@ezghcloud/rum-build 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,42 @@
-# Temporary Holding Version
+# @ezghcloud/rum-build
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Build plugin for [`@ezghcloud/rum`](https://www.npmjs.com/package/@ezghcloud/rum): adds a debug ID to every
+emitted JavaScript file and its source map, then uploads the maps to EZGH Observability, so errors
+are symbolicated whatever the file names or CDN. Works with Vite, webpack, Rollup, esbuild and
+Rspack. The same injection as `ezgh obs sourcemaps inject`: running both is harmless.
+
+```sh
+npm install -D @ezghcloud/rum-build
+```
+
+```ts
+// vite.config.ts
+import { ezghRumBuild } from "@ezghcloud/rum-build"
+
+export default defineConfig({
+  build: { sourcemap: "hidden" },
+  plugins: [ezghRumBuild.vite({ application: "storefront", release: process.env.RELEASE })],
+})
+```
+
+`ezghRumBuild.webpack(…)`, `.rollup(…)`, `.esbuild(…)` and `.rspack(…)` take the same options.
+Build with source maps on (hidden maps are fine).
+
+| Option | Default |
+| --- | --- |
+| `application` | `EZGH_RUM_APPLICATION` |
+| `release` | `EZGH_RUM_RELEASE` |
+| `organizationId`, `projectId` (UUIDs, shown on the console's Setup tab) | `EZGH_ORG`, `EZGH_PROJECT` |
+| `apiKey` | `EZGH_API_KEY` |
+| `oidc: { bot, audience? }` | GitHub Actions OIDC to a short-lived bot key, when there's no API key |
+| `domain` | `EZGH_DOMAIN`, else `ezghcloud.com` |
+| `upload` | `true`; `false` only injects |
+| `failOnError` | `true` |
+| `deleteMapsAfterUpload` | `false` |
+
+Without credentials, an application or a release, the plugin injects and says what's missing. The
+key's owner needs the `ObsSourceMapUploadAccess` policy.
+
+## License
+
+Apache-2.0

package/dist/auth.d.ts

@@ -0,0 +1,11 @@
+export interface OidcOptions {
+    bot: string;
+    audience?: string;
+}
+export declare function resolveAuthorization(o: {
+    apiKey?: string;
+    oidc?: OidcOptions;
+    organizationId: string;
+    domain: string;
+    fetch?: typeof fetch;
+}, env: Readonly<Record<string, string | undefined>>): Promise<string | undefined>;

package/dist/errors.d.ts

@@ -0,0 +1,4 @@
+/** A JS file or source map that injection refuses; the message reads after the file's path. */
+export declare class InjectError extends Error {
+    name: string;
+}

package/dist/files.d.ts

@@ -0,0 +1,5 @@
+export interface Pair {
+    js: string;
+    map: string;
+}
+export declare function findPairs(dir: string, include: ((rel: string) => boolean) | undefined, log: (m: string) => void): Promise<Pair[]>;

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import { type UnpluginInstance } from "unplugin";
+import { type EzghRumBuildOptions } from "./process.ts";
+export declare const ezghRumBuild: UnpluginInstance<EzghRumBuildOptions | undefined>;
+export { processOutput, type EzghRumBuildOptions } from "./process.ts";
+export { injectDebugId, debugIdFor, snippet, shiftColumns, InjectError, type Injected } from "./inject.ts";
+export { upload, UploadError, CHUNK_BYTES, type UploadFile, type UploadTarget } from "./upload.ts";
+export { resolveAuthorization, type OidcOptions } from "./auth.ts";

package/dist/index.js

@@ -0,0 +1,648 @@
+// packages/rum-build/src/index.ts
+import { dirname, resolve } from "node:path";
+import { createUnplugin } from "unplugin";
+
+// packages/rum-build/src/process.ts
+import { readFile as readFile2, unlink, writeFile } from "node:fs/promises";
+import { join as join2 } from "node:path";
+
+// packages/rum-build/src/auth.ts
+async function resolveAuthorization(o, env) {
+  const key = o.apiKey || env.EZGH_API_KEY;
+  if (key)
+    return `Bearer ${key}`;
+  const { ACTIONS_ID_TOKEN_REQUEST_URL: url, ACTIONS_ID_TOKEN_REQUEST_TOKEN: requestToken } = env;
+  if (!o.oidc || !url || !requestToken)
+    return;
+  const f = o.fetch ?? fetch;
+  const audience = o.oidc.audience ?? o.domain;
+  const idRes = await f(`${url}${url.includes("?") ? "&" : "?"}audience=${encodeURIComponent(audience)}`, {
+    headers: { Authorization: `Bearer ${requestToken}` }
+  });
+  if (!idRes.ok)
+    throw new Error(`ezgh-rum: GitHub Actions didn't issue an OIDC token (${idRes.status}): give the job "permissions: id-token: write"`);
+  const { value } = await idRes.json();
+  if (!value)
+    throw new Error("ezgh-rum: GitHub Actions answered without an OIDC token");
+  const exchange = `https://orgs.${o.domain}/v1/organizations/${encodeURIComponent(o.organizationId)}/bots/${encodeURIComponent(o.oidc.bot)}/oidc-api-keys`;
+  for (let attempt = 0;; attempt++) {
+    const res = await f(exchange, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ token: value, name: "ezgh-rum-build", expiresInSeconds: 900 })
+    });
+    if (res.ok) {
+      const { token } = await res.json();
+      if (!token)
+        throw new Error("ezgh-rum: org-api answered the OIDC exchange without a key");
+      return `Bearer ${token}`;
+    }
+    if ((res.status === 429 || res.status === 503) && attempt < 3) {
+      const ra = Number(res.headers.get("Retry-After"));
+      await new Promise((r) => setTimeout(r, Number.isFinite(ra) && ra > 0 ? Math.min(ra, 60) * 1000 : 1000 * 2 ** attempt));
+      continue;
+    }
+    const body = await res.json().catch(() => ({}));
+    throw new Error(`ezgh-rum: the OIDC exchange for bot ${o.oidc.bot} failed (${res.status} ${body.error?.code ?? ""}): ${body.error?.message ?? res.statusText}`);
+  }
+}
+
+// packages/rum-build/src/errors.ts
+class InjectError extends Error {
+  name = "InjectError";
+}
+
+// packages/rum-build/src/files.ts
+import { existsSync } from "node:fs";
+import { lstat, readdir, readFile, realpath } from "node:fs/promises";
+import { join, posix, relative, sep } from "node:path";
+var isJS = (rel) => /\.(?:m|c)?js$/.test(rel);
+var MAP_URL = /(?:^|\n)\/\/[#@] sourceMappingURL=([^\t\n\f\r ]*)[\t\n\f\r ]*$/;
+async function walk(root, rel, out) {
+  for (const d of await readdir(join(root, rel), { withFileTypes: true })) {
+    const r = rel ? `${rel}/${d.name}` : d.name;
+    if (d.isDirectory()) {
+      if (d.name !== "node_modules")
+        await walk(root, r, out);
+    } else if (d.isFile() && isJS(d.name))
+      out.push(r);
+  }
+}
+async function isRegular(p) {
+  try {
+    return (await lstat(p)).isFile();
+  } catch {
+    return false;
+  }
+}
+async function inside(root, p) {
+  try {
+    const rel = relative(root, await realpath(p));
+    return rel !== "" && !rel.startsWith("..") && !rel.split(sep).includes("..") && !/^[a-zA-Z]:/.test(rel) && !rel.startsWith(sep);
+  } catch {
+    return false;
+  }
+}
+async function mapFor(dir, rel) {
+  const text = await readFile(join(dir, rel), "latin1");
+  const m = MAP_URL.exec(text);
+  if (m) {
+    const u = m[1];
+    if (u.toLowerCase().startsWith("data:"))
+      return [undefined, "its source map is inline (a data: URL): build with external source maps"];
+    if (u === "")
+      return [undefined, "its sourceMappingURL comment is empty"];
+    if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(u) || u.startsWith("//"))
+      return [undefined, `its sourceMappingURL ${u} isn't a relative path`];
+    let path = u.replace(/[?#].*$/s, "");
+    try {
+      path = decodeURIComponent(path);
+    } catch {
+      return [undefined, `its sourceMappingURL ${u} isn't a relative path`];
+    }
+    if (path.startsWith("/") || path.includes("\\"))
+      return [undefined, `its sourceMappingURL ${u} isn't a relative path`];
+    const target = posix.normalize(posix.join(posix.dirname(rel), path));
+    if (target === ".." || target.startsWith("../"))
+      return [undefined, `its source map ${u} is outside the directory`];
+    const abs = join(dir, ...target.split("/"));
+    if (!await isRegular(abs))
+      return [undefined, `its source map ${target} isn't there`];
+    if (!await inside(dir, abs))
+      return [undefined, `its source map ${u} is outside the directory (through a symlink)`];
+    return [target, ""];
+  }
+  if (await isRegular(join(dir, ...`${rel}.map`.split("/"))))
+    return [`${rel}.map`, ""];
+  return [undefined, "no source map"];
+}
+async function findPairs(dir, include, log) {
+  if (!existsSync(dir))
+    return [];
+  const root = await realpath(dir);
+  const files = [];
+  await walk(root, "", files);
+  files.sort();
+  let pairs = [];
+  const skipped = [];
+  for (const rel of files) {
+    if (include && !include(rel))
+      continue;
+    const [map, reason] = await mapFor(root, rel);
+    if (map === undefined)
+      skipped.push({ path: rel, reason });
+    else
+      pairs.push({ js: rel, map });
+  }
+  const users = new Map;
+  for (const p of pairs)
+    users.set(p.map, [...users.get(p.map) ?? [], p.js]);
+  pairs = pairs.filter((p) => {
+    const js = users.get(p.map);
+    if (js.length < 2)
+      return true;
+    skipped.push({ path: p.js, reason: `its source map ${p.map} is also ${js.filter((x) => x !== p.js).join(", ")}'s: build with one map per file` });
+    return false;
+  });
+  const shown = skipped.filter((s) => s.reason !== "no source map");
+  for (const s of shown.slice(0, 20))
+    log(`ezgh-rum: skipped ${s.path}: ${s.reason}`);
+  if (shown.length > 20)
+    log(`ezgh-rum: skipped ${shown.length - 20} more file(s)`);
+  const noMap = skipped.length - shown.length;
+  if (noMap > 0)
+    log(`ezgh-rum: skipped ${noMap} JS file(s) without a source map`);
+  return pairs;
+}
+
+// packages/rum-build/src/inject.ts
+import { createHash } from "node:crypto";
+
+// packages/rum-build/src/vlq.ts
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var DIGIT = new Map([...ALPHABET].map((c, i) => [c, i]));
+function vlqDecode(s, at) {
+  let result = 0;
+  let shift = 0;
+  for (let i = at;i < s.length; i++) {
+    const d = DIGIT.get(s[i]);
+    if (d === undefined || shift > 30)
+      throw new InjectError("has malformed mappings");
+    result += (d & 31) * 2 ** shift;
+    shift += 5;
+    if ((d & 32) === 0) {
+      const negative = result % 2 === 1;
+      const magnitude = Math.floor(result / 2);
+      return { value: negative ? -magnitude : magnitude, next: i + 1 };
+    }
+  }
+  throw new InjectError("has malformed mappings");
+}
+function vlqEncode(v) {
+  let n = v < 0 ? -v * 2 + 1 : v * 2;
+  let out = "";
+  do {
+    let digit = n % 32;
+    n = Math.floor(n / 32);
+    if (n > 0)
+      digit += 32;
+    out += ALPHABET[digit];
+  } while (n > 0);
+  return out;
+}
+
+// packages/rum-build/src/inject.ts
+function snippet(id) {
+  return ';!function(){try{var g="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:' + '"undefined"!=typeof window?window:{},s=(new g.Error).stack;s&&((g._ezghDebugIds=g._ezghDebugIds||{})[s]="' + id + '")}catch(e){}}();';
+}
+function debugIdFor(js, map) {
+  const h = createHash("sha256").update("ezgh-debug-id\x00").update(js).update("\x00").update(map).digest();
+  h[6] = h[6] & 15 | 64;
+  h[8] = h[8] & 63 | 128;
+  const x = h.subarray(0, 16).toString("hex");
+  return `${x.slice(0, 8)}-${x.slice(8, 12)}-${x.slice(12, 16)}-${x.slice(16, 20)}-${x.slice(20)}`;
+}
+function shiftColumns(mappings, line, col, delta) {
+  let start = 0;
+  for (let k = 0;k < line; k++) {
+    const j = mappings.indexOf(";", start);
+    if (j < 0)
+      return mappings;
+    start = j + 1;
+  }
+  const semi = mappings.indexOf(";", start);
+  const end = semi < 0 ? mappings.length : semi;
+  let abs = 0;
+  for (let seg = start;seg < end; ) {
+    const comma = mappings.indexOf(",", seg);
+    const segEnd = comma >= 0 && comma < end ? comma : end;
+    if (seg === segEnd) {
+      seg++;
+      continue;
+    }
+    const { value, next } = vlqDecode(mappings, seg);
+    if (next > segEnd)
+      throw new InjectError("has malformed mappings");
+    abs += value;
+    if (abs >= col)
+      return mappings.slice(0, seg) + vlqEncode(value + delta) + mappings.slice(next);
+    seg = segEnd + 1;
+  }
+  return mappings;
+}
+function splitLine(mappings, line, col) {
+  let start = 0;
+  for (let k = 0;k < line; k++) {
+    const j = mappings.indexOf(";", start);
+    if (j < 0)
+      return mappings;
+    start = j + 1;
+  }
+  const semi = mappings.indexOf(";", start);
+  const end = semi < 0 ? mappings.length : semi;
+  let abs = 0;
+  for (let seg = start;seg < end; ) {
+    const comma = mappings.indexOf(",", seg);
+    const segEnd = comma >= 0 && comma < end ? comma : end;
+    if (seg === segEnd) {
+      seg++;
+      continue;
+    }
+    const { value, next } = vlqDecode(mappings, seg);
+    if (next > segEnd)
+      throw new InjectError("has malformed mappings");
+    abs += value;
+    if (abs >= col)
+      return mappings.slice(0, seg > start ? seg - 1 : seg) + ";" + vlqEncode(abs - col) + mappings.slice(next);
+    seg = segEnd + 1;
+  }
+  return mappings.slice(0, end) + ";" + mappings.slice(end);
+}
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var SNIPPET_ID = /\(g\._ezghDebugIds=g\._ezghDebugIds\|\|\{\}\)\[s\]="([0-9a-f-]{36})"/;
+var COMMENT_ID = /(?<![^\n])\/\/# debugId=([0-9a-fA-F-]{36})[\t\n\f\r ]*(?![^\n])/g;
+var DIRECTIVE = /^(?:[\t\n\f\r ]|\/\*[^*]*\*+(?:[^/*][^*]*\*+)*\/|\/\/[^\n]*\n)*(?:"(?:[^"\\\r\n]|\\[^\n])*"|'(?:[^'\\\r\n]|\\[^\n])*')[ \t]*(?:;|\r?\n|$)/;
+var MAP_URL_LINE = /(^|\n)\/\/[#@] sourceMappingURL=[^\n]*[\t\n\f\r ]*$/;
+var BOM = "";
+function utf16Units(s, from, to) {
+  const b = (i) => i < to ? s.charCodeAt(i) : -1;
+  const cont = (i, lo = 128, hi = 191) => b(i) >= lo && b(i) <= hi;
+  let n = 0;
+  for (let i = from;i < to; ) {
+    const c = b(i);
+    if (c < 128)
+      i += 1;
+    else if (c >= 194 && c <= 223 && cont(i + 1))
+      i += 2;
+    else if (c >= 224 && c <= 239 && cont(i + 1, c === 224 ? 160 : 128, c === 237 ? 159 : 191) && cont(i + 2))
+      i += 3;
+    else if (c >= 240 && c <= 244 && cont(i + 1, c === 240 ? 144 : 128, c === 244 ? 143 : 191) && cont(i + 2) && cont(i + 3)) {
+      i += 4;
+      n += 1;
+    } else
+      i += 1;
+    n += 1;
+  }
+  return n;
+}
+function insertionPoint(code) {
+  const start = code.startsWith(BOM) ? BOM.length : 0;
+  let at = start;
+  if (code.startsWith("#!", at)) {
+    const nl = code.indexOf(`
+`, at);
+    at = nl < 0 ? code.length : nl + 1;
+  }
+  for (let m = DIRECTIVE.exec(code.slice(at));m && m[0].length > 0; m = DIRECTIVE.exec(code.slice(at)))
+    at += m[0].length;
+  let line = 0;
+  for (let i = code.indexOf(`
+`);i >= 0 && i < at; i = code.indexOf(`
+`, i + 1))
+    line++;
+  let lineStart = at === 0 ? 0 : code.lastIndexOf(`
+`, at - 1) + 1;
+  if (lineStart === 0)
+    lineStart = start;
+  return { at, line, column: utf16Units(code, lineStart, at) };
+}
+function injectDebugId(jsBytes, mapBytes) {
+  let map;
+  try {
+    map = JSON.parse(mapBytes.toString("utf8"));
+  } catch {
+    throw new InjectError("isn't a JSON source map");
+  }
+  if (typeof map !== "object" || map === null || Array.isArray(map))
+    throw new InjectError("isn't a JSON source map");
+  const m = map;
+  if ("sections" in m)
+    throw new InjectError("is an index map (with sections), which inject doesn't support: build with a regular source map");
+  if (m.version !== 3 || typeof m.mappings !== "string")
+    throw new InjectError("isn't a version 3 source map with mappings");
+  if ("debugId" in m && !(typeof m.debugId === "string" && UUID.test(m.debugId.toLowerCase())))
+    throw new InjectError("has a debugId that isn't a UUID");
+  const js = jsBytes.toString("latin1");
+  const fromSnippet = SNIPPET_ID.exec(js)?.[1]?.toLowerCase();
+  const fromComment = [...js.matchAll(COMMENT_ID)].at(-1)?.[1]?.toLowerCase();
+  const fromMap = typeof m.debugId === "string" ? m.debugId.toLowerCase() : undefined;
+  for (const x of [fromSnippet, fromComment])
+    if (x !== undefined && !UUID.test(x))
+      throw new InjectError(`has a debug ID that isn't a UUID (${x})`);
+  const ids = [...new Set([fromSnippet, fromComment, fromMap].filter((x) => x !== undefined))];
+  if (ids.length > 1)
+    throw new InjectError(`has two debug IDs (${ids[0]} and ${ids[1]}): rebuild it, then inject`);
+  if (fromMap && !fromSnippet && !fromComment)
+    throw new InjectError("has a source map with a debug ID but a JS file without one (an inject that didn't finish?): rebuild it, then inject");
+  if (fromSnippet && fromComment && fromMap)
+    return { code: Buffer.from(jsBytes), map: Buffer.from(mapBytes), debugId: fromSnippet, already: true };
+  const id = ids[0] ?? debugIdFor(jsBytes, mapBytes);
+  let code = js;
+  let mappings = m.mappings;
+  if (!fromSnippet) {
+    const { at, line, column } = insertionPoint(code);
+    const s = snippet(id);
+    if (at === code.length && !code.includes(`
+`) && code.slice(code.startsWith(BOM) ? BOM.length : 0).startsWith("#!")) {
+      code += `
+` + s;
+    } else if (code.startsWith("//", at)) {
+      code = code.slice(0, at) + s + `
+` + code.slice(at);
+      mappings = splitLine(mappings, line, column);
+    } else {
+      code = code.slice(0, at) + s + code.slice(at);
+      mappings = shiftColumns(mappings, line, column, s.length);
+    }
+  }
+  if (!fromComment) {
+    const u = MAP_URL_LINE.exec(code);
+    const comment = `//# debugId=${id}
+`;
+    if (u) {
+      const i = u.index + u[1].length;
+      code = code.slice(0, i) + comment + code.slice(i);
+    } else {
+      code += (code.endsWith(`
+`) ? "" : `
+`) + comment;
+    }
+  }
+  return { code: Buffer.from(code, "latin1"), map: Buffer.from(JSON.stringify({ ...m, debugId: id, mappings })), debugId: id, already: false };
+}
+
+// packages/rum-build/src/upload.ts
+import { createHash as createHash2, randomUUID } from "node:crypto";
+var CHUNK_BYTES = 8 * 1024 * 1024;
+var MISSING_BATCH = 1000;
+var COMMIT_BATCH = 1000;
+var CONCURRENCY = 4;
+var ATTEMPTS = 4;
+
+class UploadError extends Error {
+  status;
+  code;
+  body;
+  name = "UploadError";
+  constructor(message, status, code, body) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.body = body;
+  }
+}
+var sha256 = (b) => createHash2("sha256").update(b).digest("hex");
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function upload(t, files) {
+  const f = t.fetch ?? fetch;
+  const base = `${t.apiUrl.replace(/\/+$/, "")}/v1/organizations/${t.organizationId}/projects/${t.projectId}/obs/source-maps`;
+  const chunkBytes = new Map;
+  const entries = files.map((file) => {
+    const chunks = [];
+    for (let o = 0;o < file.bytes.byteLength || o === 0; o += CHUNK_BYTES) {
+      const part = file.bytes.subarray(o, o + CHUNK_BYTES);
+      const h = sha256(part);
+      chunks.push(h);
+      chunkBytes.set(h, part);
+    }
+    return { debugId: file.debugId, path: file.path, kind: file.kind, size: file.bytes.byteLength, chunks };
+  });
+  async function call(path, init, attempt = 0) {
+    let res;
+    try {
+      res = await f(base + path, { ...init, headers: { Authorization: t.authorization, ...init.headers } });
+    } catch (e) {
+      if (attempt + 1 >= ATTEMPTS)
+        throw e;
+      await sleep(1000 * 2 ** attempt);
+      return call(path, init, attempt + 1);
+    }
+    if (res.ok)
+      return res.status === 204 ? undefined : res.json();
+    const ra = Number(res.headers.get("Retry-After"));
+    if ((res.status === 429 || res.status >= 500) && attempt + 1 < ATTEMPTS) {
+      await res.body?.cancel().catch(() => {
+        return;
+      });
+      await sleep(Number.isFinite(ra) && ra > 0 ? Math.min(ra, 60) * 1000 : 1000 * 2 ** attempt);
+      return call(path, init, attempt + 1);
+    }
+    const body = (await res.json().catch(() => ({}))).error ?? {};
+    throw new UploadError(explain(res.status, body, res.statusText), res.status, body.code ?? "", body);
+  }
+  const json = (body, extra = {}) => ({ method: "POST", body: JSON.stringify(body), headers: { "Content-Type": "application/json", ...extra } });
+  async function putChunks(hashes) {
+    const queue = [...new Set(hashes)].filter((h) => chunkBytes.has(h));
+    const n = queue.length;
+    await Promise.all(Array.from({ length: CONCURRENCY }, async () => {
+      for (let h = queue.shift();h; h = queue.shift()) {
+        await call("/chunks", { method: "POST", body: chunkBytes.get(h), headers: { "Content-Type": "application/octet-stream", "x-ezgh-sha256": h, "Idempotency-Key": randomUUID() } });
+      }
+    }));
+    return n;
+  }
+  let uploaded = 0;
+  const all = [...chunkBytes.keys()];
+  for (let i = 0;i < all.length; i += MISSING_BATCH) {
+    const { missing } = await call("/chunks/missing", json({ hashes: all.slice(i, i + MISSING_BATCH) }));
+    uploaded += await putChunks(missing);
+  }
+  const sorted = [...entries].sort((a, b) => a.debugId.localeCompare(b.debugId) || a.kind.localeCompare(b.kind));
+  for (let i = 0;i < sorted.length; ) {
+    let j = Math.min(i + COMMIT_BATCH, sorted.length);
+    while (j < sorted.length && j > i + 1 && sorted[j].debugId === sorted[j - 1].debugId)
+      j--;
+    const body = { application: t.application, release: t.release, files: sorted.slice(i, j) };
+    try {
+      await call("", json(body, { "Idempotency-Key": randomUUID() }));
+    } catch (e) {
+      const missing = e instanceof UploadError && e.status === 409 && e.code === "chunks_missing" ? e.body.details?.missing : undefined;
+      if (!missing)
+        throw e;
+      uploaded += await putChunks(missing);
+      await call("", json(body, { "Idempotency-Key": randomUUID() }));
+    }
+    t.log?.(`ezgh-rum: committed ${j - i} files for ${t.application}@${t.release}`);
+    i = j;
+  }
+  return { files: entries.length, chunksUploaded: uploaded };
+}
+function explain(status, e, statusText) {
+  const code = e.code ?? "";
+  const message = e.message ?? statusText;
+  if (status === 401 || status === 403)
+    return "the key can't upload source maps: give its owner the ObsSourceMapUploadAccess policy";
+  if (code === "debug_id_conflict") {
+    const ids = e.details?.debugIds?.length ? e.details.debugIds.join(", ") : message;
+    return `debug ID ${ids} is already registered with different content: rebuild, then upload`;
+  }
+  if (code === "storage_limit_exceeded")
+    return "the project's 10 GiB source-map storage is full: delete old releases (ezgh obs sourcemaps delete)";
+  return `obs-api answered ${status} ${code}: ${message}`;
+}
+
+// packages/rum-build/src/process.ts
+async function processOutput(dir, o = {}) {
+  const log = o.log ?? ((m) => console.log(m));
+  try {
+    return await run(dir, o, log);
+  } catch (e) {
+    if (o.failOnError ?? true)
+      throw e;
+    log(`ezgh-rum: ${e instanceof Error ? e.message : String(e)}`);
+    return { injected: 0, uploaded: 0 };
+  }
+}
+async function run(dir, o, log) {
+  const env = process.env;
+  const pairs = await findPairs(dir, o.include, log);
+  const fresh = [], all = [];
+  const prefix = o.pathPrefix ?? "";
+  let injected = 0;
+  for (const p of pairs) {
+    const jsPath = join2(dir, p.js), mapPath = join2(dir, p.map);
+    const [js, map] = await Promise.all([readFile2(jsPath), readFile2(mapPath)]);
+    let out;
+    try {
+      out = injectDebugId(js, map);
+    } catch (e) {
+      if (e instanceof InjectError)
+        throw new Error(`ezgh-rum: ${p.js} ${e.message}`, { cause: e });
+      throw e;
+    }
+    if (!out.already) {
+      if (!out.code.equals(js))
+        await writeFile(jsPath, out.code);
+      if (!out.map.equals(map))
+        await writeFile(mapPath, out.map);
+      injected++;
+    }
+    const files = [
+      { debugId: out.debugId, path: prefix + p.js, kind: "js", bytes: out.code },
+      { debugId: out.debugId, path: prefix + p.map, kind: "map", bytes: out.map }
+    ];
+    all.push(...files);
+    if (!out.already)
+      fresh.push(...files);
+  }
+  const set = fresh.length > 0 ? fresh : all;
+  const deleteMaps = (files) => Promise.all(files.filter((f) => f.kind === "map").map((f) => unlink(join2(dir, f.path.slice(prefix.length))).catch(() => {
+    return;
+  })));
+  if (o.upload === false || set.length === 0) {
+    if (injected > 0)
+      log(`ezgh-rum: debug IDs injected into ${injected} files`);
+    if (o.deleteMapsAlways)
+      await deleteMaps(all);
+    return { injected, uploaded: 0 };
+  }
+  const application = o.application ?? env.EZGH_RUM_APPLICATION;
+  const release = o.release ?? env.EZGH_RUM_RELEASE;
+  const organizationId = o.organizationId ?? env.EZGH_ORG;
+  const projectId = o.projectId ?? env.EZGH_PROJECT;
+  const domain = o.domain ?? env.EZGH_DOMAIN ?? "ezghcloud.com";
+  const authorization = organizationId ? await resolveAuthorization({ apiKey: o.apiKey, oidc: o.oidc, organizationId, domain, fetch: o.fetch }, env) : undefined;
+  const unset = [
+    !authorization && "EZGH_API_KEY (or oidc)",
+    !organizationId && "organizationId (EZGH_ORG)",
+    !projectId && "projectId (EZGH_PROJECT)",
+    !application && "application",
+    !release && "release"
+  ].filter(Boolean);
+  if (unset.length > 0) {
+    log(`ezgh-rum: debug IDs injected into ${injected} files; not uploading: set ${unset.join(", ")}`);
+    if (o.deleteMapsAlways)
+      await deleteMaps(all);
+    return { injected, uploaded: 0 };
+  }
+  const r = await upload({
+    apiUrl: `https://obs.${domain}`,
+    organizationId,
+    projectId,
+    application,
+    release,
+    authorization,
+    fetch: o.fetch,
+    log
+  }, set);
+  if (o.deleteMapsAlways)
+    await deleteMaps(all);
+  else if (o.deleteMapsAfterUpload)
+    await deleteMaps(set);
+  return { injected, uploaded: r.files };
+}
+
+// packages/rum-build/src/index.ts
+function browserBuild(c, needDevtool) {
+  if (c.watchMode || needDevtool && !c.options.devtool)
+    return false;
+  const t = c.options.target;
+  const targets = (Array.isArray(t) ? t : [t]).filter((x) => typeof x === "string");
+  return !targets.some((x) => /^(?:async-)?node|^electron-(?:main|preload)/.test(x));
+}
+var ezghRumBuild = createUnplugin((o = {}) => {
+  let viteOut, viteSsr = false;
+  return {
+    name: "ezgh-rum-build",
+    vite: {
+      apply: "build",
+      configResolved(c) {
+        viteOut = resolve(c.root, c.build.outDir);
+        viteSsr = Boolean(c.build.ssr);
+      },
+      async writeBundle(out) {
+        const env = this.environment;
+        if (viteSsr || env?.config?.consumer !== undefined && env.config.consumer !== "client")
+          return;
+        await processOutput(out.dir ?? viteOut, o);
+      }
+    },
+    rollup: {
+      async writeBundle(out) {
+        await processOutput(out.dir ?? dirname(out.file), o);
+      }
+    },
+    webpack(compiler) {
+      const c = compiler;
+      c.hooks.afterEmit.tapPromise("ezgh-rum-build", async () => {
+        if (!browserBuild(c, true))
+          return;
+        await processOutput(c.options.output.path, o);
+      });
+    },
+    rspack(compiler) {
+      const c = compiler;
+      c.hooks.afterEmit.tapPromise("ezgh-rum-build", async () => {
+        if (!browserBuild(c, true))
+          return;
+        await processOutput(c.options.output.path, o);
+      });
+    },
+    esbuild: {
+      setup(build) {
+        build.onEnd(async (r) => {
+          const io = build.initialOptions;
+          if (r.errors.length || io.write === false)
+            return;
+          await processOutput(io.outdir ?? dirname(io.outfile), o);
+        });
+      }
+    }
+  };
+});
+export {
+  CHUNK_BYTES,
+  InjectError,
+  UploadError,
+  debugIdFor,
+  ezghRumBuild,
+  injectDebugId,
+  processOutput,
+  resolveAuthorization,
+  shiftColumns,
+  snippet,
+  upload
+};
+
+//# debugId=61B216F94AC531CE64756E2164756E21
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,17 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts", "../src/process.ts", "../src/auth.ts", "../src/errors.ts", "../src/files.ts", "../src/inject.ts", "../src/vlq.ts", "../src/upload.ts"],
+  "sourcesContent": [
+    "// @ezghcloud/rum-build: one unplugin whose hooks all run processOutput after the bundler wrote its\n// files, so the same on-disk algorithm serves Vite, Rollup, webpack, Rspack, esbuild and Next.js.\nimport { dirname, resolve } from \"node:path\"\nimport { createUnplugin, type UnpluginInstance } from \"unplugin\"\nimport { processOutput, type EzghRumBuildOptions } from \"./process.ts\"\n\ninterface CompilerLike {\n  hooks: { afterEmit: { tapPromise(name: string, fn: () => Promise<void>): void } }\n  options: { output: { path?: string }, target?: unknown, devtool?: unknown }\n  watchMode?: boolean\n}\n\n// Browser output only, written to disk by a production build: server targets, dev servers and\n// watch mode (often an in-memory file system) are left alone.\nfunction browserBuild(c: CompilerLike, needDevtool: boolean): boolean {\n  if (c.watchMode || (needDevtool && !c.options.devtool)) return false\n  const t = c.options.target\n  const targets = (Array.isArray(t) ? t : [t]).filter((x): x is string => typeof x === \"string\")\n  return !targets.some(x => /^(?:async-)?node|^electron-(?:main|preload)/.test(x))\n}\n\nexport const ezghRumBuild: UnpluginInstance<EzghRumBuildOptions | undefined> = createUnplugin((o: EzghRumBuildOptions | undefined = {}) => {\n  let viteOut: string | undefined, viteSsr = false\n  return {\n    name: \"ezgh-rum-build\",\n    vite: {\n      apply: \"build\",\n      configResolved(c) {\n        viteOut = resolve(c.root, c.build.outDir)\n        viteSsr = Boolean(c.build.ssr)\n      },\n      async writeBundle(out) {\n        const env = (this as { environment?: { config?: { consumer?: string } } }).environment\n        if (viteSsr || (env?.config?.consumer !== undefined && env.config.consumer !== \"client\")) return\n        await processOutput(out.dir ?? viteOut!, o)\n      },\n    },\n    rollup: {\n      async writeBundle(out) {\n        await processOutput(out.dir ?? dirname(out.file!), o)\n      },\n    },\n    webpack(compiler) {\n      const c = compiler as unknown as CompilerLike\n      c.hooks.afterEmit.tapPromise(\"ezgh-rum-build\", async () => {\n        if (!browserBuild(c, true)) return\n        await processOutput(c.options.output.path!, o)\n      })\n    },\n    rspack(compiler) {\n      // Typed structurally: @rspack/core is the customer's, not a dependency of this package.\n      const c = compiler as unknown as CompilerLike\n      c.hooks.afterEmit.tapPromise(\"ezgh-rum-build\", async () => {\n        if (!browserBuild(c, true)) return\n        await processOutput(c.options.output.path!, o)\n      })\n    },\n    esbuild: {\n      setup(build) {\n        build.onEnd(async (r) => {\n          const io = build.initialOptions\n          if (r.errors.length || io.write === false) return\n          await processOutput(io.outdir ?? dirname(io.outfile!), o)\n        })\n      },\n    },\n  }\n})\nexport { processOutput, type EzghRumBuildOptions } from \"./process.ts\"\nexport { injectDebugId, debugIdFor, snippet, shiftColumns, InjectError, type Injected } from \"./inject.ts\"\nexport { upload, UploadError, CHUNK_BYTES, type UploadFile, type UploadTarget } from \"./upload.ts\"\nexport { resolveAuthorization, type OidcOptions } from \"./auth.ts\"\n",
+    "// What every bundler hook runs once the bundler wrote its files: inject debug IDs into the output\n// on disk, then upload the injected pairs through obs-api.\nimport { readFile, unlink, writeFile } from \"node:fs/promises\"\nimport { join } from \"node:path\"\nimport { resolveAuthorization, type OidcOptions } from \"./auth.ts\"\nimport { InjectError } from \"./errors.ts\"\nimport { findPairs } from \"./files.ts\"\nimport { injectDebugId } from \"./inject.ts\"\nimport { upload, type UploadFile } from \"./upload.ts\"\n\nexport interface EzghRumBuildOptions {\n  /** Default env EZGH_RUM_APPLICATION; required to upload. */\n  application?: string\n  /** Default env EZGH_RUM_RELEASE; required to upload. */\n  release?: string\n  /** The organization's UUID; default env EZGH_ORG. */\n  organizationId?: string\n  /** The project's UUID; default env EZGH_PROJECT. */\n  projectId?: string\n  /** Default env EZGH_API_KEY (setup-ezgh sets it from OIDC). */\n  apiKey?: string\n  /** GitHub Actions OIDC → a short-lived bot key, when there's no API key. */\n  oidc?: OidcOptions\n  /** Default env EZGH_DOMAIN, else \"ezghcloud.com\"; uploads go to https://obs.<domain>. */\n  domain?: string\n  /** Default true; false only injects. */\n  upload?: boolean\n  /** Default true: an error fails the build. False logs it instead. */\n  failOnError?: boolean\n  /** Default false (withEzghRum: true): delete the uploaded .map files from the output. */\n  deleteMapsAfterUpload?: boolean\n  /** Default: .js, .mjs and .cjs files outside node_modules. */\n  include?: (relPath: string) => boolean\n  /** Prefixed to committed paths (withEzghRum: \"_next/static/\"). */\n  pathPrefix?: string\n  /**\n   * @internal withEzghRum: delete every .map file of the processed pairs, uploaded or not (it turned\n   * productionBrowserSourceMaps on, so maps must never be left to be served).\n   */\n  deleteMapsAlways?: boolean\n  /** @internal For tests: the fetch used for obs-api and org-api. */\n  fetch?: typeof fetch\n  /** @internal For tests: where log lines go (default console.log). */\n  log?: (m: string) => void\n}\n\nexport async function processOutput(dir: string, o: EzghRumBuildOptions = {}): Promise<{ injected: number, uploaded: number }> {\n  const log = o.log ?? ((m: string) => console.log(m))\n  try {\n    return await run(dir, o, log)\n  }\n  catch (e) {\n    if (o.failOnError ?? true) throw e\n    log(`ezgh-rum: ${e instanceof Error ? e.message : String(e)}`)\n    return { injected: 0, uploaded: 0 }\n  }\n}\n\nasync function run(dir: string, o: EzghRumBuildOptions, log: (m: string) => void): Promise<{ injected: number, uploaded: number }> {\n  const env = process.env\n  const pairs = await findPairs(dir, o.include, log)\n  const fresh: UploadFile[] = [], all: UploadFile[] = []\n  const prefix = o.pathPrefix ?? \"\"\n  let injected = 0\n  for (const p of pairs) {\n    const jsPath = join(dir, p.js), mapPath = join(dir, p.map)\n    const [js, map] = await Promise.all([readFile(jsPath), readFile(mapPath)])\n    let out\n    try {\n      out = injectDebugId(js, map)\n    }\n    catch (e) {\n      if (e instanceof InjectError) throw new Error(`ezgh-rum: ${p.js} ${e.message}`, { cause: e })\n      throw e\n    }\n    if (!out.already) {\n      if (!out.code.equals(js)) await writeFile(jsPath, out.code)\n      if (!out.map.equals(map)) await writeFile(mapPath, out.map)\n      injected++\n    }\n    const files: UploadFile[] = [\n      { debugId: out.debugId, path: prefix + p.js, kind: \"js\", bytes: out.code },\n      { debugId: out.debugId, path: prefix + p.map, kind: \"map\", bytes: out.map },\n    ]\n    all.push(...files)\n    if (!out.already) fresh.push(...files)\n  }\n  // The pairs injected in this run, or, when none were (a CLI-injected build), every pair with a\n  // debug ID: leftovers of an older build in a non-emptied outDir aren't committed in this release.\n  const set = fresh.length > 0 ? fresh : all\n  const deleteMaps = (files: readonly UploadFile[]) =>\n    Promise.all(files.filter(f => f.kind === \"map\").map(f => unlink(join(dir, f.path.slice(prefix.length))).catch(() => undefined)))\n  if (o.upload === false || set.length === 0) {\n    if (injected > 0) log(`ezgh-rum: debug IDs injected into ${injected} files`)\n    if (o.deleteMapsAlways) await deleteMaps(all)\n    return { injected, uploaded: 0 }\n  }\n  const application = o.application ?? env.EZGH_RUM_APPLICATION\n  const release = o.release ?? env.EZGH_RUM_RELEASE\n  const organizationId = o.organizationId ?? env.EZGH_ORG\n  const projectId = o.projectId ?? env.EZGH_PROJECT\n  const domain = o.domain ?? env.EZGH_DOMAIN ?? \"ezghcloud.com\"\n  const authorization = organizationId\n    ? await resolveAuthorization({ apiKey: o.apiKey, oidc: o.oidc, organizationId, domain, fetch: o.fetch }, env)\n    : undefined\n  const unset = [\n    !authorization && \"EZGH_API_KEY (or oidc)\", !organizationId && \"organizationId (EZGH_ORG)\",\n    !projectId && \"projectId (EZGH_PROJECT)\", !application && \"application\", !release && \"release\",\n  ].filter(Boolean)\n  if (unset.length > 0) {\n    log(`ezgh-rum: debug IDs injected into ${injected} files; not uploading: set ${unset.join(\", \")}`)\n    if (o.deleteMapsAlways) await deleteMaps(all)\n    return { injected, uploaded: 0 }\n  }\n  const r = await upload({\n    apiUrl: `https://obs.${domain}`, organizationId: organizationId!, projectId: projectId!, application: application!,\n    release: release!, authorization: authorization!, fetch: o.fetch, log,\n  }, set)\n  if (o.deleteMapsAlways) await deleteMaps(all)\n  else if (o.deleteMapsAfterUpload) await deleteMaps(set)\n  return { injected, uploaded: r.files }\n}\n",
+    "// The upload credential: an API key (EZGH_API_KEY, which setup-ezgh sets in GitHub Actions), or a\n// GitHub Actions OIDC token exchanged at org-api for a short-lived bot key. Keys are never logged.\nexport interface OidcOptions { bot: string, audience?: string }\n\nexport async function resolveAuthorization(\n  o: { apiKey?: string, oidc?: OidcOptions, organizationId: string, domain: string, fetch?: typeof fetch },\n  env: Readonly<Record<string, string | undefined>>,\n): Promise<string | undefined> {\n  const key = o.apiKey || env.EZGH_API_KEY\n  if (key) return `Bearer ${key}`\n  const url = env.ACTIONS_ID_TOKEN_REQUEST_URL, requestToken = env.ACTIONS_ID_TOKEN_REQUEST_TOKEN\n  if (!o.oidc || !url || !requestToken) return undefined\n  const f = o.fetch ?? fetch\n  const audience = o.oidc.audience ?? o.domain\n  const idRes = await f(`${url}${url.includes(\"?\") ? \"&\" : \"?\"}audience=${encodeURIComponent(audience)}`, {\n    headers: { Authorization: `Bearer ${requestToken}` },\n  })\n  if (!idRes.ok) throw new Error(`ezgh-rum: GitHub Actions didn't issue an OIDC token (${idRes.status}): give the job \"permissions: id-token: write\"`)\n  const { value } = await idRes.json() as { value?: string }\n  if (!value) throw new Error(\"ezgh-rum: GitHub Actions answered without an OIDC token\")\n  const exchange = `https://orgs.${o.domain}/v1/organizations/${encodeURIComponent(o.organizationId)}/bots/${encodeURIComponent(o.oidc.bot)}/oidc-api-keys`\n  for (let attempt = 0; ; attempt++) {\n    // No Authorization header: the OIDC token is the credential.\n    const res = await f(exchange, {\n      method: \"POST\", headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ token: value, name: \"ezgh-rum-build\", expiresInSeconds: 900 }),\n    })\n    if (res.ok) {\n      const { token } = await res.json() as { token?: string }\n      if (!token) throw new Error(\"ezgh-rum: org-api answered the OIDC exchange without a key\")\n      return `Bearer ${token}`\n    }\n    if ((res.status === 429 || res.status === 503) && attempt < 3) {\n      const ra = Number(res.headers.get(\"Retry-After\"))\n      await new Promise(r => setTimeout(r, Number.isFinite(ra) && ra > 0 ? Math.min(ra, 60) * 1000 : 1000 * 2 ** attempt))\n      continue\n    }\n    const body = await res.json().catch(() => ({})) as { error?: { code?: string, message?: string } }\n    throw new Error(`ezgh-rum: the OIDC exchange for bot ${o.oidc.bot} failed (${res.status} ${body.error?.code ?? \"\"}): ${body.error?.message ?? res.statusText}`)\n  }\n}\n",
+    "/** A JS file or source map that injection refuses; the message reads after the file's path. */\nexport class InjectError extends Error {\n  override name = \"InjectError\"\n}\n",
+    "// Finds the JS files of a build's output and their source maps, on disk, after the bundler wrote\n// them: one algorithm for every bundler, and the same as ezgh-cli's sourcemaps.Find:\n// - walk the directory without following symlinks, skipping node_modules;\n// - a JS file's map is the file its trailing //# sourceMappingURL= comment names (relative,\n//   inside the directory, a regular file, not reached through a symlink), else <file>.map when\n//   there's no comment; a data: URL, an absolute or outside URL, or no map skips the file;\n// - a map named by two JS files pairs neither.\nimport { existsSync } from \"node:fs\"\nimport { lstat, readdir, readFile, realpath } from \"node:fs/promises\"\nimport { join, posix, relative, sep } from \"node:path\"\n\nexport interface Pair { js: string, map: string } // paths relative to the output directory, with \"/\"\ninterface Skipped { path: string, reason: string }\n\nconst isJS = (rel: string) => /\\.(?:m|c)?js$/.test(rel)\nconst MAP_URL = /(?:^|\\n)\\/\\/[#@] sourceMappingURL=([^\\t\\n\\f\\r ]*)[\\t\\n\\f\\r ]*$/\n\nasync function walk(root: string, rel: string, out: string[]): Promise<void> {\n  for (const d of await readdir(join(root, rel), { withFileTypes: true })) {\n    const r = rel ? `${rel}/${d.name}` : d.name\n    if (d.isDirectory()) {\n      if (d.name !== \"node_modules\") await walk(root, r, out)\n    }\n    else if (d.isFile() && isJS(d.name)) out.push(r) // symlinks and other non-regular files are never followed\n  }\n}\n\nasync function isRegular(p: string): Promise<boolean> {\n  try {\n    return (await lstat(p)).isFile()\n  }\n  catch {\n    return false\n  }\n}\n\nasync function inside(root: string, p: string): Promise<boolean> {\n  try {\n    const rel = relative(root, await realpath(p))\n    return rel !== \"\" && !rel.startsWith(\"..\") && !rel.split(sep).includes(\"..\") && !/^[a-zA-Z]:/.test(rel) && !rel.startsWith(sep)\n  }\n  catch {\n    return false\n  }\n}\n\nasync function mapFor(dir: string, rel: string): Promise<[string, \"\"] | [undefined, string]> {\n  const text = await readFile(join(dir, rel), \"latin1\")\n  const m = MAP_URL.exec(text)\n  if (m) {\n    const u = m[1]!\n    if (u.toLowerCase().startsWith(\"data:\")) return [undefined, \"its source map is inline (a data: URL): build with external source maps\"]\n    if (u === \"\") return [undefined, \"its sourceMappingURL comment is empty\"]\n    // Go's url.Parse: a scheme or host means not relative; the path is percent-decoded, without\n    // the query and fragment.\n    if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(u) || u.startsWith(\"//\")) return [undefined, `its sourceMappingURL ${u} isn't a relative path`]\n    let path = u.replace(/[?#].*$/s, \"\")\n    try {\n      path = decodeURIComponent(path)\n    }\n    catch {\n      return [undefined, `its sourceMappingURL ${u} isn't a relative path`]\n    }\n    if (path.startsWith(\"/\") || path.includes(\"\\\\\")) return [undefined, `its sourceMappingURL ${u} isn't a relative path`]\n    const target = posix.normalize(posix.join(posix.dirname(rel), path))\n    if (target === \"..\" || target.startsWith(\"../\")) return [undefined, `its source map ${u} is outside the directory`]\n    const abs = join(dir, ...target.split(\"/\"))\n    if (!(await isRegular(abs))) return [undefined, `its source map ${target} isn't there`]\n    if (!(await inside(dir, abs))) return [undefined, `its source map ${u} is outside the directory (through a symlink)`]\n    return [target, \"\"]\n  }\n  if (await isRegular(join(dir, ...`${rel}.map`.split(\"/\")))) return [`${rel}.map`, \"\"]\n  return [undefined, \"no source map\"]\n}\n\nexport async function findPairs(dir: string, include: ((rel: string) => boolean) | undefined, log: (m: string) => void): Promise<Pair[]> {\n  if (!existsSync(dir)) return []\n  const root = await realpath(dir) // the directory itself may be a symlink\n  const files: string[] = []\n  await walk(root, \"\", files)\n  files.sort()\n  let pairs: Pair[] = []\n  const skipped: Skipped[] = []\n  for (const rel of files) {\n    if (include && !include(rel)) continue\n    const [map, reason] = await mapFor(root, rel)\n    if (map === undefined) skipped.push({ path: rel, reason })\n    else pairs.push({ js: rel, map })\n  }\n  const users = new Map<string, string[]>()\n  for (const p of pairs) users.set(p.map, [...(users.get(p.map) ?? []), p.js])\n  pairs = pairs.filter((p) => {\n    const js = users.get(p.map)!\n    if (js.length < 2) return true\n    skipped.push({ path: p.js, reason: `its source map ${p.map} is also ${js.filter(x => x !== p.js).join(\", \")}'s: build with one map per file` })\n    return false\n  })\n  const shown = skipped.filter(s => s.reason !== \"no source map\")\n  for (const s of shown.slice(0, 20)) log(`ezgh-rum: skipped ${s.path}: ${s.reason}`)\n  if (shown.length > 20) log(`ezgh-rum: skipped ${shown.length - 20} more file(s)`)\n  const noMap = skipped.length - shown.length\n  if (noMap > 0) log(`ezgh-rum: skipped ${noMap} JS file(s) without a source map`)\n  return pairs\n}\n",
+    "// Debug-ID injection: CLI L2's algorithm (ezgh-cli internal/sourcemaps), ported byte for byte. The\n// CLI owns the algorithm and its vectors (test/vectors/inject, synced by\n// scripts/sync-inject-vectors.sh); this file must reproduce every vector's out.js exactly.\nimport { createHash } from \"node:crypto\"\nimport { InjectError } from \"./errors.ts\"\nimport { vlqDecode, vlqEncode } from \"./vlq.ts\"\n\nexport { InjectError }\nexport interface Injected { code: Buffer, map: Buffer, debugId: string, already: boolean }\n\n/**\n * The registration code inserted into every JS file: one line, no newline. It registers the debug\n * ID under the Error stack of the code that runs it, so the SDK maps the script's URL (the stack's\n * first frame) to its debug ID. It never throws.\n */\nexport function snippet(id: string): string {\n  return \";!function(){try{var g=\\\"undefined\\\"!=typeof globalThis?globalThis:\\\"undefined\\\"!=typeof self?self:\"\n    + \"\\\"undefined\\\"!=typeof window?window:{},s=(new g.Error).stack;s&&((g._ezghDebugIds=g._ezghDebugIds||{})[s]=\\\"\"\n    + id + \"\\\")}catch(e){}}();\"\n}\n\n/**\n * A file pair's debug ID, from its content: SHA-256 of \"ezgh-debug-id\\0\" + js + \"\\0\" + map, the\n * first 16 bytes with the RFC 9562 version (4) and variant bits, as a lowercase UUID.\n */\nexport function debugIdFor(js: Uint8Array, map: Uint8Array): string {\n  const h = createHash(\"sha256\").update(\"ezgh-debug-id\\0\").update(js).update(\"\\0\").update(map).digest()\n  h[6] = (h[6]! & 0x0f) | 0x40\n  h[8] = (h[8]! & 0x3f) | 0x80\n  const x = h.subarray(0, 16).toString(\"hex\")\n  return `${x.slice(0, 8)}-${x.slice(8, 12)}-${x.slice(12, 16)}-${x.slice(16, 20)}-${x.slice(20)}`\n}\n\n/**\n * Moves every mapping of generated line `line` at column >= `col` right by `delta`. Generated\n * columns are relative within a line, so only the first such segment's first field changes; every\n * other byte of `mappings` stays as it is.\n */\nexport function shiftColumns(mappings: string, line: number, col: number, delta: number): string {\n  let start = 0\n  for (let k = 0; k < line; k++) {\n    const j = mappings.indexOf(\";\", start)\n    if (j < 0) return mappings // no mappings on that line or after it\n    start = j + 1\n  }\n  const semi = mappings.indexOf(\";\", start)\n  const end = semi < 0 ? mappings.length : semi\n  let abs = 0\n  for (let seg = start; seg < end;) {\n    const comma = mappings.indexOf(\",\", seg)\n    const segEnd = comma >= 0 && comma < end ? comma : end\n    if (seg === segEnd) { // an empty segment\n      seg++\n      continue\n    }\n    const { value, next } = vlqDecode(mappings, seg)\n    if (next > segEnd) throw new InjectError(\"has malformed mappings\")\n    abs += value\n    if (abs >= col) return mappings.slice(0, seg) + vlqEncode(value + delta) + mappings.slice(next)\n    seg = segEnd + 1\n  }\n  return mappings\n}\n\n/**\n * Moves the mappings of generated line `line` at column >= `col` to a new line after it, their\n * columns less `col`. Only the first moved segment's generated column changes (the other fields\n * are relative across lines); a line with nothing at `col` or after gains an empty line.\n */\nexport function splitLine(mappings: string, line: number, col: number): string {\n  let start = 0\n  for (let k = 0; k < line; k++) {\n    const j = mappings.indexOf(\";\", start)\n    if (j < 0) return mappings // no mappings on that line or after it\n    start = j + 1\n  }\n  const semi = mappings.indexOf(\";\", start)\n  const end = semi < 0 ? mappings.length : semi\n  let abs = 0\n  for (let seg = start; seg < end;) {\n    const comma = mappings.indexOf(\",\", seg)\n    const segEnd = comma >= 0 && comma < end ? comma : end\n    if (seg === segEnd) {\n      seg++\n      continue\n    }\n    const { value, next } = vlqDecode(mappings, seg)\n    if (next > segEnd) throw new InjectError(\"has malformed mappings\")\n    abs += value\n    if (abs >= col) return mappings.slice(0, seg > start ? seg - 1 : seg) + \";\" + vlqEncode(abs - col) + mappings.slice(next)\n    seg = segEnd + 1\n  }\n  return mappings.slice(0, end) + \";\" + mappings.slice(end)\n}\n\n// The JS is matched as a byte string (latin1: one char per byte), as Go's regexp matches the\n// file's bytes, so every byte (a BOM, invalid UTF-8) comes out as it went in. Every pattern is\n// ASCII, and RE2's \\s is [\\t\\n\\f\\r ] and its . excludes only \\n: spelled out so JS matches Go.\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/\nconst SNIPPET_ID = /\\(g\\._ezghDebugIds=g\\._ezghDebugIds\\|\\|\\{\\}\\)\\[s\\]=\"([0-9a-f-]{36})\"/\n// Go's (?m)^…\\s*$: a line start is the start or after \\n, a line end the end or before \\n.\nconst COMMENT_ID = /(?<![^\\n])\\/\\/# debugId=([0-9a-fA-F-]{36})[\\t\\n\\f\\r ]*(?![^\\n])/g\n// One directive of the prologue (and the whitespace and comments before it). A block comment\n// can't contain */; \"a\".split(…) isn't a directive and doesn't match.\nconst DIRECTIVE = /^(?:[\\t\\n\\f\\r ]|\\/\\*[^*]*\\*+(?:[^/*][^*]*\\*+)*\\/|\\/\\/[^\\n]*\\n)*(?:\"(?:[^\"\\\\\\r\\n]|\\\\[^\\n])*\"|'(?:[^'\\\\\\r\\n]|\\\\[^\\n])*')[ \\t]*(?:;|\\r?\\n|$)/\n// The file's last line, when it's a sourceMappingURL comment (whitespace may follow).\nconst MAP_URL_LINE = /(^|\\n)\\/\\/[#@] sourceMappingURL=[^\\n]*[\\t\\n\\f\\r ]*$/\nconst BOM = \"\\xEF\\xBB\\xBF\"\n\n/** UTF-16 units of the UTF-8 bytes s[from, to) (a latin1 byte string), decoded as Go ranges a string: an invalid byte is one unit. */\nfunction utf16Units(s: string, from: number, to: number): number {\n  const b = (i: number) => (i < to ? s.charCodeAt(i) : -1)\n  const cont = (i: number, lo = 0x80, hi = 0xbf) => b(i) >= lo && b(i) <= hi\n  let n = 0\n  for (let i = from; i < to;) {\n    const c = b(i)\n    if (c < 0x80) i += 1\n    else if (c >= 0xc2 && c <= 0xdf && cont(i + 1)) i += 2\n    else if (c >= 0xe0 && c <= 0xef && cont(i + 1, c === 0xe0 ? 0xa0 : 0x80, c === 0xed ? 0x9f : 0xbf) && cont(i + 2)) i += 3\n    else if (c >= 0xf0 && c <= 0xf4 && cont(i + 1, c === 0xf0 ? 0x90 : 0x80, c === 0xf4 ? 0x8f : 0xbf) && cont(i + 2) && cont(i + 3)) {\n      i += 4\n      n += 1 // a supplementary character is a surrogate pair\n    }\n    else i += 1 // invalid: U+FFFD, one unit\n    n += 1\n  }\n  return n\n}\n\n/**\n * Where the snippet goes: after a byte-order mark, a #! line and the whole directive prologue, so\n * \"use strict\" stays a directive. The byte offset, and the generated line and column (UTF-16\n * units, the BOM not counted) that source maps use.\n */\nfunction insertionPoint(code: string): { at: number, line: number, column: number } {\n  const start = code.startsWith(BOM) ? BOM.length : 0\n  let at = start\n  if (code.startsWith(\"#!\", at)) {\n    const nl = code.indexOf(\"\\n\", at)\n    at = nl < 0 ? code.length : nl + 1\n  }\n  for (let m = DIRECTIVE.exec(code.slice(at)); m && m[0].length > 0; m = DIRECTIVE.exec(code.slice(at))) at += m[0].length\n  let line = 0\n  for (let i = code.indexOf(\"\\n\"); i >= 0 && i < at; i = code.indexOf(\"\\n\", i + 1)) line++\n  let lineStart = at === 0 ? 0 : code.lastIndexOf(\"\\n\", at - 1) + 1\n  if (lineStart === 0) lineStart = start\n  return { at, line, column: utf16Units(code, lineStart, at) }\n}\n\n/**\n * Adds the debug ID to a JS file and its source map: the snippet after a BOM, a shebang line and\n * the directive prologue (with the map's columns shifted), a `//# debugId=` comment before a\n * trailing `sourceMappingURL` line (or at the end), and the map's `debugId`. `already` is true,\n * with the input unchanged, when all three are there and agree.\n */\nexport function injectDebugId(jsBytes: Buffer, mapBytes: Buffer): Injected {\n  let map: unknown\n  try {\n    map = JSON.parse(mapBytes.toString(\"utf8\"))\n  }\n  catch {\n    throw new InjectError(\"isn't a JSON source map\")\n  }\n  if (typeof map !== \"object\" || map === null || Array.isArray(map)) throw new InjectError(\"isn't a JSON source map\")\n  const m = map as Record<string, unknown>\n  if (\"sections\" in m) throw new InjectError(\"is an index map (with sections), which inject doesn't support: build with a regular source map\")\n  if (m.version !== 3 || typeof m.mappings !== \"string\") throw new InjectError(\"isn't a version 3 source map with mappings\")\n  if (\"debugId\" in m && !(typeof m.debugId === \"string\" && UUID.test(m.debugId.toLowerCase()))) throw new InjectError(\"has a debugId that isn't a UUID\")\n\n  const js = jsBytes.toString(\"latin1\")\n  const fromSnippet = SNIPPET_ID.exec(js)?.[1]?.toLowerCase()\n  const fromComment = [...js.matchAll(COMMENT_ID)].at(-1)?.[1]?.toLowerCase()\n  const fromMap = typeof m.debugId === \"string\" ? m.debugId.toLowerCase() : undefined\n  for (const x of [fromSnippet, fromComment]) if (x !== undefined && !UUID.test(x)) throw new InjectError(`has a debug ID that isn't a UUID (${x})`)\n  const ids = [...new Set([fromSnippet, fromComment, fromMap].filter((x): x is string => x !== undefined))]\n  if (ids.length > 1) throw new InjectError(`has two debug IDs (${ids[0]} and ${ids[1]}): rebuild it, then inject`)\n  if (fromMap && !fromSnippet && !fromComment) throw new InjectError(\"has a source map with a debug ID but a JS file without one (an inject that didn't finish?): rebuild it, then inject\")\n  if (fromSnippet && fromComment && fromMap) return { code: Buffer.from(jsBytes), map: Buffer.from(mapBytes), debugId: fromSnippet, already: true }\n  const id = ids[0] ?? debugIdFor(jsBytes, mapBytes)\n\n  let code = js\n  let mappings = m.mappings\n  if (!fromSnippet) {\n    const { at, line, column } = insertionPoint(code)\n    const s = snippet(id)\n    if (at === code.length && !code.includes(\"\\n\") && code.slice(code.startsWith(BOM) ? BOM.length : 0).startsWith(\"#!\")) {\n      // Only a #! line: the snippet goes on a line of its own, after every mapping.\n      code += \"\\n\" + s\n    }\n    else if (code.startsWith(\"//\", at)) {\n      // A line comment follows: the snippet ends its line, so the comment still starts a line.\n      code = code.slice(0, at) + s + \"\\n\" + code.slice(at)\n      mappings = splitLine(mappings, line, column)\n    }\n    else {\n      code = code.slice(0, at) + s + code.slice(at)\n      mappings = shiftColumns(mappings, line, column, s.length)\n    }\n  }\n  if (!fromComment) {\n    const u = MAP_URL_LINE.exec(code)\n    const comment = `//# debugId=${id}\\n`\n    if (u) {\n      const i = u.index + u[1]!.length // after the newline that ends the previous line\n      code = code.slice(0, i) + comment + code.slice(i)\n    }\n    else {\n      code += (code.endsWith(\"\\n\") ? \"\" : \"\\n\") + comment\n    }\n  }\n  return { code: Buffer.from(code, \"latin1\"), map: Buffer.from(JSON.stringify({ ...m, debugId: id, mappings })), debugId: id, already: false }\n}\n",
+    "// Base64 VLQ as source maps use it (CLI L2's vlq.go): 5-bit groups, continuation bit 32, the sign\n// in bit 0. Arithmetic rather than bit shifts, so large columns don't overflow 32 bits.\nimport { InjectError } from \"./errors.ts\"\n\nconst ALPHABET = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"\nconst DIGIT = new Map([...ALPHABET].map((c, i) => [c, i]))\n\nexport function vlqDecode(s: string, at: number): { value: number, next: number } {\n  let result = 0\n  let shift = 0\n  for (let i = at; i < s.length; i++) {\n    const d = DIGIT.get(s[i]!)\n    if (d === undefined || shift > 30) throw new InjectError(\"has malformed mappings\")\n    result += (d & 31) * 2 ** shift\n    shift += 5\n    if ((d & 32) === 0) {\n      const negative = result % 2 === 1\n      const magnitude = Math.floor(result / 2)\n      return { value: negative ? -magnitude : magnitude, next: i + 1 }\n    }\n  }\n  throw new InjectError(\"has malformed mappings\")\n}\n\nexport function vlqEncode(v: number): string {\n  let n = v < 0 ? -v * 2 + 1 : v * 2\n  let out = \"\"\n  do {\n    let digit = n % 32\n    n = Math.floor(n / 32)\n    if (n > 0) digit += 32\n    out += ALPHABET[digit]\n  } while (n > 0)\n  return out\n}\n",
+    "// The chunked, content-addressed source-map upload through obs-api (spec \"Source maps\", plan 25\n// interface corrections 2–4): chunks/missing, then the missing chunks, then commits of at most\n// 1,000 files that never split a debug ID's js and map. obs-api never returns a storage URL, and\n// nothing here builds or logs any URL but obs-api's.\nimport { createHash, randomUUID } from \"node:crypto\"\n\nexport const CHUNK_BYTES = 8 * 1024 * 1024\nexport const MISSING_BATCH = 1000\nexport const COMMIT_BATCH = 1000\nconst CONCURRENCY = 4\nconst ATTEMPTS = 4\n\nexport interface UploadFile { debugId: string, path: string, kind: \"js\" | \"map\", bytes: Uint8Array }\nexport interface UploadTarget {\n  apiUrl: string\n  organizationId: string\n  projectId: string\n  application: string\n  release: string\n  authorization: string\n  fetch?: typeof fetch\n  log?: (m: string) => void\n}\n// obs-api errors: {\"error\":{\"code\",\"message\",\"details\":{…}}} (chunks_missing: details.missing; debug_id_conflict: details.debugIds).\ninterface ErrorBody { code?: string, message?: string, details?: { missing?: string[], debugIds?: string[] } }\nexport class UploadError extends Error {\n  override name = \"UploadError\"\n  constructor(message: string, readonly status: number, readonly code: string, readonly body: ErrorBody) {\n    super(message)\n  }\n}\n\nconst sha256 = (b: Uint8Array): string => createHash(\"sha256\").update(b).digest(\"hex\")\nconst sleep = (ms: number) => new Promise(r => setTimeout(r, ms))\n\nexport async function upload(t: UploadTarget, files: readonly UploadFile[]): Promise<{ files: number, chunksUploaded: number }> {\n  const f = t.fetch ?? fetch\n  const base = `${t.apiUrl.replace(/\\/+$/, \"\")}/v1/organizations/${t.organizationId}/projects/${t.projectId}/obs/source-maps`\n  const chunkBytes = new Map<string, Uint8Array>()\n  const entries = files.map((file) => {\n    const chunks: string[] = []\n    for (let o = 0; o < file.bytes.byteLength || o === 0; o += CHUNK_BYTES) {\n      const part = file.bytes.subarray(o, o + CHUNK_BYTES)\n      const h = sha256(part)\n      chunks.push(h)\n      chunkBytes.set(h, part)\n    }\n    // A file is (size, chunks): no whole-file hash (interface correction 4).\n    return { debugId: file.debugId, path: file.path, kind: file.kind, size: file.bytes.byteLength, chunks }\n  })\n\n  async function call(path: string, init: RequestInit, attempt = 0): Promise<unknown> {\n    let res: Response\n    try {\n      res = await f(base + path, { ...init, headers: { Authorization: t.authorization, ...(init.headers as Record<string, string>) } })\n    }\n    catch (e) {\n      if (attempt + 1 >= ATTEMPTS) throw e\n      await sleep(1000 * 2 ** attempt)\n      return call(path, init, attempt + 1)\n    }\n    if (res.ok) return res.status === 204 ? undefined : res.json()\n    const ra = Number(res.headers.get(\"Retry-After\"))\n    if ((res.status === 429 || res.status >= 500) && attempt + 1 < ATTEMPTS) {\n      await res.body?.cancel().catch(() => undefined)\n      await sleep(Number.isFinite(ra) && ra > 0 ? Math.min(ra, 60) * 1000 : 1000 * 2 ** attempt)\n      return call(path, init, attempt + 1)\n    }\n    // obs-api errors are { \"error\": { \"code\", \"message\", ...extra fields } }.\n    const body = (await res.json().catch(() => ({})) as { error?: ErrorBody }).error ?? {}\n    throw new UploadError(explain(res.status, body, res.statusText), res.status, body.code ?? \"\", body)\n  }\n  const json = (body: unknown, extra: Record<string, string> = {}): RequestInit =>\n    ({ method: \"POST\", body: JSON.stringify(body), headers: { \"Content-Type\": \"application/json\", ...extra } })\n\n  async function putChunks(hashes: readonly string[]): Promise<number> {\n    const queue = [...new Set(hashes)].filter(h => chunkBytes.has(h))\n    const n = queue.length\n    await Promise.all(Array.from({ length: CONCURRENCY }, async () => {\n      for (let h = queue.shift(); h; h = queue.shift()) {\n        await call(\"/chunks\", { method: \"POST\", body: chunkBytes.get(h)! as Uint8Array<ArrayBuffer>, headers: { \"Content-Type\": \"application/octet-stream\", \"x-ezgh-sha256\": h, \"Idempotency-Key\": randomUUID() } })\n      }\n    }))\n    return n\n  }\n\n  let uploaded = 0\n  const all = [...chunkBytes.keys()]\n  for (let i = 0; i < all.length; i += MISSING_BATCH) {\n    const { missing } = await call(\"/chunks/missing\", json({ hashes: all.slice(i, i + MISSING_BATCH) })) as { missing: string[] }\n    uploaded += await putChunks(missing)\n  }\n  // Pairs stay together: sort by debug ID and cut only between IDs.\n  const sorted = [...entries].sort((a, b) => a.debugId.localeCompare(b.debugId) || a.kind.localeCompare(b.kind))\n  for (let i = 0; i < sorted.length;) {\n    let j = Math.min(i + COMMIT_BATCH, sorted.length)\n    while (j < sorted.length && j > i + 1 && sorted[j]!.debugId === sorted[j - 1]!.debugId) j--\n    const body = { application: t.application, release: t.release, files: sorted.slice(i, j) }\n    try {\n      await call(\"\", json(body, { \"Idempotency-Key\": randomUUID() }))\n    }\n    catch (e) {\n      const missing = e instanceof UploadError && e.status === 409 && e.code === \"chunks_missing\" ? e.body.details?.missing : undefined\n      if (!missing) throw e\n      // A chunk went away between chunks/missing and the commit: upload it, then commit once more.\n      uploaded += await putChunks(missing)\n      await call(\"\", json(body, { \"Idempotency-Key\": randomUUID() }))\n    }\n    t.log?.(`ezgh-rum: committed ${j - i} files for ${t.application}@${t.release}`)\n    i = j\n  }\n  return { files: entries.length, chunksUploaded: uploaded }\n}\n\nfunction explain(status: number, e: ErrorBody, statusText: string): string {\n  const code = e.code ?? \"\"\n  const message = e.message ?? statusText\n  if (status === 401 || status === 403) return \"the key can't upload source maps: give its owner the ObsSourceMapUploadAccess policy\"\n  if (code === \"debug_id_conflict\") {\n    const ids = e.details?.debugIds?.length ? e.details.debugIds.join(\", \") : message\n    return `debug ID ${ids} is already registered with different content: rebuild, then upload`\n  }\n  if (code === \"storage_limit_exceeded\") return \"the project's 10 GiB source-map storage is full: delete old releases (ezgh obs sourcemaps delete)\"\n  return `obs-api answered ${status} ${code}: ${message}`\n}\n"
+  ],
+  "mappings": ";AAEA;AACA;;;ACDA,qBAAS;AACT,iBAAS;;;ACCT,eAAsB,oBAAoB,CACxC,GACA,KAC6B;AAAA,EAC7B,MAAM,MAAM,EAAE,UAAU,IAAI;AAAA,EAC5B,IAAI;AAAA,IAAK,OAAO,UAAU;AAAA,EAC1B,QAAgB,8BAAV,KAA2D,gCAAnB,iBAAe;AAAA,EAC7D,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC;AAAA,IAAc;AAAA,EACtC,MAAM,IAAI,EAAE,SAAS;AAAA,EACrB,MAAM,WAAW,EAAE,KAAK,YAAY,EAAE;AAAA,EACtC,MAAM,QAAQ,MAAM,EAAE,GAAG,MAAM,IAAI,SAAS,GAAG,IAAI,MAAM,eAAe,mBAAmB,QAAQ,KAAK;AAAA,IACtG,SAAS,EAAE,eAAe,UAAU,eAAe;AAAA,EACrD,CAAC;AAAA,EACD,IAAI,CAAC,MAAM;AAAA,IAAI,MAAM,IAAI,MAAM,wDAAwD,MAAM,sDAAsD;AAAA,EACnJ,QAAQ,UAAU,MAAM,MAAM,KAAK;AAAA,EACnC,IAAI,CAAC;AAAA,IAAO,MAAM,IAAI,MAAM,yDAAyD;AAAA,EACrF,MAAM,WAAW,gBAAgB,EAAE,2BAA2B,mBAAmB,EAAE,cAAc,UAAU,mBAAmB,EAAE,KAAK,GAAG;AAAA,EACxI,SAAS,UAAU,IAAK,WAAW;AAAA,IAEjC,MAAM,MAAM,MAAM,EAAE,UAAU;AAAA,MAC5B,QAAQ;AAAA,MAAQ,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9D,MAAM,KAAK,UAAU,EAAE,OAAO,OAAO,MAAM,kBAAkB,kBAAkB,IAAI,CAAC;AAAA,IACtF,CAAC;AAAA,IACD,IAAI,IAAI,IAAI;AAAA,MACV,QAAQ,UAAU,MAAM,IAAI,KAAK;AAAA,MACjC,IAAI,CAAC;AAAA,QAAO,MAAM,IAAI,MAAM,4DAA4D;AAAA,MACxF,OAAO,UAAU;AAAA,IACnB;AAAA,IACA,KAAK,IAAI,WAAW,OAAO,IAAI,WAAW,QAAQ,UAAU,GAAG;AAAA,MAC7D,MAAM,KAAK,OAAO,IAAI,QAAQ,IAAI,aAAa,CAAC;AAAA,MAChD,MAAM,IAAI,QAAQ,OAAK,WAAW,GAAG,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,KAAK,IAAI,IAAI,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC;AAAA,MACnH;AAAA,IACF;AAAA,IACA,MAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAAA,IAC9C,MAAM,IAAI,MAAM,uCAAuC,EAAE,KAAK,eAAe,IAAI,UAAU,KAAK,OAAO,QAAQ,QAAQ,KAAK,OAAO,WAAW,IAAI,YAAY;AAAA,EAChK;AAAA;;;ACtCK,MAAM,oBAAoB,MAAM;AAAA,EAC5B,OAAO;AAClB;;;ACIA;AACA;AACA;AAKA,IAAM,OAAO,CAAC,QAAgB,gBAAgB,KAAK,GAAG;AACtD,IAAM,UAAU;AAEhB,eAAe,IAAI,CAAC,MAAc,KAAa,KAA8B;AAAA,EAC3E,WAAW,KAAK,MAAM,QAAQ,KAAK,MAAM,GAAG,GAAG,EAAE,eAAe,KAAK,CAAC,GAAG;AAAA,IACvE,MAAM,IAAI,MAAM,GAAG,OAAO,EAAE,SAAS,EAAE;AAAA,IACvC,IAAI,EAAE,YAAY,GAAG;AAAA,MACnB,IAAI,EAAE,SAAS;AAAA,QAAgB,MAAM,KAAK,MAAM,GAAG,GAAG;AAAA,IACxD,EACK,SAAI,EAAE,OAAO,KAAK,KAAK,EAAE,IAAI;AAAA,MAAG,IAAI,KAAK,CAAC;AAAA,EACjD;AAAA;AAGF,eAAe,SAAS,CAAC,GAA6B;AAAA,EACpD,IAAI;AAAA,IACF,QAAQ,MAAM,MAAM,CAAC,GAAG,OAAO;AAAA,IAEjC,MAAM;AAAA,IACJ,OAAO;AAAA;AAAA;AAIX,eAAe,MAAM,CAAC,MAAc,GAA6B;AAAA,EAC/D,IAAI;AAAA,IACF,MAAM,MAAM,SAAS,MAAM,MAAM,SAAS,CAAC,CAAC;AAAA,IAC5C,OAAO,QAAQ,MAAM,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,IAAI,MAAM,GAAG,EAAE,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,GAAG,KAAK,CAAC,IAAI,WAAW,GAAG;AAAA,IAEhI,MAAM;AAAA,IACJ,OAAO;AAAA;AAAA;AAIX,eAAe,MAAM,CAAC,KAAa,KAA0D;AAAA,EAC3F,MAAM,OAAO,MAAM,SAAS,KAAK,KAAK,GAAG,GAAG,QAAQ;AAAA,EACpD,MAAM,IAAI,QAAQ,KAAK,IAAI;AAAA,EAC3B,IAAI,GAAG;AAAA,IACL,MAAM,IAAI,EAAE;AAAA,IACZ,IAAI,EAAE,YAAY,EAAE,WAAW,OAAO;AAAA,MAAG,OAAO,CAAC,WAAW,yEAAyE;AAAA,IACrI,IAAI,MAAM;AAAA,MAAI,OAAO,CAAC,WAAW,uCAAuC;AAAA,IAGxE,IAAI,4BAA4B,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI;AAAA,MAAG,OAAO,CAAC,WAAW,wBAAwB,yBAAyB;AAAA,IACnI,IAAI,OAAO,EAAE,QAAQ,YAAY,EAAE;AAAA,IACnC,IAAI;AAAA,MACF,OAAO,mBAAmB,IAAI;AAAA,MAEhC,MAAM;AAAA,MACJ,OAAO,CAAC,WAAW,wBAAwB,yBAAyB;AAAA;AAAA,IAEtE,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,IAAI;AAAA,MAAG,OAAO,CAAC,WAAW,wBAAwB,yBAAyB;AAAA,IACrH,MAAM,SAAS,MAAM,UAAU,MAAM,KAAK,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC;AAAA,IACnE,IAAI,WAAW,QAAQ,OAAO,WAAW,KAAK;AAAA,MAAG,OAAO,CAAC,WAAW,kBAAkB,4BAA4B;AAAA,IAClH,MAAM,MAAM,KAAK,KAAK,GAAG,OAAO,MAAM,GAAG,CAAC;AAAA,IAC1C,IAAI,CAAE,MAAM,UAAU,GAAG;AAAA,MAAI,OAAO,CAAC,WAAW,kBAAkB,oBAAoB;AAAA,IACtF,IAAI,CAAE,MAAM,OAAO,KAAK,GAAG;AAAA,MAAI,OAAO,CAAC,WAAW,kBAAkB,gDAAgD;AAAA,IACpH,OAAO,CAAC,QAAQ,EAAE;AAAA,EACpB;AAAA,EACA,IAAI,MAAM,UAAU,KAAK,KAAK,GAAG,GAAG,UAAU,MAAM,GAAG,CAAC,CAAC;AAAA,IAAG,OAAO,CAAC,GAAG,WAAW,EAAE;AAAA,EACpF,OAAO,CAAC,WAAW,eAAe;AAAA;AAGpC,eAAsB,SAAS,CAAC,KAAa,SAAiD,KAA2C;AAAA,EACvI,IAAI,CAAC,WAAW,GAAG;AAAA,IAAG,OAAO,CAAC;AAAA,EAC9B,MAAM,OAAO,MAAM,SAAS,GAAG;AAAA,EAC/B,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,KAAK,MAAM,IAAI,KAAK;AAAA,EAC1B,MAAM,KAAK;AAAA,EACX,IAAI,QAAgB,CAAC;AAAA,EACrB,MAAM,UAAqB,CAAC;AAAA,EAC5B,WAAW,OAAO,OAAO;AAAA,IACvB,IAAI,WAAW,CAAC,QAAQ,GAAG;AAAA,MAAG;AAAA,IAC9B,OAAO,KAAK,UAAU,MAAM,OAAO,MAAM,GAAG;AAAA,IAC5C,IAAI,QAAQ;AAAA,MAAW,QAAQ,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;AAAA,IACpD;AAAA,YAAM,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC;AAAA,EAClC;AAAA,EACA,MAAM,QAAQ,IAAI;AAAA,EAClB,WAAW,KAAK;AAAA,IAAO,MAAM,IAAI,EAAE,KAAK,CAAC,GAAI,MAAM,IAAI,EAAE,GAAG,KAAK,CAAC,GAAI,EAAE,EAAE,CAAC;AAAA,EAC3E,QAAQ,MAAM,OAAO,CAAC,MAAM;AAAA,IAC1B,MAAM,KAAK,MAAM,IAAI,EAAE,GAAG;AAAA,IAC1B,IAAI,GAAG,SAAS;AAAA,MAAG,OAAO;AAAA,IAC1B,QAAQ,KAAK,EAAE,MAAM,EAAE,IAAI,QAAQ,kBAAkB,EAAE,eAAe,GAAG,OAAO,OAAK,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,mCAAmC,CAAC;AAAA,IAC9I,OAAO;AAAA,GACR;AAAA,EACD,MAAM,QAAQ,QAAQ,OAAO,OAAK,EAAE,WAAW,eAAe;AAAA,EAC9D,WAAW,KAAK,MAAM,MAAM,GAAG,EAAE;AAAA,IAAG,IAAI,qBAAqB,EAAE,SAAS,EAAE,QAAQ;AAAA,EAClF,IAAI,MAAM,SAAS;AAAA,IAAI,IAAI,qBAAqB,MAAM,SAAS,iBAAiB;AAAA,EAChF,MAAM,QAAQ,QAAQ,SAAS,MAAM;AAAA,EACrC,IAAI,QAAQ;AAAA,IAAG,IAAI,qBAAqB,uCAAuC;AAAA,EAC/E,OAAO;AAAA;;;ACnGT;;;ACCA,IAAM,WAAW;AACjB,IAAM,QAAQ,IAAI,IAAI,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAElD,SAAS,SAAS,CAAC,GAAW,IAA6C;AAAA,EAChF,IAAI,SAAS;AAAA,EACb,IAAI,QAAQ;AAAA,EACZ,SAAS,IAAI,GAAI,IAAI,EAAE,QAAQ,KAAK;AAAA,IAClC,MAAM,IAAI,MAAM,IAAI,EAAE,EAAG;AAAA,IACzB,IAAI,MAAM,aAAa,QAAQ;AAAA,MAAI,MAAM,IAAI,YAAY,wBAAwB;AAAA,IACjF,WAAW,IAAI,MAAM,KAAK;AAAA,IAC1B,SAAS;AAAA,IACT,KAAK,IAAI,QAAQ,GAAG;AAAA,MAClB,MAAM,WAAW,SAAS,MAAM;AAAA,MAChC,MAAM,YAAY,KAAK,MAAM,SAAS,CAAC;AAAA,MACvC,OAAO,EAAE,OAAO,WAAW,CAAC,YAAY,WAAW,MAAM,IAAI,EAAE;AAAA,IACjE;AAAA,EACF;AAAA,EACA,MAAM,IAAI,YAAY,wBAAwB;AAAA;AAGzC,SAAS,SAAS,CAAC,GAAmB;AAAA,EAC3C,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI;AAAA,EACjC,IAAI,MAAM;AAAA,EACV,GAAG;AAAA,IACD,IAAI,QAAQ,IAAI;AAAA,IAChB,IAAI,KAAK,MAAM,IAAI,EAAE;AAAA,IACrB,IAAI,IAAI;AAAA,MAAG,SAAS;AAAA,IACpB,OAAO,SAAS;AAAA,EAClB,SAAS,IAAI;AAAA,EACb,OAAO;AAAA;;;ADlBF,SAAS,OAAO,CAAC,IAAoB;AAAA,EAC1C,OAAO,oGACH,8GACA,KAAK;AAAA;AAOJ,SAAS,UAAU,CAAC,IAAgB,KAAyB;AAAA,EAClE,MAAM,IAAI,WAAW,QAAQ,EAAE,OAAO,mBAAiB,EAAE,OAAO,EAAE,EAAE,OAAO,MAAI,EAAE,OAAO,GAAG,EAAE,OAAO;AAAA,EACpG,EAAE,KAAM,EAAE,KAAM,KAAQ;AAAA,EACxB,EAAE,KAAM,EAAE,KAAM,KAAQ;AAAA,EACxB,MAAM,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,SAAS,KAAK;AAAA,EAC1C,OAAO,GAAG,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;AAAA;AAQxF,SAAS,YAAY,CAAC,UAAkB,MAAc,KAAa,OAAuB;AAAA,EAC/F,IAAI,QAAQ;AAAA,EACZ,SAAS,IAAI,EAAG,IAAI,MAAM,KAAK;AAAA,IAC7B,MAAM,IAAI,SAAS,QAAQ,KAAK,KAAK;AAAA,IACrC,IAAI,IAAI;AAAA,MAAG,OAAO;AAAA,IAClB,QAAQ,IAAI;AAAA,EACd;AAAA,EACA,MAAM,OAAO,SAAS,QAAQ,KAAK,KAAK;AAAA,EACxC,MAAM,MAAM,OAAO,IAAI,SAAS,SAAS;AAAA,EACzC,IAAI,MAAM;AAAA,EACV,SAAS,MAAM,MAAO,MAAM,OAAM;AAAA,IAChC,MAAM,QAAQ,SAAS,QAAQ,KAAK,GAAG;AAAA,IACvC,MAAM,SAAS,SAAS,KAAK,QAAQ,MAAM,QAAQ;AAAA,IACnD,IAAI,QAAQ,QAAQ;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,SAAS,UAAU,UAAU,GAAG;AAAA,IAC/C,IAAI,OAAO;AAAA,MAAQ,MAAM,IAAI,YAAY,wBAAwB;AAAA,IACjE,OAAO;AAAA,IACP,IAAI,OAAO;AAAA,MAAK,OAAO,SAAS,MAAM,GAAG,GAAG,IAAI,UAAU,QAAQ,KAAK,IAAI,SAAS,MAAM,IAAI;AAAA,IAC9F,MAAM,SAAS;AAAA,EACjB;AAAA,EACA,OAAO;AAAA;AAQF,SAAS,SAAS,CAAC,UAAkB,MAAc,KAAqB;AAAA,EAC7E,IAAI,QAAQ;AAAA,EACZ,SAAS,IAAI,EAAG,IAAI,MAAM,KAAK;AAAA,IAC7B,MAAM,IAAI,SAAS,QAAQ,KAAK,KAAK;AAAA,IACrC,IAAI,IAAI;AAAA,MAAG,OAAO;AAAA,IAClB,QAAQ,IAAI;AAAA,EACd;AAAA,EACA,MAAM,OAAO,SAAS,QAAQ,KAAK,KAAK;AAAA,EACxC,MAAM,MAAM,OAAO,IAAI,SAAS,SAAS;AAAA,EACzC,IAAI,MAAM;AAAA,EACV,SAAS,MAAM,MAAO,MAAM,OAAM;AAAA,IAChC,MAAM,QAAQ,SAAS,QAAQ,KAAK,GAAG;AAAA,IACvC,MAAM,SAAS,SAAS,KAAK,QAAQ,MAAM,QAAQ;AAAA,IACnD,IAAI,QAAQ,QAAQ;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,SAAS,UAAU,UAAU,GAAG;AAAA,IAC/C,IAAI,OAAO;AAAA,MAAQ,MAAM,IAAI,YAAY,wBAAwB;AAAA,IACjE,OAAO;AAAA,IACP,IAAI,OAAO;AAAA,MAAK,OAAO,SAAS,MAAM,GAAG,MAAM,QAAQ,MAAM,IAAI,GAAG,IAAI,MAAM,UAAU,MAAM,GAAG,IAAI,SAAS,MAAM,IAAI;AAAA,IACxH,MAAM,SAAS;AAAA,EACjB;AAAA,EACA,OAAO,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,GAAG;AAAA;AAM1D,IAAM,OAAO;AACb,IAAM,aAAa;AAEnB,IAAM,aAAa;AAGnB,IAAM,YAAY;AAElB,IAAM,eAAe;AACrB,IAAM,MAAM;AAGZ,SAAS,UAAU,CAAC,GAAW,MAAc,IAAoB;AAAA,EAC/D,MAAM,IAAI,CAAC,MAAe,IAAI,KAAK,EAAE,WAAW,CAAC,IAAI;AAAA,EACrD,MAAM,OAAO,CAAC,GAAW,KAAK,KAAM,KAAK,QAAS,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,KAAK;AAAA,EACxE,IAAI,IAAI;AAAA,EACR,SAAS,IAAI,KAAM,IAAI,MAAK;AAAA,IAC1B,MAAM,IAAI,EAAE,CAAC;AAAA,IACb,IAAI,IAAI;AAAA,MAAM,KAAK;AAAA,IACd,SAAI,KAAK,OAAQ,KAAK,OAAQ,KAAK,IAAI,CAAC;AAAA,MAAG,KAAK;AAAA,IAChD,SAAI,KAAK,OAAQ,KAAK,OAAQ,KAAK,IAAI,GAAG,MAAM,MAAO,MAAO,KAAM,MAAM,MAAO,MAAO,GAAI,KAAK,KAAK,IAAI,CAAC;AAAA,MAAG,KAAK;AAAA,IACnH,SAAI,KAAK,OAAQ,KAAK,OAAQ,KAAK,IAAI,GAAG,MAAM,MAAO,MAAO,KAAM,MAAM,MAAO,MAAO,GAAI,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG;AAAA,MAChI,KAAK;AAAA,MACL,KAAK;AAAA,IACP,EACK;AAAA,WAAK;AAAA,IACV,KAAK;AAAA,EACP;AAAA,EACA,OAAO;AAAA;AAQT,SAAS,cAAc,CAAC,MAA4D;AAAA,EAClF,MAAM,QAAQ,KAAK,WAAW,GAAG,IAAI,IAAI,SAAS;AAAA,EAClD,IAAI,KAAK;AAAA,EACT,IAAI,KAAK,WAAW,MAAM,EAAE,GAAG;AAAA,IAC7B,MAAM,KAAK,KAAK,QAAQ;AAAA,GAAM,EAAE;AAAA,IAChC,KAAK,KAAK,IAAI,KAAK,SAAS,KAAK;AAAA,EACnC;AAAA,EACA,SAAS,IAAI,UAAU,KAAK,KAAK,MAAM,EAAE,CAAC,EAAG,KAAK,EAAE,GAAG,SAAS,GAAG,IAAI,UAAU,KAAK,KAAK,MAAM,EAAE,CAAC;AAAA,IAAG,MAAM,EAAE,GAAG;AAAA,EAClH,IAAI,OAAO;AAAA,EACX,SAAS,IAAI,KAAK,QAAQ;AAAA,CAAI,EAAG,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ;AAAA,GAAM,IAAI,CAAC;AAAA,IAAG;AAAA,EAClF,IAAI,YAAY,OAAO,IAAI,IAAI,KAAK,YAAY;AAAA,GAAM,KAAK,CAAC,IAAI;AAAA,EAChE,IAAI,cAAc;AAAA,IAAG,YAAY;AAAA,EACjC,OAAO,EAAE,IAAI,MAAM,QAAQ,WAAW,MAAM,WAAW,EAAE,EAAE;AAAA;AAStD,SAAS,aAAa,CAAC,SAAiB,UAA4B;AAAA,EACzE,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,KAAK,MAAM,SAAS,SAAS,MAAM,CAAC;AAAA,IAE5C,MAAM;AAAA,IACJ,MAAM,IAAI,YAAY,yBAAyB;AAAA;AAAA,EAEjD,IAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG;AAAA,IAAG,MAAM,IAAI,YAAY,yBAAyB;AAAA,EAClH,MAAM,IAAI;AAAA,EACV,IAAI,cAAc;AAAA,IAAG,MAAM,IAAI,YAAY,gGAAgG;AAAA,EAC3I,IAAI,EAAE,YAAY,KAAK,OAAO,EAAE,aAAa;AAAA,IAAU,MAAM,IAAI,YAAY,4CAA4C;AAAA,EACzH,IAAI,aAAa,KAAK,EAAE,OAAO,EAAE,YAAY,YAAY,KAAK,KAAK,EAAE,QAAQ,YAAY,CAAC;AAAA,IAAI,MAAM,IAAI,YAAY,iCAAiC;AAAA,EAErJ,MAAM,KAAK,QAAQ,SAAS,QAAQ;AAAA,EACpC,MAAM,cAAc,WAAW,KAAK,EAAE,IAAI,IAAI,YAAY;AAAA,EAC1D,MAAM,cAAc,CAAC,GAAG,GAAG,SAAS,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,YAAY;AAAA,EAC1E,MAAM,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,QAAQ,YAAY,IAAI;AAAA,EAC1E,WAAW,KAAK,CAAC,aAAa,WAAW;AAAA,IAAG,IAAI,MAAM,aAAa,CAAC,KAAK,KAAK,CAAC;AAAA,MAAG,MAAM,IAAI,YAAY,qCAAqC,IAAI;AAAA,EACjJ,MAAM,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,aAAa,aAAa,OAAO,EAAE,OAAO,CAAC,MAAmB,MAAM,SAAS,CAAC,CAAC;AAAA,EACxG,IAAI,IAAI,SAAS;AAAA,IAAG,MAAM,IAAI,YAAY,sBAAsB,IAAI,UAAU,IAAI,8BAA8B;AAAA,EAChH,IAAI,WAAW,CAAC,eAAe,CAAC;AAAA,IAAa,MAAM,IAAI,YAAY,qHAAqH;AAAA,EACxL,IAAI,eAAe,eAAe;AAAA,IAAS,OAAO,EAAE,MAAM,OAAO,KAAK,OAAO,GAAG,KAAK,OAAO,KAAK,QAAQ,GAAG,SAAS,aAAa,SAAS,KAAK;AAAA,EAChJ,MAAM,KAAK,IAAI,MAAM,WAAW,SAAS,QAAQ;AAAA,EAEjD,IAAI,OAAO;AAAA,EACX,IAAI,WAAW,EAAE;AAAA,EACjB,IAAI,CAAC,aAAa;AAAA,IAChB,QAAQ,IAAI,MAAM,WAAW,eAAe,IAAI;AAAA,IAChD,MAAM,IAAI,QAAQ,EAAE;AAAA,IACpB,IAAI,OAAO,KAAK,UAAU,CAAC,KAAK,SAAS;AAAA,CAAI,KAAK,KAAK,MAAM,KAAK,WAAW,GAAG,IAAI,IAAI,SAAS,CAAC,EAAE,WAAW,IAAI,GAAG;AAAA,MAEpH,QAAQ;AAAA,IAAO;AAAA,IACjB,EACK,SAAI,KAAK,WAAW,MAAM,EAAE,GAAG;AAAA,MAElC,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,IAAI;AAAA,IAAO,KAAK,MAAM,EAAE;AAAA,MACnD,WAAW,UAAU,UAAU,MAAM,MAAM;AAAA,IAC7C,EACK;AAAA,MACH,OAAO,KAAK,MAAM,GAAG,EAAE,IAAI,IAAI,KAAK,MAAM,EAAE;AAAA,MAC5C,WAAW,aAAa,UAAU,MAAM,QAAQ,EAAE,MAAM;AAAA;AAAA,EAE5D;AAAA,EACA,IAAI,CAAC,aAAa;AAAA,IAChB,MAAM,IAAI,aAAa,KAAK,IAAI;AAAA,IAChC,MAAM,UAAU,eAAe;AAAA;AAAA,IAC/B,IAAI,GAAG;AAAA,MACL,MAAM,IAAI,EAAE,QAAQ,EAAE,GAAI;AAAA,MAC1B,OAAO,KAAK,MAAM,GAAG,CAAC,IAAI,UAAU,KAAK,MAAM,CAAC;AAAA,IAClD,EACK;AAAA,MACH,SAAS,KAAK,SAAS;AAAA,CAAI,IAAI,KAAK;AAAA,KAAQ;AAAA;AAAA,EAEhD;AAAA,EACA,OAAO,EAAE,MAAM,OAAO,KAAK,MAAM,QAAQ,GAAG,KAAK,OAAO,KAAK,KAAK,UAAU,KAAK,GAAG,SAAS,IAAI,SAAS,CAAC,CAAC,GAAG,SAAS,IAAI,SAAS,MAAM;AAAA;;;AE9M7I,uBAAS;AAEF,IAAM,cAAc,IAAI,OAAO;AAC/B,IAAM,gBAAgB;AACtB,IAAM,eAAe;AAC5B,IAAM,cAAc;AACpB,IAAM,WAAW;AAAA;AAeV,MAAM,oBAAoB,MAAM;AAAA,EAEC;AAAA,EAAyB;AAAA,EAAuB;AAAA,EAD7E,OAAO;AAAA,EAChB,WAAW,CAAC,SAA0B,QAAyB,MAAuB,MAAiB;AAAA,IACrG,MAAM,OAAO;AAAA,IADuB;AAAA,IAAyB;AAAA,IAAuB;AAAA;AAGxF;AAEA,IAAM,SAAS,CAAC,MAA0B,YAAW,QAAQ,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK;AACrF,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAQ,OAAK,WAAW,GAAG,EAAE,CAAC;AAEhE,eAAsB,MAAM,CAAC,GAAiB,OAAkF;AAAA,EAC9H,MAAM,IAAI,EAAE,SAAS;AAAA,EACrB,MAAM,OAAO,GAAG,EAAE,OAAO,QAAQ,QAAQ,EAAE,sBAAsB,EAAE,2BAA2B,EAAE;AAAA,EAChG,MAAM,aAAa,IAAI;AAAA,EACvB,MAAM,UAAU,MAAM,IAAI,CAAC,SAAS;AAAA,IAClC,MAAM,SAAmB,CAAC;AAAA,IAC1B,SAAS,IAAI,EAAG,IAAI,KAAK,MAAM,cAAc,MAAM,GAAG,KAAK,aAAa;AAAA,MACtE,MAAM,OAAO,KAAK,MAAM,SAAS,GAAG,IAAI,WAAW;AAAA,MACnD,MAAM,IAAI,OAAO,IAAI;AAAA,MACrB,OAAO,KAAK,CAAC;AAAA,MACb,WAAW,IAAI,GAAG,IAAI;AAAA,IACxB;AAAA,IAEA,OAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK,MAAM,YAAY,OAAO;AAAA,GACvG;AAAA,EAED,eAAe,IAAI,CAAC,MAAc,MAAmB,UAAU,GAAqB;AAAA,IAClF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,MAAM,MAAM,EAAE,OAAO,MAAM,KAAK,MAAM,SAAS,EAAE,eAAe,EAAE,kBAAmB,KAAK,QAAmC,EAAE,CAAC;AAAA,MAElI,OAAO,GAAG;AAAA,MACR,IAAI,UAAU,KAAK;AAAA,QAAU,MAAM;AAAA,MACnC,MAAM,MAAM,OAAO,KAAK,OAAO;AAAA,MAC/B,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAAA;AAAA,IAErC,IAAI,IAAI;AAAA,MAAI,OAAO,IAAI,WAAW,MAAM,YAAY,IAAI,KAAK;AAAA,IAC7D,MAAM,KAAK,OAAO,IAAI,QAAQ,IAAI,aAAa,CAAC;AAAA,IAChD,KAAK,IAAI,WAAW,OAAO,IAAI,UAAU,QAAQ,UAAU,IAAI,UAAU;AAAA,MACvE,MAAM,IAAI,MAAM,OAAO,EAAE,MAAM,MAAG;AAAA,QAAG;AAAA,OAAS;AAAA,MAC9C,MAAM,MAAM,OAAO,SAAS,EAAE,KAAK,KAAK,IAAI,KAAK,IAAI,IAAI,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO;AAAA,MACzF,OAAO,KAAK,MAAM,MAAM,UAAU,CAAC;AAAA,IACrC;AAAA,IAEA,MAAM,QAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,GAA4B,SAAS,CAAC;AAAA,IACrF,MAAM,IAAI,YAAY,QAAQ,IAAI,QAAQ,MAAM,IAAI,UAAU,GAAG,IAAI,QAAQ,KAAK,QAAQ,IAAI,IAAI;AAAA;AAAA,EAEpG,MAAM,OAAO,CAAC,MAAe,QAAgC,CAAC,OAC3D,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,IAAI,GAAG,SAAS,EAAE,gBAAgB,uBAAuB,MAAM,EAAE;AAAA,EAE3G,eAAe,SAAS,CAAC,QAA4C;AAAA,IACnE,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,EAAE,OAAO,OAAK,WAAW,IAAI,CAAC,CAAC;AAAA,IAChE,MAAM,IAAI,MAAM;AAAA,IAChB,MAAM,QAAQ,IAAI,MAAM,KAAK,EAAE,QAAQ,YAAY,GAAG,YAAY;AAAA,MAChE,SAAS,IAAI,MAAM,MAAM,EAAG,GAAG,IAAI,MAAM,MAAM,GAAG;AAAA,QAChD,MAAM,KAAK,WAAW,EAAE,QAAQ,QAAQ,MAAM,WAAW,IAAI,CAAC,GAA+B,SAAS,EAAE,gBAAgB,4BAA4B,iBAAiB,GAAG,mBAAmB,WAAW,EAAE,EAAE,CAAC;AAAA,MAC7M;AAAA,KACD,CAAC;AAAA,IACF,OAAO;AAAA;AAAA,EAGT,IAAI,WAAW;AAAA,EACf,MAAM,MAAM,CAAC,GAAG,WAAW,KAAK,CAAC;AAAA,EACjC,SAAS,IAAI,EAAG,IAAI,IAAI,QAAQ,KAAK,eAAe;AAAA,IAClD,QAAQ,YAAY,MAAM,KAAK,mBAAmB,KAAK,EAAE,QAAQ,IAAI,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC,CAAC;AAAA,IACnG,YAAY,MAAM,UAAU,OAAO;AAAA,EACrC;AAAA,EAEA,MAAM,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,cAAc,EAAE,OAAO,KAAK,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAAA,EAC7G,SAAS,IAAI,EAAG,IAAI,OAAO,UAAS;AAAA,IAClC,IAAI,IAAI,KAAK,IAAI,IAAI,cAAc,OAAO,MAAM;AAAA,IAChD,OAAO,IAAI,OAAO,UAAU,IAAI,IAAI,KAAK,OAAO,GAAI,YAAY,OAAO,IAAI,GAAI;AAAA,MAAS;AAAA,IACxF,MAAM,OAAO,EAAE,aAAa,EAAE,aAAa,SAAS,EAAE,SAAS,OAAO,OAAO,MAAM,GAAG,CAAC,EAAE;AAAA,IACzF,IAAI;AAAA,MACF,MAAM,KAAK,IAAI,KAAK,MAAM,EAAE,mBAAmB,WAAW,EAAE,CAAC,CAAC;AAAA,MAEhE,OAAO,GAAG;AAAA,MACR,MAAM,UAAU,aAAa,eAAe,EAAE,WAAW,OAAO,EAAE,SAAS,mBAAmB,EAAE,KAAK,SAAS,UAAU;AAAA,MACxH,IAAI,CAAC;AAAA,QAAS,MAAM;AAAA,MAEpB,YAAY,MAAM,UAAU,OAAO;AAAA,MACnC,MAAM,KAAK,IAAI,KAAK,MAAM,EAAE,mBAAmB,WAAW,EAAE,CAAC,CAAC;AAAA;AAAA,IAEhE,EAAE,MAAM,uBAAuB,IAAI,eAAe,EAAE,eAAe,EAAE,SAAS;AAAA,IAC9E,IAAI;AAAA,EACN;AAAA,EACA,OAAO,EAAE,OAAO,QAAQ,QAAQ,gBAAgB,SAAS;AAAA;AAG3D,SAAS,OAAO,CAAC,QAAgB,GAAc,YAA4B;AAAA,EACzE,MAAM,OAAO,EAAE,QAAQ;AAAA,EACvB,MAAM,UAAU,EAAE,WAAW;AAAA,EAC7B,IAAI,WAAW,OAAO,WAAW;AAAA,IAAK,OAAO;AAAA,EAC7C,IAAI,SAAS,qBAAqB;AAAA,IAChC,MAAM,MAAM,EAAE,SAAS,UAAU,SAAS,EAAE,QAAQ,SAAS,KAAK,IAAI,IAAI;AAAA,IAC1E,OAAO,YAAY;AAAA,EACrB;AAAA,EACA,IAAI,SAAS;AAAA,IAA0B,OAAO;AAAA,EAC9C,OAAO,oBAAoB,UAAU,SAAS;AAAA;;;AN7EhD,eAAsB,aAAa,CAAC,KAAa,IAAyB,CAAC,GAAoD;AAAA,EAC7H,MAAM,MAAM,EAAE,QAAQ,CAAC,MAAc,QAAQ,IAAI,CAAC;AAAA,EAClD,IAAI;AAAA,IACF,OAAO,MAAM,IAAI,KAAK,GAAG,GAAG;AAAA,IAE9B,OAAO,GAAG;AAAA,IACR,IAAI,EAAE,eAAe;AAAA,MAAM,MAAM;AAAA,IACjC,IAAI,aAAa,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,GAAG;AAAA,IAC7D,OAAO,EAAE,UAAU,GAAG,UAAU,EAAE;AAAA;AAAA;AAItC,eAAe,GAAG,CAAC,KAAa,GAAwB,KAA2E;AAAA,EACjI,MAAM,MAAM,QAAQ;AAAA,EACpB,MAAM,QAAQ,MAAM,UAAU,KAAK,EAAE,SAAS,GAAG;AAAA,EACjD,MAAM,QAAsB,CAAC,GAAG,MAAoB,CAAC;AAAA,EACrD,MAAM,SAAS,EAAE,cAAc;AAAA,EAC/B,IAAI,WAAW;AAAA,EACf,WAAW,KAAK,OAAO;AAAA,IACrB,MAAM,SAAS,MAAK,KAAK,EAAE,EAAE,GAAG,UAAU,MAAK,KAAK,EAAE,GAAG;AAAA,IACzD,OAAO,IAAI,OAAO,MAAM,QAAQ,IAAI,CAAC,UAAS,MAAM,GAAG,UAAS,OAAO,CAAC,CAAC;AAAA,IACzE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,MAAM,cAAc,IAAI,GAAG;AAAA,MAE7B,OAAO,GAAG;AAAA,MACR,IAAI,aAAa;AAAA,QAAa,MAAM,IAAI,MAAM,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAAA,MAC5F,MAAM;AAAA;AAAA,IAER,IAAI,CAAC,IAAI,SAAS;AAAA,MAChB,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE;AAAA,QAAG,MAAM,UAAU,QAAQ,IAAI,IAAI;AAAA,MAC1D,IAAI,CAAC,IAAI,IAAI,OAAO,GAAG;AAAA,QAAG,MAAM,UAAU,SAAS,IAAI,GAAG;AAAA,MAC1D;AAAA,IACF;AAAA,IACA,MAAM,QAAsB;AAAA,MAC1B,EAAE,SAAS,IAAI,SAAS,MAAM,SAAS,EAAE,IAAI,MAAM,MAAM,OAAO,IAAI,KAAK;AAAA,MACzE,EAAE,SAAS,IAAI,SAAS,MAAM,SAAS,EAAE,KAAK,MAAM,OAAO,OAAO,IAAI,IAAI;AAAA,IAC5E;AAAA,IACA,IAAI,KAAK,GAAG,KAAK;AAAA,IACjB,IAAI,CAAC,IAAI;AAAA,MAAS,MAAM,KAAK,GAAG,KAAK;AAAA,EACvC;AAAA,EAGA,MAAM,MAAM,MAAM,SAAS,IAAI,QAAQ;AAAA,EACvC,MAAM,aAAa,CAAC,UAClB,QAAQ,IAAI,MAAM,OAAO,OAAK,EAAE,SAAS,KAAK,EAAE,IAAI,OAAK,OAAO,MAAK,KAAK,EAAE,KAAK,MAAM,OAAO,MAAM,CAAC,CAAC,EAAE,MAAM,MAAG;AAAA,IAAG;AAAA,GAAS,CAAC,CAAC;AAAA,EACjI,IAAI,EAAE,WAAW,SAAS,IAAI,WAAW,GAAG;AAAA,IAC1C,IAAI,WAAW;AAAA,MAAG,IAAI,qCAAqC,gBAAgB;AAAA,IAC3E,IAAI,EAAE;AAAA,MAAkB,MAAM,WAAW,GAAG;AAAA,IAC5C,OAAO,EAAE,UAAU,UAAU,EAAE;AAAA,EACjC;AAAA,EACA,MAAM,cAAc,EAAE,eAAe,IAAI;AAAA,EACzC,MAAM,UAAU,EAAE,WAAW,IAAI;AAAA,EACjC,MAAM,iBAAiB,EAAE,kBAAkB,IAAI;AAAA,EAC/C,MAAM,YAAY,EAAE,aAAa,IAAI;AAAA,EACrC,MAAM,SAAS,EAAE,UAAU,IAAI,eAAe;AAAA,EAC9C,MAAM,gBAAgB,iBAClB,MAAM,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,MAAM,EAAE,MAAM,gBAAgB,QAAQ,OAAO,EAAE,MAAM,GAAG,GAAG,IAC1G;AAAA,EACJ,MAAM,QAAQ;AAAA,IACZ,CAAC,iBAAiB;AAAA,IAA0B,CAAC,kBAAkB;AAAA,IAC/D,CAAC,aAAa;AAAA,IAA4B,CAAC,eAAe;AAAA,IAAe,CAAC,WAAW;AAAA,EACvF,EAAE,OAAO,OAAO;AAAA,EAChB,IAAI,MAAM,SAAS,GAAG;AAAA,IACpB,IAAI,qCAAqC,sCAAsC,MAAM,KAAK,IAAI,GAAG;AAAA,IACjG,IAAI,EAAE;AAAA,MAAkB,MAAM,WAAW,GAAG;AAAA,IAC5C,OAAO,EAAE,UAAU,UAAU,EAAE;AAAA,EACjC;AAAA,EACA,MAAM,IAAI,MAAM,OAAO;AAAA,IACrB,QAAQ,eAAe;AAAA,IAAU;AAAA,IAAiC;AAAA,IAAuB;AAAA,IACzF;AAAA,IAAmB;AAAA,IAA+B,OAAO,EAAE;AAAA,IAAO;AAAA,EACpE,GAAG,GAAG;AAAA,EACN,IAAI,EAAE;AAAA,IAAkB,MAAM,WAAW,GAAG;AAAA,EACvC,SAAI,EAAE;AAAA,IAAuB,MAAM,WAAW,GAAG;AAAA,EACtD,OAAO,EAAE,UAAU,UAAU,EAAE,MAAM;AAAA;;;AD1GvC,SAAS,YAAY,CAAC,GAAiB,aAA+B;AAAA,EACpE,IAAI,EAAE,aAAc,eAAe,CAAC,EAAE,QAAQ;AAAA,IAAU,OAAO;AAAA,EAC/D,MAAM,IAAI,EAAE,QAAQ;AAAA,EACpB,MAAM,WAAW,MAAM,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ;AAAA,EAC7F,OAAO,CAAC,QAAQ,KAAK,OAAK,8CAA8C,KAAK,CAAC,CAAC;AAAA;AAG1E,IAAM,eAAkE,eAAe,CAAC,IAAqC,CAAC,MAAM;AAAA,EACzI,IAAI,SAA6B,UAAU;AAAA,EAC3C,OAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,cAAc,CAAC,GAAG;AAAA,QAChB,UAAU,QAAQ,EAAE,MAAM,EAAE,MAAM,MAAM;AAAA,QACxC,UAAU,QAAQ,EAAE,MAAM,GAAG;AAAA;AAAA,WAEzB,YAAW,CAAC,KAAK;AAAA,QACrB,MAAM,MAAO,KAA8D;AAAA,QAC3E,IAAI,WAAY,KAAK,QAAQ,aAAa,aAAa,IAAI,OAAO,aAAa;AAAA,UAAW;AAAA,QAC1F,MAAM,cAAc,IAAI,OAAO,SAAU,CAAC;AAAA;AAAA,IAE9C;AAAA,IACA,QAAQ;AAAA,WACA,YAAW,CAAC,KAAK;AAAA,QACrB,MAAM,cAAc,IAAI,OAAO,QAAQ,IAAI,IAAK,GAAG,CAAC;AAAA;AAAA,IAExD;AAAA,IACA,OAAO,CAAC,UAAU;AAAA,MAChB,MAAM,IAAI;AAAA,MACV,EAAE,MAAM,UAAU,WAAW,kBAAkB,YAAY;AAAA,QACzD,IAAI,CAAC,aAAa,GAAG,IAAI;AAAA,UAAG;AAAA,QAC5B,MAAM,cAAc,EAAE,QAAQ,OAAO,MAAO,CAAC;AAAA,OAC9C;AAAA;AAAA,IAEH,MAAM,CAAC,UAAU;AAAA,MAEf,MAAM,IAAI;AAAA,MACV,EAAE,MAAM,UAAU,WAAW,kBAAkB,YAAY;AAAA,QACzD,IAAI,CAAC,aAAa,GAAG,IAAI;AAAA,UAAG;AAAA,QAC5B,MAAM,cAAc,EAAE,QAAQ,OAAO,MAAO,CAAC;AAAA,OAC9C;AAAA;AAAA,IAEH,SAAS;AAAA,MACP,KAAK,CAAC,OAAO;AAAA,QACX,MAAM,MAAM,OAAO,MAAM;AAAA,UACvB,MAAM,KAAK,MAAM;AAAA,UACjB,IAAI,EAAE,OAAO,UAAU,GAAG,UAAU;AAAA,YAAO;AAAA,UAC3C,MAAM,cAAc,GAAG,UAAU,QAAQ,GAAG,OAAQ,GAAG,CAAC;AAAA,SACzD;AAAA;AAAA,IAEL;AAAA,EACF;AAAA,CACD;",
+  "debugId": "61B216F94AC531CE64756E2164756E21",
+  "names": []
+}

package/dist/inject.d.ts

@@ -0,0 +1,38 @@
+import { InjectError } from "./errors.ts";
+export { InjectError };
+export interface Injected {
+    code: Buffer;
+    map: Buffer;
+    debugId: string;
+    already: boolean;
+}
+/**
+ * The registration code inserted into every JS file: one line, no newline. It registers the debug
+ * ID under the Error stack of the code that runs it, so the SDK maps the script's URL (the stack's
+ * first frame) to its debug ID. It never throws.
+ */
+export declare function snippet(id: string): string;
+/**
+ * A file pair's debug ID, from its content: SHA-256 of "ezgh-debug-id\0" + js + "\0" + map, the
+ * first 16 bytes with the RFC 9562 version (4) and variant bits, as a lowercase UUID.
+ */
+export declare function debugIdFor(js: Uint8Array, map: Uint8Array): string;
+/**
+ * Moves every mapping of generated line `line` at column >= `col` right by `delta`. Generated
+ * columns are relative within a line, so only the first such segment's first field changes; every
+ * other byte of `mappings` stays as it is.
+ */
+export declare function shiftColumns(mappings: string, line: number, col: number, delta: number): string;
+/**
+ * Moves the mappings of generated line `line` at column >= `col` to a new line after it, their
+ * columns less `col`. Only the first moved segment's generated column changes (the other fields
+ * are relative across lines); a line with nothing at `col` or after gains an empty line.
+ */
+export declare function splitLine(mappings: string, line: number, col: number): string;
+/**
+ * Adds the debug ID to a JS file and its source map: the snippet after a BOM, a shebang line and
+ * the directive prologue (with the map's columns shifted), a `//# debugId=` comment before a
+ * trailing `sourceMappingURL` line (or at the end), and the map's `debugId`. `already` is true,
+ * with the input unchanged, when all three are there and agree.
+ */
+export declare function injectDebugId(jsBytes: Buffer, mapBytes: Buffer): Injected;

package/dist/process.d.ts

@@ -0,0 +1,40 @@
+import { type OidcOptions } from "./auth.ts";
+export interface EzghRumBuildOptions {
+    /** Default env EZGH_RUM_APPLICATION; required to upload. */
+    application?: string;
+    /** Default env EZGH_RUM_RELEASE; required to upload. */
+    release?: string;
+    /** The organization's UUID; default env EZGH_ORG. */
+    organizationId?: string;
+    /** The project's UUID; default env EZGH_PROJECT. */
+    projectId?: string;
+    /** Default env EZGH_API_KEY (setup-ezgh sets it from OIDC). */
+    apiKey?: string;
+    /** GitHub Actions OIDC → a short-lived bot key, when there's no API key. */
+    oidc?: OidcOptions;
+    /** Default env EZGH_DOMAIN, else "ezghcloud.com"; uploads go to https://obs.<domain>. */
+    domain?: string;
+    /** Default true; false only injects. */
+    upload?: boolean;
+    /** Default true: an error fails the build. False logs it instead. */
+    failOnError?: boolean;
+    /** Default false (withEzghRum: true): delete the uploaded .map files from the output. */
+    deleteMapsAfterUpload?: boolean;
+    /** Default: .js, .mjs and .cjs files outside node_modules. */
+    include?: (relPath: string) => boolean;
+    /** Prefixed to committed paths (withEzghRum: "_next/static/"). */
+    pathPrefix?: string;
+    /**
+     * @internal withEzghRum: delete every .map file of the processed pairs, uploaded or not (it turned
+     * productionBrowserSourceMaps on, so maps must never be left to be served).
+     */
+    deleteMapsAlways?: boolean;
+    /** @internal For tests: the fetch used for obs-api and org-api. */
+    fetch?: typeof fetch;
+    /** @internal For tests: where log lines go (default console.log). */
+    log?: (m: string) => void;
+}
+export declare function processOutput(dir: string, o?: EzghRumBuildOptions): Promise<{
+    injected: number;
+    uploaded: number;
+}>;

package/dist/upload.d.ts

@@ -0,0 +1,39 @@
+export declare const CHUNK_BYTES: number;
+export declare const MISSING_BATCH = 1000;
+export declare const COMMIT_BATCH = 1000;
+export interface UploadFile {
+    debugId: string;
+    path: string;
+    kind: "js" | "map";
+    bytes: Uint8Array;
+}
+export interface UploadTarget {
+    apiUrl: string;
+    organizationId: string;
+    projectId: string;
+    application: string;
+    release: string;
+    authorization: string;
+    fetch?: typeof fetch;
+    log?: (m: string) => void;
+}
+interface ErrorBody {
+    code?: string;
+    message?: string;
+    details?: {
+        missing?: string[];
+        debugIds?: string[];
+    };
+}
+export declare class UploadError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly body: ErrorBody;
+    name: string;
+    constructor(message: string, status: number, code: string, body: ErrorBody);
+}
+export declare function upload(t: UploadTarget, files: readonly UploadFile[]): Promise<{
+    files: number;
+    chunksUploaded: number;
+}>;
+export {};

package/dist/vlq.d.ts

@@ -0,0 +1,5 @@
+export declare function vlqDecode(s: string, at: number): {
+    value: number;
+    next: number;
+};
+export declare function vlqEncode(v: number): string;

package/package.json

@@ -1,6 +1,42 @@
 {
   "name": "@ezghcloud/rum-build",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Build plugin for @ezghcloud/rum (Vite, webpack, Rollup, esbuild, Rspack): debug-ID injection and source-map upload to EZGH Observability",
+  "license": "Apache-2.0",
+  "type": "module",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ezgamehost/ezgh-rum-js.git",
+    "directory": "packages/rum-build"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "dependencies": {
+    "unplugin": "2.3.10"
+  },
+  "devDependencies": {
+    "vite": "8.3.1",
+    "webpack": "5.102.1",
+    "rollup": "4.52.5",
+    "esbuild": "0.25.11"
+  }
+}