@feltdb/core 0.13.0 → 0.15.0

package/dist/db.js

@@ -8,10 +8,11 @@ import { describeFreshness, readRevision, } from './freshness.js';
 import { Collection, Relationship } from './collection.js';
 import { AtomicTransactionBuilder, AtomicTransactionError, ConditionalConflictError, TransactionIdConflictError, TransactionIdUnverifiableError, conditionalRefusal, normaliseReadSet, } from './transaction.js';
 import { CellImpl } from './cell.js';
-import { createAgentRef } from './agent.js';
+import { createAgentRef, parseAgentRef } from './agent.js';
 import { AgentRegistry } from './agent-registry.js';
 import { AgentRuntime } from './agent-runtime.js';
 import { MemoryJsDb } from './memory-db.js';
+import { getReactiveDependencyGraph } from './reactive-graph.js';
 import { HttpJsDb } from './http-db.js';
 import { IndexedDbJsDb } from './indexeddb-db.js';
 import { requireRuntime } from './runtime-registry.js';
@@ -62,6 +63,7 @@ function explicitDeployment(options) {
             applicationId: options.server.applicationId,
             environment: options.server.environment,
             requestTimeoutMs: options.server.requestTimeoutMs,
+            allowServiceKeyInBrowser: options.server.operatorConsole === true,
         };
     }
     if (options.browser)
@@ -85,11 +87,12 @@ export function createFeltDB(options = {}) {
         environment: deployment.environment,
         requestTimeoutMs: options.server?.requestTimeoutMs,
         authorityScope,
+        allowServiceKeyInBrowser: options.server?.operatorConsole === true,
     })
         : deployment.mode === 'browser' ? new IndexedDbJsDb(deployment.namespace)
             : deployment.mode === 'local' ? requireRuntime('file', deployment.path, 'createFeltDB() resolved to the local Node runtime, but the Node file runtime is not available here. '
                 + 'In a browser use FELTDB_MODE=browser or createFeltDB({ browser: true }); in Node import "@feltdb/core" '
-                + 'rather than a browser-conditioned build.')
+                + 'rather than a browser-conditioned build.', { access: options.access ?? 'exclusive' })
                 : new MemoryJsDb(deployment.namespace);
     const runtimeName = deployment.mode === 'local' ? 'node' : deployment.mode;
     const bridge = attachDevelopmentRuntimeBridge({
@@ -134,6 +137,13 @@ function observeRuntime(runtime, observation) {
  * State-first database interface.
  * Applications use this to treat FeltDB collections as live application state.
  */
+/** Where embedded agent executions are durable. */
+const AGENT_EXECUTION_COLLECTION = '_flow_agent_executions';
+/** Indexes `findAgentExecution` reads through: newest first per task and per agent. */
+const AGENT_EXECUTION_INDEXES = [
+    { name: 'agent_executions_by_task_created', type: 'compound', fields: ['taskId', 'createdMs', 'id'], directions: ['asc', 'desc', 'asc'], persistent: true },
+    { name: 'agent_executions_by_agent_created', type: 'compound', fields: ['agentRef', 'createdMs', 'id'], directions: ['asc', 'desc', 'asc'], persistent: true },
+];
 export class StateFirstDB {
     jsDb;
     collections = new Map();
@@ -232,6 +242,15 @@ export class StateFirstDB {
             },
         };
         this.agentRuntime = new AgentRuntime(this.agentRegistry, agentConfig);
+        this.agentRuntime.bindStore({
+            create: execution => this.collection(AGENT_EXECUTION_COLLECTION)
+                .insert(this.agentExecutionRecord(execution), execution.executionId)
+                .then(() => undefined),
+            update: execution => this.collection(AGENT_EXECUTION_COLLECTION)
+                .update(execution.executionId, this.agentExecutionRecord(execution))
+                .then(() => undefined),
+            find: query => this.queryAgentExecution(query),
+        });
         // Emit initialization telemetry event
         // Non-blocking, fails silently if telemetry unavailable
         emitTelemetry('initialize');
@@ -344,6 +363,7 @@ export class StateFirstDB {
             replication: typeof this.jsDb.export_operations === 'function' || typeof this.jsDb.apply_remote_operations === 'function',
             remoteAuthority,
             offline: !remoteAuthority,
+            content: typeof this.jsDb.storeContent === 'function' && typeof this.jsDb.acquireContent === 'function',
         };
     }
     /**
@@ -506,6 +526,33 @@ export class StateFirstDB {
      * transactions. Runtimes that cannot refuse rather than silently degrading
      * the transaction into a sequence of independent writes.
      */
+    /**
+     * Tell this process's live collections that a transaction committed.
+     *
+     * Collection writes publish through the reactive dependency graph; a
+     * transaction bypasses the collection, so without this a subscriber on the
+     * local file or memory runtime never learns about it. The announcement is
+     * a notification only (subscribers re-read committed state), and it runs
+     * after the commit is durable: a failing subscriber cannot turn a committed
+     * transaction into a reported failure.
+     */
+    async announceCommittedTransaction(operations) {
+        const graph = getReactiveDependencyGraph();
+        const timestamp = Date.now();
+        for (const operation of operations) {
+            try {
+                await graph.emitChange(operation.collection, {
+                    type: operation.value === undefined ? 'delete' : 'update',
+                    key: `${operation.collection}:${operation.id}`,
+                    value: operation.value ?? null,
+                    timestamp,
+                });
+            }
+            catch {
+                // Notification is best-effort; the commit already happened.
+            }
+        }
+    }
     async transaction(build, options = {}) {
         // A transaction may be staged through a callback or described in full. The
         // second is not a second mechanism: it builds the same request, through the
@@ -534,7 +581,7 @@ export class StateFirstDB {
         if (!this.jsDb.commit_transaction) {
             const error = new AtomicTransactionError('This FeltDB runtime does not provide atomic transactions. '
                 + 'Connect to a FeltDB authority (createFeltDB({ server: ... })) to use db.transaction(). '
-                + 'FeltDB will not emulate a transaction with separate writes, because that would not be atomic.', builder.transactionId);
+                + 'FeltDB will not emulate a transaction with separate writes, because that would not be atomic.', builder.transactionId, FeltDBErrorCode.CONTRACT_UNSUPPORTED);
             observed?.fail(error);
             throw error;
         }
@@ -547,7 +594,7 @@ export class StateFirstDB {
         }
         const request = builder.seal();
         if (request.operations.length === 0) {
-            const error = new AtomicTransactionError('a transaction requires at least one operation', request.transactionId);
+            const error = new AtomicTransactionError('a transaction requires at least one operation', request.transactionId, FeltDBErrorCode.INVALID_REQUEST);
             observed?.fail(error);
             throw error;
         }
@@ -584,6 +631,11 @@ export class StateFirstDB {
                 duplicate: completed.duplicate,
                 ...(completed.binding ? { binding: completed.binding } : {}),
             });
+            // A transaction commits the same durable state a collection write does,
+            // so it reaches the same live subscribers. A duplicate applied nothing
+            // and announces nothing.
+            if (!completed.duplicate)
+                await this.announceCommittedTransaction(request.operations);
             return completed;
         }
         catch (error) {
@@ -594,17 +646,23 @@ export class StateFirstDB {
             // conflict must be distinguishable from an infrastructure failure without
             // reading the message.
             const refusal = conditionalRefusal(error);
-            const remoteCode = error?.code
-                ?? error?.feltdbCode;
-            const transactionError = error instanceof TransactionIdConflictError || error instanceof TransactionIdUnverifiableError
+            const cause = error;
+            const remoteCode = cause?.feltdbCode ?? cause?.code;
+            const message = error instanceof Error ? error.message : String(error);
+            // One typed shape for every runtime and transport: the stable code, the
+            // authority's status and request id when it answered, and for a lost
+            // race the structured failure. A transport that ended without an answer
+            // keeps its `COMMIT_OUTCOME_UNKNOWN`; it is never turned into a refusal.
+            const transactionError = error instanceof AtomicTransactionError
                 ? error
                 : remoteCode === 'IDEMPOTENCY_CONFLICT'
                     // A managed authority's refusal is the same event as an embedded one.
-                    ? new TransactionIdConflictError(request.transactionId, error instanceof Error ? error.message : undefined)
-                    : refusal.conflict
-                        ? new ConditionalConflictError(error instanceof Error ? error.message : String(error), request.transactionId, refusal.failure)
-                        : new AtomicTransactionError(error instanceof Error ? error.message : String(error), request.transactionId, error?.code
-                            ?? error?.feltdbCode, error?.status, error);
+                    ? new TransactionIdConflictError(request.transactionId, message, cause?.status, cause?.requestId)
+                    : remoteCode === 'IDEMPOTENCY_UNVERIFIABLE'
+                        ? new TransactionIdUnverifiableError(request.transactionId, message, cause?.status, cause?.requestId)
+                        : refusal.conflict
+                            ? new ConditionalConflictError(message, request.transactionId, refusal.failure, cause?.status, cause?.requestId)
+                            : new AtomicTransactionError(message, request.transactionId, remoteCode ?? FeltDBErrorCode.INTERNAL_ERROR, cause?.status, error, cause?.requestId);
             observed?.fail(transactionError);
             throw transactionError;
         }
@@ -834,18 +892,35 @@ export class StateFirstDB {
             throw new Error('Causal provenance requires a server runtime');
         return this.jsDb.provenance(collection, id);
     }
-    /** Persist immutable content by hash; repeated bytes deduplicate automatically. */
+    /**
+     * Persist immutable content by its SHA-256; repeated bytes deduplicate.
+     * Returns `{ hash, bytes, ref: 'sha256:<hash>' }`.
+     *
+     * A server runtime stores it in the server's content store; the local file
+     * runtime stores it under its state directory (`content/<hash>`), durably
+     * before this returns. Memory and browser runtimes refuse with
+     * `CONTRACT_UNSUPPORTED`.
+     */
     async storeContent(content) {
-        if (!(this.jsDb instanceof HttpJsDb))
-            throw new Error('Durable content storage requires a server runtime');
+        if (!this.jsDb.storeContent)
+            throw this.contentUnsupported('store');
         return this.jsDb.storeContent(content);
     }
-    /** Resolve verified immutable content locally or from configured peers. */
+    /**
+     * Resolve content by hash: verified against its SHA-256 before it is
+     * returned (`CONTENT_INTEGRITY_FAILURE` otherwise), `null` when absent. A
+     * server also asks its configured peers; the local runtime reads its own
+     * directory only.
+     */
     async acquireContent(hash) {
-        if (!(this.jsDb instanceof HttpJsDb))
-            throw new Error('Network content acquisition requires a server runtime');
+        if (!this.jsDb.acquireContent)
+            throw this.contentUnsupported('read');
         return this.jsDb.acquireContent(hash);
     }
+    contentUnsupported(action) {
+        return new FeltDBServiceError(`CONTRACT_UNSUPPORTED: this ${this.runtimeInfo.storage} runtime has no durable content store, so it cannot ${action} `
+            + 'content. Use the local file runtime (createFeltDB({ path })) or a FeltDB server.', FeltDBErrorCode.CONTRACT_UNSUPPORTED);
+    }
     /** Define a durable workflow whose lifecycle is ordinary replicated state. */
     async defineWorkflow(name, steps) {
         if (!(this.jsDb instanceof HttpJsDb))
@@ -925,33 +1000,84 @@ export class StateFirstDB {
         return this.agentRuntime;
     }
     /**
-     * Create an agent execution
+     * Create an agent execution. It is committed to `_flow_agent_executions`
+     * before this returns; pass `taskId` to find it later with
+     * `findAgentExecution({ taskId })`.
      */
-    async createAgentExecution(agentRef, goal, inputs) {
-        const execution = await this.agentRuntime.createExecution(this, agentRef, goal, inputs);
-        await this.collection('_flow_agent_executions').insert(this.agentExecutionRecord(execution), execution.executionId);
-        return execution;
+    async createAgentExecution(agentRef, goal, inputs, options = {}) {
+        return this.agentRuntime.createExecution(this, agentRef, goal, inputs, options);
     }
     agentExecutionRecord(execution) {
         return { ...execution, id: execution.executionId, agentRef: execution.agentRef.toString() };
     }
+    agentExecutionIndexesDeclared = false;
+    /** Declare the lookup indexes once per handle, on an embedded runtime only. */
+    async declareAgentExecutionIndexes() {
+        if (this.agentExecutionIndexesDeclared)
+            return;
+        this.agentExecutionIndexesDeclared = true;
+        if (this.capabilities().remoteAuthority)
+            return;
+        const executions = this.collection(AGENT_EXECUTION_COLLECTION);
+        for (const index of AGENT_EXECUTION_INDEXES) {
+            if (executions.listIndexes().some(existing => existing.name === index.name))
+                continue;
+            // A definition committed by an earlier process is already durable.
+            const planned = await this.explain({
+                collection: AGENT_EXECUTION_COLLECTION,
+                where: [{ field: index.fields[0], eq: '' }],
+                limit: 1,
+            }).catch(() => undefined);
+            if (planned?.index === index.name)
+                continue;
+            executions.createIndex(index);
+        }
+    }
+    async queryAgentExecution(query) {
+        await this.declareAgentExecutionIndexes();
+        const field = 'taskId' in query && query.taskId !== undefined ? 'taskId' : 'agentRef';
+        const value = field === 'taskId' ? query.taskId : String(query.agentRef);
+        const page = await this.query({
+            collection: AGENT_EXECUTION_COLLECTION,
+            where: [{ field, eq: value }],
+            orderBy: [{ field: 'createdMs', direction: 'desc' }],
+            limit: 1,
+        });
+        const row = page.records[0];
+        if (!row)
+            return null;
+        const { id: _id, __version: _version, ...execution } = row;
+        return { ...execution, agentRef: parseAgentRef(String(row.agentRef)) };
+    }
+    /**
+     * The most recently created execution for an agent-state task or an agent,
+     * read from durable state through a declared index (one bounded query; it
+     * never scans `_flow_agent_executions`). Null when there is none.
+     */
+    async findAgentExecution(query) {
+        return this.agentRuntime.findExecution(query);
+    }
     /** Claim and durably materialize an embedded agent execution. */
     async startAgentExecution(execution, peerId = this.instanceId()) {
         await this.agentRuntime.start(execution, peerId);
-        await this.collection('_flow_agent_executions').update(execution.executionId, this.agentExecutionRecord(execution));
     }
     /** Advance an agent lifecycle and expose the transition as ordinary state. */
     async transitionAgentExecution(execution, status) {
         await this.agentRuntime.transition(execution, status);
-        await this.collection('_flow_agent_executions').update(execution.executionId, this.agentExecutionRecord(execution));
+    }
+    /** Resume an execution for `peerId` (status `Observing`), committed before this returns. */
+    async resumeAgentExecution(execution, peerId = this.instanceId()) {
+        await this.agentRuntime.resume(execution, peerId);
     }
     async completeAgentExecution(execution, resultRef) {
         await this.agentRuntime.complete(execution, resultRef);
-        await this.collection('_flow_agent_executions').update(execution.executionId, this.agentExecutionRecord(execution));
     }
     async failAgentExecution(execution, error) {
         await this.agentRuntime.fail(execution, error);
-        await this.collection('_flow_agent_executions').update(execution.executionId, this.agentExecutionRecord(execution));
+    }
+    /** Cancel a non-terminal execution (terminal status `Cancelled`), committed before this returns. */
+    async cancelAgentExecution(execution, reason) {
+        await this.agentRuntime.cancel(execution, reason);
     }
     /**
      * Close the database and clean up resources.

package/dist/deployment.d.ts

@@ -1,4 +1,21 @@
+import { FeltDBServiceError } from './error-codes.js';
 export type FeltDBDeploymentMode = 'browser' | 'local' | 'remote' | 'memory';
+/** Prefix of every FeltDB service (API) key. */
+export declare const FELTDB_SERVICE_KEY_PREFIX = "fdb_live_";
+/**
+ * A FeltDB service key reached code running in a browser.
+ *
+ * Service keys (`fdb_live_…`) authorize everything their scopes name for every
+ * caller holding them, so a key in a browser bundle or page is a key published
+ * to every visitor. Keep service keys server-side (`FELTDB_TOKEN`, never a
+ * `VITE_`/`NEXT_PUBLIC_`/`PUBLIC_` variable) and give browsers an end-user
+ * session token from `/v1/auth/signin`, or call FeltDB through your server.
+ */
+export declare class FeltDBBrowserCredentialError extends FeltDBServiceError {
+    constructor(source: string);
+}
+/** Throws {@link FeltDBBrowserCredentialError} when a service key reaches a browser runtime. */
+export declare function assertBrowserSafeCredential(token: string | undefined, isBrowser: boolean, source?: string): void;
 export interface FeltDBDeploymentConfig {
     mode?: FeltDBDeploymentMode;
     namespace?: string;
@@ -8,6 +25,8 @@ export interface FeltDBDeploymentConfig {
     environment?: string;
     path?: string;
     requestTimeoutMs?: number;
+    /** Explicit configuration only; see `server.operatorConsole` on `createFeltDB`. */
+    allowServiceKeyInBrowser?: boolean;
 }
 export interface FeltDBDeploymentResolution {
     mode: FeltDBDeploymentMode;

package/dist/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7E,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,CAAC;CAC7D;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,UAAU,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAMD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,CAErG;AA4FD,wBAAgB,uBAAuB,CACrC,QAAQ,GAAE,sBAA2B,EACrC,OAAO,GAAE,iCAAsC,GAC9C,0BAA0B,CAuC5B"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../src/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7E,gDAAgD;AAChD,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD;;;;;;;;GAQG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;gBACtD,MAAM,EAAE,MAAM;CAS3B;AAED,gGAAgG;AAChG,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,SAAkB,GAAG,IAAI,CAIzH;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,CAAC;CAC7D;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,UAAU,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAMD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,sBAAsB,GAAG,SAAS,GAAG,IAAI,CAErG;AA+FD,wBAAgB,uBAAuB,CACrC,QAAQ,GAAE,sBAA2B,EACrC,OAAO,GAAE,iCAAsC,GAC9C,0BAA0B,CA6C5B"}

package/dist/deployment.js

@@ -1,3 +1,29 @@
+import { FeltDBServiceError } from './error-codes.js';
+/** Prefix of every FeltDB service (API) key. */
+export const FELTDB_SERVICE_KEY_PREFIX = 'fdb_live_';
+/**
+ * A FeltDB service key reached code running in a browser.
+ *
+ * Service keys (`fdb_live_…`) authorize everything their scopes name for every
+ * caller holding them, so a key in a browser bundle or page is a key published
+ * to every visitor. Keep service keys server-side (`FELTDB_TOKEN`, never a
+ * `VITE_`/`NEXT_PUBLIC_`/`PUBLIC_` variable) and give browsers an end-user
+ * session token from `/v1/auth/signin`, or call FeltDB through your server.
+ */
+export class FeltDBBrowserCredentialError extends FeltDBServiceError {
+    constructor(source) {
+        super(`A FeltDB service key (fdb_live_…) was supplied to a browser runtime via ${source}. Service keys must stay server-side: ` +
+            'set FELTDB_TOKEN on your server (never a VITE_/NEXT_PUBLIC_/PUBLIC_ variable, which bundlers inline into client code), ' +
+            'and give the browser an end-user session token from /v1/auth/signin or proxy requests through your server.', 'SERVICE_KEY_IN_BROWSER');
+        this.name = 'FeltDBBrowserCredentialError';
+    }
+}
+/** Throws {@link FeltDBBrowserCredentialError} when a service key reaches a browser runtime. */
+export function assertBrowserSafeCredential(token, isBrowser, source = 'configuration') {
+    if (isBrowser && typeof token === 'string' && token.trim().startsWith(FELTDB_SERVICE_KEY_PREFIX)) {
+        throw new FeltDBBrowserCredentialError(source);
+    }
+}
 let configFileLoader;
 export function registerDeploymentConfigLoader(loader) {
     configFileLoader = loader;
@@ -17,7 +43,10 @@ function envConfig(env) {
         mode: modeValue(env.FELTDB_MODE ?? env.VITE_FELTDB_MODE),
         namespace: env.FELTDB_NAMESPACE ?? env.VITE_FELTDB_NAMESPACE,
         url: env.FELTDB_URL ?? env.VITE_FELTDB_URL ?? env.FELTDB_API_URL,
-        token: env.FELTDB_TOKEN ?? env.VITE_FELTDB_TOKEN ?? env.FELTDB_API_KEY ?? env.VITE_FELTDB_API_KEY,
+        // Credentials are read only from server-side names. A VITE_* (or
+        // NEXT_PUBLIC_*/PUBLIC_*) variable is inlined into browser bundles by the
+        // bundler, so a token there is published; it is never a credential source.
+        token: env.FELTDB_TOKEN ?? env.FELTDB_API_KEY,
         applicationId: env.FELTDB_APPLICATION_ID ?? env.VITE_FELTDB_APPLICATION_ID,
         environment: env.FELTDB_ENVIRONMENT ?? env.VITE_FELTDB_ENVIRONMENT,
         path: env.FELTDB_PATH ?? env.FELTDB_DATA_DIR,
@@ -111,11 +140,18 @@ export function resolveFeltDBDeployment(explicit = {}, context = {}) {
         const url = firstValue(sources, 'url');
         if (!url)
             throw new Error('FeltDB remote deployment requires FELTDB_URL or createFeltDB({ server: { url } }).');
+        const token = firstValue(sources, 'token');
+        const tokenSource = sources.find(candidate => typeof candidate.token === 'string' && candidate.token.trim())?.source;
+        // Only an explicit, in-code operator-console opt-in can allow it; an
+        // environment or config-file value never can.
+        const allowed = explicit.allowServiceKeyInBrowser === true && tokenSource === 'explicit';
+        if (!allowed)
+            assertBrowserSafeCredential(token, flags.isBrowser, tokenSource === 'explicit' ? 'createFeltDB({ server: { token } })' : `the ${tokenSource} configuration`);
         return {
             mode,
             namespace,
             url,
-            token: firstValue(sources, 'token'),
+            token,
             applicationId: firstValue(sources, 'applicationId'),
             environment: firstValue(sources, 'environment'),
             source,

package/dist/embedded-query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embedded-query.d.ts","sourceRoot":"","sources":["../src/embedded-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAG9E,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAInC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAgDD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CASrH;AAkCD,kFAAkF;AAClF,qBAAa,mBAAmB;IAGlB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,OAAO,CAAmC;gBAErB,OAAO,EAAE,MAAM,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIvE,OAAO,IAAI,IAAI;IAMf,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI;IAgCpD,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,IAAI;IAqBZ,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,wBAAwB;IAK/D,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,qBAAqB,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG;QAAE,KAAK,EAAE,kBAAkB,CAAA;KAAE;IAyErG,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,UAAU;IA6BlB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,QAAQ;CAkBjB"}
+{"version":3,"file":"embedded-query.d.ts","sourceRoot":"","sources":["../src/embedded-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAI9E,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAInC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAgDD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CASrH;AAkCD,kFAAkF;AAClF,qBAAa,mBAAmB;IAGlB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,OAAO,CAAmC;gBAErB,OAAO,EAAE,MAAM,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIvE,OAAO,IAAI,IAAI;IAMf,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI;IAgCpD,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,IAAI;IAqBZ,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,wBAAwB;IAK/D,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,qBAAqB,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG;QAAE,KAAK,EAAE,kBAAkB,CAAA;KAAE;IAyErG,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,UAAU;IA6BlB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,QAAQ;CAkBjB"}

package/dist/embedded-query.js

@@ -1,3 +1,4 @@
+import { FeltDBErrorCode, FeltDBServiceError } from './error-codes.js';
 const now = () => typeof performance !== 'undefined' ? performance.now() : Date.now();
 function compareValue(left, right) {
     if (left === right)
@@ -78,7 +79,7 @@ function decode(cursor, expectedBinding) {
         return value;
     }
     catch {
-        throw new Error('INVALID_CURSOR: cursor is malformed or does not match this query');
+        throw new FeltDBServiceError('INVALID_CURSOR: cursor is malformed or does not match this query', FeltDBErrorCode.INVALID_CURSOR);
     }
 }
 /** Small deterministic planner/executor owned by an embedded storage boundary. */
@@ -331,7 +332,7 @@ export class EmbeddedQueryEngine {
     }
     validate(query) {
         if (!query.collection?.trim() || !Number.isInteger(query.limit) || query.limit < 1 || query.limit > 1_000)
-            throw new Error('INVALID_QUERY: collection and a limit between 1 and 1000 are required');
+            throw new FeltDBServiceError('INVALID_QUERY: collection and a limit between 1 and 1000 are required', 'INVALID_QUERY');
         for (const condition of query.where ?? []) {
             // Every key beside `field` must be exactly one known operator. A stray
             // key — a `semantic` clause misplaced into a condition, or anything
@@ -340,13 +341,13 @@ export class EmbeddedQueryEngine {
             const keys = Object.keys(condition).filter(key => key !== 'field');
             const operators = keys.filter(operator => ['eq', 'neq', 'lt', 'lte', 'gt', 'gte'].includes(operator));
             if (!condition.field || operators.length !== 1 || keys.length !== 1)
-                throw new Error('INVALID_QUERY: each condition requires a field and exactly one operator');
+                throw new FeltDBServiceError('INVALID_QUERY: each condition requires a field and exactly one operator', 'INVALID_QUERY');
         }
         if (query.semantic !== undefined) {
             // Semantic composition runs where the Rust decision primitive runs. This
             // embedded engine has no runtime binding, so it refuses the clause
             // rather than answering the deterministic query in its place.
-            throw new Error('SEMANTIC_UNSUPPORTED: this runtime has no semantic runtime binding; semantic query composition is available through the managed authority');
+            throw new FeltDBServiceError('SEMANTIC_UNSUPPORTED: this runtime has no semantic runtime binding; semantic query composition is available through the managed authority', 'SEMANTIC_UNSUPPORTED');
         }
     }
 }

package/dist/embedded-transaction.d.ts

@@ -126,7 +126,7 @@ export type EmbeddedPlan =
     kind: 'reject';
     reason: string;
     failure?: ConditionalConflictDetail;
-    code?: 'INVALID_REQUEST';
+    code?: 'INVALID_REQUEST' | 'CONTRACT_UNSUPPORTED';
 } | {
     kind: 'apply';
     mutations: EmbeddedMutation[];
@@ -184,8 +184,12 @@ export declare function embeddedDuplicate(request: AtomicTransactionRequest, pla
 export declare class EmbeddedTransactionRejected extends Error {
     readonly feltdbCode?: 'PRECONDITION_FAILED';
     readonly feltdbConflict?: ConditionalConflictDetail;
-    /** Set when the request itself was malformed, as opposed to refused by state. */
-    readonly code?: 'INVALID_REQUEST';
-    constructor(reason: string, failure?: ConditionalConflictDetail, code?: 'INVALID_REQUEST');
+    /**
+     * Set when the request itself was malformed (`INVALID_REQUEST`) or asks for
+     * something this runtime cannot evaluate (`CONTRACT_UNSUPPORTED`), as
+     * opposed to refused by state.
+     */
+    readonly code?: 'INVALID_REQUEST' | 'CONTRACT_UNSUPPORTED';
+    constructor(reason: string, failure?: ConditionalConflictDetail, code?: 'INVALID_REQUEST' | 'CONTRACT_UNSUPPORTED');
 }
 //# sourceMappingURL=embedded-transaction.d.ts.map

package/dist/embedded-transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embedded-transaction.d.ts","sourceRoot":"","sources":["../src/embedded-transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAEV,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,EAEzB,kBAAkB,EACnB,MAAM,kBAAkB,CAAC;AAS1B,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC/D;;;;;;;OAOG;IACH,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD;;;;OAIG;IACH,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACpF;AAED,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,SAAS,CAAC;AAkBjD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,GAC/D,MAAM,CAgBR;AAED,wFAAwF;AACxF,wBAAgB,QAAQ,CACtB,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACpC,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAS7C;AAED,MAAM,MAAM,YAAY;AACtB;;;;GAIG;AACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,UAAU,GAAG,mBAAmB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACnG,yEAAyE;GACvE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE;AACtB,sFAAsF;GACpF;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE;AAC1B;;;;;;GAMG;GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;CAAE,GACjG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC;AAErD,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEhE;AA2CD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAW5E;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GAAG,2BAA2B,CAEzG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,MAAM,GACb,YAAY,CAuNd;AAED,gDAAgD;AAChD,wBAAgB,cAAc,CAC5B,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,OAAO,EAClB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAazB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,GACjD,uBAAuB,CAmBzB;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,yBAAyB,CAAC;IACpD,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;gBACtB,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,EAAE,iBAAiB;CAS1F"}
+{"version":3,"file":"embedded-transaction.d.ts","sourceRoot":"","sources":["../src/embedded-transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAEV,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,EAEzB,kBAAkB,EACnB,MAAM,kBAAkB,CAAC;AAS1B,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,wBAAwB;IACvC,yCAAyC;IACzC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAC/D;;;;;;;OAOG;IACH,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD;;;;OAIG;IACH,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACpF;AAED,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,SAAS,CAAC;AAkBjD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,GAC/D,MAAM,CAgBR;AAED,wFAAwF;AACxF,wBAAgB,QAAQ,CACtB,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACpC,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAS7C;AAED,MAAM,MAAM,YAAY;AACtB;;;;GAIG;AACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,UAAU,GAAG,mBAAmB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACnG,yEAAyE;GACvE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE;AACtB,sFAAsF;GACpF;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE;AAC1B;;;;;;GAMG;GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAAC,IAAI,CAAC,EAAE,iBAAiB,GAAG,sBAAsB,CAAA;CAAE,GAC1H;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC;AAErD,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEhE;AAqDD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAW5E;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GAAG,2BAA2B,CAEzG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,MAAM,GACb,YAAY,CA8Od;AAED,gDAAgD;AAChD,wBAAgB,cAAc,CAC5B,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,OAAO,EAClB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAazB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,GACjD,uBAAuB,CAmBzB;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,yBAAyB,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,GAAG,sBAAsB,CAAC;gBAC/C,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,sBAAsB;CASnH"}