@inquir/compute 0.2.0 → 0.4.0

package/dist/source-command-protocol.js

@@ -0,0 +1,311 @@
+import { randomUUID } from 'node:crypto';
+export class SourceCommandClientError extends Error {
+    code;
+    uncertain;
+    constructor(code, message, uncertain, cause) {
+        super(message, { cause });
+        this.code = code;
+        this.uncertain = uncertain;
+        this.name = 'SourceCommandClientError';
+    }
+}
+const UUID = /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/;
+const DIGEST = /^[a-f0-9]{64}$/;
+const STATES = ['PREPARING', 'CANCEL_REQUESTED', 'RESERVED', 'CREATE_INTENT', 'CREATED', 'START_INTENT', 'RUNNING', 'EXITED', 'CLEANUP_PENDING', 'REMOVED'];
+const FAILURE_CODES = ['UNSAFE_PATH', 'UNSAFE_LINK', 'UNSUPPORTED_ENTRY', 'INVALID_METADATA', 'TREE_LIMIT_EXCEEDED'];
+const LOG_FAILURE_CODES = ['LOG_LAYOUT_INVALID', 'LOG_RECORD_INVALID', 'LOG_RECORD_INCOMPLETE', 'LOG_LIMIT_EXCEEDED'];
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Expected object');
+    return value;
+}
+function exact(value, keys) {
+    if (Object.keys(value).some(key => !keys.includes(key)))
+        throw new Error('Unexpected field');
+}
+function identifier(value) {
+    if (typeof value !== 'string' || !value || value.length > 256
+        || Array.from(value).some(character => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127))
+        throw new Error('Invalid identifier');
+    return value;
+}
+function match(value, pattern) {
+    if (typeof value !== 'string' || !pattern.test(value))
+        throw new Error('Invalid identity');
+    return value;
+}
+function integer(value, minimum, maximum = Number.MAX_SAFE_INTEGER) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < minimum || value > maximum)
+        throw new Error('Invalid integer');
+    return value;
+}
+function parseRecord(value) {
+    try {
+        const record = object(value), scope = object(record.scope), input = object(record.input);
+        exact(record, ['version', 'scope', 'requestId', 'input', 'acceptedManifestDigest']);
+        exact(scope, ['tenantId', 'functionId']);
+        exact(input, ['command', 'timeoutMs', 'env']);
+        if (record.version !== 1 || typeof input.command !== 'string' || !input.command.trim() || input.command.includes('\0')
+            || Buffer.byteLength(input.command) > 8192)
+            throw new Error('Invalid command');
+        const env = object(input.env ?? {});
+        if (Object.keys(env).length > 64 || Object.entries(env).some(([key, item]) => !/^[A-Za-z_][A-Za-z0-9_]{0,127}$/.test(key)
+            || typeof item !== 'string' || item.length > 2048 || /[\0\r\n]/.test(item) || item.trim() !== item))
+            throw new Error('Invalid environment');
+        const parsed = { version: 1, scope: { tenantId: identifier(scope.tenantId), functionId: identifier(scope.functionId) },
+            requestId: match(record.requestId, UUID), input: { command: input.command, timeoutMs: integer(input.timeoutMs ?? 60_000, 1, 900_000),
+                env: Object.fromEntries(Object.entries(env).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) },
+            ...(record.acceptedManifestDigest === undefined ? {} : { acceptedManifestDigest: match(record.acceptedManifestDigest, DIGEST) }) };
+        if (Buffer.byteLength(JSON.stringify({ version: 1, id: parsed.requestId, scope: parsed.scope, input: parsed.input })) > 12 * 1024)
+            throw new Error('Request exceeds bound');
+        return parsed;
+    }
+    catch (cause) {
+        throw new SourceCommandClientError('INVALID_RECORD', 'Invalid retained source command', false, cause);
+    }
+}
+function command(value, record) {
+    const parsed = object(value);
+    if (parsed.requestId !== record.requestId || parsed.functionId !== record.scope.functionId || parsed.kind !== 'EXEC_SOURCE')
+        throw new Error('Command identity mismatch');
+    return { requestId: record.requestId, functionId: record.scope.functionId, kind: 'EXEC_SOURCE' };
+}
+function publication(value, record) {
+    if (value === null)
+        return null;
+    const parsed = object(value);
+    if (parsed.id !== record.requestId || parsed.captureId !== record.requestId || !['APPLIED', 'CONFLICT'].includes(String(parsed.status)))
+        throw new Error('Publication identity mismatch');
+    const status = parsed.status;
+    const revision = status === 'APPLIED' ? match(parsed.revision, UUID) : null;
+    if (status === 'CONFLICT' && parsed.revision !== null)
+        throw new Error('Invalid conflict revision');
+    return { id: record.requestId, captureId: record.requestId, status, revision, outputDigest: match(parsed.outputDigest, DIGEST),
+        baseSnapshotDigest: match(parsed.baseSnapshotDigest, DIGEST), sizeBytes: integer(parsed.sizeBytes, 1, 512 * 1024 * 1024) };
+}
+function result(value) {
+    if (value === null)
+        return null;
+    const parsed = object(value);
+    if (typeof parsed.termination !== 'string' || !['EXITED', 'TIMEOUT', 'CANCELLED', 'HOST_REBOOT'].includes(parsed.termination) || parsed.outputSource !== 'nerdctl-json-file'
+        || typeof parsed.truncated !== 'boolean' || typeof parsed.stdoutBase64 !== 'string' || typeof parsed.stderrBase64 !== 'string')
+        throw new Error('Invalid result');
+    const exitCode = parsed.exitCode === null ? null : integer(parsed.exitCode, 0, 255);
+    if (parsed.termination === 'EXITED' && exitCode === null)
+        throw new Error('Missing exited result code');
+    const outputLimit = 1024 * 1024;
+    let outputBytes = 0;
+    for (const encoded of [parsed.stdoutBase64, parsed.stderrBase64]) {
+        // Bound allocation before decoding as well as the combined decoded output.
+        if (encoded.length > 4 * Math.ceil(outputLimit / 3))
+            throw new Error('Result output exceeds bound');
+        const bytes = Buffer.from(encoded, 'base64');
+        outputBytes += bytes.length;
+        if (bytes.toString('base64') !== encoded || outputBytes > outputLimit)
+            throw new Error('Invalid result output encoding or size');
+    }
+    let workspaceOutput = null, workspaceFailure = null;
+    if (parsed.workspaceOutput != null) {
+        const output = object(parsed.workspaceOutput);
+        workspaceOutput = { baseSnapshotDigest: match(output.baseSnapshotDigest, DIGEST), snapshotDigest: match(output.snapshotDigest, DIGEST), sizeBytes: integer(output.sizeBytes, 1, 512 * 1024 * 1024) };
+    }
+    if (parsed.workspaceFailure != null) {
+        const failure = object(parsed.workspaceFailure);
+        if (!FAILURE_CODES.includes(String(failure.code)) || workspaceOutput)
+            throw new Error('Invalid workspace failure');
+        workspaceFailure = { baseSnapshotDigest: match(failure.baseSnapshotDigest, DIGEST), code: failure.code };
+    }
+    let logFailure;
+    if (Object.hasOwn(parsed, 'logFailure')) {
+        exact(parsed, ['attemptId', 'manifestDigest', 'termination', 'exitCode', 'durationMs', 'stdoutBase64', 'stderrBase64',
+            'truncated', 'outputSource', 'workspaceOutput', 'workspaceFailure', 'logFailure']);
+        const failure = object(parsed.logFailure);
+        exact(failure, ['code']);
+        if (typeof failure.code !== 'string' || !LOG_FAILURE_CODES.includes(failure.code) || parsed.workspaceOutput !== null || parsed.workspaceFailure !== null
+            || parsed.stdoutBase64 !== '' || parsed.stderrBase64 !== '' || parsed.truncated !== true)
+            throw new Error('Invalid log capture failure');
+        logFailure = { code: failure.code };
+    }
+    return { attemptId: match(parsed.attemptId, UUID), manifestDigest: match(parsed.manifestDigest, DIGEST),
+        termination: parsed.termination, exitCode,
+        durationMs: integer(parsed.durationMs, 0), stdoutBase64: parsed.stdoutBase64, stderrBase64: parsed.stderrBase64,
+        truncated: parsed.truncated, outputSource: 'nerdctl-json-file', workspaceOutput, workspaceFailure,
+        ...(logFailure ? { logFailure } : {}) };
+}
+function outcome(value, record, readOnly) {
+    const parsed = object(value), meta = object(parsed.command), identity = command(meta, record);
+    if (!STATES.includes(String(meta.state)) || typeof meta.cancelled !== 'boolean')
+        throw new Error('Invalid command state');
+    const output = result(parsed.result), receipt = publication(parsed.publication, record);
+    let binding = null;
+    if (parsed.publicationBinding != null) {
+        const candidate = object(parsed.publicationBinding);
+        exact(candidate, ['tenantId', 'functionId', 'requestId', 'manifestDigest', 'baseSnapshotDigest']);
+        if (!receipt || candidate.tenantId !== record.scope.tenantId || candidate.functionId !== record.scope.functionId
+            || candidate.requestId !== record.requestId || candidate.baseSnapshotDigest !== receipt.baseSnapshotDigest)
+            throw new Error('Publication binding mismatch');
+        binding = { tenantId: record.scope.tenantId, functionId: record.scope.functionId, requestId: record.requestId,
+            manifestDigest: match(candidate.manifestDigest, DIGEST), baseSnapshotDigest: match(candidate.baseSnapshotDigest, DIGEST) };
+        if (output && binding.manifestDigest !== output.manifestDigest)
+            throw new Error('Publication manifest mismatch');
+    }
+    if (readOnly && (receipt || parsed.publicationBinding !== undefined) || receipt && (meta.state !== 'REMOVED'
+        || !output && !binding || parsed.publicationBinding !== undefined && !binding
+        || output && (!output.workspaceOutput || receipt.outputDigest !== output.workspaceOutput.snapshotDigest
+            || receipt.baseSnapshotDigest !== output.workspaceOutput.baseSnapshotDigest || receipt.sizeBytes !== output.workspaceOutput.sizeBytes)
+        || meta.cancelled && receipt.status === 'APPLIED'))
+        throw new Error('Invalid publication outcome');
+    if (output || binding)
+        bindManifest(record, output?.manifestDigest ?? binding.manifestDigest);
+    return { command: { ...identity, state: meta.state, cancelled: meta.cancelled }, result: output, publication: receipt,
+        ...(parsed.publicationBinding === undefined ? {} : { publicationBinding: binding }) };
+}
+function bindManifest(record, digest) {
+    if (record.acceptedManifestDigest !== undefined && record.acceptedManifestDigest !== digest)
+        throw new Error('Accepted manifest changed');
+    record.acceptedManifestDigest = digest;
+}
+/** Execution and publication are separate: a nonzero exit alone does not describe source publication. */
+export function sourcePublicationState(value) {
+    return value.result?.logFailure ? 'CAPTURE_FAILED' : value.publication?.status ?? (value.result?.workspaceFailure ? 'OUTPUT_FAILED' : 'NOT_PUBLISHED');
+}
+function operation(record, transport, retainAcceptance) {
+    const base = `/functions/${encodeURIComponent(record.scope.functionId)}/source-commands`, url = `${base}/${record.requestId}`;
+    let pending = false, retainedDigest = record.acceptedManifestDigest, tail = Promise.resolve();
+    const persist = async () => {
+        if (!pending)
+            return;
+        try {
+            await retainAcceptance?.(structuredClone(record));
+        }
+        catch (cause) {
+            throw new SourceCommandClientError('RETENTION', 'Accepted source identity could not be retained; persist it before another request', true, cause);
+        }
+        retainedDigest = record.acceptedManifestDigest;
+        pending = false;
+    };
+    const serialized = (work) => {
+        const result = tail.then(work);
+        tail = result.then(() => undefined, () => undefined);
+        return result;
+    };
+    const call = (path, init, decode) => {
+        const queued = serialized(async () => {
+            init.signal?.throwIfAborted();
+            await persist();
+            init.signal?.throwIfAborted();
+            let response;
+            try {
+                init.signal?.throwIfAborted();
+                const pending = transport(structuredClone(record.scope), path, init);
+                // Even an adapter that cannot abort its HTTP request must let the caller
+                // stop waiting. Its eventual reply never triggers another action here.
+                response = !init.signal ? await pending : await new Promise((resolve, reject) => {
+                    const signal = init.signal;
+                    const abort = () => { signal.removeEventListener('abort', abort); reject(signal.reason); };
+                    signal.addEventListener('abort', abort, { once: true });
+                    pending.then(value => { signal.removeEventListener('abort', abort); resolve(value); }, error => { signal.removeEventListener('abort', abort); reject(error); });
+                    if (signal.aborted)
+                        abort();
+                });
+            }
+            catch (cause) {
+                const status = cause && typeof cause === 'object' && 'status' in cause ? Number(cause.status) : 0;
+                if (status === 409)
+                    throw new SourceCommandClientError('CONFLICT', 'Request ID or source revision conflict; inspect this operation', false, cause);
+                if (status >= 400 && status < 500)
+                    throw new SourceCommandClientError('REJECTED', 'Source command request rejected', false, cause);
+                throw new SourceCommandClientError('UNCERTAIN', 'Reply unavailable; retain this request ID and inspect or retry the same action', true, cause);
+            }
+            let decoded;
+            try {
+                decoded = decode(response);
+            }
+            catch (cause) {
+                throw new SourceCommandClientError('PROTOCOL', 'Invalid source command response; retain this request ID', true, cause);
+            }
+            if (record.acceptedManifestDigest !== retainedDigest) {
+                pending = true;
+                await persist();
+            }
+            return decoded;
+        });
+        // Ending observation must not wait for an earlier HTTP/storage operation.
+        // The queued transaction still checks this signal before any later dispatch.
+        if (!init.signal)
+            return queued;
+        return new Promise((resolve, reject) => {
+            const signal = init.signal, abort = () => { signal.removeEventListener('abort', abort); reject(new SourceCommandClientError('UNCERTAIN', 'Observation stopped; retain this request ID', true, signal.reason)); };
+            signal.addEventListener('abort', abort, { once: true });
+            queued.then(value => { signal.removeEventListener('abort', abort); resolve(value); }, error => { signal.removeEventListener('abort', abort); reject(error); });
+            if (signal.aborted)
+                abort();
+        });
+    };
+    const post = (signal, body = {}) => ({ method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body), signal });
+    const status = (signal) => call(url, { method: 'GET', signal }, value => outcome(value, record, true));
+    return {
+        record: () => structuredClone(record),
+        persist: () => serialized(persist),
+        submit: signal => call(base, post(signal, { requestId: record.requestId, ...record.input }), value => {
+            const meta = object(object(value).command), identity = command(meta, record);
+            if (!STATES.includes(String(meta.state)) || typeof meta.cancelled !== 'boolean')
+                throw new Error('Invalid assignment');
+            const attemptId = match(meta.attemptId, UUID), manifestDigest = match(meta.manifestDigest, DIGEST);
+            bindManifest(record, manifestDigest);
+            return { command: { ...identity, state: meta.state, cancelled: meta.cancelled,
+                    attemptId, manifestDigest } };
+        }),
+        status,
+        reconcile: signal => call(`${url}/reconcile`, post(signal), value => outcome(value, record, false)),
+        cancel: signal => call(`${url}/cancel`, post(signal), value => {
+            const parsed = object(value), identity = command(parsed.command, record), receipt = publication(parsed.publication, record);
+            if (parsed.state === 'PUBLICATION_COMMITTED' ? receipt?.status !== 'APPLIED'
+                : parsed.state !== 'CANCEL_REQUESTED' || receipt?.status === 'APPLIED')
+                throw new Error('Invalid cancellation outcome');
+            return { command: identity, state: parsed.state, publication: receipt };
+        }),
+        async poll(options = {}) {
+            const timeout = integer(options.maxWaitMs ?? 60_000, 1, 900_000), interval = integer(options.intervalMs ?? 1000, 1, 60_000);
+            const signal = AbortSignal.any([AbortSignal.timeout(timeout), ...(options.signal ? [options.signal] : [])]);
+            try {
+                for (;;) {
+                    signal.throwIfAborted();
+                    const observed = await status(signal);
+                    signal.throwIfAborted();
+                    // CANCEL_REQUESTED without an observable attempt is durable intent,
+                    // not a removal/capacity receipt. Return it without claiming quiescence.
+                    if (observed.command.state === 'REMOVED' || observed.command.state === 'CANCEL_REQUESTED')
+                        return observed;
+                    await new Promise((resolve, reject) => {
+                        const abort = () => { clearTimeout(timer); signal.removeEventListener('abort', abort); reject(signal.reason); };
+                        const timer = setTimeout(() => { signal.removeEventListener('abort', abort); resolve(); }, interval);
+                        signal.addEventListener('abort', abort, { once: true });
+                        if (signal.aborted)
+                            abort();
+                    });
+                }
+            }
+            catch (cause) {
+                if (signal.aborted)
+                    throw new SourceCommandClientError('WAIT_ENDED', 'Observation stopped; this does not cancel the command', true, cause);
+                throw cause;
+            }
+        },
+    };
+}
+/** Retain must durably store the record (including secrets securely) before any HTTP call. */
+export async function prepareSourceCommand(options) {
+    const record = parseRecord({ version: 1, scope: options.scope, requestId: options.requestId ?? randomUUID(), input: options.input });
+    await options.retain(structuredClone(record));
+    return operation(record, options.transport, options.retainAcceptance);
+}
+/** Restoring an operation never submits it; callers explicitly choose observe/retry/reconcile/cancel. */
+export function restoreSourceCommand(value, options) {
+    const record = parseRecord(value);
+    if (record.scope.tenantId !== options.scope.tenantId || record.scope.functionId !== options.scope.functionId) {
+        throw new SourceCommandClientError('INVALID_RECORD', 'Retained source command belongs to another scope', false);
+    }
+    return operation(record, options.transport, options.retainAcceptance);
+}
+//# sourceMappingURL=source-command-protocol.js.map

package/dist/source-command-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-command-protocol.js","sourceRoot":"","sources":["../src/source-command-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsDzC,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACrB;IACO;IADnC,YAA4B,IAAwG,EAClI,OAAe,EAAkB,SAAkB,EAAE,KAAe;QACpE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAFA,SAAI,GAAJ,IAAI,CAAoG;QACjG,cAAS,GAAT,SAAS,CAAS;QACxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACpE,CAAC;CACF;AACD,MAAM,IAAI,GAAG,uEAAuE,CAAC;AACrF,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,MAAM,GAAsB,CAAC,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAC/K,MAAM,aAAa,GAAsB,CAAC,aAAa,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;AACxI,MAAM,iBAAiB,GAAsB,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;AACzI,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpG,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,SAAS,KAAK,CAAC,KAA8B,EAAE,IAAc;IAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAC/F,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WACxD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACjJ,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,OAAe;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAAC,OAAO,KAAK,CAAC;AAC3G,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe,EAAE,OAAO,GAAG,MAAM,CAAC,gBAAgB;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAAC,OAAO,KAAK,CAAC;AACxJ,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzF,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7K,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;eACjH,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;eACpH,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC9I,MAAM,MAAM,GAAwB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;YACzI,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC;gBAClI,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAA2B,EAAE;YACzH,GAAG,CAAC,MAAM,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACrI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC5K,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,iCAAiC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AAC5H,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,MAA2B;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1K,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,aAAsB,EAAE,CAAC;AAC5G,CAAC;AACD,SAAS,WAAW,CAAC,KAAc,EAAE,MAA2B;IAC9D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC1L,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpG,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;QAC5H,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;AAC/H,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,mBAAmB;WACvK,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpK,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACxG,MAAM,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC;IAChC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACjE,2EAA2E;QAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1E,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,IAAI,WAAW,GAAG,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,eAAe,GAAiC,IAAI,EAAE,gBAAgB,GAAkC,IAAI,CAAC;IACjH,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,eAAe,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;IACvM,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACnH,gBAAgB,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAsC,EAAE,CAAC;IAC7I,CAAC;IACD,IAAI,UAAwC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc;YACnH,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;eACnJ,MAAM,CAAC,YAAY,KAAK,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK,EAAE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC3I,UAAU,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAgC,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC;QACrG,WAAW,EAAE,MAAM,CAAC,WAAiD,EAAE,QAAQ;QAC/E,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;QAC/G,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB;QACjG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5C,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,MAA2B,EAAE,QAAiB;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACxF,IAAI,OAAO,GAA2C,IAAI,CAAC;IAC3D,IAAI,MAAM,CAAC,kBAAkB,IAAI,IAAI,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpD,KAAK,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,UAAU;eAC3G,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9J,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3G,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7H,IAAI,MAAM,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;WACvG,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,OAAO;WAC1E,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,eAAe,CAAC,cAAc;eAClG,OAAO,CAAC,kBAAkB,KAAK,MAAM,CAAC,eAAe,CAAC,kBAAkB,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;WACrI,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrG,IAAI,MAAM,IAAI,OAAO;QAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,IAAI,OAAQ,CAAC,cAAc,CAAC,CAAC;IAC/F,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAA2B,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO;QACzI,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AACD,SAAS,YAAY,CAAC,MAA2B,EAAE,MAAc;IAC/D,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,IAAI,MAAM,CAAC,sBAAsB,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1I,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC;AACzC,CAAC;AACD,yGAAyG;AACzG,MAAM,UAAU,sBAAsB,CAAC,KAA2B;IAChE,OAAO,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AACzJ,CAAC;AAYD,SAAS,SAAS,CAAC,MAA2B,EAAE,SAAiC,EAC/E,gBAA8D;IAC9D,MAAM,IAAI,GAAG,cAAc,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;IAC9H,IAAI,OAAO,GAAC,KAAK,EAAC,cAAc,GAAC,MAAM,CAAC,sBAAsB,EAAC,IAAI,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtF,MAAM,OAAO,GAAC,KAAK,IAAE,EAAE;QACrB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YAAA,MAAM,gBAAgB,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAAA,CAAC;QACxD,OAAM,KAAK,EAAE,CAAC;YAAA,MAAM,IAAI,wBAAwB,CAAC,WAAW,EAAC,mFAAmF,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QAC9J,cAAc,GAAC,MAAM,CAAC,sBAAsB,CAAC;QAAA,OAAO,GAAC,KAAK,CAAC;IAC7D,CAAC,CAAC;IACF,MAAM,UAAU,GAAC,CAAI,IAAmB,EAAY,EAAE;QACpD,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAA,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,SAAS,EAAC,GAAE,EAAE,CAAA,SAAS,CAAC,CAAC;QAAA,OAAO,MAAM,CAAC;IAC3F,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAI,IAAY,EAAE,IAAiB,EAAE,MAA6B,EAAc,EAAE;QAC7F,MAAM,MAAM,GAAC,UAAU,CAAC,KAAK,IAAE,EAAE;YACjC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAAA,MAAM,OAAO,EAAE,CAAC;YAAA,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC5E,IAAI,QAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrE,yEAAyE;gBACzE,uEAAuE;gBACvE,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACvF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAO,CAAC;oBAC5B,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnF,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3E,IAAI,MAAM,CAAC,OAAO;wBAAE,KAAK,EAAE,CAAC;gBAC9B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClG,IAAI,MAAM,KAAK,GAAG;oBAAE,MAAM,IAAI,wBAAwB,CAAC,UAAU,EAAE,gEAAgE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACnJ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;oBAAE,MAAM,IAAI,wBAAwB,CAAC,UAAU,EAAE,iCAAiC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACnI,MAAM,IAAI,wBAAwB,CAAC,WAAW,EAAE,gFAAgF,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACjJ,CAAC;YACD,IAAI,OAAS,CAAC;YACd,IAAI,CAAC;gBAAC,OAAO,GAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YACjC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,wBAAwB,CAAC,UAAU,EAAE,yDAAyD,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YACzI,IAAI,MAAM,CAAC,sBAAsB,KAAG,cAAc,EAAE,CAAC;gBAAA,OAAO,GAAC,IAAI,CAAC;gBAAA,MAAM,OAAO,EAAE,CAAC;YAAA,CAAC;YACnF,OAAO,OAAO,CAAC;QACf,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAG,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC;QAC/B,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;YACtC,MAAM,MAAM,GAAC,IAAI,CAAC,MAAO,EAAC,KAAK,GAAC,GAAE,EAAE,GAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,MAAM,CAAC,IAAI,wBAAwB,CAAC,WAAW,EAAC,6CAA6C,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;YACpM,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,GAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,KAAK,CAAA,EAAE,GAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;YAClJ,IAAG,MAAM,CAAC,OAAO;gBAAE,KAAK,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAoB,EAAE,OAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACrK,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACrH,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;QACrC,OAAO,EAAC,GAAE,EAAE,CAAA,UAAU,CAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE;YACnG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACvH,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YACnG,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACrC,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAA2B,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;oBACjG,SAAS,EAAE,cAAc,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC;QACF,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,GAAG,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACnG,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5H,IAAI,MAAM,CAAC,KAAK,KAAK,uBAAuB,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS;gBAC1E,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,kBAAkB,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC1H,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAA2C,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QAChH,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE;YACrB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5H,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5G,IAAI,CAAC;gBACH,SAAS,CAAC;oBACR,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,oEAAoE;oBACpE,yEAAyE;oBACzE,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK,kBAAkB;wBAAE,OAAO,QAAQ,CAAC;oBAC3G,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBAC1C,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;wBAChH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;wBACrG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;wBACxD,IAAI,MAAM,CAAC,OAAO;4BAAE,KAAK,EAAE,CAAC;oBAC9B,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,wBAAwB,CAAC,YAAY,EAAE,uDAAuD,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC3I,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AACD,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAC2G;IACpJ,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACrI,MAAM,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACvE,CAAC;AACD,yGAAyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,OAAsI;IACzL,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7G,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,kDAAkD,EAAE,KAAK,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACvE,CAAC"}

package/dist/source-commands.d.ts

@@ -0,0 +1,33 @@
+import { type TransportClient } from './transport.js';
+import { type SourceCommandRecord as ProtocolRecord, type SourceCommandOperation as ProtocolOperation, type SourceCommandInput } from './source-command-protocol.js';
+export { SourceCommandClientError, sourcePublicationState, prepareSourceCommand as prepareSourceCommandProtocol, restoreSourceCommand as restoreSourceCommandProtocol } from './source-command-protocol.js';
+export type { SourceCommandScope, SourceCommandInput, SourceCommandState, SourceCommandResult, SourceCommandOutcome, SourceCommandCancellation, SourceCommandPublication, SourceCommandPublicationBinding, SourceWorkspaceOutput, SourceWorkspaceFailure, SourceLogFailure, SourceCommandTransport, SourceCommandRecord as SourceCommandProtocolRecord, SourceCommandOperation as SourceCommandProtocolOperation } from './source-command-protocol.js';
+export interface SourceCommandRecord extends ProtocolRecord {
+    apiUrl: string;
+    /** Raw secret hash; credentials themselves are never stored in the record. */
+    credentialHash: string;
+    /** Original selector. Actions use the resolved immutable scope.tenantId. */
+    selector: string | null;
+}
+export interface SourceCommandOperation extends Omit<ProtocolOperation, 'record'> {
+    record(): SourceCommandRecord;
+}
+export type SourceCommandRetain = (record: SourceCommandRecord) => Promise<void>;
+/** Securely persist every supplied record, atomically binding UUID to its input.
+ * This prepares only; caller explicitly invokes submit. The callback also persists
+ * learned acceptance before an action/poll can return or issue another request.
+ */
+export declare function prepareSourceCommand(client: TransportClient, options: {
+    function: string;
+    requestId: string;
+    input: SourceCommandInput;
+    retain: SourceCommandRetain;
+    signal?: AbortSignal;
+}): Promise<SourceCommandOperation>;
+/** No discovery or submission. The current selector/context must match the record;
+ * all subsequent actions use its retained resolved workspace and function IDs.
+ */
+export declare function restoreSourceCommand(client: TransportClient, value: unknown, options: {
+    retain: SourceCommandRetain;
+}): Promise<SourceCommandOperation>;
+//# sourceMappingURL=source-commands.d.ts.map

package/dist/source-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-commands.d.ts","sourceRoot":"","sources":["../src/source-commands.ts"],"names":[],"mappings":"AACA,OAAO,EAA+D,KAAK,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAElH,OAAO,EACL,KAAK,mBAAmB,IAAI,cAAc,EAAC,KAAK,sBAAsB,IAAI,iBAAiB,EAAC,KAAK,kBAAkB,EAAC,MAAM,8BAA8B,CAAC;AAC3J,OAAO,EAAC,wBAAwB,EAAC,sBAAsB,EACrD,oBAAoB,IAAI,4BAA4B,EAAC,oBAAoB,IAAI,4BAA4B,EAAC,MAAM,8BAA8B,CAAC;AACjJ,YAAY,EAAC,kBAAkB,EAAC,kBAAkB,EAAC,kBAAkB,EAAC,mBAAmB,EAAC,oBAAoB,EAC5G,yBAAyB,EAAC,wBAAwB,EAAC,+BAA+B,EAAC,qBAAqB,EAAC,sBAAsB,EAAC,gBAAgB,EAChJ,sBAAsB,EAAC,mBAAmB,IAAI,2BAA2B,EAAC,sBAAsB,IAAI,8BAA8B,EAAC,MAAM,8BAA8B,CAAC;AAE1K,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,MAAM,EAAC,MAAM,CAAC;IACd,8EAA8E;IAC9E,cAAc,EAAC,MAAM,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,EAAC,MAAM,GAAC,IAAI,CAAC;CACtB;AACD,MAAM,WAAW,sBAAuB,SAAQ,IAAI,CAAC,iBAAiB,EAAC,QAAQ,CAAC;IAAE,MAAM,IAAG,mBAAmB,CAAA;CAAC;AAC/G,MAAM,MAAM,mBAAmB,GAAC,CAAC,MAAM,EAAC,mBAAmB,KAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAkD5E;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAC,eAAe,EAAC,OAAO,EAAC;IAAC,QAAQ,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,kBAAkB,CAAC;IACnI,MAAM,EAAC,mBAAmB,CAAC;IAAA,MAAM,CAAC,EAAC,WAAW,CAAA;CAAC,GAAE,OAAO,CAAC,sBAAsB,CAAC,CAqBjF;AACD;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAC,eAAe,EAAC,KAAK,EAAC,OAAO,EAAC,OAAO,EAAC;IAAC,MAAM,EAAC,mBAAmB,CAAA;CAAC,GAAE,OAAO,CAAC,sBAAsB,CAAC,CAOpJ"}

package/dist/source-commands.js

@@ -0,0 +1,116 @@
+import { createHash } from 'node:crypto';
+import { createClient, authHeaders, getMe, listRemoteFunctions, toApiError } from './transport.js';
+import { boundedSourceCommandFetch } from './source-command-http.js';
+import { prepareSourceCommand as prepareProtocol, restoreSourceCommand as restoreProtocol, SourceCommandClientError } from './source-command-protocol.js';
+export { SourceCommandClientError, sourcePublicationState, prepareSourceCommand as prepareSourceCommandProtocol, restoreSourceCommand as restoreSourceCommandProtocol } from './source-command-protocol.js';
+function identifier(value) {
+    if (typeof value !== 'string' || !value.trim() || value.length > 256 || /[\x00-\x1f\x7f]/.test(value))
+        throw new SourceCommandClientError('INVALID_RECORD', 'Invalid source command scope', false);
+    return value;
+}
+function context(source) {
+    let api;
+    try {
+        api = new URL(source.baseUrl);
+    }
+    catch {
+        throw new SourceCommandClientError('INVALID_RECORD', 'Invalid source command API URL', false);
+    }
+    if (!['http:', 'https:'].includes(api.protocol) || api.username || api.password || api.search || api.hash || source.baseUrl.length > 2048
+        || !source.apiKey)
+        throw new SourceCommandClientError('INVALID_RECORD', 'Source commands require a plain HTTP(S) API and credential', false);
+    const apiUrl = api.toString().replace(/\/+$/, ''), credentialHash = createHash('sha256').update(source.apiKey, 'utf8').digest('hex');
+    const selector = source.workspaceId === undefined ? null : identifier(source.workspaceId);
+    return { apiUrl, credentialHash, selector, client: createClient({ baseUrl: apiUrl, apiKey: source.apiKey, workspaceId: selector ?? undefined,
+            fetchImpl: boundedSourceCommandFetch(source.fetchImpl) }) };
+}
+function retainedContext(value, current) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new SourceCommandClientError('INVALID_RECORD', 'Invalid retained source command', false);
+    const record = value;
+    const allowed = ['version', 'apiUrl', 'credentialHash', 'selector', 'scope', 'requestId', 'input', 'acceptedManifestDigest'];
+    if (Object.keys(record).some(key => !allowed.includes(key)) || record.apiUrl !== current.apiUrl || record.credentialHash !== current.credentialHash
+        || record.selector !== current.selector)
+        throw new SourceCommandClientError('INVALID_RECORD', 'Retained source command belongs to a different API, credential or workspace selector', false);
+    const input = record.input;
+    if (!input || typeof input !== 'object' || Array.isArray(input) || Object.keys(input).sort().join(',') !== 'command,env,timeoutMs'
+        || typeof input.timeoutMs !== 'number' || !input.env || typeof input.env !== 'object' || Array.isArray(input.env)) {
+        throw new SourceCommandClientError('INVALID_RECORD', 'Retained source command must contain exact normalized input', false);
+    }
+    const { apiUrl: _, credentialHash: __, selector: ___, ...protocol } = record;
+    return { record: structuredClone(protocol), binding: { apiUrl: current.apiUrl, credentialHash: current.credentialHash, selector: current.selector } };
+}
+function bound(current, scope) {
+    const client = createClient({ baseUrl: current.apiUrl, apiKey: current.client.apiKey, workspaceId: scope.tenantId, fetchImpl: current.client.fetchImpl });
+    return async (received, pathname, init) => {
+        if (received.tenantId !== scope.tenantId || received.functionId !== scope.functionId)
+            throw new Error('Source command scope changed');
+        const headers = new Headers(init.headers);
+        for (const [name, value] of Object.entries(authHeaders(client)))
+            headers.set(name, value);
+        const response = await client.fetchImpl(`${client.baseUrl}${pathname}`, { ...init, headers, redirect: 'error' });
+        const text = await response.text();
+        let payload;
+        try {
+            payload = text ? JSON.parse(text) : undefined;
+        }
+        catch {
+            payload = undefined;
+        }
+        if (!response.ok)
+            throw toApiError(response, payload);
+        return payload;
+    };
+}
+function envelope(record, current) {
+    // Property order matches the shared SDK record contract; never share caller references.
+    return { version: 1, apiUrl: current.apiUrl, credentialHash: current.credentialHash, selector: current.selector, scope: structuredClone(record.scope),
+        requestId: record.requestId, input: structuredClone(record.input), ...(record.acceptedManifestDigest ? { acceptedManifestDigest: record.acceptedManifestDigest } : {}) };
+}
+function wrapped(protocol, current) {
+    return { ...protocol, record: () => envelope(protocol.record(), current) };
+}
+/** Securely persist every supplied record, atomically binding UUID to its input.
+ * This prepares only; caller explicitly invokes submit. The callback also persists
+ * learned acceptance before an action/poll can return or issue another request.
+ */
+export async function prepareSourceCommand(client, options) {
+    if (typeof options.retain !== 'function')
+        throw new SourceCommandClientError('INVALID_RECORD', 'A durable retain callback is required', false);
+    if (typeof options.requestId !== 'string' || !/^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(options.requestId))
+        throw new SourceCommandClientError('INVALID_RECORD', 'A caller-retained lowercase UUID is required', false);
+    const retainCallback = options.retain, functionRef = identifier(options.function), current = context(client), signal = options.signal;
+    // Validate bounded input before discovery, without any dispatch.
+    const candidate = await prepareProtocol({ scope: { tenantId: 'unresolved', functionId: 'unresolved' }, requestId: options.requestId, input: options.input,
+        retain: async () => undefined, transport: async () => { throw new Error('Validation cannot dispatch'); } });
+    signal?.throwIfAborted();
+    const discovery = createClient({ ...current.client, fetchImpl: (input, init) => current.client.fetchImpl(input, { ...init, signal }) });
+    const me = await getMe(discovery), tenantId = identifier(me.activeWorkspace?.id);
+    signal?.throwIfAborted();
+    const pinned = createClient({ ...discovery, workspaceId: tenantId });
+    const functions = await listRemoteFunctions(pinned);
+    const named = functions.find(item => item.id === functionRef) ?? functions.find(item => item.name === functionRef);
+    const linked = named ? [] : functions.filter(item => item.linkedLocalName === functionRef);
+    const fn = named ?? (linked.length === 1 ? linked[0] : undefined);
+    if (!fn)
+        throw new SourceCommandClientError('INVALID_RECORD', 'Source function resolution is absent or ambiguous', false);
+    signal?.throwIfAborted();
+    const scope = { tenantId, functionId: identifier(fn.id) };
+    const retain = (record) => retainCallback(envelope(record, current));
+    const operation = await prepareProtocol({ scope, requestId: candidate.record().requestId, input: candidate.record().input, retain, retainAcceptance: retain, transport: bound(current, scope) });
+    return wrapped(operation, current);
+}
+/** No discovery or submission. The current selector/context must match the record;
+ * all subsequent actions use its retained resolved workspace and function IDs.
+ */
+export async function restoreSourceCommand(client, value, options) {
+    if (typeof options.retain !== 'function')
+        throw new SourceCommandClientError('INVALID_RECORD', 'A durable retain callback is required', false);
+    const retainCallback = options.retain;
+    const current = context(client), retained = retainedContext(value, current);
+    const retain = (record) => retainCallback(envelope(record, retained.binding));
+    const operation = restoreProtocol(retained.record, { scope: retained.record.scope, transport: bound(current, retained.record.scope), retainAcceptance: retain });
+    await retain(operation.record());
+    return wrapped(operation, retained.binding);
+}
+//# sourceMappingURL=source-commands.js.map

package/dist/source-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-commands.js","sourceRoot":"","sources":["../src/source-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,YAAY,EAAC,WAAW,EAAC,KAAK,EAAC,mBAAmB,EAAC,UAAU,EAAsB,MAAM,gBAAgB,CAAC;AAClH,OAAO,EAAC,yBAAyB,EAAC,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAC,oBAAoB,IAAI,eAAe,EAAC,oBAAoB,IAAI,eAAe,EAAC,wBAAwB,EACM,MAAM,8BAA8B,CAAC;AAC3J,OAAO,EAAC,wBAAwB,EAAC,sBAAsB,EACrD,oBAAoB,IAAI,4BAA4B,EAAC,oBAAoB,IAAI,4BAA4B,EAAC,MAAM,8BAA8B,CAAC;AAejJ,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAC,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,8BAA8B,EAAC,KAAK,CAAC,CAAC;IAC5L,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,OAAO,CAAC,MAAsB;IACrC,IAAI,GAAO,CAAC;IACZ,IAAI,CAAC;QAAA,GAAG,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAAA,CAAC;IAClC,MAAM,CAAC;QAAA,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,gCAAgC,EAAC,KAAK,CAAC,CAAC;IAAA,CAAC;IACpG,IAAG,CAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAC,IAAI;WAChI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,4DAA4D,EAAC,KAAK,CAAC,CAAC;IAC7I,MAAM,MAAM,GAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAC,EAAE,CAAC,EAAC,cAAc,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAC,MAAM,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClF,OAAO,EAAC,MAAM,EAAC,cAAc,EAAC,QAAQ,EAAC,MAAM,EAAC,YAAY,CAAC,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,WAAW,EAAC,QAAQ,IAAE,SAAS;YAC7H,SAAS,EAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAC,CAAC,EAAC,CAAC;AAC7D,CAAC;AACD,SAAS,eAAe,CAAC,KAAa,EAAC,OAAe;IACpD,IAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,iCAAiC,EAAC,KAAK,CAAC,CAAC;IAC3J,MAAM,MAAM,GAAC,KAA+B,CAAC;IAC7C,MAAM,OAAO,GAAC,CAAC,SAAS,EAAC,QAAQ,EAAC,gBAAgB,EAAC,UAAU,EAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,wBAAwB,CAAC,CAAC;IACpH,IAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,KAAG,OAAO,CAAC,cAAc;WACvI,MAAM,CAAC,QAAQ,KAAG,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,sFAAsF,EAAC,KAAK,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAC,MAAM,CAAC,KAAoC,CAAC;IACxD,IAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,uBAAuB;WACxH,OAAO,KAAK,CAAC,SAAS,KAAG,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,6DAA6D,EAAC,KAAK,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,EAAC,MAAM,EAAC,CAAC,EAAC,cAAc,EAAC,EAAE,EAAC,QAAQ,EAAC,GAAG,EAAC,GAAG,QAAQ,EAAC,GAAC,MAAM,CAAC;IACnE,OAAO,EAAC,MAAM,EAAC,eAAe,CAAC,QAAQ,CAA8B,EAAC,OAAO,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,cAAc,EAAC,OAAO,CAAC,cAAc,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,EAAC,CAAC;AACzK,CAAC;AACD,SAAS,KAAK,CAAC,OAAe,EAAC,KAA6B;IAC1D,MAAM,MAAM,GAAC,YAAY,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,MAAM,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,WAAW,EAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAC,CAAC,CAAC;IAC/I,OAAO,KAAK,EAAC,QAAgC,EAAC,QAAe,EAAC,IAAgB,EAAkB,EAAE;QAChG,IAAG,QAAQ,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAG,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACjI,MAAM,OAAO,GAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAA,KAAI,MAAM,CAAC,IAAI,EAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;QAC/H,MAAM,QAAQ,GAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,QAAQ,EAAE,EAAC,EAAC,GAAG,IAAI,EAAC,OAAO,EAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC;QACzG,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAAA,IAAI,OAAe,CAAC;QACrD,IAAI,CAAC;YAAA,OAAO,GAAC,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,OAAO,GAAC,SAAS,CAAC;QAAA,CAAC;QACzE,IAAG,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC;QAAA,OAAO,OAAO,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,MAAqB,EAAC,OAA0D;IAChG,wFAAwF;IACxF,OAAO,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,cAAc,EAAC,OAAO,CAAC,cAAc,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,KAAK,EAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;QACzI,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,KAAK,EAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAA,CAAC,CAAA,EAAC,sBAAsB,EAAC,MAAM,CAAC,sBAAsB,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;AACjK,CAAC;AACD,SAAS,OAAO,CAAC,QAA0B,EAAC,OAA0D;IACpG,OAAO,EAAC,GAAG,QAAQ,EAAC,MAAM,EAAC,GAAE,EAAE,CAAA,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAC,OAAO,CAAC,EAAC,CAAC;AACtE,CAAC;AACD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAsB,EAAC,OACjB;IAC/C,IAAG,OAAO,OAAO,CAAC,MAAM,KAAG,UAAU;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,uCAAuC,EAAC,KAAK,CAAC,CAAC;IAC1I,IAAG,OAAO,OAAO,CAAC,SAAS,KAAG,QAAQ,IAAI,CAAC,uEAAuE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,8CAA8C,EAAC,KAAK,CAAC,CAAC;IACtP,MAAM,cAAc,GAAC,OAAO,CAAC,MAAM,EAAC,WAAW,GAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,GAAC,OAAO,CAAC,MAAM,CAAC,EAAC,MAAM,GAAC,OAAO,CAAC,MAAM,CAAC;IAC3H,iEAAiE;IACjE,MAAM,SAAS,GAAC,MAAM,eAAe,CAAC,EAAC,KAAK,EAAC,EAAC,QAAQ,EAAC,YAAY,EAAC,UAAU,EAAC,YAAY,EAAC,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,KAAK,EAAC,OAAO,CAAC,KAAK;QAC1I,MAAM,EAAC,KAAK,IAAE,EAAE,CAAA,SAAS,EAAC,SAAS,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IAClG,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,SAAS,GAAC,YAAY,CAAC,EAAC,GAAG,OAAO,CAAC,MAAM,EAAC,SAAS,EAAC,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAA,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAC,EAAC,GAAG,IAAI,EAAC,MAAM,EAAC,CAAC,EAAC,CAAC,CAAC;IAC3H,MAAM,EAAE,GAAC,MAAM,KAAK,CAAC,SAAS,CAAC,EAAC,QAAQ,GAAC,UAAU,CAAC,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAAA,MAAM,EAAE,cAAc,EAAE,CAAC;IACrG,MAAM,MAAM,GAAC,YAAY,CAAC,EAAC,GAAG,SAAS,EAAC,WAAW,EAAC,QAAQ,EAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,KAAK,GAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,EAAE,KAAG,WAAW,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,IAAI,KAAG,WAAW,CAAC,CAAC;IACzG,MAAM,MAAM,GAAC,KAAK,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,SAAS,CAAC,MAAM,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,eAAe,KAAG,WAAW,CAAC,CAAC;IACjF,MAAM,EAAE,GAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,KAAG,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC,CAAC;IAC1D,IAAG,CAAC,EAAE;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,mDAAmD,EAAC,KAAK,CAAC,CAAC;IACvH,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,KAAK,GAAC,EAAC,QAAQ,EAAC,UAAU,EAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,EAAC,CAAC;IACpD,MAAM,MAAM,GAAC,CAAC,MAAqB,EAAC,EAAE,CAAA,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAC,MAAM,eAAe,CAAC,EAAC,KAAK,EAAC,SAAS,EAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAC,KAAK,EAAC,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,SAAS,EAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,EAAC,CAAC,CAAC;IACnL,OAAO,OAAO,CAAC,SAAS,EAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AACD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAsB,EAAC,KAAa,EAAC,OAAoC;IAClH,IAAG,OAAO,OAAO,CAAC,MAAM,KAAG,UAAU;QAAE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAC,uCAAuC,EAAC,KAAK,CAAC,CAAC;IAC1I,MAAM,cAAc,GAAC,OAAO,CAAC,MAAM,CAAC;IACpC,MAAM,OAAO,GAAC,OAAO,CAAC,MAAM,CAAC,EAAC,QAAQ,GAAC,eAAe,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC;IACtE,MAAM,MAAM,GAAC,CAAC,MAAqB,EAAC,EAAE,CAAA,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,MAAM,SAAS,GAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAC,EAAC,KAAK,EAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAC,SAAS,EAAC,KAAK,CAAC,OAAO,EAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,gBAAgB,EAAC,MAAM,EAAC,CAAC,CAAC;IACtJ,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,OAAO,OAAO,CAAC,SAAS,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC"}

package/dist/transport.d.ts

@@ -1,3 +1,4 @@
+import { type PendingRemoteInvocation } from './invocation-observation.js';
 import type { RemoteFunctionRecord, RemoteInvocationRecord, RemoteInvocationResult } from './types.js';
 export interface TransportClientOptions {
     baseUrl: string;
@@ -13,6 +14,10 @@ export interface TransportClientOptions {
 }
 export interface InvokeRemoteOptions {
     context?: Record<string, unknown>;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    intervalMs?: number;
+    onPending?: (pending: PendingRemoteInvocation) => void;
 }
 export interface CreateRemoteFunctionInput {
     name: string;
@@ -164,14 +169,66 @@ export declare function toApiError(response: Response, payload: unknown, fallbac
  * Same auth, error mapping, and JSON handling as every typed helper above.
  */
 export declare function rawRequest<TResponse>(client: TransportClient, method: string, pathname: string, body?: unknown): Promise<TResponse>;
+/**
+ * List the functions visible to the credential, walking `limit`/`offset` pages
+ * until the server runs out of rows.
+ *
+ * What the result guarantees: it is complete, or this throws. The scan compares
+ * the rows it collected against the `total` the server reported and refuses to
+ * return a list it can tell is short, so a `find()` by name over the result
+ * cannot report an existing function as missing and turn an update into a
+ * create (which the server rejects with 409 "name already exists"). That covers
+ * the page cap, a server that ignores `offset`, a create burst that slides the
+ * paging window backwards over rows already read, and a single create landing
+ * behind the read cursor.
+ *
+ * What it cannot guarantee: the server sorts with `ORDER BY createdAt DESC` and
+ * no unique tiebreaker (functions-prisma-repository.ts `list()`), and
+ * `createdAt` defaults to now(), so rows written in one batch tie. LIMIT/OFFSET
+ * over a non-unique sort is not stable, and rows are deleted concurrently. Two
+ * consequences:
+ *  - Tied rows straddling a page boundary can come back in a different order for
+ *    the offset=0 and offset=N queries: one row is returned twice (deduped
+ *    above) and its twin never is. That leaves the scan one row short of
+ *    `total`, so it is retried and, if still short, reported — not hidden.
+ *  - A row DELETED after it was scanned shifts the rows behind it to a LOWER
+ *    offset, so the next page starts one row too late and one row is skipped for
+ *    good. `total` drops by one at the same moment, so `items.length === total`
+ *    still holds: this is the one case that stays silent, and re-running the
+ *    command against the settled list is the only cure here. Closing it needs a
+ *    stable cursor or a server-side lookup by name, neither of which the API
+ *    offers today.
+ *
+ * The result is unbounded up to FUNCTIONS_PAGE_SIZE * FUNCTIONS_MAX_PAGES rows.
+ * Callers feeding it into a size-limited sink — the CLI's MCP `list_functions`
+ * tool serialises it straight into a model's context, where it used to be capped
+ * at the server's default 50 — have to cap it themselves; this function will not
+ * quietly do it for them, since quiet truncation is the bug it exists to fix.
+ */
 export declare function listRemoteFunctions(client: TransportClient): Promise<RemoteFunctionRecord[]>;
 export declare function resolveRemoteFunction(client: TransportClient, functionName: string): Promise<RemoteFunctionRecord>;
 export declare function invokeRemote<TPayload = unknown, TResult = unknown>(client: TransportClient, functionName: string, payload: TPayload, options?: InvokeRemoteOptions): Promise<RemoteInvocationResult<TResult>>;
+/** Resume never resolves current function names/configuration and never calls start. */
+export declare function resumeRemoteInvocation<TResult = unknown>(client: TransportClient, pending: PendingRemoteInvocation, options?: Omit<InvokeRemoteOptions, 'context'>): Promise<RemoteInvocationResult<TResult>>;
+/** Explicit cancellation records intent; a cancellation receipt is not a terminal result. */
+export declare function cancelRemoteInvocation(client: TransportClient, pending: PendingRemoteInvocation): Promise<{
+    invocationId: string;
+    functionId: string;
+    state: 'CANCEL_REQUESTED' | 'ALREADY_TERMINAL';
+}>;
 export declare function createRemoteFunction(client: TransportClient, input: CreateRemoteFunctionInput): Promise<RemoteFunctionRecord>;
 export declare function updateRemoteFunction(client: TransportClient, functionId: string, input: UpdateRemoteFunctionInput): Promise<RemoteFunctionRecord>;
 export declare function deployRemoteFunction(client: TransportClient, functionId: string, options?: DeployRemoteFunctionOptions): Promise<Record<string, unknown>>;
-/** Delete a remote function (and its invocations/jobs) by id. */
-export declare function deleteRemoteFunction(client: TransportClient, functionId: string): Promise<void>;
+export interface PendingFunctionDeletion {
+    state: 'DELETING';
+    functionId: string;
+    functionRemoved: boolean;
+    warmPoolRetirement: 'pending' | 'verified-absent';
+    reason?: string;
+}
+/** Delete by id. A retained pending response means physical cleanup continues;
+ * repeat this scoped DELETE to observe completion without starting a new job. */
+export declare function deleteRemoteFunction(client: TransportClient, functionId: string): Promise<PendingFunctionDeletion | undefined>;
 /** Queue an async deploy. Resolves by `functionId` or `name`. */
 export declare function queueDeploy(client: TransportClient, input: QueueDeployInput): Promise<QueuedDeployResponse>;
 export interface OidcExchangeInput {
@@ -249,6 +306,8 @@ export type CliPairingPollResponse = {
 } | {
     status: 'approved';
     token: string;
+    tokenId?: string;
+    expiresAt?: string;
     user: {
         id: string;
         email: string;
@@ -269,6 +328,8 @@ export declare function pollCliAuth(baseUrl: string, input: {
     pairingId: string;
     deviceSecret: string;
 }, fetchImpl?: typeof fetch): Promise<CliPairingPollResponse>;
+/** Revoke exactly this PAT, without a workspace selector or ambient credentials. */
+export declare function logoutCliAuth(baseUrl: string, token: string, fetchImpl?: typeof fetch): Promise<void>;
 export interface WorkspaceSummary {
     id: string;
     name: string;