@harperfast/harper 5.2.9 → 5.3.0-alpha.1

package/dist/resources/models/bootstrap.js

@@ -12,8 +12,15 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bootstrapModels = bootstrapModels;
+exports.resetModelsProjection = resetModelsProjection;
+exports.applyModelsConfig = applyModelsConfig;
+exports.startModelsConfigHotReload = startModelsConfigHotReload;
+exports.stopModelsConfigHotReload = stopModelsConfigHotReload;
 /**
- * YAML→registry boot bridge (#629 / #630 of #510).
+ * YAML→registry boot bridge (#629 / #630 of #510), plus hot reload of the
+ * `models` block when the root config file changes (#2344) — so an
+ * orchestrator can rotate a credential or re-point a baseUrl by rewriting
+ * harperdb-config.yaml, without a process restart.
  *
  * Reads the top-level `models` block from the root config and dispatches each
  * `models.embedding.<name>` / `models.generative.<name>` entry to the matching
@@ -36,7 +43,8 @@ exports.bootstrapModels = bootstrapModels;
  * convention from `@harperfast/oauth`'s config loader.
  *
  * Errors per entry are logged and skipped, not thrown — one misconfigured
- * backend should not block Harper boot.
+ * backend should not block Harper boot, and one bad entry in a rewritten file
+ * should not tear down the entries that were fine.
  */
 const harper_logger_ts_1 = __importDefault(require("../../utility/logging/harper_logger.js"));
 const expandEnvVar_ts_1 = require("../../utility/expandEnvVar.js");
@@ -49,6 +57,9 @@ const node_url_1 = require("node:url");
 const node_module_1 = require("node:module");
 const environmentManager_ts_1 = require("../../utility/environment/environmentManager.js");
 const routing_ts_1 = require("./routing.js");
+const backendRegistry_ts_1 = require("./backendRegistry.js");
+const RootConfigWatcher_ts_1 = require("../../config/RootConfigWatcher.js");
+const configValidator_ts_1 = require("../../validation/configValidator.js");
 /**
  * Field names treated as credentials. When present in config as a literal
  * value (not a `${VAR}` placeholder), bootstrap warns the operator at boot
@@ -62,36 +73,112 @@ const FACTORIES = {
     anthropic: (args) => (0, index_ts_3.registerAnthropicBackend)({ ...args, config: args.config }),
     bedrock: (args) => (0, index_ts_4.registerBedrockBackend)({ ...args, config: args.config }),
 };
+const installedSlots = new Map();
+/**
+ * Let a config entry claim a name held by a projection-installed helper. The record is suppressed
+ * rather than deleted, so removing the claiming entry later restores the helper — the live
+ * registry then matches a restart with the same final config.
+ */
+function claimHelperOccupant(kind, logicalName) {
+    for (const slot of installedSlots.values()) {
+        const extra = slot.extras?.find((e) => !e.suppressed && e.kind === kind && e.logicalName === logicalName);
+        if (extra) {
+            extra.suppressed = true;
+            return extra.backend;
+        }
+    }
+    return undefined;
+}
+/** Restore a suppressed helper once the entry that claimed its name is removed. */
+function restoreSuppressedHelper(kind, logicalName) {
+    for (const slot of installedSlots.values()) {
+        const extra = slot.extras?.find((e) => e.suppressed && e.kind === kind && e.logicalName === logicalName);
+        if (extra && (0, backendRegistry_ts_1.replaceIfCurrent)(extra.kind, extra.logicalName, undefined, extra.backend)) {
+            extra.suppressed = false;
+            return;
+        }
+    }
+}
+const slotKey = (kind, logicalName) => `${kind} ${logicalName}`;
 /**
  * Populate the model registry from `rootConfig.models`. No-op if the block
  * is absent or empty. Idempotent within a process: each entry overwrites any
- * prior registration under the same logical name (registry uses `.set()`).
+ * prior registration under the same logical name.
  */
 async function bootstrapModels(rootConfig) {
-    // Rebuild fallback groups from scratch each (re)load so a removed/changed `fallback:`
-    // (or a removed `models:` block) doesn't leave stale routing behind (#1326).
-    (0, routing_ts_1.clearFallbackGroups)();
-    const block = rootConfig?.models;
-    if (!block)
-        return;
-    await registerKind('embedding', block.embedding);
-    await registerKind('generative', block.generative);
+    // The projection is NOT reset here: boot rides the same serialized queue as a reload, so a
+    // re-bootstrap in a long-lived process removes entries the new config dropped, keeps retained
+    // state (a malformed entry's routing), and cannot corrupt an in-flight apply's swaps.
+    return queueModelsApply(rootConfig?.models, true);
 }
-function warnOnLiteralCredentials(kind, logicalName, entry) {
-    for (const field of CREDENTIAL_FIELDS) {
-        const value = entry[field];
-        if (typeof value !== 'string' || value.length === 0)
-            continue;
-        if ((0, expandEnvVar_ts_1.isUnresolvedEnvVarPlaceholder)(value))
-            continue; // operator is using ${VAR} indirection
-        harper_logger_ts_1.default.warn(`models.${kind}.${logicalName}: '${field}' is a literal value in harperdb-config.yaml; ` +
-            `prefer \${ENV_VAR} indirection for credentials to keep them off disk`);
+/** Forget everything the projection installed. Test isolation only — never part of a reload. */
+function resetModelsProjection() {
+    installedSlots.clear();
+}
+/**
+ * Apply a `models:` block as a hot reload: changed entries are rebuilt through the same factories
+ * boot uses and swapped in atomically, removed entries stop serving, and programmatic
+ * registrations that overrode a config entry are left in place. Serialized and coalesced —
+ * concurrent calls settle on the latest block.
+ */
+function applyModelsConfig(models) {
+    return queueModelsApply(models, false);
+}
+// Interleaved applies could install an older credential last; serialized + coalesced, they cannot.
+// Boot and reload coalesce SEPARATELY: merging them either loses boot's overwrite contract or
+// launders a raw watcher block through boot semantics, past reload validation and the missing-key
+// no-op. Boot drains first; the newest reload then refines it under its own rules.
+let pendingBoot;
+let pendingReload;
+let applyChain;
+function queueModelsApply(block, isBoot) {
+    if (isBoot) {
+        pendingBoot = { block: block ?? undefined };
+        // A boot supersedes any reload queued before it — draining that older snapshot after the
+        // newer boot would refine it backwards. A reload queued after the boot still refines. The
+        // same applies one layer down: a watcher snapshot OBSERVED before this boot whose settle
+        // timer has not fired yet is also pre-boot content — boot read the same file, so dropping
+        // the timer loses nothing newer.
+        pendingReload = undefined;
+        clearTimeout(pendingSettle);
+        pendingSettle = undefined;
+    }
+    else {
+        pendingReload = { block };
     }
+    applyChain ??= (async () => {
+        try {
+            while (pendingBoot || pendingReload) {
+                const isBootTurn = pendingBoot !== undefined;
+                const next = isBootTurn ? pendingBoot : pendingReload;
+                if (isBootTurn)
+                    pendingBoot = undefined;
+                else
+                    pendingReload = undefined;
+                try {
+                    await applyModels(next.block, isBootTurn);
+                }
+                catch (err) {
+                    // Per-entry failures are handled inside applyModels; this catches a failure of the apply
+                    // itself. The chain must not reject — the watcher calls fire-and-forget, so a rejection
+                    // would be unhandled — and the loop continues so a newer pending snapshot still applies.
+                    harper_logger_ts_1.default.error(`models: config apply failed (${err?.message ?? err})`);
+                }
+            }
+        }
+        finally {
+            applyChain = undefined;
+        }
+    })();
+    return applyChain;
 }
-async function registerKind(kind, entries) {
+function collectKind(kind, entries, out, present) {
     if (!entries)
         return;
     for (const [logicalName, entry] of Object.entries(entries)) {
+        // Present even when invalid: a malformed entry keeps its previously applied backend (like a
+        // failed rebuild does) rather than reading as removed. Only true absence removes.
+        present.add(slotKey(kind, logicalName));
         if (!entry || typeof entry !== 'object') {
             // Schema validation (configValidator.ts) catches this before bootstrap
             // runs, so reaching here means config was loaded by an unusual path
@@ -103,6 +190,117 @@ async function registerKind(kind, entries) {
             harper_logger_ts_1.default.error(`models.${kind}.${logicalName}: 'backend' must be a non-empty string; skipping`);
             continue;
         }
+        out.push({ kind, logicalName, entry, entryJson: JSON.stringify(entry) });
+    }
+}
+function publishEntry(desiredEntry, backend, extras, isBoot) {
+    const { kind, logicalName, entry, entryJson } = desiredEntry;
+    const key = slotKey(kind, logicalName);
+    // Boot overwrites occupants (the documented contract); a reload replaces only what this
+    // projection installed — or a helper the projection installed under this name, which a config
+    // entry outranks — so genuine application overrides survive.
+    const previous = installedSlots.get(key);
+    let expected = isBoot ? (0, backendRegistry_ts_1.getBackend)(kind, logicalName) : previous?.backend;
+    // Claimed at boot too, or the parent record keeps an installable claim on a name it lost.
+    const claimedHelper = claimHelperOccupant(kind, logicalName);
+    if (!isBoot && expected === undefined && claimedHelper !== undefined)
+        expected = claimedHelper;
+    // Helpers rotate and retire with their entry even when the primary swap is lost to an
+    // override — a frozen helper would keep serving a revoked credential.
+    const installedExtras = [];
+    for (const extra of extras) {
+        const extraExpected = isBoot
+            ? (0, backendRegistry_ts_1.getBackend)(extra.kind, extra.logicalName)
+            : previous?.extras?.find((e) => e.kind === extra.kind && e.logicalName === extra.logicalName)?.backend;
+        if ((0, backendRegistry_ts_1.replaceIfCurrent)(extra.kind, extra.logicalName, extraExpected, extra.backend)) {
+            installedExtras.push(extra);
+        }
+        else {
+            harper_logger_ts_1.default.warn(`models.${kind}.${logicalName}: helper '${extra.logicalName}' is owned by another registration; leaving it in place`);
+        }
+    }
+    for (const old of previous?.extras ?? []) {
+        if (old.suppressed)
+            continue;
+        if (!extras.some((e) => e.kind === old.kind && e.logicalName === old.logicalName)) {
+            (0, backendRegistry_ts_1.removeIfCurrent)(old.kind, old.logicalName, old.backend);
+        }
+    }
+    const builtin = Boolean(FACTORIES[entry.backend]);
+    if ((0, backendRegistry_ts_1.replaceIfCurrent)(kind, logicalName, expected, backend)) {
+        installedSlots.set(key, {
+            kind,
+            logicalName,
+            backend,
+            entryJson,
+            builtin,
+            fallback: entry.fallback,
+            extras: installedExtras,
+        });
+    }
+    else {
+        // Record the ask with no installed instance, so unchanged reloads skip instead of
+        // re-losing this swap every apply; installed helpers stay recorded and removable.
+        installedSlots.set(key, {
+            kind,
+            logicalName,
+            entryJson,
+            builtin,
+            fallback: entry.fallback,
+            extras: installedExtras,
+        });
+        harper_logger_ts_1.default.warn(`models.${kind}.${logicalName}: another registration owns this entry; leaving it in place`);
+    }
+}
+async function applyModels(block, isBoot) {
+    if (!isBoot) {
+        if (block === undefined) {
+            // A snapshot with no `models` key is not evidence of intent: a non-atomic in-place rewrite
+            // can be observed as a valid YAML prefix that simply hasn't reached the block yet, and
+            // removing every backend on that would be catastrophic. Removal is expressed by an empty
+            // or shrunken block — `models: {}`. A bare `models:` key (null) is rejected by validation
+            // below, exactly as boot's validator rejects it, so reload cannot accept a file a restart
+            // would refuse.
+            harper_logger_ts_1.default.debug?.('models: watched config has no models block; projection left as-is');
+            return;
+        }
+        // Boot validates the composed config (configValidator); a reload must enforce the same
+        // schema, or a typo boot would reject hot-applies silently (e.g. a misspelled baseUrl
+        // falling back to the public endpoint).
+        const { error } = (0, configValidator_ts_1.validateModelsBlock)(block);
+        if (error) {
+            harper_logger_ts_1.default.error(`models: rejecting config reload (${error.message}); keeping the previous projection`);
+            return;
+        }
+    }
+    const desired = [];
+    const presentKeys = new Set();
+    collectKind('embedding', block?.embedding, desired, presentKeys);
+    collectKind('generative', block?.generative, desired, presentKeys);
+    const staged = new Map();
+    const failedKeys = new Set();
+    for (const desiredEntry of desired) {
+        const { kind, logicalName, entry, entryJson } = desiredEntry;
+        const key = slotKey(kind, logicalName);
+        const slot = installedSlots.get(key);
+        // Unchanged: skip while ANY occupant serves (rebuilding under an override would run the factory
+        // only to lose the swap). Boot is stricter — it must overwrite occupants, so it only skips when
+        // the projection's own instance is installed; an emptied registry rebuilds either way.
+        const installed = (0, backendRegistry_ts_1.getBackend)(kind, logicalName);
+        if (slot && slot.entryJson === entryJson && (isBoot ? installed === slot.backend : installed !== undefined))
+            continue;
+        // Reload runs factories for built-ins only: they are independent, pure constructors. A module
+        // factory may compose with other entries (wrap an earlier backend), which staged construction
+        // cannot honor — changing one needs a restart, exactly as before this feature. The guard covers
+        // the incoming backend AND a currently-installed module-backed slot: a module→built-in rewrite
+        // is still a change of a restart-managed entry, so it must not live-replace the module (which
+        // would drop its helpers with none of the disposal a restart performs).
+        if (!isBoot && (!FACTORIES[entry.backend] || slot?.builtin === false)) {
+            harper_logger_ts_1.default.warn(`models.${kind}.${logicalName}: module-backed entries require a restart to add or change; ` +
+                `keeping the previous projection for this entry`);
+            failedKeys.add(key);
+            continue;
+        }
         // Warn before expansion: literal credentials in `harperdb-config.yaml`
         // land on disk, in backups, and (depending on deployment) in replicated
         // config tables. The `${VAR}` indirection pattern from
@@ -115,22 +313,209 @@ async function registerKind(kind, entries) {
             // (env var unset) pass through unchanged — backend's required-field
             // validation catches them with a meaningful error.
             const config = (0, expandEnvVar_ts_1.expandEnvVarsDeep)(entry);
-            const builtin = FACTORIES[entry.backend];
-            if (builtin) {
-                await builtin({ logicalName, kind, config });
+            const { backend, extras } = await (0, backendRegistry_ts_1.constructBackend)(kind, logicalName, async () => {
+                const builtin = FACTORIES[entry.backend];
+                if (builtin) {
+                    await builtin({ logicalName, kind, config });
+                }
+                else {
+                    // Not a built-in name: treat `backend` as a module specifier (#1471).
+                    await registerFromModule(kind, logicalName, entry.backend, config);
+                }
+            });
+            if (!backend) {
+                harper_logger_ts_1.default.error(`models.${kind}.${logicalName}: registration installed no backend; skipping ` +
+                    `(a factory must register before its returned promise resolves)`);
+                failedKeys.add(key);
+                continue;
             }
-            else {
-                // Not a built-in name: treat `backend` as a module specifier (#1471).
-                await registerFromModule(kind, logicalName, entry.backend, config);
-            }
-            // Record the ordered fallback group (other logical names) for the router (#1326).
-            if (entry.fallback?.length)
-                (0, routing_ts_1.setFallbackGroup)(kind, logicalName, entry.fallback);
+            // Boot publishes each entry as it is built, in config order, so a later module factory
+            // observes earlier entries exactly as it always has (a wrapper resolves its base). Reload
+            // defers everything to one synchronous publish, so a request never sees a partial rebuild.
+            if (isBoot)
+                publishEntry(desiredEntry, backend, extras, true);
+            else
+                staged.set(key, { desiredEntry, backend, extras });
         }
         catch (err) {
+            failedKeys.add(key);
             harper_logger_ts_1.default.error(`models.${kind}.${logicalName}: registration failed (${err?.message ?? err})`);
         }
     }
+    for (const { desiredEntry, backend, extras } of staged.values()) {
+        publishEntry(desiredEntry, backend, extras, isBoot);
+    }
+    const desiredKeys = new Set(desired.map((d) => slotKey(d.kind, d.logicalName)));
+    // Module-backed slots retained across a removal are absent from both `desiredKeys` and `presentKeys`,
+    // so neither routing loop below would restore them after the clear; track them so their recorded
+    // fallback survives — else the primary keeps serving while its failover is silently dropped.
+    const retainedModuleKeys = new Set();
+    for (const [key, slot] of [...installedSlots]) {
+        if (presentKeys.has(key))
+            continue;
+        // Module-backed entries are restart-managed on reload in BOTH directions: refusing an added
+        // rename target while removing its old name would turn the rename into a bare removal.
+        if (!isBoot && slot.builtin === false) {
+            harper_logger_ts_1.default.warn(`models.${slot.kind}.${slot.logicalName}: module-backed entries require a restart to remove; keeping it`);
+            retainedModuleKeys.add(key);
+            continue;
+        }
+        if (slot.backend)
+            (0, backendRegistry_ts_1.removeIfCurrent)(slot.kind, slot.logicalName, slot.backend);
+        for (const extra of slot.extras ?? []) {
+            if (!extra.suppressed)
+                (0, backendRegistry_ts_1.removeIfCurrent)(extra.kind, extra.logicalName, extra.backend);
+        }
+        installedSlots.delete(key);
+        // A removed entry may have been shadowing a factory helper of the same name; put the
+        // helper back, so the live registry matches a restart with this final config. Not gated on
+        // slot.backend: the claim suppressed the helper before this entry's swap was known to win, so
+        // a lost swap must still release it (a no-op while the name is held or nothing is suppressed).
+        restoreSuppressedHelper(slot.kind, slot.logicalName);
+    }
+    // Rebuild fallback routing from scratch each apply so a removed/changed `fallback:` (or a
+    // removed `models:` block) doesn't leave stale routing behind (#1326).
+    (0, routing_ts_1.clearFallbackGroups)();
+    for (const { kind, logicalName, entry } of desired) {
+        // A failed rebuild keeps its previous backend serving, so it keeps the routing that was
+        // applied WITH that backend — not the new entry's group, which belongs to the build that
+        // did not happen.
+        const key = slotKey(kind, logicalName);
+        const group = failedKeys.has(key) ? installedSlots.get(key)?.fallback : entry.fallback;
+        if (group?.length && (0, backendRegistry_ts_1.getBackend)(kind, logicalName))
+            (0, routing_ts_1.setFallbackGroup)(kind, logicalName, group);
+    }
+    // Routing follows the name, not the instance.
+    for (const [key, slot] of installedSlots) {
+        if (desiredKeys.has(key) || !presentKeys.has(key))
+            continue;
+        if (slot.fallback?.length && (0, backendRegistry_ts_1.getBackend)(slot.kind, slot.logicalName)) {
+            (0, routing_ts_1.setFallbackGroup)(slot.kind, slot.logicalName, slot.fallback);
+        }
+    }
+    // Retained module-backed slots keep serving under their old name, so they keep the fallback group
+    // they were built with — a restart-managed removal must not half-apply as a silent failover loss.
+    for (const key of retainedModuleKeys) {
+        const slot = installedSlots.get(key);
+        if (slot?.fallback?.length && (0, backendRegistry_ts_1.getBackend)(slot.kind, slot.logicalName)) {
+            (0, routing_ts_1.setFallbackGroup)(slot.kind, slot.logicalName, slot.fallback);
+        }
+    }
+}
+// ── Hot reload wiring ─────────────────────────────────────────────────────────
+let modelsConfigWatcher;
+let ownsModelsConfigWatcher = false;
+let modelsApplyListener;
+let pendingSettle;
+/**
+ * Watch the root config file and hot-apply `models:` changes. Follows `harper_logger`'s
+ * root-config-watch pattern: one watcher per worker, each worker reprojecting its own registry.
+ *
+ * The watcher sees the FILE, but `HARPER_DEFAULT_CONFIG` / `HARPER_CONFIG` / `HARPER_SET_CONFIG`
+ * compose with it at boot — so if any of those names `models`, the file alone is not authoritative
+ * for the block and hot reload stays off, preserving boot semantics unchanged. (That is also the
+ * compatibility gate: an orchestrator still injecting models through `HARPER_SET_CONFIG` gets
+ * today's restart behavior; one that writes the file instead gets live reload.)
+ *
+ * Returns whether the watch is active.
+ */
+function startModelsConfigHotReload(options) {
+    if (modelsConfigWatcher)
+        return true;
+    const pinnedBy = envLayerNamingModels();
+    if (pinnedBy) {
+        harper_logger_ts_1.default.info(`models: hot reload of the config file is disabled: ${pinnedBy} also defines 'models', so the file alone is not authoritative for it`);
+        return false;
+    }
+    // One watcher per isolate: logging already opens one, and a second per worker doubles the
+    // native-watcher/FD footprint and the read+parse work on every config write. A test-supplied
+    // path gets a private instance, owned (and closed) by this module.
+    ownsModelsConfigWatcher = options?.watcher === undefined && options?.configFilePath !== undefined;
+    modelsConfigWatcher =
+        options?.watcher ??
+            (ownsModelsConfigWatcher ? new RootConfigWatcher_ts_1.RootConfigWatcher(options?.configFilePath) : (0, RootConfigWatcher_ts_1.getSharedRootConfigWatcher)());
+    // An 'error' event with no listener would take the worker down; and `ready` is an events.once
+    // promise that rejects on a pre-ready 'error', so it must be observed too.
+    modelsConfigWatcher.on('error', modelsWatcherErrorListener);
+    modelsConfigWatcher.ready.catch(() => { });
+    // 'ready' carries the file state at watch start: a rewrite that lands during the watcher's
+    // initial scan arrives there rather than as 'change', and an unchanged block is a no-op anyway.
+    // Settle window: a non-atomic in-place rewrite emits an event per write() and an early snapshot
+    // can be a schema-valid subset of the final file (a truncated map removes the unwritten
+    // entries). Applying only the last event in a quiet window adopts the completed file. The real
+    // contract for orchestrators remains an atomic tmp+rename.
+    const debounceMs = options?.debounceMs ?? 150;
+    const applyFromFile = (config) => {
+        const models = config?.models;
+        options?.onSnapshotObserved?.();
+        clearTimeout(pendingSettle);
+        pendingSettle = setTimeout(() => {
+            void queueModelsApply(models, false);
+        }, debounceMs);
+        pendingSettle.unref?.();
+    };
+    modelsConfigWatcher.on('ready', applyFromFile);
+    modelsConfigWatcher.on('change', applyFromFile);
+    modelsApplyListener = applyFromFile;
+    // The shared watcher's one-time 'ready' may predate this subscription (logging usually
+    // constructs the singleton first, and EventEmitter does not replay). A snapshot it already
+    // holds is applied directly, so a rewrite landing before this subscription is not invisible
+    // until the next write.
+    if (modelsConfigWatcher.config !== undefined)
+        applyFromFile(modelsConfigWatcher.config);
+    return true;
+}
+/** Stop watching the config file. The current projection keeps serving. */
+function stopModelsConfigHotReload() {
+    clearTimeout(pendingSettle);
+    pendingSettle = undefined;
+    if (modelsConfigWatcher) {
+        if (modelsApplyListener) {
+            modelsConfigWatcher.off('ready', modelsApplyListener);
+            modelsConfigWatcher.off('change', modelsApplyListener);
+        }
+        modelsConfigWatcher.off('error', modelsWatcherErrorListener);
+        // The shared watcher belongs to the isolate (logging still consumes it); close only a
+        // private, test-supplied instance.
+        if (ownsModelsConfigWatcher)
+            modelsConfigWatcher.close();
+    }
+    modelsApplyListener = undefined;
+    modelsConfigWatcher = undefined;
+}
+function modelsWatcherErrorListener(error) {
+    harper_logger_ts_1.default.warn(`models: config watcher error: ${error?.message ?? error}`);
+}
+function envLayerNamingModels() {
+    for (const name of ['HARPER_SET_CONFIG', 'HARPER_CONFIG', 'HARPER_DEFAULT_CONFIG']) {
+        const raw = process.env[name];
+        if (!raw)
+            continue;
+        try {
+            const parsed = JSON.parse(raw);
+            // Dotted top-level keys ("models.embedding.default") compose into the models block too
+            // (harperConfigEnvVars flattens/expands them), so they pin exactly like a nested key.
+            if (parsed &&
+                typeof parsed === 'object' &&
+                Object.keys(parsed).some((k) => k === 'models' || k.startsWith('models.')))
+                return name;
+        }
+        catch {
+            // Malformed env config is reported by config loading itself; not this watcher's job.
+        }
+    }
+    return undefined;
+}
+function warnOnLiteralCredentials(kind, logicalName, entry) {
+    for (const field of CREDENTIAL_FIELDS) {
+        const value = entry[field];
+        if (typeof value !== 'string' || value.length === 0)
+            continue;
+        if ((0, expandEnvVar_ts_1.isUnresolvedEnvVarPlaceholder)(value))
+            continue; // operator is using ${VAR} indirection
+        harper_logger_ts_1.default.warn(`models.${kind}.${logicalName}: '${field}' is a literal value in harperdb-config.yaml; ` +
+            `prefer \${ENV_VAR} indirection for credentials to keep them off disk`);
+    }
 }
 /**
  * Resolve a non-built-in `backend` value as a module and invoke its factory (#1471).

package/dist/resources/models/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../resources/models/bootstrap.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAsFA,0CAQC;AA9FD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,8FAAkE;AAClE,mEAAiG;AACjG,+DAAmG;AACnG,+DAAmG;AACnG,kEAA4G;AAC5G,gEAAsG;AACtG,yCAA+D;AAC/D,uCAAyC;AACzC,6CAA4C;AAC5C,2FAAiF;AACjF,6CAAqE;AAErE;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AA8B9C,MAAM,SAAS,GAAsC;IACpD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,gCAAqB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAA6B,EAAE,CAAC;IAChG,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,gCAAqB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAA6B,EAAE,CAAC;IAChG,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,mCAAwB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAgC,EAAE,CAAC;IACzG,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,iCAAsB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAA8B,EAAE,CAAC;CACnG,CAAC;AAEF;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,UAAyC;IAC9E,sFAAsF;IACtF,6EAA6E;IAC7E,IAAA,gCAAmB,GAAE,CAAC;IACtB,MAAM,KAAK,GAAG,UAAU,EAAE,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAe,EAAE,WAAmB,EAAE,KAAiB;IACxF,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,IAAI,IAAA,+CAA6B,EAAC,KAAK,CAAC;YAAE,SAAS,CAAC,uCAAuC;QAC3F,0BAAY,CAAC,IAAI,CAChB,UAAU,IAAI,IAAI,WAAW,MAAM,KAAK,gDAAgD;YACvF,sEAAsE,CACvE,CAAC;IACH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAe,EAAE,OAA+C;IAC3F,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzC,uEAAuE;YACvE,oEAAoE;YACpE,sDAAsD;YACtD,0BAAY,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,WAAW,6BAA6B,CAAC,CAAC;YAC/E,SAAS;QACV,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,0BAAY,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,WAAW,kDAAkD,CAAC,CAAC;YACpG,SAAS;QACV,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,uDAAuD;QACvD,sDAAsD;QACtD,wBAAwB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC;YACJ,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,mDAAmD;YACnD,MAAM,MAAM,GAAG,IAAA,mCAAiB,EAAC,KAAK,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACP,sEAAsE;gBACtE,MAAM,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpE,CAAC;YACD,kFAAkF;YAClF,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM;gBAAE,IAAA,6BAAgB,EAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,0BAAY,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,WAAW,0BAA2B,GAAa,EAAE,OAAO,IAAI,GAAG,GAAG,CAAC,CAAC;QAC9G,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,kBAAkB,CAChC,IAAe,EACf,WAAmB,EACnB,SAAiB,EACjB,MAAc;IAEd,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,GAAG,GAAG,CAAC,MAAM,MAAM,kCAAC,uBAAuB,CAAC,SAAS,CAAC,EAAC,CAA4B,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CACd,YAAY,SAAS,4BAA4B,KAAK,+BAAgC,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CACrH,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,GAAG,CAAC,OAA6C,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC;IACxF,MAAM,OAAO,GAAG,CACf,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAChE,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,mBAAmB,SAAS,sFAAsF,CAClH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,SAAiB;IACjD,oFAAoF;IACpF,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAA,sCAAc,GAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAC1G,OAAO,IAAA,wBAAa,EAAC,IAAA,mBAAW,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,IAAI,IAAA,sBAAU,EAAC,SAAS,CAAC;QAAE,OAAO,IAAA,wBAAa,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC;IAChE,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAA,sCAAc,GAAE,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC,CAAC,yDAAyD;IACtF,MAAM,eAAe,GAAG,IAAA,2BAAa,EAAC,IAAA,wBAAa,EAAC,IAAA,mBAAW,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzF,OAAO,IAAA,wBAAa,EAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../resources/models/bootstrap.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAyJA,0CAKC;AAGD,sDAEC;AAQD,8CAEC;AAwTD,gEAoDC;AAGD,8DAeC;AA3iBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,8FAAkE;AAClE,mEAAiG;AACjG,+DAAmG;AACnG,+DAAmG;AACnG,kEAA4G;AAC5G,gEAAsG;AACtG,yCAA+D;AAC/D,uCAAyC;AACzC,6CAA4C;AAC5C,2FAAiF;AACjF,6CAAqE;AACrE,6DAM8B;AAC9B,4EAAkG;AAClG,4EAA0E;AAG1E;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AA8B9C,MAAM,SAAS,GAAsC;IACpD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,gCAAqB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAA6B,EAAE,CAAC;IAChG,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,gCAAqB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAA6B,EAAE,CAAC;IAChG,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,mCAAwB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAgC,EAAE,CAAC;IACzG,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,iCAAsB,EAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAA8B,EAAE,CAAC;CACnG,CAAC;AAwBF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAyB,CAAC;AAExD;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAe,EAAE,WAAmB;IAChE,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QAC1G,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YACxB,OAAO,KAAK,CAAC,OAAO,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,mFAAmF;AACnF,SAAS,uBAAuB,CAAC,IAAe,EAAE,WAAmB;IACpE,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACzG,IAAI,KAAK,IAAI,IAAA,qCAAgB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACxF,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;YACzB,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAe,EAAE,WAAmB,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,WAAW,EAAE,CAAC;AAEnF;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,UAAyC;IAC9E,2FAA2F;IAC3F,8FAA8F;IAC9F,sFAAsF;IACtF,OAAO,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,gGAAgG;AAChG,SAAgB,qBAAqB;IACpC,cAAc,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,MAAgC;IACjE,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,mGAAmG;AACnG,8FAA8F;AAC9F,kGAAkG;AAClG,mFAAmF;AACnF,IAAI,WAA4D,CAAC;AACjE,IAAI,aAAqE,CAAC;AAC1E,IAAI,UAAqC,CAAC;AAE1C,SAAS,gBAAgB,CAAC,KAAsC,EAAE,MAAe;IAChF,IAAI,MAAM,EAAE,CAAC;QACZ,WAAW,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC;QAC5C,yFAAyF;QACzF,0FAA0F;QAC1F,yFAAyF;QACzF,0FAA0F;QAC1F,iCAAiC;QACjC,aAAa,GAAG,SAAS,CAAC;QAC1B,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,aAAa,GAAG,SAAS,CAAC;IAC3B,CAAC;SAAM,CAAC;QACP,aAAa,GAAG,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,UAAU,KAAK,CAAC,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC;YACJ,OAAO,WAAW,IAAI,aAAa,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,WAAW,KAAK,SAAS,CAAC;gBAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,WAAY,CAAC,CAAC,CAAC,aAAc,CAAC;gBACxD,IAAI,UAAU;oBAAE,WAAW,GAAG,SAAS,CAAC;;oBACnC,aAAa,GAAG,SAAS,CAAC;gBAC/B,IAAI,CAAC;oBACJ,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,yFAAyF;oBACzF,wFAAwF;oBACxF,yFAAyF;oBACzF,0BAAY,CAAC,KAAK,CAAC,gCAAiC,GAAa,EAAE,OAAO,IAAI,GAAG,GAAG,CAAC,CAAC;gBACvF,CAAC;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,UAAU,GAAG,SAAS,CAAC;QACxB,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,UAAU,CAAC;AACnB,CAAC;AASD,SAAS,WAAW,CACnB,IAAe,EACf,OAA+C,EAC/C,GAAmB,EACnB,OAAoB;IAEpB,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,4FAA4F;QAC5F,kFAAkF;QAClF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzC,uEAAuE;YACvE,oEAAoE;YACpE,sDAAsD;YACtD,0BAAY,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,WAAW,6BAA6B,CAAC,CAAC;YAC/E,SAAS;QACV,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,0BAAY,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,WAAW,kDAAkD,CAAC,CAAC;YACpG,SAAS;QACV,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CACpB,YAA0B,EAC1B,OAAqB,EACrB,MAAyB,EACzB,MAAe;IAEf,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvC,wFAAwF;IACxF,8FAA8F;IAC9F,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,+BAAU,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC1E,0FAA0F;IAC1F,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS;QAAE,QAAQ,GAAG,aAAa,CAAC;IAC/F,sFAAsF;IACtF,sEAAsE;IACtE,MAAM,eAAe,GAAsD,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,MAAM;YAC3B,CAAC,CAAC,IAAA,+BAAU,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC;YAC3C,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QACxG,IAAI,IAAA,qCAAgB,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACnF,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACP,0BAAY,CAAC,IAAI,CAChB,UAAU,IAAI,IAAI,WAAW,aAAa,KAAK,CAAC,WAAW,yDAAyD,CACpH,CAAC;QACH,CAAC;IACF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,UAAU;YAAE,SAAS;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACnF,IAAA,oCAAe,EAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAiB,CAAC,CAAC,CAAC;IAC5D,IAAI,IAAA,qCAAgB,EAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAC5D,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;YACvB,IAAI;YACJ,WAAW;YACX,OAAO;YACP,SAAS;YACT,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,eAAe;SACvB,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACP,kFAAkF;QAClF,kFAAkF;QAClF,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;YACvB,IAAI;YACJ,WAAW;YACX,SAAS;YACT,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,eAAe;SACvB,CAAC,CAAC;QACH,0BAAY,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,WAAW,6DAA6D,CAAC,CAAC;IAC/G,CAAC;AACF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAsC,EAAE,MAAe;IACjF,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,2FAA2F;YAC3F,uFAAuF;YACvF,yFAAyF;YACzF,0FAA0F;YAC1F,0FAA0F;YAC1F,gBAAgB;YAChB,0BAAY,CAAC,KAAK,EAAE,CAAC,mEAAmE,CAAC,CAAC;YAC1F,OAAO;QACR,CAAC;QACD,uFAAuF;QACvF,sFAAsF;QACtF,wCAAwC;QACxC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,wCAAmB,EAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACX,0BAAY,CAAC,KAAK,CAAC,oCAAoC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;YAC1G,OAAO;QACR,CAAC;IACF,CAAC;IACD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACjE,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAEnE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4F,CAAC;IACnH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,YAAY,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,gGAAgG;QAChG,gGAAgG;QAChG,uFAAuF;QACvF,MAAM,SAAS,GAAG,IAAA,+BAAU,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;YAC1G,SAAS;QACV,8FAA8F;QAC9F,8FAA8F;QAC9F,gGAAgG;QAChG,+FAA+F;QAC/F,8FAA8F;QAC9F,wEAAwE;QACxE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,OAAiB,CAAC,IAAI,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC;YACjF,0BAAY,CAAC,IAAI,CAChB,UAAU,IAAI,IAAI,WAAW,8DAA8D;gBAC1F,gDAAgD,CACjD,CAAC;YACF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,SAAS;QACV,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,uDAAuD;QACvD,sDAAsD;QACtD,wBAAwB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC;YACJ,wEAAwE;YACxE,qEAAqE;YACrE,mEAAmE;YACnE,oEAAoE;YACpE,mDAAmD;YACnD,MAAM,MAAM,GAAG,IAAA,mCAAiB,EAAC,KAAK,CAAC,CAAC;YACxC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,qCAAgB,EAAC,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;gBAChF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,OAAiB,CAAC,CAAC;gBACnD,IAAI,OAAO,EAAE,CAAC;oBACb,MAAM,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACP,sEAAsE;oBACtE,MAAM,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,OAAiB,EAAE,MAAM,CAAC,CAAC;gBAC9E,CAAC;YACF,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,0BAAY,CAAC,KAAK,CACjB,UAAU,IAAI,IAAI,WAAW,gDAAgD;oBAC5E,gEAAgE,CACjE,CAAC;gBACF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,SAAS;YACV,CAAC;YACD,uFAAuF;YACvF,0FAA0F;YAC1F,2FAA2F;YAC3F,IAAI,MAAM;gBAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;;gBACzD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,0BAAY,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,WAAW,0BAA2B,GAAa,EAAE,OAAO,IAAI,GAAG,GAAG,CAAC,CAAC;QAC9G,CAAC;IACF,CAAC;IAED,KAAK,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACjE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChF,sGAAsG;IACtG,iGAAiG;IACjG,6FAA6F;IAC7F,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC;QAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,4FAA4F;QAC5F,uFAAuF;QACvF,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvC,0BAAY,CAAC,IAAI,CAChB,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,iEAAiE,CACxG,CAAC;YACF,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,SAAS;QACV,CAAC;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,IAAA,oCAAe,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,UAAU;gBAAE,IAAA,oCAAe,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtF,CAAC;QACD,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,qFAAqF;QACrF,2FAA2F;QAC3F,8FAA8F;QAC9F,+FAA+F;QAC/F,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,0FAA0F;IAC1F,uEAAuE;IACvE,IAAA,gCAAmB,GAAE,CAAC;IACtB,KAAK,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QACpD,wFAAwF;QACxF,yFAAyF;QACzF,kBAAkB;QAClB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvF,IAAI,KAAK,EAAE,MAAM,IAAI,IAAA,+BAAU,EAAC,IAAI,EAAE,WAAW,CAAC;YAAE,IAAA,6BAAgB,EAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;IACD,8CAA8C;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC;QAC1C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5D,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAA,+BAAU,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACtE,IAAA,6BAAgB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IACD,kGAAkG;IAClG,kGAAkG;IAClG,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAA,+BAAU,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvE,IAAA,6BAAgB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;AACF,CAAC;AAED,iFAAiF;AAEjF,IAAI,mBAAkD,CAAC;AACvD,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,IAAI,mBAA4D,CAAC;AACjE,IAAI,aAAyC,CAAC;AAE9C;;;;;;;;;;;GAWG;AACH,SAAgB,0BAA0B,CAAC,OAO1C;IACA,IAAI,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACd,0BAAY,CAAC,IAAI,CAChB,sDAAsD,QAAQ,uEAAuE,CACrI,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,0FAA0F;IAC1F,6FAA6F;IAC7F,mEAAmE;IACnE,uBAAuB,GAAG,OAAO,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,EAAE,cAAc,KAAK,SAAS,CAAC;IAClG,mBAAmB;QAClB,OAAO,EAAE,OAAO;YAChB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,wCAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAA,iDAA0B,GAAE,CAAC,CAAC;IAC3G,8FAA8F;IAC9F,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC5D,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,2FAA2F;IAC3F,gGAAgG;IAChG,gGAAgG;IAChG,wFAAwF;IACxF,+FAA+F;IAC/F,2DAA2D;IAC3D,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,GAAG,CAAC;IAC9C,MAAM,aAAa,GAAG,CAAC,MAAe,EAAE,EAAE;QACzC,MAAM,MAAM,GAAI,MAAiC,EAAE,MAAM,CAAC;QAC1D,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC;QAChC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,KAAK,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC;IACF,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/C,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChD,mBAAmB,GAAG,aAAa,CAAC;IACpC,uFAAuF;IACvF,2FAA2F;IAC3F,4FAA4F;IAC5F,wBAAwB;IACxB,IAAI,mBAAmB,CAAC,MAAM,KAAK,SAAS;QAAE,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,SAAgB,yBAAyB;IACxC,YAAY,CAAC,aAAa,CAAC,CAAC;IAC5B,aAAa,GAAG,SAAS,CAAC;IAC1B,IAAI,mBAAmB,EAAE,CAAC;QACzB,IAAI,mBAAmB,EAAE,CAAC;YACzB,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YACtD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACxD,CAAC;QACD,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAC7D,sFAAsF;QACtF,mCAAmC;QACnC,IAAI,uBAAuB;YAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC1D,CAAC;IACD,mBAAmB,GAAG,SAAS,CAAC;IAChC,mBAAmB,GAAG,SAAS,CAAC;AACjC,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IACjD,0BAAY,CAAC,IAAI,CAAC,iCAAkC,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,oBAAoB;IAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,eAAe,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACpF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,uFAAuF;YACvF,sFAAsF;YACtF,IACC,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAE1E,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACR,qFAAqF;QACtF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAe,EAAE,WAAmB,EAAE,KAAiB;IACxF,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,IAAI,IAAA,+CAA6B,EAAC,KAAK,CAAC;YAAE,SAAS,CAAC,uCAAuC;QAC3F,0BAAY,CAAC,IAAI,CAChB,UAAU,IAAI,IAAI,WAAW,MAAM,KAAK,gDAAgD;YACvF,sEAAsE,CACvE,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,kBAAkB,CAChC,IAAe,EACf,WAAmB,EACnB,SAAiB,EACjB,MAAc;IAEd,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,GAAG,GAAG,CAAC,MAAM,MAAM,kCAAC,uBAAuB,CAAC,SAAS,CAAC,EAAC,CAA4B,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CACd,YAAY,SAAS,4BAA4B,KAAK,+BAAgC,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CACrH,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,GAAG,CAAC,OAA6C,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC;IACxF,MAAM,OAAO,GAAG,CACf,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAChE,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,mBAAmB,SAAS,sFAAsF,CAClH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,SAAiB;IACjD,oFAAoF;IACpF,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAA,sCAAc,GAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAC1G,OAAO,IAAA,wBAAa,EAAC,IAAA,mBAAW,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,IAAI,IAAA,sBAAU,EAAC,SAAS,CAAC;QAAE,OAAO,IAAA,wBAAa,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC;IAChE,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAA,sCAAc,GAAE,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC,CAAC,yDAAyD;IACtF,MAAM,eAAe,GAAG,IAAA,2BAAa,EAAC,IAAA,wBAAa,EAAC,IAAA,mBAAW,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzF,OAAO,IAAA,wBAAa,EAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC"}

package/dist/resources/recordLock.d.ts

@@ -0,0 +1,80 @@
+import { ClientError } from '../utility/errors/hdbError.ts';
+/**
+ * Exclusive per-record locks (harper#483, Phase 0: one node, every worker thread).
+ *
+ * The sole authority is the rocksdb-js process-wide key lock: one `locks` map per DBDescriptor
+ * shared by every worker thread's handle. Nothing is written to the store or audit log. Lock and
+ * unlock are pure in-memory operations; the record's version and bytes are unchanged.
+ */
+export declare const DEFAULT_LOCK_LEASE_MS = 30000;
+/** Below this a generation can expire before the caller's work completes, handing back a lock already lost. */
+export declare const MIN_LOCK_LEASE_MS = 100;
+export declare const MAX_LOCK_LEASE_MS = 300000;
+export declare const DEFAULT_LOCK_TIMEOUT_MS = 30000;
+export declare const MAX_LOCK_TIMEOUT_MS = 300000;
+export interface RecordLockOptions {
+    /** Lease in ms; the lock expires on its own if the holder never releases it (default 30 s, max 5 min) */
+    lease?: number;
+    /** How long to wait for a contended lock in ms before failing with 423 (default 30 s, max 5 min) */
+    timeout?: number;
+    /** A held lock outlives the acquiring transaction; it is released by `unlock()` or by its lease */
+    hold?: boolean;
+}
+export interface ResolvedRecordLockOptions {
+    lease: number;
+    timeout: number;
+    hold: boolean;
+}
+/**
+ * The handle returned by `lock()` and held by each gated write until its transaction completes.
+ * `release()` is synchronous: it calls `store.unlock(key)` which is ownerless and fires any
+ * waiting callbacks cross-thread. The `expired` flag is set in the holder thread by the lease
+ * timer, so a stale holder cannot accidentally call unlock after its lease already fired and
+ * released the key to a new holder.
+ */
+export interface RecordLockHandle {
+    store: any;
+    key: any[];
+    keyId: unknown;
+    expiresAt: number;
+    hold: boolean;
+    released: boolean;
+    expired: boolean;
+    /** Monotonic timestamp at which tryLock succeeded; used as the base version for holder writes. */
+    acquiredAt: number;
+    /** Advance, but never lower, the version floor from the transaction that owns the actual write timestamp. */
+    noteHolderVersion(version: number): void;
+    /** Preserve a caller timestamp as a candidate floor without treating it as a committed write. */
+    noteCandidateFloor(version: number): void;
+    /** Compute a holder-write version without advancing the floor until that write commits. */
+    holderVersionCandidate(floor?: number): number;
+    /**
+     * Return the next version to stamp a holder write with. Starts at acquiredAt when no transaction
+     * version has been noted; otherwise advances by the minimum monotonic step from the recorded floor.
+     */
+    nextHolderVersion(): number;
+    release(): boolean;
+    /**
+     * Flip this handle to hold mode and reset its lease timer. Used during scoped→hold upgrades
+     * so all instances that reference this handle object remain valid (no retire + replace).
+     */
+    upgradeToHold(lease: number): void;
+}
+export declare function resolveLockOptions(options?: RecordLockOptions | null): ResolvedRecordLockOptions;
+/**
+ * The 409 for a write staged through a handle that is no longer live. A lease that ran out and a
+ * lock that was handed back are different causes, and a caller told the wrong one debugs the wrong
+ * thing — a commit-released scoped handle is not a timeout.
+ */
+export declare function lockNotHeldError(handle: Pick<RecordLockHandle, 'expired'>): ClientError;
+/** The advisory key for this (table, record) pair, distinct from getFromSource's bare-id single-flight lock. */
+export declare function lockAttemptKey(tableId: number, id: any): any[];
+export declare function makeKeyLockHandle(store: any, key: any[], keyId: unknown, lease?: number, hold?: boolean, acquiredAt?: number): RecordLockHandle;
+/**
+ * Acquire the native key lock for a record, looping until acquired or deadline passes. Re-entrant
+ * within a transaction: if the transaction already holds this key (non-expired handle in its
+ * recordLocks map) the existing handle is returned without a second tryLock.
+ */
+export declare function acquireRecordKey(txn: {
+    recordLockFor(store: any, keyId: unknown): RecordLockHandle | undefined;
+}, store: any, key: any[], keyId: unknown, waitMs: number, lease?: number, hold?: boolean): Promise<RecordLockHandle>;