@executor-js/emulate 0.6.0

package/dist/dist-7N4COJHK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../@emulators/aws/src/store.ts","../../@emulators/aws/src/helpers.ts","../../@emulators/aws/src/routes/s3.ts","../../@emulators/aws/src/routes/sqs.ts","../../@emulators/aws/src/routes/iam.ts","../../@emulators/core/src/store.ts","../../@emulators/core/src/http.ts","../../@emulators/core/src/webhooks.ts","../../@emulators/core/src/middleware/error-handler.ts","../../@emulators/core/src/middleware/auth.ts","../../@emulators/core/src/debug.ts","../../@emulators/core/src/fonts.ts","../../@emulators/core/src/ledger.ts","../../@emulators/core/src/manifest.ts","../../@emulators/core/src/ui.ts","../../@emulators/core/src/control-plane.ts","../../@emulators/core/src/server.ts","../../@emulators/core/src/service-host.ts","../../@emulators/core/src/middleware/pagination.ts","../../@emulators/core/src/oauth-helpers.ts","../../@emulators/core/src/persistence.ts","../../@emulators/aws/src/routes/inspector.ts","../../@emulators/aws/src/manifest.ts","../../@emulators/aws/src/index.ts"],"sourcesContent":["import { Store, type Collection } from \"@emulators/core\";\nimport type { S3Bucket, S3Object, SqsQueue, SqsMessage, IamUser, IamRole } from \"./entities.js\";\n\nexport interface AwsStore {\n  s3Buckets: Collection<S3Bucket>;\n  s3Objects: Collection<S3Object>;\n  sqsQueues: Collection<SqsQueue>;\n  sqsMessages: Collection<SqsMessage>;\n  iamUsers: Collection<IamUser>;\n  iamRoles: Collection<IamRole>;\n}\n\nexport function getAwsStore(store: Store): AwsStore {\n  return {\n    s3Buckets: store.collection<S3Bucket>(\"aws.s3_buckets\", [\"bucket_name\"]),\n    s3Objects: store.collection<S3Object>(\"aws.s3_objects\", [\"key\", \"bucket_name\"]),\n    sqsQueues: store.collection<SqsQueue>(\"aws.sqs_queues\", [\"queue_name\", \"queue_url\"]),\n    sqsMessages: store.collection<SqsMessage>(\"aws.sqs_messages\", [\"message_id\", \"queue_name\"]),\n    iamUsers: store.collection<IamUser>(\"aws.iam_users\", [\"user_name\", \"user_id\"]),\n    iamRoles: store.collection<IamRole>(\"aws.iam_roles\", [\"role_name\", \"role_id\"]),\n  };\n}\n","import { randomBytes, createHash } from \"crypto\";\nimport type { Context } from \"@emulators/core\";\nimport type { ContentfulStatusCode } from \"@emulators/core\";\n\nconst ACCOUNT_ID = \"123456789012\";\nconst DEFAULT_REGION = \"us-east-1\";\n\nexport function generateAwsId(prefix: string): string {\n  return prefix + randomBytes(8).toString(\"hex\").toUpperCase();\n}\n\nexport function generateMessageId(): string {\n  return [\n    randomBytes(4).toString(\"hex\"),\n    randomBytes(2).toString(\"hex\"),\n    randomBytes(2).toString(\"hex\"),\n    randomBytes(2).toString(\"hex\"),\n    randomBytes(6).toString(\"hex\"),\n  ].join(\"-\");\n}\n\nexport function generateReceiptHandle(): string {\n  return randomBytes(48).toString(\"base64url\");\n}\n\nexport function md5(content: string): string {\n  return createHash(\"md5\").update(content).digest(\"hex\");\n}\n\nexport function getAccountId(): string {\n  return ACCOUNT_ID;\n}\n\nexport function getDefaultRegion(): string {\n  return DEFAULT_REGION;\n}\n\nexport function awsXmlResponse(c: Context, xml: string, status: ContentfulStatusCode = 200) {\n  return c.text(xml, status, { \"Content-Type\": \"application/xml\" });\n}\n\nexport function awsErrorXml(c: Context, code: string, message: string, status: ContentfulStatusCode = 400) {\n  const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ErrorResponse>\n  <Error>\n    <Code>${escapeXml(code)}</Code>\n    <Message>${escapeXml(message)}</Message>\n  </Error>\n  <RequestId>${generateMessageId()}</RequestId>\n</ErrorResponse>`;\n  return c.text(xml, status, { \"Content-Type\": \"application/xml\" });\n}\n\nexport function escapeXml(str: string): string {\n  return str\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&apos;\");\n}\n\nexport function parseQueryString(body: string): Record<string, string> {\n  const params = new URLSearchParams(body);\n  const result: Record<string, string> = {};\n  for (const [key, value] of params) {\n    result[key] = value;\n  }\n  return result;\n}\n","import type { Context } from \"@emulators/core\";\nimport type { AppEnv, RouteContext } from \"@emulators/core\";\nimport { getAwsStore } from \"../store.js\";\nimport { awsXmlResponse, awsErrorXml, md5, escapeXml } from \"../helpers.js\";\n\n// Handlers are reused across multiple routes (root paths + legacy `/s3/` aliases,\n// with and without trailing slashes). Parameterizing on the bucket/key path pattern\n// lets c.req.param(\"bucket\") / c.req.param(\"key\") resolve to `string` instead of\n// `string | undefined`, since those segments are always present for these routes.\ntype S3BucketContext = Context<AppEnv, \"/:bucket\">;\ntype S3ObjectContext = Context<AppEnv, \"/:bucket/:key\">;\n\nexport function s3Routes(ctx: RouteContext): void {\n  const { app, store, baseUrl } = ctx;\n  const aws = () => getAwsStore(store);\n\n  // --- Handler functions (shared between root and /s3/ paths) ---\n\n  const handleListBuckets = (c: Context<AppEnv>) => {\n    const buckets = aws().s3Buckets.all();\n    const bucketXml = buckets\n      .map(\n        (b) => `    <Bucket>\n      <Name>${escapeXml(b.bucket_name)}</Name>\n      <CreationDate>${b.creation_date}</CreationDate>\n    </Bucket>`,\n      )\n      .join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ListAllMyBucketsResult>\n  <Owner>\n    <ID>owner-id</ID>\n    <DisplayName>emulate</DisplayName>\n  </Owner>\n  <Buckets>\n${bucketXml}\n  </Buckets>\n</ListAllMyBucketsResult>`;\n    return awsXmlResponse(c, xml);\n  };\n\n  const handleCreateBucket = (c: S3BucketContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const existing = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (existing) {\n      return awsErrorXml(\n        c,\n        \"BucketAlreadyOwnedByYou\",\n        \"Your previous request to create the named bucket succeeded and you already own it.\",\n        409,\n      );\n    }\n\n    aws().s3Buckets.insert({\n      bucket_name: bucketName,\n      region: \"us-east-1\",\n      creation_date: new Date().toISOString(),\n      acl: \"private\",\n      versioning_enabled: false,\n    });\n\n    return c.text(\"\", 200, { Location: `/${bucketName}` });\n  };\n\n  const handleDeleteBucket = (c: S3BucketContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const bucket = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (!bucket) {\n      return awsErrorXml(c, \"NoSuchBucket\", \"The specified bucket does not exist.\", 404);\n    }\n\n    const objects = aws().s3Objects.findBy(\"bucket_name\", bucketName);\n    if (objects.length > 0) {\n      return awsErrorXml(c, \"BucketNotEmpty\", \"The bucket you tried to delete is not empty.\", 409);\n    }\n\n    aws().s3Buckets.delete(bucket.id);\n    return c.body(null, 204);\n  };\n\n  const handleHeadBucket = (c: S3BucketContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const bucket = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (!bucket) {\n      return c.text(\"\", 404);\n    }\n    return c.text(\"\", 200, { \"x-amz-bucket-region\": bucket.region });\n  };\n\n  const handleListObjects = (c: S3BucketContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const bucket = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (!bucket) {\n      return awsErrorXml(c, \"NoSuchBucket\", \"The specified bucket does not exist.\", 404);\n    }\n\n    const prefix = c.req.query(\"prefix\") ?? \"\";\n    const delimiter = c.req.query(\"delimiter\") ?? \"\";\n    const maxKeys = Math.min(parseInt(c.req.query(\"max-keys\") ?? \"1000\", 10), 1000);\n    const continuationToken = c.req.query(\"continuation-token\");\n    const startAfter = c.req.query(\"start-after\");\n\n    let objects = aws().s3Objects.findBy(\"bucket_name\", bucketName);\n    if (prefix) {\n      objects = objects.filter((o) => o.key.startsWith(prefix));\n    }\n\n    // Sort by key for stable pagination\n    objects.sort((a, b) => a.key.localeCompare(b.key));\n\n    // Apply continuation-token or start-after\n    const marker = continuationToken ?? startAfter;\n    if (marker) {\n      const startIndex = objects.findIndex((o) => o.key > marker);\n      objects = startIndex >= 0 ? objects.slice(startIndex) : [];\n    }\n\n    const commonPrefixes: string[] = [];\n    let contents = objects;\n    if (delimiter) {\n      const prefixSet = new Set<string>();\n      contents = [];\n      for (const obj of objects) {\n        const remaining = obj.key.slice(prefix.length);\n        const delimIndex = remaining.indexOf(delimiter);\n        if (delimIndex >= 0) {\n          prefixSet.add(prefix + remaining.slice(0, delimIndex + delimiter.length));\n        } else {\n          contents.push(obj);\n        }\n      }\n      commonPrefixes.push(...Array.from(prefixSet).sort());\n    }\n\n    const truncated = contents.length > maxKeys;\n    const page = contents.slice(0, maxKeys);\n    const nextToken = truncated ? page[page.length - 1].key : undefined;\n\n    const contentsXml = page\n      .map(\n        (o) => `  <Contents>\n    <Key>${escapeXml(o.key)}</Key>\n    <LastModified>${o.last_modified}</LastModified>\n    <ETag>\"${o.etag}\"</ETag>\n    <Size>${o.content_length}</Size>\n    <StorageClass>STANDARD</StorageClass>\n  </Contents>`,\n      )\n      .join(\"\\n\");\n\n    const prefixesXml = commonPrefixes\n      .map((p) => `  <CommonPrefixes><Prefix>${escapeXml(p)}</Prefix></CommonPrefixes>`)\n      .join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ListBucketResult>\n  <Name>${escapeXml(bucketName)}</Name>\n  <Prefix>${escapeXml(prefix)}</Prefix>\n  <MaxKeys>${maxKeys}</MaxKeys>\n  <IsTruncated>${truncated}</IsTruncated>\n  <KeyCount>${page.length}</KeyCount>${continuationToken ? `\\n  <ContinuationToken>${escapeXml(continuationToken)}</ContinuationToken>` : \"\"}${nextToken ? `\\n  <NextContinuationToken>${escapeXml(nextToken)}</NextContinuationToken>` : \"\"}${startAfter ? `\\n  <StartAfter>${escapeXml(startAfter)}</StartAfter>` : \"\"}\n${contentsXml}\n${prefixesXml}\n</ListBucketResult>`;\n    return awsXmlResponse(c, xml);\n  };\n\n  const handlePresignedPost = async (c: S3BucketContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const bucket = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (!bucket) {\n      return awsErrorXml(c, \"NoSuchBucket\", \"The specified bucket does not exist.\", 404);\n    }\n\n    const body = await c.req.parseBody();\n\n    const key = body[\"key\"] as string;\n    if (!key) {\n      return awsErrorXml(c, \"InvalidArgument\", \"Bucket POST must contain a field named 'key'.\", 400);\n    }\n\n    const file = body[\"file\"];\n    if (!file || !(file instanceof File)) {\n      return awsErrorXml(c, \"InvalidArgument\", \"Bucket POST must contain a file field.\", 400);\n    }\n\n    // Policy validation\n    const policyB64 = body[\"Policy\"] as string;\n    if (policyB64) {\n      let policy: { expiration?: string; conditions?: unknown[] };\n      try {\n        policy = JSON.parse(Buffer.from(policyB64, \"base64\").toString());\n      } catch {\n        return awsErrorXml(c, \"InvalidPolicyDocument\", \"Invalid Policy: Invalid JSON.\", 400);\n      }\n\n      // Check expiration\n      if (policy.expiration) {\n        const expDate = new Date(policy.expiration);\n        if (expDate.getTime() < Date.now()) {\n          return awsErrorXml(c, \"AccessDenied\", \"Invalid according to Policy: Policy expired.\", 403);\n        }\n      }\n\n      // Enforce conditions\n      if (Array.isArray(policy.conditions)) {\n        for (const condition of policy.conditions) {\n          if (!Array.isArray(condition)) continue;\n\n          if (condition[0] === \"content-length-range\") {\n            const min = condition[1] as number;\n            const max = condition[2] as number;\n            if (file.size < min || file.size > max) {\n              return awsErrorXml(c, \"EntityTooLarge\", \"Your proposed upload exceeds the maximum allowed size.\", 400);\n            }\n          } else if (condition[0] === \"starts-with\") {\n            const field = (condition[1] as string).replace(/^\\$/, \"\");\n            const prefix = condition[2] as string;\n            const value = (body[field] as string) ?? \"\";\n            if (!value.startsWith(prefix)) {\n              return awsErrorXml(\n                c,\n                \"AccessDenied\",\n                `Invalid according to Policy: Policy Condition failed: [\"starts-with\", \"$${field}\", \"${prefix}\"]`,\n                403,\n              );\n            }\n          }\n        }\n      }\n    }\n\n    // Store the object\n    const fileContent = await file.text();\n    const contentType = (body[\"Content-Type\"] as string) ?? file.type ?? \"application/octet-stream\";\n    const etag = md5(fileContent);\n    const contentLength = new TextEncoder().encode(fileContent).byteLength;\n\n    const existing = aws()\n      .s3Objects.findBy(\"bucket_name\", bucketName)\n      .find((o) => o.key === key);\n\n    if (existing) {\n      aws().s3Objects.update(existing.id, {\n        body: fileContent,\n        content_type: contentType,\n        content_length: contentLength,\n        etag,\n        last_modified: new Date().toISOString(),\n        metadata: {},\n      });\n    } else {\n      aws().s3Objects.insert({\n        bucket_name: bucketName,\n        key,\n        body: fileContent,\n        content_type: contentType,\n        content_length: contentLength,\n        etag,\n        last_modified: new Date().toISOString(),\n        metadata: {},\n      });\n    }\n\n    // Check success_action_status\n    const successStatus = parseInt(body[\"success_action_status\"] as string, 10);\n    if (successStatus === 201) {\n      const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<PostResponse>\n  <Location>${escapeXml(baseUrl)}/${escapeXml(bucketName)}/${escapeXml(key)}</Location>\n  <Bucket>${escapeXml(bucketName)}</Bucket>\n  <Key>${escapeXml(key)}</Key>\n  <ETag>\"${etag}\"</ETag>\n</PostResponse>`;\n      return awsXmlResponse(c, xml, 201);\n    }\n\n    return c.body(null, 204);\n  };\n\n  const handlePutObject = async (c: S3ObjectContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const key = c.req.param(\"key\");\n\n    const bucket = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (!bucket) {\n      return awsErrorXml(c, \"NoSuchBucket\", \"The specified bucket does not exist.\", 404);\n    }\n\n    // Handle CopyObject via x-amz-copy-source header\n    const copySource = c.req.header(\"x-amz-copy-source\");\n    if (copySource) {\n      // copySource format: /bucket/key or bucket/key\n      const normalized = copySource.startsWith(\"/\") ? copySource.slice(1) : copySource;\n      const slashIndex = normalized.indexOf(\"/\");\n      if (slashIndex < 0) {\n        return awsErrorXml(c, \"InvalidArgument\", \"Invalid copy source.\", 400);\n      }\n      const srcBucket = normalized.slice(0, slashIndex);\n      const srcKey = normalized.slice(slashIndex + 1);\n\n      const srcObj = aws()\n        .s3Objects.findBy(\"bucket_name\", srcBucket)\n        .find((o) => o.key === srcKey);\n      if (!srcObj) {\n        return awsErrorXml(c, \"NoSuchKey\", \"The specified source key does not exist.\", 404);\n      }\n\n      const etag = srcObj.etag;\n      const now = new Date().toISOString();\n\n      const existing = aws()\n        .s3Objects.findBy(\"bucket_name\", bucketName)\n        .find((o) => o.key === key);\n\n      if (existing) {\n        aws().s3Objects.update(existing.id, {\n          body: srcObj.body,\n          content_type: srcObj.content_type,\n          content_length: srcObj.content_length,\n          etag,\n          last_modified: now,\n          metadata: { ...srcObj.metadata },\n        });\n      } else {\n        aws().s3Objects.insert({\n          bucket_name: bucketName,\n          key,\n          body: srcObj.body,\n          content_type: srcObj.content_type,\n          content_length: srcObj.content_length,\n          etag,\n          last_modified: now,\n          metadata: { ...srcObj.metadata },\n        });\n      }\n\n      const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<CopyObjectResult>\n  <ETag>\"${etag}\"</ETag>\n  <LastModified>${now}</LastModified>\n</CopyObjectResult>`;\n      return c.text(xml, 200, {\n        \"Content-Type\": \"application/xml\",\n        \"Last-Modified\": new Date(now).toUTCString(),\n      });\n    }\n\n    const body = await c.req.text();\n    const contentType = c.req.header(\"Content-Type\") ?? \"application/octet-stream\";\n    const etag = md5(body);\n\n    // Extract user metadata (x-amz-meta-*)\n    const metadata: Record<string, string> = {};\n    for (const [headerName, headerValue] of Object.entries(c.req.header())) {\n      if (typeof headerValue === \"string\" && headerName.toLowerCase().startsWith(\"x-amz-meta-\")) {\n        metadata[headerName.slice(\"x-amz-meta-\".length)] = headerValue;\n      }\n    }\n\n    const existing = aws()\n      .s3Objects.findBy(\"bucket_name\", bucketName)\n      .find((o) => o.key === key);\n\n    if (existing) {\n      aws().s3Objects.update(existing.id, {\n        body,\n        content_type: contentType,\n        content_length: new TextEncoder().encode(body).byteLength,\n        etag,\n        last_modified: new Date().toISOString(),\n        metadata,\n      });\n    } else {\n      aws().s3Objects.insert({\n        bucket_name: bucketName,\n        key,\n        body,\n        content_type: contentType,\n        content_length: new TextEncoder().encode(body).byteLength,\n        etag,\n        last_modified: new Date().toISOString(),\n        metadata,\n      });\n    }\n\n    return c.text(\"\", 200, { ETag: `\"${etag}\"` });\n  };\n\n  const handleGetObject = (c: S3ObjectContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const key = c.req.param(\"key\");\n\n    const bucket = aws().s3Buckets.findOneBy(\"bucket_name\", bucketName);\n    if (!bucket) {\n      return awsErrorXml(c, \"NoSuchBucket\", \"The specified bucket does not exist.\", 404);\n    }\n\n    const obj = aws()\n      .s3Objects.findBy(\"bucket_name\", bucketName)\n      .find((o) => o.key === key);\n\n    if (!obj) {\n      return awsErrorXml(c, \"NoSuchKey\", \"The specified key does not exist.\", 404);\n    }\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": obj.content_type,\n      \"Content-Length\": String(obj.content_length),\n      ETag: `\"${obj.etag}\"`,\n      \"Last-Modified\": new Date(obj.last_modified).toUTCString(),\n    };\n    for (const [k, v] of Object.entries(obj.metadata)) {\n      headers[`x-amz-meta-${k}`] = v;\n    }\n\n    return c.text(obj.body, 200, headers);\n  };\n\n  const handleHeadObject = (c: S3ObjectContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const key = c.req.param(\"key\");\n\n    const obj = aws()\n      .s3Objects.findBy(\"bucket_name\", bucketName)\n      .find((o) => o.key === key);\n\n    if (!obj) {\n      return c.text(\"\", 404);\n    }\n\n    return c.text(\"\", 200, {\n      \"Content-Type\": obj.content_type,\n      \"Content-Length\": String(obj.content_length),\n      ETag: `\"${obj.etag}\"`,\n      \"Last-Modified\": new Date(obj.last_modified).toUTCString(),\n    });\n  };\n\n  const handleDeleteObject = (c: S3ObjectContext) => {\n    const bucketName = c.req.param(\"bucket\");\n    const key = c.req.param(\"key\");\n\n    const obj = aws()\n      .s3Objects.findBy(\"bucket_name\", bucketName)\n      .find((o) => o.key === key);\n\n    if (obj) {\n      aws().s3Objects.delete(obj.id);\n    }\n\n    // S3 returns 204 even if the key doesn't exist\n    return c.body(null, 204);\n  };\n\n  // --- Backward-compat aliases (legacy /s3/ prefix, registered first so\n  //     the static /s3 segment is not shadowed by /:bucket wildcards) ---\n  app.get(\"/s3/\", handleListBuckets);\n  app.put(\"/s3/:bucket\", handleCreateBucket);\n  app.delete(\"/s3/:bucket\", handleDeleteBucket);\n  app.on(\"HEAD\", \"/s3/:bucket\", handleHeadBucket);\n  app.get(\"/s3/:bucket\", handleListObjects);\n  app.post(\"/s3/:bucket\", handlePresignedPost);\n  app.put(\"/s3/:bucket/:key{.+}\", handlePutObject);\n  app.get(\"/s3/:bucket/:key{.+}\", handleGetObject);\n  app.on(\"HEAD\", \"/s3/:bucket/:key{.+}\", handleHeadObject);\n  app.delete(\"/s3/:bucket/:key{.+}\", handleDeleteObject);\n\n  // --- Primary routes (AWS SDK-compatible, root paths) ---\n  // Bucket-level routes register both no-slash and trailing-slash variants because\n  // the AWS SDK sends e.g. `HEAD /bucket/`, `PUT /bucket/`, `GET /bucket/?list-type=2`\n  // when the key is empty, and the route matcher treats `/:bucket` and `/:bucket/` as distinct.\n  app.get(\"/\", handleListBuckets);\n  app.put(\"/:bucket\", handleCreateBucket);\n  app.put(\"/:bucket/\", handleCreateBucket);\n  app.delete(\"/:bucket\", handleDeleteBucket);\n  app.delete(\"/:bucket/\", handleDeleteBucket);\n  app.on(\"HEAD\", \"/:bucket\", handleHeadBucket);\n  app.on(\"HEAD\", \"/:bucket/\", handleHeadBucket);\n  app.get(\"/:bucket\", handleListObjects);\n  app.get(\"/:bucket/\", handleListObjects);\n  app.post(\"/:bucket\", handlePresignedPost);\n  app.post(\"/:bucket/\", handlePresignedPost);\n  app.put(\"/:bucket/:key{.+}\", handlePutObject);\n  app.get(\"/:bucket/:key{.+}\", handleGetObject);\n  app.on(\"HEAD\", \"/:bucket/:key{.+}\", handleHeadObject);\n  app.delete(\"/:bucket/:key{.+}\", handleDeleteObject);\n}\n","import type { RouteContext } from \"@emulators/core\";\nimport type { Context } from \"@emulators/core\";\nimport { getAwsStore } from \"../store.js\";\nimport {\n  awsXmlResponse,\n  awsErrorXml,\n  generateMessageId,\n  generateReceiptHandle,\n  md5,\n  getAccountId,\n  parseQueryString,\n  escapeXml,\n} from \"../helpers.js\";\n\nexport function sqsRoutes(ctx: RouteContext): void {\n  const { app, store, baseUrl } = ctx;\n  const aws = () => getAwsStore(store);\n  const accountId = getAccountId();\n\n  // All SQS actions go through POST with Action parameter\n  app.post(\"/sqs/\", async (c) => {\n    const body = await c.req.text();\n    const params = parseQueryString(body);\n    const action = params[\"Action\"] ?? c.req.query(\"Action\") ?? \"\";\n\n    switch (action) {\n      case \"CreateQueue\":\n        return createQueue(c, params);\n      case \"DeleteQueue\":\n        return deleteQueue(c, params);\n      case \"ListQueues\":\n        return listQueues(c, params);\n      case \"GetQueueUrl\":\n        return getQueueUrl(c, params);\n      case \"GetQueueAttributes\":\n        return getQueueAttributes(c, params);\n      case \"SendMessage\":\n        return sendMessage(c, params);\n      case \"ReceiveMessage\":\n        return receiveMessage(c, params);\n      case \"DeleteMessage\":\n        return deleteMessage(c, params);\n      case \"PurgeQueue\":\n        return purgeQueue(c, params);\n      default:\n        return awsErrorXml(c, \"InvalidAction\", `The action ${action} is not valid for this endpoint.`, 400);\n    }\n  });\n\n  function createQueue(c: Context, params: Record<string, string>) {\n    const queueName = params[\"QueueName\"] ?? \"\";\n    if (!queueName) {\n      return awsErrorXml(c, \"MissingParameter\", \"The request must contain the parameter QueueName.\", 400);\n    }\n\n    const existing = aws().sqsQueues.findOneBy(\"queue_name\", queueName);\n    if (existing) {\n      // SQS returns success with existing queue URL if attributes match\n      const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<CreateQueueResponse>\n  <CreateQueueResult>\n    <QueueUrl>${escapeXml(existing.queue_url)}</QueueUrl>\n  </CreateQueueResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</CreateQueueResponse>`;\n      return awsXmlResponse(c, xml);\n    }\n\n    const fifo = queueName.endsWith(\".fifo\");\n    const queueUrl = `${baseUrl}/sqs/${accountId}/${queueName}`;\n    const arn = `arn:aws:sqs:us-east-1:${accountId}:${queueName}`;\n\n    // Parse numbered Attribute.N.Name / Attribute.N.Value pairs\n    const attrs: Record<string, string> = {};\n    for (let i = 1; params[`Attribute.${i}.Name`]; i++) {\n      attrs[params[`Attribute.${i}.Name`]] = params[`Attribute.${i}.Value`] ?? \"\";\n    }\n\n    aws().sqsQueues.insert({\n      queue_name: queueName,\n      queue_url: queueUrl,\n      arn,\n      visibility_timeout: parseInt(attrs[\"VisibilityTimeout\"] ?? \"30\", 10),\n      delay_seconds: parseInt(attrs[\"DelaySeconds\"] ?? \"0\", 10),\n      max_message_size: parseInt(attrs[\"MaximumMessageSize\"] ?? \"262144\", 10),\n      message_retention_period: parseInt(attrs[\"MessageRetentionPeriod\"] ?? \"345600\", 10),\n      receive_message_wait_time: parseInt(attrs[\"ReceiveMessageWaitTimeSeconds\"] ?? \"0\", 10),\n      fifo,\n    });\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<CreateQueueResponse>\n  <CreateQueueResult>\n    <QueueUrl>${escapeXml(queueUrl)}</QueueUrl>\n  </CreateQueueResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</CreateQueueResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function deleteQueue(c: Context, params: Record<string, string>) {\n    const queueUrl = params[\"QueueUrl\"] ?? \"\";\n    const queue = aws().sqsQueues.findOneBy(\"queue_url\", queueUrl);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    // Delete all messages in the queue\n    const messages = aws().sqsMessages.findBy(\"queue_name\", queue.queue_name);\n    for (const msg of messages) {\n      aws().sqsMessages.delete(msg.id);\n    }\n    aws().sqsQueues.delete(queue.id);\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<DeleteQueueResponse>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</DeleteQueueResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function listQueues(c: Context, params: Record<string, string>) {\n    const prefix = params[\"QueueNamePrefix\"] ?? \"\";\n    let queues = aws().sqsQueues.all();\n    if (prefix) {\n      queues = queues.filter((q) => q.queue_name.startsWith(prefix));\n    }\n\n    const queueUrlsXml = queues.map((q) => `    <QueueUrl>${escapeXml(q.queue_url)}</QueueUrl>`).join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ListQueuesResponse>\n  <ListQueuesResult>\n${queueUrlsXml}\n  </ListQueuesResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</ListQueuesResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function getQueueUrl(c: Context, params: Record<string, string>) {\n    const queueName = params[\"QueueName\"] ?? \"\";\n    const queue = aws().sqsQueues.findOneBy(\"queue_name\", queueName);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<GetQueueUrlResponse>\n  <GetQueueUrlResult>\n    <QueueUrl>${escapeXml(queue.queue_url)}</QueueUrl>\n  </GetQueueUrlResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</GetQueueUrlResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function getQueueAttributes(c: Context, params: Record<string, string>) {\n    const queueUrl = params[\"QueueUrl\"] ?? \"\";\n    const queue = aws().sqsQueues.findOneBy(\"queue_url\", queueUrl);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    const messages = aws().sqsMessages.findBy(\"queue_name\", queue.queue_name);\n    const now = Date.now();\n    const visibleCount = messages.filter((m) => m.visible_after <= now).length;\n    const inFlightCount = messages.filter((m) => m.visible_after > now).length;\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<GetQueueAttributesResponse>\n  <GetQueueAttributesResult>\n    <Attribute><Name>QueueArn</Name><Value>${queue.arn}</Value></Attribute>\n    <Attribute><Name>ApproximateNumberOfMessages</Name><Value>${visibleCount}</Value></Attribute>\n    <Attribute><Name>ApproximateNumberOfMessagesNotVisible</Name><Value>${inFlightCount}</Value></Attribute>\n    <Attribute><Name>VisibilityTimeout</Name><Value>${queue.visibility_timeout}</Value></Attribute>\n    <Attribute><Name>MaximumMessageSize</Name><Value>${queue.max_message_size}</Value></Attribute>\n    <Attribute><Name>MessageRetentionPeriod</Name><Value>${queue.message_retention_period}</Value></Attribute>\n    <Attribute><Name>DelaySeconds</Name><Value>${queue.delay_seconds}</Value></Attribute>\n    <Attribute><Name>ReceiveMessageWaitTimeSeconds</Name><Value>${queue.receive_message_wait_time}</Value></Attribute>\n    <Attribute><Name>FifoQueue</Name><Value>${queue.fifo}</Value></Attribute>\n  </GetQueueAttributesResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</GetQueueAttributesResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function sendMessage(c: Context, params: Record<string, string>) {\n    const queueUrl = params[\"QueueUrl\"] ?? \"\";\n    const messageBody = params[\"MessageBody\"] ?? \"\";\n\n    const queue = aws().sqsQueues.findOneBy(\"queue_url\", queueUrl);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    if (!messageBody) {\n      return awsErrorXml(c, \"MissingParameter\", \"The request must contain the parameter MessageBody.\", 400);\n    }\n\n    const bodyBytes = new TextEncoder().encode(messageBody).byteLength;\n    if (bodyBytes > queue.max_message_size) {\n      return awsErrorXml(\n        c,\n        \"InvalidParameterValue\",\n        `One or more parameters are invalid. Reason: Message must be shorter than ${queue.max_message_size} bytes.`,\n        400,\n      );\n    }\n\n    const messageId = generateMessageId();\n    const bodyMd5 = md5(messageBody);\n    const now = Date.now();\n\n    // Parse message attributes\n    const messageAttributes: Record<string, { DataType: string; StringValue?: string; BinaryValue?: string }> = {};\n    let attrIndex = 1;\n    while (params[`MessageAttribute.${attrIndex}.Name`]) {\n      const name = params[`MessageAttribute.${attrIndex}.Name`];\n      const dataType = params[`MessageAttribute.${attrIndex}.Value.DataType`] ?? \"String\";\n      const stringValue = params[`MessageAttribute.${attrIndex}.Value.StringValue`];\n      messageAttributes[name] = { DataType: dataType, StringValue: stringValue };\n      attrIndex++;\n    }\n\n    aws().sqsMessages.insert({\n      queue_name: queue.queue_name,\n      message_id: messageId,\n      receipt_handle: generateReceiptHandle(),\n      body: messageBody,\n      md5_of_body: bodyMd5,\n      attributes: {\n        SentTimestamp: String(now),\n        ApproximateReceiveCount: \"0\",\n        ApproximateFirstReceiveTimestamp: \"\",\n        SenderId: getAccountId(),\n      },\n      message_attributes: messageAttributes,\n      visible_after: now + queue.delay_seconds * 1000,\n      sent_timestamp: now,\n      receive_count: 0,\n    });\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<SendMessageResponse>\n  <SendMessageResult>\n    <MessageId>${messageId}</MessageId>\n    <MD5OfMessageBody>${bodyMd5}</MD5OfMessageBody>\n  </SendMessageResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</SendMessageResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function receiveMessage(c: Context, params: Record<string, string>) {\n    const queueUrl = params[\"QueueUrl\"] ?? \"\";\n    const maxMessages = Math.min(parseInt(params[\"MaxNumberOfMessages\"] ?? \"1\", 10), 10);\n    const visibilityTimeout = parseInt(params[\"VisibilityTimeout\"] ?? \"\", 10);\n\n    const queue = aws().sqsQueues.findOneBy(\"queue_url\", queueUrl);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    const now = Date.now();\n    const timeout = isNaN(visibilityTimeout) ? queue.visibility_timeout : visibilityTimeout;\n    const allMessages = aws().sqsMessages.findBy(\"queue_name\", queue.queue_name);\n    const visible = allMessages.filter((m) => m.visible_after <= now);\n    const batch = visible.slice(0, maxMessages);\n\n    for (const msg of batch) {\n      const newReceiptHandle = generateReceiptHandle();\n      aws().sqsMessages.update(msg.id, {\n        receipt_handle: newReceiptHandle,\n        visible_after: now + timeout * 1000,\n        receive_count: msg.receive_count + 1,\n      });\n      msg.receipt_handle = newReceiptHandle;\n      msg.receive_count += 1;\n    }\n\n    const messagesXml = batch\n      .map(\n        (m) => `    <Message>\n      <MessageId>${m.message_id}</MessageId>\n      <ReceiptHandle>${m.receipt_handle}</ReceiptHandle>\n      <MD5OfBody>${m.md5_of_body}</MD5OfBody>\n      <Body>${escapeXml(m.body)}</Body>\n      <Attribute><Name>SentTimestamp</Name><Value>${m.sent_timestamp}</Value></Attribute>\n      <Attribute><Name>ApproximateReceiveCount</Name><Value>${m.receive_count}</Value></Attribute>\n      <Attribute><Name>ApproximateFirstReceiveTimestamp</Name><Value>${m.sent_timestamp}</Value></Attribute>\n    </Message>`,\n      )\n      .join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ReceiveMessageResponse>\n  <ReceiveMessageResult>\n${messagesXml}\n  </ReceiveMessageResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</ReceiveMessageResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function deleteMessage(c: Context, params: Record<string, string>) {\n    const queueUrl = params[\"QueueUrl\"] ?? \"\";\n    const receiptHandle = params[\"ReceiptHandle\"] ?? \"\";\n\n    const queue = aws().sqsQueues.findOneBy(\"queue_url\", queueUrl);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    const messages = aws().sqsMessages.findBy(\"queue_name\", queue.queue_name);\n    const msg = messages.find((m) => m.receipt_handle === receiptHandle);\n    if (msg) {\n      aws().sqsMessages.delete(msg.id);\n    }\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<DeleteMessageResponse>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</DeleteMessageResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function purgeQueue(c: Context, params: Record<string, string>) {\n    const queueUrl = params[\"QueueUrl\"] ?? \"\";\n    const queue = aws().sqsQueues.findOneBy(\"queue_url\", queueUrl);\n    if (!queue) {\n      return awsErrorXml(c, \"AWS.SimpleQueueService.NonExistentQueue\", \"The specified queue does not exist.\", 400);\n    }\n\n    const messages = aws().sqsMessages.findBy(\"queue_name\", queue.queue_name);\n    for (const msg of messages) {\n      aws().sqsMessages.delete(msg.id);\n    }\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<PurgeQueueResponse>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</PurgeQueueResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n}\n","import type { RouteContext } from \"@emulators/core\";\nimport type { Context } from \"@emulators/core\";\nimport { getAwsStore } from \"../store.js\";\nimport {\n  awsXmlResponse,\n  awsErrorXml,\n  generateAwsId,\n  generateMessageId,\n  getAccountId,\n  parseQueryString,\n  escapeXml,\n} from \"../helpers.js\";\nimport { randomBytes } from \"crypto\";\n\nexport function iamRoutes(ctx: RouteContext): void {\n  const { app, store } = ctx;\n  const aws = () => getAwsStore(store);\n  const accountId = getAccountId();\n\n  // IAM actions via POST with Action parameter\n  app.post(\"/iam/\", async (c) => {\n    const body = await c.req.text();\n    const params = parseQueryString(body);\n    const action = params[\"Action\"] ?? c.req.query(\"Action\") ?? \"\";\n\n    switch (action) {\n      case \"CreateUser\":\n        return createUser(c, params);\n      case \"GetUser\":\n        return getUser(c, params);\n      case \"DeleteUser\":\n        return deleteUser(c, params);\n      case \"ListUsers\":\n        return listUsers(c);\n      case \"CreateAccessKey\":\n        return createAccessKey(c, params);\n      case \"ListAccessKeys\":\n        return listAccessKeys(c, params);\n      case \"DeleteAccessKey\":\n        return deleteAccessKey(c, params);\n      case \"CreateRole\":\n        return createRole(c, params);\n      case \"GetRole\":\n        return getRole(c, params);\n      case \"DeleteRole\":\n        return deleteRole(c, params);\n      case \"ListRoles\":\n        return listRoles(c);\n      default:\n        return awsErrorXml(c, \"InvalidAction\", `The action ${action} is not valid for this endpoint.`, 400);\n    }\n  });\n\n  // STS endpoints\n  app.post(\"/sts/\", async (c) => {\n    const body = await c.req.text();\n    const params = parseQueryString(body);\n    const action = params[\"Action\"] ?? c.req.query(\"Action\") ?? \"\";\n\n    switch (action) {\n      case \"GetCallerIdentity\":\n        return getCallerIdentity(c);\n      case \"AssumeRole\":\n        return assumeRole(c, params);\n      default:\n        return awsErrorXml(c, \"InvalidAction\", `The action ${action} is not valid for this endpoint.`, 400);\n    }\n  });\n\n  function createUser(c: Context, params: Record<string, string>) {\n    const userName = params[\"UserName\"] ?? \"\";\n    if (!userName) {\n      return awsErrorXml(c, \"ValidationError\", \"The request must contain the parameter UserName.\", 400);\n    }\n\n    const existing = aws().iamUsers.findOneBy(\"user_name\", userName);\n    if (existing) {\n      return awsErrorXml(c, \"EntityAlreadyExists\", `User with name ${escapeXml(userName)} already exists.`, 409);\n    }\n\n    const userId = generateAwsId(\"AIDA\");\n    const path = params[\"Path\"] ?? \"/\";\n    const arn = `arn:aws:iam::${accountId}:user${path}${userName}`;\n\n    aws().iamUsers.insert({\n      user_name: userName,\n      user_id: userId,\n      arn,\n      path,\n      access_keys: [],\n    });\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<CreateUserResponse>\n  <CreateUserResult>\n    <User>\n      <Path>${escapeXml(path)}</Path>\n      <UserName>${escapeXml(userName)}</UserName>\n      <UserId>${userId}</UserId>\n      <Arn>${escapeXml(arn)}</Arn>\n      <CreateDate>${new Date().toISOString()}</CreateDate>\n    </User>\n  </CreateUserResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</CreateUserResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function getUser(c: Context, params: Record<string, string>) {\n    const userName = params[\"UserName\"] ?? \"\";\n    const user = aws().iamUsers.findOneBy(\"user_name\", userName);\n    if (!user) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The user with name ${escapeXml(userName)} cannot be found.`, 404);\n    }\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<GetUserResponse>\n  <GetUserResult>\n    <User>\n      <Path>${escapeXml(user.path)}</Path>\n      <UserName>${escapeXml(user.user_name)}</UserName>\n      <UserId>${user.user_id}</UserId>\n      <Arn>${escapeXml(user.arn)}</Arn>\n      <CreateDate>${user.created_at}</CreateDate>\n    </User>\n  </GetUserResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</GetUserResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function deleteUser(c: Context, params: Record<string, string>) {\n    const userName = params[\"UserName\"] ?? \"\";\n    const user = aws().iamUsers.findOneBy(\"user_name\", userName);\n    if (!user) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The user with name ${escapeXml(userName)} cannot be found.`, 404);\n    }\n\n    aws().iamUsers.delete(user.id);\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<DeleteUserResponse>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</DeleteUserResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function listUsers(c: Context) {\n    const users = aws().iamUsers.all();\n    const usersXml = users\n      .map(\n        (u) => `      <member>\n        <Path>${escapeXml(u.path)}</Path>\n        <UserName>${escapeXml(u.user_name)}</UserName>\n        <UserId>${u.user_id}</UserId>\n        <Arn>${escapeXml(u.arn)}</Arn>\n        <CreateDate>${u.created_at}</CreateDate>\n      </member>`,\n      )\n      .join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ListUsersResponse>\n  <ListUsersResult>\n    <IsTruncated>false</IsTruncated>\n    <Users>\n${usersXml}\n    </Users>\n  </ListUsersResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</ListUsersResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function createAccessKey(c: Context, params: Record<string, string>) {\n    const userName = params[\"UserName\"] ?? \"\";\n    const user = aws().iamUsers.findOneBy(\"user_name\", userName);\n    if (!user) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The user with name ${escapeXml(userName)} cannot be found.`, 404);\n    }\n\n    const accessKeyId = \"AKIA\" + randomBytes(8).toString(\"hex\").toUpperCase();\n    const secretAccessKey = randomBytes(30).toString(\"base64\");\n\n    const keys = [\n      ...user.access_keys,\n      { access_key_id: accessKeyId, secret_access_key: secretAccessKey, status: \"Active\" as const },\n    ];\n    aws().iamUsers.update(user.id, { access_keys: keys });\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<CreateAccessKeyResponse>\n  <CreateAccessKeyResult>\n    <AccessKey>\n      <UserName>${escapeXml(userName)}</UserName>\n      <AccessKeyId>${accessKeyId}</AccessKeyId>\n      <Status>Active</Status>\n      <SecretAccessKey>${secretAccessKey}</SecretAccessKey>\n      <CreateDate>${new Date().toISOString()}</CreateDate>\n    </AccessKey>\n  </CreateAccessKeyResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</CreateAccessKeyResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function listAccessKeys(c: Context, params: Record<string, string>) {\n    const userName = params[\"UserName\"] ?? \"\";\n    const user = aws().iamUsers.findOneBy(\"user_name\", userName);\n    if (!user) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The user with name ${escapeXml(userName)} cannot be found.`, 404);\n    }\n\n    const keysXml = user.access_keys\n      .map(\n        (k) => `      <member>\n        <UserName>${escapeXml(userName)}</UserName>\n        <AccessKeyId>${k.access_key_id}</AccessKeyId>\n        <Status>${k.status}</Status>\n      </member>`,\n      )\n      .join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ListAccessKeysResponse>\n  <ListAccessKeysResult>\n    <IsTruncated>false</IsTruncated>\n    <AccessKeyMetadata>\n${keysXml}\n    </AccessKeyMetadata>\n  </ListAccessKeysResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</ListAccessKeysResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function deleteAccessKey(c: Context, params: Record<string, string>) {\n    const userName = params[\"UserName\"] ?? \"\";\n    const accessKeyId = params[\"AccessKeyId\"] ?? \"\";\n    const user = aws().iamUsers.findOneBy(\"user_name\", userName);\n    if (!user) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The user with name ${escapeXml(userName)} cannot be found.`, 404);\n    }\n\n    const keys = user.access_keys.filter((k) => k.access_key_id !== accessKeyId);\n    aws().iamUsers.update(user.id, { access_keys: keys });\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<DeleteAccessKeyResponse>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</DeleteAccessKeyResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function createRole(c: Context, params: Record<string, string>) {\n    const roleName = params[\"RoleName\"] ?? \"\";\n    if (!roleName) {\n      return awsErrorXml(c, \"ValidationError\", \"The request must contain the parameter RoleName.\", 400);\n    }\n\n    const existing = aws().iamRoles.findOneBy(\"role_name\", roleName);\n    if (existing) {\n      return awsErrorXml(c, \"EntityAlreadyExists\", `Role with name ${escapeXml(roleName)} already exists.`, 409);\n    }\n\n    const roleId = generateAwsId(\"AROA\");\n    const path = params[\"Path\"] ?? \"/\";\n    const arn = `arn:aws:iam::${accountId}:role${path}${roleName}`;\n    const assumeRolePolicy = params[\"AssumeRolePolicyDocument\"] ?? \"{}\";\n    const description = params[\"Description\"] ?? \"\";\n\n    aws().iamRoles.insert({\n      role_name: roleName,\n      role_id: roleId,\n      arn,\n      path,\n      assume_role_policy_document: assumeRolePolicy,\n      description,\n    });\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<CreateRoleResponse>\n  <CreateRoleResult>\n    <Role>\n      <Path>${escapeXml(path)}</Path>\n      <RoleName>${escapeXml(roleName)}</RoleName>\n      <RoleId>${roleId}</RoleId>\n      <Arn>${escapeXml(arn)}</Arn>\n      <CreateDate>${new Date().toISOString()}</CreateDate>\n      <AssumeRolePolicyDocument>${encodeURIComponent(assumeRolePolicy)}</AssumeRolePolicyDocument>\n      <Description>${escapeXml(description)}</Description>\n    </Role>\n  </CreateRoleResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</CreateRoleResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function getRole(c: Context, params: Record<string, string>) {\n    const roleName = params[\"RoleName\"] ?? \"\";\n    const role = aws().iamRoles.findOneBy(\"role_name\", roleName);\n    if (!role) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The role with name ${escapeXml(roleName)} cannot be found.`, 404);\n    }\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<GetRoleResponse>\n  <GetRoleResult>\n    <Role>\n      <Path>${escapeXml(role.path)}</Path>\n      <RoleName>${escapeXml(role.role_name)}</RoleName>\n      <RoleId>${role.role_id}</RoleId>\n      <Arn>${escapeXml(role.arn)}</Arn>\n      <CreateDate>${role.created_at}</CreateDate>\n      <AssumeRolePolicyDocument>${encodeURIComponent(role.assume_role_policy_document)}</AssumeRolePolicyDocument>\n      <Description>${escapeXml(role.description)}</Description>\n    </Role>\n  </GetRoleResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</GetRoleResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function deleteRole(c: Context, params: Record<string, string>) {\n    const roleName = params[\"RoleName\"] ?? \"\";\n    const role = aws().iamRoles.findOneBy(\"role_name\", roleName);\n    if (!role) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The role with name ${escapeXml(roleName)} cannot be found.`, 404);\n    }\n\n    aws().iamRoles.delete(role.id);\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<DeleteRoleResponse>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</DeleteRoleResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function listRoles(c: Context) {\n    const roles = aws().iamRoles.all();\n    const rolesXml = roles\n      .map(\n        (r) => `      <member>\n        <Path>${escapeXml(r.path)}</Path>\n        <RoleName>${escapeXml(r.role_name)}</RoleName>\n        <RoleId>${r.role_id}</RoleId>\n        <Arn>${escapeXml(r.arn)}</Arn>\n        <CreateDate>${r.created_at}</CreateDate>\n        <Description>${escapeXml(r.description)}</Description>\n      </member>`,\n      )\n      .join(\"\\n\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<ListRolesResponse>\n  <ListRolesResult>\n    <IsTruncated>false</IsTruncated>\n    <Roles>\n${rolesXml}\n    </Roles>\n  </ListRolesResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</ListRolesResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function getCallerIdentity(c: Context) {\n    const authUser = c.get(\"authUser\") as { login?: string } | undefined;\n    const userName = authUser?.login ?? \"admin\";\n    const arn = `arn:aws:iam::${accountId}:user/${userName}`;\n\n    // Return stable UserId from the IAM store when available\n    const user = aws().iamUsers.findOneBy(\"user_name\", userName);\n    const userId = user?.user_id ?? generateAwsId(\"AIDA\");\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<GetCallerIdentityResponse>\n  <GetCallerIdentityResult>\n    <Arn>${escapeXml(arn)}</Arn>\n    <UserId>${userId}</UserId>\n    <Account>${accountId}</Account>\n  </GetCallerIdentityResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</GetCallerIdentityResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n\n  function assumeRole(c: Context, params: Record<string, string>) {\n    const roleArn = params[\"RoleArn\"] ?? \"\";\n    const sessionName = params[\"RoleSessionName\"] ?? \"session\";\n\n    // Find the role by ARN\n    const role = aws()\n      .iamRoles.all()\n      .find((r) => r.arn === roleArn);\n    if (!role) {\n      return awsErrorXml(c, \"NoSuchEntity\", `The role specified cannot be found.`, 404);\n    }\n\n    const accessKeyId = \"ASIA\" + randomBytes(8).toString(\"hex\").toUpperCase();\n    const secretAccessKey = randomBytes(30).toString(\"base64\");\n    const sessionToken = randomBytes(64).toString(\"base64\");\n    const expiration = new Date(Date.now() + 3600 * 1000).toISOString();\n\n    const xml = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<AssumeRoleResponse>\n  <AssumeRoleResult>\n    <Credentials>\n      <AccessKeyId>${accessKeyId}</AccessKeyId>\n      <SecretAccessKey>${secretAccessKey}</SecretAccessKey>\n      <SessionToken>${sessionToken}</SessionToken>\n      <Expiration>${expiration}</Expiration>\n    </Credentials>\n    <AssumedRoleUser>\n      <Arn>${roleArn}/${sessionName}</Arn>\n      <AssumedRoleId>${role.role_id}:${sessionName}</AssumedRoleId>\n    </AssumedRoleUser>\n  </AssumeRoleResult>\n  <ResponseMetadata><RequestId>${generateMessageId()}</RequestId></ResponseMetadata>\n</AssumeRoleResponse>`;\n    return awsXmlResponse(c, xml);\n  }\n}\n","export interface Entity {\n  id: number;\n  created_at: string;\n  updated_at: string;\n}\n\nexport type InsertInput<T extends Entity> = Omit<T, \"id\" | \"created_at\" | \"updated_at\"> & { id?: number };\n\nexport type FilterFn<T> = (item: T) => boolean;\nexport type SortFn<T> = (a: T, b: T) => number;\n\nexport interface QueryOptions<T> {\n  filter?: FilterFn<T>;\n  sort?: SortFn<T>;\n  page?: number;\n  per_page?: number;\n}\n\nexport interface PaginatedResult<T> {\n  items: T[];\n  total_count: number;\n  page: number;\n  per_page: number;\n  has_next: boolean;\n  has_prev: boolean;\n}\n\nexport interface CollectionSnapshot<T extends Entity = Entity> {\n  items: T[];\n  autoId: number;\n  indexFields: string[];\n}\n\nexport interface StoreSnapshot {\n  collections: Record<string, CollectionSnapshot>;\n  data: Record<string, unknown>;\n}\n\nexport function serializeValue(value: unknown): unknown {\n  if (value instanceof Map) {\n    return { __type: \"Map\" as const, entries: [...value.entries()].map(([k, v]) => [k, serializeValue(v)]) };\n  }\n  if (value instanceof Set) {\n    return { __type: \"Set\" as const, values: [...value.values()] };\n  }\n  return value;\n}\n\nexport function deserializeValue(value: unknown): unknown {\n  if (value !== null && typeof value === \"object\" && \"__type\" in value) {\n    const tagged = value as Record<string, unknown>;\n    if (tagged.__type === \"Map\") {\n      const entries = tagged.entries as [unknown, unknown][];\n      return new Map(entries.map(([k, v]) => [k, deserializeValue(v)]));\n    }\n    if (tagged.__type === \"Set\") {\n      return new Set(tagged.values as unknown[]);\n    }\n  }\n  return value;\n}\n\nexport class Collection<T extends Entity> {\n  private items = new Map<number, T>();\n  private indexes = new Map<string, Map<string | number, Set<number>>>();\n  private autoId = 1;\n  readonly fieldNames: string[];\n\n  constructor(private indexFields: (keyof T)[] = []) {\n    this.fieldNames = indexFields.map(String).sort();\n    for (const field of indexFields) {\n      this.indexes.set(String(field), new Map());\n    }\n  }\n\n  private addToIndex(item: T): void {\n    for (const field of this.indexFields) {\n      const value = item[field];\n      if (value === undefined || value === null) continue;\n      const indexMap = this.indexes.get(String(field))!;\n      const key = String(value);\n      if (!indexMap.has(key)) {\n        indexMap.set(key, new Set());\n      }\n      indexMap.get(key)!.add(item.id);\n    }\n  }\n\n  private removeFromIndex(item: T): void {\n    for (const field of this.indexFields) {\n      const value = item[field];\n      if (value === undefined || value === null) continue;\n      const indexMap = this.indexes.get(String(field))!;\n      const key = String(value);\n      indexMap.get(key)?.delete(item.id);\n    }\n  }\n\n  insert(data: InsertInput<T>): T {\n    const now = new Date().toISOString();\n    const explicitId = data.id != null && data.id > 0 ? data.id : undefined;\n    const id = explicitId ?? this.autoId++;\n    if (id >= this.autoId) {\n      this.autoId = id + 1;\n    }\n    const item = {\n      ...data,\n      id,\n      created_at: now,\n      updated_at: now,\n    } as unknown as T;\n    this.items.set(id, item);\n    this.addToIndex(item);\n    return item;\n  }\n\n  get(id: number): T | undefined {\n    return this.items.get(id);\n  }\n\n  findBy(field: keyof T, value: T[keyof T] | string | number): T[] {\n    if (this.indexes.has(String(field))) {\n      const ids = this.indexes.get(String(field))!.get(String(value));\n      if (!ids) return [];\n      return Array.from(ids)\n        .map((id) => this.items.get(id)!)\n        .filter(Boolean);\n    }\n    return this.all().filter((item) => item[field] === value);\n  }\n\n  findOneBy(field: keyof T, value: T[keyof T] | string | number): T | undefined {\n    return this.findBy(field, value)[0];\n  }\n\n  update(id: number, data: Partial<T>): T | undefined {\n    const existing = this.items.get(id);\n    if (!existing) return undefined;\n    this.removeFromIndex(existing);\n    const updated = {\n      ...existing,\n      ...data,\n      id,\n      updated_at: new Date().toISOString(),\n    } as T;\n    this.items.set(id, updated);\n    this.addToIndex(updated);\n    return updated;\n  }\n\n  delete(id: number): boolean {\n    const existing = this.items.get(id);\n    if (!existing) return false;\n    this.removeFromIndex(existing);\n    return this.items.delete(id);\n  }\n\n  all(): T[] {\n    return Array.from(this.items.values());\n  }\n\n  query(options: QueryOptions<T> = {}): PaginatedResult<T> {\n    let results = this.all();\n\n    if (options.filter) {\n      results = results.filter(options.filter);\n    }\n\n    const total_count = results.length;\n\n    if (options.sort) {\n      results.sort(options.sort);\n    }\n\n    const page = options.page ?? 1;\n    const per_page = Math.min(options.per_page ?? 30, 100);\n    const start = (page - 1) * per_page;\n    const paged = results.slice(start, start + per_page);\n\n    return {\n      items: paged,\n      total_count,\n      page,\n      per_page,\n      has_next: start + per_page < total_count,\n      has_prev: page > 1,\n    };\n  }\n\n  count(filter?: FilterFn<T>): number {\n    if (!filter) return this.items.size;\n    return this.all().filter(filter).length;\n  }\n\n  clear(): void {\n    this.items.clear();\n    for (const indexMap of this.indexes.values()) {\n      indexMap.clear();\n    }\n    this.autoId = 1;\n  }\n\n  snapshot(): CollectionSnapshot<T> {\n    return {\n      items: this.all(),\n      autoId: this.autoId,\n      indexFields: this.fieldNames,\n    };\n  }\n\n  restore(snap: CollectionSnapshot<T>): void {\n    this.clear();\n    this.autoId = snap.autoId;\n    for (const item of snap.items) {\n      this.items.set(item.id, item);\n      this.addToIndex(item);\n    }\n  }\n}\n\nexport class Store {\n  private collections = new Map<string, Collection<any>>();\n  private _data = new Map<string, unknown>();\n\n  collection<T extends Entity>(name: string, indexFields: (keyof T)[] = []): Collection<T> {\n    const existing = this.collections.get(name);\n    if (existing) {\n      if (indexFields.length > 0) {\n        const requested = indexFields.map(String).sort();\n        if (existing.fieldNames.length !== requested.length || existing.fieldNames.some((f, i) => f !== requested[i])) {\n          throw new Error(\n            `Collection \"${name}\" already exists with indexes [${existing.fieldNames}] but was requested with [${requested}]`,\n          );\n        }\n      }\n      return existing as Collection<T>;\n    }\n    const col = new Collection<T>(indexFields);\n    this.collections.set(name, col);\n    return col;\n  }\n\n  getData<V>(key: string): V | undefined {\n    return this._data.get(key) as V | undefined;\n  }\n\n  setData<V>(key: string, value: V): void {\n    this._data.set(key, value);\n  }\n\n  reset(): void {\n    for (const collection of this.collections.values()) {\n      collection.clear();\n    }\n    this._data.clear();\n  }\n\n  snapshot(): StoreSnapshot {\n    const collections: Record<string, CollectionSnapshot> = {};\n    for (const [name, col] of this.collections) {\n      collections[name] = col.snapshot();\n    }\n    const data: Record<string, unknown> = {};\n    for (const [key, value] of this._data) {\n      data[key] = serializeValue(value);\n    }\n    return { collections, data };\n  }\n\n  restore(snap: StoreSnapshot): void {\n    const snapshotNames = new Set(Object.keys(snap.collections));\n    for (const name of this.collections.keys()) {\n      if (!snapshotNames.has(name)) {\n        this.collections.delete(name);\n      }\n    }\n    for (const [name, colSnap] of Object.entries(snap.collections)) {\n      const indexFields = colSnap.indexFields as (keyof Entity)[];\n      const col = this.collection(name, indexFields);\n      col.restore(colSnap as CollectionSnapshot<any>);\n    }\n    this._data.clear();\n    for (const [key, value] of Object.entries(snap.data)) {\n      this._data.set(key, deserializeValue(value));\n    }\n  }\n}\n","import { createServer as createNodeServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\n\ntype BodyInit = ConstructorParameters<typeof Response>[0];\ntype HeadersInit = ConstructorParameters<typeof Headers>[0];\ntype FormDataEntryValue = string | File;\n\nexport type ContentfulStatusCode = number;\nexport type Next = () => Promise<Response | void>;\n\ntype VariablesOf<E> = unknown extends E\n  ? Record<string, any>\n  : E extends { Variables: infer V }\n    ? V\n    : Record<string, any>;\ntype HandlerResult = Response | void | Promise<Response | void>;\n\nexport type Handler<E = unknown, P extends string = string> = (c: Context<E, P>, next: Next) => HandlerResult;\nexport type MiddlewareHandler<E = unknown> = Handler<E>;\nexport type ErrorHandler<E = unknown> = (err: unknown, c: Context<E>) => Response | Promise<Response>;\nexport type FetchHandler = (request: Request) => Response | Promise<Response>;\n\ninterface CompiledPath {\n  pattern: string;\n  regex: RegExp;\n  paramNames: string[];\n}\n\ninterface Route<E> {\n  method: string;\n  compiled: CompiledPath;\n  handlers: Handler<E>[];\n}\n\ninterface MatchedHandler<E> {\n  handler: Handler<E>;\n  params: Record<string, string>;\n}\n\nexport interface ServeOptions {\n  fetch: FetchHandler;\n  port?: number;\n  hostname?: string;\n}\n\nexport interface CorsOptions {\n  origin?: string;\n  allowMethods?: string[];\n  allowHeaders?: string[];\n  credentials?: boolean;\n  maxAge?: number;\n}\n\nexport class HonoRequest {\n  readonly raw: Request;\n  readonly url: string;\n  readonly method: string;\n  readonly path: string;\n  /** The matched route pattern (e.g. /repos/:owner/:repo), when a route matched. */\n  readonly routePath?: string;\n\n  constructor(\n    request: Request,\n    private readonly params: Record<string, string>,\n    routePath?: string,\n  ) {\n    this.raw = request;\n    this.url = request.url;\n    this.method = request.method;\n    this.path = new URL(request.url).pathname;\n    this.routePath = routePath;\n  }\n\n  header(): Record<string, string>;\n  header(name: string): string | undefined;\n  header(name?: string): Record<string, string> | string | undefined {\n    if (name) return this.raw.headers.get(name) ?? undefined;\n    const headers: Record<string, string> = {};\n    this.raw.headers.forEach((value, key) => {\n      headers[key] = value;\n    });\n    return headers;\n  }\n\n  query(name: string): string | undefined {\n    return new URL(this.url).searchParams.get(name) ?? undefined;\n  }\n\n  queries(name: string): string[] | undefined {\n    const values = new URL(this.url).searchParams.getAll(name);\n    return values.length > 0 ? values : undefined;\n  }\n\n  param(): Record<string, string>;\n  param(name: string): string;\n  param(name?: string): Record<string, string> | string {\n    if (!name) return { ...this.params };\n    return this.params[name] ?? \"\";\n  }\n\n  json<T = any>(): Promise<T> {\n    return this.raw.json() as Promise<T>;\n  }\n\n  text(): Promise<string> {\n    return this.raw.text();\n  }\n\n  arrayBuffer(): Promise<ArrayBuffer> {\n    return this.raw.arrayBuffer();\n  }\n\n  async parseBody(): Promise<Record<string, FormDataEntryValue | FormDataEntryValue[]>> {\n    const contentType = this.header(\"Content-Type\") ?? \"\";\n    if (contentType.includes(\"multipart/form-data\")) {\n      return formDataToObject(await this.raw.formData());\n    }\n    if (contentType.includes(\"application/x-www-form-urlencoded\")) {\n      const params = new URLSearchParams(await this.raw.text());\n      const out: Record<string, string | string[]> = {};\n      for (const [key, value] of params) {\n        appendBodyValue(out, key, value);\n      }\n      return out;\n    }\n    if (contentType.includes(\"application/json\")) {\n      const body = await this.raw.json().catch(() => ({}));\n      return body && typeof body === \"object\" && !Array.isArray(body)\n        ? (body as Record<string, FormDataEntryValue | FormDataEntryValue[]>)\n        : {};\n    }\n    return {};\n  }\n}\n\nexport class Context<E = unknown, _P extends string = string> {\n  readonly req: HonoRequest;\n  private readonly vars = new Map<string, unknown>();\n  private readonly responseHeaders = new Headers();\n  private responseStatus = 200;\n\n  constructor(\n    request: Request,\n    params: Record<string, string>,\n    private readonly notFoundHandler: (c: Context<E>) => Response | Promise<Response>,\n    routePath?: string,\n  ) {\n    this.req = new HonoRequest(request, params, routePath);\n  }\n\n  get<K extends keyof VariablesOf<E> & string>(key: K): VariablesOf<E>[K] | undefined {\n    return this.vars.get(key) as VariablesOf<E>[K] | undefined;\n  }\n\n  set<K extends keyof VariablesOf<E> & string>(key: K, value: VariablesOf<E>[K]): void {\n    this.vars.set(key, value);\n  }\n\n  header(name: string, value: string): void {\n    this.responseHeaders.set(name, value);\n  }\n\n  status(status: number): void {\n    this.responseStatus = status;\n  }\n\n  json(data: unknown, status?: ContentfulStatusCode, headers?: HeadersInit): Response {\n    return this.response(JSON.stringify(data), status, defaultContentType(headers, \"application/json; charset=UTF-8\"));\n  }\n\n  text(text: string, status?: ContentfulStatusCode, headers?: HeadersInit): Response {\n    return this.response(text, status, defaultContentType(headers, \"text/plain; charset=UTF-8\"));\n  }\n\n  html(html: string, status?: ContentfulStatusCode, headers?: HeadersInit): Response {\n    return this.response(html, status, defaultContentType(headers, \"text/html; charset=UTF-8\"));\n  }\n\n  body(body: BodyInit | null, status?: ContentfulStatusCode, headers?: HeadersInit): Response {\n    return this.response(body, status, headers);\n  }\n\n  redirect(location: string, status: ContentfulStatusCode = 302): Response {\n    return this.response(null, status, { Location: location });\n  }\n\n  notFound(): Response | Promise<Response> {\n    return this.notFoundHandler(this);\n  }\n\n  finalize(response: Response): Response {\n    if (!hasHeaders(this.responseHeaders)) return response;\n    const headers = new Headers(response.headers);\n    this.responseHeaders.forEach((value, key) => {\n      headers.set(key, value);\n    });\n    return new Response(response.body, {\n      status: response.status,\n      statusText: response.statusText,\n      headers,\n    });\n  }\n\n  private response(body: BodyInit | null, status?: ContentfulStatusCode, headers?: HeadersInit): Response {\n    const merged = new Headers(headers);\n    this.responseHeaders.forEach((value, key) => {\n      merged.set(key, value);\n    });\n    return new Response(body, {\n      status: status ?? this.responseStatus,\n      headers: merged,\n    });\n  }\n}\n\nexport class Hono<E = unknown> {\n  private readonly middleware: Route<E>[] = [];\n  private readonly routes: Route<E>[] = [];\n  private errorHandler: ErrorHandler<E> = (err) => {\n    const message = err instanceof Error ? err.message : \"Internal Server Error\";\n    return new Response(message, { status: 500 });\n  };\n  private notFoundHandler: (c: Context<E>) => Response | Promise<Response> = () =>\n    new Response(\"404 Not Found\", { status: 404 });\n\n  use<P extends string = string>(path: string, ...handlers: Handler<E, P>[]): this;\n  use(...handlers: Handler<E>[]): this;\n  use<P extends string = string>(pathOrHandler: string | Handler<E>, ...handlers: Handler<E, P>[]): this {\n    if (typeof pathOrHandler === \"string\") {\n      this.middleware.push({ method: \"ALL\", compiled: compilePath(pathOrHandler), handlers: handlers as Handler<E>[] });\n    } else {\n      this.middleware.push({ method: \"ALL\", compiled: compilePath(\"*\"), handlers: [pathOrHandler, ...handlers] });\n    }\n    return this;\n  }\n\n  on<P extends string = string>(method: string, path: string, ...handlers: Handler<E, P>[]): this {\n    this.routes.push({ method: method.toUpperCase(), compiled: compilePath(path), handlers: handlers as Handler<E>[] });\n    return this;\n  }\n\n  get<P extends string = string>(path: string, ...handlers: Handler<E, P>[]): this {\n    return this.on(\"GET\", path, ...handlers);\n  }\n\n  post<P extends string = string>(path: string, ...handlers: Handler<E, P>[]): this {\n    return this.on(\"POST\", path, ...handlers);\n  }\n\n  put<P extends string = string>(path: string, ...handlers: Handler<E, P>[]): this {\n    return this.on(\"PUT\", path, ...handlers);\n  }\n\n  patch<P extends string = string>(path: string, ...handlers: Handler<E, P>[]): this {\n    return this.on(\"PATCH\", path, ...handlers);\n  }\n\n  delete<P extends string = string>(path: string, ...handlers: Handler<E, P>[]): this {\n    return this.on(\"DELETE\", path, ...handlers);\n  }\n\n  onError(handler: ErrorHandler<E>): this {\n    this.errorHandler = handler;\n    return this;\n  }\n\n  notFound(handler: (c: Context<E>) => Response | Promise<Response>): this {\n    this.notFoundHandler = handler;\n    return this;\n  }\n\n  async request(input: string | Request, init?: RequestInit): Promise<Response> {\n    if (input instanceof Request) return this.fetch(input);\n    const url = input.startsWith(\"/\") ? `http://localhost${input}` : input;\n    return this.fetch(new Request(url, init));\n  }\n\n  fetch = async (request: Request): Promise<Response> => {\n    const url = new URL(request.url);\n    const path = url.pathname;\n    const method = request.method.toUpperCase();\n    const matched = this.match(method, path);\n    const context = new Context<E>(request, matched.params, this.notFoundHandler, matched.routePattern);\n\n    try {\n      const response = await this.dispatch(context, matched.handlers);\n      return context.finalize(response ?? (await this.notFoundHandler(context)));\n    } catch (err) {\n      return context.finalize(await this.errorHandler(err, context));\n    }\n  };\n\n  private match(\n    method: string,\n    path: string,\n  ): { handlers: MatchedHandler<E>[]; params: Record<string, string>; routePattern?: string } {\n    const handlers: MatchedHandler<E>[] = [];\n    const params: Record<string, string> = {};\n\n    for (const route of this.middleware) {\n      const match = matchPath(route.compiled, path);\n      if (!match) continue;\n      Object.assign(params, match);\n      for (const handler of route.handlers) {\n        handlers.push({ handler, params: match });\n      }\n    }\n\n    const route =\n      this.routes.find((candidate) => candidate.method === method && matchPath(candidate.compiled, path) != null) ??\n      (method === \"HEAD\"\n        ? this.routes.find((candidate) => candidate.method === \"GET\" && matchPath(candidate.compiled, path) != null)\n        : undefined);\n\n    if (route) {\n      const match = matchPath(route.compiled, path) ?? {};\n      Object.assign(params, match);\n      for (const handler of route.handlers) {\n        handlers.push({ handler, params: match });\n      }\n    }\n\n    return { handlers, params, routePattern: route?.compiled.pattern };\n  }\n\n  private async dispatch(context: Context<E>, handlers: MatchedHandler<E>[]): Promise<Response | void> {\n    let index = -1;\n    const run = async (nextIndex: number): Promise<Response | void> => {\n      if (nextIndex <= index) throw new Error(\"next() called multiple times\");\n      index = nextIndex;\n      const matched = handlers[nextIndex];\n      if (!matched) return undefined;\n\n      const originalParams = context.req.param();\n      Object.assign(originalParams, matched.params);\n\n      let nextResponse: Response | void = undefined;\n      let nextCalled = false;\n      const next: Next = async () => {\n        nextCalled = true;\n        nextResponse = await run(nextIndex + 1);\n        return nextResponse;\n      };\n\n      const response = await matched.handler(context, next);\n      if (response instanceof Response) return response;\n      if (nextCalled) return nextResponse;\n      return response;\n    };\n\n    return run(0);\n  }\n}\n\nexport function cors(options: CorsOptions = {}): MiddlewareHandler {\n  const origin = options.origin ?? \"*\";\n  const allowMethods = options.allowMethods ?? [\"GET\", \"HEAD\", \"PUT\", \"POST\", \"DELETE\", \"PATCH\", \"OPTIONS\"];\n\n  return async (c, next) => {\n    c.header(\"Access-Control-Allow-Origin\", origin);\n    if (options.credentials) c.header(\"Access-Control-Allow-Credentials\", \"true\");\n\n    if (c.req.method.toUpperCase() === \"OPTIONS\") {\n      c.header(\"Access-Control-Allow-Methods\", allowMethods.join(\",\"));\n      const allowHeaders = options.allowHeaders?.join(\",\") ?? c.req.header(\"Access-Control-Request-Headers\");\n      if (allowHeaders) c.header(\"Access-Control-Allow-Headers\", allowHeaders);\n      if (options.maxAge != null) c.header(\"Access-Control-Max-Age\", String(options.maxAge));\n      return c.body(null, 204);\n    }\n\n    await next();\n  };\n}\n\nexport function serve(options: ServeOptions): Server {\n  const port = options.port ?? 3000;\n  const server = createNodeServer(async (req, res) => {\n    try {\n      const request = nodeRequestToFetchRequest(req);\n      const response = await options.fetch(request);\n      await writeFetchResponse(res, response, req.method?.toUpperCase() === \"HEAD\");\n    } catch (err) {\n      const message = err instanceof Error ? err.message : \"Internal Server Error\";\n      res.statusCode = 500;\n      res.setHeader(\"Content-Type\", \"text/plain; charset=UTF-8\");\n      res.end(message);\n    }\n  });\n  server.listen(port, options.hostname);\n  return server;\n}\n\nfunction compilePath(pattern: string): CompiledPath {\n  if (pattern === \"*\" || pattern === \"/*\") {\n    return { pattern, regex: /^.*$/, paramNames: [] };\n  }\n\n  const paramNames: string[] = [];\n  let source = \"^\";\n  for (let i = 0; i < pattern.length; i++) {\n    const char = pattern[i];\n    if (char !== \":\") {\n      source += escapeRegex(char);\n      continue;\n    }\n\n    let name = \"\";\n    i++;\n    while (i < pattern.length && /[A-Za-z0-9_]/.test(pattern[i])) {\n      name += pattern[i];\n      i++;\n    }\n    i--;\n    paramNames.push(name);\n\n    if (pattern[i + 1] === \"{\") {\n      const close = pattern.indexOf(\"}\", i + 2);\n      if (close < 0) throw new Error(`Invalid route pattern: ${pattern}`);\n      const expr = pattern.slice(i + 2, close);\n      source += `(${expr})`;\n      i = close;\n    } else {\n      source += \"([^/]+)\";\n    }\n  }\n  source += \"$\";\n  return { pattern, regex: new RegExp(source), paramNames };\n}\n\nfunction matchPath(compiled: CompiledPath, path: string): Record<string, string> | null {\n  const match = compiled.regex.exec(path);\n  if (!match) return null;\n  const params: Record<string, string> = {};\n  for (let i = 0; i < compiled.paramNames.length; i++) {\n    params[compiled.paramNames[i]] = decodePathParam(match[i + 1] ?? \"\");\n  }\n  return params;\n}\n\nfunction decodePathParam(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return value;\n  }\n}\n\nfunction escapeRegex(value: string): string {\n  return value.replace(/[|\\\\{}()[\\]^$+*?.]/g, \"\\\\$&\");\n}\n\nfunction hasHeaders(headers: Headers): boolean {\n  for (const _ of headers) return true;\n  return false;\n}\n\nfunction defaultContentType(headers: HeadersInit | undefined, contentType: string): Headers {\n  const out = new Headers(headers);\n  if (!out.has(\"Content-Type\")) {\n    out.set(\"Content-Type\", contentType);\n  }\n  return out;\n}\n\nfunction formDataToObject(formData: FormData): Record<string, FormDataEntryValue | FormDataEntryValue[]> {\n  const out: Record<string, FormDataEntryValue | FormDataEntryValue[]> = {};\n  for (const [key, value] of formData) {\n    appendBodyValue(out, key, value);\n  }\n  return out;\n}\n\nfunction appendBodyValue<T>(target: Record<string, T | T[]>, key: string, value: T): void {\n  const existing = target[key];\n  if (existing === undefined) {\n    target[key] = value;\n  } else if (Array.isArray(existing)) {\n    existing.push(value);\n  } else {\n    target[key] = [existing, value];\n  }\n}\n\nfunction nodeRequestToFetchRequest(req: IncomingMessage): Request {\n  const host = req.headers.host ?? \"localhost\";\n  const url = new URL(req.url ?? \"/\", `http://${host}`);\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value == null) continue;\n    if (Array.isArray(value)) {\n      for (const item of value) headers.append(key, item);\n    } else {\n      headers.set(key, value);\n    }\n  }\n\n  const method = req.method ?? \"GET\";\n  const hasBody = method !== \"GET\" && method !== \"HEAD\";\n  return new Request(url.toString(), {\n    method,\n    headers,\n    body: hasBody ? (req as unknown as BodyInit) : undefined,\n    duplex: \"half\",\n  } as RequestInit & { duplex: string });\n}\n\nasync function writeFetchResponse(res: ServerResponse, response: Response, headOnly: boolean): Promise<void> {\n  res.statusCode = response.status;\n  res.statusMessage = response.statusText;\n\n  const headersWithCookies = response.headers as Headers & { getSetCookie?: () => string[] };\n  const cookies = headersWithCookies.getSetCookie?.();\n  response.headers.forEach((value, key) => {\n    if (key.toLowerCase() === \"set-cookie\" && cookies && cookies.length > 0) return;\n    res.setHeader(key, value);\n  });\n  if (cookies && cookies.length > 0) {\n    res.setHeader(\"Set-Cookie\", cookies);\n  }\n\n  if (headOnly || !response.body) {\n    res.end();\n    return;\n  }\n\n  const reader = response.body.getReader();\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      if (!res.write(value)) {\n        await new Promise<void>((resolve) => res.once(\"drain\", resolve));\n      }\n    }\n    res.end();\n  } catch (err) {\n    res.destroy(err instanceof Error ? err : undefined);\n  }\n}\n","import { createHmac } from \"crypto\";\n\nexport interface WebhookSubscription {\n  id: number;\n  url: string;\n  events: string[];\n  active: boolean;\n  secret?: string;\n  owner: string;\n  repo?: string;\n}\n\nexport interface WebhookDelivery {\n  id: number;\n  hook_id: number;\n  event: string;\n  action?: string;\n  payload: unknown;\n  status_code: number | null;\n  delivered_at: string;\n  duration: number | null;\n  success: boolean;\n}\n\nconst MAX_DELIVERIES = 1000;\n\nexport class WebhookDispatcher {\n  private subscriptions: WebhookSubscription[] = [];\n  private deliveries: WebhookDelivery[] = [];\n  private subscriptionIdCounter = 1;\n  private deliveryIdCounter = 1;\n\n  register(sub: Omit<WebhookSubscription, \"id\"> & { id?: number }): WebhookSubscription {\n    const { id: explicitId, ...rest } = sub;\n    const id = explicitId !== undefined ? explicitId : this.subscriptionIdCounter++;\n    if (id >= this.subscriptionIdCounter) {\n      this.subscriptionIdCounter = id + 1;\n    }\n    const subscription: WebhookSubscription = { ...rest, id };\n    this.subscriptions.push(subscription);\n    return subscription;\n  }\n\n  unregister(id: number): boolean {\n    const idx = this.subscriptions.findIndex((s) => s.id === id);\n    if (idx === -1) return false;\n    this.subscriptions.splice(idx, 1);\n    return true;\n  }\n\n  getSubscription(id: number): WebhookSubscription | undefined {\n    return this.subscriptions.find((s) => s.id === id);\n  }\n\n  getSubscriptions(owner?: string, repo?: string): WebhookSubscription[] {\n    return this.subscriptions.filter((s) => {\n      if (owner && s.owner !== owner) return false;\n      if (repo !== undefined && s.repo !== repo) return false;\n      return true;\n    });\n  }\n\n  updateSubscription(\n    id: number,\n    data: Partial<Pick<WebhookSubscription, \"url\" | \"events\" | \"active\" | \"secret\">>,\n  ): WebhookSubscription | undefined {\n    const sub = this.subscriptions.find((s) => s.id === id);\n    if (!sub) return undefined;\n    Object.assign(sub, data);\n    return sub;\n  }\n\n  async dispatch(\n    event: string,\n    action: string | undefined,\n    payload: unknown,\n    owner: string,\n    repo?: string,\n  ): Promise<void> {\n    const matchingSubs = this.subscriptions.filter((s) => {\n      if (!s.active) return false;\n      if (s.owner !== owner) return false;\n      if (repo !== undefined) {\n        if (s.repo !== repo) return false;\n      } else if (s.repo !== undefined) {\n        return false;\n      }\n      return event === \"ping\" || s.events.includes(\"*\") || s.events.includes(event);\n    });\n\n    for (const sub of matchingSubs) {\n      const delivery: WebhookDelivery = {\n        id: this.deliveryIdCounter++,\n        hook_id: sub.id,\n        event,\n        action,\n        payload,\n        status_code: null,\n        delivered_at: new Date().toISOString(),\n        duration: null,\n        success: false,\n      };\n\n      const body = JSON.stringify(payload);\n\n      const signatureHeaders: Record<string, string> = {};\n      if (sub.secret) {\n        const hmac = createHmac(\"sha256\", sub.secret).update(body).digest(\"hex\");\n        signatureHeaders[\"X-Hub-Signature-256\"] = `sha256=${hmac}`;\n      }\n\n      try {\n        const start = Date.now();\n        const response = await fetch(sub.url, {\n          method: \"POST\",\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-GitHub-Event\": event,\n            \"X-GitHub-Delivery\": String(delivery.id),\n            ...signatureHeaders,\n          },\n          body,\n          signal: AbortSignal.timeout(10000),\n        });\n        delivery.duration = Date.now() - start;\n        delivery.status_code = response.status;\n        delivery.success = response.ok;\n      } catch {\n        delivery.duration = 0;\n        delivery.success = false;\n      }\n\n      this.deliveries.push(delivery);\n      if (this.deliveries.length > MAX_DELIVERIES) {\n        this.deliveries.splice(0, this.deliveries.length - MAX_DELIVERIES);\n      }\n    }\n  }\n\n  getDeliveries(hookId?: number): WebhookDelivery[] {\n    if (hookId !== undefined) {\n      return this.deliveries.filter((d) => d.hook_id === hookId);\n    }\n    return [...this.deliveries];\n  }\n\n  clear(): void {\n    this.subscriptions.length = 0;\n    this.deliveries.length = 0;\n    this.subscriptionIdCounter = 1;\n    this.deliveryIdCounter = 1;\n  }\n}\n","import type { Context, ContentfulStatusCode, ErrorHandler, MiddlewareHandler } from \"../http.js\";\n\nconst DEFAULT_DOCS_URL = \"https://emulate.dev\";\n\nfunction getDocsUrl(c: Context): string {\n  return (c.get(\"docsUrl\") as string | undefined) ?? DEFAULT_DOCS_URL;\n}\n\nfunction errorStatus(err: unknown): number {\n  if (err && typeof err === \"object\" && \"status\" in err) {\n    const s = (err as { status: unknown }).status;\n    if (typeof s === \"number\" && Number.isFinite(s)) return s;\n  }\n  return 500;\n}\n\n/**\n * Use with `app.onError(...)`. Route handlers throw to the app error handler.\n */\nexport function createApiErrorHandler(documentationUrl?: string): ErrorHandler {\n  return (err, c) => {\n    if (documentationUrl) {\n      c.set(\"docsUrl\", documentationUrl);\n    }\n    const status = errorStatus(err);\n    const message = err instanceof Error ? err.message : \"Internal Server Error\";\n    return c.json(\n      {\n        message,\n        documentation_url: getDocsUrl(c),\n      },\n      status as ContentfulStatusCode,\n    );\n  };\n}\n\n/** Sets `docsUrl` on the context for successful responses; register `createApiErrorHandler` for thrown `ApiError`s. */\nexport function createErrorHandler(documentationUrl?: string): MiddlewareHandler {\n  return async (c, next) => {\n    if (documentationUrl) {\n      c.set(\"docsUrl\", documentationUrl);\n    }\n    await next();\n  };\n}\n\nexport const errorHandler: MiddlewareHandler = createErrorHandler();\n\nexport class ApiError extends Error {\n  constructor(\n    public status: number,\n    message: string,\n    public errors?: Array<{ resource: string; field: string; code: string }>,\n  ) {\n    super(message);\n    this.name = \"ApiError\";\n  }\n}\n\nexport function notFound(resource?: string): ApiError {\n  return new ApiError(404, resource ? `${resource} not found` : \"Not Found\");\n}\n\nexport function validationError(message: string, errors?: ApiError[\"errors\"]): ApiError {\n  return new ApiError(422, message, errors);\n}\n\nexport function unauthorized(): ApiError {\n  return new ApiError(401, \"Requires authentication\");\n}\n\nexport function forbidden(): ApiError {\n  return new ApiError(403, \"Forbidden\");\n}\n\nexport async function parseJsonBody(c: Context): Promise<Record<string, unknown>> {\n  try {\n    const body = await c.req.json();\n    if (body && typeof body === \"object\" && !Array.isArray(body)) {\n      return body as Record<string, unknown>;\n    }\n    return {};\n  } catch {\n    throw new ApiError(400, \"Problems parsing JSON\");\n  }\n}\n","import type { Context, Next } from \"../http.js\";\nimport { jwtVerify, importPKCS8 } from \"jose\";\nimport { debug } from \"../debug.js\";\n\nexport interface AuthUser {\n  login: string;\n  id: number;\n  scopes: string[];\n}\n\nexport interface AuthApp {\n  appId: number;\n  slug: string;\n  name: string;\n}\n\nexport interface AuthInstallation {\n  installationId: number;\n  appId: number;\n  permissions: Record<string, string>;\n  repositoryIds: number[];\n  repositorySelection: \"all\" | \"selected\";\n}\n\nexport type TokenMap = Map<string, AuthUser>;\n\nexport interface TokenEntry {\n  token: string;\n  login: string;\n  id: number;\n  scopes: string[];\n}\n\nexport function serializeTokenMap(tokenMap: TokenMap): TokenEntry[] {\n  return [...tokenMap.entries()].map(([token, user]) => ({\n    token,\n    login: user.login,\n    id: user.id,\n    scopes: user.scopes,\n  }));\n}\n\nexport function restoreTokenMap(tokenMap: TokenMap, tokens: TokenEntry[]): void {\n  tokenMap.clear();\n  for (const t of tokens) {\n    tokenMap.set(t.token, { login: t.login, id: t.id, scopes: t.scopes });\n  }\n}\n\nexport type AppEnv = {\n  Variables: {\n    authUser?: AuthUser;\n    authApp?: AuthApp;\n    authToken?: string;\n    authScopes?: string[];\n    docsUrl?: string;\n    /** Correlation id for the active request, set by the ledger middleware. */\n    correlationId?: string;\n    /** Provider operation id a handler can advertise for the ledger. */\n    operationId?: string;\n    /** Side effects a handler records onto the active request's ledger entry. */\n    ledgerEffects?: import(\"../ledger.js\").LedgerSideEffect[];\n  };\n};\n\nexport interface AppKeyResolver {\n  (appId: number): { privateKey: string; slug: string; name: string } | null;\n}\n\nexport interface AuthFallback {\n  login: string;\n  id: number;\n  scopes: string[];\n}\n\nexport function authMiddleware(tokens: TokenMap, appKeyResolver?: AppKeyResolver, fallbackUser?: AuthFallback) {\n  return async (c: Context, next: Next) => {\n    const authHeader = c.req.header(\"Authorization\");\n    if (authHeader) {\n      const token = authHeader.replace(/^(Bearer|token)\\s+/i, \"\").trim();\n\n      if (token.startsWith(\"eyJ\") && appKeyResolver) {\n        try {\n          const [, payloadB64] = token.split(\".\");\n          const payload = JSON.parse(Buffer.from(payloadB64, \"base64url\").toString());\n          const appId = typeof payload.iss === \"string\" ? parseInt(payload.iss, 10) : payload.iss;\n\n          if (typeof appId === \"number\" && !isNaN(appId)) {\n            const appInfo = appKeyResolver(appId);\n            if (appInfo) {\n              const key = await importPKCS8(appInfo.privateKey, \"RS256\");\n              await jwtVerify(token, key, { algorithms: [\"RS256\"] });\n              c.set(\"authApp\", {\n                appId,\n                slug: appInfo.slug,\n                name: appInfo.name,\n              } satisfies AuthApp);\n            }\n          }\n        } catch {\n          // JWT verification failed\n        }\n      } else {\n        let user = tokens.get(token);\n        if (!user && fallbackUser && token.length > 0) {\n          debug(\"auth\", \"fallback user for unknown token\", { login: fallbackUser.login, id: fallbackUser.id });\n          user = { login: fallbackUser.login, id: fallbackUser.id, scopes: fallbackUser.scopes };\n        }\n        if (user) {\n          c.set(\"authUser\", user);\n          c.set(\"authToken\", token);\n          c.set(\"authScopes\", user.scopes);\n        }\n      }\n    }\n    await next();\n  };\n}\n\nexport function requireAuth() {\n  return async (c: Context, next: Next) => {\n    if (!c.get(\"authUser\")) {\n      const docsUrl = (c.get(\"docsUrl\") as string | undefined) ?? \"https://emulate.dev\";\n      return c.json(\n        {\n          message: \"Requires authentication\",\n          documentation_url: docsUrl,\n        },\n        401,\n      );\n    }\n    await next();\n  };\n}\n\nexport function requireAppAuth() {\n  return async (c: Context, next: Next) => {\n    if (!c.get(\"authApp\")) {\n      const docsUrl = (c.get(\"docsUrl\") as string | undefined) ?? \"https://emulate.dev\";\n      return c.json(\n        {\n          message: \"A JSON web token could not be decoded\",\n          documentation_url: docsUrl,\n        },\n        401,\n      );\n    }\n    await next();\n  };\n}\n","const isDebug =\n  typeof process !== \"undefined\" &&\n  (process.env.DEBUG === \"1\" || process.env.DEBUG === \"true\" || process.env.EMULATE_DEBUG === \"1\");\n\nexport function debug(label: string, ...args: unknown[]): void {\n  if (isDebug) {\n    console.log(`[${label}]`, ...args);\n  }\n}\n","import { readFileSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { dirname, join } from \"node:path\";\nimport type { Hono } from \"./http.js\";\nimport type { AppEnv } from \"./middleware/auth.js\";\n\n// Read the cosmetic font/favicon assets lazily and defensively: on a real\n// filesystem (Node/Bun hosts) this serves them; on filesystem-less runtimes\n// (e.g. Cloudflare Workers) the read fails and the route 404s, but — crucially —\n// importing this module touches neither fs NOR import.meta.url at load time\n// (workerd leaves import.meta.url undefined, which would crash `fileURLToPath`),\n// so `createServer` boots everywhere. API emulation never needs these assets.\nconst assetCache = new Map<string, Buffer | null>();\nfunction loadAsset(name: string): Buffer | null {\n  if (assetCache.has(name)) return assetCache.get(name)!;\n  let buf: Buffer | null = null;\n  try {\n    const dir = dirname(fileURLToPath(import.meta.url));\n    buf = readFileSync(join(dir, \"fonts\", name));\n  } catch {\n    buf = null;\n  }\n  assetCache.set(name, buf);\n  return buf;\n}\n\nconst FONT_NAMES = new Set([\"geist-sans.woff2\", \"GeistPixel-Square.woff2\"]);\n\nexport function registerFontRoutes(app: Hono<AppEnv>): void {\n  app.get(\"/_emulate/fonts/:name\", (c) => {\n    const name = c.req.param(\"name\");\n    if (!FONT_NAMES.has(name)) return c.notFound();\n    const buf = loadAsset(name);\n    if (!buf) return c.notFound();\n    return new Response(buf, {\n      headers: {\n        \"Content-Type\": \"font/woff2\",\n        \"Cache-Control\": \"public, max-age=31536000, immutable\",\n        \"Access-Control-Allow-Origin\": \"*\",\n      },\n    });\n  });\n\n  app.get(\"/_emulate/favicon.ico\", (c) => {\n    const buf = loadAsset(\"favicon.ico\");\n    if (!buf) return c.notFound();\n    return new Response(buf, {\n      headers: {\n        \"Content-Type\": \"image/x-icon\",\n        \"Cache-Control\": \"public, max-age=31536000, immutable\",\n      },\n    });\n  });\n}\n","import type { MiddlewareHandler } from \"./http.js\";\nimport type { AppEnv, AuthUser, AuthApp } from \"./middleware/auth.js\";\nimport type { WebhookDispatcher } from \"./webhooks.js\";\n\nexport interface LedgerIdentity {\n  user?: Pick<AuthUser, \"login\" | \"id\" | \"scopes\">;\n  app?: Pick<AuthApp, \"appId\" | \"slug\" | \"name\">;\n}\n\nexport interface LedgerSideEffect {\n  type: \"create\" | \"update\" | \"delete\" | \"custom\";\n  collection?: string;\n  id?: string | number;\n  summary?: string;\n}\n\nexport interface LedgerWebhookDelivery {\n  id: number;\n  hook_id: number;\n  event: string;\n  action?: string;\n  status_code: number | null;\n  success: boolean;\n}\n\nexport interface LedgerEntry {\n  id: string;\n  /** Correlation id: honored from X-Correlation-Id / X-Request-Id or generated. */\n  correlationId: string;\n  timestamp: string;\n  method: string;\n  host: string;\n  path: string;\n  query: string;\n  /** Matched route pattern, e.g. /repos/:owner/:repo/issues. */\n  route?: string;\n  /** Provider operation id, when the handler advertises one. */\n  operationId?: string;\n  request: {\n    headers: Record<string, string>;\n    body?: unknown;\n    bodyTruncated?: boolean;\n  };\n  identity: LedgerIdentity;\n  response: {\n    status: number;\n    headers: Record<string, string>;\n    body?: unknown;\n    bodyTruncated?: boolean;\n  };\n  /** Human/agent-readable one-liner, e.g. \"POST /repos/:owner/:repo -> 201\". */\n  summary: string;\n  sideEffects: LedgerSideEffect[];\n  webhookDeliveries: LedgerWebhookDelivery[];\n  durationMs: number;\n}\n\nexport interface LedgerOptions {\n  maxEntries?: number;\n  maxBodyChars?: number;\n  /** When provided, webhook deliveries fired during a request are correlated onto its entry. */\n  webhooks?: WebhookDispatcher;\n}\n\nexport interface LedgerSnapshot {\n  entries: LedgerEntry[];\n  counter: number;\n}\n\nconst DEFAULT_MAX_ENTRIES = 1000;\nconst DEFAULT_MAX_BODY_CHARS = 20000;\nconst REDACTED = \"[redacted]\";\nconst SENSITIVE_HEADERS = new Set([\n  \"authorization\",\n  \"cookie\",\n  \"set-cookie\",\n  \"x-api-key\",\n  \"x-github-token\",\n  \"stripe-signature\",\n]);\nconst SENSITIVE_KEYS = /token|secret|password|authorization|api[_-]?key|client[_-]?secret|private[_-]?key/i;\n\nexport class RequestLedger {\n  private entries: LedgerEntry[] = [];\n  private counter = 1;\n\n  constructor(private readonly options: LedgerOptions = {}) {}\n\n  add(entry: Omit<LedgerEntry, \"id\">): LedgerEntry {\n    const saved = { ...entry, id: `req_${this.counter++}` };\n    this.entries.push(saved);\n    const max = this.options.maxEntries ?? DEFAULT_MAX_ENTRIES;\n    if (this.entries.length > max) {\n      this.entries.splice(0, this.entries.length - max);\n    }\n    return saved;\n  }\n\n  list(limit?: number): LedgerEntry[] {\n    const all = [...this.entries].reverse();\n    return limit != null ? all.slice(0, limit) : all;\n  }\n\n  clear(): void {\n    this.entries.length = 0;\n    this.counter = 1;\n  }\n\n  /** Serialize for durable persistence (e.g. a Cloudflare Durable Object). */\n  serialize(): LedgerSnapshot {\n    return { entries: [...this.entries], counter: this.counter };\n  }\n\n  restore(snapshot: LedgerSnapshot | undefined): void {\n    if (!snapshot) return;\n    this.entries = Array.isArray(snapshot.entries) ? [...snapshot.entries] : [];\n    this.counter = typeof snapshot.counter === \"number\" ? snapshot.counter : this.entries.length + 1;\n  }\n}\n\nfunction correlationIdFor(headers: Record<string, string>): string {\n  const provided = headers[\"x-correlation-id\"] ?? headers[\"x-request-id\"];\n  if (provided && provided.length <= 200) return provided;\n  return `cor_${crypto.randomUUID().replace(/-/g, \"\")}`;\n}\n\nexport function createLedgerMiddleware(ledger: RequestLedger, options: LedgerOptions = {}): MiddlewareHandler<AppEnv> {\n  const maxBodyChars = options.maxBodyChars ?? DEFAULT_MAX_BODY_CHARS;\n  const webhooks = options.webhooks;\n\n  return async (c, next) => {\n    if (c.req.path.startsWith(\"/_emulate\")) {\n      await next();\n      return;\n    }\n\n    const started = Date.now();\n    const url = new URL(c.req.url);\n    const rawHeaders = c.req.header();\n    const correlationId = correlationIdFor(rawHeaders);\n    c.set(\"correlationId\", correlationId);\n    c.set(\"ledgerEffects\", []);\n    c.header(\"X-Correlation-Id\", correlationId);\n\n    const requestBody = await readBody(c.req.raw.clone(), maxBodyChars);\n    const requestHeaders = redactHeaders(rawHeaders);\n\n    // Snapshot existing webhook delivery ids so we can correlate the ones this\n    // request fires. Exact under the serialized execution of a Durable Object;\n    // best-effort on the concurrent local dev server.\n    const beforeDeliveryIds = webhooks ? new Set(webhooks.getDeliveries().map((d) => d.id)) : undefined;\n\n    const response = await next();\n    if (!response) return;\n\n    const responseBody = await readBody(response.clone(), maxBodyChars);\n    const route = c.req.routePath;\n    const operationId = c.get(\"operationId\");\n    const sideEffects = (c.get(\"ledgerEffects\") as LedgerSideEffect[] | undefined) ?? [];\n    const webhookDeliveries: LedgerWebhookDelivery[] =\n      webhooks && beforeDeliveryIds\n        ? webhooks\n            .getDeliveries()\n            .filter((d) => !beforeDeliveryIds.has(d.id))\n            .map((d) => ({\n              id: d.id,\n              hook_id: d.hook_id,\n              event: d.event,\n              action: d.action,\n              status_code: d.status_code,\n              success: d.success,\n            }))\n        : [];\n\n    ledger.add({\n      correlationId,\n      timestamp: new Date().toISOString(),\n      method: c.req.method.toUpperCase(),\n      host: url.host,\n      path: url.pathname,\n      query: url.search,\n      route,\n      operationId,\n      request: {\n        headers: requestHeaders,\n        ...requestBody,\n      },\n      identity: {\n        user: c.get(\"authUser\"),\n        app: c.get(\"authApp\"),\n      },\n      response: {\n        status: response.status,\n        headers: redactHeaders(headersToRecord(response.headers)),\n        ...responseBody,\n      },\n      summary: `${c.req.method.toUpperCase()} ${route ?? url.pathname} -> ${response.status}`,\n      sideEffects,\n      webhookDeliveries,\n      durationMs: Date.now() - started,\n    });\n\n    return response;\n  };\n}\n\n/** Record a side effect onto the active request's ledger entry. */\nexport function recordSideEffect(\n  c: { get: (key: \"ledgerEffects\") => LedgerSideEffect[] | undefined },\n  effect: LedgerSideEffect,\n): void {\n  const effects = c.get(\"ledgerEffects\");\n  if (effects) effects.push(effect);\n}\n\nasync function readBody(\n  responseOrRequest: Request | Response,\n  maxChars: number,\n): Promise<{ body?: unknown; bodyTruncated?: boolean }> {\n  const method = responseOrRequest instanceof Request ? responseOrRequest.method.toUpperCase() : undefined;\n  if (method === \"GET\" || method === \"HEAD\") return {};\n\n  const contentType = responseOrRequest.headers.get(\"content-type\") ?? \"\";\n  if (responseOrRequest instanceof Response && responseOrRequest.status === 204) return {};\n\n  let text: string;\n  try {\n    text = await responseOrRequest.text();\n  } catch {\n    return {};\n  }\n  if (!text) return {};\n\n  const truncated = text.length > maxChars;\n  const clipped = truncated ? text.slice(0, maxChars) : text;\n  if (contentType.includes(\"application/json\")) {\n    try {\n      return { body: redactValue(JSON.parse(clipped)), bodyTruncated: truncated || undefined };\n    } catch {\n      return { body: clipped, bodyTruncated: truncated || undefined };\n    }\n  }\n  if (contentType.includes(\"application/x-www-form-urlencoded\")) {\n    const params: Record<string, string> = {};\n    for (const [key, value] of new URLSearchParams(clipped)) {\n      params[key] = SENSITIVE_KEYS.test(key) ? REDACTED : value;\n    }\n    return { body: params, bodyTruncated: truncated || undefined };\n  }\n  return { body: clipped, bodyTruncated: truncated || undefined };\n}\n\nfunction headersToRecord(headers: Headers): Record<string, string> {\n  const out: Record<string, string> = {};\n  headers.forEach((value, key) => {\n    out[key] = value;\n  });\n  return out;\n}\n\nfunction redactHeaders(headers: Record<string, string>): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const [key, value] of Object.entries(headers)) {\n    out[key] = SENSITIVE_HEADERS.has(key.toLowerCase()) ? REDACTED : value;\n  }\n  return out;\n}\n\nfunction redactValue(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(redactValue);\n  if (!value || typeof value !== \"object\") return value;\n  const out: Record<string, unknown> = {};\n  for (const [key, child] of Object.entries(value)) {\n    out[key] = SENSITIVE_KEYS.test(key) ? REDACTED : redactValue(child);\n  }\n  return out;\n}\n","export type SpecKind = \"openapi\" | \"graphql\" | \"mcp\" | \"google-discovery\" | \"oauth-metadata\" | \"manual\";\nexport type SpecCoverage = \"generated\" | \"hand-authored\" | \"partial\" | \"unsupported\";\n\n/**\n * Per-operation coverage. The vision asks for honest, operation-level coverage\n * boundaries (generated / hand-authored / partial / unsupported) instead of a\n * single label stamped across an entire spec. A plugin declares the operations\n * it actually implements; `GET /_emulate/coverage` reports them with a summary.\n */\nexport interface OperationCoverage {\n  operationId: string;\n  method?: string;\n  path?: string;\n  status: SpecCoverage;\n  summary?: string;\n}\n\nexport interface SpecManifest {\n  kind: SpecKind;\n  title: string;\n  url?: string;\n  coverage: SpecCoverage;\n  operations?: OperationCoverage[];\n  notes?: string;\n}\n\nexport interface SurfaceManifest {\n  id: string;\n  kind: \"rest\" | \"oauth\" | \"oidc\" | \"graphql\" | \"mcp\" | \"webhooks\" | \"ui\" | \"provider-specific\";\n  title: string;\n  basePath?: string;\n  status: \"supported\" | \"partial\" | \"unsupported\";\n  notes?: string;\n}\n\nexport interface AuthCapabilityManifest {\n  id: string;\n  title: string;\n  type:\n    | \"api-key\"\n    | \"bearer-token\"\n    | \"oauth-client-credentials\"\n    | \"oauth-authorization-code\"\n    | \"oidc\"\n    | \"jwt-app\"\n    | \"dynamic-client-registration\"\n    | \"webhook-secret\"\n    | \"provider-specific\";\n  status: \"supported\" | \"partial\" | \"unsupported\";\n  notes?: string;\n}\n\nexport interface ScenarioManifest {\n  id: string;\n  title: string;\n  description?: string;\n}\n\n/** A seedable area of the instance, surfaced so agents can discover the seed shape. */\nexport interface SeedFieldManifest {\n  key: string;\n  title: string;\n  description?: string;\n  example?: unknown;\n}\n\nexport interface SeedSchemaManifest {\n  description?: string;\n  fields: SeedFieldManifest[];\n  /** A full example seed body that can be POSTed to /_emulate/seed. */\n  example?: unknown;\n}\n\nexport interface StateCollectionManifest {\n  name: string;\n  title?: string;\n  description?: string;\n}\n\nexport interface StateModelManifest {\n  description?: string;\n  collections: StateCollectionManifest[];\n}\n\nexport interface ResetBehaviorManifest {\n  description: string;\n  reseeds: boolean;\n  clearsLedger: boolean;\n  clearsWebhooks: boolean;\n}\n\nexport type InspectorTabKind = \"landing\" | \"ledger\" | \"state\" | \"logs\" | \"credentials\" | \"seed\" | \"spec\" | \"custom\";\n\nexport interface InspectorTabManifest {\n  id: string;\n  title: string;\n  kind: InspectorTabKind;\n  description?: string;\n}\n\n/** Describes what the request ledger records and how durable it is. */\nexport interface LedgerCapabilitiesManifest {\n  description?: string;\n  recordsFields: string[];\n  redactsSensitive: boolean;\n  correlationId: boolean;\n  webhookDeliveries: boolean;\n  sideEffects: boolean;\n  persistent: boolean;\n  maxEntries?: number;\n}\n\nexport type ConnectionKind = \"sdk\" | \"cli\" | \"env\" | \"curl\" | \"config\" | \"mcp\";\n\n/**\n * A copyable connection snippet. The `template` uses {{placeholders}} that the\n * control plane resolves against the live instance ({{baseUrl}}, {{controlBaseUrl}},\n * {{service}}, {{instance}}, {{token}}, {{clientId}}, {{clientSecret}}). This is\n * how a human or agent copies ready-to-run SDK / CLI / app config without repo\n * context.\n */\nexport interface ConnectionSnippet {\n  id: string;\n  title: string;\n  kind: ConnectionKind;\n  language?: string;\n  description?: string;\n  template: string;\n}\n\nexport interface ServiceManifest {\n  id: string;\n  name: string;\n  description: string;\n  surfaces: SurfaceManifest[];\n  auth: AuthCapabilityManifest[];\n  specs: SpecManifest[];\n  scenarios?: ScenarioManifest[];\n  seedSchema?: SeedSchemaManifest;\n  stateModel?: StateModelManifest;\n  resetBehavior?: ResetBehaviorManifest;\n  inspectorTabs?: InspectorTabManifest[];\n  ledger?: LedgerCapabilitiesManifest;\n  connections?: ConnectionSnippet[];\n  docsUrl?: string;\n}\n\nexport interface EmulatorInstanceInfo {\n  service: string;\n  instance?: string;\n  baseUrl: string;\n  controlBaseUrl: string;\n  providerBaseUrl: string;\n}\n\n/**\n * Reset, ledger capabilities, inspector tabs and base connection snippets are the\n * same for every emulator because they all run on the shared core control plane.\n * Defining them once here keeps per-plugin manifests focused on service-specific\n * surface, auth, seed, and SDK details, and guarantees the control plane never\n * lies about a capability it actually provides.\n */\nexport const CORE_RESET_BEHAVIOR: ResetBehaviorManifest = {\n  description: \"Resets the instance to its seeded baseline.\",\n  reseeds: true,\n  clearsLedger: true,\n  clearsWebhooks: true,\n};\n\nexport function coreLedgerCapabilities(persistent: boolean): LedgerCapabilitiesManifest {\n  return {\n    description: \"Recent provider requests with sensitive headers and fields redacted.\",\n    recordsFields: [\n      \"timestamp\",\n      \"method\",\n      \"host\",\n      \"path\",\n      \"route\",\n      \"operationId\",\n      \"correlationId\",\n      \"identity\",\n      \"request\",\n      \"response\",\n      \"summary\",\n      \"sideEffects\",\n      \"webhookDeliveries\",\n      \"durationMs\",\n    ],\n    redactsSensitive: true,\n    correlationId: true,\n    webhookDeliveries: true,\n    sideEffects: true,\n    persistent,\n    maxEntries: 1000,\n  };\n}\n\nexport function coreInspectorTabs(manifest: ServiceManifest): InspectorTabManifest[] {\n  const tabs: InspectorTabManifest[] = [\n    {\n      id: \"overview\",\n      title: \"Overview\",\n      kind: \"landing\",\n      description: \"Service surfaces, base URLs, and connection snippets.\",\n    },\n    {\n      id: \"ledger\",\n      title: \"Ledger\",\n      kind: \"ledger\",\n      description: \"Recent provider requests recorded by the emulator.\",\n    },\n    { id: \"state\", title: \"State\", kind: \"state\", description: \"Current seeded and mutated instance state.\" },\n    {\n      id: \"credentials\",\n      title: \"Credentials\",\n      kind: \"credentials\",\n      description: \"Mint tokens, API keys, or OAuth clients.\",\n    },\n  ];\n  if (manifest.seedSchema || (manifest.scenarios && manifest.scenarios.length > 0)) {\n    tabs.push({ id: \"seed\", title: \"Seed\", kind: \"seed\", description: \"Seed state or load a scenario.\" });\n  }\n  if (manifest.specs.some((s) => s.kind === \"openapi\" || s.kind === \"graphql\")) {\n    tabs.push({ id: \"spec\", title: \"Spec\", kind: \"spec\", description: \"OpenAPI / GraphQL spec sources and coverage.\" });\n  }\n  if (manifest.surfaces.some((s) => s.kind === \"webhooks\")) {\n    tabs.push({\n      id: \"logs\",\n      title: \"Webhooks\",\n      kind: \"logs\",\n      description: \"Webhook deliveries dispatched by the emulator.\",\n    });\n  }\n  return tabs;\n}\n\n/** Connection snippets every emulator can offer (env + curl against the control plane). */\nexport function coreConnections(): ConnectionSnippet[] {\n  return [\n    {\n      id: \"base-url\",\n      title: \"Base URL (env)\",\n      kind: \"env\",\n      language: \"bash\",\n      description: \"Point your SDK or app at the emulator instead of the real provider.\",\n      template: \"{{SERVICE_UPPER}}_BASE_URL={{baseUrl}}\",\n    },\n    {\n      id: \"create-credential\",\n      title: \"Create a credential\",\n      kind: \"curl\",\n      language: \"bash\",\n      description: \"Mint a working credential for this instance.\",\n      template:\n        'curl -s -X POST {{controlBaseUrl}}/credentials \\\\\\n  -H \"content-type: application/json\" \\\\\\n  -d \\'{\"type\":\"{{defaultAuthType}}\"}\\'',\n    },\n    {\n      id: \"inspect-ledger\",\n      title: \"Inspect requests\",\n      kind: \"curl\",\n      language: \"bash\",\n      description: \"Read the request ledger to validate how your app called the service.\",\n      template: \"curl -s {{controlBaseUrl}}/ledger\",\n    },\n  ];\n}\n\n/**\n * Merge the shared core capabilities into a plugin manifest so every served\n * manifest fully describes reset behavior, ledger capabilities, inspector tabs,\n * and at least the base connection snippets, without each plugin repeating them.\n */\nexport function enrichManifest(manifest: ServiceManifest, opts: { ledgerPersistent?: boolean } = {}): ServiceManifest {\n  return {\n    ...manifest,\n    resetBehavior: manifest.resetBehavior ?? CORE_RESET_BEHAVIOR,\n    ledger: manifest.ledger ?? coreLedgerCapabilities(opts.ledgerPersistent ?? false),\n    inspectorTabs: manifest.inspectorTabs ?? coreInspectorTabs(manifest),\n    connections: [...(manifest.connections ?? []), ...coreConnections()],\n  };\n}\n\nexport interface ConnectionVars {\n  baseUrl: string;\n  providerBaseUrl: string;\n  controlBaseUrl: string;\n  service: string;\n  instance?: string;\n  token?: string;\n  clientId?: string;\n  clientSecret?: string;\n  defaultAuthType?: string;\n}\n\nexport interface ResolvedConnection extends ConnectionSnippet {\n  body: string;\n}\n\n/** Interpolate a connection snippet template against live instance values. */\nexport function resolveConnections(connections: ConnectionSnippet[], vars: ConnectionVars): ResolvedConnection[] {\n  const map: Record<string, string> = {\n    baseUrl: vars.baseUrl,\n    providerBaseUrl: vars.providerBaseUrl,\n    controlBaseUrl: vars.controlBaseUrl,\n    service: vars.service,\n    SERVICE_UPPER: vars.service.toUpperCase().replace(/[^A-Z0-9]+/g, \"_\"),\n    instance: vars.instance ?? \"default\",\n    token: vars.token ?? \"<token>\",\n    clientId: vars.clientId ?? \"<client_id>\",\n    clientSecret: vars.clientSecret ?? \"<client_secret>\",\n    defaultAuthType: vars.defaultAuthType ?? \"bearer-token\",\n  };\n  return connections.map((snippet) => ({\n    ...snippet,\n    body: snippet.template.replace(/\\{\\{(\\w+)\\}\\}/g, (_, key: string) => map[key] ?? `{{${key}}}`),\n  }));\n}\n\n/** A summary of declared per-operation coverage across a manifest's specs. */\nexport function coverageReport(manifest: ServiceManifest): {\n  operations: OperationCoverage[];\n  summary: Record<SpecCoverage, number>;\n  specs: Array<{ kind: SpecKind; title: string; coverage: SpecCoverage; operationCount: number }>;\n} {\n  const operations: OperationCoverage[] = [];\n  const summary: Record<SpecCoverage, number> = {\n    generated: 0,\n    \"hand-authored\": 0,\n    partial: 0,\n    unsupported: 0,\n  };\n  const specs = manifest.specs.map((spec) => {\n    const ops = spec.operations ?? [];\n    for (const op of ops) {\n      operations.push(op);\n      summary[op.status] += 1;\n    }\n    return { kind: spec.kind, title: spec.title, coverage: spec.coverage, operationCount: ops.length };\n  });\n  return { operations, summary, specs };\n}\n\nexport function createDefaultManifest(service: string): ServiceManifest {\n  return {\n    id: service,\n    name: service,\n    description: `Stateful ${service} API emulator.`,\n    surfaces: [{ id: \"rest\", kind: \"rest\", title: \"REST API\", status: \"partial\" }],\n    auth: [{ id: \"bearer\", title: \"Bearer token\", type: \"bearer-token\", status: \"partial\" }],\n    specs: [{ kind: \"manual\", title: \"Hand-authored emulator behavior\", coverage: \"partial\" }],\n  };\n}\n","export function escapeHtml(s: string): string {\n  return s.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\").replace(/\"/g, \"&quot;\");\n}\n\nexport function escapeAttr(s: string): string {\n  return escapeHtml(s).replace(/'/g, \"&#39;\");\n}\n\nconst CSS = `\n@font-face{\n  font-family:'Geist';font-style:normal;font-weight:100 900;font-display:swap;\n  src:url('/_emulate/fonts/geist-sans.woff2') format('woff2');\n}\n@font-face{\n  font-family:'Geist Pixel';font-style:normal;font-weight:400;font-display:swap;\n  src:url('/_emulate/fonts/GeistPixel-Square.woff2') format('woff2');\n}\n*{box-sizing:border-box;margin:0;padding:0}\nbody{\n  font-family:'Geist',-apple-system,BlinkMacSystemFont,sans-serif;\n  background:#000;color:#33ff00;min-height:100vh;\n  -webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;\n}\n.emu-bar{\n  border-bottom:1px solid #0a3300;padding:10px 20px;\n  display:flex;align-items:center;gap:10px;font-size:.8125rem;color:#1a8c00;\n}\n.emu-bar-title{font-weight:600;color:#33ff00;font-family:'Geist Pixel',monospace;}\n.emu-bar-links{margin-left:auto;display:flex;gap:16px;}\n.emu-bar-links a{\n  color:#1a8c00;font-size:.75rem;text-decoration:none;transition:color .15s;\n}\n.emu-bar-links a:hover{color:#33ff00;}\n.emu-bar-links a .full{display:inline;}\n.emu-bar-links a .short{display:none;}\n@media(max-width:600px){\n  .emu-bar-links a .full{display:none;}\n  .emu-bar-links a .short{display:inline;}\n}\n\n.content{\n  display:flex;align-items:center;justify-content:center;\n  min-height:calc(100vh - 42px);padding:24px 16px;\n}\n.content-inner{width:100%;max-width:420px;}\n.card-title{\n  font-family:'Geist Pixel',monospace;\n  font-size:1.125rem;font-weight:600;margin-bottom:4px;color:#33ff00;\n}\n.card-subtitle{color:#1a8c00;font-size:.8125rem;margin-bottom:18px;line-height:1.45;}\n.powered-by{\n  position:fixed;bottom:0;left:0;right:0;\n  text-align:center;padding:12px;font-size:.6875rem;color:#0a3300;\n  font-family:'Geist Pixel',monospace;\n}\n.powered-by a{color:#1a8c00;text-decoration:none;transition:color .15s;}\n.powered-by a:hover{color:#33ff00;}\n\n.error-title{\n  font-family:'Geist Pixel',monospace;\n  color:#ff4444;font-size:1.125rem;font-weight:600;margin-bottom:8px;\n}\n.error-msg{color:#1a8c00;font-size:.875rem;line-height:1.5;}\n.error-card{text-align:center;}\n\n.user-form{margin-bottom:8px;}\n.user-form:last-of-type{margin-bottom:0;}\n.user-btn{\n  width:100%;display:flex;align-items:center;gap:12px;\n  padding:10px 12px;border:1px solid #0a3300;border-radius:8px;\n  background:#000;color:inherit;cursor:pointer;text-align:left;\n  font:inherit;transition:border-color .15s;\n}\n.user-btn:hover{border-color:#33ff00;}\n.avatar{\n  width:36px;height:36px;border-radius:50%;\n  background:#0a3300;color:#33ff00;font-weight:600;font-size:.875rem;\n  display:flex;align-items:center;justify-content:center;flex-shrink:0;\n  font-family:'Geist Pixel',monospace;\n}\n.user-text{min-width:0;}\n.user-login{font-weight:600;font-size:.875rem;display:block;color:#33ff00;}\n.user-meta{color:#1a8c00;font-size:.75rem;margin-top:1px;}\n.user-email{font-size:.6875rem;color:#116600;word-break:break-all;margin-top:1px;}\n\n.settings-layout{\n  max-width:920px;margin:0 auto;padding:28px 20px;\n  display:flex;gap:28px;\n}\n.settings-sidebar{width:200px;flex-shrink:0;}\n.settings-sidebar a{\n  display:block;padding:6px 10px;border-radius:6px;color:#1a8c00;\n  text-decoration:none;font-size:.8125rem;transition:color .15s;\n}\n.settings-sidebar a:hover{color:#33ff00;}\n.settings-sidebar a.active{color:#33ff00;font-weight:600;}\n.settings-main{flex:1;min-width:0;}\n\n.s-card{\n  padding:18px 0;margin-bottom:14px;border-bottom:1px solid #0a3300;\n}\n.s-card:last-child{border-bottom:none;}\n.s-card-header{display:flex;align-items:center;gap:14px;margin-bottom:14px;}\n.s-icon{\n  width:42px;height:42px;border-radius:8px;\n  background:#0a3300;display:flex;align-items:center;justify-content:center;\n  font-size:1.125rem;font-weight:700;color:#116600;flex-shrink:0;\n  font-family:'Geist Pixel',monospace;\n}\n.s-title{\n  font-family:'Geist Pixel',monospace;\n  font-size:1.25rem;font-weight:600;color:#33ff00;\n}\n.s-subtitle{font-size:.75rem;color:#1a8c00;margin-top:2px;}\n.section-heading{\n  font-size:.9375rem;font-weight:600;margin-bottom:10px;color:#33ff00;\n  display:flex;align-items:center;justify-content:space-between;\n}\n.perm-list{list-style:none;}\n.perm-list li{padding:5px 0;font-size:.8125rem;display:flex;align-items:center;gap:6px;color:#1a8c00;}\n.check{color:#33ff00;}\n.org-row{\n  display:flex;align-items:center;gap:8px;padding:7px 0;\n  border-bottom:1px solid #0a3300;font-size:.8125rem;\n}\n.org-row:last-child{border-bottom:none;}\n.org-icon{\n  width:22px;height:22px;border-radius:4px;background:#0a3300;\n  display:flex;align-items:center;justify-content:center;\n  font-size:.625rem;font-weight:700;color:#116600;flex-shrink:0;\n  font-family:'Geist Pixel',monospace;\n}\n.org-name{font-weight:600;color:#33ff00;}\n.badge{font-size:.6875rem;padding:1px 7px;border-radius:999px;font-weight:500;}\n.badge-granted{background:#0a3300;color:#33ff00;}\n.badge-denied{background:#1a0a0a;color:#ff4444;}\n.badge-requested{background:#0a3300;color:#1a8c00;}\n.btn-revoke{\n  display:inline-block;padding:5px 14px;border-radius:6px;\n  border:1px solid #0a3300;background:transparent;color:#ff4444;\n  font-size:.75rem;font-weight:600;cursor:pointer;transition:border-color .15s;\n}\n.btn-revoke:hover{border-color:#ff4444;}\n.info-text{color:#1a8c00;font-size:.75rem;line-height:1.5;margin-top:10px;}\n.info-text a,.section-heading a{color:#1a8c00;text-decoration:none;transition:color .15s;}\n.info-text a:hover,.section-heading a:hover{color:#33ff00;}\ncode{font-family:'Geist Mono','SF Mono',ui-monospace,monospace;font-size:.8125rem;color:#33ff00;word-break:break-all;}\n.code-block{\n  background:#020;border:1px solid #0a3300;border-radius:6px;padding:10px 12px;\n  margin:8px 0 12px;overflow-x:auto;\n}\n.code-block code{white-space:pre;word-break:normal;display:block;line-height:1.5;}\n.app-link{\n  display:flex;align-items:center;gap:12px;padding:12px;\n  border:1px solid #0a3300;border-radius:8px;background:#000;\n  text-decoration:none;color:inherit;margin-bottom:8px;transition:border-color .15s;\n}\n.app-link:hover{border-color:#33ff00;}\n.app-link-name{font-weight:600;font-size:.875rem;color:#33ff00;}\n.app-link-scopes{font-size:.6875rem;color:#1a8c00;margin-top:1px;}\n.empty{color:#1a8c00;text-align:center;padding:28px 0;font-size:.875rem;}\n\n.inspector-layout{max-width:960px;margin:0 auto;padding:28px 20px;}\n.inspector-tabs{display:flex;gap:4px;margin-bottom:20px;}\n.inspector-tabs a{\n  padding:7px 16px;border-radius:6px;text-decoration:none;\n  font-size:.8125rem;color:#1a8c00;border:1px solid transparent;\n  transition:color .15s,border-color .15s;\n}\n.inspector-tabs a:hover{color:#33ff00;}\n.inspector-tabs a.active{color:#33ff00;font-weight:600;border-color:#0a3300;background:#0a3300;}\n.inspector-section{margin-bottom:24px;}\n.inspector-section h2{\n  font-family:'Geist Pixel',monospace;\n  font-size:1rem;font-weight:600;color:#33ff00;margin-bottom:10px;\n}\n.inspector-section h3{\n  font-family:'Geist Pixel',monospace;\n  font-size:.875rem;font-weight:600;color:#1a8c00;margin:16px 0 8px;\n}\n.inspector-table{width:100%;border-collapse:collapse;margin-bottom:12px;}\n.inspector-table th,.inspector-table td{\n  text-align:left;padding:8px 12px;border-bottom:1px solid #0a3300;\n  font-size:.8125rem;\n}\n.inspector-table th{color:#1a8c00;font-weight:600;font-size:.75rem;text-transform:uppercase;letter-spacing:.04em;}\n.inspector-table td{color:#33ff00;}\n.inspector-table tbody tr{transition:background .1s;}\n.inspector-table tbody tr:hover{background:#0a3300;}\n.inspector-empty{color:#1a8c00;text-align:center;padding:20px 0;font-size:.8125rem;}\n\n.checkout-layout{\n  display:flex;min-height:calc(100vh - 42px);\n}\n.checkout-summary{\n  flex:1;background:#020;padding:48px 40px 48px 10%;\n  display:flex;flex-direction:column;justify-content:center;\n  border-right:1px solid #0a3300;\n}\n.checkout-form-side{\n  flex:1;background:#000;padding:48px 10% 48px 40px;\n  display:flex;flex-direction:column;justify-content:center;\n}\n.checkout-merchant{\n  display:flex;align-items:center;gap:10px;margin-bottom:6px;\n}\n.checkout-merchant-name{\n  font-family:'Geist Pixel',monospace;\n  font-size:.9375rem;font-weight:600;color:#33ff00;\n}\n.checkout-test-badge{\n  font-size:.625rem;font-weight:700;letter-spacing:.04em;text-transform:uppercase;\n  background:#0a3300;color:#1a8c00;padding:2px 8px;border-radius:4px;\n}\n.checkout-total{\n  font-family:'Geist Pixel',monospace;\n  font-size:2rem;font-weight:700;color:#33ff00;margin:8px 0 28px;\n}\n.checkout-line-item{\n  display:flex;align-items:center;gap:14px;padding:14px 0;\n  border-bottom:1px solid #0a3300;\n}\n.checkout-line-item:first-child{border-top:1px solid #0a3300;}\n.checkout-item-icon{\n  width:42px;height:42px;border-radius:6px;background:#0a3300;\n  display:flex;align-items:center;justify-content:center;flex-shrink:0;\n  font-family:'Geist Pixel',monospace;font-size:.875rem;font-weight:700;color:#116600;\n}\n.checkout-item-details{flex:1;min-width:0;}\n.checkout-item-name{font-size:.875rem;font-weight:600;color:#33ff00;}\n.checkout-item-qty{font-size:.75rem;color:#1a8c00;margin-top:2px;}\n.checkout-item-price{\n  font-size:.875rem;font-weight:600;color:#33ff00;text-align:right;white-space:nowrap;\n}\n.checkout-item-unit{font-size:.6875rem;color:#1a8c00;text-align:right;margin-top:2px;}\n.checkout-totals{margin-top:20px;}\n.checkout-totals-row{\n  display:flex;justify-content:space-between;padding:6px 0;\n  font-size:.8125rem;color:#1a8c00;\n}\n.checkout-totals-row.total{\n  border-top:1px solid #0a3300;margin-top:8px;padding-top:14px;\n  font-size:.9375rem;font-weight:600;color:#33ff00;\n}\n.checkout-form-section{margin-bottom:24px;}\n.checkout-form-label{\n  font-size:.8125rem;font-weight:600;color:#33ff00;margin-bottom:8px;display:block;\n}\n.checkout-input{\n  width:100%;padding:10px 12px;border:1px solid #0a3300;border-radius:6px;\n  background:#020;color:#33ff00;font:inherit;font-size:.875rem;\n  transition:border-color .15s;outline:none;\n}\n.checkout-input:focus{border-color:#33ff00;}\n.checkout-input::placeholder{color:#116600;}\n.checkout-card-box{\n  border:1px solid #0a3300;border-radius:6px;padding:14px;\n  background:#020;\n}\n.checkout-card-row{\n  display:flex;gap:12px;margin-top:10px;\n}\n.checkout-card-row .checkout-input{flex:1;}\n.checkout-sim-note{\n  font-size:.6875rem;color:#1a8c00;margin-top:10px;text-align:center;\n  font-style:italic;\n}\n.checkout-pay-btn{\n  width:100%;padding:14px;border:none;border-radius:8px;\n  background:#33ff00;color:#000;font:inherit;font-size:.9375rem;font-weight:700;\n  cursor:pointer;transition:background .15s;\n  font-family:'Geist Pixel',monospace;\n}\n.checkout-pay-btn:hover{background:#44ff22;}\n.checkout-cancel{\n  text-align:center;margin-top:14px;\n}\n.checkout-cancel a{\n  color:#1a8c00;text-decoration:none;font-size:.8125rem;\n  transition:color .15s;\n}\n.checkout-cancel a:hover{color:#33ff00;}\n@media(max-width:768px){\n  .checkout-layout{flex-direction:column;}\n  .checkout-summary{padding:32px 20px;border-right:none;border-bottom:1px solid #0a3300;}\n  .checkout-form-side{padding:32px 20px;}\n}\n`;\n\nconst POWERED_BY = `<div class=\"powered-by\">Powered by <a href=\"https://emulate.dev\" target=\"_blank\" rel=\"noopener\">emulate</a></div>`;\n\nfunction emuBar(service?: string): string {\n  const title = service ? `${escapeHtml(service)} Emulator` : \"Emulator\";\n  return `<div class=\"emu-bar\">\n  <span class=\"emu-bar-title\">${title}</span>\n  <nav class=\"emu-bar-links\">\n    <a href=\"https://github.com/vercel-labs/emulate/issues\" target=\"_blank\" rel=\"noopener\"><span class=\"full\">Report Issue</span><span class=\"short\">Report</span></a>\n    <a href=\"https://github.com/vercel-labs/emulate\" target=\"_blank\" rel=\"noopener\"><span class=\"full\">Source Code</span><span class=\"short\">Source</span></a>\n    <a href=\"https://emulate.dev\" target=\"_blank\" rel=\"noopener\"><span class=\"full\">Learn More</span><span class=\"short\">Learn</span></a>\n  </nav>\n</div>`;\n}\n\nfunction head(title: string): string {\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\"/>\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"/>\n<link rel=\"icon\" href=\"/_emulate/favicon.ico\"/>\n<title>${escapeHtml(title)} | emulate</title>\n<style>${CSS}</style>\n</head>`;\n}\n\nexport function renderCardPage(title: string, subtitle: string, body: string, service?: string): string {\n  return `${head(title)}\n<body>\n${emuBar(service)}\n<div class=\"content\">\n  <div class=\"content-inner\">\n    <div class=\"card-title\">${escapeHtml(title)}</div>\n    <div class=\"card-subtitle\">${subtitle}</div>\n    ${body}\n  </div>\n</div>\n${POWERED_BY}\n</body></html>`;\n}\n\nexport function renderErrorPage(title: string, message: string, service?: string): string {\n  return `${head(title)}\n<body>\n${emuBar(service)}\n<div class=\"content\">\n  <div class=\"content-inner error-card\">\n    <div class=\"error-title\">${escapeHtml(title)}</div>\n    <div class=\"error-msg\">${escapeHtml(message)}</div>\n  </div>\n</div>\n${POWERED_BY}\n</body></html>`;\n}\n\nexport function renderSettingsPage(title: string, sidebarHtml: string, bodyHtml: string, service?: string): string {\n  return `${head(title)}\n<body>\n${emuBar(service)}\n<div class=\"settings-layout\">\n  <nav class=\"settings-sidebar\">${sidebarHtml}</nav>\n  <div class=\"settings-main\">${bodyHtml}</div>\n</div>\n${POWERED_BY}\n</body></html>`;\n}\n\nexport interface InspectorTab {\n  id: string;\n  label: string;\n  href: string;\n}\n\nexport function renderInspectorPage(\n  title: string,\n  tabs: InspectorTab[],\n  activeTab: string,\n  body: string,\n  service?: string,\n): string {\n  const tabLinks = tabs\n    .map(\n      (t) => `<a href=\"${escapeAttr(t.href)}\" class=\"${t.id === activeTab ? \"active\" : \"\"}\">${escapeHtml(t.label)}</a>`,\n    )\n    .join(\"\");\n\n  return `${head(title)}\n<body>\n${emuBar(service)}\n<div class=\"inspector-layout\">\n  <nav class=\"inspector-tabs\">${tabLinks}</nav>\n  ${body}\n</div>\n${POWERED_BY}\n</body></html>`;\n}\n\nexport function renderFormPostPage(action: string, fields: Record<string, string>, service?: string): string {\n  const hiddens = Object.entries(fields)\n    .filter(([, v]) => v != null)\n    .map(([k, v]) => `<input type=\"hidden\" name=\"${escapeAttr(k)}\" value=\"${escapeAttr(v)}\"/>`)\n    .join(\"\\n\");\n\n  return `${head(\"Redirecting\")}\n<body onload=\"document.forms[0].submit()\">\n${emuBar(service)}\n<div class=\"content\">\n  <div class=\"content-inner\" style=\"text-align:center\">\n    <div class=\"card-subtitle\">Redirecting&hellip;</div>\n    <form method=\"POST\" action=\"${escapeAttr(action)}\">\n${hiddens}\n    <noscript><button type=\"submit\" class=\"user-btn\" style=\"margin-top:12px;justify-content:center\">\n      <span class=\"user-login\">Continue</span>\n    </button></noscript>\n    </form>\n  </div>\n</div>\n${POWERED_BY}\n</body></html>`;\n}\n\nexport interface CheckoutLineItem {\n  name: string;\n  quantity: number;\n  unitPrice: number;\n  totalPrice: number;\n  currency: string;\n}\n\nexport interface CheckoutPageOptions {\n  merchantName?: string;\n  lineItems: CheckoutLineItem[];\n  subtotal: number;\n  total: number;\n  currency: string;\n  sessionId: string;\n  cancelUrl?: string | null;\n}\n\nexport function renderCheckoutPage(opts: CheckoutPageOptions, service?: string): string {\n  const fmt = (cents: number, cur: string) => `$${(cents / 100).toFixed(2)} ${cur.toUpperCase()}`;\n  const fmtShort = (cents: number) => `$${(cents / 100).toFixed(2)}`;\n\n  const itemsHtml =\n    opts.lineItems.length > 0\n      ? opts.lineItems\n          .map((li) => {\n            const initial = li.name.charAt(0).toUpperCase();\n            const unitNote =\n              li.quantity > 1 ? `<div class=\"checkout-item-unit\">${fmtShort(li.unitPrice)} each</div>` : \"\";\n            return `<div class=\"checkout-line-item\">\n  <div class=\"checkout-item-icon\">${escapeHtml(initial)}</div>\n  <div class=\"checkout-item-details\">\n    <div class=\"checkout-item-name\">${escapeHtml(li.name)}</div>\n    <div class=\"checkout-item-qty\">Qty ${li.quantity}</div>\n  </div>\n  <div>\n    <div class=\"checkout-item-price\">${fmtShort(li.totalPrice)}</div>\n    ${unitNote}\n  </div>\n</div>`;\n          })\n          .join(\"\")\n      : '<p class=\"empty\">No line items</p>';\n\n  const totalsHtml = `<div class=\"checkout-totals\">\n  <div class=\"checkout-totals-row\">\n    <span>Subtotal</span><span>${fmtShort(opts.subtotal)}</span>\n  </div>\n  <div class=\"checkout-totals-row total\">\n    <span>Total due</span><span>${fmt(opts.total, opts.currency)}</span>\n  </div>\n</div>`;\n\n  const cancelHtml = opts.cancelUrl\n    ? `<div class=\"checkout-cancel\"><a href=\"${escapeAttr(opts.cancelUrl)}\">Cancel</a></div>`\n    : \"\";\n\n  const merchant = opts.merchantName ? escapeHtml(opts.merchantName) : \"Checkout\";\n\n  return `${head(\"Checkout\")}\n<body>\n${emuBar(service)}\n<div class=\"checkout-layout\">\n  <div class=\"checkout-summary\">\n    <div class=\"checkout-merchant\">\n      <span class=\"checkout-merchant-name\">${merchant}</span>\n      <span class=\"checkout-test-badge\">Test Mode</span>\n    </div>\n    <div class=\"checkout-total\">${fmtShort(opts.total)}</div>\n    ${itemsHtml}\n    ${totalsHtml}\n  </div>\n  <div class=\"checkout-form-side\">\n    <form method=\"post\" action=\"/checkout/${escapeAttr(opts.sessionId)}/complete\">\n      <div class=\"checkout-form-section\">\n        <label class=\"checkout-form-label\">Email</label>\n        <input type=\"email\" name=\"email\" class=\"checkout-input\" placeholder=\"you@example.com\"/>\n      </div>\n      <div class=\"checkout-form-section\">\n        <label class=\"checkout-form-label\">Card information</label>\n        <div class=\"checkout-card-box\">\n          <input type=\"text\" class=\"checkout-input\" placeholder=\"1234 1234 1234 1234\" disabled/>\n          <div class=\"checkout-card-row\">\n            <input type=\"text\" class=\"checkout-input\" placeholder=\"MM / YY\" disabled/>\n            <input type=\"text\" class=\"checkout-input\" placeholder=\"CVC\" disabled/>\n          </div>\n        </div>\n        <div class=\"checkout-sim-note\">Card fields are simulated. Payment will be auto-approved.</div>\n      </div>\n      <button type=\"submit\" class=\"checkout-pay-btn\">Pay ${fmtShort(opts.total)}</button>\n    </form>\n    ${cancelHtml}\n  </div>\n</div>\n${POWERED_BY}\n</body></html>`;\n}\n\nexport interface UserButtonOptions {\n  letter: string;\n  login: string;\n  name?: string;\n  email?: string;\n  formAction: string;\n  hiddenFields: Record<string, string>;\n}\n\nexport function renderUserButton(opts: UserButtonOptions): string {\n  const hiddens = Object.entries(opts.hiddenFields)\n    .map(([k, v]) => `<input type=\"hidden\" name=\"${escapeAttr(k)}\" value=\"${escapeAttr(v)}\"/>`)\n    .join(\"\");\n\n  const nameLine = opts.name ? `<div class=\"user-meta\">${escapeHtml(opts.name)}</div>` : \"\";\n  const emailLine = opts.email ? `<div class=\"user-email\">${escapeHtml(opts.email)}</div>` : \"\";\n\n  return `<form class=\"user-form\" method=\"post\" action=\"${escapeAttr(opts.formAction)}\">\n${hiddens}\n<button type=\"submit\" class=\"user-btn\">\n  <span class=\"avatar\">${escapeHtml(opts.letter)}</span>\n  <span class=\"user-text\">\n    <span class=\"user-login\">${escapeHtml(opts.login)}</span>\n    ${nameLine}${emailLine}\n  </span>\n</button>\n</form>`;\n}\n","import type { Context, Hono } from \"./http.js\";\nimport type { AppEnv } from \"./middleware/auth.js\";\nimport type { Store } from \"./store.js\";\nimport type { WebhookDispatcher } from \"./webhooks.js\";\nimport type { RequestLedger } from \"./ledger.js\";\nimport type { ConnectionVars, EmulatorInstanceInfo, ResolvedConnection, ServiceManifest } from \"./manifest.js\";\nimport { coverageReport, enrichManifest, resolveConnections } from \"./manifest.js\";\nimport type { TokenMap } from \"./middleware/auth.js\";\nimport { escapeHtml, renderCardPage } from \"./ui.js\";\n\nexport interface CredentialRequest {\n  type?: string;\n  login?: string;\n  name?: string;\n  scopes?: string[];\n  client_id?: string;\n  client_secret?: string;\n  redirect_uris?: string[];\n  [key: string]: unknown;\n}\n\nexport interface IssuedCredential {\n  type: string;\n  token?: string;\n  login?: string;\n  scopes?: string[];\n  client_id?: string;\n  client_secret?: string;\n  redirect_uris?: string[];\n  token_url?: string;\n  authorization_url?: string;\n  notes?: string;\n  [key: string]: unknown;\n}\n\nexport interface ControlPlaneOptions {\n  manifest: ServiceManifest;\n  instance: EmulatorInstanceInfo;\n  store: Store;\n  webhooks: WebhookDispatcher;\n  ledger: RequestLedger;\n  tokenMap?: TokenMap;\n  /** True when the host persists the ledger across eviction (e.g. a Durable Object). */\n  ledgerPersistent?: boolean;\n  /** Host suffix for the deployed form, e.g. \"emulators.dev\". */\n  hostSuffix?: string;\n  reset?: () => void | Promise<void>;\n  seed?: (seed: unknown) => void | Promise<void>;\n  issueCredential?: (request: CredentialRequest) => IssuedCredential | Promise<IssuedCredential>;\n}\n\nexport const INSTANCE_NOTES = \"Hosted deployments create instances lazily when the returned URL is first used.\";\n\nexport interface InstanceCreation {\n  service: string;\n  instance: string;\n  providerBaseUrl: string;\n  controlBaseUrl: string;\n  pathUrl: string;\n  hostHint: string;\n  notes: string;\n}\n\n/** The single, canonical shape for POST /_emulate/instances, shared by every host. */\nexport function buildInstanceCreation(args: {\n  service: string;\n  instance: string;\n  providerBaseUrl: string;\n  pathOrigin: string;\n  hostSuffix: string;\n}): InstanceCreation {\n  return {\n    service: args.service,\n    instance: args.instance,\n    providerBaseUrl: args.providerBaseUrl,\n    controlBaseUrl: `${args.providerBaseUrl}/_emulate`,\n    pathUrl: `${args.pathOrigin}/${args.service}/${args.instance}`,\n    hostHint: `${args.service}.${args.instance}.${args.hostSuffix}`,\n    notes: INSTANCE_NOTES,\n  };\n}\n\nfunction connectionVars(\n  manifest: ServiceManifest,\n  instance: EmulatorInstanceInfo,\n  overrides?: Partial<ConnectionVars>,\n): ConnectionVars {\n  return {\n    baseUrl: instance.providerBaseUrl,\n    providerBaseUrl: instance.providerBaseUrl,\n    controlBaseUrl: instance.controlBaseUrl,\n    service: manifest.id,\n    instance: instance.instance,\n    defaultAuthType: manifest.auth[0]?.type ?? \"bearer-token\",\n    ...overrides,\n  };\n}\n\nexport function registerControlPlane(app: Hono<AppEnv>, options: ControlPlaneOptions): void {\n  const { instance, store, webhooks, ledger } = options;\n  const manifest = enrichManifest(options.manifest, { ledgerPersistent: options.ledgerPersistent });\n  const hostSuffix = options.hostSuffix ?? \"emulators.dev\";\n\n  app.get(\"/_emulate\", (c) => c.html(renderLandingPage(manifest, instance)));\n  app.get(\"/_emulate/manifest\", (c) =>\n    c.json({\n      manifest,\n      instance,\n      connections: resolveConnections(manifest.connections ?? [], connectionVars(manifest, instance)),\n    }),\n  );\n  app.get(\"/_emulate/quickstart\", (c) => c.text(renderQuickstart(manifest, instance)));\n  app.get(\"/_emulate/specs\", (c) => c.json({ specs: manifest.specs, surfaces: manifest.surfaces }));\n  app.get(\"/_emulate/coverage\", (c) => c.json(coverageReport(manifest)));\n  app.get(\"/_emulate/connections\", (c) => {\n    const overrides: Partial<ConnectionVars> = {};\n    const token = c.req.query(\"token\");\n    const clientId = c.req.query(\"client_id\");\n    const clientSecret = c.req.query(\"client_secret\");\n    if (token) overrides.token = token;\n    if (clientId) overrides.clientId = clientId;\n    if (clientSecret) overrides.clientSecret = clientSecret;\n    return c.json({\n      connections: resolveConnections(manifest.connections ?? [], connectionVars(manifest, instance, overrides)),\n    });\n  });\n  app.get(\"/_emulate/openapi\", (c) => redirectToSpec(c, manifest, instance, \"openapi\"));\n  app.get(\"/_emulate/graphql\", (c) => endpointForSurface(c, manifest, instance, \"graphql\"));\n  app.get(\"/_emulate/mcp\", (c) => endpointForSurface(c, manifest, instance, \"mcp\"));\n  app.get(\"/_emulate/state\", (c) => c.json(store.snapshot()));\n  app.get(\"/_emulate/ledger\", (c) => {\n    const limitParam = c.req.query(\"limit\");\n    const limit = limitParam ? Number.parseInt(limitParam, 10) : undefined;\n    return c.json({ entries: ledger.list(Number.isFinite(limit) ? limit : undefined) });\n  });\n  app.delete(\"/_emulate/ledger\", (c) => {\n    ledger.clear();\n    return c.json({ ok: true });\n  });\n  app.get(\"/_emulate/logs\", (c) => c.json({ webhooks: webhooks.getDeliveries(), requests: ledger.list(100) }));\n  app.post(\"/_emulate/reset\", async (c) => {\n    if (options.reset) {\n      await options.reset();\n    } else {\n      store.reset();\n      webhooks.clear();\n      ledger.clear();\n    }\n    return c.json({ ok: true });\n  });\n  app.post(\"/_emulate/seed\", async (c) => {\n    if (!options.seed) {\n      return c.json({ error: \"unsupported\", message: \"This emulator does not support runtime seeding.\" }, 501);\n    }\n    const body = await c.req.json().catch(() => undefined);\n    try {\n      await options.seed(body);\n    } catch (err) {\n      return c.json({ error: \"invalid_seed\", message: err instanceof Error ? err.message : \"Seed failed.\" }, 400);\n    }\n    return c.json({ ok: true });\n  });\n  app.post(\"/_emulate/credentials\", async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as CredentialRequest;\n    try {\n      if (options.issueCredential) {\n        const credential = await options.issueCredential(body);\n        return c.json({ credential });\n      }\n      const credential = issueDefaultCredential(body, manifest, options.tokenMap);\n      if (!credential) {\n        return c.json({ error: \"unsupported\", message: \"This emulator cannot create that credential type.\" }, 501);\n      }\n      return c.json({ credential });\n    } catch (err) {\n      return c.json(\n        { error: \"unsupported\", message: err instanceof Error ? err.message : \"Credential creation failed.\" },\n        400,\n      );\n    }\n  });\n  app.post(\"/_emulate/instances\", async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as { instance?: string; service?: string };\n    const nextInstance = slug(body.instance ?? `${manifest.id}-${randomId().slice(0, 8)}`);\n    const service = slug(body.service ?? manifest.id);\n    const origin = new URL(instance.providerBaseUrl).origin;\n    return c.json(\n      buildInstanceCreation({\n        service,\n        instance: nextInstance,\n        providerBaseUrl: `${origin}/${service}/${nextInstance}`,\n        pathOrigin: origin,\n        hostSuffix,\n      }),\n    );\n  });\n}\n\nexport function renderLandingPage(manifest: ServiceManifest, instance: EmulatorInstanceInfo): string {\n  const surfaces = manifest.surfaces\n    .map(\n      (surface) =>\n        `<tr><td>${escapeHtml(surface.title)}</td><td><span class=\"badge\">${escapeHtml(surface.status)}</span></td><td><code>${escapeHtml(surface.basePath ?? \"\")}</code></td></tr>`,\n    )\n    .join(\"\");\n  const auth = manifest.auth\n    .map((cap) => `<li><span class=\"badge\">${escapeHtml(cap.status)}</span> ${escapeHtml(cap.title)}</li>`)\n    .join(\"\");\n  const connections = resolveConnections(manifest.connections ?? [], connectionVars(manifest, instance));\n  const instanceLabel = instance.instance ? ` · instance <code>${escapeHtml(instance.instance)}</code>` : \"\";\n\n  return renderCardPage(\n    `${manifest.name} Emulator`,\n    escapeHtml(manifest.description),\n    `\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Base URLs${instanceLabel}</div>\n        <p class=\"info-text\">Provider: <code>${escapeHtml(instance.providerBaseUrl)}</code></p>\n        <p class=\"info-text\">Control: <code>${escapeHtml(instance.controlBaseUrl)}</code></p>\n      </div>\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Surfaces</div>\n        <table class=\"inspector-table\">\n          <thead><tr><th>Surface</th><th>Status</th><th>Path</th></tr></thead>\n          <tbody>${surfaces}</tbody>\n        </table>\n      </div>\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Credentials</div>\n        <ul class=\"perm-list\">${auth}</ul>\n      </div>\n      ${renderConnectionsHtml(connections)}\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Control API</div>\n        <p class=\"info-text\">${controlLinks()}</p>\n      </div>\n    `,\n    manifest.id,\n  );\n}\n\nfunction renderConnectionsHtml(connections: ResolvedConnection[]): string {\n  if (connections.length === 0) return \"\";\n  const blocks = connections\n    .map(\n      (c) =>\n        `<div class=\"section-heading\">${escapeHtml(c.title)}</div><pre class=\"code-block\"><code>${escapeHtml(c.body)}</code></pre>`,\n    )\n    .join(\"\");\n  return `<div class=\"s-card\"><div class=\"section-heading\">Connect</div>${blocks}</div>`;\n}\n\nfunction controlLinks(): string {\n  const routes = [\"manifest\", \"quickstart\", \"specs\", \"coverage\", \"connections\", \"state\", \"ledger\", \"logs\"];\n  return routes.map((r) => `<a href=\"/_emulate/${r}\">${r}</a>`).join(\" | \");\n}\n\nexport function renderQuickstart(manifest: ServiceManifest, instance: EmulatorInstanceInfo): string {\n  const connections = resolveConnections(manifest.connections ?? [], connectionVars(manifest, instance));\n  const lines = [\n    `# ${manifest.name} Emulator`,\n    \"\",\n    manifest.description,\n    \"\",\n    `Provider base URL: ${instance.providerBaseUrl}`,\n    `Control base URL: ${instance.controlBaseUrl}`,\n    \"\",\n    \"Supported surfaces:\",\n    ...manifest.surfaces.map((s) => `- ${s.title}: ${s.status}${s.basePath ? ` at ${s.basePath}` : \"\"}`),\n    \"\",\n    \"Control endpoints:\",\n    `- ${instance.controlBaseUrl}/manifest`,\n    `- ${instance.controlBaseUrl}/coverage`,\n    `- ${instance.controlBaseUrl}/connections`,\n    `- ${instance.controlBaseUrl}/state`,\n    `- ${instance.controlBaseUrl}/ledger`,\n    `- POST ${instance.controlBaseUrl}/credentials`,\n    `- POST ${instance.controlBaseUrl}/seed`,\n    `- POST ${instance.controlBaseUrl}/reset`,\n    \"\",\n    \"Connect:\",\n    ...connections.flatMap((c) => [\"\", `## ${c.title}`, c.body]),\n  ];\n  return lines.join(\"\\n\");\n}\n\nfunction issueDefaultCredential(\n  request: CredentialRequest,\n  manifest: ServiceManifest,\n  tokenMap: TokenMap | undefined,\n): IssuedCredential | null {\n  const type = request.type ?? manifest.auth[0]?.type ?? \"bearer-token\";\n  if (type !== \"bearer-token\" && type !== \"api-key\") return null;\n  if (!tokenMap) return null;\n  const token = typeof request.token === \"string\" && request.token ? request.token : `emu_${manifest.id}_${randomId()}`;\n  const login = request.login ?? \"admin\";\n  const scopes = Array.isArray(request.scopes) ? request.scopes.filter((s): s is string => typeof s === \"string\") : [];\n  tokenMap.set(token, { login, id: Date.now(), scopes });\n  return { type, token, login, scopes };\n}\n\nfunction redirectToSpec(c: Context<AppEnv>, manifest: ServiceManifest, instance: EmulatorInstanceInfo, kind: string) {\n  const spec = manifest.specs.find((s) => s.kind === kind && s.url);\n  if (spec?.url) return c.redirect(resolveUrl(instance.providerBaseUrl, spec.url));\n  const advertised = manifest.specs.some((s) => s.kind === kind);\n  if (kind === \"openapi\" && advertised) return c.redirect(`${instance.providerBaseUrl}/openapi.json`);\n  return c.json({ error: \"not_found\", message: `No ${kind} spec is advertised for this emulator.` }, 404);\n}\n\nfunction endpointForSurface(\n  c: Context<AppEnv>,\n  manifest: ServiceManifest,\n  instance: EmulatorInstanceInfo,\n  kind: \"graphql\" | \"mcp\",\n) {\n  const surface = manifest.surfaces.find((s) => s.kind === kind && s.basePath);\n  if (!surface?.basePath) {\n    return c.json({ error: \"not_found\", message: `No ${kind} surface is advertised for this emulator.` }, 404);\n  }\n  return c.json({ endpoint: resolveUrl(instance.providerBaseUrl, surface.basePath), surface });\n}\n\nfunction resolveUrl(baseUrl: string, pathOrUrl: string): string {\n  if (/^https?:\\/\\//i.test(pathOrUrl)) return pathOrUrl;\n  return `${baseUrl}${pathOrUrl.startsWith(\"/\") ? \"\" : \"/\"}${pathOrUrl}`;\n}\n\nfunction randomId(): string {\n  return crypto.randomUUID().replace(/-/g, \"\");\n}\n\nfunction slug(value: string): string {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9-]/g, \"-\")\n    .replace(/-+/g, \"-\")\n    .replace(/^-|-$/g, \"\");\n}\n","import { Hono, cors } from \"./http.js\";\nimport { Store } from \"./store.js\";\nimport { WebhookDispatcher } from \"./webhooks.js\";\nimport { createApiErrorHandler, createErrorHandler } from \"./middleware/error-handler.js\";\nimport {\n  authMiddleware,\n  type AuthFallback,\n  type TokenMap,\n  type AppKeyResolver,\n  type AppEnv,\n} from \"./middleware/auth.js\";\nimport type { ServicePlugin } from \"./plugin.js\";\nimport { registerFontRoutes } from \"./fonts.js\";\nimport { RequestLedger, createLedgerMiddleware } from \"./ledger.js\";\nimport { registerControlPlane, type CredentialRequest, type IssuedCredential } from \"./control-plane.js\";\nimport { createDefaultManifest, type ServiceManifest } from \"./manifest.js\";\n\nexport interface ServerOptions {\n  port?: number;\n  baseUrl?: string;\n  docsUrl?: string;\n  tokens?: Record<string, { login: string; id: number; scopes?: string[] }>;\n  appKeyResolver?: AppKeyResolver;\n  fallbackUser?: AuthFallback;\n  manifest?: ServiceManifest;\n  instance?: string;\n  enableControlPlane?: boolean;\n  /** True when the host persists the ledger across eviction (e.g. a Durable Object). */\n  ledgerPersistent?: boolean;\n  /** Host suffix for the deployed form surfaced in control-plane responses. */\n  hostSuffix?: string;\n  reset?: () => void | Promise<void>;\n  seed?: (seed: unknown) => void | Promise<void>;\n  issueCredential?: (request: CredentialRequest) => IssuedCredential | Promise<IssuedCredential>;\n}\n\nexport function createServer(plugin: ServicePlugin, options: ServerOptions = {}) {\n  const port = options.port ?? 4000;\n  const baseUrl = options.baseUrl ?? `http://localhost:${port}`;\n\n  const app = new Hono<AppEnv>();\n  const store = new Store();\n  const webhooks = new WebhookDispatcher();\n  const ledger = new RequestLedger();\n\n  const tokenMap: TokenMap = new Map();\n  if (options.tokens) {\n    for (const [token, user] of Object.entries(options.tokens)) {\n      tokenMap.set(token, {\n        login: user.login,\n        id: user.id,\n        scopes: user.scopes ?? [\"repo\", \"user\", \"admin:org\", \"admin:repo_hook\"],\n      });\n    }\n  }\n\n  const docsUrl = options.docsUrl ?? `https://docs.emulators.dev/${plugin.name}`;\n\n  registerFontRoutes(app);\n\n  app.onError(createApiErrorHandler(docsUrl));\n  app.use(\"*\", cors());\n  app.use(\"*\", createErrorHandler(docsUrl));\n  app.use(\"*\", authMiddleware(tokenMap, options.appKeyResolver, options.fallbackUser));\n\n  if (options.enableControlPlane !== false) {\n    const manifest = options.manifest ?? createDefaultManifest(plugin.name);\n    registerControlPlane(app, {\n      manifest,\n      instance: {\n        service: manifest.id,\n        instance: options.instance,\n        baseUrl,\n        providerBaseUrl: baseUrl,\n        controlBaseUrl: `${baseUrl}/_emulate`,\n      },\n      store,\n      webhooks,\n      ledger,\n      tokenMap,\n      ledgerPersistent: options.ledgerPersistent,\n      hostSuffix: options.hostSuffix,\n      reset: options.reset,\n      seed: options.seed,\n      issueCredential: options.issueCredential,\n    });\n  }\n\n  app.use(\"*\", createLedgerMiddleware(ledger, { webhooks }));\n\n  const rateLimitCounters = new Map<string, { remaining: number; resetAt: number }>();\n  let lastPruneAt = Math.floor(Date.now() / 1000);\n\n  app.use(\"*\", async (c, next) => {\n    const token = c.get(\"authToken\") ?? \"__anonymous__\";\n    const now = Math.floor(Date.now() / 1000);\n\n    if (now - lastPruneAt > 3600) {\n      for (const [key, val] of rateLimitCounters) {\n        if (val.resetAt <= now) rateLimitCounters.delete(key);\n      }\n      lastPruneAt = now;\n    }\n\n    let counter = rateLimitCounters.get(token);\n    if (!counter || counter.resetAt <= now) {\n      counter = { remaining: 5000, resetAt: now + 3600 };\n      rateLimitCounters.set(token, counter);\n    }\n\n    counter.remaining = Math.max(0, counter.remaining - 1);\n\n    c.header(\"X-RateLimit-Limit\", \"5000\");\n    c.header(\"X-RateLimit-Remaining\", String(counter.remaining));\n    c.header(\"X-RateLimit-Reset\", String(counter.resetAt));\n    c.header(\"X-RateLimit-Resource\", \"core\");\n\n    if (counter.remaining === 0) {\n      return c.json(\n        {\n          message: \"API rate limit exceeded\",\n          documentation_url: docsUrl,\n        },\n        403,\n      );\n    }\n\n    await next();\n  });\n\n  plugin.register(app, store, webhooks, baseUrl, tokenMap);\n\n  app.notFound((c) =>\n    c.json(\n      {\n        message: \"Not Found\",\n        documentation_url: docsUrl,\n      },\n      404,\n    ),\n  );\n\n  return { app, store, webhooks, ledger, port, baseUrl, tokenMap };\n}\n","import type { EmulatorInstanceInfo, ServiceManifest } from \"./manifest.js\";\nimport { coverageReport, enrichManifest, resolveConnections } from \"./manifest.js\";\nimport { escapeHtml, renderCardPage } from \"./ui.js\";\nimport { renderQuickstart, INSTANCE_NOTES } from \"./control-plane.js\";\n\nexport interface ServiceHostContext {\n  manifest: ServiceManifest;\n  service: string;\n  /** Apex origin for the path form, e.g. https://emulators.dev. */\n  origin: string;\n  /** Request protocol including the colon, e.g. \"https:\". */\n  protocol: string;\n  /** Host suffix for the deployed form, e.g. \"emulators.dev\". */\n  hostSuffix: string;\n  /** Whether the deployed host persists the ledger across eviction. */\n  ledgerPersistent?: boolean;\n}\n\nconst SAMPLE_INSTANCE = \"your-instance\";\n\nfunction sampleInstanceInfo(ctx: ServiceHostContext): EmulatorInstanceInfo {\n  const providerBaseUrl = `${ctx.protocol}//${ctx.service}.${SAMPLE_INSTANCE}.${ctx.hostSuffix}`;\n  return {\n    service: ctx.service,\n    instance: SAMPLE_INSTANCE,\n    baseUrl: providerBaseUrl,\n    providerBaseUrl,\n    controlBaseUrl: `${providerBaseUrl}/_emulate`,\n  };\n}\n\nfunction json(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { \"content-type\": \"application/json; charset=utf-8\" },\n  });\n}\n\n/**\n * Serve the service-level control plane on a bare service host (e.g.\n * github.emulators.dev) so a human or agent can read the manifest, quickstart,\n * specs, coverage, and connection snippets WITHOUT first creating an instance.\n * Returns null for paths this should not handle (so the caller can fall through\n * to the interactive console SPA).\n */\nexport function serviceHostControlPlane(path: string, method: string, ctx: ServiceHostContext): Response | null {\n  if (!path.startsWith(\"/_emulate\")) return null;\n  if (method !== \"GET\" && method !== \"HEAD\") return null;\n\n  const manifest = enrichManifest(ctx.manifest, { ledgerPersistent: ctx.ledgerPersistent });\n  const sample = sampleInstanceInfo(ctx);\n  const connections = resolveConnections(manifest.connections ?? [], {\n    baseUrl: sample.providerBaseUrl,\n    providerBaseUrl: sample.providerBaseUrl,\n    controlBaseUrl: sample.controlBaseUrl,\n    service: ctx.service,\n    instance: SAMPLE_INSTANCE,\n    defaultAuthType: manifest.auth[0]?.type ?? \"bearer-token\",\n  });\n\n  switch (path) {\n    case \"/_emulate\":\n      return new Response(renderServiceLanding(manifest, ctx, sample), {\n        headers: { \"content-type\": \"text/html; charset=utf-8\" },\n      });\n    case \"/_emulate/manifest\":\n      return json({ manifest, instance: null, sampleInstance: sample, connections });\n    case \"/_emulate/quickstart\":\n      return new Response(renderServiceQuickstart(manifest, ctx, sample), {\n        headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n      });\n    case \"/_emulate/specs\":\n      return json({ specs: manifest.specs, surfaces: manifest.surfaces });\n    case \"/_emulate/coverage\":\n      return json(coverageReport(manifest));\n    case \"/_emulate/connections\":\n      return json({ connections });\n    case \"/_emulate/openapi\": {\n      const spec = manifest.specs.find((s) => s.kind === \"openapi\");\n      if (!spec) return json({ error: \"not_found\", message: \"No OpenAPI spec is advertised for this emulator.\" }, 404);\n      return json({\n        openapi: `${sample.providerBaseUrl}${spec.url ?? \"/openapi.json\"}`,\n        note: \"Create an instance, then fetch this URL for the live spec.\",\n      });\n    }\n    default:\n      return null;\n  }\n}\n\nfunction renderServiceQuickstart(\n  manifest: ServiceManifest,\n  ctx: ServiceHostContext,\n  sample: EmulatorInstanceInfo,\n): string {\n  const base = renderQuickstart(manifest, sample);\n  const header = [\n    `# ${manifest.name} Emulator (service host)`,\n    \"\",\n    \"Create an instance:\",\n    `curl -s -X POST ${ctx.protocol}//${ctx.service}.${ctx.hostSuffix}/_emulate/instances -H 'content-type: application/json' -d '{\"instance\":\"my-run\"}'`,\n    `# ${INSTANCE_NOTES}`,\n    \"\",\n    \"Then use the returned providerBaseUrl / controlBaseUrl. Example below uses a sample instance.\",\n    \"\",\n  ];\n  return header.join(\"\\n\") + base;\n}\n\nfunction renderServiceLanding(\n  manifest: ServiceManifest,\n  ctx: ServiceHostContext,\n  sample: EmulatorInstanceInfo,\n): string {\n  const surfaces = manifest.surfaces\n    .map(\n      (s) =>\n        `<tr><td>${escapeHtml(s.title)}</td><td><span class=\"badge\">${escapeHtml(s.status)}</span></td><td><code>${escapeHtml(s.basePath ?? \"\")}</code></td></tr>`,\n    )\n    .join(\"\");\n  const createCurl = `curl -s -X POST ${ctx.protocol}//${ctx.service}.${ctx.hostSuffix}/_emulate/instances \\\\\n  -H \"content-type: application/json\" \\\\\n  -d '{\"instance\":\"my-run\"}'`;\n\n  return renderCardPage(\n    `${manifest.name} Emulator`,\n    escapeHtml(manifest.description),\n    `\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Create an instance</div>\n        <p class=\"info-text\">Each instance is isolated, stateful, and addressable at its own host.</p>\n        <pre class=\"code-block\"><code>${escapeHtml(createCurl)}</code></pre>\n        <p class=\"info-text\">${escapeHtml(INSTANCE_NOTES)}</p>\n        <p class=\"info-text\">Sample instance host: <code>${escapeHtml(sample.providerBaseUrl)}</code></p>\n      </div>\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Surfaces</div>\n        <table class=\"inspector-table\">\n          <thead><tr><th>Surface</th><th>Status</th><th>Path</th></tr></thead>\n          <tbody>${surfaces}</tbody>\n        </table>\n      </div>\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Control API</div>\n        <p class=\"info-text\">\n          <a href=\"/_emulate/manifest\">manifest</a> | <a href=\"/_emulate/quickstart\">quickstart</a> |\n          <a href=\"/_emulate/specs\">specs</a> | <a href=\"/_emulate/coverage\">coverage</a> |\n          <a href=\"/_emulate/connections\">connections</a>\n        </p>\n      </div>\n    `,\n    manifest.id,\n  );\n}\n\nexport interface ServiceCatalogEntry {\n  id: string;\n  name: string;\n  description: string;\n}\n\n/**\n * Server-rendered catalog landing for the apex host. Readable by an agent over a\n * raw fetch (no JS): it lists every emulator with its host and manifest URL. The\n * interactive console SPA is served instead only for browser navigations.\n */\nexport function renderCatalogPage(\n  entries: ServiceCatalogEntry[],\n  ctx: { origin: string; protocol: string; hostSuffix: string },\n): string {\n  const rows = entries\n    .map((e) => {\n      const host = `${ctx.protocol}//${e.id}.${ctx.hostSuffix}`;\n      return `<a class=\"app-link\" href=\"${escapeHtml(host)}\">\n        <img src=\"/_emulate/icons/${escapeHtml(e.id)}\" alt=\"\" width=\"24\" height=\"24\" style=\"object-fit:contain\" />\n        <span><span class=\"app-link-name\">${escapeHtml(e.name)}</span><span class=\"app-link-scopes\">${escapeHtml(host)}</span></span>\n      </a>`;\n    })\n    .join(\"\");\n  return renderCardPage(\n    \"Emulate\",\n    \"Stateful integration emulators for real developer APIs. Each emulator has its own host; open one or fetch its manifest.\",\n    `\n      <div class=\"s-card\">\n        <div class=\"section-heading\">Emulators</div>\n        ${rows}\n      </div>\n      <div class=\"s-card\">\n        <div class=\"section-heading\">For agents</div>\n        <p class=\"info-text\">Machine-readable catalog: <a href=\"/_emulate/services\">/_emulate/services</a></p>\n        <p class=\"info-text\">Each service host serves <code>/_emulate/manifest</code>, <code>/_emulate/quickstart</code>, and <code>/_emulate/connections</code>, and the provider API directly against a default instance.</p>\n      </div>\n    `,\n  );\n}\n\n/** A machine-readable index of the services a host serves, with both URL forms. */\nexport function servicesCatalog(\n  entries: ServiceCatalogEntry[],\n  ctx: { origin: string; protocol: string; hostSuffix: string },\n): Response {\n  const services = entries.map((e) => ({\n    id: e.id,\n    name: e.name,\n    description: e.description,\n    icon: `${ctx.origin}/_emulate/icons/${e.id}`,\n    serviceHost: `${ctx.protocol}//${e.id}.${ctx.hostSuffix}`,\n    instanceHostPattern: `${ctx.protocol}//${e.id}.<instance>.${ctx.hostSuffix}`,\n    pathForm: `${ctx.origin}/${e.id}/<instance>`,\n    manifest: `${ctx.protocol}//${e.id}.${ctx.hostSuffix}/_emulate/manifest`,\n  }));\n  return new Response(JSON.stringify({ services }), {\n    headers: { \"content-type\": \"application/json; charset=utf-8\" },\n  });\n}\n","import type { Context } from \"../http.js\";\n\nexport interface PaginationParams {\n  page: number;\n  per_page: number;\n}\n\nexport function parsePagination(c: Context): PaginationParams {\n  const page = Math.max(1, parseInt(c.req.query(\"page\") ?? \"1\", 10) || 1);\n  const per_page = Math.min(100, Math.max(1, parseInt(c.req.query(\"per_page\") ?? \"30\", 10) || 30));\n  return { page, per_page };\n}\n\nexport function setLinkHeader(c: Context, totalCount: number, page: number, perPage: number): void {\n  const lastPage = Math.max(1, Math.ceil(totalCount / perPage));\n  const baseUrl = new URL(c.req.url);\n  const links: string[] = [];\n\n  const makeLink = (p: number, rel: string) => {\n    baseUrl.searchParams.set(\"page\", String(p));\n    baseUrl.searchParams.set(\"per_page\", String(perPage));\n    return `<${baseUrl.toString()}>; rel=\"${rel}\"`;\n  };\n\n  if (page < lastPage) {\n    links.push(makeLink(page + 1, \"next\"));\n    links.push(makeLink(lastPage, \"last\"));\n  }\n  if (page > 1) {\n    links.push(makeLink(1, \"first\"));\n    links.push(makeLink(page - 1, \"prev\"));\n  }\n\n  if (links.length > 0) {\n    c.header(\"Link\", links.join(\", \"));\n  }\n}\n","import { timingSafeEqual } from \"crypto\";\n\nexport function normalizeUri(uri: string): string {\n  try {\n    const u = new URL(uri);\n    return `${u.origin}${u.pathname.replace(/\\/+$/, \"\")}`;\n  } catch {\n    return uri.replace(/\\/+$/, \"\").split(\"?\")[0];\n  }\n}\n\nexport function matchesRedirectUri(incoming: string, registered: string[]): boolean {\n  const normalized = normalizeUri(incoming);\n  return registered.some((r) => normalizeUri(r) === normalized);\n}\n\nexport function constantTimeSecretEqual(a: string, b: string): boolean {\n  const bufA = Buffer.from(a, \"utf-8\");\n  const bufB = Buffer.from(b, \"utf-8\");\n  if (bufA.length !== bufB.length) return false;\n  return timingSafeEqual(bufA, bufB);\n}\n\nexport function bodyStr(v: unknown): string {\n  if (typeof v === \"string\") return v;\n  if (Array.isArray(v) && typeof v[0] === \"string\") return v[0];\n  return \"\";\n}\n\nexport function parseCookies(header: string): Record<string, string> {\n  const cookies: Record<string, string> = {};\n  for (const part of header.split(\";\")) {\n    const [k, ...v] = part.split(\"=\");\n    if (k) cookies[k.trim()] = v.join(\"=\").trim();\n  }\n  return cookies;\n}\n","import { readFile, writeFile, mkdir } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\n\nexport interface PersistenceAdapter {\n  load(): Promise<string | null>;\n  save(data: string): Promise<void>;\n}\n\nexport function filePersistence(path: string): PersistenceAdapter {\n  return {\n    async load() {\n      try {\n        return await readFile(path, \"utf-8\");\n      } catch {\n        return null;\n      }\n    },\n    async save(data: string) {\n      await mkdir(dirname(path), { recursive: true });\n      await writeFile(path, data, \"utf-8\");\n    },\n  };\n}\n","import type { RouteContext, InspectorTab } from \"@emulators/core\";\nimport { renderInspectorPage } from \"@emulators/core\";\nimport { getAwsStore } from \"../store.js\";\nimport { escapeXml } from \"../helpers.js\";\n\nconst SERVICE_LABEL = \"AWS\";\n\nconst TABS: InspectorTab[] = [\n  { id: \"s3\", label: \"S3\", href: \"/_inspector?tab=s3\" },\n  { id: \"sqs\", label: \"SQS\", href: \"/_inspector?tab=sqs\" },\n  { id: \"iam\", label: \"IAM\", href: \"/_inspector?tab=iam\" },\n];\n\nexport function inspectorRoutes(ctx: RouteContext): void {\n  const { app, store } = ctx;\n  const aws = () => getAwsStore(store);\n\n  app.get(\"/_inspector\", (c) => {\n    const tab = c.req.query(\"tab\") ?? \"s3\";\n    const s3Store = aws();\n\n    const buckets = s3Store.s3Buckets.all();\n    const queues = s3Store.sqsQueues.all();\n    const users = s3Store.iamUsers.all();\n    const roles = s3Store.iamRoles.all();\n\n    let contentHtml = \"\";\n\n    if (tab === \"s3\") {\n      const rows = buckets\n        .map((b) => {\n          const objects = s3Store.s3Objects.findBy(\"bucket_name\", b.bucket_name);\n          return `<tr>\n            <td>${escapeXml(b.bucket_name)}</td>\n            <td>${objects.length}</td>\n            <td>${escapeXml(b.region)}</td>\n            <td>${escapeXml(b.creation_date)}</td>\n          </tr>`;\n        })\n        .join(\"\\n\");\n\n      contentHtml = `\n        <div class=\"inspector-section\">\n          <h2>S3 Buckets (${buckets.length})</h2>\n          <table class=\"inspector-table\">\n            <thead><tr><th>Bucket</th><th>Objects</th><th>Region</th><th>Created</th></tr></thead>\n            <tbody>${rows || `<tr><td colspan=\"4\"><div class=\"inspector-empty\">No buckets</div></td></tr>`}</tbody>\n          </table>\n        </div>`;\n\n      for (const bucket of buckets) {\n        const objects = s3Store.s3Objects.findBy(\"bucket_name\", bucket.bucket_name);\n        if (objects.length > 0) {\n          const objRows = objects\n            .map(\n              (o) => `<tr>\n              <td>${escapeXml(o.key)}</td>\n              <td>${o.content_length}</td>\n              <td>${escapeXml(o.content_type)}</td>\n              <td>${escapeXml(o.last_modified)}</td>\n            </tr>`,\n            )\n            .join(\"\\n\");\n          contentHtml += `\n            <div class=\"inspector-section\">\n              <h3>${escapeXml(bucket.bucket_name)} objects</h3>\n              <table class=\"inspector-table\">\n                <thead><tr><th>Key</th><th>Size</th><th>Type</th><th>Last Modified</th></tr></thead>\n                <tbody>${objRows}</tbody>\n              </table>\n            </div>`;\n        }\n      }\n    } else if (tab === \"sqs\") {\n      const rows = queues\n        .map((q) => {\n          const messages = s3Store.sqsMessages.findBy(\"queue_name\", q.queue_name);\n          return `<tr>\n            <td>${escapeXml(q.queue_name)}</td>\n            <td>${messages.length}</td>\n            <td>${q.fifo ? \"Yes\" : \"No\"}</td>\n            <td>${q.visibility_timeout}s</td>\n          </tr>`;\n        })\n        .join(\"\\n\");\n\n      contentHtml = `\n        <div class=\"inspector-section\">\n          <h2>SQS Queues (${queues.length})</h2>\n          <table class=\"inspector-table\">\n            <thead><tr><th>Queue</th><th>Messages</th><th>FIFO</th><th>Visibility Timeout</th></tr></thead>\n            <tbody>${rows || `<tr><td colspan=\"4\"><div class=\"inspector-empty\">No queues</div></td></tr>`}</tbody>\n          </table>\n        </div>`;\n    } else if (tab === \"iam\") {\n      const userRows = users\n        .map(\n          (u) => `<tr>\n          <td>${escapeXml(u.user_name)}</td>\n          <td>${escapeXml(u.user_id)}</td>\n          <td>${u.access_keys.length}</td>\n          <td>${escapeXml(u.arn)}</td>\n        </tr>`,\n        )\n        .join(\"\\n\");\n\n      const roleRows = roles\n        .map(\n          (r) => `<tr>\n          <td>${escapeXml(r.role_name)}</td>\n          <td>${escapeXml(r.role_id)}</td>\n          <td>${escapeXml(r.description)}</td>\n          <td>${escapeXml(r.arn)}</td>\n        </tr>`,\n        )\n        .join(\"\\n\");\n\n      contentHtml = `\n        <div class=\"inspector-section\">\n          <h2>IAM Users (${users.length})</h2>\n          <table class=\"inspector-table\">\n            <thead><tr><th>User</th><th>User ID</th><th>Access Keys</th><th>ARN</th></tr></thead>\n            <tbody>${userRows || `<tr><td colspan=\"4\"><div class=\"inspector-empty\">No users</div></td></tr>`}</tbody>\n          </table>\n        </div>\n        <div class=\"inspector-section\">\n          <h2>IAM Roles (${roles.length})</h2>\n          <table class=\"inspector-table\">\n            <thead><tr><th>Role</th><th>Role ID</th><th>Description</th><th>ARN</th></tr></thead>\n            <tbody>${roleRows || `<tr><td colspan=\"4\"><div class=\"inspector-empty\">No roles</div></td></tr>`}</tbody>\n          </table>\n        </div>`;\n    }\n\n    return c.html(renderInspectorPage(\"Inspector\", TABS, tab, contentHtml, SERVICE_LABEL));\n  });\n}\n","import type { ServiceManifest } from \"@emulators/core\";\n\n/**\n * AWS's machine-readable service manifest. This is the single source of truth\n * for the AWS emulator's surfaces, auth, specs, seed shape, and copyable\n * connection snippets, consumed by the CLI registry, the Cloudflare host, and\n * the console.\n *\n * AWS exposes XML and Query protocol APIs rather than OpenAPI, so the implemented\n * operations are tracked under a hand-authored \"manual\" spec keyed by their AWS\n * action names (S3 verbs, SQS/IAM/STS Query actions).\n */\nexport const manifest: ServiceManifest = {\n  id: \"aws\",\n  name: \"AWS\",\n  description: \"Stateful AWS emulator for S3, SQS, IAM, and STS using AWS SDK-compatible request flows.\",\n  docsUrl: \"https://docs.emulators.dev/aws\",\n  surfaces: [\n    { id: \"s3\", kind: \"provider-specific\", title: \"S3-compatible API\", status: \"partial\", basePath: \"/\" },\n    { id: \"sqs\", kind: \"provider-specific\", title: \"SQS Query API\", status: \"partial\", basePath: \"/\" },\n    { id: \"iam\", kind: \"provider-specific\", title: \"IAM Query API\", status: \"partial\", basePath: \"/iam\" },\n    { id: \"sts\", kind: \"provider-specific\", title: \"STS Query API\", status: \"partial\", basePath: \"/sts\" },\n    { id: \"inspector\", kind: \"ui\", title: \"Inspector UI\", status: \"supported\", basePath: \"/_inspector\" },\n  ],\n  auth: [\n    {\n      id: \"aws-credentials\",\n      title: \"AWS SDK credentials\",\n      type: \"provider-specific\",\n      status: \"partial\",\n      notes:\n        \"The emulator accepts AWS SDK-style requests and seeded IAM access keys, but does not fully validate SigV4.\",\n    },\n  ],\n  specs: [\n    {\n      kind: \"manual\",\n      title: \"AWS S3, SQS, IAM, and STS subset\",\n      coverage: \"hand-authored\",\n      notes: \"AWS APIs use XML and Query protocols rather than OpenAPI. Operations are keyed by AWS action name.\",\n      operations: [\n        // S3 (REST verbs)\n        { operationId: \"s3:ListBuckets\", method: \"GET\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"s3:CreateBucket\", method: \"PUT\", path: \"/:bucket\", status: \"hand-authored\" },\n        { operationId: \"s3:DeleteBucket\", method: \"DELETE\", path: \"/:bucket\", status: \"hand-authored\" },\n        { operationId: \"s3:HeadBucket\", method: \"HEAD\", path: \"/:bucket\", status: \"hand-authored\" },\n        { operationId: \"s3:ListObjectsV2\", method: \"GET\", path: \"/:bucket\", status: \"hand-authored\" },\n        { operationId: \"s3:CreatePresignedPost\", method: \"POST\", path: \"/:bucket\", status: \"partial\" },\n        { operationId: \"s3:PutObject\", method: \"PUT\", path: \"/:bucket/:key\", status: \"hand-authored\" },\n        { operationId: \"s3:GetObject\", method: \"GET\", path: \"/:bucket/:key\", status: \"hand-authored\" },\n        { operationId: \"s3:HeadObject\", method: \"HEAD\", path: \"/:bucket/:key\", status: \"hand-authored\" },\n        { operationId: \"s3:DeleteObject\", method: \"DELETE\", path: \"/:bucket/:key\", status: \"hand-authored\" },\n        // SQS (Query API)\n        { operationId: \"sqs:CreateQueue\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:DeleteQueue\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:ListQueues\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:GetQueueUrl\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:GetQueueAttributes\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:SendMessage\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:ReceiveMessage\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:DeleteMessage\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        { operationId: \"sqs:PurgeQueue\", method: \"POST\", path: \"/\", status: \"hand-authored\" },\n        // IAM (Query API)\n        { operationId: \"iam:CreateUser\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:GetUser\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:DeleteUser\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:ListUsers\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:CreateAccessKey\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:ListAccessKeys\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:DeleteAccessKey\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:CreateRole\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:GetRole\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:DeleteRole\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        { operationId: \"iam:ListRoles\", method: \"POST\", path: \"/iam\", status: \"hand-authored\" },\n        // STS (Query API)\n        { operationId: \"sts:GetCallerIdentity\", method: \"POST\", path: \"/sts\", status: \"hand-authored\" },\n        { operationId: \"sts:AssumeRole\", method: \"POST\", path: \"/sts\", status: \"partial\" },\n      ],\n    },\n  ],\n  seedSchema: {\n    description: \"Seed S3 buckets, SQS queues, and IAM users and roles, plus the account region.\",\n    fields: [\n      {\n        key: \"region\",\n        title: \"Default region\",\n        description: \"Region applied to seeded resources.\",\n        example: \"us-east-1\",\n      },\n      { key: \"account_id\", title: \"Account id\", description: \"AWS account id used in ARNs.\" },\n      {\n        key: \"s3\",\n        title: \"S3 buckets\",\n        description: \"Buckets to create under the instance.\",\n        example: { buckets: [{ name: \"my-app-bucket\" }] },\n      },\n      {\n        key: \"sqs\",\n        title: \"SQS queues\",\n        description: \"Queues to create. FIFO is inferred from a .fifo suffix unless set.\",\n        example: { queues: [{ name: \"my-app-events\" }] },\n      },\n      {\n        key: \"iam\",\n        title: \"IAM users and roles\",\n        description: \"Users (optionally with an access key) and roles to provision.\",\n        example: {\n          users: [{ user_name: \"developer\", create_access_key: true }],\n          roles: [{ role_name: \"lambda-execution-role\", description: \"Role for Lambda function execution\" }],\n        },\n      },\n    ],\n    example: {\n      region: \"us-east-1\",\n      s3: { buckets: [{ name: \"my-app-bucket\" }, { name: \"my-app-uploads\" }] },\n      sqs: { queues: [{ name: \"my-app-events\" }, { name: \"my-app-dlq\" }] },\n      iam: {\n        users: [{ user_name: \"developer\", create_access_key: true }],\n        roles: [{ role_name: \"lambda-execution-role\", description: \"Role for Lambda function execution\" }],\n      },\n    },\n  },\n  stateModel: {\n    description: \"Entities mutated by AWS provider calls.\",\n    collections: [\n      { name: \"aws.s3_buckets\" },\n      { name: \"aws.s3_objects\" },\n      { name: \"aws.sqs_queues\" },\n      { name: \"aws.sqs_messages\" },\n      { name: \"aws.iam_users\" },\n      { name: \"aws.iam_roles\" },\n    ],\n  },\n  connections: [\n    {\n      id: \"s3-client\",\n      title: \"AWS SDK v3 S3Client (TypeScript)\",\n      kind: \"sdk\",\n      language: \"typescript\",\n      description: \"Point the S3 client at the emulator. forcePathStyle keeps bucket names in the path.\",\n      template:\n        'import { S3Client } from \"@aws-sdk/client-s3\";\\n\\nconst s3 = new S3Client({\\n  endpoint: \"{{baseUrl}}\",\\n  region: \"us-east-1\",\\n  forcePathStyle: true,\\n  credentials: {\\n    accessKeyId: \"{{clientId}}\",\\n    secretAccessKey: \"{{clientSecret}}\",\\n  },\\n});',\n    },\n    {\n      id: \"sqs-client\",\n      title: \"AWS SDK v3 SQSClient (TypeScript)\",\n      kind: \"sdk\",\n      language: \"typescript\",\n      description: \"Point the SQS client at the emulator.\",\n      template:\n        'import { SQSClient } from \"@aws-sdk/client-sqs\";\\n\\nconst sqs = new SQSClient({\\n  endpoint: \"{{baseUrl}}\",\\n  region: \"us-east-1\",\\n  credentials: {\\n    accessKeyId: \"{{clientId}}\",\\n    secretAccessKey: \"{{clientSecret}}\",\\n  },\\n});',\n    },\n    {\n      id: \"aws-env\",\n      title: \"AWS endpoint and credentials (env)\",\n      kind: \"env\",\n      language: \"bash\",\n      description: \"The AWS SDK and CLI honor AWS_ENDPOINT_URL and the standard credential variables.\",\n      template:\n        \"AWS_ENDPOINT_URL={{baseUrl}}\\nAWS_REGION=us-east-1\\nAWS_ACCESS_KEY_ID={{clientId}}\\nAWS_SECRET_ACCESS_KEY={{clientSecret}}\",\n    },\n    {\n      id: \"curl\",\n      title: \"curl\",\n      kind: \"curl\",\n      language: \"bash\",\n      description: \"List S3 buckets directly against the emulator.\",\n      template: \"curl -s {{baseUrl}}/\",\n    },\n  ],\n};\n","import type { Hono } from \"@emulators/core\";\nimport type { ServicePlugin, Store, WebhookDispatcher, TokenMap, AppEnv, RouteContext } from \"@emulators/core\";\nimport { getAwsStore } from \"./store.js\";\nimport { getAccountId, getDefaultRegion, generateAwsId } from \"./helpers.js\";\nimport { s3Routes } from \"./routes/s3.js\";\nimport { sqsRoutes } from \"./routes/sqs.js\";\nimport { iamRoutes } from \"./routes/iam.js\";\nimport { inspectorRoutes } from \"./routes/inspector.js\";\n\nexport { getAwsStore, type AwsStore } from \"./store.js\";\nexport * from \"./entities.js\";\nexport { manifest } from \"./manifest.js\";\n\nexport interface AwsSeedConfig {\n  port?: number;\n  region?: string;\n  account_id?: string;\n  s3?: {\n    buckets?: Array<{\n      name: string;\n      region?: string;\n    }>;\n  };\n  sqs?: {\n    queues?: Array<{\n      name: string;\n      fifo?: boolean;\n      visibility_timeout?: number;\n    }>;\n  };\n  iam?: {\n    users?: Array<{\n      user_name: string;\n      path?: string;\n      create_access_key?: boolean;\n    }>;\n    roles?: Array<{\n      role_name: string;\n      path?: string;\n      description?: string;\n      assume_role_policy?: string;\n    }>;\n  };\n}\n\nfunction seedDefaults(store: Store, baseUrl: string): void {\n  const aws = getAwsStore(store);\n  const accountId = getAccountId();\n  const region = getDefaultRegion();\n\n  // Create a default S3 bucket\n  aws.s3Buckets.insert({\n    bucket_name: \"emulate-default\",\n    region,\n    creation_date: new Date().toISOString(),\n    acl: \"private\",\n    versioning_enabled: false,\n  });\n\n  // Create a default SQS queue\n  const queueName = \"emulate-default-queue\";\n  aws.sqsQueues.insert({\n    queue_name: queueName,\n    queue_url: `${baseUrl}/sqs/${accountId}/${queueName}`,\n    arn: `arn:aws:sqs:${region}:${accountId}:${queueName}`,\n    visibility_timeout: 30,\n    delay_seconds: 0,\n    max_message_size: 262144,\n    message_retention_period: 345600,\n    receive_message_wait_time: 0,\n    fifo: false,\n  });\n\n  // Create a default IAM user\n  const userId = generateAwsId(\"AIDA\");\n  aws.iamUsers.insert({\n    user_name: \"admin\",\n    user_id: userId,\n    arn: `arn:aws:iam::${accountId}:user/admin`,\n    path: \"/\",\n    access_keys: [\n      {\n        access_key_id: \"AKIAIOSFODNN7EXAMPLE\",\n        secret_access_key: \"wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\",\n        status: \"Active\",\n      },\n    ],\n  });\n}\n\nexport function seedFromConfig(store: Store, baseUrl: string, config: AwsSeedConfig): void {\n  const aws = getAwsStore(store);\n  const accountId = getAccountId();\n  const region = config.region ?? getDefaultRegion();\n\n  if (config.s3?.buckets) {\n    for (const b of config.s3.buckets) {\n      const existing = aws.s3Buckets.findOneBy(\"bucket_name\", b.name);\n      if (existing) continue;\n\n      aws.s3Buckets.insert({\n        bucket_name: b.name,\n        region: b.region ?? region,\n        creation_date: new Date().toISOString(),\n        acl: \"private\",\n        versioning_enabled: false,\n      });\n    }\n  }\n\n  if (config.sqs?.queues) {\n    for (const q of config.sqs.queues) {\n      const existing = aws.sqsQueues.findOneBy(\"queue_name\", q.name);\n      if (existing) continue;\n\n      const fifo = q.fifo ?? q.name.endsWith(\".fifo\");\n      aws.sqsQueues.insert({\n        queue_name: q.name,\n        queue_url: `${baseUrl}/sqs/${accountId}/${q.name}`,\n        arn: `arn:aws:sqs:${region}:${accountId}:${q.name}`,\n        visibility_timeout: q.visibility_timeout ?? 30,\n        delay_seconds: 0,\n        max_message_size: 262144,\n        message_retention_period: 345600,\n        receive_message_wait_time: 0,\n        fifo,\n      });\n    }\n  }\n\n  if (config.iam?.users) {\n    for (const u of config.iam.users) {\n      const existing = aws.iamUsers.findOneBy(\"user_name\", u.user_name);\n      if (existing) continue;\n\n      const userId = generateAwsId(\"AIDA\");\n      const path = u.path ?? \"/\";\n      const accessKeys = u.create_access_key\n        ? [\n            {\n              access_key_id: \"AKIA\" + generateAwsId(\"\").slice(0, 16),\n              secret_access_key: generateAwsId(\"\") + generateAwsId(\"\"),\n              status: \"Active\" as const,\n            },\n          ]\n        : [];\n\n      aws.iamUsers.insert({\n        user_name: u.user_name,\n        user_id: userId,\n        arn: `arn:aws:iam::${accountId}:user${path}${u.user_name}`,\n        path,\n        access_keys: accessKeys,\n      });\n    }\n  }\n\n  if (config.iam?.roles) {\n    for (const r of config.iam.roles) {\n      const existing = aws.iamRoles.findOneBy(\"role_name\", r.role_name);\n      if (existing) continue;\n\n      const roleId = generateAwsId(\"AROA\");\n      const path = r.path ?? \"/\";\n\n      aws.iamRoles.insert({\n        role_name: r.role_name,\n        role_id: roleId,\n        arn: `arn:aws:iam::${accountId}:role${path}${r.role_name}`,\n        path,\n        assume_role_policy_document: r.assume_role_policy ?? \"{}\",\n        description: r.description ?? \"\",\n      });\n    }\n  }\n}\n\nexport const awsPlugin: ServicePlugin = {\n  name: \"aws\",\n  register(app: Hono<AppEnv>, store: Store, webhooks: WebhookDispatcher, baseUrl: string, tokenMap?: TokenMap): void {\n    const ctx: RouteContext = { app, store, webhooks, baseUrl, tokenMap };\n    // Register inspector and service-specific routes first (static paths),\n    // then S3 last since its routes use wildcard path params (/:bucket, /:bucket/:key)\n    inspectorRoutes(ctx);\n    sqsRoutes(ctx);\n    iamRoutes(ctx);\n    s3Routes(ctx);\n  },\n  seed(store: Store, baseUrl: string): void {\n    seedDefaults(store, baseUrl);\n  },\n};\n\nexport default awsPlugin;\n"],"mappings":";ACAA,SAAS,aAAa,kBAAkB;AGYxC,SAAS,eAAAA,oBAAmB;AJArB,SAAS,YAAY,OAAwB;AAClD,SAAO;IACL,WAAW,MAAM,WAAqB,kBAAkB,CAAC,aAAa,CAAC;IACvE,WAAW,MAAM,WAAqB,kBAAkB,CAAC,OAAO,aAAa,CAAC;IAC9E,WAAW,MAAM,WAAqB,kBAAkB,CAAC,cAAc,WAAW,CAAC;IACnF,aAAa,MAAM,WAAuB,oBAAoB,CAAC,cAAc,YAAY,CAAC;IAC1F,UAAU,MAAM,WAAoB,iBAAiB,CAAC,aAAa,SAAS,CAAC;IAC7E,UAAU,MAAM,WAAoB,iBAAiB,CAAC,aAAa,SAAS,CAAC;EAC/E;AACF;ACjBA,IAAM,aAAa;AACnB,IAAM,iBAAiB;AAEhB,SAAS,cAAc,QAAwB;AACpD,SAAO,SAAS,YAAY,CAAC,EAAE,SAAS,KAAK,EAAE,YAAY;AAC7D;AAEO,SAAS,oBAA4B;AAC1C,SAAO;IACL,YAAY,CAAC,EAAE,SAAS,KAAK;IAC7B,YAAY,CAAC,EAAE,SAAS,KAAK;IAC7B,YAAY,CAAC,EAAE,SAAS,KAAK;IAC7B,YAAY,CAAC,EAAE,SAAS,KAAK;IAC7B,YAAY,CAAC,EAAE,SAAS,KAAK;EAC/B,EAAE,KAAK,GAAG;AACZ;AAEO,SAAS,wBAAgC;AAC9C,SAAO,YAAY,EAAE,EAAE,SAAS,WAAW;AAC7C;AAEO,SAAS,IAAI,SAAyB;AAC3C,SAAO,WAAW,KAAK,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AACvD;AAEO,SAAS,eAAuB;AACrC,SAAO;AACT;AAEO,SAAS,mBAA2B;AACzC,SAAO;AACT;AAEO,SAAS,eAAe,GAAY,KAAa,SAA+B,KAAK;AAC1F,SAAO,EAAE,KAAK,KAAK,QAAQ,EAAE,gBAAgB,kBAAkB,CAAC;AAClE;AAEO,SAAS,YAAY,GAAY,MAAc,SAAiB,SAA+B,KAAK;AACzG,QAAM,MAAM;;;YAGF,UAAU,IAAI,CAAC;eACZ,UAAU,OAAO,CAAC;;eAElB,kBAAkB,CAAC;;AAEhC,SAAO,EAAE,KAAK,KAAK,QAAQ,EAAE,gBAAgB,kBAAkB,CAAC;AAClE;AAEO,SAAS,UAAU,KAAqB;AAC7C,SAAO,IACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,QAAQ;AAC3B;AAEO,SAAS,iBAAiB,MAAsC;AACrE,QAAM,SAAS,IAAI,gBAAgB,IAAI;AACvC,QAAM,SAAiC,CAAC;AACxC,aAAW,CAAC,KAAK,KAAK,KAAK,QAAQ;AACjC,WAAO,GAAG,IAAI;EAChB;AACA,SAAO;AACT;ACzDO,SAAS,SAAS,KAAyB;AAChD,QAAM,EAAE,KAAK,OAAO,QAAQ,IAAI;AAChC,QAAM,MAAM,MAAM,YAAY,KAAK;AAInC,QAAM,oBAAoB,CAAC,MAAuB;AAChD,UAAM,UAAU,IAAI,EAAE,UAAU,IAAI;AACpC,UAAM,YAAY,QACf;MACC,CAAC,MAAM;cACD,UAAU,EAAE,WAAW,CAAC;sBAChB,EAAE,aAAa;;IAE/B,EACC,KAAK,IAAI;AAEZ,UAAM,MAAM;;;;;;;EAOd,SAAS;;;AAGP,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,QAAM,qBAAqB,CAAC,MAAuB;AACjD,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,WAAW,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AACpE,QAAI,UAAU;AACZ,aAAO;QACL;QACA;QACA;QACA;MACF;IACF;AAEA,QAAI,EAAE,UAAU,OAAO;MACrB,aAAa;MACb,QAAQ;MACR,gBAAe,oBAAI,KAAK,GAAE,YAAY;MACtC,KAAK;MACL,oBAAoB;IACtB,CAAC;AAED,WAAO,EAAE,KAAK,IAAI,KAAK,EAAE,UAAU,IAAI,UAAU,GAAG,CAAC;EACvD;AAEA,QAAM,qBAAqB,CAAC,MAAuB;AACjD,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,SAAS,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AAClE,QAAI,CAAC,QAAQ;AACX,aAAO,YAAY,GAAG,gBAAgB,wCAAwC,GAAG;IACnF;AAEA,UAAM,UAAU,IAAI,EAAE,UAAU,OAAO,eAAe,UAAU;AAChE,QAAI,QAAQ,SAAS,GAAG;AACtB,aAAO,YAAY,GAAG,kBAAkB,gDAAgD,GAAG;IAC7F;AAEA,QAAI,EAAE,UAAU,OAAO,OAAO,EAAE;AAChC,WAAO,EAAE,KAAK,MAAM,GAAG;EACzB;AAEA,QAAM,mBAAmB,CAAC,MAAuB;AAC/C,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,SAAS,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AAClE,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,KAAK,IAAI,GAAG;IACvB;AACA,WAAO,EAAE,KAAK,IAAI,KAAK,EAAE,uBAAuB,OAAO,OAAO,CAAC;EACjE;AAEA,QAAM,oBAAoB,CAAC,MAAuB;AAChD,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,SAAS,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AAClE,QAAI,CAAC,QAAQ;AACX,aAAO,YAAY,GAAG,gBAAgB,wCAAwC,GAAG;IACnF;AAEA,UAAM,SAAS,EAAE,IAAI,MAAM,QAAQ,KAAK;AACxC,UAAM,YAAY,EAAE,IAAI,MAAM,WAAW,KAAK;AAC9C,UAAM,UAAU,KAAK,IAAI,SAAS,EAAE,IAAI,MAAM,UAAU,KAAK,QAAQ,EAAE,GAAG,GAAI;AAC9E,UAAM,oBAAoB,EAAE,IAAI,MAAM,oBAAoB;AAC1D,UAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAE5C,QAAI,UAAU,IAAI,EAAE,UAAU,OAAO,eAAe,UAAU;AAC9D,QAAI,QAAQ;AACV,gBAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,IAAI,WAAW,MAAM,CAAC;IAC1D;AAGA,YAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AAGjD,UAAM,SAAS,qBAAqB;AACpC,QAAI,QAAQ;AACV,YAAM,aAAa,QAAQ,UAAU,CAAC,MAAM,EAAE,MAAM,MAAM;AAC1D,gBAAU,cAAc,IAAI,QAAQ,MAAM,UAAU,IAAI,CAAC;IAC3D;AAEA,UAAM,iBAA2B,CAAC;AAClC,QAAI,WAAW;AACf,QAAI,WAAW;AACb,YAAM,YAAY,oBAAI,IAAY;AAClC,iBAAW,CAAC;AACZ,iBAAW,OAAO,SAAS;AACzB,cAAM,YAAY,IAAI,IAAI,MAAM,OAAO,MAAM;AAC7C,cAAM,aAAa,UAAU,QAAQ,SAAS;AAC9C,YAAI,cAAc,GAAG;AACnB,oBAAU,IAAI,SAAS,UAAU,MAAM,GAAG,aAAa,UAAU,MAAM,CAAC;QAC1E,OAAO;AACL,mBAAS,KAAK,GAAG;QACnB;MACF;AACA,qBAAe,KAAK,GAAG,MAAM,KAAK,SAAS,EAAE,KAAK,CAAC;IACrD;AAEA,UAAM,YAAY,SAAS,SAAS;AACpC,UAAM,OAAO,SAAS,MAAM,GAAG,OAAO;AACtC,UAAM,YAAY,YAAY,KAAK,KAAK,SAAS,CAAC,EAAE,MAAM;AAE1D,UAAM,cAAc,KACjB;MACC,CAAC,MAAM;WACJ,UAAU,EAAE,GAAG,CAAC;oBACP,EAAE,aAAa;aACtB,EAAE,IAAI;YACP,EAAE,cAAc;;;IAGtB,EACC,KAAK,IAAI;AAEZ,UAAM,cAAc,eACjB,IAAI,CAAC,MAAM,6BAA6B,UAAU,CAAC,CAAC,4BAA4B,EAChF,KAAK,IAAI;AAEZ,UAAM,MAAM;;UAEN,UAAU,UAAU,CAAC;YACnB,UAAU,MAAM,CAAC;aAChB,OAAO;iBACH,SAAS;cACZ,KAAK,MAAM,cAAc,oBAAoB;uBAA0B,UAAU,iBAAiB,CAAC,yBAAyB,EAAE,GAAG,YAAY;2BAA8B,UAAU,SAAS,CAAC,6BAA6B,EAAE,GAAG,aAAa;gBAAmB,UAAU,UAAU,CAAC,kBAAkB,EAAE;EACtT,WAAW;EACX,WAAW;;AAET,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,QAAM,sBAAsB,OAAO,MAAuB;AACxD,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,SAAS,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AAClE,QAAI,CAAC,QAAQ;AACX,aAAO,YAAY,GAAG,gBAAgB,wCAAwC,GAAG;IACnF;AAEA,UAAM,OAAO,MAAM,EAAE,IAAI,UAAU;AAEnC,UAAM,MAAM,KAAK,KAAK;AACtB,QAAI,CAAC,KAAK;AACR,aAAO,YAAY,GAAG,mBAAmB,iDAAiD,GAAG;IAC/F;AAEA,UAAM,OAAO,KAAK,MAAM;AACxB,QAAI,CAAC,QAAQ,EAAE,gBAAgB,OAAO;AACpC,aAAO,YAAY,GAAG,mBAAmB,0CAA0C,GAAG;IACxF;AAGA,UAAM,YAAY,KAAK,QAAQ;AAC/B,QAAI,WAAW;AACb,UAAI;AACJ,UAAI;AACF,iBAAS,KAAK,MAAM,OAAO,KAAK,WAAW,QAAQ,EAAE,SAAS,CAAC;MACjE,QAAQ;AACN,eAAO,YAAY,GAAG,yBAAyB,iCAAiC,GAAG;MACrF;AAGA,UAAI,OAAO,YAAY;AACrB,cAAM,UAAU,IAAI,KAAK,OAAO,UAAU;AAC1C,YAAI,QAAQ,QAAQ,IAAI,KAAK,IAAI,GAAG;AAClC,iBAAO,YAAY,GAAG,gBAAgB,gDAAgD,GAAG;QAC3F;MACF;AAGA,UAAI,MAAM,QAAQ,OAAO,UAAU,GAAG;AACpC,mBAAW,aAAa,OAAO,YAAY;AACzC,cAAI,CAAC,MAAM,QAAQ,SAAS,EAAG;AAE/B,cAAI,UAAU,CAAC,MAAM,wBAAwB;AAC3C,kBAAM,MAAM,UAAU,CAAC;AACvB,kBAAM,MAAM,UAAU,CAAC;AACvB,gBAAI,KAAK,OAAO,OAAO,KAAK,OAAO,KAAK;AACtC,qBAAO,YAAY,GAAG,kBAAkB,0DAA0D,GAAG;YACvG;UACF,WAAW,UAAU,CAAC,MAAM,eAAe;AACzC,kBAAM,QAAS,UAAU,CAAC,EAAa,QAAQ,OAAO,EAAE;AACxD,kBAAM,SAAS,UAAU,CAAC;AAC1B,kBAAM,QAAS,KAAK,KAAK,KAAgB;AACzC,gBAAI,CAAC,MAAM,WAAW,MAAM,GAAG;AAC7B,qBAAO;gBACL;gBACA;gBACA,2EAA2E,KAAK,OAAO,MAAM;gBAC7F;cACF;YACF;UACF;QACF;MACF;IACF;AAGA,UAAM,cAAc,MAAM,KAAK,KAAK;AACpC,UAAM,cAAe,KAAK,cAAc,KAAgB,KAAK,QAAQ;AACrE,UAAM,OAAO,IAAI,WAAW;AAC5B,UAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,WAAW,EAAE;AAE5D,UAAM,WAAW,IAAI,EAClB,UAAU,OAAO,eAAe,UAAU,EAC1C,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAE5B,QAAI,UAAU;AACZ,UAAI,EAAE,UAAU,OAAO,SAAS,IAAI;QAClC,MAAM;QACN,cAAc;QACd,gBAAgB;QAChB;QACA,gBAAe,oBAAI,KAAK,GAAE,YAAY;QACtC,UAAU,CAAC;MACb,CAAC;IACH,OAAO;AACL,UAAI,EAAE,UAAU,OAAO;QACrB,aAAa;QACb;QACA,MAAM;QACN,cAAc;QACd,gBAAgB;QAChB;QACA,gBAAe,oBAAI,KAAK,GAAE,YAAY;QACtC,UAAU,CAAC;MACb,CAAC;IACH;AAGA,UAAM,gBAAgB,SAAS,KAAK,uBAAuB,GAAa,EAAE;AAC1E,QAAI,kBAAkB,KAAK;AACzB,YAAM,MAAM;;cAEJ,UAAU,OAAO,CAAC,IAAI,UAAU,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;YAC/D,UAAU,UAAU,CAAC;SACxB,UAAU,GAAG,CAAC;WACZ,IAAI;;AAET,aAAO,eAAe,GAAG,KAAK,GAAG;IACnC;AAEA,WAAO,EAAE,KAAK,MAAM,GAAG;EACzB;AAEA,QAAM,kBAAkB,OAAO,MAAuB;AACpD,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,MAAM,EAAE,IAAI,MAAM,KAAK;AAE7B,UAAM,SAAS,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AAClE,QAAI,CAAC,QAAQ;AACX,aAAO,YAAY,GAAG,gBAAgB,wCAAwC,GAAG;IACnF;AAGA,UAAM,aAAa,EAAE,IAAI,OAAO,mBAAmB;AACnD,QAAI,YAAY;AAEd,YAAM,aAAa,WAAW,WAAW,GAAG,IAAI,WAAW,MAAM,CAAC,IAAI;AACtE,YAAM,aAAa,WAAW,QAAQ,GAAG;AACzC,UAAI,aAAa,GAAG;AAClB,eAAO,YAAY,GAAG,mBAAmB,wBAAwB,GAAG;MACtE;AACA,YAAM,YAAY,WAAW,MAAM,GAAG,UAAU;AAChD,YAAM,SAAS,WAAW,MAAM,aAAa,CAAC;AAE9C,YAAM,SAAS,IAAI,EAChB,UAAU,OAAO,eAAe,SAAS,EACzC,KAAK,CAAC,MAAM,EAAE,QAAQ,MAAM;AAC/B,UAAI,CAAC,QAAQ;AACX,eAAO,YAAY,GAAG,aAAa,4CAA4C,GAAG;MACpF;AAEA,YAAMC,QAAO,OAAO;AACpB,YAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AAEnC,YAAMC,YAAW,IAAI,EAClB,UAAU,OAAO,eAAe,UAAU,EAC1C,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAE5B,UAAIA,WAAU;AACZ,YAAI,EAAE,UAAU,OAAOA,UAAS,IAAI;UAClC,MAAM,OAAO;UACb,cAAc,OAAO;UACrB,gBAAgB,OAAO;UACvB,MAAAD;UACA,eAAe;UACf,UAAU,EAAE,GAAG,OAAO,SAAS;QACjC,CAAC;MACH,OAAO;AACL,YAAI,EAAE,UAAU,OAAO;UACrB,aAAa;UACb;UACA,MAAM,OAAO;UACb,cAAc,OAAO;UACrB,gBAAgB,OAAO;UACvB,MAAAA;UACA,eAAe;UACf,UAAU,EAAE,GAAG,OAAO,SAAS;QACjC,CAAC;MACH;AAEA,YAAM,MAAM;;WAEPA,KAAI;kBACG,GAAG;;AAEf,aAAO,EAAE,KAAK,KAAK,KAAK;QACtB,gBAAgB;QAChB,iBAAiB,IAAI,KAAK,GAAG,EAAE,YAAY;MAC7C,CAAC;IACH;AAEA,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,UAAM,cAAc,EAAE,IAAI,OAAO,cAAc,KAAK;AACpD,UAAM,OAAO,IAAI,IAAI;AAGrB,UAAM,WAAmC,CAAC;AAC1C,eAAW,CAAC,YAAY,WAAW,KAAK,OAAO,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG;AACtE,UAAI,OAAO,gBAAgB,YAAY,WAAW,YAAY,EAAE,WAAW,aAAa,GAAG;AACzF,iBAAS,WAAW,MAAM,cAAc,MAAM,CAAC,IAAI;MACrD;IACF;AAEA,UAAM,WAAW,IAAI,EAClB,UAAU,OAAO,eAAe,UAAU,EAC1C,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAE5B,QAAI,UAAU;AACZ,UAAI,EAAE,UAAU,OAAO,SAAS,IAAI;QAClC;QACA,cAAc;QACd,gBAAgB,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE;QAC/C;QACA,gBAAe,oBAAI,KAAK,GAAE,YAAY;QACtC;MACF,CAAC;IACH,OAAO;AACL,UAAI,EAAE,UAAU,OAAO;QACrB,aAAa;QACb;QACA;QACA,cAAc;QACd,gBAAgB,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE;QAC/C;QACA,gBAAe,oBAAI,KAAK,GAAE,YAAY;QACtC;MACF,CAAC;IACH;AAEA,WAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC;EAC9C;AAEA,QAAM,kBAAkB,CAAC,MAAuB;AAC9C,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,MAAM,EAAE,IAAI,MAAM,KAAK;AAE7B,UAAM,SAAS,IAAI,EAAE,UAAU,UAAU,eAAe,UAAU;AAClE,QAAI,CAAC,QAAQ;AACX,aAAO,YAAY,GAAG,gBAAgB,wCAAwC,GAAG;IACnF;AAEA,UAAM,MAAM,IAAI,EACb,UAAU,OAAO,eAAe,UAAU,EAC1C,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAE5B,QAAI,CAAC,KAAK;AACR,aAAO,YAAY,GAAG,aAAa,qCAAqC,GAAG;IAC7E;AAEA,UAAM,UAAkC;MACtC,gBAAgB,IAAI;MACpB,kBAAkB,OAAO,IAAI,cAAc;MAC3C,MAAM,IAAI,IAAI,IAAI;MAClB,iBAAiB,IAAI,KAAK,IAAI,aAAa,EAAE,YAAY;IAC3D;AACA,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,QAAQ,GAAG;AACjD,cAAQ,cAAc,CAAC,EAAE,IAAI;IAC/B;AAEA,WAAO,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;EACtC;AAEA,QAAM,mBAAmB,CAAC,MAAuB;AAC/C,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,MAAM,EAAE,IAAI,MAAM,KAAK;AAE7B,UAAM,MAAM,IAAI,EACb,UAAU,OAAO,eAAe,UAAU,EAC1C,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAE5B,QAAI,CAAC,KAAK;AACR,aAAO,EAAE,KAAK,IAAI,GAAG;IACvB;AAEA,WAAO,EAAE,KAAK,IAAI,KAAK;MACrB,gBAAgB,IAAI;MACpB,kBAAkB,OAAO,IAAI,cAAc;MAC3C,MAAM,IAAI,IAAI,IAAI;MAClB,iBAAiB,IAAI,KAAK,IAAI,aAAa,EAAE,YAAY;IAC3D,CAAC;EACH;AAEA,QAAM,qBAAqB,CAAC,MAAuB;AACjD,UAAM,aAAa,EAAE,IAAI,MAAM,QAAQ;AACvC,UAAM,MAAM,EAAE,IAAI,MAAM,KAAK;AAE7B,UAAM,MAAM,IAAI,EACb,UAAU,OAAO,eAAe,UAAU,EAC1C,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AAE5B,QAAI,KAAK;AACP,UAAI,EAAE,UAAU,OAAO,IAAI,EAAE;IAC/B;AAGA,WAAO,EAAE,KAAK,MAAM,GAAG;EACzB;AAIA,MAAI,IAAI,QAAQ,iBAAiB;AACjC,MAAI,IAAI,eAAe,kBAAkB;AACzC,MAAI,OAAO,eAAe,kBAAkB;AAC5C,MAAI,GAAG,QAAQ,eAAe,gBAAgB;AAC9C,MAAI,IAAI,eAAe,iBAAiB;AACxC,MAAI,KAAK,eAAe,mBAAmB;AAC3C,MAAI,IAAI,wBAAwB,eAAe;AAC/C,MAAI,IAAI,wBAAwB,eAAe;AAC/C,MAAI,GAAG,QAAQ,wBAAwB,gBAAgB;AACvD,MAAI,OAAO,wBAAwB,kBAAkB;AAMrD,MAAI,IAAI,KAAK,iBAAiB;AAC9B,MAAI,IAAI,YAAY,kBAAkB;AACtC,MAAI,IAAI,aAAa,kBAAkB;AACvC,MAAI,OAAO,YAAY,kBAAkB;AACzC,MAAI,OAAO,aAAa,kBAAkB;AAC1C,MAAI,GAAG,QAAQ,YAAY,gBAAgB;AAC3C,MAAI,GAAG,QAAQ,aAAa,gBAAgB;AAC5C,MAAI,IAAI,YAAY,iBAAiB;AACrC,MAAI,IAAI,aAAa,iBAAiB;AACtC,MAAI,KAAK,YAAY,mBAAmB;AACxC,MAAI,KAAK,aAAa,mBAAmB;AACzC,MAAI,IAAI,qBAAqB,eAAe;AAC5C,MAAI,IAAI,qBAAqB,eAAe;AAC5C,MAAI,GAAG,QAAQ,qBAAqB,gBAAgB;AACpD,MAAI,OAAO,qBAAqB,kBAAkB;AACpD;AC1dO,SAAS,UAAU,KAAyB;AACjD,QAAM,EAAE,KAAK,OAAO,QAAQ,IAAI;AAChC,QAAM,MAAM,MAAM,YAAY,KAAK;AACnC,QAAM,YAAY,aAAa;AAG/B,MAAI,KAAK,SAAS,OAAO,MAAM;AAC7B,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,UAAM,SAAS,iBAAiB,IAAI;AACpC,UAAM,SAAS,OAAO,QAAQ,KAAK,EAAE,IAAI,MAAM,QAAQ,KAAK;AAE5D,YAAQ,QAAQ;MACd,KAAK;AACH,eAAO,YAAY,GAAG,MAAM;MAC9B,KAAK;AACH,eAAO,YAAY,GAAG,MAAM;MAC9B,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B,KAAK;AACH,eAAO,YAAY,GAAG,MAAM;MAC9B,KAAK;AACH,eAAO,mBAAmB,GAAG,MAAM;MACrC,KAAK;AACH,eAAO,YAAY,GAAG,MAAM;MAC9B,KAAK;AACH,eAAO,eAAe,GAAG,MAAM;MACjC,KAAK;AACH,eAAO,cAAc,GAAG,MAAM;MAChC,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B;AACE,eAAO,YAAY,GAAG,iBAAiB,cAAc,MAAM,oCAAoC,GAAG;IACtG;EACF,CAAC;AAED,WAAS,YAAY,GAAY,QAAgC;AAC/D,UAAM,YAAY,OAAO,WAAW,KAAK;AACzC,QAAI,CAAC,WAAW;AACd,aAAO,YAAY,GAAG,oBAAoB,qDAAqD,GAAG;IACpG;AAEA,UAAM,WAAW,IAAI,EAAE,UAAU,UAAU,cAAc,SAAS;AAClE,QAAI,UAAU;AAEZ,YAAME,OAAM;;;gBAGF,UAAU,SAAS,SAAS,CAAC;;iCAEZ,kBAAkB,CAAC;;AAE9C,aAAO,eAAe,GAAGA,IAAG;IAC9B;AAEA,UAAM,OAAO,UAAU,SAAS,OAAO;AACvC,UAAM,WAAW,GAAG,OAAO,QAAQ,SAAS,IAAI,SAAS;AACzD,UAAM,MAAM,yBAAyB,SAAS,IAAI,SAAS;AAG3D,UAAM,QAAgC,CAAC;AACvC,aAAS,IAAI,GAAG,OAAO,aAAa,CAAC,OAAO,GAAG,KAAK;AAClD,YAAM,OAAO,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,aAAa,CAAC,QAAQ,KAAK;IAC3E;AAEA,QAAI,EAAE,UAAU,OAAO;MACrB,YAAY;MACZ,WAAW;MACX;MACA,oBAAoB,SAAS,MAAM,mBAAmB,KAAK,MAAM,EAAE;MACnE,eAAe,SAAS,MAAM,cAAc,KAAK,KAAK,EAAE;MACxD,kBAAkB,SAAS,MAAM,oBAAoB,KAAK,UAAU,EAAE;MACtE,0BAA0B,SAAS,MAAM,wBAAwB,KAAK,UAAU,EAAE;MAClF,2BAA2B,SAAS,MAAM,+BAA+B,KAAK,KAAK,EAAE;MACrF;IACF,CAAC;AAED,UAAM,MAAM;;;gBAGA,UAAU,QAAQ,CAAC;;iCAEF,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,YAAY,GAAY,QAAgC;AAC/D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,aAAa,QAAQ;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAGA,UAAM,WAAW,IAAI,EAAE,YAAY,OAAO,cAAc,MAAM,UAAU;AACxE,eAAW,OAAO,UAAU;AAC1B,UAAI,EAAE,YAAY,OAAO,IAAI,EAAE;IACjC;AACA,QAAI,EAAE,UAAU,OAAO,MAAM,EAAE;AAE/B,UAAM,MAAM;;iCAEiB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,SAAS,OAAO,iBAAiB,KAAK;AAC5C,QAAI,SAAS,IAAI,EAAE,UAAU,IAAI;AACjC,QAAI,QAAQ;AACV,eAAS,OAAO,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,MAAM,CAAC;IAC/D;AAEA,UAAM,eAAe,OAAO,IAAI,CAAC,MAAM,iBAAiB,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,KAAK,IAAI;AAEtG,UAAM,MAAM;;;EAGd,YAAY;;iCAEmB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,YAAY,GAAY,QAAgC;AAC/D,UAAM,YAAY,OAAO,WAAW,KAAK;AACzC,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,cAAc,SAAS;AAC/D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAEA,UAAM,MAAM;;;gBAGA,UAAU,MAAM,SAAS,CAAC;;iCAET,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,mBAAmB,GAAY,QAAgC;AACtE,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,aAAa,QAAQ;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAEA,UAAM,WAAW,IAAI,EAAE,YAAY,OAAO,cAAc,MAAM,UAAU;AACxE,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,SAAS,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG,EAAE;AACpE,UAAM,gBAAgB,SAAS,OAAO,CAAC,MAAM,EAAE,gBAAgB,GAAG,EAAE;AAEpE,UAAM,MAAM;;;6CAG6B,MAAM,GAAG;gEACU,YAAY;0EACF,aAAa;sDACjC,MAAM,kBAAkB;uDACvB,MAAM,gBAAgB;2DAClB,MAAM,wBAAwB;iDACxC,MAAM,aAAa;kEACF,MAAM,yBAAyB;8CACnD,MAAM,IAAI;;iCAEvB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,YAAY,GAAY,QAAgC;AAC/D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,cAAc,OAAO,aAAa,KAAK;AAE7C,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,aAAa,QAAQ;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAEA,QAAI,CAAC,aAAa;AAChB,aAAO,YAAY,GAAG,oBAAoB,uDAAuD,GAAG;IACtG;AAEA,UAAM,YAAY,IAAI,YAAY,EAAE,OAAO,WAAW,EAAE;AACxD,QAAI,YAAY,MAAM,kBAAkB;AACtC,aAAO;QACL;QACA;QACA,4EAA4E,MAAM,gBAAgB;QAClG;MACF;IACF;AAEA,UAAM,YAAY,kBAAkB;AACpC,UAAM,UAAU,IAAI,WAAW;AAC/B,UAAM,MAAM,KAAK,IAAI;AAGrB,UAAM,oBAAsG,CAAC;AAC7G,QAAI,YAAY;AAChB,WAAO,OAAO,oBAAoB,SAAS,OAAO,GAAG;AACnD,YAAM,OAAO,OAAO,oBAAoB,SAAS,OAAO;AACxD,YAAM,WAAW,OAAO,oBAAoB,SAAS,iBAAiB,KAAK;AAC3E,YAAM,cAAc,OAAO,oBAAoB,SAAS,oBAAoB;AAC5E,wBAAkB,IAAI,IAAI,EAAE,UAAU,UAAU,aAAa,YAAY;AACzE;IACF;AAEA,QAAI,EAAE,YAAY,OAAO;MACvB,YAAY,MAAM;MAClB,YAAY;MACZ,gBAAgB,sBAAsB;MACtC,MAAM;MACN,aAAa;MACb,YAAY;QACV,eAAe,OAAO,GAAG;QACzB,yBAAyB;QACzB,kCAAkC;QAClC,UAAU,aAAa;MACzB;MACA,oBAAoB;MACpB,eAAe,MAAM,MAAM,gBAAgB;MAC3C,gBAAgB;MAChB,eAAe;IACjB,CAAC;AAED,UAAM,MAAM;;;iBAGC,SAAS;wBACF,OAAO;;iCAEE,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,eAAe,GAAY,QAAgC;AAClE,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,cAAc,KAAK,IAAI,SAAS,OAAO,qBAAqB,KAAK,KAAK,EAAE,GAAG,EAAE;AACnF,UAAM,oBAAoB,SAAS,OAAO,mBAAmB,KAAK,IAAI,EAAE;AAExE,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,aAAa,QAAQ;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAEA,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,UAAU,MAAM,iBAAiB,IAAI,MAAM,qBAAqB;AACtE,UAAM,cAAc,IAAI,EAAE,YAAY,OAAO,cAAc,MAAM,UAAU;AAC3E,UAAM,UAAU,YAAY,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG;AAChE,UAAM,QAAQ,QAAQ,MAAM,GAAG,WAAW;AAE1C,eAAW,OAAO,OAAO;AACvB,YAAM,mBAAmB,sBAAsB;AAC/C,UAAI,EAAE,YAAY,OAAO,IAAI,IAAI;QAC/B,gBAAgB;QAChB,eAAe,MAAM,UAAU;QAC/B,eAAe,IAAI,gBAAgB;MACrC,CAAC;AACD,UAAI,iBAAiB;AACrB,UAAI,iBAAiB;IACvB;AAEA,UAAM,cAAc,MACjB;MACC,CAAC,MAAM;mBACI,EAAE,UAAU;uBACR,EAAE,cAAc;mBACpB,EAAE,WAAW;cAClB,UAAU,EAAE,IAAI,CAAC;oDACqB,EAAE,cAAc;8DACN,EAAE,aAAa;uEACN,EAAE,cAAc;;IAEjF,EACC,KAAK,IAAI;AAEZ,UAAM,MAAM;;;EAGd,WAAW;;iCAEoB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,cAAc,GAAY,QAAgC;AACjE,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,gBAAgB,OAAO,eAAe,KAAK;AAEjD,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,aAAa,QAAQ;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAEA,UAAM,WAAW,IAAI,EAAE,YAAY,OAAO,cAAc,MAAM,UAAU;AACxE,UAAM,MAAM,SAAS,KAAK,CAAC,MAAM,EAAE,mBAAmB,aAAa;AACnE,QAAI,KAAK;AACP,UAAI,EAAE,YAAY,OAAO,IAAI,EAAE;IACjC;AAEA,UAAM,MAAM;;iCAEiB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,QAAQ,IAAI,EAAE,UAAU,UAAU,aAAa,QAAQ;AAC7D,QAAI,CAAC,OAAO;AACV,aAAO,YAAY,GAAG,2CAA2C,uCAAuC,GAAG;IAC7G;AAEA,UAAM,WAAW,IAAI,EAAE,YAAY,OAAO,cAAc,MAAM,UAAU;AACxE,eAAW,OAAO,UAAU;AAC1B,UAAI,EAAE,YAAY,OAAO,IAAI,EAAE;IACjC;AAEA,UAAM,MAAM;;iCAEiB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AACF;AC3UO,SAAS,UAAU,KAAyB;AACjD,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,MAAM,MAAM,YAAY,KAAK;AACnC,QAAM,YAAY,aAAa;AAG/B,MAAI,KAAK,SAAS,OAAO,MAAM;AAC7B,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,UAAM,SAAS,iBAAiB,IAAI;AACpC,UAAM,SAAS,OAAO,QAAQ,KAAK,EAAE,IAAI,MAAM,QAAQ,KAAK;AAE5D,YAAQ,QAAQ;MACd,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B,KAAK;AACH,eAAO,QAAQ,GAAG,MAAM;MAC1B,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B,KAAK;AACH,eAAO,UAAU,CAAC;MACpB,KAAK;AACH,eAAO,gBAAgB,GAAG,MAAM;MAClC,KAAK;AACH,eAAO,eAAe,GAAG,MAAM;MACjC,KAAK;AACH,eAAO,gBAAgB,GAAG,MAAM;MAClC,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B,KAAK;AACH,eAAO,QAAQ,GAAG,MAAM;MAC1B,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B,KAAK;AACH,eAAO,UAAU,CAAC;MACpB;AACE,eAAO,YAAY,GAAG,iBAAiB,cAAc,MAAM,oCAAoC,GAAG;IACtG;EACF,CAAC;AAGD,MAAI,KAAK,SAAS,OAAO,MAAM;AAC7B,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,UAAM,SAAS,iBAAiB,IAAI;AACpC,UAAM,SAAS,OAAO,QAAQ,KAAK,EAAE,IAAI,MAAM,QAAQ,KAAK;AAE5D,YAAQ,QAAQ;MACd,KAAK;AACH,eAAO,kBAAkB,CAAC;MAC5B,KAAK;AACH,eAAO,WAAW,GAAG,MAAM;MAC7B;AACE,eAAO,YAAY,GAAG,iBAAiB,cAAc,MAAM,oCAAoC,GAAG;IACtG;EACF,CAAC;AAED,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,QAAI,CAAC,UAAU;AACb,aAAO,YAAY,GAAG,mBAAmB,oDAAoD,GAAG;IAClG;AAEA,UAAM,WAAW,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC/D,QAAI,UAAU;AACZ,aAAO,YAAY,GAAG,uBAAuB,kBAAkB,UAAU,QAAQ,CAAC,oBAAoB,GAAG;IAC3G;AAEA,UAAM,SAAS,cAAc,MAAM;AACnC,UAAM,OAAO,OAAO,MAAM,KAAK;AAC/B,UAAM,MAAM,gBAAgB,SAAS,QAAQ,IAAI,GAAG,QAAQ;AAE5D,QAAI,EAAE,SAAS,OAAO;MACpB,WAAW;MACX,SAAS;MACT;MACA;MACA,aAAa,CAAC;IAChB,CAAC;AAED,UAAM,MAAM;;;;cAIF,UAAU,IAAI,CAAC;kBACX,UAAU,QAAQ,CAAC;gBACrB,MAAM;aACT,UAAU,GAAG,CAAC;qBACP,oBAAI,KAAK,GAAE,YAAY,CAAC;;;iCAGX,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,QAAQ,GAAY,QAAgC;AAC3D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,UAAM,MAAM;;;;cAIF,UAAU,KAAK,IAAI,CAAC;kBAChB,UAAU,KAAK,SAAS,CAAC;gBAC3B,KAAK,OAAO;aACf,UAAU,KAAK,GAAG,CAAC;oBACZ,KAAK,UAAU;;;iCAGF,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,QAAI,EAAE,SAAS,OAAO,KAAK,EAAE;AAE7B,UAAM,MAAM;;iCAEiB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,UAAU,GAAY;AAC7B,UAAM,QAAQ,IAAI,EAAE,SAAS,IAAI;AACjC,UAAM,WAAW,MACd;MACC,CAAC,MAAM;gBACC,UAAU,EAAE,IAAI,CAAC;oBACb,UAAU,EAAE,SAAS,CAAC;kBACxB,EAAE,OAAO;eACZ,UAAU,EAAE,GAAG,CAAC;sBACT,EAAE,UAAU;;IAE5B,EACC,KAAK,IAAI;AAEZ,UAAM,MAAM;;;;;EAKd,QAAQ;;;iCAGuB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,gBAAgB,GAAY,QAAgC;AACnE,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,UAAM,cAAc,SAASH,aAAY,CAAC,EAAE,SAAS,KAAK,EAAE,YAAY;AACxE,UAAM,kBAAkBA,aAAY,EAAE,EAAE,SAAS,QAAQ;AAEzD,UAAM,OAAO;MACX,GAAG,KAAK;MACR,EAAE,eAAe,aAAa,mBAAmB,iBAAiB,QAAQ,SAAkB;IAC9F;AACA,QAAI,EAAE,SAAS,OAAO,KAAK,IAAI,EAAE,aAAa,KAAK,CAAC;AAEpD,UAAM,MAAM;;;;kBAIE,UAAU,QAAQ,CAAC;qBAChB,WAAW;;yBAEP,eAAe;qBACpB,oBAAI,KAAK,GAAE,YAAY,CAAC;;;iCAGX,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,eAAe,GAAY,QAAgC;AAClE,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,UAAM,UAAU,KAAK,YAClB;MACC,CAAC,MAAM;oBACK,UAAU,QAAQ,CAAC;uBAChB,EAAE,aAAa;kBACpB,EAAE,MAAM;;IAEpB,EACC,KAAK,IAAI;AAEZ,UAAM,MAAM;;;;;EAKd,OAAO;;;iCAGwB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,gBAAgB,GAAY,QAAgC;AACnE,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,cAAc,OAAO,aAAa,KAAK;AAC7C,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,UAAM,OAAO,KAAK,YAAY,OAAO,CAAC,MAAM,EAAE,kBAAkB,WAAW;AAC3E,QAAI,EAAE,SAAS,OAAO,KAAK,IAAI,EAAE,aAAa,KAAK,CAAC;AAEpD,UAAM,MAAM;;iCAEiB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,QAAI,CAAC,UAAU;AACb,aAAO,YAAY,GAAG,mBAAmB,oDAAoD,GAAG;IAClG;AAEA,UAAM,WAAW,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC/D,QAAI,UAAU;AACZ,aAAO,YAAY,GAAG,uBAAuB,kBAAkB,UAAU,QAAQ,CAAC,oBAAoB,GAAG;IAC3G;AAEA,UAAM,SAAS,cAAc,MAAM;AACnC,UAAM,OAAO,OAAO,MAAM,KAAK;AAC/B,UAAM,MAAM,gBAAgB,SAAS,QAAQ,IAAI,GAAG,QAAQ;AAC5D,UAAM,mBAAmB,OAAO,0BAA0B,KAAK;AAC/D,UAAM,cAAc,OAAO,aAAa,KAAK;AAE7C,QAAI,EAAE,SAAS,OAAO;MACpB,WAAW;MACX,SAAS;MACT;MACA;MACA,6BAA6B;MAC7B;IACF,CAAC;AAED,UAAM,MAAM;;;;cAIF,UAAU,IAAI,CAAC;kBACX,UAAU,QAAQ,CAAC;gBACrB,MAAM;aACT,UAAU,GAAG,CAAC;qBACP,oBAAI,KAAK,GAAE,YAAY,CAAC;kCACV,mBAAmB,gBAAgB,CAAC;qBACjD,UAAU,WAAW,CAAC;;;iCAGV,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,QAAQ,GAAY,QAAgC;AAC3D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,UAAM,MAAM;;;;cAIF,UAAU,KAAK,IAAI,CAAC;kBAChB,UAAU,KAAK,SAAS,CAAC;gBAC3B,KAAK,OAAO;aACf,UAAU,KAAK,GAAG,CAAC;oBACZ,KAAK,UAAU;kCACD,mBAAmB,KAAK,2BAA2B,CAAC;qBACjE,UAAU,KAAK,WAAW,CAAC;;;iCAGf,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,WAAW,OAAO,UAAU,KAAK;AACvC,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,sBAAsB,UAAU,QAAQ,CAAC,qBAAqB,GAAG;IACzG;AAEA,QAAI,EAAE,SAAS,OAAO,KAAK,EAAE;AAE7B,UAAM,MAAM;;iCAEiB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,UAAU,GAAY;AAC7B,UAAM,QAAQ,IAAI,EAAE,SAAS,IAAI;AACjC,UAAM,WAAW,MACd;MACC,CAAC,MAAM;gBACC,UAAU,EAAE,IAAI,CAAC;oBACb,UAAU,EAAE,SAAS,CAAC;kBACxB,EAAE,OAAO;eACZ,UAAU,EAAE,GAAG,CAAC;sBACT,EAAE,UAAU;uBACX,UAAU,EAAE,WAAW,CAAC;;IAEzC,EACC,KAAK,IAAI;AAEZ,UAAM,MAAM;;;;;EAKd,QAAQ;;;iCAGuB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,kBAAkB,GAAY;AACrC,UAAM,WAAW,EAAE,IAAI,UAAU;AACjC,UAAM,WAAW,UAAU,SAAS;AACpC,UAAM,MAAM,gBAAgB,SAAS,SAAS,QAAQ;AAGtD,UAAM,OAAO,IAAI,EAAE,SAAS,UAAU,aAAa,QAAQ;AAC3D,UAAM,SAAS,MAAM,WAAW,cAAc,MAAM;AAEpD,UAAM,MAAM;;;WAGL,UAAU,GAAG,CAAC;cACX,MAAM;eACL,SAAS;;iCAES,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AAEA,WAAS,WAAW,GAAY,QAAgC;AAC9D,UAAM,UAAU,OAAO,SAAS,KAAK;AACrC,UAAM,cAAc,OAAO,iBAAiB,KAAK;AAGjD,UAAM,OAAO,IAAI,EACd,SAAS,IAAI,EACb,KAAK,CAAC,MAAM,EAAE,QAAQ,OAAO;AAChC,QAAI,CAAC,MAAM;AACT,aAAO,YAAY,GAAG,gBAAgB,uCAAuC,GAAG;IAClF;AAEA,UAAM,cAAc,SAASA,aAAY,CAAC,EAAE,SAAS,KAAK,EAAE,YAAY;AACxE,UAAM,kBAAkBA,aAAY,EAAE,EAAE,SAAS,QAAQ;AACzD,UAAM,eAAeA,aAAY,EAAE,EAAE,SAAS,QAAQ;AACtD,UAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,GAAI,EAAE,YAAY;AAElE,UAAM,MAAM;;;;qBAIK,WAAW;yBACP,eAAe;sBAClB,YAAY;oBACd,UAAU;;;aAGjB,OAAO,IAAI,WAAW;uBACZ,KAAK,OAAO,IAAI,WAAW;;;iCAGjB,kBAAkB,CAAC;;AAEhD,WAAO,eAAe,GAAG,GAAG;EAC9B;AACF;AIlYO,SAAS,mBAAmB,kBAA8C;AAC/E,SAAO,OAAO,GAAG,SAAS;AACxB,QAAI,kBAAkB;AACpB,QAAE,IAAI,WAAW,gBAAgB;IACnC;AACA,UAAM,KAAK;EACb;AACF;AAEO,IAAM,eAAkC,mBAAmB;AE9ClE,IAAM,UACJ,OAAO,YAAY,gBAClB,QAAQ,IAAI,UAAU,OAAO,QAAQ,IAAI,UAAU,UAAU,QAAQ,IAAI,kBAAkB;AIFvF,SAAS,WAAW,GAAmB;AAC5C,SAAO,EAAE,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,QAAQ;AACpG;AAEO,SAAS,WAAW,GAAmB;AAC5C,SAAO,WAAW,CAAC,EAAE,QAAQ,MAAM,OAAO;AAC5C;AAEA,IAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyRZ,IAAM,aAAa;AAEnB,SAAS,OAAO,SAA0B;AACxC,QAAM,QAAQ,UAAU,GAAG,WAAW,OAAO,CAAC,cAAc;AAC5D,SAAO;gCACuB,KAAK;;;;;;;AAOrC;AAEA,SAAS,KAAK,OAAuB;AACnC,SAAO;;;;;;SAMA,WAAW,KAAK,CAAC;SACjB,GAAG;;AAEZ;AAiDO,SAAS,oBACd,OACA,MACA,WACA,MACA,SACQ;AACR,QAAM,WAAW,KACd;IACC,CAAC,MAAM,YAAY,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,YAAY,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,CAAC;EAC7G,EACC,KAAK,EAAE;AAEV,SAAO,GAAG,KAAK,KAAK,CAAC;;EAErB,OAAO,OAAO,CAAC;;gCAEe,QAAQ;IACpC,IAAI;;EAEN,UAAU;;AAEZ;AO3XA,IAAM,gBAAgB;AAEtB,IAAM,OAAuB;EAC3B,EAAE,IAAI,MAAM,OAAO,MAAM,MAAM,qBAAqB;EACpD,EAAE,IAAI,OAAO,OAAO,OAAO,MAAM,sBAAsB;EACvD,EAAE,IAAI,OAAO,OAAO,OAAO,MAAM,sBAAsB;AACzD;AAEO,SAAS,gBAAgB,KAAyB;AACvD,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,MAAM,MAAM,YAAY,KAAK;AAEnC,MAAI,IAAI,eAAe,CAAC,MAAM;AAC5B,UAAM,MAAM,EAAE,IAAI,MAAM,KAAK,KAAK;AAClC,UAAM,UAAU,IAAI;AAEpB,UAAM,UAAU,QAAQ,UAAU,IAAI;AACtC,UAAM,SAAS,QAAQ,UAAU,IAAI;AACrC,UAAM,QAAQ,QAAQ,SAAS,IAAI;AACnC,UAAM,QAAQ,QAAQ,SAAS,IAAI;AAEnC,QAAI,cAAc;AAElB,QAAI,QAAQ,MAAM;AAChB,YAAM,OAAO,QACV,IAAI,CAAC,MAAM;AACV,cAAM,UAAU,QAAQ,UAAU,OAAO,eAAe,EAAE,WAAW;AACrE,eAAO;kBACC,UAAU,EAAE,WAAW,CAAC;kBACxB,QAAQ,MAAM;kBACd,UAAU,EAAE,MAAM,CAAC;kBACnB,UAAU,EAAE,aAAa,CAAC;;MAEpC,CAAC,EACA,KAAK,IAAI;AAEZ,oBAAc;;4BAEQ,QAAQ,MAAM;;;qBAGrB,QAAQ,6EAA6E;;;AAIpG,iBAAW,UAAU,SAAS;AAC5B,cAAM,UAAU,QAAQ,UAAU,OAAO,eAAe,OAAO,WAAW;AAC1E,YAAI,QAAQ,SAAS,GAAG;AACtB,gBAAM,UAAU,QACb;YACC,CAAC,MAAM;oBACD,UAAU,EAAE,GAAG,CAAC;oBAChB,EAAE,cAAc;oBAChB,UAAU,EAAE,YAAY,CAAC;oBACzB,UAAU,EAAE,aAAa,CAAC;;UAElC,EACC,KAAK,IAAI;AACZ,yBAAe;;oBAEL,UAAU,OAAO,WAAW,CAAC;;;yBAGxB,OAAO;;;QAGxB;MACF;IACF,WAAW,QAAQ,OAAO;AACxB,YAAM,OAAO,OACV,IAAI,CAAC,MAAM;AACV,cAAM,WAAW,QAAQ,YAAY,OAAO,cAAc,EAAE,UAAU;AACtE,eAAO;kBACC,UAAU,EAAE,UAAU,CAAC;kBACvB,SAAS,MAAM;kBACf,EAAE,OAAO,QAAQ,IAAI;kBACrB,EAAE,kBAAkB;;MAE9B,CAAC,EACA,KAAK,IAAI;AAEZ,oBAAc;;4BAEQ,OAAO,MAAM;;;qBAGpB,QAAQ,4EAA4E;;;IAGrG,WAAW,QAAQ,OAAO;AACxB,YAAM,WAAW,MACd;QACC,CAAC,MAAM;gBACD,UAAU,EAAE,SAAS,CAAC;gBACtB,UAAU,EAAE,OAAO,CAAC;gBACpB,EAAE,YAAY,MAAM;gBACpB,UAAU,EAAE,GAAG,CAAC;;MAExB,EACC,KAAK,IAAI;AAEZ,YAAM,WAAW,MACd;QACC,CAAC,MAAM;gBACD,UAAU,EAAE,SAAS,CAAC;gBACtB,UAAU,EAAE,OAAO,CAAC;gBACpB,UAAU,EAAE,WAAW,CAAC;gBACxB,UAAU,EAAE,GAAG,CAAC;;MAExB,EACC,KAAK,IAAI;AAEZ,oBAAc;;2BAEO,MAAM,MAAM;;;qBAGlB,YAAY,2EAA2E;;;;2BAIjF,MAAM,MAAM;;;qBAGlB,YAAY,2EAA2E;;;IAGxG;AAEA,WAAO,EAAE,KAAK,oBAAoB,aAAa,MAAM,KAAK,aAAa,aAAa,CAAC;EACvF,CAAC;AACH;AC5HO,IAAM,WAA4B;EACvC,IAAI;EACJ,MAAM;EACN,aAAa;EACb,SAAS;EACT,UAAU;IACR,EAAE,IAAI,MAAM,MAAM,qBAAqB,OAAO,qBAAqB,QAAQ,WAAW,UAAU,IAAI;IACpG,EAAE,IAAI,OAAO,MAAM,qBAAqB,OAAO,iBAAiB,QAAQ,WAAW,UAAU,IAAI;IACjG,EAAE,IAAI,OAAO,MAAM,qBAAqB,OAAO,iBAAiB,QAAQ,WAAW,UAAU,OAAO;IACpG,EAAE,IAAI,OAAO,MAAM,qBAAqB,OAAO,iBAAiB,QAAQ,WAAW,UAAU,OAAO;IACpG,EAAE,IAAI,aAAa,MAAM,MAAM,OAAO,gBAAgB,QAAQ,aAAa,UAAU,cAAc;EACrG;EACA,MAAM;IACJ;MACE,IAAI;MACJ,OAAO;MACP,MAAM;MACN,QAAQ;MACR,OACE;IACJ;EACF;EACA,OAAO;IACL;MACE,MAAM;MACN,OAAO;MACP,UAAU;MACV,OAAO;MACP,YAAY;;QAEV,EAAE,aAAa,kBAAkB,QAAQ,OAAO,MAAM,KAAK,QAAQ,gBAAgB;QACnF,EAAE,aAAa,mBAAmB,QAAQ,OAAO,MAAM,YAAY,QAAQ,gBAAgB;QAC3F,EAAE,aAAa,mBAAmB,QAAQ,UAAU,MAAM,YAAY,QAAQ,gBAAgB;QAC9F,EAAE,aAAa,iBAAiB,QAAQ,QAAQ,MAAM,YAAY,QAAQ,gBAAgB;QAC1F,EAAE,aAAa,oBAAoB,QAAQ,OAAO,MAAM,YAAY,QAAQ,gBAAgB;QAC5F,EAAE,aAAa,0BAA0B,QAAQ,QAAQ,MAAM,YAAY,QAAQ,UAAU;QAC7F,EAAE,aAAa,gBAAgB,QAAQ,OAAO,MAAM,iBAAiB,QAAQ,gBAAgB;QAC7F,EAAE,aAAa,gBAAgB,QAAQ,OAAO,MAAM,iBAAiB,QAAQ,gBAAgB;QAC7F,EAAE,aAAa,iBAAiB,QAAQ,QAAQ,MAAM,iBAAiB,QAAQ,gBAAgB;QAC/F,EAAE,aAAa,mBAAmB,QAAQ,UAAU,MAAM,iBAAiB,QAAQ,gBAAgB;;QAEnG,EAAE,aAAa,mBAAmB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACrF,EAAE,aAAa,mBAAmB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACrF,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACpF,EAAE,aAAa,mBAAmB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACrF,EAAE,aAAa,0BAA0B,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QAC5F,EAAE,aAAa,mBAAmB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACrF,EAAE,aAAa,sBAAsB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACxF,EAAE,aAAa,qBAAqB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;QACvF,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;;QAEpF,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACvF,EAAE,aAAa,eAAe,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACpF,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACvF,EAAE,aAAa,iBAAiB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACtF,EAAE,aAAa,uBAAuB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QAC5F,EAAE,aAAa,sBAAsB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QAC3F,EAAE,aAAa,uBAAuB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QAC5F,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACvF,EAAE,aAAa,eAAe,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACpF,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QACvF,EAAE,aAAa,iBAAiB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;;QAEtF,EAAE,aAAa,yBAAyB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,gBAAgB;QAC9F,EAAE,aAAa,kBAAkB,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,UAAU;MACnF;IACF;EACF;EACA,YAAY;IACV,aAAa;IACb,QAAQ;MACN;QACE,KAAK;QACL,OAAO;QACP,aAAa;QACb,SAAS;MACX;MACA,EAAE,KAAK,cAAc,OAAO,cAAc,aAAa,+BAA+B;MACtF;QACE,KAAK;QACL,OAAO;QACP,aAAa;QACb,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,gBAAgB,CAAC,EAAE;MAClD;MACA;QACE,KAAK;QACL,OAAO;QACP,aAAa;QACb,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,gBAAgB,CAAC,EAAE;MACjD;MACA;QACE,KAAK;QACL,OAAO;QACP,aAAa;QACb,SAAS;UACP,OAAO,CAAC,EAAE,WAAW,aAAa,mBAAmB,KAAK,CAAC;UAC3D,OAAO,CAAC,EAAE,WAAW,yBAAyB,aAAa,qCAAqC,CAAC;QACnG;MACF;IACF;IACA,SAAS;MACP,QAAQ;MACR,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,gBAAgB,GAAG,EAAE,MAAM,iBAAiB,CAAC,EAAE;MACvE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,gBAAgB,GAAG,EAAE,MAAM,aAAa,CAAC,EAAE;MACnE,KAAK;QACH,OAAO,CAAC,EAAE,WAAW,aAAa,mBAAmB,KAAK,CAAC;QAC3D,OAAO,CAAC,EAAE,WAAW,yBAAyB,aAAa,qCAAqC,CAAC;MACnG;IACF;EACF;EACA,YAAY;IACV,aAAa;IACb,aAAa;MACX,EAAE,MAAM,iBAAiB;MACzB,EAAE,MAAM,iBAAiB;MACzB,EAAE,MAAM,iBAAiB;MACzB,EAAE,MAAM,mBAAmB;MAC3B,EAAE,MAAM,gBAAgB;MACxB,EAAE,MAAM,gBAAgB;IAC1B;EACF;EACA,aAAa;IACX;MACE,IAAI;MACJ,OAAO;MACP,MAAM;MACN,UAAU;MACV,aAAa;MACb,UACE;IACJ;IACA;MACE,IAAI;MACJ,OAAO;MACP,MAAM;MACN,UAAU;MACV,aAAa;MACb,UACE;IACJ;IACA;MACE,IAAI;MACJ,OAAO;MACP,MAAM;MACN,UAAU;MACV,aAAa;MACb,UACE;IACJ;IACA;MACE,IAAI;MACJ,OAAO;MACP,MAAM;MACN,UAAU;MACV,aAAa;MACb,UAAU;IACZ;EACF;AACF;AC7HA,SAAS,aAAa,OAAc,SAAuB;AACzD,QAAM,MAAM,YAAY,KAAK;AAC7B,QAAM,YAAY,aAAa;AAC/B,QAAM,SAAS,iBAAiB;AAGhC,MAAI,UAAU,OAAO;IACnB,aAAa;IACb;IACA,gBAAe,oBAAI,KAAK,GAAE,YAAY;IACtC,KAAK;IACL,oBAAoB;EACtB,CAAC;AAGD,QAAM,YAAY;AAClB,MAAI,UAAU,OAAO;IACnB,YAAY;IACZ,WAAW,GAAG,OAAO,QAAQ,SAAS,IAAI,SAAS;IACnD,KAAK,eAAe,MAAM,IAAI,SAAS,IAAI,SAAS;IACpD,oBAAoB;IACpB,eAAe;IACf,kBAAkB;IAClB,0BAA0B;IAC1B,2BAA2B;IAC3B,MAAM;EACR,CAAC;AAGD,QAAM,SAAS,cAAc,MAAM;AACnC,MAAI,SAAS,OAAO;IAClB,WAAW;IACX,SAAS;IACT,KAAK,gBAAgB,SAAS;IAC9B,MAAM;IACN,aAAa;MACX;QACE,eAAe;QACf,mBAAmB;QACnB,QAAQ;MACV;IACF;EACF,CAAC;AACH;AAEO,SAAS,eAAe,OAAc,SAAiB,QAA6B;AACzF,QAAM,MAAM,YAAY,KAAK;AAC7B,QAAM,YAAY,aAAa;AAC/B,QAAM,SAAS,OAAO,UAAU,iBAAiB;AAEjD,MAAI,OAAO,IAAI,SAAS;AACtB,eAAW,KAAK,OAAO,GAAG,SAAS;AACjC,YAAM,WAAW,IAAI,UAAU,UAAU,eAAe,EAAE,IAAI;AAC9D,UAAI,SAAU;AAEd,UAAI,UAAU,OAAO;QACnB,aAAa,EAAE;QACf,QAAQ,EAAE,UAAU;QACpB,gBAAe,oBAAI,KAAK,GAAE,YAAY;QACtC,KAAK;QACL,oBAAoB;MACtB,CAAC;IACH;EACF;AAEA,MAAI,OAAO,KAAK,QAAQ;AACtB,eAAW,KAAK,OAAO,IAAI,QAAQ;AACjC,YAAM,WAAW,IAAI,UAAU,UAAU,cAAc,EAAE,IAAI;AAC7D,UAAI,SAAU;AAEd,YAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,OAAO;AAC9C,UAAI,UAAU,OAAO;QACnB,YAAY,EAAE;QACd,WAAW,GAAG,OAAO,QAAQ,SAAS,IAAI,EAAE,IAAI;QAChD,KAAK,eAAe,MAAM,IAAI,SAAS,IAAI,EAAE,IAAI;QACjD,oBAAoB,EAAE,sBAAsB;QAC5C,eAAe;QACf,kBAAkB;QAClB,0BAA0B;QAC1B,2BAA2B;QAC3B;MACF,CAAC;IACH;EACF;AAEA,MAAI,OAAO,KAAK,OAAO;AACrB,eAAW,KAAK,OAAO,IAAI,OAAO;AAChC,YAAM,WAAW,IAAI,SAAS,UAAU,aAAa,EAAE,SAAS;AAChE,UAAI,SAAU;AAEd,YAAM,SAAS,cAAc,MAAM;AACnC,YAAM,OAAO,EAAE,QAAQ;AACvB,YAAM,aAAa,EAAE,oBACjB;QACE;UACE,eAAe,SAAS,cAAc,EAAE,EAAE,MAAM,GAAG,EAAE;UACrD,mBAAmB,cAAc,EAAE,IAAI,cAAc,EAAE;UACvD,QAAQ;QACV;MACF,IACA,CAAC;AAEL,UAAI,SAAS,OAAO;QAClB,WAAW,EAAE;QACb,SAAS;QACT,KAAK,gBAAgB,SAAS,QAAQ,IAAI,GAAG,EAAE,SAAS;QACxD;QACA,aAAa;MACf,CAAC;IACH;EACF;AAEA,MAAI,OAAO,KAAK,OAAO;AACrB,eAAW,KAAK,OAAO,IAAI,OAAO;AAChC,YAAM,WAAW,IAAI,SAAS,UAAU,aAAa,EAAE,SAAS;AAChE,UAAI,SAAU;AAEd,YAAM,SAAS,cAAc,MAAM;AACnC,YAAM,OAAO,EAAE,QAAQ;AAEvB,UAAI,SAAS,OAAO;QAClB,WAAW,EAAE;QACb,SAAS;QACT,KAAK,gBAAgB,SAAS,QAAQ,IAAI,GAAG,EAAE,SAAS;QACxD;QACA,6BAA6B,EAAE,sBAAsB;QACrD,aAAa,EAAE,eAAe;MAChC,CAAC;IACH;EACF;AACF;AAEO,IAAM,YAA2B;EACtC,MAAM;EACN,SAAS,KAAmB,OAAc,UAA6B,SAAiB,UAA2B;AACjH,UAAM,MAAoB,EAAE,KAAK,OAAO,UAAU,SAAS,SAAS;AAGpE,oBAAgB,GAAG;AACnB,cAAU,GAAG;AACb,cAAU,GAAG;AACb,aAAS,GAAG;EACd;EACA,KAAK,OAAc,SAAuB;AACxC,iBAAa,OAAO,OAAO;EAC7B;AACF;AAEA,IAAO,gBAAQ;","names":["randomBytes","etag","existing","xml"]}