n * The flat engine module format produced by prefixModuleDefinition.\n * Ready to be passed to createEngine or engine.registerModule.\n *\n * @internal\n */\nexport interface FlatModuleDefinition {\n  id: string;\n  schema: Record<string, unknown>;\n  requirements: Record<string, unknown>;\n  init: ((facts: Record<string, unknown>) => void) | undefined;\n  derive:\n    | Record<string, (facts: unknown, derive: unknown) => unknown>\n    | undefined;\n  events: Record<string, (facts: unknown, event: unknown) => void> | undefined;\n  effects: Record<string, unknown> | undefined;\n  constraints: Record<string, unknown> | undefined;\n  resolvers: Record<string, unknown> | undefined;\n  hooks: ModuleDef<ModuleSchema>[\"hooks\"];\n  history: { snapshotEvents?: string[] };\n}\n\n/**\n * Options for prefixModuleDefinition.\n *\n * @internal\n */\nexport interface PrefixModuleOptions {\n  /** The module to transform */\n  mod: ModuleDef<ModuleSchema>;\n  /** The namespace to prefix keys with */\n  namespace: string;\n  /** Set of modules to snapshot (null = all). Used for history filtering. */\n  snapshotModulesSet: Set<string> | null;\n}\n\n/**\n * Create a facts proxy appropriate for the module's cross-module configuration.\n * Returns a cross-module proxy when deps are declared, otherwise a module proxy.\n *\n * @internal\n */\nfunction createScopedFactsProxy(\n  facts: Record<string, unknown>,\n  namespace: string,\n  hasCrossModuleDeps: boolean,\n  depNamespaces: string[],\n): Record<string, unknown> {\n  return hasCrossModuleDeps\n    ? createCrossModuleFactsProxy(facts, namespace, depNamespaces)\n    : createModuleFactsProxy(facts, namespace);\n}\n\n/** Prefix a key with the namespace separator */\nfunction prefixKey(namespace: string, key: string): string {\n  return `${namespace}${SEPARATOR}${key}`;\n}\n\n/** Return a non-empty record or undefined */\nfunction nonEmpty<T extends Record<string, unknown>>(rec: T): T | undefined {\n  return Object.keys(rec).length > 0 ? rec : undefined;\n}\n\n/** Prefix schema fact keys */\nfunction prefixSchema(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(mod.schema.facts)) {\n    result[prefixKey(namespace, key)] = value;\n  }\n\n  return result;\n}\n\n/** Create a prefixed init function */\nfunction prefixInit(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n): ((facts: Record<string, unknown>) => void) | undefined {\n  if (!mod.init) {\n    return undefined;\n  }\n\n  // biome-ignore lint/suspicious/noExplicitAny: Facts proxy type coercion\n  return (facts: any) => {\n    const moduleFactsProxy = createModuleFactsProxy(facts, namespace);\n    // biome-ignore lint/suspicious/noExplicitAny: Module init type coercion\n    (mod.init as any)(moduleFactsProxy);\n  };\n}\n\n/** Prefix derivation keys and wrap derivation functions with scoped proxies */\nfunction prefixDerive(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n  hasCrossModuleDeps: boolean,\n  depNamespaces: string[],\n): Record<string, (facts: unknown, derive: unknown) => unknown> | undefined {\n  if (!mod.derive) {\n    return undefined;\n  }\n\n  const result: Record<string, (facts: unknown, derive: unknown) => unknown> =\n    {};\n  for (const [key, fn] of Object.entries(mod.derive)) {\n    result[prefixKey(namespace, key)] = (facts: unknown, derive: unknown) => {\n      const factsProxy = createScopedFactsProxy(\n        facts as Record<string, unknown>,\n        namespace,\n        hasCrossModuleDeps,\n        depNamespaces,\n      );\n      const deriveProxy = createModuleDeriveProxy(\n        derive as Record<string, unknown>,\n        namespace,\n      );\n      // biome-ignore lint/suspicious/noExplicitAny: Derive function type coercion\n      return (fn as any)(factsProxy, deriveProxy);\n    };\n  }\n\n  return nonEmpty(result);\n}\n\n/** Prefix event handler keys and wrap handlers with module-scoped proxies */\nfunction prefixEventHandlers(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n): Record<string, (facts: unknown, event: unknown) => void> | undefined {\n  if (!mod.events) {\n    return undefined;\n  }\n\n  const result: Record<string, (facts: unknown, event: unknown) => void> = {};\n  for (const [key, handler] of Object.entries(mod.events)) {\n    result[prefixKey(namespace, key)] = (facts: unknown, event: unknown) => {\n      const moduleFactsProxy = createModuleFactsProxy(\n        facts as Record<string, unknown>,\n        namespace,\n      );\n      // biome-ignore lint/suspicious/noExplicitAny: Event handler type coercion\n      (handler as any)(moduleFactsProxy, event);\n    };\n  }\n\n  return nonEmpty(result);\n}\n\n/** Prefix constraint keys and wrap when/require with scoped proxies */\nfunction prefixConstraints(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n  hasCrossModuleDeps: boolean,\n  depNamespaces: string[],\n): Record<string, unknown> | undefined {\n  if (!mod.constraints) {\n    return undefined;\n  }\n\n  const result: Record<string, unknown> = {};\n  for (const [key, constraint] of Object.entries(mod.constraints)) {\n    const constraintDef = constraint as {\n      when: (facts: unknown) => boolean | Promise<boolean>;\n      require: unknown | ((facts: unknown) => unknown);\n      priority?: number;\n      async?: boolean;\n      timeout?: number;\n      deps?: string[];\n      after?: string[];\n    };\n\n    result[prefixKey(namespace, key)] = {\n      ...constraintDef,\n      deps: constraintDef.deps?.map((dep) => prefixKey(namespace, dep)),\n      after: constraintDef.after?.map((dep) =>\n        dep.includes(SEPARATOR) ? dep : prefixKey(namespace, dep),\n      ),\n      when: (facts: unknown) => {\n        const factsProxy = createScopedFactsProxy(\n          facts as Record<string, unknown>,\n          namespace,\n          hasCrossModuleDeps,\n          depNamespaces,\n        );\n\n        return constraintDef.when(factsProxy);\n      },\n      require:\n        typeof constraintDef.require === \"function\"\n          ? (facts: unknown) => {\n              const factsProxy = createScopedFactsProxy(\n                facts as Record<string, unknown>,\n                namespace,\n                hasCrossModuleDeps,\n                depNamespaces,\n              );\n\n              return (constraintDef.require as (facts: unknown) => unknown)(\n                factsProxy,\n              );\n            }\n          : constraintDef.require,\n    };\n  }\n\n  return nonEmpty(result);\n}\n\n/** Prefix resolver keys and wrap resolve/resolveBatch/resolveBatchWithResults with scoped proxies */\nfunction prefixResolvers(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n  hasCrossModuleDeps: boolean,\n  depNamespaces: string[],\n): Record<string, unknown> | undefined {\n  if (!mod.resolvers) {\n    return undefined;\n  }\n\n  const result: Record<string, unknown> = {};\n  for (const [key, resolver] of Object.entries(mod.resolvers)) {\n    const resolverDef = resolver as {\n      requirement: string;\n      resolve?: (\n        req: unknown,\n        ctx: { facts: unknown; signal: AbortSignal },\n      ) => Promise<void>;\n      resolveBatch?: (\n        reqs: unknown[],\n        ctx: { facts: unknown; signal: AbortSignal },\n      ) => Promise<void>;\n      resolveBatchWithResults?: (\n        reqs: unknown[],\n        ctx: { facts: unknown; signal: AbortSignal },\n      ) => Promise<unknown>;\n      key?: (req: unknown) => string;\n      retry?: unknown;\n      timeout?: number;\n    };\n\n    /** Wrap resolver ctx.facts with the module-scoped proxy */\n    function wrapCtx(ctx: { facts: unknown; signal: AbortSignal }): {\n      facts: unknown;\n      signal: AbortSignal;\n    } {\n      return {\n        facts: createScopedFactsProxy(\n          ctx.facts as Record<string, unknown>,\n          namespace,\n          hasCrossModuleDeps,\n          depNamespaces,\n        ),\n        signal: ctx.signal,\n      };\n    }\n\n    result[prefixKey(namespace, key)] = {\n      ...resolverDef,\n      ...(resolverDef.resolve && {\n        resolve: async (\n          req: unknown,\n          ctx: { facts: unknown; signal: AbortSignal },\n        ) => {\n          await resolverDef.resolve!(req, wrapCtx(ctx));\n        },\n      }),\n      ...(resolverDef.resolveBatch && {\n        resolveBatch: async (\n          reqs: unknown[],\n          ctx: { facts: unknown; signal: AbortSignal },\n        ) => {\n          await resolverDef.resolveBatch!(reqs, wrapCtx(ctx));\n        },\n      }),\n      ...(resolverDef.resolveBatchWithResults && {\n        resolveBatchWithResults: async (\n          reqs: unknown[],\n          ctx: { facts: unknown; signal: AbortSignal },\n        ) => {\n          return resolverDef.resolveBatchWithResults!(reqs, wrapCtx(ctx));\n        },\n      }),\n    };\n  }\n\n  return nonEmpty(result);\n}\n\n/** Prefix effect keys and wrap run functions with scoped proxies */\nfunction prefixEffects(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n  hasCrossModuleDeps: boolean,\n  depNamespaces: string[],\n): Record<string, unknown> | undefined {\n  if (!mod.effects) {\n    return undefined;\n  }\n\n  const result: Record<string, unknown> = {};\n  for (const [key, effect] of Object.entries(mod.effects)) {\n    const effectDef = effect as {\n      // biome-ignore lint/suspicious/noExplicitAny: Effect run function type\n      run: (facts: any, prev: any) => void | Promise<void>;\n      deps?: string[];\n    };\n\n    result[prefixKey(namespace, key)] = {\n      ...effectDef,\n      // biome-ignore lint/suspicious/noExplicitAny: Effect run function wrapper\n      run: (facts: any, prev: any) => {\n        const factsProxy = createScopedFactsProxy(\n          facts as Record<string, unknown>,\n          namespace,\n          hasCrossModuleDeps,\n          depNamespaces,\n        );\n        const prevProxy = prev\n          ? createScopedFactsProxy(\n              prev as Record<string, unknown>,\n              namespace,\n              hasCrossModuleDeps,\n              depNamespaces,\n            )\n          : undefined;\n\n        return effectDef.run(factsProxy, prevProxy);\n      },\n      deps: effectDef.deps?.map((dep) => prefixKey(namespace, dep)),\n    };\n  }\n\n  return nonEmpty(result);\n}\n\n/** Compute history config with prefixed snapshot events */\nfunction prefixHistory(\n  mod: ModuleDef<ModuleSchema>,\n  namespace: string,\n  snapshotModulesSet: Set<string> | null,\n): { snapshotEvents?: string[] } {\n  return {\n    snapshotEvents:\n      snapshotModulesSet && !snapshotModulesSet.has(namespace)\n        ? [] // Module excluded from snapshots\n        : mod.history?.snapshotEvents?.map((e: string) =>\n            prefixKey(namespace, e),\n          ),\n  };\n}\n\n/**\n * Transform a module definition by prefixing all keys with a namespace.\n *\n * Handles: facts, derivations, events schema, init, derive, events handlers,\n * constraints (with deps/after), resolvers, and effects.\n *\n * @returns A flat module definition ready for the engine\n *\n * @internal\n */\nexport function prefixModuleDefinition(\n  options: PrefixModuleOptions,\n): FlatModuleDefinition {\n  const { mod, namespace, snapshotModulesSet } = options;\n\n  // Compute cross-module deps info once (used by derive, constraints, effects)\n  const hasCrossModuleDeps = !!(\n    mod.crossModuleDeps && Object.keys(mod.crossModuleDeps).length > 0\n  );\n  const depNamespaces = hasCrossModuleDeps\n    ? Object.keys(mod.crossModuleDeps!)\n    : [];\n\n  return {\n    id: mod.id,\n    schema: prefixSchema(mod, namespace),\n    requirements: mod.schema.requirements ?? {},\n    init: prefixInit(mod, namespace),\n    derive: prefixDerive(mod, namespace, hasCrossModuleDeps, depNamespaces),\n    events: prefixEventHandlers(mod, namespace),\n    effects: prefixEffects(mod, namespace, hasCrossModuleDeps, depNamespaces),\n    constraints: prefixConstraints(\n      mod,\n      namespace,\n      hasCrossModuleDeps,\n      depNamespaces,\n    ),\n    resolvers: prefixResolvers(\n      mod,\n      namespace,\n      hasCrossModuleDeps,\n      depNamespaces,\n    ),\n    hooks: mod.hooks,\n    history: prefixHistory(mod, namespace, snapshotModulesSet),\n  };\n}\n","/**\n * System - The top-level API for creating a Directive runtime\n *\n * A system combines modules with plugins and configuration.\n * Modules are passed as an object with namespaced access:\n *\n * @example\n * ```typescript\n * const system = createSystem({\n *   modules: { auth: authModule, data: dataModule },\n * });\n *\n * system.facts.auth.token       // Namespaced facts\n * system.derive.data.userCount  // Namespaced derivations\n * system.events.auth.login()    // Namespaced events\n * ```\n */\n\nimport { isPrototypeSafe } from \"../utils/utils.js\";\nimport { createEngine } from \"./engine.js\";\nimport { prefixModuleDefinition } from \"./system-module-transform.js\";\nimport {\n  SEPARATOR,\n  createNamespacedDeriveProxy,\n  createNamespacedEventsProxy,\n  createNamespacedFactsProxy,\n  denormalizeFlatKeys,\n  toInternalKey,\n} from \"./system-proxies.js\";\nimport { BLOCKED_PROPS } from \"./tracking.js\";\nimport type {\n  CreateSystemOptionsNamed,\n  CreateSystemOptionsSingle,\n  ErrorBoundaryConfig,\n  HistoryOption,\n  ModuleDef,\n  ModuleSchema,\n  ModulesMap,\n  NamespacedSystem,\n  SingleModuleSystem,\n  TraceOption,\n} from \"./types.js\";\n\n// ============================================================================\n// Topological Sort for Module Dependencies\n// ============================================================================\n\n/**\n * Perform topological sort on modules based on crossModuleDeps.\n * Returns module namespaces in dependency order (dependencies first).\n *\n * @throws Error if circular dependency detected\n */\nfunction topologicalSort<Modules extends ModulesMap>(\n  modulesMap: Modules,\n): Array<keyof Modules & string> {\n  const namespaces = Object.keys(modulesMap) as Array<keyof Modules & string>;\n  const namespacesSet = new Set<string>(namespaces);\n  const visited = new Set<string>();\n  const visiting = new Set<string>(); // For cycle detection\n  const result: Array<keyof Modules & string> = [];\n  const path: string[] = []; // Reuse array to avoid O(n²) memory\n\n  function visit(namespace: string): void {\n    if (visited.has(namespace)) return;\n\n    // Cycle detection\n    if (visiting.has(namespace)) {\n      const cycleStart = path.indexOf(namespace);\n      const cycle = [...path.slice(cycleStart), namespace].join(\" → \");\n      throw new Error(\n        `[Directive] Circular dependency detected: ${cycle}. ` +\n          \"Modules cannot have circular crossModuleDeps. \" +\n          \"Break the cycle by removing one of the cross-module references.\",\n      );\n    }\n\n    visiting.add(namespace);\n    path.push(namespace);\n\n    // Visit dependencies first\n    const mod = modulesMap[namespace];\n    if (mod?.crossModuleDeps) {\n      for (const depNamespace of Object.keys(mod.crossModuleDeps)) {\n        if (namespacesSet.has(depNamespace)) {\n          visit(depNamespace);\n        }\n      }\n    }\n\n    path.pop();\n    visiting.delete(namespace);\n    visited.add(namespace);\n    result.push(namespace as keyof Modules & string);\n  }\n\n  for (const namespace of namespaces) {\n    visit(namespace);\n  }\n\n  return result;\n}\n\n/**\n * Build the list of internal prefixed keys (facts + derivations) for a module namespace.\n * Used by subscribe/subscribeModule to map namespaces to their engine keys.\n */\nfunction collectNamespaceKeys(\n  namespace: string,\n  mod: ModuleDef<ModuleSchema>,\n): string[] {\n  const keys: string[] = [];\n  for (const key of Object.keys(mod.schema.facts)) {\n    keys.push(`${namespace}${SEPARATOR}${key}`);\n  }\n  if (mod.schema.derivations) {\n    for (const key of Object.keys(mod.schema.derivations)) {\n      keys.push(`${namespace}${SEPARATOR}${key}`);\n    }\n  }\n\n  return keys;\n}\n\n// ============================================================================\n// createSystem\n// ============================================================================\n\n/**\n * Create a Directive system.\n *\n * Supports two modes:\n * - **Single module**: Use `module` prop for direct access without namespace\n * - **Multiple modules**: Use `modules` prop for namespaced access\n *\n * @remarks\n * The system is the top-level runtime object. It owns the reconciliation loop,\n * manages plugins, and exposes reactive accessors for facts, derivations, and events.\n * Call `system.start()` to begin the lifecycle (init → ready → running → settled).\n *\n * @param options - System configuration with either `module` (single) or `modules` (namespaced)\n * @returns A fully-typed {@link System} instance with reactive accessors\n *\n * @example Single module (direct access)\n * ```ts\n * const system = createSystem({ module: counterModule });\n * system.facts.count           // Direct access\n * system.events.increment()    // Direct events\n * ```\n *\n * @example Multiple modules (namespaced access)\n * ```ts\n * const system = createSystem({\n *   modules: { auth: authModule, data: dataModule },\n * });\n * system.facts.auth.token      // Namespaced access\n * system.events.auth.login()   // Namespaced events\n * ```\n *\n * @public\n */\nexport function createSystem<S extends ModuleSchema>(\n  options: CreateSystemOptionsSingle<S>,\n): SingleModuleSystem<S>;\nexport function createSystem<const Modules extends ModulesMap>(\n  options: CreateSystemOptionsNamed<Modules>,\n): NamespacedSystem<Modules>;\n/** @internal Implementation overload — see public overloads above. */\nexport function createSystem<\n  S extends ModuleSchema,\n  Modules extends ModulesMap,\n>(\n  options: CreateSystemOptionsSingle<S> | CreateSystemOptionsNamed<Modules>,\n): SingleModuleSystem<S> | NamespacedSystem<Modules> {\n  // Single module mode (module prop)\n  if (\"module\" in options) {\n    if (!options.module) {\n      throw new Error(\n        \"[Directive] createSystem requires a module. Got: \" +\n          typeof options.module,\n      );\n    }\n    return createSingleModuleSystem(\n      options as CreateSystemOptionsSingle<S>,\n    ) as SingleModuleSystem<S>;\n  }\n\n  // Namespaced mode (modules prop)\n  const namedOptions = options as CreateSystemOptionsNamed<Modules>;\n\n  // Validate not an array\n  if (Array.isArray(namedOptions.modules)) {\n    throw new Error(\n      \"[Directive] createSystem expects modules as an object, not an array.\\n\\n\" +\n        \"Instead of:\\n\" +\n        \"  createSystem({ modules: [authModule, dataModule] })\\n\\n\" +\n        \"Use:\\n\" +\n        \"  createSystem({ modules: { auth: authModule, data: dataModule } })\\n\\n\" +\n        \"Or for a single module:\\n\" +\n        \"  createSystem({ module: counterModule })\",\n    );\n  }\n\n  // Detect single ModuleDef accidentally passed to `modules:` instead of `module:`\n  const mods = namedOptions.modules as Record<string, unknown>;\n  if (mods && typeof mods === \"object\" && \"id\" in mods && \"schema\" in mods) {\n    throw new Error(\n      \"[Directive] A single module was passed to `modules:`. \" +\n        \"For a single module, use `module:` instead:\\n\\n\" +\n        \"  createSystem({ module: myModule })\\n\\n\" +\n        \"For multiple modules, wrap in an object:\\n\" +\n        \"  createSystem({ modules: { myName: myModule } })\",\n    );\n  }\n\n  return createNamespacedSystem(namedOptions) as NamespacedSystem<Modules>;\n}\n\n// ============================================================================\n// Internal Implementation\n// ============================================================================\n\nfunction createNamespacedSystem<Modules extends ModulesMap>(\n  options: CreateSystemOptionsNamed<Modules>,\n): NamespacedSystem<Modules> {\n  const modulesMap = options.modules;\n  const moduleNamespaces = new Set(Object.keys(modulesMap));\n\n  // Build snapshot module filter set (null = all modules snapshot)\n  const historyConfig =\n    typeof options.history === \"object\" ? options.history : null;\n  const snapshotModulesSet = historyConfig?.snapshotModules\n    ? new Set(historyConfig.snapshotModules)\n    : null;\n\n  // Validate tickMs if provided\n  if (options.tickMs !== undefined && options.tickMs <= 0) {\n    throw new Error(\"[Directive] tickMs must be a positive number\");\n  }\n\n  // Dev-mode: Validate crossModuleDeps reference existing modules\n  if (process.env.NODE_ENV !== \"production\") {\n    for (const [namespace, mod] of Object.entries(modulesMap)) {\n      if (mod.crossModuleDeps) {\n        for (const depNamespace of Object.keys(mod.crossModuleDeps)) {\n          if (depNamespace === namespace) {\n            console.warn(\n              `[Directive] Module \"${namespace}\" references itself in crossModuleDeps. ` +\n                `Use \"facts.self\" to access own module's facts instead.`,\n            );\n          } else if (!moduleNamespaces.has(depNamespace)) {\n            console.warn(\n              `[Directive] Module \"${namespace}\" declares crossModuleDeps.${depNamespace}, ` +\n                `but no module with namespace \"${depNamespace}\" exists in the system. ` +\n                `Available modules: ${[...moduleNamespaces].join(\", \")}`,\n            );\n          }\n        }\n      }\n    }\n  }\n\n  // Dev-mode: Validate snapshotModules references existing modules\n  if (process.env.NODE_ENV !== \"production\" && historyConfig?.snapshotModules) {\n    for (const name of historyConfig.snapshotModules) {\n      if (!moduleNamespaces.has(name)) {\n        console.warn(\n          `[Directive] history.snapshotModules entry \"${name}\" doesn't match any module. ` +\n            `Available modules: ${[...moduleNamespaces].join(\", \")}`,\n        );\n      }\n    }\n  }\n\n  // Determine module initialization order\n  let orderedNamespaces: Array<keyof Modules & string>;\n  const initOrder = options.initOrder ?? \"auto\";\n\n  if (Array.isArray(initOrder)) {\n    // Explicit order provided - validate it includes all modules\n    const explicitOrder = initOrder as Array<keyof Modules & string>;\n    const missingModules = Object.keys(modulesMap).filter(\n      (ns) => !explicitOrder.includes(ns as keyof Modules & string),\n    );\n    if (missingModules.length > 0) {\n      throw new Error(\n        `[Directive] initOrder is missing modules: ${missingModules.join(\", \")}. ` +\n          \"All modules must be included in the explicit order.\",\n      );\n    }\n    orderedNamespaces = explicitOrder;\n  } else if (initOrder === \"declaration\") {\n    // Use object key order (current behavior)\n    orderedNamespaces = Object.keys(modulesMap) as Array<\n      keyof Modules & string\n    >;\n  } else {\n    // \"auto\" - use topological sort based on crossModuleDeps\n    orderedNamespaces = topologicalSort(modulesMap);\n  }\n\n  // Apply zero-config defaults if enabled\n  const { history, trace, errorBoundary } = applyZeroConfigDefaults(options);\n\n  // Validate module names and schema keys don't contain the separator\n  for (const namespace of Object.keys(modulesMap)) {\n    if (namespace.includes(SEPARATOR)) {\n      throw new Error(\n        `[Directive] Module name \"${namespace}\" contains the reserved separator \"${SEPARATOR}\". ` +\n          `Module names cannot contain \"${SEPARATOR}\".`,\n      );\n    }\n    const mod = modulesMap[namespace];\n    if (mod) {\n      for (const key of Object.keys(mod.schema.facts)) {\n        if (key.includes(SEPARATOR)) {\n          throw new Error(\n            `[Directive] Schema key \"${key}\" in module \"${namespace}\" contains the reserved separator \"${SEPARATOR}\". ` +\n              `Schema keys cannot contain \"${SEPARATOR}\".`,\n          );\n        }\n      }\n    }\n  }\n\n  // Cached module names array, shared by all namespaced proxies.\n  // Set to null on registerModule to lazily recompute.\n  const moduleNamesCache: { names: string[] | null } = { names: null };\n  function getModuleNames(): string[] {\n    if (moduleNamesCache.names === null) {\n      moduleNamesCache.names = Object.keys(modulesMap);\n    }\n\n    return moduleNamesCache.names;\n  }\n\n  // Transform modules to flat format with prefixed keys\n  // auth.token → auth::token internally\n  // Process in dependency order (determined above)\n  const flatModules = orderedNamespaces\n    .map((namespace) => {\n      const mod = modulesMap[namespace];\n      if (!mod) return null; // TypeScript guard - should never happen\n\n      return prefixModuleDefinition({\n        mod,\n        namespace,\n        snapshotModulesSet,\n      });\n    })\n    .filter((m): m is NonNullable<typeof m> => m !== null);\n\n  // Dev-mode warning: tickMs set without tick event handler\n  if (\n    process.env.NODE_ENV !== \"production\" &&\n    options.tickMs &&\n    options.tickMs > 0\n  ) {\n    const hasTickHandler = flatModules.some(\n      (m) =>\n        m.events &&\n        Object.keys(m.events).some((k) => k.endsWith(`${SEPARATOR}tick`)),\n    );\n    if (!hasTickHandler) {\n      console.warn(\n        `[Directive] tickMs is set to ${options.tickMs}ms but no module defines a \"tick\" event handler.`,\n      );\n    }\n  }\n\n  // Store for hydrated facts (set by hydrate(), applied during init)\n  let hydratedFacts: Record<string, Record<string, unknown>> | null = null;\n\n  // Engine reference (set after creation, used by applyNamespacedFacts)\n  // biome-ignore lint/suspicious/noExplicitAny: Engine type\n  let engine: any = null;\n\n  /**\n   * Apply namespaced facts to the engine's flat store.\n   * Converts { auth: { token: \"x\" } } to { \"auth::token\": \"x\" }\n   * Includes prototype pollution protection.\n   */\n  function applyNamespacedFacts(\n    namespacedFacts: Record<string, Record<string, unknown>>,\n  ): void {\n    for (const [namespace, facts] of Object.entries(namespacedFacts)) {\n      // Skip blocked property names\n      if (BLOCKED_PROPS.has(namespace)) {\n        if (process.env.NODE_ENV !== \"production\") {\n          console.warn(\n            `[Directive] initialFacts/hydrate contains blocked namespace \"${namespace}\". Skipping.`,\n          );\n        }\n        continue;\n      }\n\n      if (!moduleNamespaces.has(namespace)) {\n        if (process.env.NODE_ENV !== \"production\") {\n          console.warn(\n            `[Directive] initialFacts/hydrate contains unknown namespace \"${namespace}\". ` +\n              `Available modules: ${[...moduleNamespaces].join(\", \")}`,\n          );\n        }\n        continue;\n      }\n\n      // Validate facts object for prototype pollution\n      if (facts && typeof facts === \"object\" && !isPrototypeSafe(facts)) {\n        throw new Error(\n          `[Directive] initialFacts/hydrate for namespace \"${namespace}\" contains potentially ` +\n            \"dangerous keys (__proto__, constructor, or prototype). This may indicate a \" +\n            \"prototype pollution attack.\",\n        );\n      }\n\n      for (const [key, value] of Object.entries(facts)) {\n        // Skip blocked keys\n        if (BLOCKED_PROPS.has(key)) continue;\n        (engine.facts as Record<string, unknown>)[\n          `${namespace}${SEPARATOR}${key}`\n        ] = value;\n      }\n    }\n  }\n\n  // Create engine with flat modules\n  engine = createEngine({\n    // biome-ignore lint/suspicious/noExplicitAny: Module format conversion\n    modules: flatModules as any,\n    plugins: options.plugins,\n    history,\n    trace,\n    errorBoundary,\n    tickMs: options.tickMs,\n    cloud: options.cloud,\n    // Callback to apply initialFacts/hydrate during init phase (after module inits, before reconcile)\n    onAfterModuleInit: () => {\n      // Apply initialFacts first\n      if (options.initialFacts) {\n        applyNamespacedFacts(\n          options.initialFacts as Record<string, Record<string, unknown>>,\n        );\n      }\n      // Apply hydrated facts second (takes precedence)\n      if (hydratedFacts) {\n        applyNamespacedFacts(hydratedFacts);\n        hydratedFacts = null;\n      }\n    },\n  });\n\n  // Build namespace → internal keys map (for subscribeModule / wildcard support)\n  const namespaceKeysMap = new Map<string, string[]>();\n  for (const namespace of Object.keys(modulesMap)) {\n    const mod = modulesMap[namespace];\n    if (!mod) continue;\n    namespaceKeysMap.set(namespace, collectNamespaceKeys(namespace, mod));\n  }\n\n  // Create namespaced proxies for external access\n  const namespacedFactsProxy = createNamespacedFactsProxy(\n    engine.facts as unknown as Record<string, unknown>,\n    modulesMap,\n    getModuleNames,\n  );\n  const namespacedDeriveProxy = createNamespacedDeriveProxy(\n    engine.derive as unknown as Record<string, unknown>,\n    modulesMap,\n    getModuleNames,\n  );\n  const namespacedEventsProxy = createNamespacedEventsProxy(\n    engine,\n    modulesMap,\n    getModuleNames,\n  );\n\n  // Build the namespaced system\n  let tickInterval: ReturnType<typeof setInterval> | null = null;\n  const tickMs = options.tickMs;\n\n  const system: NamespacedSystem<Modules> = {\n    _mode: \"namespaced\",\n    facts: namespacedFactsProxy,\n    history: engine.history,\n    derive: namespacedDeriveProxy,\n    events: namespacedEventsProxy,\n    constraints: engine.constraints,\n    effects: engine.effects,\n    resolvers: engine.resolvers,\n\n    async hydrate(\n      loader: () =>\n        | Promise<Record<string, Record<string, unknown>>>\n        | Record<string, Record<string, unknown>>,\n    ) {\n      if (engine.isRunning) {\n        throw new Error(\n          \"[Directive] hydrate() must be called before start(). \" +\n            \"The system is already running.\",\n        );\n      }\n\n      const result = await loader();\n      if (result && typeof result === \"object\") {\n        hydratedFacts = result;\n      }\n    },\n\n    initialize(): void {\n      engine.initialize();\n    },\n\n    start(): void {\n      // Engine.start() runs module inits, then applies initialFacts/hydrate via callback\n      engine.start();\n\n      if (tickMs && tickMs > 0) {\n        // Find the first module with a tick event and dispatch to it\n        let tickEventKey: string | undefined;\n        for (const m of flatModules) {\n          if (m?.events) {\n            tickEventKey = Object.keys(m.events).find((k) =>\n              k.endsWith(`${SEPARATOR}tick`),\n            );\n            if (tickEventKey) break;\n          }\n        }\n        if (tickEventKey) {\n          const key = tickEventKey;\n          tickInterval = setInterval(() => {\n            engine.dispatch({ type: key });\n          }, tickMs);\n        }\n      }\n    },\n\n    stop(): void {\n      if (tickInterval) {\n        clearInterval(tickInterval);\n        tickInterval = null;\n      }\n      engine.stop();\n    },\n\n    destroy(): void {\n      this.stop();\n      engine.destroy();\n    },\n\n    dispatch(event: { type: string; [key: string]: unknown }) {\n      engine.dispatch(event);\n    },\n\n    /**\n     * Read a derivation value using namespaced syntax.\n     * Accepts \"namespace.key\" format.\n     *\n     * @example\n     * system.read(\"auth.status\")  // → \"authenticated\"\n     * system.read(\"data.count\")   // → 5\n     */\n    read<T = unknown>(derivationId: string): T {\n      return engine.read(toInternalKey(derivationId));\n    },\n\n    /**\n     * Subscribe to derivation changes using namespaced syntax.\n     * Accepts \"namespace.key\" format.\n     * Supports wildcard \"namespace.*\" to subscribe to all keys in a module.\n     *\n     * @example\n     * system.subscribe([\"auth.status\", \"data.count\"], () => {\n     *   console.log(\"Auth or data changed\");\n     * });\n     *\n     * @example Wildcard\n     * system.subscribe([\"game.*\", \"chat.*\"], () => render());\n     */\n    subscribe(ids: string[], listener: () => void): () => void {\n      const internalIds: string[] = [];\n      for (const id of ids) {\n        if (id.endsWith(\".*\")) {\n          const ns = id.slice(0, -2);\n          const keys = namespaceKeysMap.get(ns);\n          if (keys) {\n            internalIds.push(...keys);\n          } else if (process.env.NODE_ENV !== \"production\") {\n            console.warn(\n              `[Directive] subscribe wildcard \"${id}\" — namespace \"${ns}\" not found.`,\n            );\n          }\n        } else {\n          internalIds.push(toInternalKey(id));\n        }\n      }\n      return engine.subscribe(internalIds, listener);\n    },\n\n    /**\n     * Subscribe to ALL fact and derivation changes in a module namespace.\n     * Shorthand for subscribing to every key in a module.\n     *\n     * @example\n     * const unsub = system.subscribeModule(\"game\", () => render());\n     */\n    subscribeModule(namespace: string, listener: () => void): () => void {\n      const keys = namespaceKeysMap.get(namespace);\n      if (!keys || keys.length === 0) {\n        if (process.env.NODE_ENV !== \"production\") {\n          console.warn(\n            `[Directive] subscribeModule(\"${namespace}\") — namespace not found. ` +\n              `Available: ${[...namespaceKeysMap.keys()].join(\", \")}`,\n          );\n        }\n        return () => {};\n      }\n      return engine.subscribe(keys, listener);\n    },\n\n    /**\n     * Watch a fact or derivation for changes using namespaced syntax.\n     * The key is auto-detected -- works with both fact keys and derivation keys.\n     * Accepts \"namespace.key\" format.\n     *\n     * @example\n     * system.watch(\"auth.token\", (newVal, oldVal) => { ... })   // fact\n     * system.watch(\"auth.status\", (newVal, oldVal) => { ... })  // derivation\n     */\n    watch<T = unknown>(\n      id: string,\n      callback: (newValue: T, previousValue: T | undefined) => void,\n      options?: { equalityFn?: (a: T, b: T | undefined) => boolean },\n    ): () => void {\n      return engine.watch(toInternalKey(id), callback, options);\n    },\n\n    /**\n     * Returns a promise that resolves when the predicate becomes true.\n     * The predicate receives namespaced facts (e.g., facts.auth.token).\n     */\n    when(\n      predicate: (facts: Record<string, unknown>) => boolean,\n      options?: { timeout?: number },\n    ): Promise<void> {\n      // Wrap predicate to provide namespaced facts view\n      return engine.when(\n        () =>\n          predicate(namespacedFactsProxy as unknown as Record<string, unknown>),\n        options,\n      );\n    },\n\n    /**\n     * Get a distributable snapshot with namespaced key translation.\n     * Accepts \"namespace.key\" format in options (e.g., \"auth.effectivePlan\").\n     * Returns data with namespaced keys (e.g., { auth: { effectivePlan: ... } }).\n     */\n    getDistributableSnapshot<T = Record<string, unknown>>(options?: {\n      includeDerivations?: string[];\n      excludeDerivations?: string[];\n      includeFacts?: string[];\n      ttlSeconds?: number;\n      metadata?: Record<string, unknown>;\n      includeVersion?: boolean;\n    }): {\n      data: T;\n      createdAt: number;\n      expiresAt?: number;\n      version?: string;\n      metadata?: Record<string, unknown>;\n    } {\n      // Translate namespaced keys to internal format\n      const internalOptions = {\n        ...options,\n        includeDerivations: options?.includeDerivations?.map(toInternalKey),\n        excludeDerivations: options?.excludeDerivations?.map(toInternalKey),\n        includeFacts: options?.includeFacts?.map(toInternalKey),\n      };\n\n      const snapshot = engine.getDistributableSnapshot(internalOptions);\n\n      // Transform data keys from internal format (auth::status) to namespaced format (auth: { status })\n      return {\n        ...snapshot,\n        data: denormalizeFlatKeys(\n          snapshot.data as Record<string, unknown>,\n        ) as T,\n      };\n    },\n\n    /**\n     * Watch for changes to distributable snapshot derivations.\n     * Accepts \"namespace.key\" format in options.\n     * Callback receives data with namespaced keys.\n     */\n    watchDistributableSnapshot<T = Record<string, unknown>>(\n      options: {\n        includeDerivations?: string[];\n        excludeDerivations?: string[];\n        includeFacts?: string[];\n        ttlSeconds?: number;\n        metadata?: Record<string, unknown>;\n        includeVersion?: boolean;\n      },\n      callback: (snapshot: {\n        data: T;\n        createdAt: number;\n        expiresAt?: number;\n        version?: string;\n        metadata?: Record<string, unknown>;\n      }) => void,\n    ): () => void {\n      // Translate namespaced keys to internal format\n      const internalOptions = {\n        ...options,\n        includeDerivations: options?.includeDerivations?.map(toInternalKey),\n        excludeDerivations: options?.excludeDerivations?.map(toInternalKey),\n        includeFacts: options?.includeFacts?.map(toInternalKey),\n      };\n\n      return engine.watchDistributableSnapshot(\n        internalOptions,\n        (snapshot: {\n          data: Record<string, unknown>;\n          createdAt: number;\n          expiresAt?: number;\n          version?: string;\n          metadata?: Record<string, unknown>;\n        }) => {\n          // Transform data keys from internal format to namespaced format\n          callback({\n            ...snapshot,\n            data: denormalizeFlatKeys(\n              snapshot.data as Record<string, unknown>,\n            ) as T,\n          });\n        },\n      );\n    },\n    registerModule(\n      namespace: string,\n      moduleDef: ModuleDef<ModuleSchema>,\n    ): void {\n      // Validate namespace\n      if (moduleNamespaces.has(namespace)) {\n        throw new Error(\n          `[Directive] Module namespace \"${namespace}\" already exists. ` +\n            \"Cannot register a duplicate namespace.\",\n        );\n      }\n      if (namespace.includes(SEPARATOR)) {\n        throw new Error(\n          `[Directive] Module name \"${namespace}\" contains the reserved separator \"${SEPARATOR}\".`,\n        );\n      }\n      if (BLOCKED_PROPS.has(namespace)) {\n        throw new Error(\n          `[Directive] Module name \"${namespace}\" is a blocked property.`,\n        );\n      }\n\n      // Validate schema keys\n      for (const key of Object.keys(moduleDef.schema.facts)) {\n        if (key.includes(SEPARATOR)) {\n          throw new Error(\n            `[Directive] Schema key \"${key}\" in module \"${namespace}\" contains the reserved separator \"${SEPARATOR}\".`,\n          );\n        }\n      }\n\n      const mod = moduleDef;\n\n      // Transform module definition with namespace prefixing\n      const flat = prefixModuleDefinition({\n        mod,\n        namespace,\n        snapshotModulesSet,\n      });\n\n      // Register namespace\n      moduleNamespaces.add(namespace);\n      (modulesMap as Record<string, ModuleDef<ModuleSchema>>)[namespace] = mod;\n      // Invalidate cached module names so proxies see the new namespace\n      moduleNamesCache.names = null;\n\n      // Update namespace keys map\n      namespaceKeysMap.set(namespace, collectNamespaceKeys(namespace, mod));\n\n      // Delegate to engine's registerModule\n      // biome-ignore lint/suspicious/noExplicitAny: Engine registerModule type\n      (engine as any).registerModule(flat);\n    },\n\n    // biome-ignore lint/suspicious/noExplicitAny: Type narrowing for NamespacedSystem\n  } as any;\n\n  bindEnginePassthroughs(system, engine);\n  warnIfNotStarted(system);\n\n  return system;\n}\n\n// ============================================================================\n// Shared Helpers (deduplication between single-module and namespaced systems)\n// ============================================================================\n\n/**\n * Apply zero-config defaults to system options (history, trace, errorBoundary).\n * Returns the resolved values; does not mutate the options object.\n */\nfunction applyZeroConfigDefaults(options: {\n  zeroConfig?: boolean;\n  history?: HistoryOption;\n  trace?: TraceOption;\n  errorBoundary?: ErrorBoundaryConfig;\n}): {\n  history: HistoryOption | undefined;\n  trace: TraceOption | undefined;\n  errorBoundary: ErrorBoundaryConfig | undefined;\n} {\n  let history: HistoryOption | undefined = options.history;\n  const trace: TraceOption | undefined = options.trace;\n  let errorBoundary: ErrorBoundaryConfig | undefined = options.errorBoundary;\n\n  if (options.zeroConfig) {\n    const isDev = process.env.NODE_ENV !== \"production\";\n\n    history = history ?? isDev;\n\n    errorBoundary = {\n      onConstraintError: \"skip\",\n      onResolverError: \"skip\",\n      onEffectError: \"skip\",\n      onDerivationError: \"skip\",\n      ...options.errorBoundary,\n    };\n  }\n\n  return { history, trace, errorBoundary };\n}\n\n/**\n * Bind shared engine passthrough properties and methods onto a system object.\n * These are identical between single-module and namespaced systems.\n *\n * For methods that namespaced systems override (dispatch, read, subscribe,\n * watch, when, getDistributableSnapshot, watchDistributableSnapshot),\n * only binds them if not already defined on the system object.\n */\nfunction bindEnginePassthroughs(\n  // biome-ignore lint/suspicious/noExplicitAny: Engine type\n  system: any,\n  // biome-ignore lint/suspicious/noExplicitAny: Engine type\n  engine: any,\n): void {\n  Object.defineProperties(system, {\n    trace: {\n      get() {\n        return engine.trace;\n      },\n      enumerable: true,\n      configurable: true,\n    },\n    isRunning: {\n      get() {\n        return engine.isRunning;\n      },\n      enumerable: true,\n      configurable: true,\n    },\n    isSettled: {\n      get() {\n        return engine.isSettled;\n      },\n      enumerable: true,\n      configurable: true,\n    },\n    isInitialized: {\n      get() {\n        return engine.isInitialized;\n      },\n      enumerable: true,\n      configurable: true,\n    },\n    isReady: {\n      get() {\n        return engine.isReady;\n      },\n      enumerable: true,\n      configurable: true,\n    },\n  });\n\n  system.whenReady = engine.whenReady.bind(engine);\n  system.batch = engine.batch.bind(engine);\n  system.onSettledChange = engine.onSettledChange.bind(engine);\n  system.onHistoryChange = engine.onHistoryChange.bind(engine);\n  system.inspect = engine.inspect.bind(engine);\n  system.settle = engine.settle.bind(engine);\n  system.explain = engine.explain.bind(engine);\n  system.getSnapshot = engine.getSnapshot.bind(engine);\n  system.restore = engine.restore.bind(engine);\n\n  // Direct engine passthroughs — only bind if not already defined\n  // (namespaced systems override these with key-translating versions)\n  const overridableMethods = [\n    \"dispatch\",\n    \"read\",\n    \"subscribe\",\n    \"watch\",\n    \"when\",\n    \"getDistributableSnapshot\",\n    \"watchDistributableSnapshot\",\n  ] as const;\n  for (const method of overridableMethods) {\n    if (!(method in system)) {\n      system[method] = engine[method].bind(engine);\n    }\n  }\n}\n\n/**\n * Emit a dev-mode warning if system.start() is never called.\n */\nfunction warnIfNotStarted(\n  // biome-ignore lint/suspicious/noExplicitAny: System type\n  system: any,\n): void {\n  if (\n    process.env.NODE_ENV !== \"production\" &&\n    process.env.NODE_ENV !== \"test\"\n  ) {\n    setTimeout(() => {\n      if (!system.isRunning && !system.isInitialized) {\n        console.warn(\n          \"[Directive] System created but start() was never called. \" +\n            \"Constraints, resolvers, and effects will not run until you call system.start().\",\n        );\n      }\n    }, 0);\n  }\n}\n\n// Proxy helpers and key conversion utilities are in system-proxies.ts\n\n// ============================================================================\n// Single Module System\n// ============================================================================\n\n/**\n * Create a system with a single module (no namespacing).\n * Facts, derivations, and events are accessed directly.\n */\nfunction createSingleModuleSystem<S extends ModuleSchema>(\n  options: CreateSystemOptionsSingle<S>,\n): SingleModuleSystem<S> {\n  const mod = options.module;\n\n  // Validate module is provided\n  if (!mod) {\n    throw new Error(\n      \"[Directive] createSystem requires a module. Got: \" + typeof mod,\n    );\n  }\n\n  // Validate tickMs if provided\n  if (options.tickMs !== undefined && options.tickMs <= 0) {\n    throw new Error(\"[Directive] tickMs must be a positive number\");\n  }\n\n  // Validate initialFacts for prototype pollution\n  if (options.initialFacts && !isPrototypeSafe(options.initialFacts)) {\n    throw new Error(\n      \"[Directive] initialFacts contains potentially dangerous keys \" +\n        \"(__proto__, constructor, or prototype). This may indicate a \" +\n        \"prototype pollution attack.\",\n    );\n  }\n\n  // Dev-mode warnings\n  if (process.env.NODE_ENV !== \"production\") {\n    // Warn if crossModuleDeps is defined (ignored in single module mode)\n    if (mod.crossModuleDeps && Object.keys(mod.crossModuleDeps).length > 0) {\n      console.warn(\n        \"[Directive] Single module mode ignores crossModuleDeps. \" +\n          \"Use multiple modules if cross-module access is needed: \" +\n          \"createSystem({ modules: { ... } })\",\n      );\n    }\n\n    // Warn if tickMs set without tick event handler\n    if (options.tickMs && options.tickMs > 0) {\n      const hasTickHandler = mod.events && \"tick\" in mod.events;\n      if (!hasTickHandler) {\n        console.warn(\n          `[Directive] tickMs is set to ${options.tickMs}ms but module has no \"tick\" event handler.`,\n        );\n      }\n    }\n\n    // Warn if snapshotModules is set (has no effect in single-module mode)\n    const singleHistoryConfig =\n      typeof options.history === \"object\" ? options.history : null;\n    if (singleHistoryConfig?.snapshotModules) {\n      console.warn(\n        \"[Directive] history.snapshotModules has no effect in single-module mode. \" +\n          \"Use history.snapshotEvents on the module definition instead, or switch to \" +\n          \"createSystem({ modules: { ... } }) for multi-module filtering.\",\n      );\n    }\n  }\n\n  // Apply zero-config defaults if enabled\n  const { history, trace, errorBoundary } = applyZeroConfigDefaults(options);\n\n  // Store for hydrated facts\n  let hydratedFacts: Record<string, unknown> | null = null;\n\n  // Engine reference\n  // biome-ignore lint/suspicious/noExplicitAny: Engine type\n  let engine: any = null;\n\n  // Create engine with the module directly (no prefixing needed)\n  engine = createEngine({\n    modules: [\n      {\n        id: mod.id,\n        schema: mod.schema.facts,\n        requirements: mod.schema.requirements,\n        init: mod.init,\n        derive: mod.derive,\n        events: mod.events,\n        effects: mod.effects,\n        constraints: mod.constraints,\n        resolvers: mod.resolvers,\n        hooks: mod.hooks,\n        history: mod.history,\n      },\n      // biome-ignore lint/suspicious/noExplicitAny: Module format\n    ] as any,\n    plugins: options.plugins,\n    history,\n    trace,\n    errorBoundary,\n    tickMs: options.tickMs,\n    cloud: options.cloud,\n    onAfterModuleInit: () => {\n      // Apply initialFacts (already validated for prototype safety above)\n      if (options.initialFacts) {\n        for (const [key, value] of Object.entries(options.initialFacts)) {\n          if (BLOCKED_PROPS.has(key)) continue;\n          (engine.facts as Record<string, unknown>)[key] = value;\n        }\n      }\n      // Apply hydrated facts (takes precedence)\n      if (hydratedFacts) {\n        if (!isPrototypeSafe(hydratedFacts)) {\n          if (process.env.NODE_ENV !== \"production\") {\n            console.warn(\n              \"[Directive] hydrate() data contains potentially dangerous keys. Skipping.\",\n            );\n          }\n        } else {\n          for (const [key, value] of Object.entries(hydratedFacts)) {\n            if (BLOCKED_PROPS.has(key)) continue;\n            (engine.facts as Record<string, unknown>)[key] = value;\n          }\n        }\n        hydratedFacts = null;\n      }\n    },\n  });\n\n  // Create events proxy for direct access\n  const eventsProxy = new Proxy(\n    {} as Record<string, (payload?: Record<string, unknown>) => void>,\n    {\n      get(_, eventName: string | symbol) {\n        if (typeof eventName === \"symbol\") {\n          return undefined;\n        }\n        if (BLOCKED_PROPS.has(eventName)) {\n          return undefined;\n        }\n\n        return (payload?: Record<string, unknown>) => {\n          engine.dispatch({ type: eventName, ...payload });\n        };\n      },\n      has(_, prop: string | symbol) {\n        if (typeof prop === \"symbol\") {\n          return false;\n        }\n        if (BLOCKED_PROPS.has(prop)) {\n          return false;\n        }\n\n        return mod.events ? prop in mod.events : false;\n      },\n      ownKeys() {\n        return mod.events ? Object.keys(mod.events) : [];\n      },\n      getOwnPropertyDescriptor(_, prop: string | symbol) {\n        if (typeof prop === \"symbol\") {\n          return undefined;\n        }\n        if (BLOCKED_PROPS.has(prop)) {\n          return undefined;\n        }\n        if (mod.events && prop in mod.events) {\n          return { configurable: true, enumerable: true };\n        }\n\n        return undefined;\n      },\n      set() {\n        return false;\n      },\n      deleteProperty() {\n        return false;\n      },\n      defineProperty() {\n        return false;\n      },\n      getPrototypeOf() {\n        return null;\n      },\n      setPrototypeOf() {\n        return false;\n      },\n    },\n  );\n\n  // Build the single module system\n  let tickInterval: ReturnType<typeof setInterval> | null = null;\n  const tickMs = options.tickMs;\n\n  const system: SingleModuleSystem<S> = {\n    _mode: \"single\",\n    facts: engine.facts,\n    history: engine.history,\n    derive: engine.derive,\n    events: eventsProxy as SingleModuleSystem<S>[\"events\"],\n    constraints: engine.constraints,\n    effects: engine.effects,\n    resolvers: engine.resolvers,\n\n    async hydrate(\n      loader: () => Promise<Record<string, unknown>> | Record<string, unknown>,\n    ) {\n      if (engine.isRunning) {\n        throw new Error(\n          \"[Directive] hydrate() must be called before start(). \" +\n            \"The system is already running.\",\n        );\n      }\n\n      const result = await loader();\n      if (result && typeof result === \"object\") {\n        hydratedFacts = result as Record<string, unknown>;\n      }\n    },\n\n    initialize(): void {\n      engine.initialize();\n    },\n\n    start(): void {\n      engine.start();\n\n      if (tickMs && tickMs > 0) {\n        const hasTickHandler = mod.events && \"tick\" in mod.events;\n        if (hasTickHandler) {\n          tickInterval = setInterval(() => {\n            engine.dispatch({ type: \"tick\" });\n          }, tickMs);\n        }\n      }\n    },\n\n    stop(): void {\n      if (tickInterval) {\n        clearInterval(tickInterval);\n        tickInterval = null;\n      }\n      engine.stop();\n    },\n\n    destroy(): void {\n      this.stop();\n      engine.destroy();\n    },\n\n    registerModule(moduleDef: ModuleDef<ModuleSchema>): void {\n      // biome-ignore lint/suspicious/noExplicitAny: Engine registerModule type\n      (engine as any).registerModule({\n        id: moduleDef.id,\n        schema: moduleDef.schema.facts,\n        requirements: moduleDef.schema.requirements,\n        init: moduleDef.init,\n        derive: moduleDef.derive,\n        events: moduleDef.events,\n        effects: moduleDef.effects,\n        constraints: moduleDef.constraints,\n        resolvers: moduleDef.resolvers,\n        hooks: moduleDef.hooks,\n        history: moduleDef.history,\n      });\n    },\n    // biome-ignore lint/suspicious/noExplicitAny: Type narrowing\n  } as any;\n\n  bindEnginePassthroughs(system, engine);\n  warnIfNotStarted(system);\n\n  return system;\n}\n"]}

package/dist/chunk-MAARYRI4.js

@@ -0,0 +1,16 @@
+import {y}from'./chunk-DIK3SZBM.js';import {k}from'./chunk-O75OISQ2.js';import {c}from'./chunk-GO63IIN5.js';var f="::";function R(n){return new Proxy({},{get(e,t){if(typeof t!="symbol"&&!k.has(t))return n.get(t)},set(e,t,o){return typeof t=="symbol"||k.has(t)?false:n.set?n.set(t,o):false},has(e,t){return typeof t=="symbol"||k.has(t)?false:n.has?n.has(t):false},deleteProperty(e,t){return typeof t=="symbol"||k.has(t)?false:n.delete?n.delete(t):false},ownKeys(){return n.ownKeys?n.ownKeys():[]},getOwnPropertyDescriptor(e,t){if(typeof t!="symbol"&&n.has&&typeof t=="string"&&n.has(t))return {configurable:true,enumerable:true}},defineProperty(){return  false},getPrototypeOf(){return null},setPrototypeOf(){return  false}})}var q=new WeakMap,I=new WeakMap,H=new WeakMap,V=new WeakMap,W=new WeakMap,z=new WeakMap;function S(n,e){let t=q.get(n);if(t){let r=t.get(e);if(r)return r}else t=new Map,q.set(n,t);let o=R({get:r=>r==="$store"||r==="$snapshot"?n[r]:n[`${e}${f}${r}`],set:(r,a)=>(n[`${e}${f}${r}`]=a,true),has:r=>`${e}${f}${r}`in n,delete:r=>(delete n[`${e}${f}${r}`],true)});return t.set(e,o),o}function U(n,e,t){let o=I.get(n);if(o)return o;let r=R({get:a=>{if(Object.hasOwn(e,a))return S(n,a)},has:a=>Object.hasOwn(e,a),ownKeys:()=>t()});return I.set(n,r),r}function G(n,e,t){let o=`${e}|${t.join(",")}`,r=W.get(n);if(r){let i=r.get(o);if(i)return i}else r=new Map,W.set(n,r);let a=new Set(t),u=["self",...t],y=R({get:i=>{if(i==="self")return S(n,e);if(a.has(i))return S(n,i);process.env.NODE_ENV!=="production"&&console.warn(`[Directive] Module "${e}" accessed undeclared cross-module property "${i}". Add it to crossModuleDeps or use "facts.self.${i}" for own module facts.`);},has:i=>i==="self"||a.has(i),ownKeys:()=>u});return r.set(o,y),y}function A(n,e){let t=V.get(n);if(t){let r=t.get(e);if(r)return r}else t=new Map,V.set(n,t);let o=R({get:r=>n[`${e}${f}${r}`],has:r=>`${e}${f}${r}`in n});return t.set(e,o),o}function L(n,e,t){let o=H.get(n);if(o)return o;let r=R({get:a=>{if(Object.hasOwn(e,a))return A(n,a)},has:a=>Object.hasOwn(e,a),ownKeys:()=>t()});return H.set(n,r),r}function Z(n,e,t){let o=z.get(n);return o||(o=new Map,z.set(n,o)),R({get:r=>{if(!Object.hasOwn(e,r))return;let a=o.get(r);if(a)return a;let u=R({get:y=>i=>{n.dispatch({type:`${r}${f}${y}`,...i});}});return o.set(r,u),u},has:r=>Object.hasOwn(e,r),ownKeys:()=>t()})}function v(n){if(n.includes(".")){let[e,...t]=n.split(".");return `${e}${f}${t.join(f)}`}return n}function F(n){let e={};for(let[t,o]of Object.entries(n)){let r=t.indexOf(f);if(r>0){let a=t.slice(0,r),u=t.slice(r+f.length);e[a]||(e[a]={}),e[a][u]=o;}else e._root||(e._root={}),e._root[t]=o;}return e}function O(n,e,t,o){return t?G(n,e,o):S(n,e)}function M(n,e){return `${n}${f}${e}`}function $(n){return Object.keys(n).length>0?n:void 0}function te(n,e){let t={};for(let[o,r]of Object.entries(n.schema.facts))t[M(e,o)]=r;return t}function re(n,e){if(n.init)return t=>{let o=S(t,e);n.init(o);}}function se(n,e,t,o){if(!n.derive)return;let r={};for(let[a,u]of Object.entries(n.derive))r[M(e,a)]=(y,i)=>{let k=O(y,e,t,o),g=A(i,e);return u(k,g)};return $(r)}function oe(n,e){if(!n.events)return;let t={};for(let[o,r]of Object.entries(n.events))t[M(e,o)]=(a,u)=>{let y=S(a,e);r(y,u);};return $(t)}function ie(n,e,t,o){if(!n.constraints)return;let r={};for(let[a,u]of Object.entries(n.constraints)){let y=u;r[M(e,a)]={...y,deps:y.deps?.map(i=>M(e,i)),after:y.after?.map(i=>i.includes(f)?i:M(e,i)),when:i=>{let k=O(i,e,t,o);return y.when(k)},require:typeof y.require=="function"?i=>{let k=O(i,e,t,o);return y.require(k)}:y.require};}return $(r)}function ae(n,e,t,o){if(!n.resolvers)return;let r={};for(let[u,y]of Object.entries(n.resolvers)){let k=function(g){return {facts:O(g.facts,e,t,o),signal:g.signal}};let i=y;r[M(e,u)]={...i,...i.resolve&&{resolve:async(g,d)=>{await i.resolve(g,k(d));}},...i.resolveBatch&&{resolveBatch:async(g,d)=>{await i.resolveBatch(g,k(d));}},...i.resolveBatchWithResults&&{resolveBatchWithResults:async(g,d)=>i.resolveBatchWithResults(g,k(d))}};}return $(r)}function ce(n,e,t,o){if(!n.effects)return;let r={};for(let[a,u]of Object.entries(n.effects)){let y=u;r[M(e,a)]={...y,run:(i,k)=>{let g=O(i,e,t,o),d=k?O(k,e,t,o):void 0;return y.run(g,d)},deps:y.deps?.map(i=>M(e,i))};}return $(r)}function ue(n,e,t){return {snapshotEvents:t&&!t.has(e)?[]:n.history?.snapshotEvents?.map(o=>M(e,o))}}function T(n){let{mod:e,namespace:t,snapshotModulesSet:o}=n,r=!!(e.crossModuleDeps&&Object.keys(e.crossModuleDeps).length>0),a=r?Object.keys(e.crossModuleDeps):[];return {id:e.id,schema:te(e,t),requirements:e.schema.requirements??{},init:re(e,t),derive:se(e,t,r,a),events:oe(e,t),effects:ce(e,t,r,a),constraints:ie(e,t,r,a),resolvers:ae(e,t,r,a),hooks:e.hooks,history:ue(e,t,o)}}function de(n){let e=Object.keys(n),t=new Set(e),o=new Set,r=new Set,a=[],u=[];function y(i){if(o.has(i))return;if(r.has(i)){let g=u.indexOf(i),d=[...u.slice(g),i].join(" \u2192 ");throw new Error(`[Directive] Circular dependency detected: ${d}. Modules cannot have circular crossModuleDeps. Break the cycle by removing one of the cross-module references.`)}r.add(i),u.push(i);let k=n[i];if(k?.crossModuleDeps)for(let g of Object.keys(k.crossModuleDeps))t.has(g)&&y(g);u.pop(),r.delete(i),o.add(i),a.push(i);}for(let i of e)y(i);return a}function J(n,e){let t=[];for(let o of Object.keys(e.schema.facts))t.push(`${n}${f}${o}`);if(e.schema.derivations)for(let o of Object.keys(e.schema.derivations))t.push(`${n}${f}${o}`);return t}function be(n){if("module"in n){if(!n.module)throw new Error("[Directive] createSystem requires a module. Got: "+typeof n.module);return fe(n)}let e=n;if(Array.isArray(e.modules))throw new Error(`[Directive] createSystem expects modules as an object, not an array.
+
+Instead of:
+  createSystem({ modules: [authModule, dataModule] })
+
+Use:
+  createSystem({ modules: { auth: authModule, data: dataModule } })
+
+Or for a single module:
+  createSystem({ module: counterModule })`);let t=e.modules;if(t&&typeof t=="object"&&"id"in t&&"schema"in t)throw new Error(`[Directive] A single module was passed to \`modules:\`. For a single module, use \`module:\` instead:
+
+  createSystem({ module: myModule })
+
+For multiple modules, wrap in an object:
+  createSystem({ modules: { myName: myModule } })`);return le(e)}function le(n){let e=n.modules,t=new Set(Object.keys(e)),o=typeof n.history=="object"?n.history:null,r=o?.snapshotModules?new Set(o.snapshotModules):null;if(n.tickMs!==void 0&&n.tickMs<=0)throw new Error("[Directive] tickMs must be a positive number");if(process.env.NODE_ENV!=="production"){for(let[s,c]of Object.entries(e))if(c.crossModuleDeps)for(let l of Object.keys(c.crossModuleDeps))l===s?console.warn(`[Directive] Module "${s}" references itself in crossModuleDeps. Use "facts.self" to access own module's facts instead.`):t.has(l)||console.warn(`[Directive] Module "${s}" declares crossModuleDeps.${l}, but no module with namespace "${l}" exists in the system. Available modules: ${[...t].join(", ")}`);}if(process.env.NODE_ENV!=="production"&&o?.snapshotModules)for(let s of o.snapshotModules)t.has(s)||console.warn(`[Directive] history.snapshotModules entry "${s}" doesn't match any module. Available modules: ${[...t].join(", ")}`);let a,u=n.initOrder??"auto";if(Array.isArray(u)){let s=u,c=Object.keys(e).filter(l=>!s.includes(l));if(c.length>0)throw new Error(`[Directive] initOrder is missing modules: ${c.join(", ")}. All modules must be included in the explicit order.`);a=s;}else u==="declaration"?a=Object.keys(e):a=de(e);let{history:y$1,trace:i,errorBoundary:k$1}=Q(n);for(let s of Object.keys(e)){if(s.includes(f))throw new Error(`[Directive] Module name "${s}" contains the reserved separator "${f}". Module names cannot contain "${f}".`);let c=e[s];if(c){for(let l of Object.keys(c.schema.facts))if(l.includes(f))throw new Error(`[Directive] Schema key "${l}" in module "${s}" contains the reserved separator "${f}". Schema keys cannot contain "${f}".`)}}let g={names:null};function d(){return g.names===null&&(g.names=Object.keys(e)),g.names}let w=a.map(s=>{let c=e[s];return c?T({mod:c,namespace:s,snapshotModulesSet:r}):null}).filter(s=>s!==null);process.env.NODE_ENV!=="production"&&n.tickMs&&n.tickMs>0&&(w.some(c=>c.events&&Object.keys(c.events).some(l=>l.endsWith(`${f}tick`)))||console.warn(`[Directive] tickMs is set to ${n.tickMs}ms but no module defines a "tick" event handler.`));let D=null,h=null;function _(s){for(let[c$1,l]of Object.entries(s)){if(k.has(c$1)){process.env.NODE_ENV!=="production"&&console.warn(`[Directive] initialFacts/hydrate contains blocked namespace "${c$1}". Skipping.`);continue}if(!t.has(c$1)){process.env.NODE_ENV!=="production"&&console.warn(`[Directive] initialFacts/hydrate contains unknown namespace "${c$1}". Available modules: ${[...t].join(", ")}`);continue}if(l&&typeof l=="object"&&!c(l))throw new Error(`[Directive] initialFacts/hydrate for namespace "${c$1}" contains potentially dangerous keys (__proto__, constructor, or prototype). This may indicate a prototype pollution attack.`);for(let[p,b]of Object.entries(l))k.has(p)||(h.facts[`${c$1}${f}${p}`]=b);}}h=y({modules:w,plugins:n.plugins,history:y$1,trace:i,errorBoundary:k$1,tickMs:n.tickMs,cloud:n.cloud,onAfterModuleInit:()=>{n.initialFacts&&_(n.initialFacts),D&&(_(D),D=null);}});let x=new Map;for(let s of Object.keys(e)){let c=e[s];c&&x.set(s,J(s,c));}let B=U(h.facts,e,d),ee=L(h.derive,e,d),ne=Z(h,e,d),E=null,j=n.tickMs,N={_mode:"namespaced",facts:B,history:h.history,derive:ee,events:ne,constraints:h.constraints,effects:h.effects,resolvers:h.resolvers,async hydrate(s){if(h.isRunning)throw new Error("[Directive] hydrate() must be called before start(). The system is already running.");let c=await s();c&&typeof c=="object"&&(D=c);},initialize(){h.initialize();},start(){if(h.start(),j&&j>0){let s;for(let c of w)if(c?.events&&(s=Object.keys(c.events).find(l=>l.endsWith(`${f}tick`)),s))break;if(s){let c=s;E=setInterval(()=>{h.dispatch({type:c});},j);}}},stop(){E&&(clearInterval(E),E=null),h.stop();},destroy(){this.stop(),h.destroy();},dispatch(s){h.dispatch(s);},read(s){return h.read(v(s))},subscribe(s,c){let l=[];for(let p of s)if(p.endsWith(".*")){let b=p.slice(0,-2),K=x.get(b);K?l.push(...K):process.env.NODE_ENV!=="production"&&console.warn(`[Directive] subscribe wildcard "${p}" \u2014 namespace "${b}" not found.`);}else l.push(v(p));return h.subscribe(l,c)},subscribeModule(s,c){let l=x.get(s);return !l||l.length===0?(process.env.NODE_ENV!=="production"&&console.warn(`[Directive] subscribeModule("${s}") \u2014 namespace not found. Available: ${[...x.keys()].join(", ")}`),()=>{}):h.subscribe(l,c)},watch(s,c,l){return h.watch(v(s),c,l)},when(s,c){return h.when(()=>s(B),c)},getDistributableSnapshot(s){let c={...s,includeDerivations:s?.includeDerivations?.map(v),excludeDerivations:s?.excludeDerivations?.map(v),includeFacts:s?.includeFacts?.map(v)},l=h.getDistributableSnapshot(c);return {...l,data:F(l.data)}},watchDistributableSnapshot(s,c){let l={...s,includeDerivations:s?.includeDerivations?.map(v),excludeDerivations:s?.excludeDerivations?.map(v),includeFacts:s?.includeFacts?.map(v)};return h.watchDistributableSnapshot(l,p=>{c({...p,data:F(p.data)});})},registerModule(s,c){if(t.has(s))throw new Error(`[Directive] Module namespace "${s}" already exists. Cannot register a duplicate namespace.`);if(s.includes(f))throw new Error(`[Directive] Module name "${s}" contains the reserved separator "${f}".`);if(k.has(s))throw new Error(`[Directive] Module name "${s}" is a blocked property.`);for(let b of Object.keys(c.schema.facts))if(b.includes(f))throw new Error(`[Directive] Schema key "${b}" in module "${s}" contains the reserved separator "${f}".`);let l=c,p=T({mod:l,namespace:s,snapshotModulesSet:r});t.add(s),e[s]=l,g.names=null,x.set(s,J(s,l)),h.registerModule(p);}};return X(N,h),Y(N),N}function Q(n){let e=n.history,t=n.trace,o=n.errorBoundary;if(n.zeroConfig){let r=process.env.NODE_ENV!=="production";e=e??r,o={onConstraintError:"skip",onResolverError:"skip",onEffectError:"skip",onDerivationError:"skip",...n.errorBoundary};}return {history:e,trace:t,errorBoundary:o}}function X(n,e){Object.defineProperties(n,{trace:{get(){return e.trace},enumerable:true,configurable:true},isRunning:{get(){return e.isRunning},enumerable:true,configurable:true},isSettled:{get(){return e.isSettled},enumerable:true,configurable:true},isInitialized:{get(){return e.isInitialized},enumerable:true,configurable:true},isReady:{get(){return e.isReady},enumerable:true,configurable:true}}),n.whenReady=e.whenReady.bind(e),n.batch=e.batch.bind(e),n.onSettledChange=e.onSettledChange.bind(e),n.onHistoryChange=e.onHistoryChange.bind(e),n.inspect=e.inspect.bind(e),n.settle=e.settle.bind(e),n.explain=e.explain.bind(e),n.getSnapshot=e.getSnapshot.bind(e),n.restore=e.restore.bind(e);let t=["dispatch","read","subscribe","watch","when","getDistributableSnapshot","watchDistributableSnapshot"];for(let o of t)o in n||(n[o]=e[o].bind(e));}function Y(n){process.env.NODE_ENV!=="production"&&process.env.NODE_ENV!=="test"&&setTimeout(()=>{!n.isRunning&&!n.isInitialized&&console.warn("[Directive] System created but start() was never called. Constraints, resolvers, and effects will not run until you call system.start().");},0);}function fe(n){let e=n.module;if(!e)throw new Error("[Directive] createSystem requires a module. Got: "+typeof e);if(n.tickMs!==void 0&&n.tickMs<=0)throw new Error("[Directive] tickMs must be a positive number");if(n.initialFacts&&!c(n.initialFacts))throw new Error("[Directive] initialFacts contains potentially dangerous keys (__proto__, constructor, or prototype). This may indicate a prototype pollution attack.");process.env.NODE_ENV!=="production"&&(e.crossModuleDeps&&Object.keys(e.crossModuleDeps).length>0&&console.warn("[Directive] Single module mode ignores crossModuleDeps. Use multiple modules if cross-module access is needed: createSystem({ modules: { ... } })"),n.tickMs&&n.tickMs>0&&(e.events&&"tick"in e.events||console.warn(`[Directive] tickMs is set to ${n.tickMs}ms but module has no "tick" event handler.`)),(typeof n.history=="object"?n.history:null)?.snapshotModules&&console.warn("[Directive] history.snapshotModules has no effect in single-module mode. Use history.snapshotEvents on the module definition instead, or switch to createSystem({ modules: { ... } }) for multi-module filtering."));let{history:t,trace:o,errorBoundary:r}=Q(n),a=null,u=null;u=y({modules:[{id:e.id,schema:e.schema.facts,requirements:e.schema.requirements,init:e.init,derive:e.derive,events:e.events,effects:e.effects,constraints:e.constraints,resolvers:e.resolvers,hooks:e.hooks,history:e.history}],plugins:n.plugins,history:t,trace:o,errorBoundary:r,tickMs:n.tickMs,cloud:n.cloud,onAfterModuleInit:()=>{if(n.initialFacts)for(let[d,w]of Object.entries(n.initialFacts))k.has(d)||(u.facts[d]=w);if(a){if(!c(a))process.env.NODE_ENV!=="production"&&console.warn("[Directive] hydrate() data contains potentially dangerous keys. Skipping.");else for(let[d,w]of Object.entries(a))k.has(d)||(u.facts[d]=w);a=null;}}});let y$1=new Proxy({},{get(d,w){if(typeof w!="symbol"&&!k.has(w))return D=>{u.dispatch({type:w,...D});}},has(d,w){return typeof w=="symbol"||k.has(w)?false:e.events?w in e.events:false},ownKeys(){return e.events?Object.keys(e.events):[]},getOwnPropertyDescriptor(d,w){if(typeof w!="symbol"&&!k.has(w)&&e.events&&w in e.events)return {configurable:true,enumerable:true}},set(){return  false},deleteProperty(){return  false},defineProperty(){return  false},getPrototypeOf(){return null},setPrototypeOf(){return  false}}),i=null,k$1=n.tickMs,g={_mode:"single",facts:u.facts,history:u.history,derive:u.derive,events:y$1,constraints:u.constraints,effects:u.effects,resolvers:u.resolvers,async hydrate(d){if(u.isRunning)throw new Error("[Directive] hydrate() must be called before start(). The system is already running.");let w=await d();w&&typeof w=="object"&&(a=w);},initialize(){u.initialize();},start(){u.start(),k$1&&k$1>0&&e.events&&"tick"in e.events&&(i=setInterval(()=>{u.dispatch({type:"tick"});},k$1));},stop(){i&&(clearInterval(i),i=null),u.stop();},destroy(){this.stop(),u.destroy();},registerModule(d){u.registerModule({id:d.id,schema:d.schema.facts,requirements:d.schema.requirements,init:d.init,derive:d.derive,events:d.events,effects:d.effects,constraints:d.constraints,resolvers:d.resolvers,hooks:d.hooks,history:d.history});}};return X(g,u),Y(g),g}export{be as a};//# sourceMappingURL=chunk-MAARYRI4.js.map
+//# sourceMappingURL=chunk-MAARYRI4.js.map