@mark1russell7/machines 0.3.17 → 0.3.19

package/build/index.js

@@ -1,49 +1,49 @@
 import { machineSchema } from "@mark1russell7/algebra";
 import { z } from "zod";
 //#region src/grpc/grpc-go-server.ts
-const AT$10 = "grpc-go v1.84.0";
+const AT$12 = "grpc-go v1.84.0";
 const GO = "go1.27.2 src/net";
 const ETCD = "etcd v3.6.15";
 /** These are the facts of the transport of grpc-go, for each server on it. */
 const TRANSPORT = [
 	{
-		ref: `${AT$10} internal/transport/defaults.go:31-40 the server keepalive: Time 2 h, Timeout 20 s. MinTime of the policy 5 min. MaxConnectionIdle, Age and AgeGrace infinite`,
+		ref: `${AT$12} internal/transport/defaults.go:31-40 the server keepalive: Time 2 h, Timeout 20 s. MinTime of the policy 5 min. MaxConnectionIdle, Age and AgeGrace infinite`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/transport/http2_server.go:226-253 the defaults of the parameters, a jitter of 10 % on MaxConnectionAge, and TCP_USER_TIMEOUT = Timeout when Time is not infinite`,
+		ref: `${AT$12} internal/transport/http2_server.go:226-253 the defaults of the parameters, a jitter of 10 % on MaxConnectionAge, and TCP_USER_TIMEOUT = Timeout when Time is not infinite`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/syscall/syscall_linux.go:71-90 SetTCPUserTimeout acts only on a *net.TCPConn. On any other net.Conn it does nothing`,
+		ref: `${AT$12} internal/syscall/syscall_linux.go:71-90 SetTCPUserTimeout acts only on a *net.TCPConn. On any other net.Conn it does nothing`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/transport/http2_server.go:1197-1286 keepalive(): a PING after Time with no read, and Close when no read comes for Timeout after it. MaxConnectionIdle and MaxConnectionAge drain with GOAWAY, and AgeGrace closes`,
+		ref: `${AT$12} internal/transport/http2_server.go:1197-1286 keepalive(): a PING after Time with no read, and Close when no read comes for Timeout after it. MaxConnectionIdle and MaxConnectionAge drain with GOAWAY, and AgeGrace closes`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/transport/http2_server.go:881-933 handlePing: a PING less than MinTime after the last one is a strike, and with no stream open and PermitWithoutStream false, less than 2 h. The third strike sends GOAWAY ENHANCE_YOUR_CALM too_many_pings and closes the connection`,
+		ref: `${AT$12} internal/transport/http2_server.go:881-933 handlePing: a PING less than MinTime after the last one is a strike, and with no stream open and PermitWithoutStream false, less than 2 h. The third strike sends GOAWAY ENHANCE_YOUR_CALM too_many_pings and closes the connection`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/transport/http2_server.go:279-281, :1064, :1132, :1176 each write of headers, a status or data by the server clears the strikes`,
+		ref: `${AT$12} internal/transport/http2_server.go:279-281, :1064, :1132, :1176 each write of headers, a status or data by the server clears the strikes`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/transport/http2_server.go:1291-1310 Close closes the net.Conn: a FIN, or a reset when bytes are unread`,
+		ref: `${AT$12} internal/transport/http2_server.go:1291-1310 Close closes the net.Conn: a FIN, or a reset when bytes are unread`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} internal/transport/http2_server.go:536-537, :603-615 a call with the header grpc-timeout gets a timer of that timeout from the read of its headers. Its end closes the stream with RST_STREAM CANCEL, and the context of the handler ends`,
+		ref: `${AT$12} internal/transport/http2_server.go:536-537, :603-615 a call with the header grpc-timeout gets a timer of that timeout from the read of its headers. Its end closes the stream with RST_STREAM CANCEL, and the context of the handler ends`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} server.go:192, :1000-1009 a deadline of 120 s for the handshake of each new connection (ConnectionTimeout)`,
+		ref: `${AT$12} server.go:192, :1000-1009 a deadline of 120 s for the handshake of each new connection (ConnectionTimeout)`,
 		rung: "implemented"
 	},
 	{
-		ref: `${AT$10} server.go:894-905 the comment of grpc-go: Go sets a TCP keepalive of 15 s on each accepted connection`,
+		ref: `${AT$12} server.go:894-905 the comment of grpc-go: Go sets a TCP keepalive of 15 s on each accepted connection`,
 		rung: "documented"
 	},
 	{
@@ -702,7 +702,7 @@ const ETCD_SERVER = serverOf({
 });
 //#endregion
 //#region src/grpc/grpc-js.ts
-const AT$9 = "@grpc/grpc-js 1.14.6 src";
+const AT$11 = "@grpc/grpc-js 1.14.6 src";
 /**
 * This document is grpc-js 1.14.6 on Node, for one channel to one server with no TLS, its transport
 * (one HTTP/2 session on one TCP connection) and one unary call on it. It gives the states of the
@@ -732,83 +732,83 @@ const GRPC_JS = machineSchema.parse({
 	},
 	sources: [
 		{
-			ref: `${AT$9}/transport.ts:70 KEEPALIVE_TIMEOUT_MS is 20000`,
+			ref: `${AT$11}/transport.ts:70 KEEPALIVE_TIMEOUT_MS is 20000`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:183-198 grpc.keepalive_time_ms is -1 when the caller gives none, grpc.keepalive_timeout_ms is 20000, and grpc.keepalive_permit_without_calls is false`,
+			ref: `${AT$11}/transport.ts:183-198 grpc.keepalive_time_ms is -1 when the caller gives none, grpc.keepalive_timeout_ms is 20000, and grpc.keepalive_permit_without_calls is false`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:447-453 a PING goes out only with a keepalive time above 0, and with a call in flight or permit_without_calls`,
+			ref: `${AT$11}/transport.ts:447-453 a PING goes out only with a keepalive time above 0, and with a call in flight or permit_without_calls`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:455-507 each PING starts a timer of keepalive_timeout_ms, and its end with no ACK ends the transport (handleDisconnect). A failed send of the PING ends it too`,
+			ref: `${AT$11}/transport.ts:455-507 each PING starts a timer of keepalive_timeout_ms, and its end with no ACK ends the transport (handleDisconnect). A failed send of the PING ends it too`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:515-534 and :553-561 the keepalive timer starts with the first call in flight, and after each ACK. It is not reset by data. When it ends with no call in flight, the PING goes out at the start of the next call`,
+			ref: `${AT$11}/transport.ts:515-534 and :553-561 the keepalive timer starts with the first call in flight, and after each ACK. It is not reset by data. When it ends with no call in flight, the PING goes out at the start of the next call`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:200-242 a close or an error of the session, or a close of its socket, ends the transport. A GOAWAY makes it unusable (reportDisconnectToOwner)`,
+			ref: `${AT$11}/transport.ts:200-242 a close or an error of the session, or a close of its socket, ends the transport. A GOAWAY makes it unusable (reportDisconnectToOwner)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:205-227 a GOAWAY ENHANCE_YOUR_CALM with the data too_many_pings tells the subchannel that the server refused the pings`,
+			ref: `${AT$11}/transport.ts:205-227 a GOAWAY ENHANCE_YOUR_CALM with the data too_many_pings tells the subchannel that the server refused the pings`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:431-441 handleDisconnect: each call in flight gets onDisconnect, and the session is destroyed in the next turn of the event loop`,
+			ref: `${AT$11}/transport.ts:431-441 handleDisconnect: each call in flight gets onDisconnect, and the session is destroyed in the next turn of the event loop`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:684-687 shutdown closes the session: a GOAWAY, then the end of the socket after the last stream`,
+			ref: `${AT$11}/transport.ts:684-687 shutdown closes the session: a GOAWAY, then the end of the socket after the last stream`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:792-810 the transport is ready at the first SETTINGS of the server (remoteSettings)`,
+			ref: `${AT$11}/transport.ts:792-810 the transport is ready at the first SETTINGS of the server (remoteSettings)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:818-840 the TCP connect is net.connect with no timeout`,
+			ref: `${AT$11}/transport.ts:818-840 the TCP connect is net.connect with no timeout`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/transport.ts:862 setNoDelay on each connection: TCP_NODELAY, thus no Nagle. No setKeepAlive anywhere in the package`,
+			ref: `${AT$11}/transport.ts:862 setNoDelay on each connection: TCP_NODELAY, thus no Nagle. No setKeepAlive anywhere in the package`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/subchannel-call.ts:360-371 onDisconnect ends the call with UNAVAILABLE 'Connection dropped' in the next turn of the event loop, unless the stream ends first`,
+			ref: `${AT$11}/subchannel-call.ts:360-371 onDisconnect ends the call with UNAVAILABLE 'Connection dropped' in the next turn of the event loop, unless the stream ends first`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/subchannel-call.ts:230-329 the end of a stream with no status: REFUSED_STREAM is UNAVAILABLE, CANCEL after a dropped connection is UNAVAILABLE, and an internal error of ECONNRESET or ETIMEDOUT is UNAVAILABLE`,
+			ref: `${AT$11}/subchannel-call.ts:230-329 the end of a stream with no status: REFUSED_STREAM is UNAVAILABLE, CANCEL after a dropped connection is UNAVAILABLE, and an internal error of ECONNRESET or ETIMEDOUT is UNAVAILABLE`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/load-balancing-call.ts:257-261 a stream that the server refused has the progress REFUSED, and any other started stream PROCESSED`,
+			ref: `${AT$11}/load-balancing-call.ts:257-261 a stream that the server refused has the progress REFUSED, and any other started stream PROCESSED`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/retrying-call.ts:631-652 a transparent retry for NOT_STARTED, and one for REFUSED. A PROCESSED call is retried only by a retry policy of the service config, which the defaults do not have`,
+			ref: `${AT$11}/retrying-call.ts:631-652 a transparent retry for NOT_STARTED, and one for REFUSED. A PROCESSED call is retried only by a retry policy of the service config, which the defaults do not have`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/load-balancing-call.ts:338-345 a pick in TRANSIENT_FAILURE fails the call at once, unless it asks for waitForReady`,
+			ref: `${AT$11}/load-balancing-call.ts:338-345 a pick in TRANSIENT_FAILURE fails the call at once, unless it asks for waitForReady`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/resolving-call.ts:118-180 the deadline of a call is a timer from the start of the call. Its end cancels the call with DEADLINE_EXCEEDED`,
+			ref: `${AT$11}/resolving-call.ts:118-180 the deadline of a call is a timer from the start of the call. Its end cancels the call with DEADLINE_EXCEEDED`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/deadline.ts:39-52 the header grpc-timeout is the time left to the deadline when the call sends its headers, rounded up to whole milliseconds. A server can start a timer of it`,
+			ref: `${AT$11}/deadline.ts:39-52 the header grpc-timeout is the time left to the deadline when the call sends its headers, rounded up to whole milliseconds. A server can start a timer of it`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/subchannel-call.ts:269-279 a RST_STREAM CANCEL of the server ends the call with CANCELLED 'Call cancelled'`,
+			ref: `${AT$11}/subchannel-call.ts:269-279 a RST_STREAM CANCEL of the server ends the call with CANCELLED 'Call cancelled'`,
 			rung: "implemented"
 		},
 		{
@@ -816,19 +816,19 @@ const GRPC_JS = machineSchema.parse({
 			rung: "observed"
 		},
 		{
-			ref: `${AT$9}/subchannel.ts:275-291 the end of the transport takes the subchannel from READY to IDLE. After too_many_pings the keepalive time doubles`,
+			ref: `${AT$11}/subchannel.ts:275-291 the end of the transport takes the subchannel from READY to IDLE. After too_many_pings the keepalive time doubles`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/subchannel.ts:298-304 a failed connect takes the subchannel to TRANSIENT_FAILURE`,
+			ref: `${AT$11}/subchannel.ts:298-304 a failed connect takes the subchannel to TRANSIENT_FAILURE`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/backoff-timeout.ts:23-26 the reconnect waits 1000 ms first, each next wait 1.6 times longer, up to 120000 ms, with a jitter of 0.2`,
+			ref: `${AT$11}/backoff-timeout.ts:23-26 the reconnect waits 1000 ms first, each next wait 1.6 times longer, up to 120000 ms, with a jitter of 0.2`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$9}/internal-channel.ts:74-77 and :324-325 a channel with no call for grpc.client_idle_timeout_ms goes IDLE: 30 min at the defaults, 1 s at least`,
+			ref: `${AT$11}/internal-channel.ts:74-77 and :324-325 a channel with no call for grpc.client_idle_timeout_ms goes IDLE: 30 min at the defaults, 1 s at least`,
 			rung: "implemented"
 		},
 		{
@@ -2581,8 +2581,224 @@ const UNDICI_CLIENT = machineSchema.parse({
 	}
 });
 //#endregion
+//#region src/http/undici-retry.ts
+const AT$10 = "undici 8.12.2 lib/handler/retry-handler.js";
+/**
+* This document is one request through a `RetryAgent` of undici 8.12.2: the retries of a reply
+* whose status is retryable, for example 429 or 503. Each fact comes from the published package at
+* 8.12.2, with the file and the line. The defaults are 5 retries, a backoff from 500 ms with a factor
+* of 2, a cap of 30 s, and Retry-After read.
+*
+* - The delay of a retry is the Retry-After of the reply, capped by `maxTimeout`. A Retry-After
+*   longer than the cap does not stop the retries: the retry comes early. A reply without
+*   Retry-After gets the backoff, with no jitter.
+* - The agent gives up after `maxRetries` retries. The caller then gets `RequestRetryError`, with
+*   the status of the last reply. Thus the retry window of the caller is the sum of the delays.
+* - A POST and a PATCH are not retried.
+* - The delay is a native Node timer. It arms after the parse of the whole reply, thus it comes after
+*   the last segment by the handling time of the program. No source bounds that time, and this
+*   document does not hold it. The cells add it from a calibration (`HANDLING` in
+*   `packages/cells/src/http/race.ts`).
+*
+* The plain `Client` and `fetch` of undici, and the `fetch` of Node 24.21.0 (undici 7.29.1), send no
+* request again for a status. Their retry window is 0.
+*/
+const UNDICI_RETRY = machineSchema.parse({
+	format: "mark1russell7.machine/1",
+	id: "undici-retry-agent",
+	title: "One request through a RetryAgent of undici 8.12.2",
+	layer: "driver",
+	version: "8.12.2",
+	conditions: {
+		undici: "8.12.2",
+		node: "24.21.0",
+		throwOnError: "true"
+	},
+	sources: [
+		{
+			ref: `${AT$10}:125-133 the defaults: retryAfter true, maxTimeout 30000, minTimeout 500, timeoutFactor 2, maxRetries 5, the methods GET HEAD OPTIONS PUT DELETE TRACE QUERY, the statusCodes 500 502 503 504 429`,
+			rung: "implemented"
+		},
+		{
+			ref: "undici 8.12.2 lib/dispatcher/retry-agent.js:18-27: a RetryAgent wraps a dispatcher with a RetryHandler",
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$10}:331-351 the policy: a method or a status out of its lists is not retried, and a counter above maxRetries gives up`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$10}:353-370 the delay: Retry-After in seconds times 1000, or an HTTP-date less the clock of the client (:13-16), capped by maxTimeout; 0 at once; else min(minTimeout * timeoutFactor^(counter - 1), maxTimeout); then setTimeout`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$10}:380 the counter: one more at each reply`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$10}:175-192 and :518-535 a retryable status with throwOnError drops the body of the reply, and the error goes to the policy`,
+			rung: "implemented"
+		},
+		{
+			ref: "undici 8.12.2 lib/core/errors.js:362-371 RequestRetryError: code UND_ERR_REQ_RETRY, statusCode, headers, data.count",
+			rung: "implemented"
+		},
+		{
+			ref: "RFC 9110 §10.2.3: Retry-After, as delay-seconds or an HTTP-date",
+			rung: "normative"
+		}
+	],
+	states: {
+		IDLE: {
+			initial: true,
+			pseudo: true
+		},
+		SENT: { note: "a send of the request waits for its reply" },
+		WAITING: { note: "the delay of a retry: the Retry-After of the reply, or the backoff" },
+		DONE: {
+			final: true,
+			note: "a reply whose status is not retryable goes to the caller"
+		},
+		FAILED: {
+			final: true,
+			note: "RequestRetryError (UND_ERR_REQ_RETRY), with the status of the last reply"
+		}
+	},
+	events: {
+		"req.dispatch": { kind: "app" },
+		"rx.retryable": {
+			kind: "rx",
+			note: "a reply with a status of statusCodes, for example 429 with Retry-After"
+		},
+		"rx.final": {
+			kind: "rx",
+			note: "a reply with another status, for example 200"
+		},
+		"timer.retry": { kind: "timer" }
+	},
+	knobs: {
+		maxRetries: {
+			key: "undici RetryAgent maxRetries",
+			scope: "client",
+			unit: "count",
+			default: 5
+		},
+		minTimeout: {
+			key: "undici RetryAgent minTimeout",
+			scope: "client",
+			unit: "ms",
+			default: 500
+		},
+		maxTimeout: {
+			key: "undici RetryAgent maxTimeout",
+			scope: "client",
+			unit: "ms",
+			default: 3e4
+		},
+		timeoutFactor: {
+			key: "undici RetryAgent timeoutFactor",
+			scope: "client",
+			unit: "count",
+			default: 2
+		},
+		retry_after: {
+			key: "Retry-After of the reply, in seconds",
+			scope: "reply",
+			unit: "s",
+			default: null,
+			note: "the server gives it. An HTTP-date counts on the clock of the client"
+		},
+		hz: {
+			key: "CONFIG_HZ",
+			scope: "global",
+			unit: "Hz",
+			default: null,
+			note: "the HZ of the kernel, for the step of the coarse loop clock of libuv (timers.ts)"
+		}
+	},
+	timers: {
+		retry_after: {
+			duration: {
+				expr: "min(retry_after * 1000, maxTimeout)",
+				unit: "ms"
+			},
+			lateness: nodeTimerLateness("min(retry_after * 1000, maxTimeout)"),
+			early: NODE_TIMER_EARLY,
+			arms: ["enter:WAITING"],
+			cancels: ["req.dispatch"],
+			fires: "timer.retry",
+			note: "setTimeout(cb, retryTimeout) with the Retry-After of the reply. It arms after the parse of the whole reply"
+		},
+		backoff: {
+			duration: {
+				expr: "min(minTimeout * pow(timeoutFactor, fired), maxTimeout)",
+				unit: "ms"
+			},
+			lateness: nodeTimerLateness("min(minTimeout * pow(timeoutFactor, fired), maxTimeout)"),
+			early: NODE_TIMER_EARLY,
+			arms: ["enter:WAITING"],
+			cancels: ["req.dispatch"],
+			fires: "timer.retry",
+			backoff: { resets: ["req.dispatch"] },
+			note: "a reply without Retry-After: 0.5, 1, 2, 4 and 8 s at the defaults, with no jitter"
+		}
+	},
+	transitions: [
+		{
+			id: "ur.send",
+			from: "IDLE",
+			to: "SENT",
+			on: "req.dispatch"
+		},
+		{
+			id: "ur.wait",
+			from: "SENT",
+			to: "WAITING",
+			on: "rx.retryable",
+			guard: "the count of replies is maxRetries or less, the method is in its list, and no part of the body went to the caller",
+			source: "retry-handler.js:331-351, :380, :581-584"
+		},
+		{
+			id: "ur.give-up",
+			from: "SENT",
+			to: "FAILED",
+			on: "rx.retryable",
+			guard: "the count of replies is above maxRetries, or the method is not in its list (POST, PATCH)",
+			errno: "UND_ERR_REQ_RETRY",
+			source: "retry-handler.js:331-335, :347-350, :430-436"
+		},
+		{
+			id: "ur.retry-after",
+			from: "WAITING",
+			to: "SENT",
+			on: "timer.retry",
+			timer: "retry_after",
+			guard: "the reply had a Retry-After of 0 or more",
+			emits: ["tx.request"],
+			source: "retry-handler.js:353-365, :370"
+		},
+		{
+			id: "ur.backoff",
+			from: "WAITING",
+			to: "SENT",
+			on: "timer.retry",
+			timer: "backoff",
+			guard: "the reply had no Retry-After, or one in the past, or one that does not parse",
+			emits: ["tx.request"],
+			source: "retry-handler.js:361-370"
+		},
+		{
+			id: "ur.done",
+			from: "SENT",
+			to: "DONE",
+			on: "rx.final",
+			source: "retry-handler.js:373-383"
+		}
+	]
+});
+//#endregion
 //#region src/ioredis-sentinel.ts
-const AT$8 = "ioredis 6.0.0 built";
+const AT$9 = "ioredis 6.0.0 built";
 /**
 * This document is the Sentinel path of ioredis 6.0.0. It tells how ioredis finds the primary of a
 * group through the Sentinels, loses it, and connects to the new one. The standalone states of
@@ -2603,43 +2819,43 @@ const IOREDIS_SENTINEL = machineSchema.parse({
 	},
 	sources: [
 		{
-			ref: `${AT$8}/connectors/SentinelConnector/index.js:46-121 connect (each Sentinel in turn, then sentinelRetryStrategy)`,
+			ref: `${AT$9}/connectors/SentinelConnector/index.js:46-121 connect (each Sentinel in turn, then sentinelRetryStrategy)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/connectors/SentinelConnector/index.js:145-151 resolveMaster (get-master-addr-by-name, then SENTINEL sentinels)`,
+			ref: `${AT$9}/connectors/SentinelConnector/index.js:145-151 resolveMaster (get-master-addr-by-name, then SENTINEL sentinels)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/connectors/SentinelConnector/index.js:175-212 connectToSentinel and resolve (one connection for each question, no retry)`,
+			ref: `${AT$9}/connectors/SentinelConnector/index.js:175-212 connectToSentinel and resolve (one connection for each question, no retry)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/connectors/SentinelConnector/index.js:27-39 check (the role of the ready check)`,
+			ref: `${AT$9}/connectors/SentinelConnector/index.js:27-39 check (the role of the ready check)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/connectors/SentinelConnector/FailoverDetector.js:6-43 (+switch-master, only with failoverDetector)`,
+			ref: `${AT$9}/connectors/SentinelConnector/FailoverDetector.js:6-43 (+switch-master, only with failoverDetector)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/redis/RedisOptions.js:9-57 (the defaults)`,
+			ref: `${AT$9}/redis/RedisOptions.js:9-57 (the defaults)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/redis/event_handler.js:294-355 closeHandler (retryStrategy, then maxRetriesPerRequest flushes the queue)`,
+			ref: `${AT$9}/redis/event_handler.js:294-355 closeHandler (retryStrategy, then maxRetriesPerRequest flushes the queue)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/redis/event_handler.js:364-449 readyHandler (retryAttempts back to 0, the resend, the offline queue)`,
+			ref: `${AT$9}/redis/event_handler.js:364-449 readyHandler (retryAttempts back to 0, the resend, the offline queue)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/Redis.js:123-240 _connect (connectTimeout, keepAlive) and :379-405 sendCommand (the offline queue)`,
+			ref: `${AT$9}/Redis.js:123-240 _connect (connectTimeout, keepAlive) and :379-405 sendCommand (the offline queue)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$8}/Redis.js:599-605 handleReconnection (reconnectOnError: null, thus a READONLY error goes to the caller)`,
+			ref: `${AT$9}/Redis.js:599-605 handleReconnection (reconnectOnError: null, thus a READONLY error goes to the caller)`,
 			rung: "implemented"
 		}
 	],
@@ -4799,7 +5015,7 @@ const IOREDIS_STATUS = machineSchema.parse(ioredis_status_default);
 const MANIFESTATIONS = z.record(z.string(), z.array(z.string())).parse(manifestations_default);
 //#endregion
 //#region src/mongo/mongod-replication.ts
-const AT$7 = "mongodb r9.0.4 src/mongo/db/repl";
+const AT$8 = "mongodb r9.0.4 src/mongo/db/repl";
 /**
 * This document is the replication of mongod 9.0.4. It gives one member of a replica set, its view
 * of the primary, and the election that it can hold. The states are the states of the member. The
@@ -4830,95 +5046,95 @@ const MONGOD_REPL = machineSchema.parse({
 	},
 	sources: [
 		{
-			ref: `${AT$7}/repl_set_config.idl:74-109 the settings: heartbeatIntervalMillis 2000, heartbeatTimeoutSecs 10, electionTimeoutMillis 10000, catchUpTimeoutMillis -1, catchUpTakeoverDelayMillis 30000`,
+			ref: `${AT$8}/repl_set_config.idl:74-109 the settings: heartbeatIntervalMillis 2000, heartbeatTimeoutSecs 10, electionTimeoutMillis 10000, catchUpTimeoutMillis -1, catchUpTakeoverDelayMillis 30000`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/repl_server_parameters.idl:320-328 replElectionTimeoutOffsetLimitFraction 0.15`,
+			ref: `${AT$8}/repl_server_parameters.idl:320-328 replElectionTimeoutOffsetLimitFraction 0.15`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/topology_coordinator.cpp:1058-1101 the heartbeat window and the timeout of each request, :1124-1147 the next heartbeat, :1239-1248 a member DOWN`,
+			ref: `${AT$8}/topology_coordinator.cpp:1058-1101 the heartbeat window and the timeout of each request, :1124-1147 the next heartbeat, :1239-1248 a member DOWN`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/topology_coordinator.h:62 kMaxHeartbeatRetries 2`,
+			ref: `${AT$8}/topology_coordinator.h:62 kMaxHeartbeatRetries 2`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl_heartbeat.cpp:97-111 the random offset, :346-352 a heartbeat from the primary postpones the election, :1215-1271 the election timeout and its offset`,
+			ref: `${AT$8}/replication_coordinator_impl_heartbeat.cpp:97-111 the random offset, :346-352 a heartbeat from the primary postpones the election, :1215-1271 the election timeout and its offset`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/data_replicator_external_state_impl.cpp:70-81 an oplog batch that names a primary postpones the election`,
+			ref: `${AT$8}/data_replicator_external_state_impl.cpp:70-81 an oplog batch that names a primary postpones the election`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/delayable_timeout_callback.cpp:149-172 the offset changes at most once in its own length`,
+			ref: `${AT$8}/delayable_timeout_callback.cpp:149-172 the offset changes at most once in its own length`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/topology_coordinator.cpp:1440-1457 and :1476-1489 the liveness check: a primary that cannot see a majority steps down`,
+			ref: `${AT$8}/topology_coordinator.cpp:1440-1457 and :1476-1489 the liveness check: a primary that cannot see a majority steps down`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl_heartbeat.cpp:1158-1188 the liveness check runs at the stalest member's last update plus the election timeout`,
+			ref: `${AT$8}/replication_coordinator_impl_heartbeat.cpp:1158-1188 the liveness check runs at the stalest member's last update plus the election timeout`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl_elect_v1.cpp:189-226 the dry run, :268-382 the term, the durable vote and the real vote, :408-468 the win`,
+			ref: `${AT$8}/replication_coordinator_impl_elect_v1.cpp:189-226 the dry run, :268-382 the term, the durable vote and the real vote, :408-468 the win`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/vote_requester.cpp:96 a vote request times out at min(electionTimeoutMillis, 30 s), :160-177 a majority of yes votes ends the round`,
+			ref: `${AT$8}/vote_requester.cpp:96 a vote request times out at min(electionTimeoutMillis, 30 s), :160-177 a majority of yes votes ends the round`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/topology_coordinator.cpp:3741-3790 a member votes for each candidate whose data is not staler than its own, and only an arbiter refuses one because it sees a primary`,
+			ref: `${AT$8}/topology_coordinator.cpp:3741-3790 a member votes for each candidate whose data is not staler than its own, and only an arbiter refuses one because it sees a primary`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl_catchup.cpp:35-85 the catch-up and its timeout, :110-133 it ends when each other member answered a heartbeat since the win, or failed one, :349-379 the win restarts each heartbeat`,
+			ref: `${AT$8}/replication_coordinator_impl_catchup.cpp:35-85 the catch-up and its timeout, :110-133 it ends when each other member answered a heartbeat since the win, or failed one, :349-379 the win restarts each heartbeat`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/topology_coordinator.cpp:3841-3849 and :3910-3932 a restarted heartbeat, and the latest optime that the catch-up waits for`,
+			ref: `${AT$8}/topology_coordinator.cpp:3841-3849 and :3910-3932 a restarted heartbeat, and the latest optime that the catch-up waits for`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl.cpp:1490-1570 the end of the drain: a reconfig of the term, then writes, :2580-2588 the hello of a primary that cannot write yet`,
+			ref: `${AT$8}/replication_coordinator_impl.cpp:1490-1570 the end of the drain: a reconfig of the term, then writes, :2580-2588 the hello of a primary that cannot write yet`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl_step_up_step_down.cpp:64-329 replSetStepDown: the wait for a caught-up secondary, the step-down and the hand-off`,
+			ref: `${AT$8}/replication_coordinator_impl_step_up_step_down.cpp:64-329 replSetStepDown: the wait for a caught-up secondary, the step-down and the hand-off`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/repl_set_commands.cpp:545-561 stepDownSecs 60 and secondaryCatchUpPeriodSecs 10`,
+			ref: `${AT$8}/repl_set_commands.cpp:545-561 stepDownSecs 60 and secondaryCatchUpPeriodSecs 10`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl.idl:18-26 enableElectionHandoff true, and replication_coordinator_impl.cpp:2830-2873 the hand-off: replSetStepUp with skipDryRun`,
+			ref: `${AT$8}/replication_coordinator_impl.idl:18-26 enableElectionHandoff true, and replication_coordinator_impl.cpp:2830-2873 the hand-off: replSetStepUp with skipDryRun`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl.cpp:1516 the reconfig of the term, :4598 and :4750 a new config starts each heartbeat again`,
+			ref: `${AT$8}/replication_coordinator_impl.cpp:1516 the reconfig of the term, :4598 and :4750 a new config starts each heartbeat again`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl_heartbeat.cpp:367-376 a heartbeat response that moves a member's optime forward moves the commit point and wakes the writes that wait`,
+			ref: `${AT$8}/replication_coordinator_impl_heartbeat.cpp:367-376 a heartbeat response that moves a member's optime forward moves the commit point and wakes the writes that wait`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/oplog_fetcher.cpp:119-133 the awaitData timeout min(electionTimeoutMillis / 2, 30 s), :317-324 the socket timeout adds oplogNetworkTimeoutBufferSeconds, :640-647 the exhaust read`,
+			ref: `${AT$8}/oplog_fetcher.cpp:119-133 the awaitData timeout min(electionTimeoutMillis / 2, 30 s), :317-324 the socket timeout adds oplogNetworkTimeoutBufferSeconds, :640-647 the exhaust read`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/oplog_fetcher.cpp:395-441 an error makes a new cursor while restarts remain, :596-611 the new cursor sets the retried find timeout, :1073-1113 one restart after 5 ms`,
+			ref: `${AT$8}/oplog_fetcher.cpp:395-441 an error makes a new cursor while restarts remain, :596-611 the new cursor sets the retried find timeout, :1073-1113 one restart after 5 ms`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/repl_server_parameters.idl:121-126 oplogRetriedFindMaxSeconds 2, :234-244 oplogFetcherSteadyStateMaxFetcherRestarts 1, :344-351 oplogNetworkTimeoutBufferSeconds 5`,
+			ref: `${AT$8}/repl_server_parameters.idl:121-126 oplogRetriedFindMaxSeconds 2, :234-244 oplogFetcherSteadyStateMaxFetcherRestarts 1, :344-351 oplogNetworkTimeoutBufferSeconds 5`,
 			rung: "implemented"
 		},
 		{
@@ -4926,19 +5142,19 @@ const MONGOD_REPL = machineSchema.parse({
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/bgsync.cpp:395-447 a member without a sync source waits for new heartbeat data or 1 s (:971-976), and topology_coordinator.cpp:1124-1136 it sends its heartbeats each 500 ms`,
+			ref: `${AT$8}/bgsync.cpp:395-447 a member without a sync source waits for new heartbeat data or 1 s (:971-976), and topology_coordinator.cpp:1124-1136 it sends its heartbeats each 500 ms`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/replication_coordinator_impl.cpp:4947-4972 a member that loses its sync source starts each heartbeat again at once`,
+			ref: `${AT$8}/replication_coordinator_impl.cpp:4947-4972 a member that loses its sync source starts each heartbeat again at once`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/sync_source_feedback.cpp:37-47 the keepalive of the reporter min(electionTimeoutMillis / 2, 30 s), :39-40 the network timeout 30 s, :99-117 and :134-236 a new reporter only after the old one ends`,
+			ref: `${AT$8}/sync_source_feedback.cpp:37-47 the keepalive of the reporter min(electionTimeoutMillis / 2, 30 s), :39-40 the network timeout 30 s, :99-117 and :134-236 a new reporter only after the old one ends`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$7}/reporter.cpp:113-117 a reporter ends when its command in flight ends, :119-169 a trigger, :195-228 each replSetUpdatePosition has the network timeout`,
+			ref: `${AT$8}/reporter.cpp:113-117 a reporter ends when its command in flight ends, :119-169 a trigger, :195-228 each replSetUpdatePosition has the network timeout`,
 			rung: "implemented"
 		},
 		{
@@ -5557,7 +5773,7 @@ const MONGOD_REPL = machineSchema.parse({
 });
 //#endregion
 //#region src/mongo/mongod-session.ts
-const AT$6 = "mongodb r9.0.4 src/mongo";
+const AT$7 = "mongodb r9.0.4 src/mongo";
 /**
 * This document is the hold of mongod 9.0.4 on one client connection, over its socket. `mongod`
 * turns keepalive on for each TCP session. It lowers two keepalive options of the socket to a
@@ -5584,27 +5800,27 @@ const MONGOD_SESSION = machineSchema.parse({
 	},
 	sources: [
 		{
-			ref: `${AT$6}/transport/asio/asio_session_impl.cpp:156-165 each TCP session: TCP_NODELAY, SO_KEEPALIVE, setSocketKeepAliveParams, failures at debug 3 in a release build`,
+			ref: `${AT$7}/transport/asio/asio_session_impl.cpp:156-165 each TCP session: TCP_NODELAY, SO_KEEPALIVE, setSocketKeepAliveParams, failures at debug 3 in a release build`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$6}/util/net/socket_utils.h:15-16 kMaxKeepIdleSecs 300 and kMaxKeepIntvlSecs 1, :19-22 the defaults of setSocketKeepAliveParams`,
+			ref: `${AT$7}/util/net/socket_utils.h:15-16 kMaxKeepIdleSecs 300 and kMaxKeepIntvlSecs 1, :19-22 the defaults of setSocketKeepAliveParams`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$6}/util/net/socket_utils.cpp:165-196 applyMax: read the option, and set the maximum only when the value is higher, :199-220 TCP_KEEPIDLE and TCP_KEEPINTVL, never TCP_KEEPCNT`,
+			ref: `${AT$7}/util/net/socket_utils.cpp:165-196 applyMax: read the option, and set the maximum only when the value is higher, :199-220 TCP_KEEPIDLE and TCP_KEEPINTVL, never TCP_KEEPCNT`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$6}/util/net/socket_utils.cpp:176-181 and :190-194 the log of a failed read or set, at the severity of the caller`,
+			ref: `${AT$7}/util/net/socket_utils.cpp:176-181 and :190-194 the log of a failed read or set, at the severity of the caller`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$6}/util/net/sock.cpp:135-142 the older socket path: SO_KEEPALIVE, then the same maximums, failures as errors`,
+			ref: `${AT$7}/util/net/sock.cpp:135-142 the older socket path: SO_KEEPALIVE, then the same maximums, failures as errors`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$6}/db/repl/replication_info.cpp:131-143 an awaitable hello waits until now + maxAwaitTimeMS on the precise clock, or a change of the topology`,
+			ref: `${AT$7}/db/repl/replication_info.cpp:131-143 an awaitable hello waits until now + maxAwaitTimeMS on the precise clock, or a change of the topology`,
 			rung: "implemented"
 		}
 	],
@@ -5766,7 +5982,7 @@ const MONGOD_SESSION = machineSchema.parse({
 });
 //#endregion
 //#region src/mongo/mongodb-node.ts
-const AT$5 = "mongodb 7.7.0 src";
+const AT$6 = "mongodb 7.7.0 src";
 /**
 * This document is the MongoDB Node driver 7.7.0, for one server of a replica set. It gives one
 * connection of the driver by its role, and the timers that act on it. The roles are the monitor
@@ -5793,75 +6009,75 @@ const MONGODB_NODE = machineSchema.parse({
 	},
 	sources: [
 		{
-			ref: `${AT$5}/connection_string.ts:804-807 connectTimeoutMS 30000, :850-853 heartbeatFrequencyMS 10000, :934-937 minHeartbeatFrequencyMS 500`,
+			ref: `${AT$6}/connection_string.ts:804-807 connectTimeoutMS 30000, :850-853 heartbeatFrequencyMS 10000, :934-937 minHeartbeatFrequencyMS 500`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/connection_string.ts:1100-1103 serverSelectionTimeoutMS 30000, :1107-1111 socketTimeoutMS 0, :1178-1182 waitQueueTimeoutMS 0`,
+			ref: `${AT$6}/connection_string.ts:1100-1103 serverSelectionTimeoutMS 30000, :1107-1111 socketTimeoutMS 0, :1178-1182 waitQueueTimeoutMS 0`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/connection_string.ts:896-898 maxConnecting 2, :906-908 maxIdleTimeMS 0, :910-912 maxPoolSize 100, :930-933 minPoolSize 0, :1075-1082 retryReads and retryWrites true, :1089-1091 serverMonitoringMode auto`,
+			ref: `${AT$6}/connection_string.ts:896-898 maxConnecting 2, :906-908 maxIdleTimeMS 0, :910-912 maxPoolSize 100, :930-933 minPoolSize 0, :1075-1082 retryReads and retryWrites true, :1089-1091 serverMonitoringMode auto`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/cmap/connect.ts:291 DEFAULT_KEEP_ALIVE_INITIAL_DELAY_MS 120000, :336-338 keepAlive and noDelay, :378-417 makeSocket: setKeepAlive, setNoDelay, setTimeout(connectTimeoutMS), :432-438 the connect timeout`,
+			ref: `${AT$6}/cmap/connect.ts:291 DEFAULT_KEEP_ALIVE_INITIAL_DELAY_MS 120000, :336-338 keepAlive and noDelay, :378-417 makeSocket: setKeepAlive, setNoDelay, setTimeout(connectTimeoutMS), :432-438 the connect timeout`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/cmap/connect.ts:117-120 the handshake reads with socketTimeoutMS = connectTimeoutMS`,
+			ref: `${AT$6}/cmap/connect.ts:117-120 the handshake reads with socketTimeoutMS = connectTimeoutMS`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/monitor.ts:245-259 the streaming protocol, :338-371 the awaitable hello: maxAwaitTimeMS = heartbeatFrequencyMS, socketTimeoutMS = connectTimeoutMS + maxAwaitTimeMS`,
+			ref: `${AT$6}/sdam/monitor.ts:245-259 the streaming protocol, :338-371 the awaitable hello: maxAwaitTimeMS = heartbeatFrequencyMS, socketTimeoutMS = connectTimeoutMS + maxAwaitTimeMS`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/monitor.ts:273-293 a failed heartbeat: ResetPool, and InterruptInUseConnections for a timeout`,
+			ref: `${AT$6}/sdam/monitor.ts:273-293 a failed heartbeat: ResetPool, and InterruptInUseConnections for a timeout`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/monitor.ts:175-194 reset: the next check after heartbeatFrequencyMS, :609-636 wake: no check sooner than minHeartbeatFrequencyMS, :668-691 the next check after heartbeatFrequencyMS`,
+			ref: `${AT$6}/sdam/monitor.ts:175-194 reset: the next check after heartbeatFrequencyMS, :609-636 wake: no check sooner than minHeartbeatFrequencyMS, :668-691 the next check after heartbeatFrequencyMS`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/monitor.ts:490-565 the RTT pinger: its own connection, a hello each heartbeatFrequencyMS, no socket timeout`,
+			ref: `${AT$6}/sdam/monitor.ts:490-565 the RTT pinger: its own connection, a hello each heartbeatFrequencyMS, no socket timeout`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/cmap/connection.ts:328-334 a socket timeout, 1 ms later, is a MongoNetworkTimeoutError, :461-505 the socket timeout of a command, set again at each reply`,
+			ref: `${AT$6}/cmap/connection.ts:328-334 a socket timeout, 1 ms later, is a MongoNetworkTimeoutError, :461-505 the socket timeout of a command, set again at each reply`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/server.ts:186 resetServer, :390-444 handleError, :450-515 decorateCommandError, :532-546 markServerUnknown: a network error that is not a timeout resets the monitor`,
+			ref: `${AT$6}/sdam/server.ts:186 resetServer, :390-444 handleError, :450-515 decorateCommandError, :532-546 markServerUnknown: a network error that is not a timeout resets the monitor`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/topology.ts:559 the selection timeout, :568-572 and :635-664 MongoServerSelectionError, :862-888 updateServers clears the pool, :1082-1089 a waiting selection wakes each monitor`,
+			ref: `${AT$6}/sdam/topology.ts:559 the selection timeout, :568-572 and :635-664 MongoServerSelectionError, :862-888 updateServers clears the pool, :1082-1089 a waiting selection wakes each monitor`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/sdam/topology_description.ts:458-467 a primary that another primary replaces is Unknown, and nothing clears its pool`,
+			ref: `${AT$6}/sdam/topology_description.ts:458-467 a primary that another primary replaces is Unknown, and nothing clears its pool`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/cmap/connection_pool.ts:417-468 clear, :475-481 interruptInUseConnections: PoolClearedOnNetworkError, :584 a connection idle for maxIdleTimeMS is perished at the next check-out`,
+			ref: `${AT$6}/cmap/connection_pool.ts:417-468 clear, :475-481 interruptInUseConnections: PoolClearedOnNetworkError, :584 a connection idle for maxIdleTimeMS is perished at the next check-out`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/cmap/errors.ts:37-84 PoolClearedError and PoolClearedOnNetworkError, with the label PoolRequestedRetry`,
+			ref: `${AT$6}/cmap/errors.ts:37-84 PoolClearedError and PoolClearedOnNetworkError, with the label PoolRequestedRetry`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/operations/execute_operation.ts:252-279 two attempts for a retryable read or write, :375-380 the retry selects a server again, :442-445 canRetry`,
+			ref: `${AT$6}/operations/execute_operation.ts:252-279 two attempts for a retryable read or write, :375-380 the retry selects a server again, :442-445 canRetry`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/error.ts:1377-1394 the retryable codes, :1431-1436 isRetryableWriteError: RetryableWriteError or PoolRequestedRetry`,
+			ref: `${AT$6}/error.ts:1377-1394 the retryable codes, :1431-1436 isRetryableWriteError: RetryableWriteError or PoolRequestedRetry`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$5}/timeout.ts:362-372 the legacy timeout context: the selection timeout, and no check-out timeout at waitQueueTimeoutMS 0`,
+			ref: `${AT$6}/timeout.ts:362-372 the legacy timeout context: the selection timeout, and no check-out timeout at waitQueueTimeoutMS 0`,
 			rung: "implemented"
 		},
 		{
@@ -7541,7 +7757,7 @@ const HIKARICP_PGJDBC = machineSchema.parse({
 });
 //#endregion
 //#region src/pg/node-postgres.ts
-const AT$4 = "pg 8.23.1 lib";
+const AT$5 = "pg 8.23.1 lib";
 const POOL = "pg-pool 3.14.0";
 /**
 * This document is node-postgres 8.23.1 (the npm package pg) with pg-pool 3.14.0, for one client
@@ -7583,75 +7799,75 @@ const NODE_POSTGRES = machineSchema.parse({
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/defaults.js:42 max 10 and :46 idleTimeoutMillis 30000: no line of pg or pg-pool reads them, thus a pool does not use them`,
+			ref: `${AT$5}/defaults.js:42 max 10 and :46 idleTimeoutMillis 30000: no line of pg or pg-pool reads them, thus a pool does not use them`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/defaults.js:65, :69, :73 and :76 statement_timeout, lock_timeout, idle_in_transaction_session_timeout and query_timeout are false`,
+			ref: `${AT$5}/defaults.js:65, :69, :73 and :76 statement_timeout, lock_timeout, idle_in_transaction_session_timeout and query_timeout are false`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/defaults.js:63-76 the comments of pg: each of the four is in milliseconds, false is no limit, and query_timeout is on the client side`,
+			ref: `${AT$5}/defaults.js:63-76 the comments of pg: each of the four is in milliseconds, false is no limit, and query_timeout is on the client side`,
 			rung: "documented"
 		},
 		{
-			ref: `${AT$4}/connection-parameters.js:9-23 val: the config, else the default of pg, :121-124 the three timeouts of the server and query_timeout, with no environment variable`,
+			ref: `${AT$5}/connection-parameters.js:9-23 val: the config, else the default of pg, :121-124 the three timeouts of the server and query_timeout, with no environment variable`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:89-98 the Connection gets keepAlive false and keepAliveInitialDelayMillis 0 when the config does not give them, :116 connectionTimeoutMillis 0`,
+			ref: `${AT$5}/client.js:89-98 the Connection gets keepAlive false and keepAliveInitialDelayMillis 0 when the config does not give them, :116 connectionTimeoutMillis 0`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/stream.js:20-24 and :78-83 outside Cloudflare Workers, the socket is a new net.Socket with no option`,
+			ref: `${AT$5}/stream.js:20-24 and :78-83 outside Cloudflare Workers, the socket is a new net.Socket with no option`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/connection.js:40-52 setNoDelay(true) before the connect, and setKeepAlive(true, keepAliveInitialDelayMillis) at the connect only when keepAlive is true, :54-65 the error and the close of the socket`,
+			ref: `${AT$5}/connection.js:40-52 setNoDelay(true) before the connect, and setKeepAlive(true, keepAliveInitialDelayMillis) at the connect only when keepAlive is true, :54-65 the error and the close of the socket`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:167-176 and :702-737 are the only timers of the client, and connection.js has none: the client sends nothing by itself on an idle connection`,
+			ref: `${AT$5}/client.js:167-176 and :702-737 are the only timers of the client, and connection.js has none: the client sends nothing by itself on an idle connection`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:153-230 _connect: no second connect, the connect timer of the client ('timeout expired'), and 'Connection terminated unexpectedly' for an end that the client did not ask for`,
+			ref: `${AT$5}/client.js:153-230 _connect: no second connect, the connect timer of the client ('timeout expired'), and 'Connection terminated unexpectedly' for an end that the client did not ask for`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:373-387 the first ReadyForQuery ends the connect and clears the timer, :398-423 an error before it goes to the connect callback, and an error after it makes the client unqueryable`,
+			ref: `${AT$5}/client.js:373-387 the first ReadyForQuery ends the connect and clears the timer, :398-423 an error before it goes to the connect callback, and an error after it makes the client unqueryable`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:426-442 an ErrorResponse fails the active query only, and with no active query it is an error of the client`,
+			ref: `${AT$5}/client.js:426-442 an ErrorResponse fails the active query only, and with no active query it is an error of the client`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/connection.js:137-145 and pg-protocol 1.16.1 dist/parser.js:142-144, :296-323 an ErrorResponse is a DatabaseError, with the severity and the code that the server gives`,
+			ref: `${AT$5}/connection.js:137-145 and pg-protocol 1.16.1 dist/parser.js:142-144, :296-323 an ErrorResponse is a DatabaseError, with the severity and the code that the server gives`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:133-151 _errorAllQueries: each query of the client fails with the same error, on the next tick`,
+			ref: `${AT$5}/client.js:133-151 _errorAllQueries: each query of the client fails with the same error, on the next tick`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/query.js:122-150 a query gives its error or its result to its callback, at the error or at the ReadyForQuery`,
+			ref: `${AT$5}/query.js:122-150 a query gives its error or its result to its callback, at the error or at the ReadyForQuery`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:702-737 query_timeout: a Node timer for each query, 'Query read timeout'. The client sends no cancel, and it keeps the active query`,
+			ref: `${AT$5}/client.js:702-737 query_timeout: a Node timer for each query, 'Query read timeout'. The client sends no cancel, and it keeps the active query`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:616-641 the next query goes only after a ReadyForQuery, :765-777 a query on an unqueryable or ended client fails at once`,
+			ref: `${AT$5}/client.js:616-641 the next query goes only after a ReadyForQuery, :765-777 a query on an unqueryable or ended client fails at once`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:799-836 end: a dead socket or an active query destroys the socket, else connection.js:217-227 sends Terminate and ends the socket`,
+			ref: `${AT$5}/client.js:799-836 end: a dead socket or an active query destroys the socket, else connection.js:217-227 sends Terminate and ends the socket`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$4}/client.js:543-572 getStartupConf: statement_timeout, lock_timeout and idle_in_transaction_session_timeout go to the server only when they are set`,
+			ref: `${AT$5}/client.js:543-572 getStartupConf: statement_timeout, lock_timeout and idle_in_transaction_session_timeout go to the server only when they are set`,
 			rung: "implemented"
 		},
 		{
@@ -10047,7 +10263,7 @@ const PGPOOL_SESSION = machineSchema.parse({
 });
 //#endregion
 //#region src/pg/postgres-session.ts
-const AT$3 = "postgresql REL_17_11 src";
+const AT$4 = "postgresql REL_17_11 src";
 const DOC = "postgresql REL_17_11 doc/src/sgml";
 /**
 * This document is the hold of a PostgreSQL 17.11 backend on one client connection, over its TCP
@@ -10087,163 +10303,163 @@ const POSTGRES_SESSION = machineSchema.parse({
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/backend_startup.c:157-161 BackendInitialize calls pq_init in the backend, before the startup packet`,
+			ref: `${AT$4}/backend/tcop/backend_startup.c:157-161 BackendInitialize calls pq_init in the backend, before the startup packet`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:793-817 AcceptConnection in the postmaster, :180 the Port starts at zeros, :195-220 TCP_NODELAY and SO_KEEPALIVE on each socket that is not AF_UNIX, a failure is FATAL, :264-274 then the four TCP GUCs, a failure is a LOG only`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:793-817 AcceptConnection in the postmaster, :180 the Port starts at zeros, :195-220 TCP_NODELAY and SO_KEEPALIVE on each socket that is not AF_UNIX, a failure is FATAL, :264-274 then the four TCP GUCs, a failure is a LOG only`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:1663-1711 pq_setkeepalivesidle: no call at a value equal to the Port's, and 0 sets the value that getsockopt read first; :1748-1795, :1827-1870 and :1902-1945 the same for TCP_KEEPINTVL, TCP_KEEPCNT and TCP_USER_TIMEOUT`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:1663-1711 pq_setkeepalivesidle: no call at a value equal to the Port's, and 0 sets the value that getsockopt read first; :1748-1795, :1827-1870 and :1902-1945 the same for TCP_KEEPINTVL, TCP_KEEPCNT and TCP_USER_TIMEOUT`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:87-90 TCP_KEEPIDLE on Linux, :1947-2047 an assign hook sets the socket of the session at once, and a show hook reads the kernel`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:87-90 TCP_KEEPIDLE on Linux, :1947-2047 an assign hook sets the socket of the session at once, and a show hook reads the kernel`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/misc/guc_tables.c:3452-3461 tcp_keepalives_idle 0 s, :3463-3472 tcp_keepalives_interval 0 s, :3485-3495 tcp_keepalives_count 0, :3587-3596 tcp_user_timeout 0 ms: each PGC_USERSET, 0 to INT_MAX, 0 is the system default`,
+			ref: `${AT$4}/backend/utils/misc/guc_tables.c:3452-3461 tcp_keepalives_idle 0 s, :3463-3472 tcp_keepalives_interval 0 s, :3485-3495 tcp_keepalives_count 0, :3587-3596 tcp_user_timeout 0 ms: each PGC_USERSET, 0 to INT_MAX, 0 is the system default`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/misc/guc_tables.c:2611-2620 statement_timeout, :2622-2631 lock_timeout, :2633-2642 idle_in_transaction_session_timeout, :2644-2653 transaction_timeout, :2655-2664 idle_session_timeout: each 0 ms, 0 to INT_MAX, PGC_USERSET, 0 turns it off`,
+			ref: `${AT$4}/backend/utils/misc/guc_tables.c:2611-2620 statement_timeout, :2622-2631 lock_timeout, :2633-2642 idle_in_transaction_session_timeout, :2644-2653 transaction_timeout, :2655-2664 idle_session_timeout: each 0 ms, 0 to INT_MAX, PGC_USERSET, 0 turns it off`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/misc/guc_tables.c:2774-2783 authentication_timeout 60 s, 1 to 600, PGC_SIGHUP; :3632-3641 client_connection_check_interval 0 ms, 0 to INT_MAX, PGC_USERSET`,
+			ref: `${AT$4}/backend/utils/misc/guc_tables.c:2774-2783 authentication_timeout 60 s, 1 to 600, PGC_SIGHUP; :3632-3641 client_connection_check_interval 0 ms, 0 to INT_MAX, PGC_USERSET`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/storage/lmgr/proc.c:58-62, backend/tcop/postgres.c:106 and backend/postmaster/postmaster.c:228 the C defaults agree: 0 ms for each timeout, 0 ms for the client check, 60 s for authentication`,
+			ref: `${AT$4}/backend/storage/lmgr/proc.c:58-62, backend/tcop/postgres.c:106 and backend/postmaster/postmaster.c:228 the C defaults agree: 0 ms for each timeout, 0 ms for the client check, 60 s for authentication`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/include/utils/timeout.h:3-4 and :23-43 one SIGALRM for each timeout id, STARTUP_PACKET_TIMEOUT to CLIENT_CONNECTION_CHECK_TIMEOUT`,
+			ref: `${AT$4}/include/utils/timeout.h:3-4 and :23-43 one SIGALRM for each timeout id, STARTUP_PACKET_TIMEOUT to CLIENT_CONNECTION_CHECK_TIMEOUT`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/misc/timeout.c:559-575 enable_timeout_after: the deadline is the current time + the delay in ms, :209-350 schedule_alarm: setitimer(ITIMER_REAL) for the nearest deadline, :363-453 handle_sig_alarm sets the latch and calls each handler that is due`,
+			ref: `${AT$4}/backend/utils/misc/timeout.c:559-575 enable_timeout_after: the deadline is the current time + the delay in ms, :209-350 schedule_alarm: setitimer(ITIMER_REAL) for the nearest deadline, :363-453 handle_sig_alarm sets the latch and calls each handler that is due`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/init/postinit.c:770-782 the handlers of a backend, :1374-1407 the statement timer sends SIGINT, or SIGTERM in authentication, and the lock timer sends SIGINT, :1409-1447 each other handler sets a flag and the latch`,
+			ref: `${AT$4}/backend/utils/init/postinit.c:770-782 the handlers of a backend, :1374-1407 the statement timer sends SIGINT, or SIGTERM in authentication, and the lock timer sends SIGINT, :1409-1447 each other handler sets a flag and the latch`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:2999-3023 die (SIGTERM) sets ProcDiePending, :3029-3043 StatementCancelHandler (SIGINT) sets QueryCancelPending, :4292-4294 the two handlers`,
+			ref: `${AT$4}/backend/tcop/postgres.c:2999-3023 die (SIGTERM) sets ProcDiePending, :3029-3043 StatementCancelHandler (SIGINT) sets QueryCancelPending, :4292-4294 the two handlers`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:3271-3319 ProcessInterrupts acts on a die request first: FATAL 57014 "canceling authentication due to timeout" in authentication, else FATAL 57P01 "terminating connection due to administrator command"`,
+			ref: `${AT$4}/backend/tcop/postgres.c:3271-3319 ProcessInterrupts acts on a die request first: FATAL 57014 "canceling authentication due to timeout" in authentication, else FATAL 57P01 "terminating connection due to administrator command"`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:3321-3350 then the client check, then a lost connection: FATAL 08006 "connection to client lost", with no message to the client`,
+			ref: `${AT$4}/backend/tcop/postgres.c:3321-3350 then the client check, then a lost connection: FATAL 08006 "connection to client lost", with no message to the client`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:3372-3430 a cancel: ERROR 55P03 "canceling statement due to lock timeout", ERROR 57014 "canceling statement due to statement timeout"`,
+			ref: `${AT$4}/backend/tcop/postgres.c:3372-3430 a cancel: ERROR 55P03 "canceling statement due to lock timeout", ERROR 57014 "canceling statement due to statement timeout"`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:3435-3477 FATAL 25P03 "terminating connection due to idle-in-transaction timeout", FATAL 25P04 "terminating connection due to transaction timeout", FATAL 57P05 "terminating connection due to idle-session timeout"`,
+			ref: `${AT$4}/backend/tcop/postgres.c:3435-3477 FATAL 25P03 "terminating connection due to idle-in-transaction timeout", FATAL 25P04 "terminating connection due to transaction timeout", FATAL 57P05 "terminating connection due to idle-session timeout"`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/errcodes.txt:106-107 08003 and 08006, :111 08P01, :254-255 25P03 and 25P04, :421 55P03, :428-429 57014 and 57P01, :433 57P05`,
+			ref: `${AT$4}/backend/utils/errcodes.txt:106-107 08003 and 08006, :111 08P01, :254-255 25P03 and 25P04, :421 55P03, :428-429 57014 and 57P01, :433 57P05`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:4618-4706 at ReadyForQuery the backend arms idle_in_transaction_session_timeout in a transaction block, open or aborted, and idle_session_timeout outside one; :4714-4750 after a message it disarms them, then checks for interrupts`,
+			ref: `${AT$4}/backend/tcop/postgres.c:4618-4706 at ReadyForQuery the backend arms idle_in_transaction_session_timeout in a transaction block, open or aborted, and idle_session_timeout outside one; :4714-4750 after a message it disarms them, then checks for interrupts`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:2770-2796 start_xact_command arms statement_timeout and the client check, each only when not active, :2798-2802 finish_xact_command disarms statement_timeout, :5251-5278 no statement timer when statement_timeout >= transaction_timeout > 0`,
+			ref: `${AT$4}/backend/tcop/postgres.c:2770-2796 start_xact_command arms statement_timeout and the client check, each only when not active, :2798-2802 finish_xact_command disarms statement_timeout, :5251-5278 no statement timer when statement_timeout >= transaction_timeout > 0`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/adt/misc.c:391-412 pg_sleep: CHECK_FOR_INTERRUPTS before each WaitLatch on the latch of the backend, thus the SIGALRM of a timeout ends its wait`,
+			ref: `${AT$4}/backend/utils/adt/misc.c:391-412 pg_sleep: CHECK_FOR_INTERRUPTS before each WaitLatch on the latch of the backend, thus the SIGALRM of a timeout ends its wait`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:4446-4502 an ERROR: disable_all_timeouts, the error to the client, AbortCurrentTransaction; :4562-4563 then ReadyForQuery`,
+			ref: `${AT$4}/backend/tcop/postgres.c:4446-4502 an ERROR: disable_all_timeouts, the error to the client, AbortCurrentTransaction; :4562-4563 then ReadyForQuery`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/access/transam/xact.c:2174-2176 StartTransaction arms transaction_timeout, :2315-2317, :2592-2594 and :2768-2770 commit, prepare and abort disarm it, :3472-3477 an error in a transaction block aborts the transaction and keeps the block`,
+			ref: `${AT$4}/backend/access/transam/xact.c:2174-2176 StartTransaction arms transaction_timeout, :2315-2317, :2592-2594 and :2768-2770 commit, prepare and abort disarm it, :3472-3477 an error in a transaction block aborts the transaction and keeps the block`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/storage/lmgr/proc.c:1292-1307 ProcSleep arms lock_timeout with the deadlock timer, :1652-1666 and disarms it after the wait`,
+			ref: `${AT$4}/backend/storage/lmgr/proc.c:1292-1307 ProcSleep arms lock_timeout with the deadlock timer, :1652-1666 and disarms it after the wait`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:3652-3661 a client_connection_check_interval above 0 needs a wait set that reports a close`,
+			ref: `${AT$4}/backend/tcop/postgres.c:3652-3661 a client_connection_check_interval above 0 needs a wait set that reports a close`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:2049-2084 pq_check_connection: a wait of 0 ms for WL_SOCKET_CLOSED`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:2049-2084 pq_check_connection: a wait of 0 ms for WL_SOCKET_CLOSED`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/storage/ipc/latch.c:72-85 epoll where sys/epoll.h exists, :1131-1156 WL_SOCKET_CLOSED adds EPOLLRDHUP, and EPOLLERR and EPOLLHUP are always on, :1661-1680 EPOLLERR or EPOLLHUP make the socket readable, writable and closed, :2253-2263 epoll can report a close`,
+			ref: `${AT$4}/backend/storage/ipc/latch.c:72-85 epoll where sys/epoll.h exists, :1131-1156 WL_SOCKET_CLOSED adds EPOLLRDHUP, and EPOLLERR and EPOLLHUP are always on, :1661-1680 EPOLLERR or EPOLLHUP make the socket readable, writable and closed, :2253-2263 epoll can report a close`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/be-secure.c:174-261 secure_read and :300-370 secure_write: a wait for the socket or the latch with no timeout; at the latch, ProcessClientReadInterrupt or ProcessClientWriteInterrupt; :234-237 and :343-346 FATAL 57P01 at the death of the postmaster`,
+			ref: `${AT$4}/backend/libpq/be-secure.c:174-261 secure_read and :300-370 secure_write: a wait for the socket or the latch with no timeout; at the latch, ProcessClientReadInterrupt or ProcessClientWriteInterrupt; :234-237 and :343-346 FATAL 57P01 at the death of the postmaster`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:513-548 ProcessClientReadInterrupt: each interrupt in the wait for a command, a die request in another read; :559-600 ProcessClientWriteInterrupt: a die request only, with no message to the client`,
+			ref: `${AT$4}/backend/tcop/postgres.c:513-548 ProcessClientReadInterrupt: each interrupt in the wait for a command, a die request in another read; :559-600 ProcessClientWriteInterrupt: a die request only, with no message to the client`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:287-297 the socket has O_NONBLOCK, and the latch gives the waits; :896-956 pq_recvbuf: 0 bytes or an error is EOF, and an error logs COMMERROR "could not receive data from client: %m"`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:287-297 the socket has O_NONBLOCK, and the latch gives the waits; :896-956 pq_recvbuf: 0 bytes or an error is EOF, and an error logs COMMERROR "could not receive data from client: %m"`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:364-396 SocketBackend: EOF in a transaction logs COMMERROR 08006 "unexpected EOF on client connection with an open transaction", else DEBUG1 08003; :4988-5016 EOF or Terminate: proc_exit(0)`,
+			ref: `${AT$4}/backend/tcop/postgres.c:364-396 SocketBackend: EOF in a transaction logs COMMERROR 08006 "unexpected EOF on client connection with an open transaction", else DEBUG1 08003; :4988-5016 EOF or Terminate: proc_exit(0)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/access/transam/xact.c:383-396 IsTransactionState is TRANS_INPROGRESS only; backend/utils/init/postinit.c:1360-1371 ShutdownPostgres aborts the transaction at exit`,
+			ref: `${AT$4}/backend/access/transam/xact.c:383-396 IsTransactionState is TRANS_INPROGRESS only; backend/utils/init/postinit.c:1360-1371 ShutdownPostgres aborts the transaction at exit`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:1275-1336 a full buffer flushes, and the flush waits for the socket, :1358-1423 internal_flush_buffer: an error logs COMMERROR "could not send data to client: %m" once for each errno, drops the buffer and sets ClientConnectionLost`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:1275-1336 a full buffer flushes, and the flush waits for the socket, :1358-1423 internal_flush_buffer: an error logs COMMERROR "could not send data to client: %m" once for each errno, drops the buffer and sets ClientConnectionLost`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/postgres.c:4310-4316 the backend ignores SIGPIPE`,
+			ref: `${AT$4}/backend/tcop/postgres.c:4310-4316 the backend ignores SIGPIPE`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/include/utils/elog.h:31-38 COMMERROR is LOG_SERVER_ONLY; backend/utils/error/elog.c:205-228 it goes to the log at log_min_messages WARNING (guc_tables.c:534), and DEBUG1 does not`,
+			ref: `${AT$4}/include/utils/elog.h:31-38 COMMERROR is LOG_SERVER_ONLY; backend/utils/error/elog.c:205-228 it goes to the log at log_min_messages WARNING (guc_tables.c:534), and DEBUG1 does not`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/error/elog.c:245-262 and :1726-1732 an error goes to the client while the output is DestRemote, :3643-3651 the backend flushes it, :559-590 FATAL ends the process with proc_exit(1)`,
+			ref: `${AT$4}/backend/utils/error/elog.c:245-262 and :1726-1732 an error goes to the client while the output is DestRemote, :3643-3651 the backend flushes it, :559-590 FATAL ends the process with proc_exit(1)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/pqcomm.c:347-392 socket_close keeps the socket open until the process exits`,
+			ref: `${AT$4}/backend/libpq/pqcomm.c:347-392 socket_close keeps the socket open until the process exits`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/backend_startup.c:237-253 the startup timer: authentication_timeout, after the DNS lookup, :311-314 the end of the startup packet disarms it, :895-922 its handler and SIGTERM call _exit(1), with no log and no message`,
+			ref: `${AT$4}/backend/tcop/backend_startup.c:237-253 the startup timer: authentication_timeout, after the DNS lookup, :311-314 the end of the startup packet disarms it, :895-922 its handler and SIGTERM call _exit(1), with no log and no message`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/tcop/backend_startup.c:460-519 ProcessStartupPacket: no byte is a silent end, a part of a packet logs COMMERROR 08P01 "incomplete startup packet"; :328-333 proc_exit(0)`,
+			ref: `${AT$4}/backend/tcop/backend_startup.c:460-519 ProcessStartupPacket: no byte is a silent end, a part of a packet logs COMMERROR 08P01 "incomplete startup packet"; :328-333 proc_exit(0)`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/utils/init/postinit.c:235-251 PerformAuthentication arms the statement timer at authentication_timeout * 1000 ms, :305 ClientAuthInProgress ends after it, :1210-1215 the GUCs of the startup packet apply after it`,
+			ref: `${AT$4}/backend/utils/init/postinit.c:235-251 PerformAuthentication arms the statement timer at authentication_timeout * 1000 ms, :305 ClientAuthInProgress ends after it, :1210-1215 the GUCs of the startup packet apply after it`,
 			rung: "implemented"
 		},
 		{
-			ref: `${AT$3}/backend/libpq/auth.c:260-271 an EOF from the client in authentication: proc_exit(0), with no log; :714-744 recv_password_packet gives an EOF as NULL`,
+			ref: `${AT$4}/backend/libpq/auth.c:260-271 an EOF from the client in authentication: proc_exit(0), with no log; :714-744 recv_password_packet gives an EOF as NULL`,
 			rung: "implemented"
 		},
 		{
@@ -12271,6 +12487,367 @@ const PROCEDURES_WS_SERVER = machineSchema.parse({
 	}
 });
 //#endregion
+//#region src/proxy/caddy.ts
+const AT$3 = "caddy v2.11.7";
+const XNET = "x/net v0.59.0";
+/**
+* This document is Caddy 2.11.7 as an HTTP/2 proxy of gRPC, for one connection of a client. Its
+* configuration is the one of the harness: one server of h1 and h2c, and `reverse_proxy` to one upstream
+* of h2c. Each other option is at its default.
+*
+* With no stream open for 5 min, Caddy sends GOAWAY NO_ERROR, and it closes the connection 1 s later. A
+* PING of the client does not reset that timer. Before the headers of a response, a failure of the
+* upstream gives 502, thus UNAVAILABLE. After them, Caddy resets the stream with INTERNAL_ERROR. Caddy
+* sends no PING. At SIGTERM it sends GOAWAY at once, and it waits for each stream at its defaults.
+*/
+const CADDY_HTTP2 = machineSchema.parse({
+	format: "mark1russell7.machine/1",
+	id: "caddy-http2",
+	title: "Caddy 2.11.7 as an HTTP/2 proxy of gRPC: one connection of a client, its idle close, its replies to a failure of the upstream and its stop",
+	layer: "proxy",
+	version: "2.11.7",
+	conditions: {
+		caddy: "v2.11.7",
+		http2: "golang.org/x/net v0.59.0",
+		go: "1.26.8",
+		configuration: "one server with the protocols h1 and h2c, and reverse_proxy to one upstream of h2c, at the defaults"
+	},
+	sources: [
+		{
+			ref: `${AT$3} modules/caddyhttp/app.go:404-418, :925-940 the defaults of a server: idle_timeout 5 min, read_header_timeout 1 min, read_idle_timeout 1 min, write_idle_timeout 1 min`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$3} modules/caddyhttp/app.go:520-533 the protocol h2c: http2.ConfigureServer with a zero http2.Server of ${XNET}`,
+			rung: "implemented"
+		},
+		{
+			ref: `${XNET} xs:166-171 the idle timeout of HTTP/2 is the IdleTimeout of the http.Server`,
+			rung: "implemented"
+		},
+		{
+			ref: `${XNET} xs:812-815, :872-874, :1274-1281, :1578-1581, :1906 the idle timer runs only with no stream open. Its end sends GOAWAY NO_ERROR, and with no stream open the connection closes goAwayTimeout (1 s) later`,
+			rung: "implemented"
+		},
+		{
+			ref: `${XNET} xs:1336 a PING of the client gets an ACK only: it does not reset the idle timer`,
+			rung: "implemented"
+		},
+		{
+			ref: `${XNET} xs:817-820 the server sends no PING: Caddy sets no SendPingTimeout`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$3} modules/caddyhttp/reverseproxy/reverseproxy.go:1086, :1107-1112, :1393-1397, :1667-1697 a failure of the upstream before the headers of a response: no retry at the defaults, and statusError gives 502`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$3} modules/caddyhttp/reverseproxy/reverseproxy.go:1331-1352 and ${XNET} xs:2296-2310 after the headers, a failed copy panics with http.ErrAbortHandler, and the stream gets RST_STREAM INTERNAL_ERROR`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$3} modules/caddyhttp/reverseproxy/httptransport.go:212-226 the defaults of the transport: a dial timeout of 3 s, and an idle upstream connection closes after 2 min`,
+			rung: "implemented"
+		},
+		{
+			ref: `${XNET} xt:550-554, :786-802 an idle connection of the client of HTTP/2 closes with no GOAWAY`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$3} modules/caddyhttp/app.go:136-142, :753-799, :862-876 a stop calls Shutdown on each server: a GOAWAY at once, and the grace period is eternal at the defaults. Caddy closes no connection by itself`,
+			rung: "implemented"
+		},
+		{
+			ref: `${AT$3} modules/caddyhttp/app.go:570-577 and go1.26.8 src/net/tcpsock.go:291-296 each accepted socket gets the TCP keepalive of Go: 15 s, 15 s and 9 probes`,
+			rung: "implemented"
+		}
+	],
+	states: {
+		"[none]": {
+			initial: true,
+			pseudo: true,
+			note: "Before the accept of the connection of the client"
+		},
+		idle: { note: "The connection of the client, with no stream open. The idle timer runs" },
+		active: { note: "A stream of the client is open: its request goes to the upstream" },
+		closing: { note: "After a GOAWAY with no stream open, until the close goAwayTimeout later" },
+		draining: { note: "After the GOAWAY of a stop, while a stream is open" },
+		ended: {
+			final: true,
+			note: "The connection of the client closed"
+		}
+	},
+	events: {
+		"local.accept": {
+			kind: "local",
+			note: "The listener accepts the connection of the client, with the TCP keepalive of Go"
+		},
+		"rx.headers": {
+			kind: "rx",
+			note: "The headers of a new stream of the client: a call"
+		},
+		"upstream.end": {
+			kind: "local",
+			note: "The response of the upstream ends with its status: the last stream closes"
+		},
+		"upstream.reset": {
+			kind: "local",
+			note: "The upstream connection ends with a reset or an end of file while the stream waits"
+		},
+		"timer.idle": {
+			kind: "timer",
+			note: "No stream open for idle_timeout"
+		},
+		"timer.goaway": {
+			kind: "timer",
+			note: "goAwayTimeout after the GOAWAY, with no stream open"
+		},
+		"app.stop": {
+			kind: "app",
+			note: "SIGTERM or SIGINT to the process of Caddy"
+		},
+		"peer.fin": {
+			kind: "peer",
+			note: "The client ends the connection"
+		},
+		"peer.rst": {
+			kind: "peer",
+			note: "A reset of the connection of the client"
+		},
+		"tx.status": {
+			kind: "tx",
+			note: "An HTTP status with no gRPC status, before the headers of a response: 502"
+		},
+		"tx.rst-stream": {
+			kind: "tx",
+			note: "RST_STREAM INTERNAL_ERROR of a stream whose response headers went out"
+		},
+		"tx.goaway": {
+			kind: "tx",
+			note: "A GOAWAY NO_ERROR to the client"
+		},
+		"tx.fin": {
+			kind: "tx",
+			note: "The close of the connection of the client: a FIN"
+		}
+	},
+	knobs: {
+		idle_timeout: {
+			key: "servers.idle_timeout",
+			scope: "server",
+			unit: "s",
+			default: 300,
+			note: "app.go:404-406, :925: 5 min. A negative value turns it off"
+		},
+		goaway_timeout: {
+			key: "goAwayTimeout of x/net http2",
+			scope: "server",
+			unit: "s",
+			default: 1,
+			note: "xs: a constant of 1 s"
+		},
+		upstream_idle_timeout: {
+			key: "reverse_proxy transport http keepalive",
+			scope: "server",
+			unit: "s",
+			default: 120,
+			note: "httptransport.go:215-217: 2 min"
+		},
+		keepidle: {
+			key: "the TCP keepalive idle of an accepted connection",
+			scope: "server",
+			unit: "s",
+			default: 15,
+			note: "go1.26.8 dial.go: the default of Go"
+		},
+		keepintvl: {
+			key: "the TCP keepalive interval of an accepted connection",
+			scope: "server",
+			unit: "s",
+			default: 15,
+			note: "go1.26.8 dial.go"
+		},
+		keepcnt: {
+			key: "the TCP keepalive count of an accepted connection",
+			scope: "server",
+			unit: "count",
+			default: 9,
+			note: "go1.26.8 dial.go"
+		},
+		slack: {
+			key: "the lateness of the scheduler of Go for one step",
+			scope: "process",
+			unit: "s",
+			default: .01,
+			note: "An assumption of this document, not a value of Caddy"
+		},
+		hz: {
+			key: "CONFIG_HZ",
+			scope: "global",
+			unit: "Hz",
+			default: null,
+			note: "The build option of the kernel"
+		}
+	},
+	timers: {
+		idle: {
+			duration: {
+				knob: "idle_timeout",
+				unit: "s"
+			},
+			lateness: {
+				knob: "slack",
+				unit: "s"
+			},
+			arms: ["enter:idle"],
+			cancels: ["rx.headers"],
+			fires: "timer.idle",
+			note: "xs:812-815, :1906: from the close of the last stream. A PING does not arm it again"
+		},
+		goaway: {
+			duration: {
+				knob: "goaway_timeout",
+				unit: "s"
+			},
+			lateness: {
+				knob: "slack",
+				unit: "s"
+			},
+			arms: ["tx.goaway"],
+			fires: "timer.goaway",
+			note: "xs:1274-1281: the close after the GOAWAY, when no stream is open"
+		}
+	},
+	transitions: [
+		{
+			id: "cd.accept",
+			from: "[none]",
+			to: "idle",
+			on: "local.accept",
+			timer: "idle",
+			source: "app.go:570-577"
+		},
+		{
+			id: "cd.stream",
+			from: "idle",
+			to: "active",
+			on: "rx.headers",
+			source: "xs:1578-1581"
+		},
+		{
+			id: "cd.replied",
+			from: "active",
+			to: "idle",
+			on: "upstream.end",
+			timer: "idle",
+			note: "The status of the upstream passes to the client unchanged",
+			source: "xs:1906"
+		},
+		{
+			id: "cd.upstream-reset",
+			from: "active",
+			to: "idle",
+			on: "upstream.reset",
+			guard: "no headers of the response went to the client",
+			errno: "UNAVAILABLE",
+			emits: ["tx.status"],
+			note: "502 with no gRPC status, thus UNAVAILABLE Received HTTP status code 502. No retry",
+			source: "reverseproxy.go:1393-1397, :1667-1697"
+		},
+		{
+			id: "cd.upstream-reset-streaming",
+			from: "active",
+			to: "idle",
+			on: "upstream.reset",
+			guard: "the headers of the response went to the client",
+			errno: "INTERNAL",
+			emits: ["tx.rst-stream"],
+			source: "reverseproxy.go:1331-1352"
+		},
+		{
+			id: "cd.idle",
+			from: "idle",
+			to: "closing",
+			on: "timer.idle",
+			timer: "idle",
+			emits: ["tx.goaway"],
+			note: "GOAWAY NO_ERROR, with the highest stream of the client",
+			source: "xs:872-874"
+		},
+		{
+			id: "cd.closed",
+			from: "closing",
+			to: "ended",
+			on: "timer.goaway",
+			timer: "goaway",
+			emits: ["tx.fin"],
+			source: "xs:1274-1281"
+		},
+		{
+			id: "cd.stop-idle",
+			from: "idle",
+			to: "closing",
+			on: "app.stop",
+			emits: ["tx.goaway"],
+			source: "app.go:782-799, xs:1315-1340"
+		},
+		{
+			id: "cd.stop-active",
+			from: "active",
+			to: "draining",
+			on: "app.stop",
+			emits: ["tx.goaway"],
+			note: "The open stream goes on: the grace period is eternal at the defaults",
+			source: "app.go:136-142, :862-876"
+		},
+		{
+			id: "cd.drained",
+			from: "draining",
+			to: "closing",
+			on: "upstream.end",
+			timer: "goaway",
+			source: "xs:1274-1281"
+		},
+		{
+			id: "cd.client-end",
+			from: [
+				"idle",
+				"active",
+				"closing",
+				"draining"
+			],
+			to: "ended",
+			on: ["peer.fin", "peer.rst"],
+			source: "xs"
+		}
+	],
+	over: {
+		machine: "systems.machine.linux-tcp",
+		states: {
+			idle: "ESTABLISHED",
+			active: "ESTABLISHED",
+			closing: "ESTABLISHED",
+			draining: "ESTABLISHED"
+		},
+		sets: {
+			keepidle: {
+				knob: "keepidle",
+				unit: "s"
+			},
+			keepintvl: {
+				knob: "keepintvl",
+				unit: "s"
+			},
+			keepcnt: {
+				knob: "keepcnt",
+				unit: "count"
+			}
+		},
+		ends: "peer.rst",
+		note: "The socket toward the client: a Linux TCP socket with the keepalive of Go. The socket toward the upstream has 15 s, 30 s and 9 probes"
+	}
+});
+//#endregion
 //#region src/proxy/envoy.ts
 const AT$2 = "envoy v1.39.4";
 /**
@@ -15131,6 +15708,7 @@ const MACHINES = byId([
 	NODE_HTTP_SERVER,
 	NODE_HTTP_AGENT,
 	UNDICI_CLIENT,
+	UNDICI_RETRY,
 	GO_TRANSPORT,
 	PROCEDURES_WS_CLIENT,
 	PROCEDURES_WS_SERVER,
@@ -15154,9 +15732,10 @@ const MACHINES = byId([
 	ETCD_SERVER,
 	TOXIPROXY_LINK,
 	DOCKER_PROXY_LINK,
-	ENVOY_HTTP2
+	ENVOY_HTTP2,
+	CADDY_HTTP2
 ]);
 //#endregion
-export { AMQPLIB, ATEN_DETECTOR, DOCKER_PROXY_LINK, ENVOY_HTTP2, ETCD_SERVER, GO_TRANSPORT, GRPC_GO_SERVER, GRPC_JS, HIKARICP_PGJDBC, IOREDIS_SENTINEL, IOREDIS_STATUS, LINUX_TCP, MACHINES, MANIFESTATIONS, MONGODB_NODE, MONGOD_REPL, MONGOD_SESSION, NF_CONNTRACK_TCP, NODE_HTTP_AGENT, NODE_HTTP_SERVER, NODE_POSTGRES, NODE_TIMER_EARLY, PGBOUNCER_CLIENT, PGBOUNCER_SERVER, PGPOOL_SESSION, POSTGRES_SESSION, PROCEDURES_WS_CLIENT, PROCEDURES_WS_SERVER, RABBITMQ_CONNECTION, RA_MEMBER, REDIS_CLIENT, SENTINEL, SUPAVISOR_CLIENT, SUPAVISOR_SERVER, TOXIPROXY_LINK, UNDICI_CLIENT, UNDICI_TICK_MS, goLateSeconds, goTimerLateness, nodeEarlySeconds, nodeLateSeconds, nodeTimerLateness, undiciFastEarly, undiciFastLateness };
+export { AMQPLIB, ATEN_DETECTOR, CADDY_HTTP2, DOCKER_PROXY_LINK, ENVOY_HTTP2, ETCD_SERVER, GO_TRANSPORT, GRPC_GO_SERVER, GRPC_JS, HIKARICP_PGJDBC, IOREDIS_SENTINEL, IOREDIS_STATUS, LINUX_TCP, MACHINES, MANIFESTATIONS, MONGODB_NODE, MONGOD_REPL, MONGOD_SESSION, NF_CONNTRACK_TCP, NODE_HTTP_AGENT, NODE_HTTP_SERVER, NODE_POSTGRES, NODE_TIMER_EARLY, PGBOUNCER_CLIENT, PGBOUNCER_SERVER, PGPOOL_SESSION, POSTGRES_SESSION, PROCEDURES_WS_CLIENT, PROCEDURES_WS_SERVER, RABBITMQ_CONNECTION, RA_MEMBER, REDIS_CLIENT, SENTINEL, SUPAVISOR_CLIENT, SUPAVISOR_SERVER, TOXIPROXY_LINK, UNDICI_CLIENT, UNDICI_RETRY, UNDICI_TICK_MS, goLateSeconds, goTimerLateness, nodeEarlySeconds, nodeLateSeconds, nodeTimerLateness, undiciFastEarly, undiciFastLateness };
 
 //# sourceMappingURL=index.js.map