@mannyc1/ts-release 0.2.2 → 0.3.0

package/dist/operation-journal/aws/s3-boundary.js

@@ -0,0 +1,417 @@
+import { Buffer } from "node:buffer";
+import { GetRoleCommand, GetRolePolicyCommand, ListAttachedRolePoliciesCommand, ListRolePoliciesCommand } from "@aws-sdk/client-iam";
+import { GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketPolicyStatusCommand, GetBucketVersioningCommand, GetObjectAttributesCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetObjectRetentionCommand, GetPublicAccessBlockCommand, ListObjectVersionsCommand, PutObjectCommand } from "@aws-sdk/client-s3";
+import { GetCallerIdentityCommand } from "@aws-sdk/client-sts";
+import * as Effect from "effect/Effect";
+import { isCanonicalS3VersionId, objectChecksum } from "../canonical.js";
+import { S3JournalBoundaryError, operationJournalByteLimits } from "../model.js";
+import { operationJournalNetworkDeadlineMilliseconds, withOperationJournalNetworkDeadline } from "./deadline.js";
+import { assertAwsJournalPolicyDigests, validateAwsJournalPolicies } from "./policy.js";
+const error = (operation, commitment, reason) => S3JournalBoundaryError.make({ operation, commitment, reason });
+const fail = (operation, reason) => {
+    throw error(operation, "not-applicable", reason);
+};
+const boundaryError = (cause, operation, reason) => cause instanceof S3JournalBoundaryError
+    ? cause
+    : error(operation, "not-applicable", reason);
+const statusCode = (cause) => {
+    if (typeof cause !== "object" || cause === null || !("$metadata" in cause))
+        return undefined;
+    const metadata = cause.$metadata;
+    return typeof metadata?.httpStatusCode === "number" ? metadata.httpStatusCode : undefined;
+};
+const errorName = (cause) => {
+    if (typeof cause !== "object" || cause === null || !("name" in cause) ||
+        typeof cause.name !== "string")
+        return "UnknownError";
+    const name = cause.name;
+    return /^[A-Za-z0-9_.-]{1,128}$/u.test(name) ? name : "UnknownError";
+};
+const putFailure = (cause, operation) => {
+    if (cause instanceof S3JournalBoundaryError)
+        return cause;
+    const status = statusCode(cause);
+    return error(operation, status !== undefined && status >= 300 && status < 500 ? "not-committed" : "unknown", `AWS S3 conditional write did not return one admitted response (${errorName(cause)}).`);
+};
+const roleName = (roleArn) => roleArn.slice(roleArn.lastIndexOf("/") + 1);
+const journalNamespacePattern = /^operation-journal\/v1\/[a-f0-9]{40}\/[a-f0-9]{64}\/$/u;
+const journalEventKeyPattern = /^operation-journal\/v1\/[a-f0-9]{40}\/[a-f0-9]{64}\/events\/[0-9]{8}\/[a-f0-9-]{36}\.bin$/u;
+const journalHeadKeyPattern = /^operation-journal\/v1\/[a-f0-9]{40}\/[a-f0-9]{64}\/head\.bin$/u;
+const requireSealedInput = (input, authority, operation) => {
+    if (input.bucketName !== authority.bucketName ||
+        input.expectedBucketOwner !== authority.expectedBucketOwner ||
+        input.region !== authority.region) {
+        fail(operation, "AWS journal request coordinates escaped the sealed activation contract.");
+    }
+};
+const requireString = (value, operation, label) => {
+    if (value === undefined || value.length === 0)
+        fail(operation, `${label} is absent.`);
+    return value;
+};
+const checksumToBase64 = (checksum, operation) => {
+    if (!/^sha256:[a-f0-9]{64}$/u.test(checksum))
+        fail(operation, "Journal checksum is not canonical SHA-256.");
+    return Buffer.from(checksum.slice("sha256:".length), "hex").toString("base64");
+};
+const checksumFromBase64 = (checksum, operation) => {
+    if (checksum === undefined || !/^(?:[A-Za-z0-9+/]{4}){10}[A-Za-z0-9+/]{3}=$/u.test(checksum)) {
+        fail(operation, "AWS S3 response lacks one canonical SHA-256 checksum.");
+    }
+    const canonicalChecksum = checksum;
+    const bytes = Buffer.from(canonicalChecksum, "base64");
+    if (bytes.length !== 32 || bytes.toString("base64") !== canonicalChecksum) {
+        fail(operation, "AWS S3 response SHA-256 checksum is malformed.");
+    }
+    return `sha256:${bytes.toString("hex")}`;
+};
+export const readBoundedObjectBody = async (body, contentLength, deadlineMilliseconds = operationJournalNetworkDeadlineMilliseconds) => {
+    if (!Number.isSafeInteger(contentLength) || contentLength < 1 ||
+        contentLength > operationJournalByteLimits.object) {
+        fail("get-object-version", "AWS S3 exact object Content-Length exceeds the admitted byte bound.");
+    }
+    if (typeof body !== "object" || body === null ||
+        typeof body[Symbol.asyncIterator] !== "function") {
+        fail("get-object-version", "AWS S3 exact object body is not one bounded byte stream.");
+    }
+    const stream = body;
+    const iterator = stream[Symbol.asyncIterator]();
+    return withOperationJournalNetworkDeadline(async (signal) => {
+        const stop = () => {
+            try {
+                const destroy = body.destroy;
+                if (typeof destroy === "function")
+                    destroy.call(body, signal.reason);
+            }
+            catch {
+                // The deadline result is authoritative; cleanup failures are not a fallback result.
+            }
+            try {
+                const completion = iterator.return?.();
+                if (completion !== undefined)
+                    void Promise.resolve(completion).catch(() => undefined);
+            }
+            catch {
+                // The deadline result is authoritative; cleanup failures are not a fallback result.
+            }
+        };
+        signal.addEventListener("abort", stop, { once: true });
+        const bytes = new Uint8Array(contentLength);
+        let offset = 0;
+        try {
+            while (true) {
+                const result = await iterator.next();
+                if (result.done === true)
+                    break;
+                const byteChunk = result.value instanceof Uint8Array
+                    ? result.value
+                    : fail("get-object-version", "AWS S3 exact object stream emitted a non-byte chunk.");
+                if (offset + byteChunk.length > bytes.length) {
+                    fail("get-object-version", "AWS S3 exact object stream exceeded its admitted Content-Length.");
+                }
+                bytes.set(byteChunk, offset);
+                offset += byteChunk.length;
+            }
+            if (offset !== bytes.length) {
+                fail("get-object-version", "AWS S3 exact object stream length disagrees with Content-Length.");
+            }
+            return bytes;
+        }
+        finally {
+            signal.removeEventListener("abort", stop);
+        }
+    }, deadlineMilliseconds);
+};
+const makePolicyCoordinates = (options) => ({
+    accountId: options.authority.accountId,
+    bucketArn: options.authority.bucketArn,
+    roleArn: options.authority.roleArn,
+    rolePolicyName: options.rolePolicyName,
+    oidcTrust: options.authority.oidcTrust
+});
+const observeAuthority = (options, session, clients, deadlineMilliseconds) => Effect.tryPromise({
+    try: async () => {
+        const authority = options.authority;
+        if (!/^[A-Za-z0-9+=,.@_-]{1,128}$/u.test(options.rolePolicyName)) {
+            fail("observe-authority", "Journal inline role policy name is not canonical.");
+        }
+        const name = roleName(authority.roleArn);
+        const [roleResponse, inlineResponse, attachedResponse, versioningResponse, lockResponse, ownershipResponse, publicAccessResponse, bucketPolicyResponse, bucketPolicyStatusResponse, callerIdentityResponse] = await Promise.all([
+            withOperationJournalNetworkDeadline((signal) => clients.iam.send(new GetRoleCommand({ RoleName: name }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.iam.send(new ListRolePoliciesCommand({ RoleName: name, MaxItems: 2 }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.iam.send(new ListAttachedRolePoliciesCommand({ RoleName: name, MaxItems: 1 }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.s3.send(new GetBucketVersioningCommand({
+                Bucket: authority.bucketName,
+                ExpectedBucketOwner: authority.expectedBucketOwner
+            }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.s3.send(new GetObjectLockConfigurationCommand({
+                Bucket: authority.bucketName,
+                ExpectedBucketOwner: authority.expectedBucketOwner
+            }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.s3.send(new GetBucketOwnershipControlsCommand({
+                Bucket: authority.bucketName,
+                ExpectedBucketOwner: authority.expectedBucketOwner
+            }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.s3.send(new GetPublicAccessBlockCommand({
+                Bucket: authority.bucketName,
+                ExpectedBucketOwner: authority.expectedBucketOwner
+            }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.s3.send(new GetBucketPolicyCommand({
+                Bucket: authority.bucketName,
+                ExpectedBucketOwner: authority.expectedBucketOwner
+            }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.s3.send(new GetBucketPolicyStatusCommand({
+                Bucket: authority.bucketName,
+                ExpectedBucketOwner: authority.expectedBucketOwner
+            }), { abortSignal: signal }), deadlineMilliseconds),
+            withOperationJournalNetworkDeadline((signal) => clients.sts.send(new GetCallerIdentityCommand({}), { abortSignal: signal }), deadlineMilliseconds)
+        ]);
+        const role = roleResponse.Role;
+        if (role?.Arn !== authority.roleArn || role.RoleName !== name ||
+            role.AssumeRolePolicyDocument === undefined || role.PermissionsBoundary !== undefined ||
+            role.MaxSessionDuration === undefined || role.MaxSessionDuration < 900) {
+            fail("observe-authority", "AWS journal role identity or session governance drifted.");
+        }
+        if (inlineResponse.IsTruncated === true || inlineResponse.PolicyNames?.length !== 1 ||
+            inlineResponse.PolicyNames[0] !== options.rolePolicyName ||
+            attachedResponse.IsTruncated === true || (attachedResponse.AttachedPolicies?.length ?? 0) !== 0) {
+            fail("observe-authority", "AWS journal role does not contain exactly one inline policy and zero managed policies.");
+        }
+        const rolePolicyResponse = await withOperationJournalNetworkDeadline((signal) => clients.iam.send(new GetRolePolicyCommand({
+            RoleName: name,
+            PolicyName: options.rolePolicyName
+        }), { abortSignal: signal }), deadlineMilliseconds);
+        if (rolePolicyResponse.RoleName !== name || rolePolicyResponse.PolicyName !== options.rolePolicyName ||
+            rolePolicyResponse.PolicyDocument === undefined) {
+            fail("observe-authority", "AWS journal inline role policy response is incomplete.");
+        }
+        if (versioningResponse.Status !== "Enabled") {
+            fail("observe-authority", "AWS journal bucket versioning is not enabled.");
+        }
+        const retention = lockResponse.ObjectLockConfiguration?.Rule?.DefaultRetention;
+        if (lockResponse.ObjectLockConfiguration?.ObjectLockEnabled !== "Enabled" ||
+            retention?.Mode !== "COMPLIANCE" || retention.Years !== 10 || retention.Days !== undefined) {
+            fail("observe-authority", "AWS journal bucket Object Lock is not ten-year COMPLIANCE retention.");
+        }
+        const ownershipRules = ownershipResponse.OwnershipControls?.Rules;
+        if (ownershipRules?.length !== 1 || ownershipRules[0]?.ObjectOwnership !== "BucketOwnerEnforced") {
+            fail("observe-authority", "AWS journal bucket ownership is not BucketOwnerEnforced.");
+        }
+        const publicBlock = publicAccessResponse.PublicAccessBlockConfiguration;
+        if (publicBlock?.BlockPublicAcls !== true || publicBlock.IgnorePublicAcls !== true ||
+            publicBlock.BlockPublicPolicy !== true || publicBlock.RestrictPublicBuckets !== true ||
+            bucketPolicyStatusResponse.PolicyStatus?.IsPublic !== false) {
+            fail("observe-authority", "AWS journal bucket public access is not completely blocked.");
+        }
+        if (callerIdentityResponse.Account !== authority.accountId ||
+            callerIdentityResponse.Arn !== session.callerArn ||
+            callerIdentityResponse.UserId === undefined || callerIdentityResponse.UserId.length === 0) {
+            fail("observe-authority", "AWS STS caller identity drifted from the exact journal role session.");
+        }
+        const policyDigests = validateAwsJournalPolicies({
+            coordinates: makePolicyCoordinates(options),
+            trustPolicyDocument: role.AssumeRolePolicyDocument,
+            rolePolicyDocument: rolePolicyResponse.PolicyDocument,
+            bucketPolicyDocument: requireString(bucketPolicyResponse.Policy, "observe-authority", "AWS journal bucket policy")
+        });
+        assertAwsJournalPolicyDigests(authority, policyDigests);
+        const oidcTrust = {
+            audience: session.oidc.audience,
+            subject: session.oidc.subject,
+            repository: session.oidc.repository,
+            repositoryId: session.oidc.repositoryId,
+            repositoryOwnerId: session.oidc.repositoryOwnerId,
+            workflow: session.oidc.workflow,
+            ref: session.oidc.ref,
+            environment: session.oidc.environment,
+            jobWorkflowRef: session.oidc.jobWorkflowRef
+        };
+        return {
+            accountId: authority.accountId,
+            bucketName: authority.bucketName,
+            bucketArn: authority.bucketArn,
+            region: authority.region,
+            roleArn: authority.roleArn,
+            prefix: "operation-journal/v1",
+            expectedBucketOwner: authority.expectedBucketOwner,
+            versioning: "Enabled",
+            objectLock: "Enabled",
+            retentionMode: "COMPLIANCE",
+            retentionYears: 10,
+            bucketOwnerEnforced: true,
+            publicAccessBlocked: true,
+            deleteDenied: true,
+            multipartDenied: true,
+            conditionalWritesEnforced: true,
+            ...policyDigests,
+            oidc: session.oidc,
+            oidcTrust
+        };
+    },
+    catch: (cause) => boundaryError(cause, "observe-authority", "AWS journal authority observation failed.")
+});
+const listNamespace = (options, client, input, deadlineMilliseconds) => Effect.tryPromise({
+    try: async () => {
+        requireSealedInput(input, options.authority, "list-namespace");
+        if (!journalNamespacePattern.test(input.prefix) || input.maximum !== 512) {
+            fail("list-namespace", "AWS journal namespace read escaped its exact bound.");
+        }
+        const response = await withOperationJournalNetworkDeadline((signal) => client.send(new ListObjectVersionsCommand({
+            Bucket: input.bucketName,
+            Prefix: input.prefix,
+            MaxKeys: input.maximum,
+            ExpectedBucketOwner: input.expectedBucketOwner
+        }), { abortSignal: signal }), deadlineMilliseconds);
+        if (response.Name !== input.bucketName || response.Prefix !== input.prefix ||
+            response.MaxKeys !== input.maximum || typeof response.IsTruncated !== "boolean") {
+            fail("list-namespace", "AWS S3 version listing identity or bound drifted from the exact request.");
+        }
+        if ((response.Versions?.length ?? 0) + (response.DeleteMarkers?.length ?? 0) > input.maximum) {
+            fail("list-namespace", "AWS S3 version listing exceeded its exact response bound.");
+        }
+        const versions = (response.Versions ?? []).map((version, index) => {
+            const key = requireString(version.Key, "list-namespace", `AWS S3 version ${index} key`);
+            const versionId = requireString(version.VersionId, "list-namespace", `AWS S3 version ${index} VersionId`);
+            const etag = requireString(version.ETag, "list-namespace", `AWS S3 version ${index} ETag`);
+            if ((!journalEventKeyPattern.test(key) && !journalHeadKeyPattern.test(key)) ||
+                !isCanonicalS3VersionId(versionId) || !/^"[!#-~]{1,1024}"$/u.test(etag)) {
+                fail("list-namespace", `AWS S3 version ${index} identity is not canonical.`);
+            }
+            return { key, versionId, etag, isLatest: version.IsLatest === true };
+        });
+        const deleteMarkers = (response.DeleteMarkers ?? []).map((marker, index) => {
+            const key = requireString(marker.Key, "list-namespace", `AWS S3 delete marker ${index} key`);
+            const versionId = requireString(marker.VersionId, "list-namespace", `AWS S3 delete marker ${index} VersionId`);
+            if ((!journalEventKeyPattern.test(key) && !journalHeadKeyPattern.test(key)) ||
+                !isCanonicalS3VersionId(versionId)) {
+                fail("list-namespace", `AWS S3 delete marker ${index} identity is not canonical.`);
+            }
+            return { key, versionId };
+        });
+        if (versions.some((version) => !version.key.startsWith(input.prefix)) ||
+            deleteMarkers.some((marker) => !marker.key.startsWith(input.prefix))) {
+            fail("list-namespace", "AWS S3 returned an object outside the exact journal prefix.");
+        }
+        return { versions, deleteMarkers, truncated: response.IsTruncated === true };
+    },
+    catch: (cause) => boundaryError(cause, "list-namespace", `AWS S3 journal namespace read failed (${errorName(cause)}).`)
+});
+const getObjectVersion = (options, client, input, deadlineMilliseconds) => Effect.tryPromise({
+    try: async () => {
+        requireSealedInput(input, options.authority, "get-object-version");
+        if ((!journalEventKeyPattern.test(input.key) && !journalHeadKeyPattern.test(input.key)) ||
+            !isCanonicalS3VersionId(input.versionId)) {
+            fail("get-object-version", "AWS journal exact-version read escaped its sealed namespace.");
+        }
+        const response = await withOperationJournalNetworkDeadline((signal) => client.send(new GetObjectCommand({
+            Bucket: input.bucketName,
+            Key: input.key,
+            VersionId: input.versionId,
+            ExpectedBucketOwner: input.expectedBucketOwner,
+            ChecksumMode: "ENABLED"
+        }), { abortSignal: signal }), deadlineMilliseconds);
+        if (response.Body === undefined || response.ContentLength === undefined || response.LastModified === undefined ||
+            response.ObjectLockMode !== "COMPLIANCE" || response.ObjectLockRetainUntilDate === undefined ||
+            (response.ChecksumType !== undefined && response.ChecksumType !== "FULL_OBJECT")) {
+            fail("get-object-version", "AWS S3 exact object response lacks bytes, time, checksum, or COMPLIANCE retention.");
+        }
+        const retainUntil = response.ObjectLockRetainUntilDate;
+        const body = response.Body;
+        const lastModified = response.LastModified;
+        const retention = await withOperationJournalNetworkDeadline((signal) => client.send(new GetObjectRetentionCommand({
+            Bucket: input.bucketName,
+            Key: input.key,
+            VersionId: input.versionId,
+            ExpectedBucketOwner: input.expectedBucketOwner
+        }), { abortSignal: signal }), deadlineMilliseconds);
+        if (retention.Retention?.Mode !== "COMPLIANCE" || retention.Retention.RetainUntilDate === undefined ||
+            retention.Retention.RetainUntilDate.getTime() !== retainUntil.getTime()) {
+            fail("get-object-version", "AWS S3 exact object retention disagrees with its independent retention read.");
+        }
+        const bytes = await readBoundedObjectBody(body, response.ContentLength, deadlineMilliseconds);
+        const attributes = await withOperationJournalNetworkDeadline((signal) => client.send(new GetObjectAttributesCommand({
+            Bucket: input.bucketName,
+            Key: input.key,
+            VersionId: input.versionId,
+            ExpectedBucketOwner: input.expectedBucketOwner,
+            ObjectAttributes: ["Checksum", "ETag", "ObjectSize"]
+        }), { abortSignal: signal }), deadlineMilliseconds);
+        const responseVersionId = requireString(response.VersionId, "get-object-version", "AWS S3 exact object VersionId");
+        const checksumSha256 = checksumFromBase64(response.ChecksumSHA256, "get-object-version");
+        if (responseVersionId !== input.versionId || attributes.DeleteMarker === true || attributes.VersionId !== input.versionId ||
+            attributes.ETag !== response.ETag || attributes.ObjectSize !== bytes.length ||
+            attributes.Checksum?.ChecksumType !== "FULL_OBJECT" ||
+            checksumFromBase64(attributes.Checksum.ChecksumSHA256, "get-object-version") !== checksumSha256) {
+            fail("get-object-version", "AWS S3 exact object attributes disagree with its retained bytes and version.");
+        }
+        return {
+            key: input.key,
+            versionId: responseVersionId,
+            etag: requireString(response.ETag, "get-object-version", "AWS S3 exact object ETag"),
+            checksumSha256,
+            bytes,
+            lastModified: lastModified.toISOString(),
+            retentionMode: "COMPLIANCE",
+            retainUntil: retainUntil.toISOString()
+        };
+    },
+    catch: (cause) => boundaryError(cause, "get-object-version", `AWS S3 exact journal object read failed (${errorName(cause)}).`)
+});
+const putObject = (options, client, input, operation, deadlineMilliseconds) => Effect.tryPromise({
+    try: async () => {
+        requireSealedInput(input, options.authority, operation);
+        if (operation === "put-event" ? !journalEventKeyPattern.test(input.key) : !journalHeadKeyPattern.test(input.key)) {
+            fail(operation, "AWS S3 conditional write key is outside its exact journal object class.");
+        }
+        if (!(input.bytes instanceof Uint8Array) || input.bytes.length < 1 ||
+            input.bytes.length > operationJournalByteLimits.object) {
+            fail(operation, "AWS S3 conditional write bytes exceed the admitted object bound.");
+        }
+        if (objectChecksum(input.bytes) !== input.checksumSha256) {
+            fail(operation, "AWS S3 conditional write checksum does not match its exact bytes.");
+        }
+        if (input.condition._tag === "IfMatch" && !/^"[!#-~]{1,1024}"$/u.test(input.condition.etag)) {
+            fail(operation, "AWS S3 If-Match ETag is not canonical.");
+        }
+        const checksum = checksumToBase64(input.checksumSha256, operation);
+        let response;
+        try {
+            response = await withOperationJournalNetworkDeadline((signal) => client.send(new PutObjectCommand({
+                Bucket: input.bucketName,
+                Key: input.key,
+                Body: new Uint8Array(input.bytes),
+                ContentLength: input.bytes.length,
+                ContentType: "application/octet-stream",
+                ChecksumAlgorithm: "SHA256",
+                ChecksumSHA256: checksum,
+                ExpectedBucketOwner: input.expectedBucketOwner,
+                ...(input.condition._tag === "IfNoneMatch"
+                    ? { IfNoneMatch: "*" }
+                    : { IfMatch: input.condition.etag })
+            }), { abortSignal: signal }), deadlineMilliseconds);
+        }
+        catch (cause) {
+            const status = statusCode(cause);
+            if (status === 409 || status === 412)
+                return { _tag: "PreconditionFailed" };
+            throw cause;
+        }
+        const versionId = requireString(response.VersionId, operation, "AWS S3 committed object VersionId");
+        const etag = requireString(response.ETag, operation, "AWS S3 committed object ETag");
+        const responseChecksum = checksumFromBase64(response.ChecksumSHA256, operation);
+        if (responseChecksum !== input.checksumSha256 ||
+            (response.ChecksumType !== undefined && response.ChecksumType !== "FULL_OBJECT")) {
+            fail(operation, "AWS S3 committed object checksum disagrees with the exact request bytes.");
+        }
+        return { _tag: "Committed", versionId, etag, checksumSha256: responseChecksum };
+    },
+    catch: (cause) => putFailure(cause, operation)
+});
+export const makeAwsS3JournalBoundaryFromClients = (options, session, clients, deadlineMilliseconds = operationJournalNetworkDeadlineMilliseconds) => ({
+    observeAuthority: () => observeAuthority(options, session, clients, deadlineMilliseconds),
+    listNamespace: (input) => listNamespace(options, clients.s3, input, deadlineMilliseconds),
+    getObjectVersion: (input) => getObjectVersion(options, clients.s3, input, deadlineMilliseconds),
+    putEvent: (input) => putObject(options, clients.s3, input, "put-event", deadlineMilliseconds),
+    putHead: (input) => putObject(options, clients.s3, input, "put-head", deadlineMilliseconds)
+});
+//# sourceMappingURL=s3-boundary.js.map

package/dist/operation-journal/aws/s3-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-boundary.js","sourceRoot":"","sources":["../../../src/operation-journal/aws/s3-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EACL,cAAc,EACd,oBAAoB,EAEpB,+BAA+B,EAC/B,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,iCAAiC,EACjC,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,iCAAiC,EACjC,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,gBAAgB,EAEjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,wBAAwB,EAAa,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAO3B,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACpC,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAE3B,MAAM,aAAa,CAAA;AAapB,MAAM,KAAK,GAAG,CACZ,SAA8C,EAC9C,UAAgD,EAChD,MAAc,EACU,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;AAE3F,MAAM,IAAI,GAAG,CACX,SAA8C,EAC9C,MAAc,EACP,EAAE;IACT,MAAM,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;AAClD,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CACpB,KAAc,EACd,SAA8C,EAC9C,MAAc,EACU,EAAE,CAAC,KAAK,YAAY,sBAAsB;IAClE,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;AAE9C,MAAM,UAAU,GAAG,CAAC,KAAc,EAAsB,EAAE;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5F,MAAM,QAAQ,GAAI,KAAwE,CAAC,SAAS,CAAA;IACpG,OAAO,OAAO,QAAQ,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3F,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QACjE,OAAQ,KAAqC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAA;IAC1F,MAAM,IAAI,GAAI,KAAmC,CAAC,IAAI,CAAA;IACtD,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAA;AACtE,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,SAAmC,EAA0B,EAAE;IACjG,IAAI,KAAK,YAAY,sBAAsB;QAAE,OAAO,KAAK,CAAA;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAChC,OAAO,KAAK,CACV,SAAS,EACT,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EACnF,kEAAkE,SAAS,CAAC,KAAK,CAAC,IAAI,CACvF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzF,MAAM,uBAAuB,GAAG,wDAAwD,CAAA;AACxF,MAAM,sBAAsB,GAAG,4FAA4F,CAAA;AAC3H,MAAM,qBAAqB,GAAG,iEAAiE,CAAA;AAE/F,MAAM,kBAAkB,GAAG,CACzB,KAAqG,EACrG,SAA6B,EAC7B,SAA8C,EACxC,EAAE;IACR,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;QACzC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB;QAC3D,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,EAAE,yEAAyE,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CACpB,KAAyB,EACzB,SAA8C,EAC9C,KAAa,EACL,EAAE;IACV,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,aAAa,CAAC,CAAA;IACrF,OAAO,KAAe,CAAA;AACxB,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,SAAmC,EAAU,EAAE;IACzF,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,SAAS,EAAE,4CAA4C,CAAC,CAAA;IAC3G,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAChF,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CACzB,QAA4B,EAC5B,SAA8C,EACtC,EAAE;IACV,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,SAAS,EAAE,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,iBAAiB,GAAG,QAAkB,CAAA;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAA;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC1E,IAAI,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AAC1C,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,IAAa,EACb,aAAqB,EACrB,oBAAoB,GAAG,2CAA2C,EAC7C,EAAE;IACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;QACzD,aAAa,GAAG,0BAA0B,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,CAAC,oBAAoB,EAAE,qEAAqE,CAAC,CAAA;IACnG,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QACzC,OAAQ,IAAsD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,EAAE,CAAC;QACxG,IAAI,CAAC,oBAAoB,EAAE,0DAA0D,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,IAA8B,CAAA;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAA;IAC/C,OAAO,mCAAmC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC1D,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAI,IAAyD,CAAC,OAAO,CAAA;gBAClF,IAAI,OAAO,OAAO,KAAK,UAAU;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,oFAAoF;YACtF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAA;gBACtC,IAAI,UAAU,KAAK,SAAS;oBAAE,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,oFAAoF;YACtF,CAAC;QACH,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,CAAA;QAC3C,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;gBACpC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;oBAAE,MAAK;gBAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,YAAY,UAAU;oBAClD,CAAC,CAAC,MAAM,CAAC,KAAK;oBACd,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAA;gBACtF,IAAI,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC7C,IAAI,CAAC,oBAAoB,EAAE,kEAAkE,CAAC,CAAA;gBAChG,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;gBAC5B,MAAM,IAAI,SAAS,CAAC,MAAM,CAAA;YAC5B,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,oBAAoB,EAAE,kEAAkE,CAAC,CAAA;YAChG,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,EAAE,oBAAoB,CAAC,CAAA;AAC1B,CAAC,CAAA;AAED,MAAM,qBAAqB,GAAG,CAAC,OAAoC,EAA+B,EAAE,CAAC,CAAC;IACpG,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;IACtC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;IACtC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;IAClC,cAAc,EAAE,OAAO,CAAC,cAAc;IACtC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;CACvC,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CACvB,OAAoC,EACpC,OAA0B,EAC1B,OAA0B,EAC1B,oBAA4B,EAC+B,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;IAChF,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QACnC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,mBAAmB,EAAE,mDAAmD,CAAC,CAAA;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CACJ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,CACvB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC9D,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAChE,EAAE,oBAAoB,CAAC;YACxB,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC9D,IAAI,uBAAuB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CACtF,EAAE,oBAAoB,CAAC;YACxB,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC9D,IAAI,+BAA+B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAC9F,EAAE,oBAAoB,CAAC;YACxB,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC;gBAC7F,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,CAAC;YACnD,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,iCAAiC,CAAC;gBACpG,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,CAAC;YACnD,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,iCAAiC,CAAC;gBACpG,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,CAAC;YACnD,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC;gBAC9F,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,CAAC;YACnD,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC;gBACzF,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,CAAC;YACnD,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC;gBAC/F,MAAM,EAAE,SAAS,CAAC,UAAU;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;aACnD,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,CAAC;YACnD,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC9D,IAAI,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAC1D,EAAE,oBAAoB,CAAC;SACzB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAA;QAC9B,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YACzD,IAAI,CAAC,wBAAwB,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS;YACrF,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,IAAI,CAAC,kBAAkB,GAAG,GAAG,EAAE,CAAC;YAC3E,IAAI,CAAC,mBAAmB,EAAE,0DAA0D,CAAC,CAAA;QACvF,CAAC;QACD,IAAI,cAAc,CAAC,WAAW,KAAK,IAAI,IAAI,cAAc,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC;YAC/E,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,cAAc;YACxD,gBAAgB,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpG,IAAI,CAAC,mBAAmB,EAAE,wFAAwF,CAAC,CAAA;QACrH,CAAC;QACD,MAAM,kBAAkB,GAAG,MAAM,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAC/F,IAAI,oBAAoB,CAAC;YACvB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,OAAO,CAAC,cAAc;SACnC,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,EAAE,oBAAoB,CAAC,CAAA;QACxB,IAAI,kBAAkB,CAAC,QAAQ,KAAK,IAAI,IAAI,kBAAkB,CAAC,UAAU,KAAK,OAAO,CAAC,cAAc;YAChG,kBAAkB,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,mBAAmB,EAAE,wDAAwD,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,kBAAkB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,CAAA;QAC9E,IAAI,YAAY,CAAC,uBAAuB,EAAE,iBAAiB,KAAK,SAAS;YACrE,SAAS,EAAE,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/F,IAAI,CAAC,mBAAmB,EAAE,sEAAsE,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,KAAK,CAAA;QACjE,IAAI,cAAc,EAAE,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,KAAK,qBAAqB,EAAE,CAAC;YACjG,IAAI,CAAC,mBAAmB,EAAE,0DAA0D,CAAC,CAAA;QACvF,CAAC;QACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,8BAA8B,CAAA;QACvE,IAAI,WAAW,EAAE,eAAe,KAAK,IAAI,IAAI,WAAW,CAAC,gBAAgB,KAAK,IAAI;YAC9E,WAAW,CAAC,iBAAiB,KAAK,IAAI,IAAI,WAAW,CAAC,qBAAqB,KAAK,IAAI;YACpF,0BAA0B,CAAC,YAAY,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YAChE,IAAI,CAAC,mBAAmB,EAAE,6DAA6D,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,KAAK,SAAS,CAAC,SAAS;YACtD,sBAAsB,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;YAChD,sBAAsB,CAAC,MAAM,KAAK,SAAS,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9F,IAAI,CAAC,mBAAmB,EAAE,sEAAsE,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,aAAa,GAAG,0BAA0B,CAAC;YAC/C,WAAW,EAAE,qBAAqB,CAAC,OAAO,CAAC;YAC3C,mBAAmB,EAAE,IAAK,CAAC,wBAAkC;YAC7D,kBAAkB,EAAE,kBAAkB,CAAC,cAAwB;YAC/D,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,EAAE,2BAA2B,CAAC;SACnH,CAAC,CAAA;QACF,6BAA6B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;YAC7B,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;YACnC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY;YACvC,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB;YACjD,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;YACrC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,CAAA;QACD,OAAO;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,MAAM,EAAE,sBAAsB;YAC9B,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;YAClD,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,aAAa,EAAE,YAAY;YAC3B,cAAc,EAAE,EAAE;YAClB,mBAAmB,EAAE,IAAI;YACzB,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,IAAI;YACrB,yBAAyB,EAAE,IAAI;YAC/B,GAAG,aAAa;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS;SACV,CAAA;IACH,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE,2CAA2C,CAAC;CACzG,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,CACpB,OAAoC,EACpC,MAAgB,EAChB,KAA6D,EAC7D,oBAA4B,EACsC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;IACvF,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;QAC9D,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YACzE,IAAI,CAAC,gBAAgB,EAAE,qDAAqD,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAChF,IAAI,yBAAyB,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,EAAE,oBAAoB,CAAC,CAAA;QACxB,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YACtE,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpF,IAAI,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAA;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7F,IAAI,CAAC,gBAAgB,EAAE,2DAA2D,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAChE,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,kBAAkB,KAAK,MAAM,CAAC,CAAA;YACvF,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,KAAK,YAAY,CAAC,CAAA;YACzG,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAA;YAC1F,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvE,CAAC,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,KAAK,6BAA6B,CAAC,CAAA;YAC9E,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAA;QACtE,CAAC,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACzE,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,EAAE,wBAAwB,KAAK,MAAM,CAAC,CAAA;YAC5F,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,wBAAwB,KAAK,YAAY,CAAC,CAAA;YAC9G,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvE,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,gBAAgB,EAAE,wBAAwB,KAAK,6BAA6B,CAAC,CAAA;YACpF,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjE,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,gBAAgB,EAAE,6DAA6D,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAA;IAC9E,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,gBAAgB,EAAE,yCAAyC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;CACxH,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CACvB,OAAoC,EACpC,MAAgB,EAChB,KAAgE,EAChE,oBAA4B,EACmC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;IACpF,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;QAClE,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnF,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,oBAAoB,EAAE,8DAA8D,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAChF,IAAI,gBAAgB,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,YAAY,EAAE,SAAS;SACxB,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,EAAE,oBAAoB,CAAC,CAAA;QACxB,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS;YAC1G,QAAQ,CAAC,cAAc,KAAK,YAAY,IAAI,QAAQ,CAAC,yBAAyB,KAAK,SAAS;YAC5F,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,CAAC,EAAE,CAAC;YACrF,IAAI,CAAC,oBAAoB,EAAE,oFAAoF,CAAC,CAAA;QAClH,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,yBAAiC,CAAA;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAK,CAAA;QAC3B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAoB,CAAA;QAClD,MAAM,SAAS,GAAG,MAAM,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CACjF,IAAI,yBAAyB,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,EAAE,oBAAoB,CAAC,CAAA;QACxB,IAAI,SAAS,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS;YAC/F,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5E,IAAI,CAAC,oBAAoB,EAAE,8EAA8E,CAAC,CAAA;QAC5G,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAuB,EAAE,oBAAoB,CAAC,CAAA;QACvG,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAClF,IAAI,0BAA0B,CAAC;YAC7B,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC;SACrD,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,EAAE,oBAAoB,CAAC,CAAA;QACxB,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,EAAE,+BAA+B,CAAC,CAAA;QAClH,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAA;QACxF,IAAI,iBAAiB,KAAK,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACrH,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM;YAC3E,UAAU,CAAC,QAAQ,EAAE,YAAY,KAAK,aAAa;YACnD,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC,KAAK,cAAc,EAAE,CAAC;YACpG,IAAI,CAAC,oBAAoB,EAAE,8EAA8E,CAAC,CAAA;QAC5G,CAAC;QACD,OAAO;YACL,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,iBAAiB;YAC5B,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,0BAA0B,CAAC;YACpF,cAAc;YACd,KAAK;YACL,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE;YACxC,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;SACvC,CAAA;IACH,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,oBAAoB,EAAE,4CAA4C,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;CAC/H,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG,CAChB,OAAoC,EACpC,MAAgB,EAChB,KAA0B,EAC1B,SAAmC,EACnC,oBAA4B,EAC+B,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;IAChF,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACjH,IAAI,CAAC,SAAS,EAAE,yEAAyE,CAAC,CAAA;QAC5F,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAC9D,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,CAAC;YAC3D,IAAI,CAAC,SAAS,EAAE,kEAAkE,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACzD,IAAI,CAAC,SAAS,EAAE,mEAAmE,CAAC,CAAA;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5F,IAAI,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAA;QAC3D,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QAClE,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,mCAAmC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAC1E,IAAI,gBAAgB,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,UAAU;gBACxB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;gBACjC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;gBACjC,WAAW,EAAE,0BAA0B;gBACvC,iBAAiB,EAAE,QAAQ;gBAC3B,cAAc,EAAE,QAAQ;gBACxB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa;oBACxC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;oBACtB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;aACvC,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,EAAE,oBAAoB,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;YAC3E,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,mCAAmC,CAAC,CAAA;QACnG,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,8BAA8B,CAAC,CAAA;QACpF,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QAC/E,IAAI,gBAAgB,KAAK,KAAK,CAAC,cAAc;YACzC,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,CAAC,EAAE,CAAC;YACrF,IAAI,CAAC,SAAS,EAAE,0EAA0E,CAAC,CAAA;QAC7F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAA;IACjF,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;CAC/C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,OAAoC,EACpC,OAA0B,EAC1B,OAA0B,EAC1B,oBAAoB,GAAG,2CAA2C,EAC1C,EAAE,CAAC,CAAC;IAC5B,gBAAgB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,CAAC;IACzF,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC;IACzF,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,CAAC;IAC/F,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,oBAAoB,CAAC;IAC7F,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,oBAAoB,CAAC;CAC5F,CAAC,CAAA"}

package/dist/operation-journal/aws.d.ts

@@ -0,0 +1,11 @@
+import * as Effect from "effect/Effect";
+import { S3JournalBoundaryError, type S3JournalBoundaryShape } from "./model.js";
+import { type AwsS3JournalBoundaryOptions } from "./aws/s3-boundary.js";
+/**
+ * Acquire one fresh GitHub OIDC/STS session and seal an AWS S3 boundary around
+ * the exact activation contract. The constructor never consults the AWS
+ * credential chain and exposes no endpoint, profile, or credential override.
+ */
+export declare const makeAwsS3JournalBoundary: (options: AwsS3JournalBoundaryOptions) => Effect.Effect<S3JournalBoundaryShape, S3JournalBoundaryError>;
+export type { AwsS3JournalBoundaryOptions } from "./aws/s3-boundary.js";
+//# sourceMappingURL=aws.d.ts.map

package/dist/operation-journal/aws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.d.ts","sourceRoot":"","sources":["../../src/operation-journal/aws.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EACL,sBAAsB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,YAAY,CAAA;AAGnB,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,sBAAsB,CAAA;AAE7B;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GACnC,SAAS,2BAA2B,KACnC,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,CAmC7D,CAAA;AAEF,YAAY,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/operation-journal/aws.js

@@ -0,0 +1,50 @@
+import { IAMClient } from "@aws-sdk/client-iam";
+import { S3Client } from "@aws-sdk/client-s3";
+import { STSClient } from "@aws-sdk/client-sts";
+import * as Effect from "effect/Effect";
+import { S3JournalBoundaryError } from "./model.js";
+import { validateS3JournalAuthority } from "./authority.js";
+import { acquireAwsJournalSession } from "./aws/oidc.js";
+import { makeAwsS3JournalBoundaryFromClients } from "./aws/s3-boundary.js";
+/**
+ * Acquire one fresh GitHub OIDC/STS session and seal an AWS S3 boundary around
+ * the exact activation contract. The constructor never consults the AWS
+ * credential chain and exposes no endpoint, profile, or credential override.
+ */
+export const makeAwsS3JournalBoundary = (options) => Effect.gen(function* () {
+    yield* Effect.try({
+        try: () => {
+            validateS3JournalAuthority(options.authority);
+            if (!/^[A-Za-z0-9+=,.@_-]{1,128}$/u.test(options.rolePolicyName)) {
+                throw new Error("invalid role policy name");
+            }
+        },
+        catch: () => S3JournalBoundaryError.make({
+            operation: "observe-authority",
+            commitment: "not-applicable",
+            reason: "AWS journal activation contract is malformed."
+        })
+    });
+    const session = yield* acquireAwsJournalSession(options.authority);
+    const credentials = session.credentials;
+    const iam = new IAMClient({
+        region: options.authority.region,
+        credentials,
+        maxAttempts: 1
+    });
+    const s3 = new S3Client({
+        region: options.authority.region,
+        credentials,
+        maxAttempts: 1,
+        followRegionRedirects: false,
+        forcePathStyle: false,
+        useArnRegion: false
+    });
+    const sts = new STSClient({
+        region: options.authority.region,
+        credentials,
+        maxAttempts: 1
+    });
+    return makeAwsS3JournalBoundaryFromClients(options, session, { iam, s3, sts });
+});
+//# sourceMappingURL=aws.js.map

package/dist/operation-journal/aws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.js","sourceRoot":"","sources":["../../src/operation-journal/aws.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EACL,sBAAsB,EAEvB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EACL,mCAAmC,EAEpC,MAAM,sBAAsB,CAAA;AAE7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,OAAoC,EAC2B,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtF,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE;YACR,0BAA0B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC7C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,CAAC;QACH,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC;YACvC,SAAS,EAAE,mBAAmB;YAC9B,UAAU,EAAE,gBAAgB;YAC5B,MAAM,EAAE,+CAA+C;SACxD,CAAC;KACH,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;IACvC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,WAAW;QACX,WAAW,EAAE,CAAC;KACf,CAAC,CAAA;IACF,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC;QACtB,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,WAAW;QACX,WAAW,EAAE,CAAC;QACd,qBAAqB,EAAE,KAAK;QAC5B,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,KAAK;KACpB,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,WAAW;QACX,WAAW,EAAE,CAAC;KACf,CAAC,CAAA;IACF,OAAO,mCAAmC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AAChF,CAAC,CAAC,CAAA"}

package/dist/operation-journal/canonical.d.ts

@@ -0,0 +1,52 @@
+import { type JournalOperation, type JournalRecord, type JournalRecordTag, type JournalWorkflowCoordinate } from "./model.js";
+export declare const isCanonicalS3VersionId: (value: string) => boolean;
+export interface CanonicalJournalRecord {
+    readonly tag: JournalRecordTag;
+    readonly codecId: string;
+    readonly payloadBase64: string;
+    readonly payloadDigest: string;
+}
+export interface CanonicalJournalPredecessor {
+    readonly eventDigest: string;
+    readonly headVersionId: string;
+    readonly headEtag: string;
+}
+export interface CanonicalJournalEvent extends JournalOperation {
+    readonly schemaVersion: "ts-release-operation-journal-event/v1";
+    readonly sequence: number;
+    readonly transactionId: string;
+    readonly previous: CanonicalJournalPredecessor | null;
+    readonly workflow: JournalWorkflowCoordinate;
+    readonly record: CanonicalJournalRecord;
+}
+export interface CanonicalJournalHead extends JournalOperation {
+    readonly schemaVersion: "ts-release-operation-journal-head/v1";
+    readonly sequence: number;
+    readonly transactionId: string;
+    readonly eventKey: string;
+    readonly eventVersionId: string;
+    readonly eventChecksumSha256: string;
+    readonly eventDigest: string;
+    readonly previousHeadVersionId: string | null;
+    readonly previousHeadEtag: string | null;
+}
+export declare const validateJournalOperation: (operation: JournalOperation) => JournalOperation;
+export declare const validateJournalWorkflow: (workflow: JournalWorkflowCoordinate) => JournalWorkflowCoordinate;
+export declare const validateTransactionId: (transactionId: string) => string;
+export declare const deriveOperationKey: (canonicalOperationIdentity: Uint8Array) => string;
+export declare const journalNamespace: (operation: JournalOperation, prefix?: string) => string;
+export declare const journalHeadKey: (operation: JournalOperation) => string;
+export declare const journalEventKey: (operation: JournalOperation, sequence: number, transactionId: string) => string;
+export declare const makeCanonicalJournalRecord: (input: {
+    readonly tag: JournalRecordTag;
+    readonly codecId: string;
+    readonly payload: Uint8Array;
+}) => CanonicalJournalRecord;
+export declare const encodeJournalEvent: (event: CanonicalJournalEvent) => Uint8Array;
+export declare const encodeJournalHead: (head: CanonicalJournalHead) => Uint8Array;
+export declare const decodeJournalEvent: (bytes: Uint8Array) => CanonicalJournalEvent;
+export declare const decodeJournalHead: (bytes: Uint8Array) => CanonicalJournalHead;
+export declare const eventDigest: (bytes: Uint8Array) => string;
+export declare const objectChecksum: (bytes: Uint8Array) => string;
+export declare const journalRecordFromEvent: (event: CanonicalJournalEvent) => JournalRecord;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/operation-journal/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/operation-journal/canonical.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC/B,MAAM,YAAY,CAAA;AAyEnB,eAAO,MAAM,sBAAsB,GAAI,OAAO,MAAM,KAAG,OAGtD,CAAA;AA2CD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,QAAQ,CAAC,aAAa,EAAE,uCAAuC,CAAA;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAA;IACrD,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;CACxC;AAED,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,QAAQ,CAAC,aAAa,EAAE,sCAAsC,CAAA;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CACzC;AAED,eAAO,MAAM,wBAAwB,GAAI,WAAW,gBAAgB,KAAG,gBAGrE,CAAA;AAEF,eAAO,MAAM,uBAAuB,GAClC,UAAU,yBAAyB,KAClC,yBAID,CAAA;AAEF,eAAO,MAAM,qBAAqB,GAAI,eAAe,MAAM,KAAG,MACY,CAAA;AAE1E,eAAO,MAAM,kBAAkB,GAAI,4BAA4B,UAAU,KAAG,MAS3E,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,WAAW,gBAAgB,EAC3B,eAA+B,KAC9B,MAIF,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,WAAW,gBAAgB,KAAG,MACnB,CAAA;AAE1C,eAAO,MAAM,eAAe,GAC1B,WAAW,gBAAgB,EAC3B,UAAU,MAAM,EAChB,eAAe,MAAM,KACpB,MAKF,CAAA;AAED,eAAO,MAAM,0BAA0B,GAAI,OAAO;IAChD,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;CAC7B,KAAG,sBAgBH,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,OAAO,qBAAqB,KAAG,UACtB,CAAA;AAE5C,eAAO,MAAM,iBAAiB,GAAI,MAAM,oBAAoB,KAAG,UACpB,CAAA;AAiC3C,eAAO,MAAM,kBAAkB,GAAI,OAAO,UAAU,KAAG,qBA2BtD,CAAA;AAED,eAAO,MAAM,iBAAiB,GAAI,OAAO,UAAU,KAAG,oBA4CrD,CAAA;AAUD,eAAO,MAAM,WAAW,GAAI,OAAO,UAAU,KAAG,MAAuD,CAAA;AACvG,eAAO,MAAM,cAAc,GAAI,OAAO,UAAU,KAAG,MAAwD,CAAA;AAE3G,eAAO,MAAM,sBAAsB,GAAI,OAAO,qBAAqB,KAAG,aAQpE,CAAA"}