@hypequery/deployment 0.3.0 → 0.5.0

package/README.md

@@ -1,13 +1,12 @@
 # @hypequery/deployment
 
-Provider-neutral verification, intake, activation, and HTTP control-plane
+Provider-neutral verification, intake, activation, runtime, and HTTP hosting
 building blocks for Hypequery deployment bundles.
 
 The package accepts the authenticated multipart transport emitted by
 `hypequery deploy`, reconstructs only manifest-declared files in temporary
 storage, and revalidates the release, bundle manifest, file hashes, deployment
-identity, and runtime references before handing the submission to a store. It
-does not activate or execute a release.
+identity, and runtime references before handing the submission to a store.
 
 ## Intake adapters
 
@@ -245,4 +244,105 @@ remote-sandbox isolation behind the same lifecycle interface.
 The reference worker is a lifecycle boundary, not a hostile-code security
 sandbox. Only trusted deployment code should use it directly.
 
+## Data-plane execution
+
+`createDeploymentDataPlane` executes named-query routes from one validated,
+immutable deployment contract. It applies bounded input defaults and unknown
+property behavior, enforces access and tenant policy, dispatches the declared
+implementation kind through an injected adapter, and validates output before
+returning it.
+
+```ts
+import {
+  createDeploymentDataPlane,
+  createDeploymentRuntimeSupervisorExecutor,
+} from '@hypequery/deployment';
+
+const executeRuntimeReference = createDeploymentRuntimeSupervisorExecutor({
+  supervisor,
+  target,
+  activationRevision: snapshot.activation.revision,
+  argument: ({ input, principal, tenant }) => ({ input, principal, tenant }),
+});
+
+const dataPlane = createDeploymentDataPlane({
+  deployment: snapshot.deployment,
+  authenticate,
+  resolveTenant,
+  executeSemanticPlan,
+  executeCompiledSql,
+  executeRuntimeReference,
+});
+
+const result = await dataPlane.execute({
+  method: 'POST',
+  path: '/analytics/queries/orders',
+  credentials,
+  input: { status: 'paid' },
+});
+```
+
+The runtime-supervisor adapter requires the exact activation revision used to
+construct the data plane. A later activation therefore cannot accidentally run
+against stale route or schema metadata. Argument mapping remains explicit so a
+host can preserve the handler contract of its chosen runtime.
+
+Semantic-plan and compiled-SQL adapters own database execution. The core passes
+only validated values, the fixed implementation artifact, and closed typed SQL
+parameter bindings; it does not select credentials or interpolate SQL.
+
+## Data-plane hosting
+
+`createDeploymentHost` keeps route/schema execution and supervised runtime
+dispatch pinned to the same activation revision. Reconciliation builds a new
+data plane from the supervisor's immutable generation view and publishes it
+only after confirming that the active generation did not change during
+configuration.
+
+`createDeploymentDataPlaneFetchHandler` and
+`createDeploymentDataPlaneNodeHandler` expose a hosted data plane over HTTP.
+They accept either query parameters or one bounded UTF-8 JSON body, reject
+duplicate JSON property names, forward cancellation, and return bounded JSON
+errors. Public cache metadata is emitted only when execution confirms the
+request was public, tenant-independent, and unauthenticated.
+
+For a single-node service, `createFileSystemDeploymentHost` composes the
+filesystem submission store, activation registry, intake, control plane,
+runtime materializer, supervisor, and generation-pinned data plane. It
+reconciles configured targets at startup and schedules reconciliation after a
+durable activation without changing an already-successful activation response
+if runtime startup later fails.
+
+```ts
+import {
+  createDeploymentDataPlaneNodeHandler,
+  createFileSystemDeploymentHost,
+} from '@hypequery/deployment';
+
+const service = createFileSystemDeploymentHost({
+  directory: '/var/lib/hypequery/deployments',
+  targets: [{ project: 'analytics', environment: 'production' }],
+  intake: { authenticator: deploymentAuthenticator, authorizer: deploymentAuthorizer },
+  controlPlane: { authenticator: operatorAuthenticator, authorizer: operatorAuthorizer },
+  configureDataPlane: () => ({
+    authenticate: queryAuthenticator,
+    resolveTenant,
+    executeSemanticPlan,
+    executeCompiledSql,
+    runtimeArgument: ({ input, principal, tenant }) => ({ input, principal, tenant }),
+  }),
+});
+
+await service.start();
+const queryHandler = createDeploymentDataPlaneNodeHandler(
+  service.host.dataPlane({ project: 'analytics', environment: 'production' }),
+);
+```
+
+Cloud and other distributed systems can use the same host, supervisor, and HTTP
+adapter interfaces while supplying provider-owned persistence, runtime, SQL,
+authentication, tenant, routing, and observability implementations. The
+filesystem assembly is a reference single-host composition, not a distributed
+control plane.
+
 The package is ESM-only and requires Node.js 20 or newer.

package/dist/control-plane.d.ts

@@ -1,5 +1,5 @@
 import { type ProtocolDeploymentReleaseTarget } from '@hypequery/protocol';
-import { type DeploymentActivationRegistry } from './activation.js';
+import { type DeploymentActivationRecord, type DeploymentActivationRegistry } from './activation.js';
 import { type DeploymentControlPlaneLimits } from './control-plane-limits.js';
 import type { DeploymentAuthenticator, DeploymentIntake, DeploymentIntakeRequest, DeploymentIntakeResponse } from './types.js';
 export type DeploymentControlPlaneAction = 'activate' | 'read-current-activation' | 'read-activation-history';
@@ -29,6 +29,9 @@ export interface DeploymentControlPlaneOptions<Principal> {
     readonly authenticator: DeploymentAuthenticator<Principal>;
     readonly authorizer: DeploymentControlPlaneAuthorizer<Principal>;
     readonly limits?: Partial<DeploymentControlPlaneLimits>;
+    /** Called after a successful activation has been durably committed. */
+    readonly onActivation?: (activation: DeploymentActivationRecord) => void | Promise<void>;
+    readonly onBackgroundError?: (error: unknown) => void;
 }
 export type DeploymentControlPlaneErrorCode = 'HQ_CONTROL_BAD_REQUEST' | 'HQ_CONTROL_UNAUTHENTICATED' | 'HQ_CONTROL_FORBIDDEN' | 'HQ_CONTROL_NOT_FOUND' | 'HQ_CONTROL_METHOD_NOT_ALLOWED' | 'HQ_CONTROL_TOO_LARGE' | 'HQ_CONTROL_RELEASE_NOT_FOUND' | 'HQ_CONTROL_RELEASE_UNAVAILABLE' | 'HQ_CONTROL_INTERNAL';
 export declare function createDeploymentControlPlane<Principal>(options: DeploymentControlPlaneOptions<Principal>): DeploymentControlPlane;

package/dist/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,uBAAuB,EACvB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAMpB,MAAM,MAAM,4BAA4B,GACpC,UAAU,GACV,yBAAyB,GACzB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,wCAAwC,CAAC,SAAS;IACjE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,gCAAgC,CAAC,SAAS;IACzD,SAAS,CAAC,KAAK,EAAE,wCAAwC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,6BAA6B,CAAC,SAAS;IACtD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACzD;AAED,MAAM,MAAM,+BAA+B,GACvC,wBAAwB,GACxB,4BAA4B,GAC5B,sBAAsB,GACtB,sBAAsB,GACtB,+BAA+B,GAC/B,sBAAsB,GACtB,8BAA8B,GAC9B,gCAAgC,GAChC,qBAAqB,CAAC;AA+X1B,wBAAgB,4BAA4B,CAAC,SAAS,EACpD,OAAO,EAAE,6BAA6B,CAAC,SAAS,CAAC,GAChD,sBAAsB,CAkHxB"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,uBAAuB,EACvB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAMpB,MAAM,MAAM,4BAA4B,GACpC,UAAU,GACV,yBAAyB,GACzB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,wCAAwC,CAAC,SAAS;IACjE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,gCAAgC,CAAC,SAAS;IACzD,SAAS,CAAC,KAAK,EAAE,wCAAwC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,6BAA6B,CAAC,SAAS;IACtD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACxD,uEAAuE;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,UAAU,EAAE,0BAA0B,KACnC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACvD;AAED,MAAM,MAAM,+BAA+B,GACvC,wBAAwB,GACxB,4BAA4B,GAC5B,sBAAsB,GACtB,sBAAsB,GACtB,+BAA+B,GAC/B,sBAAsB,GACtB,8BAA8B,GAC9B,gCAAgC,GAChC,qBAAqB,CAAC;AA+X1B,wBAAgB,4BAA4B,CAAC,SAAS,EACpD,OAAO,EAAE,6BAA6B,CAAC,SAAS,CAAC,GAChD,sBAAsB,CAoIxB"}

package/dist/control-plane.js

@@ -269,6 +269,24 @@ function validatedHistoryQuery(query, maximum) {
 }
 export function createDeploymentControlPlane(options) {
     const limits = resolveDeploymentControlPlaneLimits(options.limits);
+    function reportBackgroundError(error) {
+        try {
+            options.onBackgroundError?.(error);
+        }
+        catch {
+            // Diagnostics cannot change the result of an already-durable activation.
+        }
+    }
+    function notifyActivation(activation) {
+        try {
+            const operation = options.onActivation?.(activation);
+            if (operation)
+                void Promise.resolve(operation).catch(reportBackgroundError);
+        }
+        catch (error) {
+            reportBackgroundError(error);
+        }
+    }
     async function authenticateAndAuthorize(request, action, target) {
         throwIfAborted(request.signal);
         const token = bearerToken(request.headers);
@@ -334,6 +352,7 @@ export function createDeploymentControlPlane(options) {
                     current: result.current,
                 });
             }
+            notifyActivation(result.activation);
             return activationResponse(result.status, result.activation);
         }
         requireMethod(method, 'GET');

package/dist/data-plane-adapters.d.ts

@@ -0,0 +1,18 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type DeploymentDataPlane } from './data-plane.js';
+export type DeploymentDataPlaneFetchHandler = (request: Request) => Promise<Response>;
+export type DeploymentDataPlaneNodeHandler = (request: IncomingMessage, response: ServerResponse) => Promise<void>;
+export interface DeploymentDataPlaneAdapterRequest {
+    readonly method: string;
+    readonly path: string;
+    readonly query: Readonly<Record<string, string | readonly string[]>>;
+    readonly headers: Readonly<Record<string, string>>;
+}
+export interface DeploymentDataPlaneAdapterOptions {
+    /** Request body limit from 1 through 1,048,576 bytes. */
+    readonly maxRequestBytes?: number;
+    readonly credentials?: (request: DeploymentDataPlaneAdapterRequest) => unknown;
+}
+export declare function createDeploymentDataPlaneFetchHandler(dataPlane: DeploymentDataPlane, options?: DeploymentDataPlaneAdapterOptions): DeploymentDataPlaneFetchHandler;
+export declare function createDeploymentDataPlaneNodeHandler(dataPlane: DeploymentDataPlane, options?: DeploymentDataPlaneAdapterOptions): DeploymentDataPlaneNodeHandler;
+//# sourceMappingURL=data-plane-adapters.d.ts.map

package/dist/data-plane-adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane-adapters.d.ts","sourceRoot":"","sources":["../src/data-plane-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,+BAA+B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AACtF,MAAM,MAAM,8BAA8B,GAAG,CAC3C,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,KACrB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,iCAAiC;IAChD,yDAAyD;IACzD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,iCAAiC,KAAK,OAAO,CAAC;CAChF;AAoPD,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,mBAAmB,EAC9B,OAAO,GAAE,iCAAsC,GAC9C,+BAA+B,CAwBjC;AAqDD,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,mBAAmB,EAC9B,OAAO,GAAE,iCAAsC,GAC9C,8BAA8B,CAuChC"}

package/dist/data-plane-adapters.js

@@ -0,0 +1,304 @@
+import { DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS, } from '@hypequery/protocol';
+import { DeploymentDataPlaneError, } from './data-plane.js';
+import { DeploymentHostError } from './host.js';
+class AdapterError extends Error {
+    code;
+    status;
+    constructor(code, status, message) {
+        super(message);
+        this.code = code;
+        this.status = status;
+    }
+}
+const JSON_CONTENT_TYPE = /^application\/json(?:;\s*charset=utf-8)?$/i;
+function maximumBytes(input) {
+    const maximum = DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS.maxInputBytes;
+    const value = input ?? maximum;
+    if (!Number.isSafeInteger(value) || value < 1 || value > maximum) {
+        throw new RangeError(`maxRequestBytes must be an integer between 1 and ${maximum}`);
+    }
+    return value;
+}
+function queryParameters(search) {
+    const query = Object.create(null);
+    for (const [name, value] of search) {
+        const current = query[name];
+        if (current === undefined)
+            query[name] = value;
+        else if (typeof current === 'string')
+            query[name] = Object.freeze([current, value]);
+        else
+            query[name] = Object.freeze([...current, value]);
+    }
+    return Object.freeze(query);
+}
+function contentLength(headers, maximum) {
+    const value = headers['content-length'];
+    if (value === undefined)
+        return undefined;
+    if (!/^(?:0|[1-9][0-9]*)$/.test(value)) {
+        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Content-Length is invalid.');
+    }
+    const length = Number(value);
+    if (!Number.isSafeInteger(length)) {
+        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Content-Length is invalid.');
+    }
+    if (length > maximum) {
+        throw new AdapterError('HQ_DATA_PLANE_REQUEST_TOO_LARGE', 413, 'The data-plane request exceeds its byte limit.');
+    }
+    return length;
+}
+function requestInput(query, body, contentType) {
+    const hasQuery = Object.keys(query).length > 0;
+    if (body !== undefined && hasQuery) {
+        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'A data-plane request cannot contain both query parameters and a JSON body.');
+    }
+    if (body !== undefined) {
+        if (!contentType || !JSON_CONTENT_TYPE.test(contentType)) {
+            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Data-plane request bodies require application/json with UTF-8 encoding.');
+        }
+        return body;
+    }
+    return hasQuery ? JSON.stringify(query) : undefined;
+}
+function credentials(options, request) {
+    return options.credentials ? options.credentials(request) : request.headers.authorization;
+}
+function cacheControl(result) {
+    if (result.cacheTtlMs === undefined || result.cacheTtlMs <= 0)
+        return 'no-store';
+    return `public, max-age=${Math.floor(result.cacheTtlMs / 1_000)}`;
+}
+function successResponse(result) {
+    if (result.output === undefined) {
+        return Object.freeze({
+            status: 204,
+            headers: Object.freeze({ 'cache-control': cacheControl(result) }),
+        });
+    }
+    const body = `${JSON.stringify(result.output)}\n`;
+    return Object.freeze({
+        status: 200,
+        headers: Object.freeze({
+            'content-type': 'application/json; charset=utf-8',
+            'content-length': String(Buffer.byteLength(body)),
+            'cache-control': cacheControl(result),
+        }),
+        body,
+    });
+}
+function errorStatus(error) {
+    switch (error.code) {
+        case 'HQ_DATA_PLANE_INPUT_INVALID': return 400;
+        case 'HQ_DATA_PLANE_UNAUTHENTICATED': return 401;
+        case 'HQ_DATA_PLANE_FORBIDDEN':
+        case 'HQ_DATA_PLANE_TENANT_REQUIRED': return 403;
+        case 'HQ_DATA_PLANE_ROUTE_NOT_FOUND': return 404;
+        case 'HQ_DATA_PLANE_METHOD_NOT_ALLOWED': return 405;
+        case 'HQ_DATA_PLANE_ABORTED': return 499;
+        case 'HQ_DATA_PLANE_EXECUTOR_UNAVAILABLE': return 503;
+        default: return 500;
+    }
+}
+function errorResponse(error) {
+    let status = 500;
+    let code = 'HQ_DATA_PLANE_INTERNAL';
+    let message = 'The deployment data-plane request could not be processed.';
+    let path;
+    if (error instanceof AdapterError) {
+        status = error.status;
+        code = error.code;
+        message = error.message;
+    }
+    else if (error instanceof DeploymentDataPlaneError) {
+        status = errorStatus(error);
+        code = error.code;
+        if (status < 500) {
+            message = error.message;
+            path = error.path;
+        }
+    }
+    else if (error instanceof DeploymentHostError) {
+        code = error.code;
+        if (error.code === 'HQ_DEPLOYMENT_HOST_NOT_READY'
+            || error.code === 'HQ_DEPLOYMENT_HOST_CLOSED') {
+            status = 503;
+            message = error.message;
+        }
+    }
+    const body = `${JSON.stringify({
+        error: { code, message, ...(path === undefined ? {} : { path }) },
+    })}\n`;
+    return Object.freeze({
+        status,
+        headers: Object.freeze({
+            'content-type': 'application/json; charset=utf-8',
+            'content-length': String(Buffer.byteLength(body)),
+            'cache-control': 'no-store',
+            ...(status === 401 ? { 'www-authenticate': 'Bearer' } : {}),
+        }),
+        body,
+    });
+}
+async function execute(dataPlane, options, request, input, signal) {
+    try {
+        const result = await dataPlane.executeJson({
+            ...request,
+            input,
+            credentials: credentials(options, request),
+            signal,
+        });
+        return successResponse(result);
+    }
+    catch (error) {
+        return errorResponse(error);
+    }
+}
+function fetchHeaders(input) {
+    const headers = Object.create(null);
+    for (const [name, value] of input)
+        headers[name.toLowerCase()] = value;
+    if (headers.authorization?.includes(',')) {
+        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Authorization header is ambiguous.');
+    }
+    return Object.freeze(headers);
+}
+async function fetchBytes(stream, declared, maximum) {
+    if (stream === null) {
+        if (declared !== undefined && declared !== 0) {
+            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
+        }
+        return undefined;
+    }
+    const reader = stream.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const result = await reader.read();
+            if (result.done)
+                break;
+            total += result.value.byteLength;
+            if (total > maximum)
+                throw new AdapterError('HQ_DATA_PLANE_REQUEST_TOO_LARGE', 413, 'The data-plane request exceeds its byte limit.');
+            if (declared !== undefined && total > declared) {
+                throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
+            }
+            chunks.push(result.value);
+        }
+    }
+    catch (error) {
+        await reader.cancel(error).catch(() => undefined);
+        throw error;
+    }
+    finally {
+        reader.releaseLock();
+    }
+    if (declared !== undefined && total !== declared) {
+        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes.byteLength === 0 ? undefined : bytes;
+}
+export function createDeploymentDataPlaneFetchHandler(dataPlane, options = {}) {
+    const maximum = maximumBytes(options.maxRequestBytes);
+    return async (request) => {
+        let response;
+        try {
+            const url = new URL(request.url);
+            const headers = fetchHeaders(request.headers);
+            const query = queryParameters(url.searchParams);
+            const body = await fetchBytes(request.body, contentLength(headers, maximum), maximum);
+            const adapted = Object.freeze({
+                method: request.method.toUpperCase(), path: url.pathname, query, headers,
+            });
+            response = await execute(dataPlane, options, adapted, requestInput(query, body, headers['content-type']), request.signal);
+        }
+        catch (error) {
+            response = errorResponse(error);
+        }
+        return new Response(response.body ?? null, { status: response.status, headers: response.headers });
+    };
+}
+function nodeHeaders(request) {
+    const headers = Object.create(null);
+    for (let index = 0; index < request.rawHeaders.length; index += 2) {
+        const name = request.rawHeaders[index].toLowerCase();
+        const value = request.rawHeaders[index + 1];
+        if (name === 'authorization' && headers[name] !== undefined) {
+            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Authorization header is ambiguous.');
+        }
+        headers[name] = headers[name] === undefined ? value : `${headers[name]}, ${value}`;
+    }
+    return Object.freeze(headers);
+}
+function nodeHasBody(headers) {
+    return headers['transfer-encoding'] !== undefined
+        || headers['content-length'] !== undefined && headers['content-length'] !== '0';
+}
+async function nodeBytes(request, hasBody, declared, maximum) {
+    if (!hasBody)
+        return undefined;
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of request) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += bytes.byteLength;
+        if (total > maximum)
+            throw new AdapterError('HQ_DATA_PLANE_REQUEST_TOO_LARGE', 413, 'The data-plane request exceeds its byte limit.');
+        if (declared !== undefined && total > declared) {
+            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
+        }
+        chunks.push(bytes);
+    }
+    if (declared !== undefined && total !== declared) {
+        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
+    }
+    return total === 0 ? undefined : Buffer.concat(chunks, total);
+}
+function sendNodeResponse(response, result) {
+    if (response.writableEnded || response.headersSent)
+        return;
+    response.statusCode = result.status;
+    for (const [name, value] of Object.entries(result.headers))
+        response.setHeader(name, value);
+    response.end(result.body);
+}
+export function createDeploymentDataPlaneNodeHandler(dataPlane, options = {}) {
+    const maximum = maximumBytes(options.maxRequestBytes);
+    return async (request, response) => {
+        const abort = new AbortController();
+        const onRequestClose = () => {
+            if (!request.complete)
+                abort.abort(new Error('The data-plane request was interrupted.'));
+        };
+        const onResponseClose = () => {
+            if (!response.writableEnded)
+                abort.abort(new Error('The data-plane response was interrupted.'));
+        };
+        request.once('close', onRequestClose);
+        response.once('close', onResponseClose);
+        try {
+            const url = new URL(request.url ?? '/', 'http://deployment-data-plane.invalid');
+            const headers = nodeHeaders(request);
+            const query = queryParameters(url.searchParams);
+            const body = await nodeBytes(request, nodeHasBody(headers), contentLength(headers, maximum), maximum);
+            const adapted = Object.freeze({
+                method: (request.method ?? 'GET').toUpperCase(), path: url.pathname, query, headers,
+            });
+            sendNodeResponse(response, await execute(dataPlane, options, adapted, requestInput(query, body, headers['content-type']), abort.signal));
+        }
+        catch (error) {
+            sendNodeResponse(response, errorResponse(error));
+        }
+        finally {
+            request.off('close', onRequestClose);
+            response.off('close', onResponseClose);
+        }
+    };
+}

package/dist/data-plane-limits.d.ts

@@ -0,0 +1,5 @@
+import { type ProtocolSchemaValueLimits } from '@hypequery/protocol';
+export type DeploymentDataPlaneLimits = ProtocolSchemaValueLimits;
+export declare const DEFAULT_DEPLOYMENT_DATA_PLANE_LIMITS: Readonly<ProtocolSchemaValueLimits>;
+export declare function resolveDeploymentDataPlaneLimits(input?: Partial<DeploymentDataPlaneLimits>): Readonly<DeploymentDataPlaneLimits>;
+//# sourceMappingURL=data-plane-limits.d.ts.map

package/dist/data-plane-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane-limits.d.ts","sourceRoot":"","sources":["../src/data-plane-limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAElE,eAAO,MAAM,oCAAoC,qCAAuC,CAAC;AAEzF,wBAAgB,gCAAgC,CAC9C,KAAK,GAAE,OAAO,CAAC,yBAAyB,CAAM,GAC7C,QAAQ,CAAC,yBAAyB,CAAC,CAErC"}

package/dist/data-plane-limits.js

@@ -0,0 +1,5 @@
+import { DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS, resolveProtocolSchemaValueLimits, } from '@hypequery/protocol';
+export const DEFAULT_DEPLOYMENT_DATA_PLANE_LIMITS = DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS;
+export function resolveDeploymentDataPlaneLimits(input = {}) {
+    return resolveProtocolSchemaValueLimits({ limits: input });
+}

package/dist/data-plane-runtime.d.ts

@@ -0,0 +1,13 @@
+import type { ProtocolDeploymentReleaseTarget } from '@hypequery/protocol';
+import type { DeploymentRuntimeReferenceExecutionInput } from './data-plane.js';
+import type { DeploymentRuntimeSupervisor } from './runtime-supervisor.js';
+export interface DeploymentRuntimeSupervisorExecutorOptions {
+    readonly supervisor: DeploymentRuntimeSupervisor;
+    readonly target: ProtocolDeploymentReleaseTarget;
+    /** The immutable activation generation used to build the matching data plane. */
+    readonly activationRevision: string;
+    /** Convert provider-neutral execution context into the runtime handler's argument contract. */
+    readonly argument: (input: DeploymentRuntimeReferenceExecutionInput) => unknown;
+}
+export declare function createDeploymentRuntimeSupervisorExecutor(options: DeploymentRuntimeSupervisorExecutorOptions): (input: DeploymentRuntimeReferenceExecutionInput) => Promise<unknown>;
+//# sourceMappingURL=data-plane-runtime.d.ts.map

package/dist/data-plane-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane-runtime.d.ts","sourceRoot":"","sources":["../src/data-plane-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EACV,wCAAwC,EACzC,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,wCAAwC,KAAK,OAAO,CAAC;CACjF;AAED,wBAAgB,yCAAyC,CACvD,OAAO,EAAE,0CAA0C,GAClD,CAAC,KAAK,EAAE,wCAAwC,KAAK,OAAO,CAAC,OAAO,CAAC,CAWvE"}

package/dist/data-plane-runtime.js

@@ -0,0 +1,12 @@
+export function createDeploymentRuntimeSupervisorExecutor(options) {
+    if (!/^[0-9a-f]{64}$/.test(options.activationRevision)) {
+        throw new RangeError('activationRevision must be a lowercase SHA-256 identity');
+    }
+    return async (input) => await options.supervisor.invoke({
+        target: options.target,
+        activationRevision: options.activationRevision,
+        query: input.query.name,
+        argument: options.argument(input),
+        signal: input.signal,
+    });
+}

package/dist/data-plane.d.ts

@@ -0,0 +1,84 @@
+import type { ProtocolDeploymentContract, ProtocolNamedQueryContract, ProtocolQueryImplementation } from '@hypequery/protocol';
+import { type DeploymentDataPlaneLimits } from './data-plane-limits.js';
+export type DeploymentDataPlaneErrorCode = 'HQ_DATA_PLANE_CONFIGURATION' | 'HQ_DATA_PLANE_ROUTE_NOT_FOUND' | 'HQ_DATA_PLANE_METHOD_NOT_ALLOWED' | 'HQ_DATA_PLANE_UNAUTHENTICATED' | 'HQ_DATA_PLANE_FORBIDDEN' | 'HQ_DATA_PLANE_TENANT_REQUIRED' | 'HQ_DATA_PLANE_INPUT_INVALID' | 'HQ_DATA_PLANE_OUTPUT_INVALID' | 'HQ_DATA_PLANE_EXECUTOR_UNAVAILABLE' | 'HQ_DATA_PLANE_EXECUTION_FAILED' | 'HQ_DATA_PLANE_ABORTED';
+export declare class DeploymentDataPlaneError extends Error {
+    readonly code: DeploymentDataPlaneErrorCode;
+    readonly path?: string;
+    constructor(code: DeploymentDataPlaneErrorCode, message: string, options?: {
+        readonly path?: string;
+        readonly cause?: unknown;
+    });
+}
+export interface DeploymentDataPlanePrincipal {
+    readonly subject?: string;
+    readonly roles?: readonly string[];
+    readonly scopes?: readonly string[];
+    readonly claims?: Readonly<Record<string, unknown>>;
+}
+export interface DeploymentDataPlaneRequest {
+    readonly method: string;
+    readonly path: string;
+    readonly input?: unknown;
+    readonly query?: Readonly<Record<string, string | readonly string[]>>;
+    readonly headers?: Readonly<Record<string, string>>;
+    readonly credentials?: unknown;
+    readonly signal?: AbortSignal;
+}
+export type DeploymentDataPlaneJsonRequest = Omit<DeploymentDataPlaneRequest, 'input'> & {
+    readonly input?: string | Uint8Array;
+};
+export interface DeploymentDataPlaneAuthenticationInput {
+    readonly credentials: unknown;
+    readonly request: DeploymentDataPlaneRequest;
+    readonly query: ProtocolNamedQueryContract;
+}
+export interface DeploymentDataPlaneTenantInput {
+    readonly principal: DeploymentDataPlanePrincipal | null;
+    readonly request: DeploymentDataPlaneRequest;
+    readonly query: ProtocolNamedQueryContract;
+}
+export interface DeploymentDataPlaneExecutionInput {
+    readonly query: ProtocolNamedQueryContract;
+    readonly input: unknown;
+    readonly principal: DeploymentDataPlanePrincipal | null;
+    readonly tenant: unknown;
+    readonly request: DeploymentDataPlaneRequest;
+    readonly signal?: AbortSignal;
+}
+export interface DeploymentSemanticPlanExecutionInput extends DeploymentDataPlaneExecutionInput {
+    readonly implementation: Extract<ProtocolQueryImplementation, {
+        readonly kind: 'semantic-plan';
+    }>;
+    readonly deployment: ProtocolDeploymentContract;
+}
+export interface DeploymentCompiledSqlExecutionInput extends DeploymentDataPlaneExecutionInput {
+    readonly implementation: Extract<ProtocolQueryImplementation, {
+        readonly kind: 'compiled-sql';
+    }>;
+    readonly parameters: Readonly<Record<string, unknown>>;
+}
+export interface DeploymentRuntimeReferenceExecutionInput extends DeploymentDataPlaneExecutionInput {
+    readonly implementation: Extract<ProtocolQueryImplementation, {
+        readonly kind: 'runtime-reference';
+    }>;
+}
+export interface DeploymentDataPlaneResult {
+    readonly query: string;
+    readonly output: unknown;
+    readonly cacheTtlMs?: number;
+}
+export interface DeploymentDataPlane {
+    execute(request: DeploymentDataPlaneRequest): Promise<DeploymentDataPlaneResult>;
+    executeJson(request: DeploymentDataPlaneJsonRequest): Promise<DeploymentDataPlaneResult>;
+}
+export interface DeploymentDataPlaneOptions {
+    readonly deployment: ProtocolDeploymentContract;
+    readonly authenticate?: (input: DeploymentDataPlaneAuthenticationInput) => Promise<DeploymentDataPlanePrincipal | null>;
+    readonly resolveTenant?: (input: DeploymentDataPlaneTenantInput) => Promise<unknown>;
+    readonly executeSemanticPlan?: (input: DeploymentSemanticPlanExecutionInput) => Promise<unknown>;
+    readonly executeCompiledSql?: (input: DeploymentCompiledSqlExecutionInput) => Promise<unknown>;
+    readonly executeRuntimeReference?: (input: DeploymentRuntimeReferenceExecutionInput) => Promise<unknown>;
+    readonly limits?: Partial<DeploymentDataPlaneLimits>;
+}
+export declare function createDeploymentDataPlane(options: DeploymentDataPlaneOptions): DeploymentDataPlane;
+//# sourceMappingURL=data-plane.d.ts.map

package/dist/data-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane.d.ts","sourceRoot":"","sources":["../src/data-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAE5B,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAIhC,MAAM,MAAM,4BAA4B,GACpC,6BAA6B,GAC7B,+BAA+B,GAC/B,kCAAkC,GAClC,+BAA+B,GAC/B,yBAAyB,GACzB,+BAA+B,GAC/B,6BAA6B,GAC7B,8BAA8B,GAC9B,oCAAoC,GACpC,gCAAgC,GAChC,uBAAuB,CAAC;AAE5B,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAGrB,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAOrE;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAAC,0BAA0B,EAAE,OAAO,CAAC,GAAG;IACvF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CACtC,CAAC;AAEF,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACxD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,oCAAqC,SAAQ,iCAAiC;IAC7F,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,2BAA2B,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAClG,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,mCAAoC,SAAQ,iCAAiC;IAC5F,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,2BAA2B,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IACjG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,wCAAyC,SAAQ,iCAAiC;IACjG,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,2BAA2B,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;KAAE,CAAC,CAAC;CACvG;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACjF,WAAW,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,KAAK,EAAE,sCAAsC,KAC1C,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,oCAAoC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,mCAAmC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CACjC,KAAK,EAAE,wCAAwC,KAC5C,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACtD;AAiFD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,0BAA0B,GAAG,mBAAmB,CAiLlG"}