@milaboratories/pl-client 3.9.1 → 3.9.2

package/dist/core/client.cjs

@@ -199,7 +199,7 @@ var PlClient = class PlClient {
 			const release = ops?.lockId ? await require_advisory_locks.advisoryLock(ops.lockId) : () => {};
 			try {
 				const tx = new require_transaction.PlTransaction(this.ll.createTx(writable, ops), name, writable, clientRoot, this.finalPredicate, this.resourceDataCache);
-				if (this.ll.supportsSetDefaultColor && !require_types.isNullSignedResourceId(clientRoot) && writable) {
+				if (this.ll.supportsResourceSignatures && !require_types.isNullSignedResourceId(clientRoot) && writable) {
 					const parsed = require_types.parseSignedResourceId(clientRoot);
 					if (parsed.signature) tx.setDefaultColor(parsed.signature);
 				}

package/dist/core/client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.cjs","names":["initialTxStat","plAddressToConfig","LLPlClient","DefaultFinalResourceDataPredicate","LRUCache","addStat","isNullSignedResourceId","ensureSignedResourceIdNotNull","UserResources","MaintenanceAPI_Ping_Response_Compression","ClientRoot","advisoryLock","PlTransaction","parseSignedResourceId","TxCommitConflict","tp"],"sources":["../../src/core/client.ts"],"sourcesContent":["import type { AuthOps, PlClientConfig, PlConnectionStatusListener, wireProtocol } from \"./config\";\nimport type { PlCallOps } from \"./ll_client\";\nimport { LLPlClient } from \"./ll_client\";\nimport { PlTransaction, TxCommitConflict } from \"./transaction\";\nimport type { OptionalSignedResourceId, SignedResourceId } from \"./types\";\nimport {\n  ensureSignedResourceIdNotNull,\n  isNullSignedResourceId,\n  NullSignedResourceId,\n  parseSignedResourceId,\n} from \"./types\";\nimport type { ColorProof } from \"./types\";\nimport { ClientRoot } from \"../helpers/pl\";\nimport type { MiLogger, RetryOptions } from \"@milaboratories/ts-helpers\";\nimport { assertNever, createRetryState, nextRetryStateOrError } from \"@milaboratories/ts-helpers\";\nimport type { PlDriver, PlDriverDefinition } from \"./driver\";\nimport type {\n  MaintenanceAPI_Ping_Response,\n  MaintenanceAPI_License_Response,\n} from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport { MaintenanceAPI_Ping_Response_Compression } from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport * as tp from \"node:timers/promises\";\nimport type { Dispatcher } from \"undici\";\nimport { LRUCache } from \"lru-cache\";\nimport type { ResourceDataCacheRecord } from \"./cache\";\nimport type { FinalResourceDataPredicate } from \"./final\";\nimport { DefaultFinalResourceDataPredicate } from \"./final\";\nimport type { AllTxStat, TxStat } from \"./stat\";\nimport { addStat, initialTxStat } from \"./stat\";\nimport type { WireConnection } from \"./wire\";\nimport { advisoryLock } from \"./advisory_locks\";\nimport { plAddressToConfig } from \"./config\";\nimport { UserResources } from \"./user_resources\";\nimport type { BackendCapability } from \"./capabilities\";\n\nexport type TxOps = PlCallOps & {\n  sync?: boolean;\n  retryOptions?: RetryOptions;\n  name?: string;\n  lockId?: string;\n};\n\nconst defaultTxOps = {\n  sync: false,\n};\n\nfunction alternativeRootFieldName(alternativeRoot: string): string {\n  return `alternative_root_${alternativeRoot}`;\n}\n\n/** Client to access core PL API. */\nexport class PlClient {\n  private readonly drivers = new Map<string, PlDriver>();\n\n  /** Artificial delay introduced after write transactions completion, to\n   * somewhat throttle the load on pl. Delay introduced after sync, if requested. */\n  private readonly txDelay: number;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly forceSync: boolean;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly defaultRetryOptions: RetryOptions;\n\n  private readonly buildLLPlClient: (\n    shouldUseGzip: boolean,\n    wireProtocol?: wireProtocol,\n  ) => Promise<LLPlClient>;\n  private _ll?: LLPlClient;\n\n  private get ll(): LLPlClient {\n    if (this._ll === undefined) {\n      throw new Error(\"LLPlClient not initialized\");\n    }\n    return this._ll;\n  }\n\n  /** Stores client root (this abstraction is intended for future implementation of the security model) */\n  private _clientRoot: OptionalSignedResourceId = NullSignedResourceId;\n\n  private _userResources?: UserResources;\n\n  private _txCommittedStat: TxStat = initialTxStat();\n  private _txConflictStat: TxStat = initialTxStat();\n  private _txErrorStat: TxStat = initialTxStat();\n\n  //\n  // Caching\n  //\n\n  /** This function determines whether resource data can be cached */\n  public readonly finalPredicate: FinalResourceDataPredicate;\n\n  /** Resource data cache, to minimize redundant data rereading from remote db */\n  private readonly resourceDataCache: LRUCache<SignedResourceId, ResourceDataCacheRecord>;\n\n  private constructor(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      finalPredicate?: FinalResourceDataPredicate;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const conf =\n      typeof configOrAddress === \"string\" ? plAddressToConfig(configOrAddress) : configOrAddress;\n\n    this.buildLLPlClient = async (\n      shouldUseGzip: boolean,\n      wireProtocol?: wireProtocol,\n    ): Promise<LLPlClient> => {\n      if (wireProtocol) conf.wireProtocol = wireProtocol;\n      return await LLPlClient.build(conf, { auth, ...ops, shouldUseGzip });\n    };\n\n    this.txDelay = conf.txDelay;\n    this.forceSync = conf.forceSync;\n    this.finalPredicate = ops.finalPredicate ?? DefaultFinalResourceDataPredicate;\n    this.resourceDataCache = new LRUCache({\n      maxSize: conf.maxCacheBytes,\n      sizeCalculation: (v) => (v.basicData.data?.length ?? 0) + 64,\n    });\n    switch (conf.retryBackoffAlgorithm) {\n      case \"exponential\":\n        this.defaultRetryOptions = {\n          type: \"exponentialBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffMultiplier: conf.retryExponentialBackoffMultiplier,\n          jitter: conf.retryJitter,\n        };\n        break;\n      case \"linear\":\n        this.defaultRetryOptions = {\n          type: \"linearBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffStep: conf.retryLinearBackoffStep,\n          jitter: conf.retryJitter,\n        };\n        break;\n      default:\n        assertNever(conf.retryBackoffAlgorithm);\n    }\n  }\n\n  public get txCommittedStat(): TxStat {\n    return { ...this._txCommittedStat };\n  }\n\n  public get txConflictStat(): TxStat {\n    return { ...this._txConflictStat };\n  }\n\n  public get txErrorStat(): TxStat {\n    return { ...this._txErrorStat };\n  }\n\n  public get txTotalStat(): TxStat {\n    return addStat(addStat(this._txCommittedStat, this._txConflictStat), this._txErrorStat);\n  }\n\n  public get allTxStat(): AllTxStat {\n    return {\n      committed: this.txCommittedStat,\n      conflict: this.txConflictStat,\n      error: this.txErrorStat,\n    };\n  }\n\n  public async ping(): Promise<MaintenanceAPI_Ping_Response> {\n    return await this.ll.ping();\n  }\n\n  public async license(): Promise<MaintenanceAPI_License_Response> {\n    return await this.ll.license();\n  }\n\n  /**\n   * Returns the user root SignedResourceId via ListUserResources.\n   * @param opts.login - target user login; omit for the authenticated user.\n   * @returns SignedResourceId of the user root, or undefined if the server returned no userRoot entry.\n   * @throws if the backend does not implement ListUserResources (callers should catch with isUnimplementedError).\n   */\n  public async getUserRoot(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  public async getUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  public async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    return this.userResources.getUserRoot(opts);\n  }\n\n  public get conf(): PlClientConfig {\n    return this.ll.conf;\n  }\n\n  public get httpDispatcher(): Dispatcher {\n    return this.ll.httpDispatcher;\n  }\n\n  public get connectionOpts(): WireConnection {\n    return this.ll.wireConnection;\n  }\n\n  private get initialized() {\n    return !isNullSignedResourceId(this._clientRoot);\n  }\n\n  private checkInitialized() {\n    if (!this.initialized) throw new Error(\"Client not initialized\");\n  }\n\n  public get clientRoot(): SignedResourceId {\n    this.checkInitialized();\n    return ensureSignedResourceIdNotNull(this._clientRoot);\n  }\n\n  public get serverInfo(): MaintenanceAPI_Ping_Response {\n    this.checkInitialized();\n    return this._ll!.serverInfo;\n  }\n\n  public hasCapability(capability: BackendCapability): boolean {\n    this.checkInitialized();\n    return this._ll!.hasCapability(capability);\n  }\n\n  /**\n   * True if the backend honors per-file `permissions` on workdir fill rules\n   * (PR #1830 in milaboratory/pl). See `LLPlClient.supportsWritableWorkdirFiles`\n   * for the full definition.\n   */\n  public get supportsWritableWorkdirFiles(): boolean {\n    this.checkInitialized();\n    return this._ll!.supportsWritableWorkdirFiles;\n  }\n\n  /** User resources index for discovering data libraries and other shared resources. */\n  public get userResources(): UserResources {\n    if (!this._ll) throw new Error(\"Client not initialized\");\n\n    if (!this._userResources) {\n      this._userResources = new UserResources(this._ll, this._withTx.bind(this), this._ll.authUser);\n    }\n\n    return this._userResources;\n  }\n\n  /** Discovers or creates the user's root resource via UserResources,\n   *  then handles alternativeRoot if configured. */\n  private async init() {\n    if (this.initialized) throw new Error(\"Already initialized\");\n\n    // Initial client is created without gzip to perform server ping and detect optimal wire protocol.\n    // LLPlClient.build() internally calls detectOptimalWireProtocol() which starts with default 'grpc',\n    // then retries with 'rest' if ping fails, alternating until a working protocol is found.\n    // We save the detected wireProtocol here because if the server supports gzip compression,\n    // we'll need to reinitialize the client with gzip enabled - passing the already-detected\n    // wireProtocol avoids redundant protocol detection on reinit.\n    this._ll = await this.buildLLPlClient(false);\n    const wireProtocol = this._ll.wireProtocol;\n\n    // LLPlClient.build() guarantees a successful ping; read the cached response instead of pinging again.\n    const info = this._ll.serverInfo;\n    if (info.compression === MaintenanceAPI_Ping_Response_Compression.GZIP) {\n      await this._ll.close();\n      this._ll = await this.buildLLPlClient(true, wireProtocol);\n    }\n\n    const userRoot = await this.userResources.getUserRoot({ createIfNotExists: true });\n\n    if (this.conf.alternativeRoot === undefined) {\n      this._clientRoot = userRoot;\n    } else {\n      this._clientRoot = await this._withTx(\"initialization\", true, userRoot, async (tx) => {\n        const aFId = {\n          resourceId: userRoot,\n          fieldName: alternativeRootFieldName(this.conf.alternativeRoot!),\n        };\n\n        const altRoot = tx.createEphemeral(ClientRoot);\n        tx.lock(altRoot);\n        tx.createField(aFId, \"Dynamic\");\n        tx.setField(aFId, altRoot);\n        await tx.commit();\n\n        return await altRoot.globalId;\n      });\n    }\n  }\n\n  /** Returns true if field existed */\n  public async deleteAlternativeRoot(alternativeRootName: string): Promise<boolean> {\n    this.checkInitialized();\n    if (this.ll.conf.alternativeRoot !== undefined)\n      throw new Error(\"Initialized with alternative root.\");\n    return await this.withWriteTx(\"delete-alternative-root\", async (tx) => {\n      const fId = {\n        resourceId: tx.clientRoot,\n        fieldName: alternativeRootFieldName(alternativeRootName),\n      };\n      const exists = tx.fieldExists(fId);\n      tx.removeField(fId);\n      await tx.commit();\n      return await exists;\n    });\n  }\n\n  private async _withTx<T>(\n    name: string,\n    writable: boolean,\n    clientRoot: OptionalSignedResourceId,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops?: TxOps,\n  ): Promise<T> {\n    // for exponential / linear backoff\n    let retryState = createRetryState(ops?.retryOptions ?? this.defaultRetryOptions);\n\n    while (true) {\n      const release = ops?.lockId ? await advisoryLock(ops.lockId) : () => {};\n\n      try {\n        // opening low-level tx\n        const llTx = this.ll.createTx(writable, ops);\n        // wrapping it into high-level tx (this also asynchronously sends initialization message)\n        const tx = new PlTransaction(\n          llTx,\n          name,\n          writable,\n          clientRoot,\n          this.finalPredicate,\n          this.resourceDataCache,\n        );\n\n        // Auto-set default color proof from the client root's signature.\n        // Skip when backend doesn't implement the `set_default_color` TX request.\n        if (this.ll.supportsSetDefaultColor && !isNullSignedResourceId(clientRoot) && writable) {\n          const parsed = parseSignedResourceId(clientRoot);\n          if (parsed.signature) {\n            tx.setDefaultColor(parsed.signature as ColorProof);\n          }\n        }\n\n        let ok = false;\n        let result: T | undefined = undefined;\n        let txId;\n\n        try {\n          // executing transaction body\n          result = await body(tx);\n          // collecting stat\n          this._txCommittedStat = addStat(this._txCommittedStat, tx.stat);\n          ok = true;\n        } catch (e: unknown) {\n          // the only recoverable\n          if (e instanceof TxCommitConflict) {\n            // ignoring\n            // collecting stat\n            this._txConflictStat = addStat(this._txConflictStat, tx.stat);\n          } else {\n            // collecting stat\n            this._txErrorStat = addStat(this._txErrorStat, tx.stat);\n            throw e;\n          }\n        } finally {\n          // close underlying grpc stream, if not yet done\n\n          // even though we can skip two lines below for read-only transactions,\n          // we don't do it to simplify reasoning about what is going on in\n          // concurrent code, especially in significant latency situations\n          await tx.complete();\n          await tx.await();\n\n          txId = await tx.getGlobalTxId();\n        }\n\n        if (ok) {\n          // syncing on transaction if requested\n          if (ops?.sync === undefined ? this.forceSync : ops?.sync) await this.ll.txSync(txId);\n\n          // introducing artificial delay, if requested\n          if (writable && this.txDelay > 0)\n            await tp.setTimeout(this.txDelay, undefined, { signal: ops?.abortSignal });\n\n          return result!;\n        }\n      } finally {\n        release();\n      }\n\n      // we only get here after TxCommitConflict error,\n      // all other errors terminate this loop instantly\n\n      await tp.setTimeout(retryState.nextDelay, undefined, { signal: ops?.abortSignal });\n      retryState = nextRetryStateOrError(retryState);\n    }\n  }\n\n  private async withTx<T>(\n    name: string,\n    writable: boolean,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    this.checkInitialized();\n    return await this._withTx(name, writable, this.clientRoot, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withWriteTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, true, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withReadTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, false, body, { ...ops, ...defaultTxOps });\n  }\n\n  public getDriver<Drv extends PlDriver>(definition: PlDriverDefinition<Drv>): Drv {\n    const attached = this.drivers.get(definition.name);\n    if (attached !== undefined) return attached as Drv;\n    const driver = definition.init(this, this.ll, this.httpDispatcher);\n    this.drivers.set(definition.name, driver);\n    return driver;\n  }\n\n  /** Closes underlying transport */\n  public async close() {\n    await this.ll.close();\n  }\n\n  public static async init(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const pl = new PlClient(configOrAddress, auth, ops);\n    await pl.init();\n    return pl;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0CA,MAAM,eAAe,EACnB,MAAM,OACP;AAED,SAAS,yBAAyB,iBAAiC;AACjE,QAAO,oBAAoB;;;AAI7B,IAAa,WAAb,MAAa,SAAS;CACpB,0BAA2B,IAAI,KAAuB;;;CAItD;;CAGA;;CAGA;CAEA;CAIA;CAEA,IAAY,KAAiB;AAC3B,MAAI,KAAK,QAAQ,KAAA,EACf,OAAM,IAAI,MAAM,6BAA6B;AAE/C,SAAO,KAAK;;;CAId,cAAQ;CAER;CAEA,mBAAmCA,aAAAA,eAAe;CAClD,kBAAkCA,aAAAA,eAAe;CACjD,eAA+BA,aAAAA,eAAe;;CAO9C;;CAGA;CAEA,YACE,iBACA,MACA,MAII,EAAE,EACN;EACA,MAAM,OACJ,OAAO,oBAAoB,WAAWC,eAAAA,kBAAkB,gBAAgB,GAAG;AAE7E,OAAK,kBAAkB,OACrB,eACA,iBACwB;AACxB,OAAI,aAAc,MAAK,eAAe;AACtC,UAAO,MAAMC,kBAAAA,WAAW,MAAM,MAAM;IAAE;IAAM,GAAG;IAAK;IAAe,CAAC;;AAGtE,OAAK,UAAU,KAAK;AACpB,OAAK,YAAY,KAAK;AACtB,OAAK,iBAAiB,IAAI,kBAAkBC,cAAAA;AAC5C,OAAK,oBAAoB,IAAIC,UAAAA,SAAS;GACpC,SAAS,KAAK;GACd,kBAAkB,OAAO,EAAE,UAAU,MAAM,UAAU,KAAK;GAC3D,CAAC;AACF,UAAQ,KAAK,uBAAb;GACE,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,mBAAmB,KAAK;KACxB,QAAQ,KAAK;KACd;AACD;GACF,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,aAAa,KAAK;KAClB,QAAQ,KAAK;KACd;AACD;GACF,QACE,EAAA,GAAA,2BAAA,aAAY,KAAK,sBAAsB;;;CAI7C,IAAW,kBAA0B;AACnC,SAAO,EAAE,GAAG,KAAK,kBAAkB;;CAGrC,IAAW,iBAAyB;AAClC,SAAO,EAAE,GAAG,KAAK,iBAAiB;;CAGpC,IAAW,cAAsB;AAC/B,SAAO,EAAE,GAAG,KAAK,cAAc;;CAGjC,IAAW,cAAsB;AAC/B,SAAOC,aAAAA,QAAQA,aAAAA,QAAQ,KAAK,kBAAkB,KAAK,gBAAgB,EAAE,KAAK,aAAa;;CAGzF,IAAW,YAAuB;AAChC,SAAO;GACL,WAAW,KAAK;GAChB,UAAU,KAAK;GACf,OAAO,KAAK;GACb;;CAGH,MAAa,OAA8C;AACzD,SAAO,MAAM,KAAK,GAAG,MAAM;;CAG7B,MAAa,UAAoD;AAC/D,SAAO,MAAM,KAAK,GAAG,SAAS;;CAiBhC,MAAa,YACX,OAAwD,EAAE,EACnB;AACvC,SAAO,KAAK,cAAc,YAAY,KAAK;;CAG7C,IAAW,OAAuB;AAChC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAA6B;AACtC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAAiC;AAC1C,SAAO,KAAK,GAAG;;CAGjB,IAAY,cAAc;AACxB,SAAO,CAACC,cAAAA,uBAAuB,KAAK,YAAY;;CAGlD,mBAA2B;AACzB,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,yBAAyB;;CAGlE,IAAW,aAA+B;AACxC,OAAK,kBAAkB;AACvB,SAAOC,cAAAA,8BAA8B,KAAK,YAAY;;CAGxD,IAAW,aAA2C;AACpD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;CAGnB,cAAqB,YAAwC;AAC3D,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK,cAAc,WAAW;;;;;;;CAQ5C,IAAW,+BAAwC;AACjD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;;CAInB,IAAW,gBAA+B;AACxC,MAAI,CAAC,KAAK,IAAK,OAAM,IAAI,MAAM,yBAAyB;AAExD,MAAI,CAAC,KAAK,eACR,MAAK,iBAAiB,IAAIC,uBAAAA,cAAc,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE,KAAK,IAAI,SAAS;AAG/F,SAAO,KAAK;;;;CAKd,MAAc,OAAO;AACnB,MAAI,KAAK,YAAa,OAAM,IAAI,MAAM,sBAAsB;AAQ5D,OAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM;EAC5C,MAAM,eAAe,KAAK,IAAI;AAI9B,MADa,KAAK,IAAI,WACb,gBAAgBC,YAAAA,yCAAyC,MAAM;AACtE,SAAM,KAAK,IAAI,OAAO;AACtB,QAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM,aAAa;;EAG3D,MAAM,WAAW,MAAM,KAAK,cAAc,YAAY,EAAE,mBAAmB,MAAM,CAAC;AAElF,MAAI,KAAK,KAAK,oBAAoB,KAAA,EAChC,MAAK,cAAc;MAEnB,MAAK,cAAc,MAAM,KAAK,QAAQ,kBAAkB,MAAM,UAAU,OAAO,OAAO;GACpF,MAAM,OAAO;IACX,YAAY;IACZ,WAAW,yBAAyB,KAAK,KAAK,gBAAiB;IAChE;GAED,MAAM,UAAU,GAAG,gBAAgBC,WAAAA,WAAW;AAC9C,MAAG,KAAK,QAAQ;AAChB,MAAG,YAAY,MAAM,UAAU;AAC/B,MAAG,SAAS,MAAM,QAAQ;AAC1B,SAAM,GAAG,QAAQ;AAEjB,UAAO,MAAM,QAAQ;IACrB;;;CAKN,MAAa,sBAAsB,qBAA+C;AAChF,OAAK,kBAAkB;AACvB,MAAI,KAAK,GAAG,KAAK,oBAAoB,KAAA,EACnC,OAAM,IAAI,MAAM,qCAAqC;AACvD,SAAO,MAAM,KAAK,YAAY,2BAA2B,OAAO,OAAO;GACrE,MAAM,MAAM;IACV,YAAY,GAAG;IACf,WAAW,yBAAyB,oBAAoB;IACzD;GACD,MAAM,SAAS,GAAG,YAAY,IAAI;AAClC,MAAG,YAAY,IAAI;AACnB,SAAM,GAAG,QAAQ;AACjB,UAAO,MAAM;IACb;;CAGJ,MAAc,QACZ,MACA,UACA,YACA,MACA,KACY;EAEZ,IAAI,cAAA,GAAA,2BAAA,kBAA8B,KAAK,gBAAgB,KAAK,oBAAoB;AAEhF,SAAO,MAAM;GACX,MAAM,UAAU,KAAK,SAAS,MAAMC,uBAAAA,aAAa,IAAI,OAAO,SAAS;AAErE,OAAI;IAIF,MAAM,KAAK,IAAIC,oBAAAA,cAFF,KAAK,GAAG,SAAS,UAAU,IAAI,EAI1C,MACA,UACA,YACA,KAAK,gBACL,KAAK,kBACN;AAID,QAAI,KAAK,GAAG,2BAA2B,CAACN,cAAAA,uBAAuB,WAAW,IAAI,UAAU;KACtF,MAAM,SAASO,cAAAA,sBAAsB,WAAW;AAChD,SAAI,OAAO,UACT,IAAG,gBAAgB,OAAO,UAAwB;;IAItD,IAAI,KAAK;IACT,IAAI,SAAwB,KAAA;IAC5B,IAAI;AAEJ,QAAI;AAEF,cAAS,MAAM,KAAK,GAAG;AAEvB,UAAK,mBAAmBR,aAAAA,QAAQ,KAAK,kBAAkB,GAAG,KAAK;AAC/D,UAAK;aACE,GAAY;AAEnB,SAAI,aAAaS,oBAAAA,iBAGf,MAAK,kBAAkBT,aAAAA,QAAQ,KAAK,iBAAiB,GAAG,KAAK;UACxD;AAEL,WAAK,eAAeA,aAAAA,QAAQ,KAAK,cAAc,GAAG,KAAK;AACvD,YAAM;;cAEA;AAMR,WAAM,GAAG,UAAU;AACnB,WAAM,GAAG,OAAO;AAEhB,YAAO,MAAM,GAAG,eAAe;;AAGjC,QAAI,IAAI;AAEN,SAAI,KAAK,SAAS,KAAA,IAAY,KAAK,YAAY,KAAK,KAAM,OAAM,KAAK,GAAG,OAAO,KAAK;AAGpF,SAAI,YAAY,KAAK,UAAU,EAC7B,OAAMU,qBAAG,WAAW,KAAK,SAAS,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAE5E,YAAO;;aAED;AACR,aAAS;;AAMX,SAAMA,qBAAG,WAAW,WAAW,WAAW,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAClF,iBAAA,GAAA,2BAAA,uBAAmC,WAAW;;;CAIlD,MAAc,OACZ,MACA,UACA,MACA,MAAsB,EAAE,EACZ;AACZ,OAAK,kBAAkB;AACvB,SAAO,MAAM,KAAK,QAAQ,MAAM,UAAU,KAAK,YAAY,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG/F,MAAa,YACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,MAAM,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAGzE,MAAa,WACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,OAAO,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG1E,UAAuC,YAA0C;EAC/E,MAAM,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK;AAClD,MAAI,aAAa,KAAA,EAAW,QAAO;EACnC,MAAM,SAAS,WAAW,KAAK,MAAM,KAAK,IAAI,KAAK,eAAe;AAClE,OAAK,QAAQ,IAAI,WAAW,MAAM,OAAO;AACzC,SAAO;;;CAIT,MAAa,QAAQ;AACnB,QAAM,KAAK,GAAG,OAAO;;CAGvB,aAAoB,KAClB,iBACA,MACA,MAGI,EAAE,EACN;EACA,MAAM,KAAK,IAAI,SAAS,iBAAiB,MAAM,IAAI;AACnD,QAAM,GAAG,MAAM;AACf,SAAO"}
+{"version":3,"file":"client.cjs","names":["initialTxStat","plAddressToConfig","LLPlClient","DefaultFinalResourceDataPredicate","LRUCache","addStat","isNullSignedResourceId","ensureSignedResourceIdNotNull","UserResources","MaintenanceAPI_Ping_Response_Compression","ClientRoot","advisoryLock","PlTransaction","parseSignedResourceId","TxCommitConflict","tp"],"sources":["../../src/core/client.ts"],"sourcesContent":["import type { AuthOps, PlClientConfig, PlConnectionStatusListener, wireProtocol } from \"./config\";\nimport type { PlCallOps } from \"./ll_client\";\nimport { LLPlClient } from \"./ll_client\";\nimport { PlTransaction, TxCommitConflict } from \"./transaction\";\nimport type { OptionalSignedResourceId, SignedResourceId } from \"./types\";\nimport {\n  ensureSignedResourceIdNotNull,\n  isNullSignedResourceId,\n  NullSignedResourceId,\n  parseSignedResourceId,\n} from \"./types\";\nimport type { ColorProof } from \"./types\";\nimport { ClientRoot } from \"../helpers/pl\";\nimport type { MiLogger, RetryOptions } from \"@milaboratories/ts-helpers\";\nimport { assertNever, createRetryState, nextRetryStateOrError } from \"@milaboratories/ts-helpers\";\nimport type { PlDriver, PlDriverDefinition } from \"./driver\";\nimport type {\n  MaintenanceAPI_Ping_Response,\n  MaintenanceAPI_License_Response,\n} from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport { MaintenanceAPI_Ping_Response_Compression } from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport * as tp from \"node:timers/promises\";\nimport type { Dispatcher } from \"undici\";\nimport { LRUCache } from \"lru-cache\";\nimport type { ResourceDataCacheRecord } from \"./cache\";\nimport type { FinalResourceDataPredicate } from \"./final\";\nimport { DefaultFinalResourceDataPredicate } from \"./final\";\nimport type { AllTxStat, TxStat } from \"./stat\";\nimport { addStat, initialTxStat } from \"./stat\";\nimport type { WireConnection } from \"./wire\";\nimport { advisoryLock } from \"./advisory_locks\";\nimport { plAddressToConfig } from \"./config\";\nimport { UserResources } from \"./user_resources\";\nimport type { BackendCapability } from \"./capabilities\";\n\nexport type TxOps = PlCallOps & {\n  sync?: boolean;\n  retryOptions?: RetryOptions;\n  name?: string;\n  lockId?: string;\n};\n\nconst defaultTxOps = {\n  sync: false,\n};\n\nfunction alternativeRootFieldName(alternativeRoot: string): string {\n  return `alternative_root_${alternativeRoot}`;\n}\n\n/** Client to access core PL API. */\nexport class PlClient {\n  private readonly drivers = new Map<string, PlDriver>();\n\n  /** Artificial delay introduced after write transactions completion, to\n   * somewhat throttle the load on pl. Delay introduced after sync, if requested. */\n  private readonly txDelay: number;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly forceSync: boolean;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly defaultRetryOptions: RetryOptions;\n\n  private readonly buildLLPlClient: (\n    shouldUseGzip: boolean,\n    wireProtocol?: wireProtocol,\n  ) => Promise<LLPlClient>;\n  private _ll?: LLPlClient;\n\n  private get ll(): LLPlClient {\n    if (this._ll === undefined) {\n      throw new Error(\"LLPlClient not initialized\");\n    }\n    return this._ll;\n  }\n\n  /** Stores client root (this abstraction is intended for future implementation of the security model) */\n  private _clientRoot: OptionalSignedResourceId = NullSignedResourceId;\n\n  private _userResources?: UserResources;\n\n  private _txCommittedStat: TxStat = initialTxStat();\n  private _txConflictStat: TxStat = initialTxStat();\n  private _txErrorStat: TxStat = initialTxStat();\n\n  //\n  // Caching\n  //\n\n  /** This function determines whether resource data can be cached */\n  public readonly finalPredicate: FinalResourceDataPredicate;\n\n  /** Resource data cache, to minimize redundant data rereading from remote db */\n  private readonly resourceDataCache: LRUCache<SignedResourceId, ResourceDataCacheRecord>;\n\n  private constructor(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      finalPredicate?: FinalResourceDataPredicate;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const conf =\n      typeof configOrAddress === \"string\" ? plAddressToConfig(configOrAddress) : configOrAddress;\n\n    this.buildLLPlClient = async (\n      shouldUseGzip: boolean,\n      wireProtocol?: wireProtocol,\n    ): Promise<LLPlClient> => {\n      if (wireProtocol) conf.wireProtocol = wireProtocol;\n      return await LLPlClient.build(conf, { auth, ...ops, shouldUseGzip });\n    };\n\n    this.txDelay = conf.txDelay;\n    this.forceSync = conf.forceSync;\n    this.finalPredicate = ops.finalPredicate ?? DefaultFinalResourceDataPredicate;\n    this.resourceDataCache = new LRUCache({\n      maxSize: conf.maxCacheBytes,\n      sizeCalculation: (v) => (v.basicData.data?.length ?? 0) + 64,\n    });\n    switch (conf.retryBackoffAlgorithm) {\n      case \"exponential\":\n        this.defaultRetryOptions = {\n          type: \"exponentialBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffMultiplier: conf.retryExponentialBackoffMultiplier,\n          jitter: conf.retryJitter,\n        };\n        break;\n      case \"linear\":\n        this.defaultRetryOptions = {\n          type: \"linearBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffStep: conf.retryLinearBackoffStep,\n          jitter: conf.retryJitter,\n        };\n        break;\n      default:\n        assertNever(conf.retryBackoffAlgorithm);\n    }\n  }\n\n  public get txCommittedStat(): TxStat {\n    return { ...this._txCommittedStat };\n  }\n\n  public get txConflictStat(): TxStat {\n    return { ...this._txConflictStat };\n  }\n\n  public get txErrorStat(): TxStat {\n    return { ...this._txErrorStat };\n  }\n\n  public get txTotalStat(): TxStat {\n    return addStat(addStat(this._txCommittedStat, this._txConflictStat), this._txErrorStat);\n  }\n\n  public get allTxStat(): AllTxStat {\n    return {\n      committed: this.txCommittedStat,\n      conflict: this.txConflictStat,\n      error: this.txErrorStat,\n    };\n  }\n\n  public async ping(): Promise<MaintenanceAPI_Ping_Response> {\n    return await this.ll.ping();\n  }\n\n  public async license(): Promise<MaintenanceAPI_License_Response> {\n    return await this.ll.license();\n  }\n\n  /**\n   * Returns the user root SignedResourceId via ListUserResources.\n   * @param opts.login - target user login; omit for the authenticated user.\n   * @returns SignedResourceId of the user root, or undefined if the server returned no userRoot entry.\n   * @throws if the backend does not implement ListUserResources (callers should catch with isUnimplementedError).\n   */\n  public async getUserRoot(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  public async getUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  public async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    return this.userResources.getUserRoot(opts);\n  }\n\n  public get conf(): PlClientConfig {\n    return this.ll.conf;\n  }\n\n  public get httpDispatcher(): Dispatcher {\n    return this.ll.httpDispatcher;\n  }\n\n  public get connectionOpts(): WireConnection {\n    return this.ll.wireConnection;\n  }\n\n  private get initialized() {\n    return !isNullSignedResourceId(this._clientRoot);\n  }\n\n  private checkInitialized() {\n    if (!this.initialized) throw new Error(\"Client not initialized\");\n  }\n\n  public get clientRoot(): SignedResourceId {\n    this.checkInitialized();\n    return ensureSignedResourceIdNotNull(this._clientRoot);\n  }\n\n  public get serverInfo(): MaintenanceAPI_Ping_Response {\n    this.checkInitialized();\n    return this._ll!.serverInfo;\n  }\n\n  public hasCapability(capability: BackendCapability): boolean {\n    this.checkInitialized();\n    return this._ll!.hasCapability(capability);\n  }\n\n  /**\n   * True if the backend honors per-file `permissions` on workdir fill rules\n   * (PR #1830 in milaboratory/pl). See `LLPlClient.supportsWritableWorkdirFiles`\n   * for the full definition.\n   */\n  public get supportsWritableWorkdirFiles(): boolean {\n    this.checkInitialized();\n    return this._ll!.supportsWritableWorkdirFiles;\n  }\n\n  /** User resources index for discovering data libraries and other shared resources. */\n  public get userResources(): UserResources {\n    if (!this._ll) throw new Error(\"Client not initialized\");\n\n    if (!this._userResources) {\n      this._userResources = new UserResources(this._ll, this._withTx.bind(this), this._ll.authUser);\n    }\n\n    return this._userResources;\n  }\n\n  /** Discovers or creates the user's root resource via UserResources,\n   *  then handles alternativeRoot if configured. */\n  private async init() {\n    if (this.initialized) throw new Error(\"Already initialized\");\n\n    // Initial client is created without gzip to perform server ping and detect optimal wire protocol.\n    // LLPlClient.build() internally calls detectOptimalWireProtocol() which starts with default 'grpc',\n    // then retries with 'rest' if ping fails, alternating until a working protocol is found.\n    // We save the detected wireProtocol here because if the server supports gzip compression,\n    // we'll need to reinitialize the client with gzip enabled - passing the already-detected\n    // wireProtocol avoids redundant protocol detection on reinit.\n    this._ll = await this.buildLLPlClient(false);\n    const wireProtocol = this._ll.wireProtocol;\n\n    // LLPlClient.build() guarantees a successful ping; read the cached response instead of pinging again.\n    const info = this._ll.serverInfo;\n    if (info.compression === MaintenanceAPI_Ping_Response_Compression.GZIP) {\n      await this._ll.close();\n      this._ll = await this.buildLLPlClient(true, wireProtocol);\n    }\n\n    const userRoot = await this.userResources.getUserRoot({ createIfNotExists: true });\n\n    if (this.conf.alternativeRoot === undefined) {\n      this._clientRoot = userRoot;\n    } else {\n      this._clientRoot = await this._withTx(\"initialization\", true, userRoot, async (tx) => {\n        const aFId = {\n          resourceId: userRoot,\n          fieldName: alternativeRootFieldName(this.conf.alternativeRoot!),\n        };\n\n        const altRoot = tx.createEphemeral(ClientRoot);\n        tx.lock(altRoot);\n        tx.createField(aFId, \"Dynamic\");\n        tx.setField(aFId, altRoot);\n        await tx.commit();\n\n        return await altRoot.globalId;\n      });\n    }\n  }\n\n  /** Returns true if field existed */\n  public async deleteAlternativeRoot(alternativeRootName: string): Promise<boolean> {\n    this.checkInitialized();\n    if (this.ll.conf.alternativeRoot !== undefined)\n      throw new Error(\"Initialized with alternative root.\");\n    return await this.withWriteTx(\"delete-alternative-root\", async (tx) => {\n      const fId = {\n        resourceId: tx.clientRoot,\n        fieldName: alternativeRootFieldName(alternativeRootName),\n      };\n      const exists = tx.fieldExists(fId);\n      tx.removeField(fId);\n      await tx.commit();\n      return await exists;\n    });\n  }\n\n  private async _withTx<T>(\n    name: string,\n    writable: boolean,\n    clientRoot: OptionalSignedResourceId,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops?: TxOps,\n  ): Promise<T> {\n    // for exponential / linear backoff\n    let retryState = createRetryState(ops?.retryOptions ?? this.defaultRetryOptions);\n\n    while (true) {\n      const release = ops?.lockId ? await advisoryLock(ops.lockId) : () => {};\n\n      try {\n        // opening low-level tx\n        const llTx = this.ll.createTx(writable, ops);\n        // wrapping it into high-level tx (this also asynchronously sends initialization message)\n        const tx = new PlTransaction(\n          llTx,\n          name,\n          writable,\n          clientRoot,\n          this.finalPredicate,\n          this.resourceDataCache,\n        );\n\n        // Auto-set default color proof from the client root's signature.\n        // Skip when backend doesn't implement the `set_default_color` TX request.\n        if (this.ll.supportsResourceSignatures && !isNullSignedResourceId(clientRoot) && writable) {\n          const parsed = parseSignedResourceId(clientRoot);\n          if (parsed.signature) {\n            tx.setDefaultColor(parsed.signature as ColorProof);\n          }\n        }\n\n        let ok = false;\n        let result: T | undefined = undefined;\n        let txId;\n\n        try {\n          // executing transaction body\n          result = await body(tx);\n          // collecting stat\n          this._txCommittedStat = addStat(this._txCommittedStat, tx.stat);\n          ok = true;\n        } catch (e: unknown) {\n          // the only recoverable\n          if (e instanceof TxCommitConflict) {\n            // ignoring\n            // collecting stat\n            this._txConflictStat = addStat(this._txConflictStat, tx.stat);\n          } else {\n            // collecting stat\n            this._txErrorStat = addStat(this._txErrorStat, tx.stat);\n            throw e;\n          }\n        } finally {\n          // close underlying grpc stream, if not yet done\n\n          // even though we can skip two lines below for read-only transactions,\n          // we don't do it to simplify reasoning about what is going on in\n          // concurrent code, especially in significant latency situations\n          await tx.complete();\n          await tx.await();\n\n          txId = await tx.getGlobalTxId();\n        }\n\n        if (ok) {\n          // syncing on transaction if requested\n          if (ops?.sync === undefined ? this.forceSync : ops?.sync) await this.ll.txSync(txId);\n\n          // introducing artificial delay, if requested\n          if (writable && this.txDelay > 0)\n            await tp.setTimeout(this.txDelay, undefined, { signal: ops?.abortSignal });\n\n          return result!;\n        }\n      } finally {\n        release();\n      }\n\n      // we only get here after TxCommitConflict error,\n      // all other errors terminate this loop instantly\n\n      await tp.setTimeout(retryState.nextDelay, undefined, { signal: ops?.abortSignal });\n      retryState = nextRetryStateOrError(retryState);\n    }\n  }\n\n  private async withTx<T>(\n    name: string,\n    writable: boolean,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    this.checkInitialized();\n    return await this._withTx(name, writable, this.clientRoot, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withWriteTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, true, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withReadTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, false, body, { ...ops, ...defaultTxOps });\n  }\n\n  public getDriver<Drv extends PlDriver>(definition: PlDriverDefinition<Drv>): Drv {\n    const attached = this.drivers.get(definition.name);\n    if (attached !== undefined) return attached as Drv;\n    const driver = definition.init(this, this.ll, this.httpDispatcher);\n    this.drivers.set(definition.name, driver);\n    return driver;\n  }\n\n  /** Closes underlying transport */\n  public async close() {\n    await this.ll.close();\n  }\n\n  public static async init(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const pl = new PlClient(configOrAddress, auth, ops);\n    await pl.init();\n    return pl;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0CA,MAAM,eAAe,EACnB,MAAM,OACP;AAED,SAAS,yBAAyB,iBAAiC;AACjE,QAAO,oBAAoB;;;AAI7B,IAAa,WAAb,MAAa,SAAS;CACpB,0BAA2B,IAAI,KAAuB;;;CAItD;;CAGA;;CAGA;CAEA;CAIA;CAEA,IAAY,KAAiB;AAC3B,MAAI,KAAK,QAAQ,KAAA,EACf,OAAM,IAAI,MAAM,6BAA6B;AAE/C,SAAO,KAAK;;;CAId,cAAQ;CAER;CAEA,mBAAmCA,aAAAA,eAAe;CAClD,kBAAkCA,aAAAA,eAAe;CACjD,eAA+BA,aAAAA,eAAe;;CAO9C;;CAGA;CAEA,YACE,iBACA,MACA,MAII,EAAE,EACN;EACA,MAAM,OACJ,OAAO,oBAAoB,WAAWC,eAAAA,kBAAkB,gBAAgB,GAAG;AAE7E,OAAK,kBAAkB,OACrB,eACA,iBACwB;AACxB,OAAI,aAAc,MAAK,eAAe;AACtC,UAAO,MAAMC,kBAAAA,WAAW,MAAM,MAAM;IAAE;IAAM,GAAG;IAAK;IAAe,CAAC;;AAGtE,OAAK,UAAU,KAAK;AACpB,OAAK,YAAY,KAAK;AACtB,OAAK,iBAAiB,IAAI,kBAAkBC,cAAAA;AAC5C,OAAK,oBAAoB,IAAIC,UAAAA,SAAS;GACpC,SAAS,KAAK;GACd,kBAAkB,OAAO,EAAE,UAAU,MAAM,UAAU,KAAK;GAC3D,CAAC;AACF,UAAQ,KAAK,uBAAb;GACE,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,mBAAmB,KAAK;KACxB,QAAQ,KAAK;KACd;AACD;GACF,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,aAAa,KAAK;KAClB,QAAQ,KAAK;KACd;AACD;GACF,QACE,EAAA,GAAA,2BAAA,aAAY,KAAK,sBAAsB;;;CAI7C,IAAW,kBAA0B;AACnC,SAAO,EAAE,GAAG,KAAK,kBAAkB;;CAGrC,IAAW,iBAAyB;AAClC,SAAO,EAAE,GAAG,KAAK,iBAAiB;;CAGpC,IAAW,cAAsB;AAC/B,SAAO,EAAE,GAAG,KAAK,cAAc;;CAGjC,IAAW,cAAsB;AAC/B,SAAOC,aAAAA,QAAQA,aAAAA,QAAQ,KAAK,kBAAkB,KAAK,gBAAgB,EAAE,KAAK,aAAa;;CAGzF,IAAW,YAAuB;AAChC,SAAO;GACL,WAAW,KAAK;GAChB,UAAU,KAAK;GACf,OAAO,KAAK;GACb;;CAGH,MAAa,OAA8C;AACzD,SAAO,MAAM,KAAK,GAAG,MAAM;;CAG7B,MAAa,UAAoD;AAC/D,SAAO,MAAM,KAAK,GAAG,SAAS;;CAiBhC,MAAa,YACX,OAAwD,EAAE,EACnB;AACvC,SAAO,KAAK,cAAc,YAAY,KAAK;;CAG7C,IAAW,OAAuB;AAChC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAA6B;AACtC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAAiC;AAC1C,SAAO,KAAK,GAAG;;CAGjB,IAAY,cAAc;AACxB,SAAO,CAACC,cAAAA,uBAAuB,KAAK,YAAY;;CAGlD,mBAA2B;AACzB,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,yBAAyB;;CAGlE,IAAW,aAA+B;AACxC,OAAK,kBAAkB;AACvB,SAAOC,cAAAA,8BAA8B,KAAK,YAAY;;CAGxD,IAAW,aAA2C;AACpD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;CAGnB,cAAqB,YAAwC;AAC3D,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK,cAAc,WAAW;;;;;;;CAQ5C,IAAW,+BAAwC;AACjD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;;CAInB,IAAW,gBAA+B;AACxC,MAAI,CAAC,KAAK,IAAK,OAAM,IAAI,MAAM,yBAAyB;AAExD,MAAI,CAAC,KAAK,eACR,MAAK,iBAAiB,IAAIC,uBAAAA,cAAc,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE,KAAK,IAAI,SAAS;AAG/F,SAAO,KAAK;;;;CAKd,MAAc,OAAO;AACnB,MAAI,KAAK,YAAa,OAAM,IAAI,MAAM,sBAAsB;AAQ5D,OAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM;EAC5C,MAAM,eAAe,KAAK,IAAI;AAI9B,MADa,KAAK,IAAI,WACb,gBAAgBC,YAAAA,yCAAyC,MAAM;AACtE,SAAM,KAAK,IAAI,OAAO;AACtB,QAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM,aAAa;;EAG3D,MAAM,WAAW,MAAM,KAAK,cAAc,YAAY,EAAE,mBAAmB,MAAM,CAAC;AAElF,MAAI,KAAK,KAAK,oBAAoB,KAAA,EAChC,MAAK,cAAc;MAEnB,MAAK,cAAc,MAAM,KAAK,QAAQ,kBAAkB,MAAM,UAAU,OAAO,OAAO;GACpF,MAAM,OAAO;IACX,YAAY;IACZ,WAAW,yBAAyB,KAAK,KAAK,gBAAiB;IAChE;GAED,MAAM,UAAU,GAAG,gBAAgBC,WAAAA,WAAW;AAC9C,MAAG,KAAK,QAAQ;AAChB,MAAG,YAAY,MAAM,UAAU;AAC/B,MAAG,SAAS,MAAM,QAAQ;AAC1B,SAAM,GAAG,QAAQ;AAEjB,UAAO,MAAM,QAAQ;IACrB;;;CAKN,MAAa,sBAAsB,qBAA+C;AAChF,OAAK,kBAAkB;AACvB,MAAI,KAAK,GAAG,KAAK,oBAAoB,KAAA,EACnC,OAAM,IAAI,MAAM,qCAAqC;AACvD,SAAO,MAAM,KAAK,YAAY,2BAA2B,OAAO,OAAO;GACrE,MAAM,MAAM;IACV,YAAY,GAAG;IACf,WAAW,yBAAyB,oBAAoB;IACzD;GACD,MAAM,SAAS,GAAG,YAAY,IAAI;AAClC,MAAG,YAAY,IAAI;AACnB,SAAM,GAAG,QAAQ;AACjB,UAAO,MAAM;IACb;;CAGJ,MAAc,QACZ,MACA,UACA,YACA,MACA,KACY;EAEZ,IAAI,cAAA,GAAA,2BAAA,kBAA8B,KAAK,gBAAgB,KAAK,oBAAoB;AAEhF,SAAO,MAAM;GACX,MAAM,UAAU,KAAK,SAAS,MAAMC,uBAAAA,aAAa,IAAI,OAAO,SAAS;AAErE,OAAI;IAIF,MAAM,KAAK,IAAIC,oBAAAA,cAFF,KAAK,GAAG,SAAS,UAAU,IAAI,EAI1C,MACA,UACA,YACA,KAAK,gBACL,KAAK,kBACN;AAID,QAAI,KAAK,GAAG,8BAA8B,CAACN,cAAAA,uBAAuB,WAAW,IAAI,UAAU;KACzF,MAAM,SAASO,cAAAA,sBAAsB,WAAW;AAChD,SAAI,OAAO,UACT,IAAG,gBAAgB,OAAO,UAAwB;;IAItD,IAAI,KAAK;IACT,IAAI,SAAwB,KAAA;IAC5B,IAAI;AAEJ,QAAI;AAEF,cAAS,MAAM,KAAK,GAAG;AAEvB,UAAK,mBAAmBR,aAAAA,QAAQ,KAAK,kBAAkB,GAAG,KAAK;AAC/D,UAAK;aACE,GAAY;AAEnB,SAAI,aAAaS,oBAAAA,iBAGf,MAAK,kBAAkBT,aAAAA,QAAQ,KAAK,iBAAiB,GAAG,KAAK;UACxD;AAEL,WAAK,eAAeA,aAAAA,QAAQ,KAAK,cAAc,GAAG,KAAK;AACvD,YAAM;;cAEA;AAMR,WAAM,GAAG,UAAU;AACnB,WAAM,GAAG,OAAO;AAEhB,YAAO,MAAM,GAAG,eAAe;;AAGjC,QAAI,IAAI;AAEN,SAAI,KAAK,SAAS,KAAA,IAAY,KAAK,YAAY,KAAK,KAAM,OAAM,KAAK,GAAG,OAAO,KAAK;AAGpF,SAAI,YAAY,KAAK,UAAU,EAC7B,OAAMU,qBAAG,WAAW,KAAK,SAAS,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAE5E,YAAO;;aAED;AACR,aAAS;;AAMX,SAAMA,qBAAG,WAAW,WAAW,WAAW,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAClF,iBAAA,GAAA,2BAAA,uBAAmC,WAAW;;;CAIlD,MAAc,OACZ,MACA,UACA,MACA,MAAsB,EAAE,EACZ;AACZ,OAAK,kBAAkB;AACvB,SAAO,MAAM,KAAK,QAAQ,MAAM,UAAU,KAAK,YAAY,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG/F,MAAa,YACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,MAAM,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAGzE,MAAa,WACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,OAAO,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG1E,UAAuC,YAA0C;EAC/E,MAAM,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK;AAClD,MAAI,aAAa,KAAA,EAAW,QAAO;EACnC,MAAM,SAAS,WAAW,KAAK,MAAM,KAAK,IAAI,KAAK,eAAe;AAClE,OAAK,QAAQ,IAAI,WAAW,MAAM,OAAO;AACzC,SAAO;;;CAIT,MAAa,QAAQ;AACnB,QAAM,KAAK,GAAG,OAAO;;CAGvB,aAAoB,KAClB,iBACA,MACA,MAGI,EAAE,EACN;EACA,MAAM,KAAK,IAAI,SAAS,iBAAiB,MAAM,IAAI;AACnD,QAAM,GAAG,MAAM;AACf,SAAO"}

package/dist/core/client.js

@@ -197,7 +197,7 @@ var PlClient = class PlClient {
 			const release = ops?.lockId ? await advisoryLock(ops.lockId) : () => {};
 			try {
 				const tx = new PlTransaction(this.ll.createTx(writable, ops), name, writable, clientRoot, this.finalPredicate, this.resourceDataCache);
-				if (this.ll.supportsSetDefaultColor && !isNullSignedResourceId(clientRoot) && writable) {
+				if (this.ll.supportsResourceSignatures && !isNullSignedResourceId(clientRoot) && writable) {
 					const parsed = parseSignedResourceId(clientRoot);
 					if (parsed.signature) tx.setDefaultColor(parsed.signature);
 				}

package/dist/core/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","names":[],"sources":["../../src/core/client.ts"],"sourcesContent":["import type { AuthOps, PlClientConfig, PlConnectionStatusListener, wireProtocol } from \"./config\";\nimport type { PlCallOps } from \"./ll_client\";\nimport { LLPlClient } from \"./ll_client\";\nimport { PlTransaction, TxCommitConflict } from \"./transaction\";\nimport type { OptionalSignedResourceId, SignedResourceId } from \"./types\";\nimport {\n  ensureSignedResourceIdNotNull,\n  isNullSignedResourceId,\n  NullSignedResourceId,\n  parseSignedResourceId,\n} from \"./types\";\nimport type { ColorProof } from \"./types\";\nimport { ClientRoot } from \"../helpers/pl\";\nimport type { MiLogger, RetryOptions } from \"@milaboratories/ts-helpers\";\nimport { assertNever, createRetryState, nextRetryStateOrError } from \"@milaboratories/ts-helpers\";\nimport type { PlDriver, PlDriverDefinition } from \"./driver\";\nimport type {\n  MaintenanceAPI_Ping_Response,\n  MaintenanceAPI_License_Response,\n} from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport { MaintenanceAPI_Ping_Response_Compression } from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport * as tp from \"node:timers/promises\";\nimport type { Dispatcher } from \"undici\";\nimport { LRUCache } from \"lru-cache\";\nimport type { ResourceDataCacheRecord } from \"./cache\";\nimport type { FinalResourceDataPredicate } from \"./final\";\nimport { DefaultFinalResourceDataPredicate } from \"./final\";\nimport type { AllTxStat, TxStat } from \"./stat\";\nimport { addStat, initialTxStat } from \"./stat\";\nimport type { WireConnection } from \"./wire\";\nimport { advisoryLock } from \"./advisory_locks\";\nimport { plAddressToConfig } from \"./config\";\nimport { UserResources } from \"./user_resources\";\nimport type { BackendCapability } from \"./capabilities\";\n\nexport type TxOps = PlCallOps & {\n  sync?: boolean;\n  retryOptions?: RetryOptions;\n  name?: string;\n  lockId?: string;\n};\n\nconst defaultTxOps = {\n  sync: false,\n};\n\nfunction alternativeRootFieldName(alternativeRoot: string): string {\n  return `alternative_root_${alternativeRoot}`;\n}\n\n/** Client to access core PL API. */\nexport class PlClient {\n  private readonly drivers = new Map<string, PlDriver>();\n\n  /** Artificial delay introduced after write transactions completion, to\n   * somewhat throttle the load on pl. Delay introduced after sync, if requested. */\n  private readonly txDelay: number;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly forceSync: boolean;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly defaultRetryOptions: RetryOptions;\n\n  private readonly buildLLPlClient: (\n    shouldUseGzip: boolean,\n    wireProtocol?: wireProtocol,\n  ) => Promise<LLPlClient>;\n  private _ll?: LLPlClient;\n\n  private get ll(): LLPlClient {\n    if (this._ll === undefined) {\n      throw new Error(\"LLPlClient not initialized\");\n    }\n    return this._ll;\n  }\n\n  /** Stores client root (this abstraction is intended for future implementation of the security model) */\n  private _clientRoot: OptionalSignedResourceId = NullSignedResourceId;\n\n  private _userResources?: UserResources;\n\n  private _txCommittedStat: TxStat = initialTxStat();\n  private _txConflictStat: TxStat = initialTxStat();\n  private _txErrorStat: TxStat = initialTxStat();\n\n  //\n  // Caching\n  //\n\n  /** This function determines whether resource data can be cached */\n  public readonly finalPredicate: FinalResourceDataPredicate;\n\n  /** Resource data cache, to minimize redundant data rereading from remote db */\n  private readonly resourceDataCache: LRUCache<SignedResourceId, ResourceDataCacheRecord>;\n\n  private constructor(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      finalPredicate?: FinalResourceDataPredicate;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const conf =\n      typeof configOrAddress === \"string\" ? plAddressToConfig(configOrAddress) : configOrAddress;\n\n    this.buildLLPlClient = async (\n      shouldUseGzip: boolean,\n      wireProtocol?: wireProtocol,\n    ): Promise<LLPlClient> => {\n      if (wireProtocol) conf.wireProtocol = wireProtocol;\n      return await LLPlClient.build(conf, { auth, ...ops, shouldUseGzip });\n    };\n\n    this.txDelay = conf.txDelay;\n    this.forceSync = conf.forceSync;\n    this.finalPredicate = ops.finalPredicate ?? DefaultFinalResourceDataPredicate;\n    this.resourceDataCache = new LRUCache({\n      maxSize: conf.maxCacheBytes,\n      sizeCalculation: (v) => (v.basicData.data?.length ?? 0) + 64,\n    });\n    switch (conf.retryBackoffAlgorithm) {\n      case \"exponential\":\n        this.defaultRetryOptions = {\n          type: \"exponentialBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffMultiplier: conf.retryExponentialBackoffMultiplier,\n          jitter: conf.retryJitter,\n        };\n        break;\n      case \"linear\":\n        this.defaultRetryOptions = {\n          type: \"linearBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffStep: conf.retryLinearBackoffStep,\n          jitter: conf.retryJitter,\n        };\n        break;\n      default:\n        assertNever(conf.retryBackoffAlgorithm);\n    }\n  }\n\n  public get txCommittedStat(): TxStat {\n    return { ...this._txCommittedStat };\n  }\n\n  public get txConflictStat(): TxStat {\n    return { ...this._txConflictStat };\n  }\n\n  public get txErrorStat(): TxStat {\n    return { ...this._txErrorStat };\n  }\n\n  public get txTotalStat(): TxStat {\n    return addStat(addStat(this._txCommittedStat, this._txConflictStat), this._txErrorStat);\n  }\n\n  public get allTxStat(): AllTxStat {\n    return {\n      committed: this.txCommittedStat,\n      conflict: this.txConflictStat,\n      error: this.txErrorStat,\n    };\n  }\n\n  public async ping(): Promise<MaintenanceAPI_Ping_Response> {\n    return await this.ll.ping();\n  }\n\n  public async license(): Promise<MaintenanceAPI_License_Response> {\n    return await this.ll.license();\n  }\n\n  /**\n   * Returns the user root SignedResourceId via ListUserResources.\n   * @param opts.login - target user login; omit for the authenticated user.\n   * @returns SignedResourceId of the user root, or undefined if the server returned no userRoot entry.\n   * @throws if the backend does not implement ListUserResources (callers should catch with isUnimplementedError).\n   */\n  public async getUserRoot(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  public async getUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  public async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    return this.userResources.getUserRoot(opts);\n  }\n\n  public get conf(): PlClientConfig {\n    return this.ll.conf;\n  }\n\n  public get httpDispatcher(): Dispatcher {\n    return this.ll.httpDispatcher;\n  }\n\n  public get connectionOpts(): WireConnection {\n    return this.ll.wireConnection;\n  }\n\n  private get initialized() {\n    return !isNullSignedResourceId(this._clientRoot);\n  }\n\n  private checkInitialized() {\n    if (!this.initialized) throw new Error(\"Client not initialized\");\n  }\n\n  public get clientRoot(): SignedResourceId {\n    this.checkInitialized();\n    return ensureSignedResourceIdNotNull(this._clientRoot);\n  }\n\n  public get serverInfo(): MaintenanceAPI_Ping_Response {\n    this.checkInitialized();\n    return this._ll!.serverInfo;\n  }\n\n  public hasCapability(capability: BackendCapability): boolean {\n    this.checkInitialized();\n    return this._ll!.hasCapability(capability);\n  }\n\n  /**\n   * True if the backend honors per-file `permissions` on workdir fill rules\n   * (PR #1830 in milaboratory/pl). See `LLPlClient.supportsWritableWorkdirFiles`\n   * for the full definition.\n   */\n  public get supportsWritableWorkdirFiles(): boolean {\n    this.checkInitialized();\n    return this._ll!.supportsWritableWorkdirFiles;\n  }\n\n  /** User resources index for discovering data libraries and other shared resources. */\n  public get userResources(): UserResources {\n    if (!this._ll) throw new Error(\"Client not initialized\");\n\n    if (!this._userResources) {\n      this._userResources = new UserResources(this._ll, this._withTx.bind(this), this._ll.authUser);\n    }\n\n    return this._userResources;\n  }\n\n  /** Discovers or creates the user's root resource via UserResources,\n   *  then handles alternativeRoot if configured. */\n  private async init() {\n    if (this.initialized) throw new Error(\"Already initialized\");\n\n    // Initial client is created without gzip to perform server ping and detect optimal wire protocol.\n    // LLPlClient.build() internally calls detectOptimalWireProtocol() which starts with default 'grpc',\n    // then retries with 'rest' if ping fails, alternating until a working protocol is found.\n    // We save the detected wireProtocol here because if the server supports gzip compression,\n    // we'll need to reinitialize the client with gzip enabled - passing the already-detected\n    // wireProtocol avoids redundant protocol detection on reinit.\n    this._ll = await this.buildLLPlClient(false);\n    const wireProtocol = this._ll.wireProtocol;\n\n    // LLPlClient.build() guarantees a successful ping; read the cached response instead of pinging again.\n    const info = this._ll.serverInfo;\n    if (info.compression === MaintenanceAPI_Ping_Response_Compression.GZIP) {\n      await this._ll.close();\n      this._ll = await this.buildLLPlClient(true, wireProtocol);\n    }\n\n    const userRoot = await this.userResources.getUserRoot({ createIfNotExists: true });\n\n    if (this.conf.alternativeRoot === undefined) {\n      this._clientRoot = userRoot;\n    } else {\n      this._clientRoot = await this._withTx(\"initialization\", true, userRoot, async (tx) => {\n        const aFId = {\n          resourceId: userRoot,\n          fieldName: alternativeRootFieldName(this.conf.alternativeRoot!),\n        };\n\n        const altRoot = tx.createEphemeral(ClientRoot);\n        tx.lock(altRoot);\n        tx.createField(aFId, \"Dynamic\");\n        tx.setField(aFId, altRoot);\n        await tx.commit();\n\n        return await altRoot.globalId;\n      });\n    }\n  }\n\n  /** Returns true if field existed */\n  public async deleteAlternativeRoot(alternativeRootName: string): Promise<boolean> {\n    this.checkInitialized();\n    if (this.ll.conf.alternativeRoot !== undefined)\n      throw new Error(\"Initialized with alternative root.\");\n    return await this.withWriteTx(\"delete-alternative-root\", async (tx) => {\n      const fId = {\n        resourceId: tx.clientRoot,\n        fieldName: alternativeRootFieldName(alternativeRootName),\n      };\n      const exists = tx.fieldExists(fId);\n      tx.removeField(fId);\n      await tx.commit();\n      return await exists;\n    });\n  }\n\n  private async _withTx<T>(\n    name: string,\n    writable: boolean,\n    clientRoot: OptionalSignedResourceId,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops?: TxOps,\n  ): Promise<T> {\n    // for exponential / linear backoff\n    let retryState = createRetryState(ops?.retryOptions ?? this.defaultRetryOptions);\n\n    while (true) {\n      const release = ops?.lockId ? await advisoryLock(ops.lockId) : () => {};\n\n      try {\n        // opening low-level tx\n        const llTx = this.ll.createTx(writable, ops);\n        // wrapping it into high-level tx (this also asynchronously sends initialization message)\n        const tx = new PlTransaction(\n          llTx,\n          name,\n          writable,\n          clientRoot,\n          this.finalPredicate,\n          this.resourceDataCache,\n        );\n\n        // Auto-set default color proof from the client root's signature.\n        // Skip when backend doesn't implement the `set_default_color` TX request.\n        if (this.ll.supportsSetDefaultColor && !isNullSignedResourceId(clientRoot) && writable) {\n          const parsed = parseSignedResourceId(clientRoot);\n          if (parsed.signature) {\n            tx.setDefaultColor(parsed.signature as ColorProof);\n          }\n        }\n\n        let ok = false;\n        let result: T | undefined = undefined;\n        let txId;\n\n        try {\n          // executing transaction body\n          result = await body(tx);\n          // collecting stat\n          this._txCommittedStat = addStat(this._txCommittedStat, tx.stat);\n          ok = true;\n        } catch (e: unknown) {\n          // the only recoverable\n          if (e instanceof TxCommitConflict) {\n            // ignoring\n            // collecting stat\n            this._txConflictStat = addStat(this._txConflictStat, tx.stat);\n          } else {\n            // collecting stat\n            this._txErrorStat = addStat(this._txErrorStat, tx.stat);\n            throw e;\n          }\n        } finally {\n          // close underlying grpc stream, if not yet done\n\n          // even though we can skip two lines below for read-only transactions,\n          // we don't do it to simplify reasoning about what is going on in\n          // concurrent code, especially in significant latency situations\n          await tx.complete();\n          await tx.await();\n\n          txId = await tx.getGlobalTxId();\n        }\n\n        if (ok) {\n          // syncing on transaction if requested\n          if (ops?.sync === undefined ? this.forceSync : ops?.sync) await this.ll.txSync(txId);\n\n          // introducing artificial delay, if requested\n          if (writable && this.txDelay > 0)\n            await tp.setTimeout(this.txDelay, undefined, { signal: ops?.abortSignal });\n\n          return result!;\n        }\n      } finally {\n        release();\n      }\n\n      // we only get here after TxCommitConflict error,\n      // all other errors terminate this loop instantly\n\n      await tp.setTimeout(retryState.nextDelay, undefined, { signal: ops?.abortSignal });\n      retryState = nextRetryStateOrError(retryState);\n    }\n  }\n\n  private async withTx<T>(\n    name: string,\n    writable: boolean,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    this.checkInitialized();\n    return await this._withTx(name, writable, this.clientRoot, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withWriteTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, true, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withReadTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, false, body, { ...ops, ...defaultTxOps });\n  }\n\n  public getDriver<Drv extends PlDriver>(definition: PlDriverDefinition<Drv>): Drv {\n    const attached = this.drivers.get(definition.name);\n    if (attached !== undefined) return attached as Drv;\n    const driver = definition.init(this, this.ll, this.httpDispatcher);\n    this.drivers.set(definition.name, driver);\n    return driver;\n  }\n\n  /** Closes underlying transport */\n  public async close() {\n    await this.ll.close();\n  }\n\n  public static async init(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const pl = new PlClient(configOrAddress, auth, ops);\n    await pl.init();\n    return pl;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA0CA,MAAM,eAAe,EACnB,MAAM,OACP;AAED,SAAS,yBAAyB,iBAAiC;AACjE,QAAO,oBAAoB;;;AAI7B,IAAa,WAAb,MAAa,SAAS;CACpB,0BAA2B,IAAI,KAAuB;;;CAItD;;CAGA;;CAGA;CAEA;CAIA;CAEA,IAAY,KAAiB;AAC3B,MAAI,KAAK,QAAQ,KAAA,EACf,OAAM,IAAI,MAAM,6BAA6B;AAE/C,SAAO,KAAK;;;CAId,cAAQ;CAER;CAEA,mBAAmC,eAAe;CAClD,kBAAkC,eAAe;CACjD,eAA+B,eAAe;;CAO9C;;CAGA;CAEA,YACE,iBACA,MACA,MAII,EAAE,EACN;EACA,MAAM,OACJ,OAAO,oBAAoB,WAAW,kBAAkB,gBAAgB,GAAG;AAE7E,OAAK,kBAAkB,OACrB,eACA,iBACwB;AACxB,OAAI,aAAc,MAAK,eAAe;AACtC,UAAO,MAAM,WAAW,MAAM,MAAM;IAAE;IAAM,GAAG;IAAK;IAAe,CAAC;;AAGtE,OAAK,UAAU,KAAK;AACpB,OAAK,YAAY,KAAK;AACtB,OAAK,iBAAiB,IAAI,kBAAkB;AAC5C,OAAK,oBAAoB,IAAI,SAAS;GACpC,SAAS,KAAK;GACd,kBAAkB,OAAO,EAAE,UAAU,MAAM,UAAU,KAAK;GAC3D,CAAC;AACF,UAAQ,KAAK,uBAAb;GACE,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,mBAAmB,KAAK;KACxB,QAAQ,KAAK;KACd;AACD;GACF,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,aAAa,KAAK;KAClB,QAAQ,KAAK;KACd;AACD;GACF,QACE,aAAY,KAAK,sBAAsB;;;CAI7C,IAAW,kBAA0B;AACnC,SAAO,EAAE,GAAG,KAAK,kBAAkB;;CAGrC,IAAW,iBAAyB;AAClC,SAAO,EAAE,GAAG,KAAK,iBAAiB;;CAGpC,IAAW,cAAsB;AAC/B,SAAO,EAAE,GAAG,KAAK,cAAc;;CAGjC,IAAW,cAAsB;AAC/B,SAAO,QAAQ,QAAQ,KAAK,kBAAkB,KAAK,gBAAgB,EAAE,KAAK,aAAa;;CAGzF,IAAW,YAAuB;AAChC,SAAO;GACL,WAAW,KAAK;GAChB,UAAU,KAAK;GACf,OAAO,KAAK;GACb;;CAGH,MAAa,OAA8C;AACzD,SAAO,MAAM,KAAK,GAAG,MAAM;;CAG7B,MAAa,UAAoD;AAC/D,SAAO,MAAM,KAAK,GAAG,SAAS;;CAiBhC,MAAa,YACX,OAAwD,EAAE,EACnB;AACvC,SAAO,KAAK,cAAc,YAAY,KAAK;;CAG7C,IAAW,OAAuB;AAChC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAA6B;AACtC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAAiC;AAC1C,SAAO,KAAK,GAAG;;CAGjB,IAAY,cAAc;AACxB,SAAO,CAAC,uBAAuB,KAAK,YAAY;;CAGlD,mBAA2B;AACzB,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,yBAAyB;;CAGlE,IAAW,aAA+B;AACxC,OAAK,kBAAkB;AACvB,SAAO,8BAA8B,KAAK,YAAY;;CAGxD,IAAW,aAA2C;AACpD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;CAGnB,cAAqB,YAAwC;AAC3D,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK,cAAc,WAAW;;;;;;;CAQ5C,IAAW,+BAAwC;AACjD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;;CAInB,IAAW,gBAA+B;AACxC,MAAI,CAAC,KAAK,IAAK,OAAM,IAAI,MAAM,yBAAyB;AAExD,MAAI,CAAC,KAAK,eACR,MAAK,iBAAiB,IAAI,cAAc,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE,KAAK,IAAI,SAAS;AAG/F,SAAO,KAAK;;;;CAKd,MAAc,OAAO;AACnB,MAAI,KAAK,YAAa,OAAM,IAAI,MAAM,sBAAsB;AAQ5D,OAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM;EAC5C,MAAM,eAAe,KAAK,IAAI;AAI9B,MADa,KAAK,IAAI,WACb,gBAAgB,yCAAyC,MAAM;AACtE,SAAM,KAAK,IAAI,OAAO;AACtB,QAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM,aAAa;;EAG3D,MAAM,WAAW,MAAM,KAAK,cAAc,YAAY,EAAE,mBAAmB,MAAM,CAAC;AAElF,MAAI,KAAK,KAAK,oBAAoB,KAAA,EAChC,MAAK,cAAc;MAEnB,MAAK,cAAc,MAAM,KAAK,QAAQ,kBAAkB,MAAM,UAAU,OAAO,OAAO;GACpF,MAAM,OAAO;IACX,YAAY;IACZ,WAAW,yBAAyB,KAAK,KAAK,gBAAiB;IAChE;GAED,MAAM,UAAU,GAAG,gBAAgB,WAAW;AAC9C,MAAG,KAAK,QAAQ;AAChB,MAAG,YAAY,MAAM,UAAU;AAC/B,MAAG,SAAS,MAAM,QAAQ;AAC1B,SAAM,GAAG,QAAQ;AAEjB,UAAO,MAAM,QAAQ;IACrB;;;CAKN,MAAa,sBAAsB,qBAA+C;AAChF,OAAK,kBAAkB;AACvB,MAAI,KAAK,GAAG,KAAK,oBAAoB,KAAA,EACnC,OAAM,IAAI,MAAM,qCAAqC;AACvD,SAAO,MAAM,KAAK,YAAY,2BAA2B,OAAO,OAAO;GACrE,MAAM,MAAM;IACV,YAAY,GAAG;IACf,WAAW,yBAAyB,oBAAoB;IACzD;GACD,MAAM,SAAS,GAAG,YAAY,IAAI;AAClC,MAAG,YAAY,IAAI;AACnB,SAAM,GAAG,QAAQ;AACjB,UAAO,MAAM;IACb;;CAGJ,MAAc,QACZ,MACA,UACA,YACA,MACA,KACY;EAEZ,IAAI,aAAa,iBAAiB,KAAK,gBAAgB,KAAK,oBAAoB;AAEhF,SAAO,MAAM;GACX,MAAM,UAAU,KAAK,SAAS,MAAM,aAAa,IAAI,OAAO,SAAS;AAErE,OAAI;IAIF,MAAM,KAAK,IAAI,cAFF,KAAK,GAAG,SAAS,UAAU,IAAI,EAI1C,MACA,UACA,YACA,KAAK,gBACL,KAAK,kBACN;AAID,QAAI,KAAK,GAAG,2BAA2B,CAAC,uBAAuB,WAAW,IAAI,UAAU;KACtF,MAAM,SAAS,sBAAsB,WAAW;AAChD,SAAI,OAAO,UACT,IAAG,gBAAgB,OAAO,UAAwB;;IAItD,IAAI,KAAK;IACT,IAAI,SAAwB,KAAA;IAC5B,IAAI;AAEJ,QAAI;AAEF,cAAS,MAAM,KAAK,GAAG;AAEvB,UAAK,mBAAmB,QAAQ,KAAK,kBAAkB,GAAG,KAAK;AAC/D,UAAK;aACE,GAAY;AAEnB,SAAI,aAAa,iBAGf,MAAK,kBAAkB,QAAQ,KAAK,iBAAiB,GAAG,KAAK;UACxD;AAEL,WAAK,eAAe,QAAQ,KAAK,cAAc,GAAG,KAAK;AACvD,YAAM;;cAEA;AAMR,WAAM,GAAG,UAAU;AACnB,WAAM,GAAG,OAAO;AAEhB,YAAO,MAAM,GAAG,eAAe;;AAGjC,QAAI,IAAI;AAEN,SAAI,KAAK,SAAS,KAAA,IAAY,KAAK,YAAY,KAAK,KAAM,OAAM,KAAK,GAAG,OAAO,KAAK;AAGpF,SAAI,YAAY,KAAK,UAAU,EAC7B,OAAM,GAAG,WAAW,KAAK,SAAS,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAE5E,YAAO;;aAED;AACR,aAAS;;AAMX,SAAM,GAAG,WAAW,WAAW,WAAW,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAClF,gBAAa,sBAAsB,WAAW;;;CAIlD,MAAc,OACZ,MACA,UACA,MACA,MAAsB,EAAE,EACZ;AACZ,OAAK,kBAAkB;AACvB,SAAO,MAAM,KAAK,QAAQ,MAAM,UAAU,KAAK,YAAY,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG/F,MAAa,YACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,MAAM,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAGzE,MAAa,WACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,OAAO,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG1E,UAAuC,YAA0C;EAC/E,MAAM,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK;AAClD,MAAI,aAAa,KAAA,EAAW,QAAO;EACnC,MAAM,SAAS,WAAW,KAAK,MAAM,KAAK,IAAI,KAAK,eAAe;AAClE,OAAK,QAAQ,IAAI,WAAW,MAAM,OAAO;AACzC,SAAO;;;CAIT,MAAa,QAAQ;AACnB,QAAM,KAAK,GAAG,OAAO;;CAGvB,aAAoB,KAClB,iBACA,MACA,MAGI,EAAE,EACN;EACA,MAAM,KAAK,IAAI,SAAS,iBAAiB,MAAM,IAAI;AACnD,QAAM,GAAG,MAAM;AACf,SAAO"}
+{"version":3,"file":"client.js","names":[],"sources":["../../src/core/client.ts"],"sourcesContent":["import type { AuthOps, PlClientConfig, PlConnectionStatusListener, wireProtocol } from \"./config\";\nimport type { PlCallOps } from \"./ll_client\";\nimport { LLPlClient } from \"./ll_client\";\nimport { PlTransaction, TxCommitConflict } from \"./transaction\";\nimport type { OptionalSignedResourceId, SignedResourceId } from \"./types\";\nimport {\n  ensureSignedResourceIdNotNull,\n  isNullSignedResourceId,\n  NullSignedResourceId,\n  parseSignedResourceId,\n} from \"./types\";\nimport type { ColorProof } from \"./types\";\nimport { ClientRoot } from \"../helpers/pl\";\nimport type { MiLogger, RetryOptions } from \"@milaboratories/ts-helpers\";\nimport { assertNever, createRetryState, nextRetryStateOrError } from \"@milaboratories/ts-helpers\";\nimport type { PlDriver, PlDriverDefinition } from \"./driver\";\nimport type {\n  MaintenanceAPI_Ping_Response,\n  MaintenanceAPI_License_Response,\n} from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport { MaintenanceAPI_Ping_Response_Compression } from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport * as tp from \"node:timers/promises\";\nimport type { Dispatcher } from \"undici\";\nimport { LRUCache } from \"lru-cache\";\nimport type { ResourceDataCacheRecord } from \"./cache\";\nimport type { FinalResourceDataPredicate } from \"./final\";\nimport { DefaultFinalResourceDataPredicate } from \"./final\";\nimport type { AllTxStat, TxStat } from \"./stat\";\nimport { addStat, initialTxStat } from \"./stat\";\nimport type { WireConnection } from \"./wire\";\nimport { advisoryLock } from \"./advisory_locks\";\nimport { plAddressToConfig } from \"./config\";\nimport { UserResources } from \"./user_resources\";\nimport type { BackendCapability } from \"./capabilities\";\n\nexport type TxOps = PlCallOps & {\n  sync?: boolean;\n  retryOptions?: RetryOptions;\n  name?: string;\n  lockId?: string;\n};\n\nconst defaultTxOps = {\n  sync: false,\n};\n\nfunction alternativeRootFieldName(alternativeRoot: string): string {\n  return `alternative_root_${alternativeRoot}`;\n}\n\n/** Client to access core PL API. */\nexport class PlClient {\n  private readonly drivers = new Map<string, PlDriver>();\n\n  /** Artificial delay introduced after write transactions completion, to\n   * somewhat throttle the load on pl. Delay introduced after sync, if requested. */\n  private readonly txDelay: number;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly forceSync: boolean;\n\n  /** Last resort measure to solve complicated race conditions in pl. */\n  private readonly defaultRetryOptions: RetryOptions;\n\n  private readonly buildLLPlClient: (\n    shouldUseGzip: boolean,\n    wireProtocol?: wireProtocol,\n  ) => Promise<LLPlClient>;\n  private _ll?: LLPlClient;\n\n  private get ll(): LLPlClient {\n    if (this._ll === undefined) {\n      throw new Error(\"LLPlClient not initialized\");\n    }\n    return this._ll;\n  }\n\n  /** Stores client root (this abstraction is intended for future implementation of the security model) */\n  private _clientRoot: OptionalSignedResourceId = NullSignedResourceId;\n\n  private _userResources?: UserResources;\n\n  private _txCommittedStat: TxStat = initialTxStat();\n  private _txConflictStat: TxStat = initialTxStat();\n  private _txErrorStat: TxStat = initialTxStat();\n\n  //\n  // Caching\n  //\n\n  /** This function determines whether resource data can be cached */\n  public readonly finalPredicate: FinalResourceDataPredicate;\n\n  /** Resource data cache, to minimize redundant data rereading from remote db */\n  private readonly resourceDataCache: LRUCache<SignedResourceId, ResourceDataCacheRecord>;\n\n  private constructor(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      finalPredicate?: FinalResourceDataPredicate;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const conf =\n      typeof configOrAddress === \"string\" ? plAddressToConfig(configOrAddress) : configOrAddress;\n\n    this.buildLLPlClient = async (\n      shouldUseGzip: boolean,\n      wireProtocol?: wireProtocol,\n    ): Promise<LLPlClient> => {\n      if (wireProtocol) conf.wireProtocol = wireProtocol;\n      return await LLPlClient.build(conf, { auth, ...ops, shouldUseGzip });\n    };\n\n    this.txDelay = conf.txDelay;\n    this.forceSync = conf.forceSync;\n    this.finalPredicate = ops.finalPredicate ?? DefaultFinalResourceDataPredicate;\n    this.resourceDataCache = new LRUCache({\n      maxSize: conf.maxCacheBytes,\n      sizeCalculation: (v) => (v.basicData.data?.length ?? 0) + 64,\n    });\n    switch (conf.retryBackoffAlgorithm) {\n      case \"exponential\":\n        this.defaultRetryOptions = {\n          type: \"exponentialBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffMultiplier: conf.retryExponentialBackoffMultiplier,\n          jitter: conf.retryJitter,\n        };\n        break;\n      case \"linear\":\n        this.defaultRetryOptions = {\n          type: \"linearBackoff\",\n          initialDelay: conf.retryInitialDelay,\n          maxAttempts: conf.retryMaxAttempts,\n          backoffStep: conf.retryLinearBackoffStep,\n          jitter: conf.retryJitter,\n        };\n        break;\n      default:\n        assertNever(conf.retryBackoffAlgorithm);\n    }\n  }\n\n  public get txCommittedStat(): TxStat {\n    return { ...this._txCommittedStat };\n  }\n\n  public get txConflictStat(): TxStat {\n    return { ...this._txConflictStat };\n  }\n\n  public get txErrorStat(): TxStat {\n    return { ...this._txErrorStat };\n  }\n\n  public get txTotalStat(): TxStat {\n    return addStat(addStat(this._txCommittedStat, this._txConflictStat), this._txErrorStat);\n  }\n\n  public get allTxStat(): AllTxStat {\n    return {\n      committed: this.txCommittedStat,\n      conflict: this.txConflictStat,\n      error: this.txErrorStat,\n    };\n  }\n\n  public async ping(): Promise<MaintenanceAPI_Ping_Response> {\n    return await this.ll.ping();\n  }\n\n  public async license(): Promise<MaintenanceAPI_License_Response> {\n    return await this.ll.license();\n  }\n\n  /**\n   * Returns the user root SignedResourceId via ListUserResources.\n   * @param opts.login - target user login; omit for the authenticated user.\n   * @returns SignedResourceId of the user root, or undefined if the server returned no userRoot entry.\n   * @throws if the backend does not implement ListUserResources (callers should catch with isUnimplementedError).\n   */\n  public async getUserRoot(opts: {\n    login?: string;\n    createIfNotExists: true;\n  }): Promise<SignedResourceId>;\n  public async getUserRoot(opts?: {\n    login?: string;\n    createIfNotExists?: boolean;\n  }): Promise<SignedResourceId | undefined>;\n  public async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<SignedResourceId | undefined> {\n    return this.userResources.getUserRoot(opts);\n  }\n\n  public get conf(): PlClientConfig {\n    return this.ll.conf;\n  }\n\n  public get httpDispatcher(): Dispatcher {\n    return this.ll.httpDispatcher;\n  }\n\n  public get connectionOpts(): WireConnection {\n    return this.ll.wireConnection;\n  }\n\n  private get initialized() {\n    return !isNullSignedResourceId(this._clientRoot);\n  }\n\n  private checkInitialized() {\n    if (!this.initialized) throw new Error(\"Client not initialized\");\n  }\n\n  public get clientRoot(): SignedResourceId {\n    this.checkInitialized();\n    return ensureSignedResourceIdNotNull(this._clientRoot);\n  }\n\n  public get serverInfo(): MaintenanceAPI_Ping_Response {\n    this.checkInitialized();\n    return this._ll!.serverInfo;\n  }\n\n  public hasCapability(capability: BackendCapability): boolean {\n    this.checkInitialized();\n    return this._ll!.hasCapability(capability);\n  }\n\n  /**\n   * True if the backend honors per-file `permissions` on workdir fill rules\n   * (PR #1830 in milaboratory/pl). See `LLPlClient.supportsWritableWorkdirFiles`\n   * for the full definition.\n   */\n  public get supportsWritableWorkdirFiles(): boolean {\n    this.checkInitialized();\n    return this._ll!.supportsWritableWorkdirFiles;\n  }\n\n  /** User resources index for discovering data libraries and other shared resources. */\n  public get userResources(): UserResources {\n    if (!this._ll) throw new Error(\"Client not initialized\");\n\n    if (!this._userResources) {\n      this._userResources = new UserResources(this._ll, this._withTx.bind(this), this._ll.authUser);\n    }\n\n    return this._userResources;\n  }\n\n  /** Discovers or creates the user's root resource via UserResources,\n   *  then handles alternativeRoot if configured. */\n  private async init() {\n    if (this.initialized) throw new Error(\"Already initialized\");\n\n    // Initial client is created without gzip to perform server ping and detect optimal wire protocol.\n    // LLPlClient.build() internally calls detectOptimalWireProtocol() which starts with default 'grpc',\n    // then retries with 'rest' if ping fails, alternating until a working protocol is found.\n    // We save the detected wireProtocol here because if the server supports gzip compression,\n    // we'll need to reinitialize the client with gzip enabled - passing the already-detected\n    // wireProtocol avoids redundant protocol detection on reinit.\n    this._ll = await this.buildLLPlClient(false);\n    const wireProtocol = this._ll.wireProtocol;\n\n    // LLPlClient.build() guarantees a successful ping; read the cached response instead of pinging again.\n    const info = this._ll.serverInfo;\n    if (info.compression === MaintenanceAPI_Ping_Response_Compression.GZIP) {\n      await this._ll.close();\n      this._ll = await this.buildLLPlClient(true, wireProtocol);\n    }\n\n    const userRoot = await this.userResources.getUserRoot({ createIfNotExists: true });\n\n    if (this.conf.alternativeRoot === undefined) {\n      this._clientRoot = userRoot;\n    } else {\n      this._clientRoot = await this._withTx(\"initialization\", true, userRoot, async (tx) => {\n        const aFId = {\n          resourceId: userRoot,\n          fieldName: alternativeRootFieldName(this.conf.alternativeRoot!),\n        };\n\n        const altRoot = tx.createEphemeral(ClientRoot);\n        tx.lock(altRoot);\n        tx.createField(aFId, \"Dynamic\");\n        tx.setField(aFId, altRoot);\n        await tx.commit();\n\n        return await altRoot.globalId;\n      });\n    }\n  }\n\n  /** Returns true if field existed */\n  public async deleteAlternativeRoot(alternativeRootName: string): Promise<boolean> {\n    this.checkInitialized();\n    if (this.ll.conf.alternativeRoot !== undefined)\n      throw new Error(\"Initialized with alternative root.\");\n    return await this.withWriteTx(\"delete-alternative-root\", async (tx) => {\n      const fId = {\n        resourceId: tx.clientRoot,\n        fieldName: alternativeRootFieldName(alternativeRootName),\n      };\n      const exists = tx.fieldExists(fId);\n      tx.removeField(fId);\n      await tx.commit();\n      return await exists;\n    });\n  }\n\n  private async _withTx<T>(\n    name: string,\n    writable: boolean,\n    clientRoot: OptionalSignedResourceId,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops?: TxOps,\n  ): Promise<T> {\n    // for exponential / linear backoff\n    let retryState = createRetryState(ops?.retryOptions ?? this.defaultRetryOptions);\n\n    while (true) {\n      const release = ops?.lockId ? await advisoryLock(ops.lockId) : () => {};\n\n      try {\n        // opening low-level tx\n        const llTx = this.ll.createTx(writable, ops);\n        // wrapping it into high-level tx (this also asynchronously sends initialization message)\n        const tx = new PlTransaction(\n          llTx,\n          name,\n          writable,\n          clientRoot,\n          this.finalPredicate,\n          this.resourceDataCache,\n        );\n\n        // Auto-set default color proof from the client root's signature.\n        // Skip when backend doesn't implement the `set_default_color` TX request.\n        if (this.ll.supportsResourceSignatures && !isNullSignedResourceId(clientRoot) && writable) {\n          const parsed = parseSignedResourceId(clientRoot);\n          if (parsed.signature) {\n            tx.setDefaultColor(parsed.signature as ColorProof);\n          }\n        }\n\n        let ok = false;\n        let result: T | undefined = undefined;\n        let txId;\n\n        try {\n          // executing transaction body\n          result = await body(tx);\n          // collecting stat\n          this._txCommittedStat = addStat(this._txCommittedStat, tx.stat);\n          ok = true;\n        } catch (e: unknown) {\n          // the only recoverable\n          if (e instanceof TxCommitConflict) {\n            // ignoring\n            // collecting stat\n            this._txConflictStat = addStat(this._txConflictStat, tx.stat);\n          } else {\n            // collecting stat\n            this._txErrorStat = addStat(this._txErrorStat, tx.stat);\n            throw e;\n          }\n        } finally {\n          // close underlying grpc stream, if not yet done\n\n          // even though we can skip two lines below for read-only transactions,\n          // we don't do it to simplify reasoning about what is going on in\n          // concurrent code, especially in significant latency situations\n          await tx.complete();\n          await tx.await();\n\n          txId = await tx.getGlobalTxId();\n        }\n\n        if (ok) {\n          // syncing on transaction if requested\n          if (ops?.sync === undefined ? this.forceSync : ops?.sync) await this.ll.txSync(txId);\n\n          // introducing artificial delay, if requested\n          if (writable && this.txDelay > 0)\n            await tp.setTimeout(this.txDelay, undefined, { signal: ops?.abortSignal });\n\n          return result!;\n        }\n      } finally {\n        release();\n      }\n\n      // we only get here after TxCommitConflict error,\n      // all other errors terminate this loop instantly\n\n      await tp.setTimeout(retryState.nextDelay, undefined, { signal: ops?.abortSignal });\n      retryState = nextRetryStateOrError(retryState);\n    }\n  }\n\n  private async withTx<T>(\n    name: string,\n    writable: boolean,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    this.checkInitialized();\n    return await this._withTx(name, writable, this.clientRoot, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withWriteTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, true, body, { ...ops, ...defaultTxOps });\n  }\n\n  public async withReadTx<T>(\n    name: string,\n    body: (tx: PlTransaction) => Promise<T>,\n    ops: Partial<TxOps> = {},\n  ): Promise<T> {\n    return await this.withTx(name, false, body, { ...ops, ...defaultTxOps });\n  }\n\n  public getDriver<Drv extends PlDriver>(definition: PlDriverDefinition<Drv>): Drv {\n    const attached = this.drivers.get(definition.name);\n    if (attached !== undefined) return attached as Drv;\n    const driver = definition.init(this, this.ll, this.httpDispatcher);\n    this.drivers.set(definition.name, driver);\n    return driver;\n  }\n\n  /** Closes underlying transport */\n  public async close() {\n    await this.ll.close();\n  }\n\n  public static async init(\n    configOrAddress: PlClientConfig | string,\n    auth: AuthOps,\n    ops: {\n      statusListener?: PlConnectionStatusListener;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const pl = new PlClient(configOrAddress, auth, ops);\n    await pl.init();\n    return pl;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA0CA,MAAM,eAAe,EACnB,MAAM,OACP;AAED,SAAS,yBAAyB,iBAAiC;AACjE,QAAO,oBAAoB;;;AAI7B,IAAa,WAAb,MAAa,SAAS;CACpB,0BAA2B,IAAI,KAAuB;;;CAItD;;CAGA;;CAGA;CAEA;CAIA;CAEA,IAAY,KAAiB;AAC3B,MAAI,KAAK,QAAQ,KAAA,EACf,OAAM,IAAI,MAAM,6BAA6B;AAE/C,SAAO,KAAK;;;CAId,cAAQ;CAER;CAEA,mBAAmC,eAAe;CAClD,kBAAkC,eAAe;CACjD,eAA+B,eAAe;;CAO9C;;CAGA;CAEA,YACE,iBACA,MACA,MAII,EAAE,EACN;EACA,MAAM,OACJ,OAAO,oBAAoB,WAAW,kBAAkB,gBAAgB,GAAG;AAE7E,OAAK,kBAAkB,OACrB,eACA,iBACwB;AACxB,OAAI,aAAc,MAAK,eAAe;AACtC,UAAO,MAAM,WAAW,MAAM,MAAM;IAAE;IAAM,GAAG;IAAK;IAAe,CAAC;;AAGtE,OAAK,UAAU,KAAK;AACpB,OAAK,YAAY,KAAK;AACtB,OAAK,iBAAiB,IAAI,kBAAkB;AAC5C,OAAK,oBAAoB,IAAI,SAAS;GACpC,SAAS,KAAK;GACd,kBAAkB,OAAO,EAAE,UAAU,MAAM,UAAU,KAAK;GAC3D,CAAC;AACF,UAAQ,KAAK,uBAAb;GACE,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,mBAAmB,KAAK;KACxB,QAAQ,KAAK;KACd;AACD;GACF,KAAK;AACH,SAAK,sBAAsB;KACzB,MAAM;KACN,cAAc,KAAK;KACnB,aAAa,KAAK;KAClB,aAAa,KAAK;KAClB,QAAQ,KAAK;KACd;AACD;GACF,QACE,aAAY,KAAK,sBAAsB;;;CAI7C,IAAW,kBAA0B;AACnC,SAAO,EAAE,GAAG,KAAK,kBAAkB;;CAGrC,IAAW,iBAAyB;AAClC,SAAO,EAAE,GAAG,KAAK,iBAAiB;;CAGpC,IAAW,cAAsB;AAC/B,SAAO,EAAE,GAAG,KAAK,cAAc;;CAGjC,IAAW,cAAsB;AAC/B,SAAO,QAAQ,QAAQ,KAAK,kBAAkB,KAAK,gBAAgB,EAAE,KAAK,aAAa;;CAGzF,IAAW,YAAuB;AAChC,SAAO;GACL,WAAW,KAAK;GAChB,UAAU,KAAK;GACf,OAAO,KAAK;GACb;;CAGH,MAAa,OAA8C;AACzD,SAAO,MAAM,KAAK,GAAG,MAAM;;CAG7B,MAAa,UAAoD;AAC/D,SAAO,MAAM,KAAK,GAAG,SAAS;;CAiBhC,MAAa,YACX,OAAwD,EAAE,EACnB;AACvC,SAAO,KAAK,cAAc,YAAY,KAAK;;CAG7C,IAAW,OAAuB;AAChC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAA6B;AACtC,SAAO,KAAK,GAAG;;CAGjB,IAAW,iBAAiC;AAC1C,SAAO,KAAK,GAAG;;CAGjB,IAAY,cAAc;AACxB,SAAO,CAAC,uBAAuB,KAAK,YAAY;;CAGlD,mBAA2B;AACzB,MAAI,CAAC,KAAK,YAAa,OAAM,IAAI,MAAM,yBAAyB;;CAGlE,IAAW,aAA+B;AACxC,OAAK,kBAAkB;AACvB,SAAO,8BAA8B,KAAK,YAAY;;CAGxD,IAAW,aAA2C;AACpD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;CAGnB,cAAqB,YAAwC;AAC3D,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK,cAAc,WAAW;;;;;;;CAQ5C,IAAW,+BAAwC;AACjD,OAAK,kBAAkB;AACvB,SAAO,KAAK,IAAK;;;CAInB,IAAW,gBAA+B;AACxC,MAAI,CAAC,KAAK,IAAK,OAAM,IAAI,MAAM,yBAAyB;AAExD,MAAI,CAAC,KAAK,eACR,MAAK,iBAAiB,IAAI,cAAc,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,EAAE,KAAK,IAAI,SAAS;AAG/F,SAAO,KAAK;;;;CAKd,MAAc,OAAO;AACnB,MAAI,KAAK,YAAa,OAAM,IAAI,MAAM,sBAAsB;AAQ5D,OAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM;EAC5C,MAAM,eAAe,KAAK,IAAI;AAI9B,MADa,KAAK,IAAI,WACb,gBAAgB,yCAAyC,MAAM;AACtE,SAAM,KAAK,IAAI,OAAO;AACtB,QAAK,MAAM,MAAM,KAAK,gBAAgB,MAAM,aAAa;;EAG3D,MAAM,WAAW,MAAM,KAAK,cAAc,YAAY,EAAE,mBAAmB,MAAM,CAAC;AAElF,MAAI,KAAK,KAAK,oBAAoB,KAAA,EAChC,MAAK,cAAc;MAEnB,MAAK,cAAc,MAAM,KAAK,QAAQ,kBAAkB,MAAM,UAAU,OAAO,OAAO;GACpF,MAAM,OAAO;IACX,YAAY;IACZ,WAAW,yBAAyB,KAAK,KAAK,gBAAiB;IAChE;GAED,MAAM,UAAU,GAAG,gBAAgB,WAAW;AAC9C,MAAG,KAAK,QAAQ;AAChB,MAAG,YAAY,MAAM,UAAU;AAC/B,MAAG,SAAS,MAAM,QAAQ;AAC1B,SAAM,GAAG,QAAQ;AAEjB,UAAO,MAAM,QAAQ;IACrB;;;CAKN,MAAa,sBAAsB,qBAA+C;AAChF,OAAK,kBAAkB;AACvB,MAAI,KAAK,GAAG,KAAK,oBAAoB,KAAA,EACnC,OAAM,IAAI,MAAM,qCAAqC;AACvD,SAAO,MAAM,KAAK,YAAY,2BAA2B,OAAO,OAAO;GACrE,MAAM,MAAM;IACV,YAAY,GAAG;IACf,WAAW,yBAAyB,oBAAoB;IACzD;GACD,MAAM,SAAS,GAAG,YAAY,IAAI;AAClC,MAAG,YAAY,IAAI;AACnB,SAAM,GAAG,QAAQ;AACjB,UAAO,MAAM;IACb;;CAGJ,MAAc,QACZ,MACA,UACA,YACA,MACA,KACY;EAEZ,IAAI,aAAa,iBAAiB,KAAK,gBAAgB,KAAK,oBAAoB;AAEhF,SAAO,MAAM;GACX,MAAM,UAAU,KAAK,SAAS,MAAM,aAAa,IAAI,OAAO,SAAS;AAErE,OAAI;IAIF,MAAM,KAAK,IAAI,cAFF,KAAK,GAAG,SAAS,UAAU,IAAI,EAI1C,MACA,UACA,YACA,KAAK,gBACL,KAAK,kBACN;AAID,QAAI,KAAK,GAAG,8BAA8B,CAAC,uBAAuB,WAAW,IAAI,UAAU;KACzF,MAAM,SAAS,sBAAsB,WAAW;AAChD,SAAI,OAAO,UACT,IAAG,gBAAgB,OAAO,UAAwB;;IAItD,IAAI,KAAK;IACT,IAAI,SAAwB,KAAA;IAC5B,IAAI;AAEJ,QAAI;AAEF,cAAS,MAAM,KAAK,GAAG;AAEvB,UAAK,mBAAmB,QAAQ,KAAK,kBAAkB,GAAG,KAAK;AAC/D,UAAK;aACE,GAAY;AAEnB,SAAI,aAAa,iBAGf,MAAK,kBAAkB,QAAQ,KAAK,iBAAiB,GAAG,KAAK;UACxD;AAEL,WAAK,eAAe,QAAQ,KAAK,cAAc,GAAG,KAAK;AACvD,YAAM;;cAEA;AAMR,WAAM,GAAG,UAAU;AACnB,WAAM,GAAG,OAAO;AAEhB,YAAO,MAAM,GAAG,eAAe;;AAGjC,QAAI,IAAI;AAEN,SAAI,KAAK,SAAS,KAAA,IAAY,KAAK,YAAY,KAAK,KAAM,OAAM,KAAK,GAAG,OAAO,KAAK;AAGpF,SAAI,YAAY,KAAK,UAAU,EAC7B,OAAM,GAAG,WAAW,KAAK,SAAS,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAE5E,YAAO;;aAED;AACR,aAAS;;AAMX,SAAM,GAAG,WAAW,WAAW,WAAW,KAAA,GAAW,EAAE,QAAQ,KAAK,aAAa,CAAC;AAClF,gBAAa,sBAAsB,WAAW;;;CAIlD,MAAc,OACZ,MACA,UACA,MACA,MAAsB,EAAE,EACZ;AACZ,OAAK,kBAAkB;AACvB,SAAO,MAAM,KAAK,QAAQ,MAAM,UAAU,KAAK,YAAY,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG/F,MAAa,YACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,MAAM,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAGzE,MAAa,WACX,MACA,MACA,MAAsB,EAAE,EACZ;AACZ,SAAO,MAAM,KAAK,OAAO,MAAM,OAAO,MAAM;GAAE,GAAG;GAAK,GAAG;GAAc,CAAC;;CAG1E,UAAuC,YAA0C;EAC/E,MAAM,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK;AAClD,MAAI,aAAa,KAAA,EAAW,QAAO;EACnC,MAAM,SAAS,WAAW,KAAK,MAAM,KAAK,IAAI,KAAK,eAAe;AAClE,OAAK,QAAQ,IAAI,WAAW,MAAM,OAAO;AACzC,SAAO;;;CAIT,MAAa,QAAQ;AACnB,QAAM,KAAK,GAAG,OAAO;;CAGvB,aAAoB,KAClB,iBACA,MACA,MAGI,EAAE,EACN;EACA,MAAM,KAAK,IAAI,SAAS,iBAAiB,MAAM,IAAI;AACnD,QAAM,GAAG,MAAM;AACf,SAAO"}

package/dist/core/ll_client.cjs

@@ -1,4 +1,5 @@
 require("../_virtual/_rolldown/runtime.cjs");
+const require_types = require("./types.cjs");
 const require_api = require("../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.cjs");
 const require_code = require("../proto-grpc/google/rpc/code.cjs");
 const require_errors = require("./errors.cjs");
@@ -83,6 +84,7 @@ var LLPlClient = class LLPlClient {
 		const pl = new LLPlClient(typeof configOrAddress === "string" ? require_config.plAddressToConfig(configOrAddress) : configOrAddress, ops);
 		if (ops.useAutoDetectWireProtocol) await pl.detectOptimalWireProtocol();
 		if (!pl._serverInfo) await pl.ping();
+		require_types.setResourceSignaturesRequired(pl.supportsResourceSignatures);
 		if (!pl._authMethodsSync) await pl.authMethods();
 		return pl;
 	}
@@ -450,8 +452,10 @@ var LLPlClient = class LLPlClient {
 	hasCapability(capability) {
 		return require_capabilities.hasCapability(this.serverInfo.capabilities, capability);
 	}
-	/** True if the backend implements the setDefaultColor TX request. */
-	get supportsSetDefaultColor() {
+	/** True if the backend produces signed resource ids (and accepts the
+	* setDefaultColor TX request). Tagged at 3.3.0 — backends older than this
+	* return resources without signatures and reject color-proof requests. */
+	get supportsResourceSignatures() {
 		return isVersionAtLeast(this.serverInfo.coreVersion, [
 			3,
 			3,

package/dist/core/ll_client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ll_client.cjs","names":["plAddressToConfig","inferAuthRefreshTime","interceptors","GrpcPlApiClient","createClient","SUPPORTED_WIRE_PROTOCOLS","compressionAlgorithms","ChannelCredentials","GrpcTransport","parsePlJwt","parseResponseError","Code","InterceptingCall","GrpcStatus","AuthAPI_Role","hasCapability","isAbortedError","LLPlTransaction","WebSocketBiDiStream","TxAPI_ClientMessage","TxAPI_ServerMessage"],"sources":["../../src/core/ll_client.ts"],"sourcesContent":["import { PlatformClient as GrpcPlApiClient } from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.client\";\nimport type { ClientOptions, Interceptor } from \"@grpc/grpc-js\";\nimport {\n  ChannelCredentials,\n  InterceptingCall,\n  status as GrpcStatus,\n  compressionAlgorithms,\n} from \"@grpc/grpc-js\";\nimport type {\n  AuthInformation,\n  AuthOps,\n  PlClientConfig,\n  PlConnectionStatus,\n  PlConnectionStatusListener,\n} from \"./config\";\nimport { plAddressToConfig, type wireProtocol, SUPPORTED_WIRE_PROTOCOLS } from \"./config\";\nimport type { GrpcOptions } from \"@protobuf-ts/grpc-transport\";\nimport { GrpcTransport } from \"@protobuf-ts/grpc-transport\";\nimport { LLPlTransaction } from \"./ll_transaction\";\nimport { parsePlJwt } from \"../util/pl\";\nimport { type Dispatcher, interceptors } from \"undici\";\nimport type { Middleware } from \"openapi-fetch\";\nimport { inferAuthRefreshTime } from \"./auth\";\nimport { hasCapability, type BackendCapability } from \"./capabilities\";\nimport { defaultHttpDispatcher } from \"@milaboratories/pl-http\";\nimport type { WireClientProvider, WireClientProviderFactory, WireConnection } from \"./wire\";\nimport { parseHttpAuth } from \"@milaboratories/pl-model-common\";\nimport type * as grpcTypes from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport {\n  type PlApiPaths,\n  type PlRestClientType,\n  createClient,\n  parseResponseError,\n} from \"../proto-rest\";\nimport { notEmpty, retry, withTimeout, type RetryOptions } from \"@milaboratories/ts-helpers\";\nimport { Code } from \"../proto-grpc/google/rpc/code\";\nimport { WebSocketBiDiStream } from \"./websocket_stream\";\nimport {\n  AuthAPI_Role,\n  TxAPI_ClientMessage,\n  TxAPI_ServerMessage,\n} from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport type { MiLogger } from \"@milaboratories/ts-helpers\";\nimport { isAbortedError } from \"./errors\";\n\nexport interface PlCallOps {\n  timeout?: number;\n  abortSignal?: AbortSignal;\n}\n\n// Parses leading \"<major>.<minor>.<patch>\" from a version string like\n// \"3.1.1\" or \"3.1.1-rc1\" and returns true if the parsed version is >= target.\n// Returns false for unparseable versions (safer to assume an old backend).\nfunction isVersionAtLeast(version: string, target: [number, number, number]): boolean {\n  const match = /^v?(\\d+)\\.(\\d+)\\.(\\d+)/.exec(version);\n  if (!match) return false;\n  const parsed: [number, number, number] = [Number(match[1]), Number(match[2]), Number(match[3])];\n  for (let i = 0; i < 3; i++) {\n    if (parsed[i] !== target[i]) return parsed[i] > target[i];\n  }\n  return true;\n}\n\n// Returns true iff `version` is strictly after the release tag `target`. Dev\n// builds (`git describe`-style, e.g. \"3.5.0-224-g0ca182\") are considered\n// AFTER the matching release tag — they include commits past the tag and so\n// have any change merged after it. Released versions with the same triplet\n// return false (we want the tag itself to be excluded).\n//\n// Examples for target [3,5,0]:\n//   \"3.5.0\"              → false (the tagged release)\n//   \"3.5.0-224-g0ca182\"  → true  (dev build past the tag)\n//   \"3.5.1\"              → true\n//   \"3.4.9\"              → false\n// Returns false for unparseable versions.\nfunction isAfterVersion(version: string, target: [number, number, number]): boolean {\n  const match = /^v?(\\d+)\\.(\\d+)\\.(\\d+)(.*)$/.exec(version);\n  if (!match) return false;\n  const parsed: [number, number, number] = [Number(match[1]), Number(match[2]), Number(match[3])];\n  const suffix = match[4];\n  for (let i = 0; i < 3; i++) {\n    if (parsed[i] !== target[i]) return parsed[i] > target[i];\n  }\n  return suffix !== \"\";\n}\n\nclass WireClientProviderImpl<Client> implements WireClientProvider<Client> {\n  private client: Client | undefined = undefined;\n\n  constructor(\n    private readonly wireOpts: () => WireConnection,\n    private readonly clientConstructor: (wireOpts: WireConnection) => Client,\n  ) {}\n\n  public reset(): void {\n    this.client = undefined;\n  }\n\n  public get(): Client {\n    if (this.client === undefined) this.client = this.clientConstructor(this.wireOpts());\n    return this.client;\n  }\n}\n\n/** Abstract out low level networking and authorization details */\nexport class LLPlClient implements WireClientProviderFactory {\n  /** Initial authorization information */\n  private authInformation?: AuthInformation;\n  /** Will be executed by the client when it is required */\n  private readonly onAuthUpdate?: (newInfo: AuthInformation) => void;\n  /** Will be executed if auth-related error happens during normal client operation */\n  private readonly onAuthError?: () => void;\n  /** Will be executed by the client when it is required */\n  private readonly onAuthRefreshProblem?: (error: unknown) => void;\n  /** Threshold after which auth info refresh is required */\n  private refreshTimestamp?: number;\n\n  /** Cached Ping response. Populated by build() before it returns; refreshed by every later ping(). */\n  private _serverInfo?: grpcTypes.MaintenanceAPI_Ping_Response;\n  private _authMethodsSync?: grpcTypes.AuthAPI_ListMethods_Response;\n\n  private _status: PlConnectionStatus = \"OK\";\n  private readonly statusListener?: PlConnectionStatusListener;\n\n  private _wireProto: wireProtocol = \"grpc\";\n  private _wireConn!: WireConnection;\n\n  private readonly _restInterceptors: Dispatcher.DispatcherComposeInterceptor[];\n  private readonly _restMiddlewares: Middleware[];\n  private readonly _grpcInterceptors: Interceptor[];\n  private readonly providers: WeakRef<WireClientProviderImpl<any>>[] = [];\n\n  public readonly clientProvider: WireClientProvider<PlRestClientType | GrpcPlApiClient>;\n\n  public readonly httpDispatcher: Dispatcher;\n\n  public static async build(\n    configOrAddress: PlClientConfig | string,\n    ops: {\n      auth?: AuthOps;\n      statusListener?: PlConnectionStatusListener;\n      shouldUseGzip?: boolean;\n      logger?: MiLogger;\n      useAutoDetectWireProtocol?: boolean;\n    } = {},\n  ) {\n    const conf =\n      typeof configOrAddress === \"string\" ? plAddressToConfig(configOrAddress) : configOrAddress;\n\n    const pl = new LLPlClient(conf, ops);\n\n    // FIXME(rfiskov)[MILAB-5275]: Investigate why autodetect randomly fails; temporary turn it off.\n    if (ops.useAutoDetectWireProtocol) {\n      await pl.detectOptimalWireProtocol();\n    }\n\n    // Guarantee a ping happened so capability-gated paths (login, refresh) can branch synchronously.\n    // In the autodetect path the loop's last successful ping already populated _serverInfo via the\n    // side-effect in ping(); this fallback covers the path where autodetect is disabled.\n    if (!pl._serverInfo) await pl.ping();\n\n    // Guarantee authMethods happened so client can make weighted decision on which auth method to use.\n    if (!pl._authMethodsSync) await pl.authMethods();\n\n    return pl;\n  }\n\n  private constructor(\n    public readonly conf: PlClientConfig,\n    private readonly ops: {\n      auth?: AuthOps;\n      statusListener?: PlConnectionStatusListener;\n      shouldUseGzip?: boolean;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const { auth, statusListener } = ops;\n\n    if (auth !== undefined) {\n      this.refreshTimestamp = inferAuthRefreshTime(\n        auth.authInformation,\n        this.conf.authMaxRefreshSeconds,\n      );\n      this.authInformation = auth.authInformation;\n      this.onAuthUpdate = auth.onUpdate;\n      this.onAuthRefreshProblem = auth.onUpdateError;\n      this.onAuthError = auth.onAuthError;\n    }\n\n    this._restInterceptors = [];\n    this._restMiddlewares = [];\n    this._grpcInterceptors = [];\n\n    if (auth !== undefined) {\n      this._restInterceptors.push(this.createRestAuthInterceptor());\n      this._grpcInterceptors.push(this.createGrpcAuthInterceptor());\n    }\n    this._restInterceptors.push(interceptors.retry({ statusCodes: [] })); // Handle errors with openapi-fetch middleware.\n    this._restMiddlewares.push(this.createRestErrorMiddleware());\n    this._grpcInterceptors.push(this.createGrpcErrorInterceptor());\n\n    this.httpDispatcher = defaultHttpDispatcher(this.conf.httpProxy);\n    if (this.conf.wireProtocol) {\n      this._wireProto = this.conf.wireProtocol;\n    }\n\n    this.initWireConnection(this._wireProto);\n\n    if (statusListener !== undefined) {\n      this.statusListener = statusListener;\n      statusListener(this._status);\n    }\n\n    this.clientProvider = this.createWireClientProvider((wireConn) => {\n      if (wireConn.type === \"grpc\") {\n        return new GrpcPlApiClient(wireConn.Transport);\n      } else {\n        return createClient<PlApiPaths>({\n          hostAndPort: wireConn.Config.hostAndPort,\n          ssl: wireConn.Config.ssl,\n          dispatcher: wireConn.Dispatcher,\n          middlewares: wireConn.Middlewares,\n        });\n      }\n    });\n  }\n\n  private initWireConnection(protocol: wireProtocol) {\n    switch (protocol) {\n      case \"rest\":\n        this.initRestConnection();\n        return;\n      case \"grpc\":\n        this.initGrpcConnection(this.ops.shouldUseGzip ?? false);\n        return;\n      default:\n        ((v: never) => {\n          throw new Error(\n            `Unsupported wire protocol '${v as string}'. Use one of: ${SUPPORTED_WIRE_PROTOCOLS.join(\", \")}`,\n          );\n        })(protocol);\n    }\n  }\n\n  private initRestConnection(): void {\n    const dispatcher = defaultHttpDispatcher(this.conf.grpcProxy, this._restInterceptors);\n    this._replaceWireConnection({\n      type: \"rest\",\n      Config: this.conf,\n      Dispatcher: dispatcher,\n      Middlewares: this._restMiddlewares,\n    });\n  }\n\n  /**\n   * Initializes (or reinitializes) _grpcTransport\n   * @param gzip - whether to enable gzip compression\n   */\n  private initGrpcConnection(gzip: boolean) {\n    const clientOptions: ClientOptions = {\n      \"grpc.keepalive_time_ms\": 30_000, // 30 seconds\n      \"grpc.service_config_disable_resolution\": 1, // Disable DNS TXT lookups for service config\n      interceptors: this._grpcInterceptors,\n    };\n\n    if (gzip) clientOptions[\"grpc.default_compression_algorithm\"] = compressionAlgorithms.gzip;\n\n    //\n    // Leaving it here for now\n    // https://github.com/grpc/grpc-node/issues/2788\n    //\n    // We should implement message pooling algorithm to overcome hardcoded NO_DELAY behaviour\n    // of HTTP/2 and allow our small messages to batch together.\n    //\n    const grpcOptions: GrpcOptions = {\n      host: this.conf.hostAndPort,\n      timeout: this.conf.defaultRequestTimeout,\n      channelCredentials: this.conf.ssl\n        ? ChannelCredentials.createSsl()\n        : ChannelCredentials.createInsecure(),\n      clientOptions,\n    };\n\n    const grpcProxy =\n      typeof this.conf.grpcProxy === \"string\" ? { url: this.conf.grpcProxy } : this.conf.grpcProxy;\n\n    if (grpcProxy?.url) {\n      const url = new URL(grpcProxy.url);\n      if (grpcProxy.auth) {\n        const parsed = parseHttpAuth(grpcProxy.auth);\n        if (parsed.scheme !== \"Basic\") {\n          throw new Error(`Unsupported auth scheme: ${parsed.scheme as string}.`);\n        }\n        url.username = parsed.username;\n        url.password = parsed.password;\n      }\n      process.env.grpc_proxy = url.toString();\n    } else {\n      delete process.env.grpc_proxy;\n    }\n\n    this._replaceWireConnection({ type: \"grpc\", Transport: new GrpcTransport(grpcOptions) });\n  }\n\n  private _replaceWireConnection(newConn: WireConnection): void {\n    const oldConn = this._wireConn;\n    this._wireConn = newConn;\n    this._wireProto = newConn.type;\n\n    // Reset all providers to let them reinitialize their clients\n    for (let i = 0; i < this.providers.length; i++) {\n      const provider = this.providers[i].deref();\n      if (provider === undefined) {\n        // at the same time we need to remove providers that are no longer valid\n        this.providers.splice(i, 1);\n        i--;\n      } else {\n        provider.reset();\n      }\n    }\n\n    if (oldConn !== undefined && oldConn.type === \"grpc\") oldConn.Transport.close();\n  }\n\n  private providerCleanupCounter = 0;\n\n  /**\n   * Creates a provider for a grpc client. Returned provider will create fresh client whenever the underlying transport is reset.\n   *\n   * @param clientConstructor - a factory function that creates a grpc client\n   */\n  public createWireClientProvider<Client>(\n    clientConstructor: (transport: WireConnection) => Client,\n  ): WireClientProvider<Client> {\n    // We need to cleanup providers periodically to avoid memory leaks.\n    // This is a simple heuristic to avoid memory leaks.\n    // We could use a more sophisticated algorithm, but this is good enough for now.\n    this.providerCleanupCounter++;\n    if (this.providerCleanupCounter >= 16) {\n      for (let i = 0; i < this.providers.length; i++) {\n        const provider = this.providers[i].deref();\n        if (provider === undefined) {\n          this.providers.splice(i, 1);\n          i--;\n        }\n      }\n      this.providerCleanupCounter = 0;\n    }\n\n    const provider = new WireClientProviderImpl<Client>(() => this._wireConn, clientConstructor);\n    this.providers.push(new WeakRef(provider));\n    return provider;\n  }\n\n  public get wireConnection(): WireConnection {\n    return this._wireConn;\n  }\n\n  public get wireProtocol(): wireProtocol | undefined {\n    return this._wireProto;\n  }\n\n  /** Returns true if client is authenticated. Even with anonymous auth information\n   * connection is considered authenticated. Unauthenticated clients are used for\n   * login and similar tasks, see {@link UnauthenticatedPlClient}. */\n  public get authenticated(): boolean {\n    return this.authInformation !== undefined;\n  }\n\n  /** null means anonymous connection */\n  public get authUser(): string | null {\n    if (!this.authenticated) throw new Error(\"Client is not authenticated\");\n    if (this.authInformation?.jwtToken) {\n      if (this.hasCapability(\"auth:v2\")) {\n        return parsePlJwt(this.authInformation?.jwtToken).sub;\n      }\n      return parsePlJwt(this.authInformation?.jwtToken).user.login;\n    } else return null;\n  }\n\n  private updateStatus(newStatus: PlConnectionStatus) {\n    process.nextTick(() => {\n      if (this._status !== newStatus) {\n        this._status = newStatus;\n        if (this.statusListener !== undefined) this.statusListener(this._status);\n        if (newStatus === \"Unauthenticated\" && this.onAuthError !== undefined) this.onAuthError();\n      }\n    });\n  }\n\n  public get status(): PlConnectionStatus {\n    return this._status;\n  }\n\n  private authRefreshInProgress: boolean = false;\n\n  private refreshAuthInformationIfNeeded(): void {\n    if (\n      this.refreshTimestamp === undefined ||\n      Date.now() < this.refreshTimestamp ||\n      this.authRefreshInProgress ||\n      this._status === \"Unauthenticated\"\n    )\n      return;\n\n    // Running refresh in background`\n    this.authRefreshInProgress = true;\n    void (async () => {\n      try {\n        const ttl = BigInt(this.conf.authTTLSeconds);\n        const token = this.hasCapability(\"auth:v2\")\n          ? await this.refreshToken({ ttlSeconds: ttl })\n          : await this.getJwtToken(ttl);\n        this.authInformation = { jwtToken: token };\n        this.refreshTimestamp = inferAuthRefreshTime(\n          this.authInformation,\n          this.conf.authMaxRefreshSeconds,\n        );\n        if (this.onAuthUpdate) this.onAuthUpdate(this.authInformation);\n      } catch (e: unknown) {\n        if (this.onAuthRefreshProblem) this.onAuthRefreshProblem(e);\n      } finally {\n        this.authRefreshInProgress = false;\n      }\n    })();\n  }\n\n  /**\n   * Creates middleware that parses error responses and handles them centrally.\n   * This middleware runs before openapi-fetch parses the response, so we need to\n   * manually parse the response body for error responses.\n   */\n  private createRestErrorMiddleware(): Middleware {\n    return {\n      onResponse: async ({ request: _request, response, options: _options }) => {\n        const { body, ...resOptions } = response;\n\n        if ([502, 503, 504].includes(response.status)) {\n          // Service unavailable, bad gateway, gateway timeout\n          this.updateStatus(\"Disconnected\");\n          return new Response(body, { ...resOptions, status: response.status });\n        }\n\n        const respErr = await parseResponseError(response);\n        if (!respErr.error) {\n          // No error: nice!\n          return new Response(respErr.origBody ?? body, { ...resOptions, status: response.status });\n        }\n\n        if (typeof respErr.error === \"string\") {\n          // Non-standard error or normal response: let later middleware to deal wit it.\n          return new Response(respErr.error, { ...resOptions, status: response.status });\n        }\n\n        if (respErr.error.code === Code.UNAUTHENTICATED) {\n          this.updateStatus(\"Unauthenticated\");\n        }\n\n        // Let later middleware to deal with standard gRPC error.\n        return new Response(respErr.origBody, { ...resOptions, status: response.status });\n      },\n    };\n  }\n\n  /** Detects certain errors and update client status accordingly when using GRPC wire connection */\n  private createGrpcErrorInterceptor(): Interceptor {\n    return (options, nextCall) => {\n      return new InterceptingCall(nextCall(options), {\n        start: (metadata, listener, next) => {\n          next(metadata, {\n            onReceiveStatus: (status, next) => {\n              if (status.code == GrpcStatus.UNAUTHENTICATED)\n                // (!!!) don't change to \"===\"\n                this.updateStatus(\"Unauthenticated\");\n              if (status.code == GrpcStatus.UNAVAILABLE)\n                // (!!!) don't change to \"===\"\n                this.updateStatus(\"Disconnected\");\n              next(status);\n            },\n          });\n        },\n      });\n    };\n  }\n\n  private createRestAuthInterceptor(): Dispatcher.DispatcherComposeInterceptor {\n    return (dispatch) => {\n      return (options, handler) => {\n        if (this.authInformation?.jwtToken !== undefined) {\n          // TODO: check this magic really works and gets called\n          options.headers = {\n            ...options.headers,\n            authorization: \"Bearer \" + this.authInformation.jwtToken,\n          };\n          this.refreshAuthInformationIfNeeded();\n        }\n\n        return dispatch(options, handler);\n      };\n    };\n  }\n\n  /** Injects authentication information if needed */\n  private createGrpcAuthInterceptor(): Interceptor {\n    return (options, nextCall) => {\n      return new InterceptingCall(nextCall(options), {\n        start: (metadata, listener, next) => {\n          if (this.authInformation?.jwtToken !== undefined) {\n            metadata.set(\"authorization\", \"Bearer \" + this.authInformation.jwtToken);\n            this.refreshAuthInformationIfNeeded();\n            next(metadata, listener);\n          } else {\n            next(metadata, listener);\n          }\n        },\n      });\n    };\n  }\n\n  public async getJwtToken(\n    ttlSeconds: bigint,\n    options?: { authorization?: string; role?: AuthAPI_Role },\n  ): Promise<string> {\n    const cl = this.clientProvider.get();\n    const role = options?.role ?? AuthAPI_Role.UNSPECIFIED;\n\n    if (cl instanceof GrpcPlApiClient) {\n      const meta: Record<string, string> = {};\n      if (options?.authorization) meta.authorization = options.authorization;\n      return (\n        await cl.getJWTToken(\n          {\n            expiration: { seconds: ttlSeconds, nanos: 0 },\n            requestedRole: role,\n          },\n          { meta },\n        ).response\n      ).token;\n    } else {\n      const headers: Record<string, string> = {};\n      if (options?.authorization) headers.authorization = options.authorization;\n      const resp = cl.POST(\"/v1/auth/jwt-token\", {\n        body: { expiration: `${ttlSeconds}s`, requestedRole: role },\n        headers,\n      });\n      return notEmpty((await resp).data, \"REST: empty response for JWT token request\").token;\n    }\n  }\n\n  /** Login via username/password. Returns a fresh JWT. Backend creates a new session per call. */\n  public async loginBasic(\n    user: string,\n    password: string,\n    opts: { ttlSeconds?: bigint; role?: AuthAPI_Role } = {},\n  ): Promise<string> {\n    const cl = this.clientProvider.get();\n    const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);\n    const role = opts.role ?? AuthAPI_Role.UNSPECIFIED;\n\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.login({\n          credentials: {\n            oneofKind: \"basic\",\n            basic: { login: user, password },\n          },\n          expiration: { seconds: ttl, nanos: 0 },\n          requestedRole: role,\n        }).response\n      ).token;\n    } else {\n      const resp = cl.POST(\"/v1/auth/login\", {\n        // openapi-typescript generated all body fields as required, but Login.Request\n        // has a credentials oneof — only one of `basic`/`token` is sent. Cast around it.\n        body: {\n          basic: { login: user, password },\n          expiration: `${ttl}s`,\n          requestedRole: role,\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } as any,\n      });\n      return notEmpty((await resp).data, \"REST: empty response for login request\").token;\n    }\n  }\n\n  /** Login via opaque bearer token (controller pre-shared secret, OIDC id-token, etc.).\n   * String input is UTF-8 encoded. Returns a fresh Platforma JWT. */\n  public async loginWithToken(\n    token: Uint8Array | string,\n    opts: { ttlSeconds?: bigint; role?: AuthAPI_Role } = {},\n  ): Promise<string> {\n    const cl = this.clientProvider.get();\n    const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);\n    const role = opts.role ?? AuthAPI_Role.UNSPECIFIED;\n    const bytes = typeof token === \"string\" ? Buffer.from(token, \"utf8\") : token;\n\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.login({\n          credentials: {\n            oneofKind: \"token\",\n            token: { token: bytes },\n          },\n          expiration: { seconds: ttl, nanos: 0 },\n          requestedRole: role,\n        }).response\n      ).token;\n    } else {\n      const resp = cl.POST(\"/v1/auth/login\", {\n        // openapi-typescript marks all body fields as required, but Login.Request has a oneof.\n        // REST encodes `bytes` as a base64 string.\n        body: {\n          token: { token: Buffer.from(bytes).toString(\"base64\") },\n          expiration: `${ttl}s`,\n          requestedRole: role,\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } as any,\n      });\n      return notEmpty((await resp).data, \"REST: empty response for login request\").token;\n    }\n  }\n\n  /** Refresh the current JWT, preserving session id and role. */\n  public async refreshToken(opts: { ttlSeconds?: bigint } = {}): Promise<string> {\n    const cl = this.clientProvider.get();\n    const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);\n    const currentToken = notEmpty(\n      this.authInformation?.jwtToken,\n      \"refreshToken called without a current JWT\",\n    );\n\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.refreshToken({\n          token: currentToken,\n          expiration: { seconds: ttl, nanos: 0 },\n        }).response\n      ).token;\n    } else {\n      const resp = cl.POST(\"/v1/auth/refresh\", {\n        body: { token: currentToken, expiration: `${ttl}s` },\n      });\n      return notEmpty((await resp).data, \"REST: empty response for refresh request\").token;\n    }\n  }\n\n  public async ping(): Promise<grpcTypes.MaintenanceAPI_Ping_Response> {\n    const cl = this.clientProvider.get();\n    let resp: grpcTypes.MaintenanceAPI_Ping_Response;\n    if (cl instanceof GrpcPlApiClient) {\n      resp = (await cl.ping({})).response;\n    } else {\n      // The REST ping response predates the `capabilities` field (proto field 9).\n      // Old servers omit it; treat absence as empty capability list.\n      const pingData = notEmpty(\n        (await cl.GET(\"/v1/ping\")).data,\n        \"REST: empty response for ping request\",\n      );\n      resp = {\n        ...(pingData as unknown as grpcTypes.MaintenanceAPI_Ping_Response),\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        capabilities: (pingData as any).capabilities ?? [],\n      };\n    }\n    this._serverInfo = resp;\n    return resp;\n  }\n\n  /** Cached Ping response. Always populated post-build(); throws if accessed earlier. */\n  public get serverInfo(): grpcTypes.MaintenanceAPI_Ping_Response {\n    if (!this._serverInfo) {\n      throw new Error(\"LLPlClient.serverInfo accessed before build() completed\");\n    }\n    return this._serverInfo;\n  }\n\n  /** Synchronous capability check against the cached Ping response. */\n  public hasCapability(capability: BackendCapability): boolean {\n    return hasCapability(this.serverInfo.capabilities, capability);\n  }\n\n  /** True if the backend implements the setDefaultColor TX request. */\n  public get supportsSetDefaultColor(): boolean {\n    return isVersionAtLeast(this.serverInfo.coreVersion, [3, 3, 0]);\n  }\n\n  /**\n   * True if the backend honors per-file `permissions` on workdir fill rules\n   * (PR #1830 in milaboratory/pl). Backends before this change ignore the\n   * requested mode and always land files at the canonical archive perm,\n   * making `exec.builder().writeFile/addFile({ writable: true })` a no-op.\n   *\n   * Tagged at 3.5.0 cut without the change, so [3, 5, 0] excludes the tagged\n   * release but includes dev builds past the tag (e.g. \"3.5.0-224-g0ca182\").\n   */\n  public get supportsWritableWorkdirFiles(): boolean {\n    return isAfterVersion(this.serverInfo.coreVersion, [3, 5, 0]);\n  }\n\n  /**\n   * Detects the best available wire protocol.\n   * If wireProtocol is explicitly configured, does nothing.\n   * Otherwise probes the current protocol via ping; if it fails, switches to the alternative.\n   */\n  private async detectOptimalWireProtocol() {\n    if (this.conf.wireProtocol) {\n      return;\n    }\n\n    // Each retry is:\n    //  - ping request timeout (100 to 3_000ms)\n    //  - backoff delay (30 to 500ms)\n    //\n    // 30 attempts are ~43 seconds of overall waiting time.\n    // Think twice on overall time this thing takes to complete when changing these parameters.\n    // It may block UI when connecting to the server and loading projects list.\n    const pingTimeoutFactor = 1.3;\n    const maxPingTimeoutMs = 3_000;\n    const retryOptions: RetryOptions = {\n      type: \"exponentialBackoff\",\n      maxAttempts: 30,\n      initialDelay: 30,\n      backoffMultiplier: 1.3,\n      jitter: 0.2,\n      maxDelay: 500,\n    };\n\n    let attempt = 1;\n    let pingTimeoutMs = 100;\n    await retry(\n      () => withTimeout(this.ping(), pingTimeoutMs),\n      retryOptions,\n      (e: unknown) => {\n        if (isAbortedError(e)) {\n          this.ops.logger?.info(\n            `Wire proto autodetect: ping timed out after ${pingTimeoutMs}ms: attempt=${attempt}, wire=${this._wireProto}`,\n          );\n\n          if (attempt % 2 === 0) {\n            // We have 2 wire protocols to check. Increase timeout each 2 attempts.\n            pingTimeoutMs = Math.min(\n              Math.round(pingTimeoutMs * pingTimeoutFactor),\n              maxPingTimeoutMs,\n            );\n          }\n        } else {\n          this.ops.logger?.info(\n            `Wire proto autodetect: ping failed: attempt=${attempt}, wire=${this._wireProto}, err=${String(e)}`,\n          );\n        }\n\n        attempt++;\n        const protocol = this._wireProto === \"grpc\" ? \"rest\" : \"grpc\";\n        this.ops.logger?.info(\n          `Wire protocol autodetect next attempt: will try wire '${protocol}' with timeout ${pingTimeoutMs}ms`,\n        );\n        this.initWireConnection(protocol);\n        return true;\n      },\n    );\n  }\n\n  public async license(): Promise<grpcTypes.MaintenanceAPI_License_Response> {\n    const cl = this.clientProvider.get();\n    if (cl instanceof GrpcPlApiClient) {\n      return (await cl.license({})).response;\n    } else {\n      const resp = notEmpty(\n        (await cl.GET(\"/v1/license\")).data,\n        \"REST: empty response for license request\",\n      );\n      return {\n        status: resp.status,\n        isOk: resp.isOk,\n        responseBody: Uint8Array.from(Buffer.from(resp.responseBody)),\n      };\n    }\n  }\n\n  public async authMethods(): Promise<grpcTypes.AuthAPI_ListMethods_Response> {\n    const cl = this.clientProvider.get();\n    let resp: grpcTypes.AuthAPI_ListMethods_Response;\n    if (cl instanceof GrpcPlApiClient) {\n      resp = (await cl.authMethods({})).response;\n    } else {\n      const wsResponse = notEmpty(\n        (await cl.GET(\"/v1/auth/methods\")).data,\n        \"REST: empty response for auth methods request\",\n      );\n      // OpenAPI schema flattens the protobuf oneof into `{ basic?, token? }`,\n      // while protobuf-ts models it as a discriminated union. Reshape per item.\n      resp = {\n        methods: (wsResponse.methods ?? []).map((m): grpcTypes.AuthAPI_ListMethods_MethodInfo => {\n          const base = { id: m.id, description: m.description };\n          if (m.basic !== undefined) {\n            return { ...base, method: { oneofKind: \"basic\", basic: m.basic } };\n          }\n          if (m.token !== undefined) {\n            return { ...base, method: { oneofKind: \"token\", token: m.token } };\n          }\n          if (m.sso !== undefined) {\n            return { ...base, method: { oneofKind: \"sso\", sso: m.sso } };\n          }\n          return { ...base, method: { oneofKind: undefined } };\n        }),\n      };\n    }\n\n    this._authMethodsSync = resp;\n    return resp;\n  }\n\n  public get authMethodsSync(): grpcTypes.AuthAPI_ListMethods_Response {\n    if (!this._authMethodsSync) {\n      throw new Error(\"LLPlClient.authMethodsSync accessed before build() completed\");\n    }\n    return this._authMethodsSync;\n  }\n\n  public async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<grpcTypes.AuthAPI_GetUserRoot_Response> {\n    const cl = this.clientProvider.get();\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.getUserRoot({\n          login: opts.login ?? \"\",\n          createIfNotExists: opts.createIfNotExists ?? false,\n        })\n      ).response;\n    } else {\n      const resp = notEmpty(\n        (\n          await cl.POST(\"/v1/auth/user-root\", {\n            body: {\n              login: opts.login ?? \"\",\n              createIfNotExists: opts.createIfNotExists ?? false,\n            },\n          })\n        ).data,\n        \"REST: empty response for getUserRoot request\",\n      );\n      return {\n        userRoot: resp.userRoot\n          ? {\n              resourceId: BigInt(resp.userRoot.resourceId),\n              resourceSignature: Uint8Array.from(\n                Buffer.from(resp.userRoot.resourceSignature, \"base64\"),\n              ),\n            }\n          : undefined,\n      };\n    }\n  }\n\n  public async listUserResources(\n    opts: { login?: string; startFrom?: bigint; limit?: number } = {},\n  ): Promise<grpcTypes.AuthAPI_ListUserResources_Response[]> {\n    const cl = this.clientProvider.get();\n\n    if (!(cl instanceof GrpcPlApiClient)) {\n      throw new Error(\"ListUserResources requires gRPC wire protocol; REST is not supported\");\n    }\n\n    const call = cl.listUserResources({\n      login: opts.login ?? \"\",\n      startFrom: opts.startFrom ?? 0n,\n      limit: opts.limit ?? 0,\n    });\n    const responses: grpcTypes.AuthAPI_ListUserResources_Response[] = [];\n    for await (const msg of call.responses) {\n      responses.push(msg);\n    }\n    return responses;\n  }\n\n  public async txSync(txId: bigint): Promise<void> {\n    const cl = this.clientProvider.get();\n    if (cl instanceof GrpcPlApiClient) {\n      await cl.txSync({ txId: BigInt(txId) });\n    } else {\n      await cl.POST(\"/v1/tx-sync\", { body: { txId: txId.toString() } });\n    }\n  }\n\n  createTx(rw: boolean, ops: PlCallOps = {}): LLPlTransaction {\n    return new LLPlTransaction((abortSignal) => {\n      let totalAbortSignal = abortSignal;\n      if (ops.abortSignal) totalAbortSignal = AbortSignal.any([totalAbortSignal, ops.abortSignal]);\n\n      const timeout =\n        ops.timeout ??\n        (rw ? this.conf.defaultRWTransactionTimeout : this.conf.defaultROTransactionTimeout);\n\n      const cl = this.clientProvider.get();\n      if (cl instanceof GrpcPlApiClient) {\n        return cl.tx({\n          abort: totalAbortSignal,\n          timeout,\n        });\n      }\n\n      const wireConn = this.wireConnection;\n      if (wireConn.type === \"rest\") {\n        // For REST/WebSocket protocol, timeout needs to be converted to AbortSignal\n        if (timeout !== undefined) {\n          totalAbortSignal = AbortSignal.any([totalAbortSignal, AbortSignal.timeout(timeout)]);\n        }\n\n        // The gRPC transport has the auth interceptor that already handles it, but here we need to refresh the auth information to be safe.\n        this.refreshAuthInformationIfNeeded();\n\n        const wsUrl = this.conf.ssl\n          ? `wss://${this.conf.hostAndPort}/v1/ws/tx`\n          : `ws://${this.conf.hostAndPort}/v1/ws/tx`;\n\n        return new WebSocketBiDiStream(\n          wsUrl,\n          (msg) => TxAPI_ClientMessage.toBinary(msg),\n          (data) => TxAPI_ServerMessage.fromBinary(new Uint8Array(data)),\n          {\n            abortSignal: totalAbortSignal,\n            jwtToken: this.authInformation?.jwtToken,\n            dispatcher: wireConn.Dispatcher,\n\n            onComplete: async (stream) =>\n              stream.requests.send({\n                // Ask server to gracefully close the stream on its side, if not done yet.\n                requestId: 0,\n                request: { oneofKind: \"streamClose\", streamClose: {} },\n              }),\n          },\n        );\n      }\n\n      throw new Error(`transactions are not supported for wire protocol ${this._wireProto}`);\n    });\n  }\n\n  /** Closes underlying transport */\n  public async close() {\n    if (this.wireConnection.type === \"grpc\") {\n      this.wireConnection.Transport.close();\n    } else {\n      // TODO: close all WS connections\n    }\n    await this.httpDispatcher.destroy();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqDA,SAAS,iBAAiB,SAAiB,QAA2C;CACpF,MAAM,QAAQ,yBAAyB,KAAK,QAAQ;AACpD,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,SAAmC;EAAC,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAC;AAC/F,MAAK,IAAI,IAAI,GAAG,IAAI,GAAG,IACrB,KAAI,OAAO,OAAO,OAAO,GAAI,QAAO,OAAO,KAAK,OAAO;AAEzD,QAAO;;AAeT,SAAS,eAAe,SAAiB,QAA2C;CAClF,MAAM,QAAQ,8BAA8B,KAAK,QAAQ;AACzD,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,SAAmC;EAAC,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAC;CAC/F,MAAM,SAAS,MAAM;AACrB,MAAK,IAAI,IAAI,GAAG,IAAI,GAAG,IACrB,KAAI,OAAO,OAAO,OAAO,GAAI,QAAO,OAAO,KAAK,OAAO;AAEzD,QAAO,WAAW;;AAGpB,IAAM,yBAAN,MAA2E;CACzE,SAAqC,KAAA;CAErC,YACE,UACA,mBACA;AAFiB,OAAA,WAAA;AACA,OAAA,oBAAA;;CAGnB,QAAqB;AACnB,OAAK,SAAS,KAAA;;CAGhB,MAAqB;AACnB,MAAI,KAAK,WAAW,KAAA,EAAW,MAAK,SAAS,KAAK,kBAAkB,KAAK,UAAU,CAAC;AACpF,SAAO,KAAK;;;;AAKhB,IAAa,aAAb,MAAa,WAAgD;;CAE3D;;CAEA;;CAEA;;CAEA;;CAEA;;CAGA;CACA;CAEA,UAAsC;CACtC;CAEA,aAAmC;CACnC;CAEA;CACA;CACA;CACA,YAAqE,EAAE;CAEvE;CAEA;CAEA,aAAoB,MAClB,iBACA,MAMI,EAAE,EACN;EAIA,MAAM,KAAK,IAAI,WAFb,OAAO,oBAAoB,WAAWA,eAAAA,kBAAkB,gBAAgB,GAAG,iBAE7C,IAAI;AAGpC,MAAI,IAAI,0BACN,OAAM,GAAG,2BAA2B;AAMtC,MAAI,CAAC,GAAG,YAAa,OAAM,GAAG,MAAM;AAGpC,MAAI,CAAC,GAAG,iBAAkB,OAAM,GAAG,aAAa;AAEhD,SAAO;;CAGT,YACE,MACA,MAKI,EAAE,EACN;AAPgB,OAAA,OAAA;AACC,OAAA,MAAA;EAOjB,MAAM,EAAE,MAAM,mBAAmB;AAEjC,MAAI,SAAS,KAAA,GAAW;AACtB,QAAK,mBAAmBC,aAAAA,qBACtB,KAAK,iBACL,KAAK,KAAK,sBACX;AACD,QAAK,kBAAkB,KAAK;AAC5B,QAAK,eAAe,KAAK;AACzB,QAAK,uBAAuB,KAAK;AACjC,QAAK,cAAc,KAAK;;AAG1B,OAAK,oBAAoB,EAAE;AAC3B,OAAK,mBAAmB,EAAE;AAC1B,OAAK,oBAAoB,EAAE;AAE3B,MAAI,SAAS,KAAA,GAAW;AACtB,QAAK,kBAAkB,KAAK,KAAK,2BAA2B,CAAC;AAC7D,QAAK,kBAAkB,KAAK,KAAK,2BAA2B,CAAC;;AAE/D,OAAK,kBAAkB,KAAKC,OAAAA,aAAa,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AACpE,OAAK,iBAAiB,KAAK,KAAK,2BAA2B,CAAC;AAC5D,OAAK,kBAAkB,KAAK,KAAK,4BAA4B,CAAC;AAE9D,OAAK,kBAAA,GAAA,wBAAA,uBAAuC,KAAK,KAAK,UAAU;AAChE,MAAI,KAAK,KAAK,aACZ,MAAK,aAAa,KAAK,KAAK;AAG9B,OAAK,mBAAmB,KAAK,WAAW;AAExC,MAAI,mBAAmB,KAAA,GAAW;AAChC,QAAK,iBAAiB;AACtB,kBAAe,KAAK,QAAQ;;AAG9B,OAAK,iBAAiB,KAAK,0BAA0B,aAAa;AAChE,OAAI,SAAS,SAAS,OACpB,QAAO,IAAIC,mBAAAA,eAAgB,SAAS,UAAU;OAE9C,QAAOC,cAAAA,aAAyB;IAC9B,aAAa,SAAS,OAAO;IAC7B,KAAK,SAAS,OAAO;IACrB,YAAY,SAAS;IACrB,aAAa,SAAS;IACvB,CAAC;IAEJ;;CAGJ,mBAA2B,UAAwB;AACjD,UAAQ,UAAR;GACE,KAAK;AACH,SAAK,oBAAoB;AACzB;GACF,KAAK;AACH,SAAK,mBAAmB,KAAK,IAAI,iBAAiB,MAAM;AACxD;GACF,QACE,GAAE,MAAa;AACb,UAAM,IAAI,MACR,8BAA8B,EAAY,iBAAiBC,eAAAA,yBAAyB,KAAK,KAAK,GAC/F;MACA,SAAS;;;CAIlB,qBAAmC;EACjC,MAAM,cAAA,GAAA,wBAAA,uBAAmC,KAAK,KAAK,WAAW,KAAK,kBAAkB;AACrF,OAAK,uBAAuB;GAC1B,MAAM;GACN,QAAQ,KAAK;GACb,YAAY;GACZ,aAAa,KAAK;GACnB,CAAC;;;;;;CAOJ,mBAA2B,MAAe;EACxC,MAAM,gBAA+B;GACnC,0BAA0B;GAC1B,0CAA0C;GAC1C,cAAc,KAAK;GACpB;AAED,MAAI,KAAM,eAAc,wCAAwCC,cAAAA,sBAAsB;EAStF,MAAM,cAA2B;GAC/B,MAAM,KAAK,KAAK;GAChB,SAAS,KAAK,KAAK;GACnB,oBAAoB,KAAK,KAAK,MAC1BC,cAAAA,mBAAmB,WAAW,GAC9BA,cAAAA,mBAAmB,gBAAgB;GACvC;GACD;EAED,MAAM,YACJ,OAAO,KAAK,KAAK,cAAc,WAAW,EAAE,KAAK,KAAK,KAAK,WAAW,GAAG,KAAK,KAAK;AAErF,MAAI,WAAW,KAAK;GAClB,MAAM,MAAM,IAAI,IAAI,UAAU,IAAI;AAClC,OAAI,UAAU,MAAM;IAClB,MAAM,UAAA,GAAA,gCAAA,eAAuB,UAAU,KAAK;AAC5C,QAAI,OAAO,WAAW,QACpB,OAAM,IAAI,MAAM,4BAA4B,OAAO,OAAiB,GAAG;AAEzE,QAAI,WAAW,OAAO;AACtB,QAAI,WAAW,OAAO;;AAExB,WAAQ,IAAI,aAAa,IAAI,UAAU;QAEvC,QAAO,QAAQ,IAAI;AAGrB,OAAK,uBAAuB;GAAE,MAAM;GAAQ,WAAW,IAAIC,4BAAAA,cAAc,YAAY;GAAE,CAAC;;CAG1F,uBAA+B,SAA+B;EAC5D,MAAM,UAAU,KAAK;AACrB,OAAK,YAAY;AACjB,OAAK,aAAa,QAAQ;AAG1B,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,UAAU,QAAQ,KAAK;GAC9C,MAAM,WAAW,KAAK,UAAU,GAAG,OAAO;AAC1C,OAAI,aAAa,KAAA,GAAW;AAE1B,SAAK,UAAU,OAAO,GAAG,EAAE;AAC3B;SAEA,UAAS,OAAO;;AAIpB,MAAI,YAAY,KAAA,KAAa,QAAQ,SAAS,OAAQ,SAAQ,UAAU,OAAO;;CAGjF,yBAAiC;;;;;;CAOjC,yBACE,mBAC4B;AAI5B,OAAK;AACL,MAAI,KAAK,0BAA0B,IAAI;AACrC,QAAK,IAAI,IAAI,GAAG,IAAI,KAAK,UAAU,QAAQ,IAEzC,KADiB,KAAK,UAAU,GAAG,OAAO,KACzB,KAAA,GAAW;AAC1B,SAAK,UAAU,OAAO,GAAG,EAAE;AAC3B;;AAGJ,QAAK,yBAAyB;;EAGhC,MAAM,WAAW,IAAI,6BAAqC,KAAK,WAAW,kBAAkB;AAC5F,OAAK,UAAU,KAAK,IAAI,QAAQ,SAAS,CAAC;AAC1C,SAAO;;CAGT,IAAW,iBAAiC;AAC1C,SAAO,KAAK;;CAGd,IAAW,eAAyC;AAClD,SAAO,KAAK;;;;;CAMd,IAAW,gBAAyB;AAClC,SAAO,KAAK,oBAAoB,KAAA;;;CAIlC,IAAW,WAA0B;AACnC,MAAI,CAAC,KAAK,cAAe,OAAM,IAAI,MAAM,8BAA8B;AACvE,MAAI,KAAK,iBAAiB,UAAU;AAClC,OAAI,KAAK,cAAc,UAAU,CAC/B,QAAOC,WAAAA,WAAW,KAAK,iBAAiB,SAAS,CAAC;AAEpD,UAAOA,WAAAA,WAAW,KAAK,iBAAiB,SAAS,CAAC,KAAK;QAClD,QAAO;;CAGhB,aAAqB,WAA+B;AAClD,UAAQ,eAAe;AACrB,OAAI,KAAK,YAAY,WAAW;AAC9B,SAAK,UAAU;AACf,QAAI,KAAK,mBAAmB,KAAA,EAAW,MAAK,eAAe,KAAK,QAAQ;AACxE,QAAI,cAAc,qBAAqB,KAAK,gBAAgB,KAAA,EAAW,MAAK,aAAa;;IAE3F;;CAGJ,IAAW,SAA6B;AACtC,SAAO,KAAK;;CAGd,wBAAyC;CAEzC,iCAA+C;AAC7C,MACE,KAAK,qBAAqB,KAAA,KAC1B,KAAK,KAAK,GAAG,KAAK,oBAClB,KAAK,yBACL,KAAK,YAAY,kBAEjB;AAGF,OAAK,wBAAwB;AAC7B,GAAM,YAAY;AAChB,OAAI;IACF,MAAM,MAAM,OAAO,KAAK,KAAK,eAAe;AAI5C,SAAK,kBAAkB,EAAE,UAHX,KAAK,cAAc,UAAU,GACvC,MAAM,KAAK,aAAa,EAAE,YAAY,KAAK,CAAC,GAC5C,MAAM,KAAK,YAAY,IAAI,EACW;AAC1C,SAAK,mBAAmBR,aAAAA,qBACtB,KAAK,iBACL,KAAK,KAAK,sBACX;AACD,QAAI,KAAK,aAAc,MAAK,aAAa,KAAK,gBAAgB;YACvD,GAAY;AACnB,QAAI,KAAK,qBAAsB,MAAK,qBAAqB,EAAE;aACnD;AACR,SAAK,wBAAwB;;MAE7B;;;;;;;CAQN,4BAAgD;AAC9C,SAAO,EACL,YAAY,OAAO,EAAE,SAAS,UAAU,UAAU,SAAS,eAAe;GACxE,MAAM,EAAE,MAAM,GAAG,eAAe;AAEhC,OAAI;IAAC;IAAK;IAAK;IAAI,CAAC,SAAS,SAAS,OAAO,EAAE;AAE7C,SAAK,aAAa,eAAe;AACjC,WAAO,IAAI,SAAS,MAAM;KAAE,GAAG;KAAY,QAAQ,SAAS;KAAQ,CAAC;;GAGvE,MAAM,UAAU,MAAMS,cAAAA,mBAAmB,SAAS;AAClD,OAAI,CAAC,QAAQ,MAEX,QAAO,IAAI,SAAS,QAAQ,YAAY,MAAM;IAAE,GAAG;IAAY,QAAQ,SAAS;IAAQ,CAAC;AAG3F,OAAI,OAAO,QAAQ,UAAU,SAE3B,QAAO,IAAI,SAAS,QAAQ,OAAO;IAAE,GAAG;IAAY,QAAQ,SAAS;IAAQ,CAAC;AAGhF,OAAI,QAAQ,MAAM,SAASC,aAAAA,KAAK,gBAC9B,MAAK,aAAa,kBAAkB;AAItC,UAAO,IAAI,SAAS,QAAQ,UAAU;IAAE,GAAG;IAAY,QAAQ,SAAS;IAAQ,CAAC;KAEpF;;;CAIH,6BAAkD;AAChD,UAAQ,SAAS,aAAa;AAC5B,UAAO,IAAIC,cAAAA,iBAAiB,SAAS,QAAQ,EAAE,EAC7C,QAAQ,UAAU,UAAU,SAAS;AACnC,SAAK,UAAU,EACb,kBAAkB,QAAQ,SAAS;AACjC,SAAI,OAAO,QAAQC,cAAAA,OAAW,gBAE5B,MAAK,aAAa,kBAAkB;AACtC,SAAI,OAAO,QAAQA,cAAAA,OAAW,YAE5B,MAAK,aAAa,eAAe;AACnC,UAAK,OAAO;OAEf,CAAC;MAEL,CAAC;;;CAIN,4BAA6E;AAC3E,UAAQ,aAAa;AACnB,WAAQ,SAAS,YAAY;AAC3B,QAAI,KAAK,iBAAiB,aAAa,KAAA,GAAW;AAEhD,aAAQ,UAAU;MAChB,GAAG,QAAQ;MACX,eAAe,YAAY,KAAK,gBAAgB;MACjD;AACD,UAAK,gCAAgC;;AAGvC,WAAO,SAAS,SAAS,QAAQ;;;;;CAMvC,4BAAiD;AAC/C,UAAQ,SAAS,aAAa;AAC5B,UAAO,IAAID,cAAAA,iBAAiB,SAAS,QAAQ,EAAE,EAC7C,QAAQ,UAAU,UAAU,SAAS;AACnC,QAAI,KAAK,iBAAiB,aAAa,KAAA,GAAW;AAChD,cAAS,IAAI,iBAAiB,YAAY,KAAK,gBAAgB,SAAS;AACxE,UAAK,gCAAgC;AACrC,UAAK,UAAU,SAAS;UAExB,MAAK,UAAU,SAAS;MAG7B,CAAC;;;CAIN,MAAa,YACX,YACA,SACiB;EACjB,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,OAAO,SAAS,QAAQE,YAAAA,aAAa;AAE3C,MAAI,cAAcX,mBAAAA,gBAAiB;GACjC,MAAM,OAA+B,EAAE;AACvC,OAAI,SAAS,cAAe,MAAK,gBAAgB,QAAQ;AACzD,WACE,MAAM,GAAG,YACP;IACE,YAAY;KAAE,SAAS;KAAY,OAAO;KAAG;IAC7C,eAAe;IAChB,EACD,EAAE,MAAM,CACT,CAAC,UACF;SACG;GACL,MAAM,UAAkC,EAAE;AAC1C,OAAI,SAAS,cAAe,SAAQ,gBAAgB,QAAQ;AAK5D,WAAA,GAAA,2BAAA,WAAiB,MAJJ,GAAG,KAAK,sBAAsB;IACzC,MAAM;KAAE,YAAY,GAAG,WAAW;KAAI,eAAe;KAAM;IAC3D;IACD,CAAC,EAC2B,MAAM,6CAA6C,CAAC;;;;CAKrF,MAAa,WACX,MACA,UACA,OAAqD,EAAE,EACtC;EACjB,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,MAAM,KAAK,cAAc,OAAO,KAAK,KAAK,eAAe;EAC/D,MAAM,OAAO,KAAK,QAAQW,YAAAA,aAAa;AAEvC,MAAI,cAAcX,mBAAAA,eAChB,SACE,MAAM,GAAG,MAAM;GACb,aAAa;IACX,WAAW;IACX,OAAO;KAAE,OAAO;KAAM;KAAU;IACjC;GACD,YAAY;IAAE,SAAS;IAAK,OAAO;IAAG;GACtC,eAAe;GAChB,CAAC,CAAC,UACH;MAYF,SAAA,GAAA,2BAAA,WAAiB,MAVJ,GAAG,KAAK,kBAAkB,EAGrC,MAAM;GACJ,OAAO;IAAE,OAAO;IAAM;IAAU;GAChC,YAAY,GAAG,IAAI;GACnB,eAAe;GAEhB,EACF,CAAC,EAC2B,MAAM,yCAAyC,CAAC;;;;CAMjF,MAAa,eACX,OACA,OAAqD,EAAE,EACtC;EACjB,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,MAAM,KAAK,cAAc,OAAO,KAAK,KAAK,eAAe;EAC/D,MAAM,OAAO,KAAK,QAAQW,YAAAA,aAAa;EACvC,MAAM,QAAQ,OAAO,UAAU,WAAW,OAAO,KAAK,OAAO,OAAO,GAAG;AAEvE,MAAI,cAAcX,mBAAAA,eAChB,SACE,MAAM,GAAG,MAAM;GACb,aAAa;IACX,WAAW;IACX,OAAO,EAAE,OAAO,OAAO;IACxB;GACD,YAAY;IAAE,SAAS;IAAK,OAAO;IAAG;GACtC,eAAe;GAChB,CAAC,CAAC,UACH;MAYF,SAAA,GAAA,2BAAA,WAAiB,MAVJ,GAAG,KAAK,kBAAkB,EAGrC,MAAM;GACJ,OAAO,EAAE,OAAO,OAAO,KAAK,MAAM,CAAC,SAAS,SAAS,EAAE;GACvD,YAAY,GAAG,IAAI;GACnB,eAAe;GAEhB,EACF,CAAC,EAC2B,MAAM,yCAAyC,CAAC;;;CAKjF,MAAa,aAAa,OAAgC,EAAE,EAAmB;EAC7E,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,MAAM,KAAK,cAAc,OAAO,KAAK,KAAK,eAAe;EAC/D,MAAM,gBAAA,GAAA,2BAAA,UACJ,KAAK,iBAAiB,UACtB,4CACD;AAED,MAAI,cAAcA,mBAAAA,eAChB,SACE,MAAM,GAAG,aAAa;GACpB,OAAO;GACP,YAAY;IAAE,SAAS;IAAK,OAAO;IAAG;GACvC,CAAC,CAAC,UACH;MAKF,SAAA,GAAA,2BAAA,WAAiB,MAHJ,GAAG,KAAK,oBAAoB,EACvC,MAAM;GAAE,OAAO;GAAc,YAAY,GAAG,IAAI;GAAI,EACrD,CAAC,EAC2B,MAAM,2CAA2C,CAAC;;CAInF,MAAa,OAAwD;EACnE,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,IAAI;AACJ,MAAI,cAAcA,mBAAAA,eAChB,SAAQ,MAAM,GAAG,KAAK,EAAE,CAAC,EAAE;OACtB;GAGL,MAAM,YAAA,GAAA,2BAAA,WACH,MAAM,GAAG,IAAI,WAAW,EAAE,MAC3B,wCACD;AACD,UAAO;IACL,GAAI;IAEJ,cAAe,SAAiB,gBAAgB,EAAE;IACnD;;AAEH,OAAK,cAAc;AACnB,SAAO;;;CAIT,IAAW,aAAqD;AAC9D,MAAI,CAAC,KAAK,YACR,OAAM,IAAI,MAAM,0DAA0D;AAE5E,SAAO,KAAK;;;CAId,cAAqB,YAAwC;AAC3D,SAAOY,qBAAAA,cAAc,KAAK,WAAW,cAAc,WAAW;;;CAIhE,IAAW,0BAAmC;AAC5C,SAAO,iBAAiB,KAAK,WAAW,aAAa;GAAC;GAAG;GAAG;GAAE,CAAC;;;;;;;;;;;CAYjE,IAAW,+BAAwC;AACjD,SAAO,eAAe,KAAK,WAAW,aAAa;GAAC;GAAG;GAAG;GAAE,CAAC;;;;;;;CAQ/D,MAAc,4BAA4B;AACxC,MAAI,KAAK,KAAK,aACZ;EAUF,MAAM,oBAAoB;EAC1B,MAAM,mBAAmB;EACzB,MAAM,eAA6B;GACjC,MAAM;GACN,aAAa;GACb,cAAc;GACd,mBAAmB;GACnB,QAAQ;GACR,UAAU;GACX;EAED,IAAI,UAAU;EACd,IAAI,gBAAgB;AACpB,SAAA,GAAA,2BAAA,cAAA,GAAA,2BAAA,aACoB,KAAK,MAAM,EAAE,cAAc,EAC7C,eACC,MAAe;AACd,OAAIC,eAAAA,eAAe,EAAE,EAAE;AACrB,SAAK,IAAI,QAAQ,KACf,+CAA+C,cAAc,cAAc,QAAQ,SAAS,KAAK,aAClG;AAED,QAAI,UAAU,MAAM,EAElB,iBAAgB,KAAK,IACnB,KAAK,MAAM,gBAAgB,kBAAkB,EAC7C,iBACD;SAGH,MAAK,IAAI,QAAQ,KACf,+CAA+C,QAAQ,SAAS,KAAK,WAAW,QAAQ,OAAO,EAAE,GAClG;AAGH;GACA,MAAM,WAAW,KAAK,eAAe,SAAS,SAAS;AACvD,QAAK,IAAI,QAAQ,KACf,yDAAyD,SAAS,iBAAiB,cAAc,IAClG;AACD,QAAK,mBAAmB,SAAS;AACjC,UAAO;IAEV;;CAGH,MAAa,UAA8D;EACzE,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,MAAI,cAAcb,mBAAAA,eAChB,SAAQ,MAAM,GAAG,QAAQ,EAAE,CAAC,EAAE;OACzB;GACL,MAAM,QAAA,GAAA,2BAAA,WACH,MAAM,GAAG,IAAI,cAAc,EAAE,MAC9B,2CACD;AACD,UAAO;IACL,QAAQ,KAAK;IACb,MAAM,KAAK;IACX,cAAc,WAAW,KAAK,OAAO,KAAK,KAAK,aAAa,CAAC;IAC9D;;;CAIL,MAAa,cAA+D;EAC1E,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,IAAI;AACJ,MAAI,cAAcA,mBAAAA,eAChB,SAAQ,MAAM,GAAG,YAAY,EAAE,CAAC,EAAE;MAQlC,QAAO,EACL,WAAA,GAAA,2BAAA,WANC,MAAM,GAAG,IAAI,mBAAmB,EAAE,MACnC,gDACD,CAIsB,WAAW,EAAE,EAAE,KAAK,MAAgD;GACvF,MAAM,OAAO;IAAE,IAAI,EAAE;IAAI,aAAa,EAAE;IAAa;AACrD,OAAI,EAAE,UAAU,KAAA,EACd,QAAO;IAAE,GAAG;IAAM,QAAQ;KAAE,WAAW;KAAS,OAAO,EAAE;KAAO;IAAE;AAEpE,OAAI,EAAE,UAAU,KAAA,EACd,QAAO;IAAE,GAAG;IAAM,QAAQ;KAAE,WAAW;KAAS,OAAO,EAAE;KAAO;IAAE;AAEpE,OAAI,EAAE,QAAQ,KAAA,EACZ,QAAO;IAAE,GAAG;IAAM,QAAQ;KAAE,WAAW;KAAO,KAAK,EAAE;KAAK;IAAE;AAE9D,UAAO;IAAE,GAAG;IAAM,QAAQ,EAAE,WAAW,KAAA,GAAW;IAAE;IACpD,EACH;AAGH,OAAK,mBAAmB;AACxB,SAAO;;CAGT,IAAW,kBAA0D;AACnE,MAAI,CAAC,KAAK,iBACR,OAAM,IAAI,MAAM,+DAA+D;AAEjF,SAAO,KAAK;;CAGd,MAAa,YACX,OAAwD,EAAE,EACT;EACjD,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,MAAI,cAAcA,mBAAAA,eAChB,SACE,MAAM,GAAG,YAAY;GACnB,OAAO,KAAK,SAAS;GACrB,mBAAmB,KAAK,qBAAqB;GAC9C,CAAC,EACF;OACG;GACL,MAAM,QAAA,GAAA,2BAAA,WAEF,MAAM,GAAG,KAAK,sBAAsB,EAClC,MAAM;IACJ,OAAO,KAAK,SAAS;IACrB,mBAAmB,KAAK,qBAAqB;IAC9C,EACF,CAAC,EACF,MACF,+CACD;AACD,UAAO,EACL,UAAU,KAAK,WACX;IACE,YAAY,OAAO,KAAK,SAAS,WAAW;IAC5C,mBAAmB,WAAW,KAC5B,OAAO,KAAK,KAAK,SAAS,mBAAmB,SAAS,CACvD;IACF,GACD,KAAA,GACL;;;CAIL,MAAa,kBACX,OAA+D,EAAE,EACR;EACzD,MAAM,KAAK,KAAK,eAAe,KAAK;AAEpC,MAAI,EAAE,cAAcA,mBAAAA,gBAClB,OAAM,IAAI,MAAM,uEAAuE;EAGzF,MAAM,OAAO,GAAG,kBAAkB;GAChC,OAAO,KAAK,SAAS;GACrB,WAAW,KAAK,aAAa;GAC7B,OAAO,KAAK,SAAS;GACtB,CAAC;EACF,MAAM,YAA4D,EAAE;AACpE,aAAW,MAAM,OAAO,KAAK,UAC3B,WAAU,KAAK,IAAI;AAErB,SAAO;;CAGT,MAAa,OAAO,MAA6B;EAC/C,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,MAAI,cAAcA,mBAAAA,eAChB,OAAM,GAAG,OAAO,EAAE,MAAM,OAAO,KAAK,EAAE,CAAC;MAEvC,OAAM,GAAG,KAAK,eAAe,EAAE,MAAM,EAAE,MAAM,KAAK,UAAU,EAAE,EAAE,CAAC;;CAIrE,SAAS,IAAa,MAAiB,EAAE,EAAmB;AAC1D,SAAO,IAAIc,uBAAAA,iBAAiB,gBAAgB;GAC1C,IAAI,mBAAmB;AACvB,OAAI,IAAI,YAAa,oBAAmB,YAAY,IAAI,CAAC,kBAAkB,IAAI,YAAY,CAAC;GAE5F,MAAM,UACJ,IAAI,YACH,KAAK,KAAK,KAAK,8BAA8B,KAAK,KAAK;GAE1D,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,OAAI,cAAcd,mBAAAA,eAChB,QAAO,GAAG,GAAG;IACX,OAAO;IACP;IACD,CAAC;GAGJ,MAAM,WAAW,KAAK;AACtB,OAAI,SAAS,SAAS,QAAQ;AAE5B,QAAI,YAAY,KAAA,EACd,oBAAmB,YAAY,IAAI,CAAC,kBAAkB,YAAY,QAAQ,QAAQ,CAAC,CAAC;AAItF,SAAK,gCAAgC;AAMrC,WAAO,IAAIe,yBAAAA,oBAJG,KAAK,KAAK,MACpB,SAAS,KAAK,KAAK,YAAY,aAC/B,QAAQ,KAAK,KAAK,YAAY,aAI/B,QAAQC,YAAAA,oBAAoB,SAAS,IAAI,GACzC,SAASC,YAAAA,oBAAoB,WAAW,IAAI,WAAW,KAAK,CAAC,EAC9D;KACE,aAAa;KACb,UAAU,KAAK,iBAAiB;KAChC,YAAY,SAAS;KAErB,YAAY,OAAO,WACjB,OAAO,SAAS,KAAK;MAEnB,WAAW;MACX,SAAS;OAAE,WAAW;OAAe,aAAa,EAAE;OAAE;MACvD,CAAC;KACL,CACF;;AAGH,SAAM,IAAI,MAAM,oDAAoD,KAAK,aAAa;IACtF;;;CAIJ,MAAa,QAAQ;AACnB,MAAI,KAAK,eAAe,SAAS,OAC/B,MAAK,eAAe,UAAU,OAAO;AAIvC,QAAM,KAAK,eAAe,SAAS"}
+{"version":3,"file":"ll_client.cjs","names":["plAddressToConfig","inferAuthRefreshTime","interceptors","GrpcPlApiClient","createClient","SUPPORTED_WIRE_PROTOCOLS","compressionAlgorithms","ChannelCredentials","GrpcTransport","parsePlJwt","parseResponseError","Code","InterceptingCall","GrpcStatus","AuthAPI_Role","hasCapability","isAbortedError","LLPlTransaction","WebSocketBiDiStream","TxAPI_ClientMessage","TxAPI_ServerMessage"],"sources":["../../src/core/ll_client.ts"],"sourcesContent":["import { PlatformClient as GrpcPlApiClient } from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.client\";\nimport type { ClientOptions, Interceptor } from \"@grpc/grpc-js\";\nimport {\n  ChannelCredentials,\n  InterceptingCall,\n  status as GrpcStatus,\n  compressionAlgorithms,\n} from \"@grpc/grpc-js\";\nimport type {\n  AuthInformation,\n  AuthOps,\n  PlClientConfig,\n  PlConnectionStatus,\n  PlConnectionStatusListener,\n} from \"./config\";\nimport { plAddressToConfig, type wireProtocol, SUPPORTED_WIRE_PROTOCOLS } from \"./config\";\nimport type { GrpcOptions } from \"@protobuf-ts/grpc-transport\";\nimport { GrpcTransport } from \"@protobuf-ts/grpc-transport\";\nimport { LLPlTransaction } from \"./ll_transaction\";\nimport { setResourceSignaturesRequired } from \"./types\";\nimport { parsePlJwt } from \"../util/pl\";\nimport { type Dispatcher, interceptors } from \"undici\";\nimport type { Middleware } from \"openapi-fetch\";\nimport { inferAuthRefreshTime } from \"./auth\";\nimport { hasCapability, type BackendCapability } from \"./capabilities\";\nimport { defaultHttpDispatcher } from \"@milaboratories/pl-http\";\nimport type { WireClientProvider, WireClientProviderFactory, WireConnection } from \"./wire\";\nimport { parseHttpAuth } from \"@milaboratories/pl-model-common\";\nimport type * as grpcTypes from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport {\n  type PlApiPaths,\n  type PlRestClientType,\n  createClient,\n  parseResponseError,\n} from \"../proto-rest\";\nimport { notEmpty, retry, withTimeout, type RetryOptions } from \"@milaboratories/ts-helpers\";\nimport { Code } from \"../proto-grpc/google/rpc/code\";\nimport { WebSocketBiDiStream } from \"./websocket_stream\";\nimport {\n  AuthAPI_Role,\n  TxAPI_ClientMessage,\n  TxAPI_ServerMessage,\n} from \"../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api\";\nimport type { MiLogger } from \"@milaboratories/ts-helpers\";\nimport { isAbortedError } from \"./errors\";\n\nexport interface PlCallOps {\n  timeout?: number;\n  abortSignal?: AbortSignal;\n}\n\n// Parses leading \"<major>.<minor>.<patch>\" from a version string like\n// \"3.1.1\" or \"3.1.1-rc1\" and returns true if the parsed version is >= target.\n// Returns false for unparseable versions (safer to assume an old backend).\nfunction isVersionAtLeast(version: string, target: [number, number, number]): boolean {\n  const match = /^v?(\\d+)\\.(\\d+)\\.(\\d+)/.exec(version);\n  if (!match) return false;\n  const parsed: [number, number, number] = [Number(match[1]), Number(match[2]), Number(match[3])];\n  for (let i = 0; i < 3; i++) {\n    if (parsed[i] !== target[i]) return parsed[i] > target[i];\n  }\n  return true;\n}\n\n// Returns true iff `version` is strictly after the release tag `target`. Dev\n// builds (`git describe`-style, e.g. \"3.5.0-224-g0ca182\") are considered\n// AFTER the matching release tag — they include commits past the tag and so\n// have any change merged after it. Released versions with the same triplet\n// return false (we want the tag itself to be excluded).\n//\n// Examples for target [3,5,0]:\n//   \"3.5.0\"              → false (the tagged release)\n//   \"3.5.0-224-g0ca182\"  → true  (dev build past the tag)\n//   \"3.5.1\"              → true\n//   \"3.4.9\"              → false\n// Returns false for unparseable versions.\nfunction isAfterVersion(version: string, target: [number, number, number]): boolean {\n  const match = /^v?(\\d+)\\.(\\d+)\\.(\\d+)(.*)$/.exec(version);\n  if (!match) return false;\n  const parsed: [number, number, number] = [Number(match[1]), Number(match[2]), Number(match[3])];\n  const suffix = match[4];\n  for (let i = 0; i < 3; i++) {\n    if (parsed[i] !== target[i]) return parsed[i] > target[i];\n  }\n  return suffix !== \"\";\n}\n\nclass WireClientProviderImpl<Client> implements WireClientProvider<Client> {\n  private client: Client | undefined = undefined;\n\n  constructor(\n    private readonly wireOpts: () => WireConnection,\n    private readonly clientConstructor: (wireOpts: WireConnection) => Client,\n  ) {}\n\n  public reset(): void {\n    this.client = undefined;\n  }\n\n  public get(): Client {\n    if (this.client === undefined) this.client = this.clientConstructor(this.wireOpts());\n    return this.client;\n  }\n}\n\n/** Abstract out low level networking and authorization details */\nexport class LLPlClient implements WireClientProviderFactory {\n  /** Initial authorization information */\n  private authInformation?: AuthInformation;\n  /** Will be executed by the client when it is required */\n  private readonly onAuthUpdate?: (newInfo: AuthInformation) => void;\n  /** Will be executed if auth-related error happens during normal client operation */\n  private readonly onAuthError?: () => void;\n  /** Will be executed by the client when it is required */\n  private readonly onAuthRefreshProblem?: (error: unknown) => void;\n  /** Threshold after which auth info refresh is required */\n  private refreshTimestamp?: number;\n\n  /** Cached Ping response. Populated by build() before it returns; refreshed by every later ping(). */\n  private _serverInfo?: grpcTypes.MaintenanceAPI_Ping_Response;\n  private _authMethodsSync?: grpcTypes.AuthAPI_ListMethods_Response;\n\n  private _status: PlConnectionStatus = \"OK\";\n  private readonly statusListener?: PlConnectionStatusListener;\n\n  private _wireProto: wireProtocol = \"grpc\";\n  private _wireConn!: WireConnection;\n\n  private readonly _restInterceptors: Dispatcher.DispatcherComposeInterceptor[];\n  private readonly _restMiddlewares: Middleware[];\n  private readonly _grpcInterceptors: Interceptor[];\n  private readonly providers: WeakRef<WireClientProviderImpl<any>>[] = [];\n\n  public readonly clientProvider: WireClientProvider<PlRestClientType | GrpcPlApiClient>;\n\n  public readonly httpDispatcher: Dispatcher;\n\n  public static async build(\n    configOrAddress: PlClientConfig | string,\n    ops: {\n      auth?: AuthOps;\n      statusListener?: PlConnectionStatusListener;\n      shouldUseGzip?: boolean;\n      logger?: MiLogger;\n      useAutoDetectWireProtocol?: boolean;\n    } = {},\n  ) {\n    const conf =\n      typeof configOrAddress === \"string\" ? plAddressToConfig(configOrAddress) : configOrAddress;\n\n    const pl = new LLPlClient(conf, ops);\n\n    // FIXME(rfiskov)[MILAB-5275]: Investigate why autodetect randomly fails; temporary turn it off.\n    if (ops.useAutoDetectWireProtocol) {\n      await pl.detectOptimalWireProtocol();\n    }\n\n    // Guarantee a ping happened so capability-gated paths (login, refresh) can branch synchronously.\n    // In the autodetect path the loop's last successful ping already populated _serverInfo via the\n    // side-effect in ping(); this fallback covers the path where autodetect is disabled.\n    if (!pl._serverInfo) await pl.ping();\n\n    // Install the process-global signature-strictness flag based on backend version.\n    setResourceSignaturesRequired(pl.supportsResourceSignatures);\n\n    // Guarantee authMethods happened so client can make weighted decision on which auth method to use.\n    if (!pl._authMethodsSync) await pl.authMethods();\n\n    return pl;\n  }\n\n  private constructor(\n    public readonly conf: PlClientConfig,\n    private readonly ops: {\n      auth?: AuthOps;\n      statusListener?: PlConnectionStatusListener;\n      shouldUseGzip?: boolean;\n      logger?: MiLogger;\n    } = {},\n  ) {\n    const { auth, statusListener } = ops;\n\n    if (auth !== undefined) {\n      this.refreshTimestamp = inferAuthRefreshTime(\n        auth.authInformation,\n        this.conf.authMaxRefreshSeconds,\n      );\n      this.authInformation = auth.authInformation;\n      this.onAuthUpdate = auth.onUpdate;\n      this.onAuthRefreshProblem = auth.onUpdateError;\n      this.onAuthError = auth.onAuthError;\n    }\n\n    this._restInterceptors = [];\n    this._restMiddlewares = [];\n    this._grpcInterceptors = [];\n\n    if (auth !== undefined) {\n      this._restInterceptors.push(this.createRestAuthInterceptor());\n      this._grpcInterceptors.push(this.createGrpcAuthInterceptor());\n    }\n    this._restInterceptors.push(interceptors.retry({ statusCodes: [] })); // Handle errors with openapi-fetch middleware.\n    this._restMiddlewares.push(this.createRestErrorMiddleware());\n    this._grpcInterceptors.push(this.createGrpcErrorInterceptor());\n\n    this.httpDispatcher = defaultHttpDispatcher(this.conf.httpProxy);\n    if (this.conf.wireProtocol) {\n      this._wireProto = this.conf.wireProtocol;\n    }\n\n    this.initWireConnection(this._wireProto);\n\n    if (statusListener !== undefined) {\n      this.statusListener = statusListener;\n      statusListener(this._status);\n    }\n\n    this.clientProvider = this.createWireClientProvider((wireConn) => {\n      if (wireConn.type === \"grpc\") {\n        return new GrpcPlApiClient(wireConn.Transport);\n      } else {\n        return createClient<PlApiPaths>({\n          hostAndPort: wireConn.Config.hostAndPort,\n          ssl: wireConn.Config.ssl,\n          dispatcher: wireConn.Dispatcher,\n          middlewares: wireConn.Middlewares,\n        });\n      }\n    });\n  }\n\n  private initWireConnection(protocol: wireProtocol) {\n    switch (protocol) {\n      case \"rest\":\n        this.initRestConnection();\n        return;\n      case \"grpc\":\n        this.initGrpcConnection(this.ops.shouldUseGzip ?? false);\n        return;\n      default:\n        ((v: never) => {\n          throw new Error(\n            `Unsupported wire protocol '${v as string}'. Use one of: ${SUPPORTED_WIRE_PROTOCOLS.join(\", \")}`,\n          );\n        })(protocol);\n    }\n  }\n\n  private initRestConnection(): void {\n    const dispatcher = defaultHttpDispatcher(this.conf.grpcProxy, this._restInterceptors);\n    this._replaceWireConnection({\n      type: \"rest\",\n      Config: this.conf,\n      Dispatcher: dispatcher,\n      Middlewares: this._restMiddlewares,\n    });\n  }\n\n  /**\n   * Initializes (or reinitializes) _grpcTransport\n   * @param gzip - whether to enable gzip compression\n   */\n  private initGrpcConnection(gzip: boolean) {\n    const clientOptions: ClientOptions = {\n      \"grpc.keepalive_time_ms\": 30_000, // 30 seconds\n      \"grpc.service_config_disable_resolution\": 1, // Disable DNS TXT lookups for service config\n      interceptors: this._grpcInterceptors,\n    };\n\n    if (gzip) clientOptions[\"grpc.default_compression_algorithm\"] = compressionAlgorithms.gzip;\n\n    //\n    // Leaving it here for now\n    // https://github.com/grpc/grpc-node/issues/2788\n    //\n    // We should implement message pooling algorithm to overcome hardcoded NO_DELAY behaviour\n    // of HTTP/2 and allow our small messages to batch together.\n    //\n    const grpcOptions: GrpcOptions = {\n      host: this.conf.hostAndPort,\n      timeout: this.conf.defaultRequestTimeout,\n      channelCredentials: this.conf.ssl\n        ? ChannelCredentials.createSsl()\n        : ChannelCredentials.createInsecure(),\n      clientOptions,\n    };\n\n    const grpcProxy =\n      typeof this.conf.grpcProxy === \"string\" ? { url: this.conf.grpcProxy } : this.conf.grpcProxy;\n\n    if (grpcProxy?.url) {\n      const url = new URL(grpcProxy.url);\n      if (grpcProxy.auth) {\n        const parsed = parseHttpAuth(grpcProxy.auth);\n        if (parsed.scheme !== \"Basic\") {\n          throw new Error(`Unsupported auth scheme: ${parsed.scheme as string}.`);\n        }\n        url.username = parsed.username;\n        url.password = parsed.password;\n      }\n      process.env.grpc_proxy = url.toString();\n    } else {\n      delete process.env.grpc_proxy;\n    }\n\n    this._replaceWireConnection({ type: \"grpc\", Transport: new GrpcTransport(grpcOptions) });\n  }\n\n  private _replaceWireConnection(newConn: WireConnection): void {\n    const oldConn = this._wireConn;\n    this._wireConn = newConn;\n    this._wireProto = newConn.type;\n\n    // Reset all providers to let them reinitialize their clients\n    for (let i = 0; i < this.providers.length; i++) {\n      const provider = this.providers[i].deref();\n      if (provider === undefined) {\n        // at the same time we need to remove providers that are no longer valid\n        this.providers.splice(i, 1);\n        i--;\n      } else {\n        provider.reset();\n      }\n    }\n\n    if (oldConn !== undefined && oldConn.type === \"grpc\") oldConn.Transport.close();\n  }\n\n  private providerCleanupCounter = 0;\n\n  /**\n   * Creates a provider for a grpc client. Returned provider will create fresh client whenever the underlying transport is reset.\n   *\n   * @param clientConstructor - a factory function that creates a grpc client\n   */\n  public createWireClientProvider<Client>(\n    clientConstructor: (transport: WireConnection) => Client,\n  ): WireClientProvider<Client> {\n    // We need to cleanup providers periodically to avoid memory leaks.\n    // This is a simple heuristic to avoid memory leaks.\n    // We could use a more sophisticated algorithm, but this is good enough for now.\n    this.providerCleanupCounter++;\n    if (this.providerCleanupCounter >= 16) {\n      for (let i = 0; i < this.providers.length; i++) {\n        const provider = this.providers[i].deref();\n        if (provider === undefined) {\n          this.providers.splice(i, 1);\n          i--;\n        }\n      }\n      this.providerCleanupCounter = 0;\n    }\n\n    const provider = new WireClientProviderImpl<Client>(() => this._wireConn, clientConstructor);\n    this.providers.push(new WeakRef(provider));\n    return provider;\n  }\n\n  public get wireConnection(): WireConnection {\n    return this._wireConn;\n  }\n\n  public get wireProtocol(): wireProtocol | undefined {\n    return this._wireProto;\n  }\n\n  /** Returns true if client is authenticated. Even with anonymous auth information\n   * connection is considered authenticated. Unauthenticated clients are used for\n   * login and similar tasks, see {@link UnauthenticatedPlClient}. */\n  public get authenticated(): boolean {\n    return this.authInformation !== undefined;\n  }\n\n  /** null means anonymous connection */\n  public get authUser(): string | null {\n    if (!this.authenticated) throw new Error(\"Client is not authenticated\");\n    if (this.authInformation?.jwtToken) {\n      if (this.hasCapability(\"auth:v2\")) {\n        return parsePlJwt(this.authInformation?.jwtToken).sub;\n      }\n      return parsePlJwt(this.authInformation?.jwtToken).user.login;\n    } else return null;\n  }\n\n  private updateStatus(newStatus: PlConnectionStatus) {\n    process.nextTick(() => {\n      if (this._status !== newStatus) {\n        this._status = newStatus;\n        if (this.statusListener !== undefined) this.statusListener(this._status);\n        if (newStatus === \"Unauthenticated\" && this.onAuthError !== undefined) this.onAuthError();\n      }\n    });\n  }\n\n  public get status(): PlConnectionStatus {\n    return this._status;\n  }\n\n  private authRefreshInProgress: boolean = false;\n\n  private refreshAuthInformationIfNeeded(): void {\n    if (\n      this.refreshTimestamp === undefined ||\n      Date.now() < this.refreshTimestamp ||\n      this.authRefreshInProgress ||\n      this._status === \"Unauthenticated\"\n    )\n      return;\n\n    // Running refresh in background`\n    this.authRefreshInProgress = true;\n    void (async () => {\n      try {\n        const ttl = BigInt(this.conf.authTTLSeconds);\n        const token = this.hasCapability(\"auth:v2\")\n          ? await this.refreshToken({ ttlSeconds: ttl })\n          : await this.getJwtToken(ttl);\n        this.authInformation = { jwtToken: token };\n        this.refreshTimestamp = inferAuthRefreshTime(\n          this.authInformation,\n          this.conf.authMaxRefreshSeconds,\n        );\n        if (this.onAuthUpdate) this.onAuthUpdate(this.authInformation);\n      } catch (e: unknown) {\n        if (this.onAuthRefreshProblem) this.onAuthRefreshProblem(e);\n      } finally {\n        this.authRefreshInProgress = false;\n      }\n    })();\n  }\n\n  /**\n   * Creates middleware that parses error responses and handles them centrally.\n   * This middleware runs before openapi-fetch parses the response, so we need to\n   * manually parse the response body for error responses.\n   */\n  private createRestErrorMiddleware(): Middleware {\n    return {\n      onResponse: async ({ request: _request, response, options: _options }) => {\n        const { body, ...resOptions } = response;\n\n        if ([502, 503, 504].includes(response.status)) {\n          // Service unavailable, bad gateway, gateway timeout\n          this.updateStatus(\"Disconnected\");\n          return new Response(body, { ...resOptions, status: response.status });\n        }\n\n        const respErr = await parseResponseError(response);\n        if (!respErr.error) {\n          // No error: nice!\n          return new Response(respErr.origBody ?? body, { ...resOptions, status: response.status });\n        }\n\n        if (typeof respErr.error === \"string\") {\n          // Non-standard error or normal response: let later middleware to deal wit it.\n          return new Response(respErr.error, { ...resOptions, status: response.status });\n        }\n\n        if (respErr.error.code === Code.UNAUTHENTICATED) {\n          this.updateStatus(\"Unauthenticated\");\n        }\n\n        // Let later middleware to deal with standard gRPC error.\n        return new Response(respErr.origBody, { ...resOptions, status: response.status });\n      },\n    };\n  }\n\n  /** Detects certain errors and update client status accordingly when using GRPC wire connection */\n  private createGrpcErrorInterceptor(): Interceptor {\n    return (options, nextCall) => {\n      return new InterceptingCall(nextCall(options), {\n        start: (metadata, listener, next) => {\n          next(metadata, {\n            onReceiveStatus: (status, next) => {\n              if (status.code == GrpcStatus.UNAUTHENTICATED)\n                // (!!!) don't change to \"===\"\n                this.updateStatus(\"Unauthenticated\");\n              if (status.code == GrpcStatus.UNAVAILABLE)\n                // (!!!) don't change to \"===\"\n                this.updateStatus(\"Disconnected\");\n              next(status);\n            },\n          });\n        },\n      });\n    };\n  }\n\n  private createRestAuthInterceptor(): Dispatcher.DispatcherComposeInterceptor {\n    return (dispatch) => {\n      return (options, handler) => {\n        if (this.authInformation?.jwtToken !== undefined) {\n          // TODO: check this magic really works and gets called\n          options.headers = {\n            ...options.headers,\n            authorization: \"Bearer \" + this.authInformation.jwtToken,\n          };\n          this.refreshAuthInformationIfNeeded();\n        }\n\n        return dispatch(options, handler);\n      };\n    };\n  }\n\n  /** Injects authentication information if needed */\n  private createGrpcAuthInterceptor(): Interceptor {\n    return (options, nextCall) => {\n      return new InterceptingCall(nextCall(options), {\n        start: (metadata, listener, next) => {\n          if (this.authInformation?.jwtToken !== undefined) {\n            metadata.set(\"authorization\", \"Bearer \" + this.authInformation.jwtToken);\n            this.refreshAuthInformationIfNeeded();\n            next(metadata, listener);\n          } else {\n            next(metadata, listener);\n          }\n        },\n      });\n    };\n  }\n\n  public async getJwtToken(\n    ttlSeconds: bigint,\n    options?: { authorization?: string; role?: AuthAPI_Role },\n  ): Promise<string> {\n    const cl = this.clientProvider.get();\n    const role = options?.role ?? AuthAPI_Role.UNSPECIFIED;\n\n    if (cl instanceof GrpcPlApiClient) {\n      const meta: Record<string, string> = {};\n      if (options?.authorization) meta.authorization = options.authorization;\n      return (\n        await cl.getJWTToken(\n          {\n            expiration: { seconds: ttlSeconds, nanos: 0 },\n            requestedRole: role,\n          },\n          { meta },\n        ).response\n      ).token;\n    } else {\n      const headers: Record<string, string> = {};\n      if (options?.authorization) headers.authorization = options.authorization;\n      const resp = cl.POST(\"/v1/auth/jwt-token\", {\n        body: { expiration: `${ttlSeconds}s`, requestedRole: role },\n        headers,\n      });\n      return notEmpty((await resp).data, \"REST: empty response for JWT token request\").token;\n    }\n  }\n\n  /** Login via username/password. Returns a fresh JWT. Backend creates a new session per call. */\n  public async loginBasic(\n    user: string,\n    password: string,\n    opts: { ttlSeconds?: bigint; role?: AuthAPI_Role } = {},\n  ): Promise<string> {\n    const cl = this.clientProvider.get();\n    const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);\n    const role = opts.role ?? AuthAPI_Role.UNSPECIFIED;\n\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.login({\n          credentials: {\n            oneofKind: \"basic\",\n            basic: { login: user, password },\n          },\n          expiration: { seconds: ttl, nanos: 0 },\n          requestedRole: role,\n        }).response\n      ).token;\n    } else {\n      const resp = cl.POST(\"/v1/auth/login\", {\n        // openapi-typescript generated all body fields as required, but Login.Request\n        // has a credentials oneof — only one of `basic`/`token` is sent. Cast around it.\n        body: {\n          basic: { login: user, password },\n          expiration: `${ttl}s`,\n          requestedRole: role,\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } as any,\n      });\n      return notEmpty((await resp).data, \"REST: empty response for login request\").token;\n    }\n  }\n\n  /** Login via opaque bearer token (controller pre-shared secret, OIDC id-token, etc.).\n   * String input is UTF-8 encoded. Returns a fresh Platforma JWT. */\n  public async loginWithToken(\n    token: Uint8Array | string,\n    opts: { ttlSeconds?: bigint; role?: AuthAPI_Role } = {},\n  ): Promise<string> {\n    const cl = this.clientProvider.get();\n    const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);\n    const role = opts.role ?? AuthAPI_Role.UNSPECIFIED;\n    const bytes = typeof token === \"string\" ? Buffer.from(token, \"utf8\") : token;\n\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.login({\n          credentials: {\n            oneofKind: \"token\",\n            token: { token: bytes },\n          },\n          expiration: { seconds: ttl, nanos: 0 },\n          requestedRole: role,\n        }).response\n      ).token;\n    } else {\n      const resp = cl.POST(\"/v1/auth/login\", {\n        // openapi-typescript marks all body fields as required, but Login.Request has a oneof.\n        // REST encodes `bytes` as a base64 string.\n        body: {\n          token: { token: Buffer.from(bytes).toString(\"base64\") },\n          expiration: `${ttl}s`,\n          requestedRole: role,\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } as any,\n      });\n      return notEmpty((await resp).data, \"REST: empty response for login request\").token;\n    }\n  }\n\n  /** Refresh the current JWT, preserving session id and role. */\n  public async refreshToken(opts: { ttlSeconds?: bigint } = {}): Promise<string> {\n    const cl = this.clientProvider.get();\n    const ttl = opts.ttlSeconds ?? BigInt(this.conf.authTTLSeconds);\n    const currentToken = notEmpty(\n      this.authInformation?.jwtToken,\n      \"refreshToken called without a current JWT\",\n    );\n\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.refreshToken({\n          token: currentToken,\n          expiration: { seconds: ttl, nanos: 0 },\n        }).response\n      ).token;\n    } else {\n      const resp = cl.POST(\"/v1/auth/refresh\", {\n        body: { token: currentToken, expiration: `${ttl}s` },\n      });\n      return notEmpty((await resp).data, \"REST: empty response for refresh request\").token;\n    }\n  }\n\n  public async ping(): Promise<grpcTypes.MaintenanceAPI_Ping_Response> {\n    const cl = this.clientProvider.get();\n    let resp: grpcTypes.MaintenanceAPI_Ping_Response;\n    if (cl instanceof GrpcPlApiClient) {\n      resp = (await cl.ping({})).response;\n    } else {\n      // The REST ping response predates the `capabilities` field (proto field 9).\n      // Old servers omit it; treat absence as empty capability list.\n      const pingData = notEmpty(\n        (await cl.GET(\"/v1/ping\")).data,\n        \"REST: empty response for ping request\",\n      );\n      resp = {\n        ...(pingData as unknown as grpcTypes.MaintenanceAPI_Ping_Response),\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        capabilities: (pingData as any).capabilities ?? [],\n      };\n    }\n    this._serverInfo = resp;\n    return resp;\n  }\n\n  /** Cached Ping response. Always populated post-build(); throws if accessed earlier. */\n  public get serverInfo(): grpcTypes.MaintenanceAPI_Ping_Response {\n    if (!this._serverInfo) {\n      throw new Error(\"LLPlClient.serverInfo accessed before build() completed\");\n    }\n    return this._serverInfo;\n  }\n\n  /** Synchronous capability check against the cached Ping response. */\n  public hasCapability(capability: BackendCapability): boolean {\n    return hasCapability(this.serverInfo.capabilities, capability);\n  }\n\n  /** True if the backend produces signed resource ids (and accepts the\n   * setDefaultColor TX request). Tagged at 3.3.0 — backends older than this\n   * return resources without signatures and reject color-proof requests. */\n  public get supportsResourceSignatures(): boolean {\n    return isVersionAtLeast(this.serverInfo.coreVersion, [3, 3, 0]);\n  }\n\n  /**\n   * True if the backend honors per-file `permissions` on workdir fill rules\n   * (PR #1830 in milaboratory/pl). Backends before this change ignore the\n   * requested mode and always land files at the canonical archive perm,\n   * making `exec.builder().writeFile/addFile({ writable: true })` a no-op.\n   *\n   * Tagged at 3.5.0 cut without the change, so [3, 5, 0] excludes the tagged\n   * release but includes dev builds past the tag (e.g. \"3.5.0-224-g0ca182\").\n   */\n  public get supportsWritableWorkdirFiles(): boolean {\n    return isAfterVersion(this.serverInfo.coreVersion, [3, 5, 0]);\n  }\n\n  /**\n   * Detects the best available wire protocol.\n   * If wireProtocol is explicitly configured, does nothing.\n   * Otherwise probes the current protocol via ping; if it fails, switches to the alternative.\n   */\n  private async detectOptimalWireProtocol() {\n    if (this.conf.wireProtocol) {\n      return;\n    }\n\n    // Each retry is:\n    //  - ping request timeout (100 to 3_000ms)\n    //  - backoff delay (30 to 500ms)\n    //\n    // 30 attempts are ~43 seconds of overall waiting time.\n    // Think twice on overall time this thing takes to complete when changing these parameters.\n    // It may block UI when connecting to the server and loading projects list.\n    const pingTimeoutFactor = 1.3;\n    const maxPingTimeoutMs = 3_000;\n    const retryOptions: RetryOptions = {\n      type: \"exponentialBackoff\",\n      maxAttempts: 30,\n      initialDelay: 30,\n      backoffMultiplier: 1.3,\n      jitter: 0.2,\n      maxDelay: 500,\n    };\n\n    let attempt = 1;\n    let pingTimeoutMs = 100;\n    await retry(\n      () => withTimeout(this.ping(), pingTimeoutMs),\n      retryOptions,\n      (e: unknown) => {\n        if (isAbortedError(e)) {\n          this.ops.logger?.info(\n            `Wire proto autodetect: ping timed out after ${pingTimeoutMs}ms: attempt=${attempt}, wire=${this._wireProto}`,\n          );\n\n          if (attempt % 2 === 0) {\n            // We have 2 wire protocols to check. Increase timeout each 2 attempts.\n            pingTimeoutMs = Math.min(\n              Math.round(pingTimeoutMs * pingTimeoutFactor),\n              maxPingTimeoutMs,\n            );\n          }\n        } else {\n          this.ops.logger?.info(\n            `Wire proto autodetect: ping failed: attempt=${attempt}, wire=${this._wireProto}, err=${String(e)}`,\n          );\n        }\n\n        attempt++;\n        const protocol = this._wireProto === \"grpc\" ? \"rest\" : \"grpc\";\n        this.ops.logger?.info(\n          `Wire protocol autodetect next attempt: will try wire '${protocol}' with timeout ${pingTimeoutMs}ms`,\n        );\n        this.initWireConnection(protocol);\n        return true;\n      },\n    );\n  }\n\n  public async license(): Promise<grpcTypes.MaintenanceAPI_License_Response> {\n    const cl = this.clientProvider.get();\n    if (cl instanceof GrpcPlApiClient) {\n      return (await cl.license({})).response;\n    } else {\n      const resp = notEmpty(\n        (await cl.GET(\"/v1/license\")).data,\n        \"REST: empty response for license request\",\n      );\n      return {\n        status: resp.status,\n        isOk: resp.isOk,\n        responseBody: Uint8Array.from(Buffer.from(resp.responseBody)),\n      };\n    }\n  }\n\n  public async authMethods(): Promise<grpcTypes.AuthAPI_ListMethods_Response> {\n    const cl = this.clientProvider.get();\n    let resp: grpcTypes.AuthAPI_ListMethods_Response;\n    if (cl instanceof GrpcPlApiClient) {\n      resp = (await cl.authMethods({})).response;\n    } else {\n      const wsResponse = notEmpty(\n        (await cl.GET(\"/v1/auth/methods\")).data,\n        \"REST: empty response for auth methods request\",\n      );\n      // OpenAPI schema flattens the protobuf oneof into `{ basic?, token? }`,\n      // while protobuf-ts models it as a discriminated union. Reshape per item.\n      resp = {\n        methods: (wsResponse.methods ?? []).map((m): grpcTypes.AuthAPI_ListMethods_MethodInfo => {\n          const base = { id: m.id, description: m.description };\n          if (m.basic !== undefined) {\n            return { ...base, method: { oneofKind: \"basic\", basic: m.basic } };\n          }\n          if (m.token !== undefined) {\n            return { ...base, method: { oneofKind: \"token\", token: m.token } };\n          }\n          if (m.sso !== undefined) {\n            return { ...base, method: { oneofKind: \"sso\", sso: m.sso } };\n          }\n          return { ...base, method: { oneofKind: undefined } };\n        }),\n      };\n    }\n\n    this._authMethodsSync = resp;\n    return resp;\n  }\n\n  public get authMethodsSync(): grpcTypes.AuthAPI_ListMethods_Response {\n    if (!this._authMethodsSync) {\n      throw new Error(\"LLPlClient.authMethodsSync accessed before build() completed\");\n    }\n    return this._authMethodsSync;\n  }\n\n  public async getUserRoot(\n    opts: { login?: string; createIfNotExists?: boolean } = {},\n  ): Promise<grpcTypes.AuthAPI_GetUserRoot_Response> {\n    const cl = this.clientProvider.get();\n    if (cl instanceof GrpcPlApiClient) {\n      return (\n        await cl.getUserRoot({\n          login: opts.login ?? \"\",\n          createIfNotExists: opts.createIfNotExists ?? false,\n        })\n      ).response;\n    } else {\n      const resp = notEmpty(\n        (\n          await cl.POST(\"/v1/auth/user-root\", {\n            body: {\n              login: opts.login ?? \"\",\n              createIfNotExists: opts.createIfNotExists ?? false,\n            },\n          })\n        ).data,\n        \"REST: empty response for getUserRoot request\",\n      );\n      return {\n        userRoot: resp.userRoot\n          ? {\n              resourceId: BigInt(resp.userRoot.resourceId),\n              resourceSignature: Uint8Array.from(\n                Buffer.from(resp.userRoot.resourceSignature, \"base64\"),\n              ),\n            }\n          : undefined,\n      };\n    }\n  }\n\n  public async listUserResources(\n    opts: { login?: string; startFrom?: bigint; limit?: number } = {},\n  ): Promise<grpcTypes.AuthAPI_ListUserResources_Response[]> {\n    const cl = this.clientProvider.get();\n\n    if (!(cl instanceof GrpcPlApiClient)) {\n      throw new Error(\"ListUserResources requires gRPC wire protocol; REST is not supported\");\n    }\n\n    const call = cl.listUserResources({\n      login: opts.login ?? \"\",\n      startFrom: opts.startFrom ?? 0n,\n      limit: opts.limit ?? 0,\n    });\n    const responses: grpcTypes.AuthAPI_ListUserResources_Response[] = [];\n    for await (const msg of call.responses) {\n      responses.push(msg);\n    }\n    return responses;\n  }\n\n  public async txSync(txId: bigint): Promise<void> {\n    const cl = this.clientProvider.get();\n    if (cl instanceof GrpcPlApiClient) {\n      await cl.txSync({ txId: BigInt(txId) });\n    } else {\n      await cl.POST(\"/v1/tx-sync\", { body: { txId: txId.toString() } });\n    }\n  }\n\n  createTx(rw: boolean, ops: PlCallOps = {}): LLPlTransaction {\n    return new LLPlTransaction((abortSignal) => {\n      let totalAbortSignal = abortSignal;\n      if (ops.abortSignal) totalAbortSignal = AbortSignal.any([totalAbortSignal, ops.abortSignal]);\n\n      const timeout =\n        ops.timeout ??\n        (rw ? this.conf.defaultRWTransactionTimeout : this.conf.defaultROTransactionTimeout);\n\n      const cl = this.clientProvider.get();\n      if (cl instanceof GrpcPlApiClient) {\n        return cl.tx({\n          abort: totalAbortSignal,\n          timeout,\n        });\n      }\n\n      const wireConn = this.wireConnection;\n      if (wireConn.type === \"rest\") {\n        // For REST/WebSocket protocol, timeout needs to be converted to AbortSignal\n        if (timeout !== undefined) {\n          totalAbortSignal = AbortSignal.any([totalAbortSignal, AbortSignal.timeout(timeout)]);\n        }\n\n        // The gRPC transport has the auth interceptor that already handles it, but here we need to refresh the auth information to be safe.\n        this.refreshAuthInformationIfNeeded();\n\n        const wsUrl = this.conf.ssl\n          ? `wss://${this.conf.hostAndPort}/v1/ws/tx`\n          : `ws://${this.conf.hostAndPort}/v1/ws/tx`;\n\n        return new WebSocketBiDiStream(\n          wsUrl,\n          (msg) => TxAPI_ClientMessage.toBinary(msg),\n          (data) => TxAPI_ServerMessage.fromBinary(new Uint8Array(data)),\n          {\n            abortSignal: totalAbortSignal,\n            jwtToken: this.authInformation?.jwtToken,\n            dispatcher: wireConn.Dispatcher,\n\n            onComplete: async (stream) =>\n              stream.requests.send({\n                // Ask server to gracefully close the stream on its side, if not done yet.\n                requestId: 0,\n                request: { oneofKind: \"streamClose\", streamClose: {} },\n              }),\n          },\n        );\n      }\n\n      throw new Error(`transactions are not supported for wire protocol ${this._wireProto}`);\n    });\n  }\n\n  /** Closes underlying transport */\n  public async close() {\n    if (this.wireConnection.type === \"grpc\") {\n      this.wireConnection.Transport.close();\n    } else {\n      // TODO: close all WS connections\n    }\n    await this.httpDispatcher.destroy();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsDA,SAAS,iBAAiB,SAAiB,QAA2C;CACpF,MAAM,QAAQ,yBAAyB,KAAK,QAAQ;AACpD,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,SAAmC;EAAC,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAC;AAC/F,MAAK,IAAI,IAAI,GAAG,IAAI,GAAG,IACrB,KAAI,OAAO,OAAO,OAAO,GAAI,QAAO,OAAO,KAAK,OAAO;AAEzD,QAAO;;AAeT,SAAS,eAAe,SAAiB,QAA2C;CAClF,MAAM,QAAQ,8BAA8B,KAAK,QAAQ;AACzD,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,SAAmC;EAAC,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAE,OAAO,MAAM,GAAG;EAAC;CAC/F,MAAM,SAAS,MAAM;AACrB,MAAK,IAAI,IAAI,GAAG,IAAI,GAAG,IACrB,KAAI,OAAO,OAAO,OAAO,GAAI,QAAO,OAAO,KAAK,OAAO;AAEzD,QAAO,WAAW;;AAGpB,IAAM,yBAAN,MAA2E;CACzE,SAAqC,KAAA;CAErC,YACE,UACA,mBACA;AAFiB,OAAA,WAAA;AACA,OAAA,oBAAA;;CAGnB,QAAqB;AACnB,OAAK,SAAS,KAAA;;CAGhB,MAAqB;AACnB,MAAI,KAAK,WAAW,KAAA,EAAW,MAAK,SAAS,KAAK,kBAAkB,KAAK,UAAU,CAAC;AACpF,SAAO,KAAK;;;;AAKhB,IAAa,aAAb,MAAa,WAAgD;;CAE3D;;CAEA;;CAEA;;CAEA;;CAEA;;CAGA;CACA;CAEA,UAAsC;CACtC;CAEA,aAAmC;CACnC;CAEA;CACA;CACA;CACA,YAAqE,EAAE;CAEvE;CAEA;CAEA,aAAoB,MAClB,iBACA,MAMI,EAAE,EACN;EAIA,MAAM,KAAK,IAAI,WAFb,OAAO,oBAAoB,WAAWA,eAAAA,kBAAkB,gBAAgB,GAAG,iBAE7C,IAAI;AAGpC,MAAI,IAAI,0BACN,OAAM,GAAG,2BAA2B;AAMtC,MAAI,CAAC,GAAG,YAAa,OAAM,GAAG,MAAM;AAGpC,gBAAA,8BAA8B,GAAG,2BAA2B;AAG5D,MAAI,CAAC,GAAG,iBAAkB,OAAM,GAAG,aAAa;AAEhD,SAAO;;CAGT,YACE,MACA,MAKI,EAAE,EACN;AAPgB,OAAA,OAAA;AACC,OAAA,MAAA;EAOjB,MAAM,EAAE,MAAM,mBAAmB;AAEjC,MAAI,SAAS,KAAA,GAAW;AACtB,QAAK,mBAAmBC,aAAAA,qBACtB,KAAK,iBACL,KAAK,KAAK,sBACX;AACD,QAAK,kBAAkB,KAAK;AAC5B,QAAK,eAAe,KAAK;AACzB,QAAK,uBAAuB,KAAK;AACjC,QAAK,cAAc,KAAK;;AAG1B,OAAK,oBAAoB,EAAE;AAC3B,OAAK,mBAAmB,EAAE;AAC1B,OAAK,oBAAoB,EAAE;AAE3B,MAAI,SAAS,KAAA,GAAW;AACtB,QAAK,kBAAkB,KAAK,KAAK,2BAA2B,CAAC;AAC7D,QAAK,kBAAkB,KAAK,KAAK,2BAA2B,CAAC;;AAE/D,OAAK,kBAAkB,KAAKC,OAAAA,aAAa,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AACpE,OAAK,iBAAiB,KAAK,KAAK,2BAA2B,CAAC;AAC5D,OAAK,kBAAkB,KAAK,KAAK,4BAA4B,CAAC;AAE9D,OAAK,kBAAA,GAAA,wBAAA,uBAAuC,KAAK,KAAK,UAAU;AAChE,MAAI,KAAK,KAAK,aACZ,MAAK,aAAa,KAAK,KAAK;AAG9B,OAAK,mBAAmB,KAAK,WAAW;AAExC,MAAI,mBAAmB,KAAA,GAAW;AAChC,QAAK,iBAAiB;AACtB,kBAAe,KAAK,QAAQ;;AAG9B,OAAK,iBAAiB,KAAK,0BAA0B,aAAa;AAChE,OAAI,SAAS,SAAS,OACpB,QAAO,IAAIC,mBAAAA,eAAgB,SAAS,UAAU;OAE9C,QAAOC,cAAAA,aAAyB;IAC9B,aAAa,SAAS,OAAO;IAC7B,KAAK,SAAS,OAAO;IACrB,YAAY,SAAS;IACrB,aAAa,SAAS;IACvB,CAAC;IAEJ;;CAGJ,mBAA2B,UAAwB;AACjD,UAAQ,UAAR;GACE,KAAK;AACH,SAAK,oBAAoB;AACzB;GACF,KAAK;AACH,SAAK,mBAAmB,KAAK,IAAI,iBAAiB,MAAM;AACxD;GACF,QACE,GAAE,MAAa;AACb,UAAM,IAAI,MACR,8BAA8B,EAAY,iBAAiBC,eAAAA,yBAAyB,KAAK,KAAK,GAC/F;MACA,SAAS;;;CAIlB,qBAAmC;EACjC,MAAM,cAAA,GAAA,wBAAA,uBAAmC,KAAK,KAAK,WAAW,KAAK,kBAAkB;AACrF,OAAK,uBAAuB;GAC1B,MAAM;GACN,QAAQ,KAAK;GACb,YAAY;GACZ,aAAa,KAAK;GACnB,CAAC;;;;;;CAOJ,mBAA2B,MAAe;EACxC,MAAM,gBAA+B;GACnC,0BAA0B;GAC1B,0CAA0C;GAC1C,cAAc,KAAK;GACpB;AAED,MAAI,KAAM,eAAc,wCAAwCC,cAAAA,sBAAsB;EAStF,MAAM,cAA2B;GAC/B,MAAM,KAAK,KAAK;GAChB,SAAS,KAAK,KAAK;GACnB,oBAAoB,KAAK,KAAK,MAC1BC,cAAAA,mBAAmB,WAAW,GAC9BA,cAAAA,mBAAmB,gBAAgB;GACvC;GACD;EAED,MAAM,YACJ,OAAO,KAAK,KAAK,cAAc,WAAW,EAAE,KAAK,KAAK,KAAK,WAAW,GAAG,KAAK,KAAK;AAErF,MAAI,WAAW,KAAK;GAClB,MAAM,MAAM,IAAI,IAAI,UAAU,IAAI;AAClC,OAAI,UAAU,MAAM;IAClB,MAAM,UAAA,GAAA,gCAAA,eAAuB,UAAU,KAAK;AAC5C,QAAI,OAAO,WAAW,QACpB,OAAM,IAAI,MAAM,4BAA4B,OAAO,OAAiB,GAAG;AAEzE,QAAI,WAAW,OAAO;AACtB,QAAI,WAAW,OAAO;;AAExB,WAAQ,IAAI,aAAa,IAAI,UAAU;QAEvC,QAAO,QAAQ,IAAI;AAGrB,OAAK,uBAAuB;GAAE,MAAM;GAAQ,WAAW,IAAIC,4BAAAA,cAAc,YAAY;GAAE,CAAC;;CAG1F,uBAA+B,SAA+B;EAC5D,MAAM,UAAU,KAAK;AACrB,OAAK,YAAY;AACjB,OAAK,aAAa,QAAQ;AAG1B,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,UAAU,QAAQ,KAAK;GAC9C,MAAM,WAAW,KAAK,UAAU,GAAG,OAAO;AAC1C,OAAI,aAAa,KAAA,GAAW;AAE1B,SAAK,UAAU,OAAO,GAAG,EAAE;AAC3B;SAEA,UAAS,OAAO;;AAIpB,MAAI,YAAY,KAAA,KAAa,QAAQ,SAAS,OAAQ,SAAQ,UAAU,OAAO;;CAGjF,yBAAiC;;;;;;CAOjC,yBACE,mBAC4B;AAI5B,OAAK;AACL,MAAI,KAAK,0BAA0B,IAAI;AACrC,QAAK,IAAI,IAAI,GAAG,IAAI,KAAK,UAAU,QAAQ,IAEzC,KADiB,KAAK,UAAU,GAAG,OAAO,KACzB,KAAA,GAAW;AAC1B,SAAK,UAAU,OAAO,GAAG,EAAE;AAC3B;;AAGJ,QAAK,yBAAyB;;EAGhC,MAAM,WAAW,IAAI,6BAAqC,KAAK,WAAW,kBAAkB;AAC5F,OAAK,UAAU,KAAK,IAAI,QAAQ,SAAS,CAAC;AAC1C,SAAO;;CAGT,IAAW,iBAAiC;AAC1C,SAAO,KAAK;;CAGd,IAAW,eAAyC;AAClD,SAAO,KAAK;;;;;CAMd,IAAW,gBAAyB;AAClC,SAAO,KAAK,oBAAoB,KAAA;;;CAIlC,IAAW,WAA0B;AACnC,MAAI,CAAC,KAAK,cAAe,OAAM,IAAI,MAAM,8BAA8B;AACvE,MAAI,KAAK,iBAAiB,UAAU;AAClC,OAAI,KAAK,cAAc,UAAU,CAC/B,QAAOC,WAAAA,WAAW,KAAK,iBAAiB,SAAS,CAAC;AAEpD,UAAOA,WAAAA,WAAW,KAAK,iBAAiB,SAAS,CAAC,KAAK;QAClD,QAAO;;CAGhB,aAAqB,WAA+B;AAClD,UAAQ,eAAe;AACrB,OAAI,KAAK,YAAY,WAAW;AAC9B,SAAK,UAAU;AACf,QAAI,KAAK,mBAAmB,KAAA,EAAW,MAAK,eAAe,KAAK,QAAQ;AACxE,QAAI,cAAc,qBAAqB,KAAK,gBAAgB,KAAA,EAAW,MAAK,aAAa;;IAE3F;;CAGJ,IAAW,SAA6B;AACtC,SAAO,KAAK;;CAGd,wBAAyC;CAEzC,iCAA+C;AAC7C,MACE,KAAK,qBAAqB,KAAA,KAC1B,KAAK,KAAK,GAAG,KAAK,oBAClB,KAAK,yBACL,KAAK,YAAY,kBAEjB;AAGF,OAAK,wBAAwB;AAC7B,GAAM,YAAY;AAChB,OAAI;IACF,MAAM,MAAM,OAAO,KAAK,KAAK,eAAe;AAI5C,SAAK,kBAAkB,EAAE,UAHX,KAAK,cAAc,UAAU,GACvC,MAAM,KAAK,aAAa,EAAE,YAAY,KAAK,CAAC,GAC5C,MAAM,KAAK,YAAY,IAAI,EACW;AAC1C,SAAK,mBAAmBR,aAAAA,qBACtB,KAAK,iBACL,KAAK,KAAK,sBACX;AACD,QAAI,KAAK,aAAc,MAAK,aAAa,KAAK,gBAAgB;YACvD,GAAY;AACnB,QAAI,KAAK,qBAAsB,MAAK,qBAAqB,EAAE;aACnD;AACR,SAAK,wBAAwB;;MAE7B;;;;;;;CAQN,4BAAgD;AAC9C,SAAO,EACL,YAAY,OAAO,EAAE,SAAS,UAAU,UAAU,SAAS,eAAe;GACxE,MAAM,EAAE,MAAM,GAAG,eAAe;AAEhC,OAAI;IAAC;IAAK;IAAK;IAAI,CAAC,SAAS,SAAS,OAAO,EAAE;AAE7C,SAAK,aAAa,eAAe;AACjC,WAAO,IAAI,SAAS,MAAM;KAAE,GAAG;KAAY,QAAQ,SAAS;KAAQ,CAAC;;GAGvE,MAAM,UAAU,MAAMS,cAAAA,mBAAmB,SAAS;AAClD,OAAI,CAAC,QAAQ,MAEX,QAAO,IAAI,SAAS,QAAQ,YAAY,MAAM;IAAE,GAAG;IAAY,QAAQ,SAAS;IAAQ,CAAC;AAG3F,OAAI,OAAO,QAAQ,UAAU,SAE3B,QAAO,IAAI,SAAS,QAAQ,OAAO;IAAE,GAAG;IAAY,QAAQ,SAAS;IAAQ,CAAC;AAGhF,OAAI,QAAQ,MAAM,SAASC,aAAAA,KAAK,gBAC9B,MAAK,aAAa,kBAAkB;AAItC,UAAO,IAAI,SAAS,QAAQ,UAAU;IAAE,GAAG;IAAY,QAAQ,SAAS;IAAQ,CAAC;KAEpF;;;CAIH,6BAAkD;AAChD,UAAQ,SAAS,aAAa;AAC5B,UAAO,IAAIC,cAAAA,iBAAiB,SAAS,QAAQ,EAAE,EAC7C,QAAQ,UAAU,UAAU,SAAS;AACnC,SAAK,UAAU,EACb,kBAAkB,QAAQ,SAAS;AACjC,SAAI,OAAO,QAAQC,cAAAA,OAAW,gBAE5B,MAAK,aAAa,kBAAkB;AACtC,SAAI,OAAO,QAAQA,cAAAA,OAAW,YAE5B,MAAK,aAAa,eAAe;AACnC,UAAK,OAAO;OAEf,CAAC;MAEL,CAAC;;;CAIN,4BAA6E;AAC3E,UAAQ,aAAa;AACnB,WAAQ,SAAS,YAAY;AAC3B,QAAI,KAAK,iBAAiB,aAAa,KAAA,GAAW;AAEhD,aAAQ,UAAU;MAChB,GAAG,QAAQ;MACX,eAAe,YAAY,KAAK,gBAAgB;MACjD;AACD,UAAK,gCAAgC;;AAGvC,WAAO,SAAS,SAAS,QAAQ;;;;;CAMvC,4BAAiD;AAC/C,UAAQ,SAAS,aAAa;AAC5B,UAAO,IAAID,cAAAA,iBAAiB,SAAS,QAAQ,EAAE,EAC7C,QAAQ,UAAU,UAAU,SAAS;AACnC,QAAI,KAAK,iBAAiB,aAAa,KAAA,GAAW;AAChD,cAAS,IAAI,iBAAiB,YAAY,KAAK,gBAAgB,SAAS;AACxE,UAAK,gCAAgC;AACrC,UAAK,UAAU,SAAS;UAExB,MAAK,UAAU,SAAS;MAG7B,CAAC;;;CAIN,MAAa,YACX,YACA,SACiB;EACjB,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,OAAO,SAAS,QAAQE,YAAAA,aAAa;AAE3C,MAAI,cAAcX,mBAAAA,gBAAiB;GACjC,MAAM,OAA+B,EAAE;AACvC,OAAI,SAAS,cAAe,MAAK,gBAAgB,QAAQ;AACzD,WACE,MAAM,GAAG,YACP;IACE,YAAY;KAAE,SAAS;KAAY,OAAO;KAAG;IAC7C,eAAe;IAChB,EACD,EAAE,MAAM,CACT,CAAC,UACF;SACG;GACL,MAAM,UAAkC,EAAE;AAC1C,OAAI,SAAS,cAAe,SAAQ,gBAAgB,QAAQ;AAK5D,WAAA,GAAA,2BAAA,WAAiB,MAJJ,GAAG,KAAK,sBAAsB;IACzC,MAAM;KAAE,YAAY,GAAG,WAAW;KAAI,eAAe;KAAM;IAC3D;IACD,CAAC,EAC2B,MAAM,6CAA6C,CAAC;;;;CAKrF,MAAa,WACX,MACA,UACA,OAAqD,EAAE,EACtC;EACjB,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,MAAM,KAAK,cAAc,OAAO,KAAK,KAAK,eAAe;EAC/D,MAAM,OAAO,KAAK,QAAQW,YAAAA,aAAa;AAEvC,MAAI,cAAcX,mBAAAA,eAChB,SACE,MAAM,GAAG,MAAM;GACb,aAAa;IACX,WAAW;IACX,OAAO;KAAE,OAAO;KAAM;KAAU;IACjC;GACD,YAAY;IAAE,SAAS;IAAK,OAAO;IAAG;GACtC,eAAe;GAChB,CAAC,CAAC,UACH;MAYF,SAAA,GAAA,2BAAA,WAAiB,MAVJ,GAAG,KAAK,kBAAkB,EAGrC,MAAM;GACJ,OAAO;IAAE,OAAO;IAAM;IAAU;GAChC,YAAY,GAAG,IAAI;GACnB,eAAe;GAEhB,EACF,CAAC,EAC2B,MAAM,yCAAyC,CAAC;;;;CAMjF,MAAa,eACX,OACA,OAAqD,EAAE,EACtC;EACjB,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,MAAM,KAAK,cAAc,OAAO,KAAK,KAAK,eAAe;EAC/D,MAAM,OAAO,KAAK,QAAQW,YAAAA,aAAa;EACvC,MAAM,QAAQ,OAAO,UAAU,WAAW,OAAO,KAAK,OAAO,OAAO,GAAG;AAEvE,MAAI,cAAcX,mBAAAA,eAChB,SACE,MAAM,GAAG,MAAM;GACb,aAAa;IACX,WAAW;IACX,OAAO,EAAE,OAAO,OAAO;IACxB;GACD,YAAY;IAAE,SAAS;IAAK,OAAO;IAAG;GACtC,eAAe;GAChB,CAAC,CAAC,UACH;MAYF,SAAA,GAAA,2BAAA,WAAiB,MAVJ,GAAG,KAAK,kBAAkB,EAGrC,MAAM;GACJ,OAAO,EAAE,OAAO,OAAO,KAAK,MAAM,CAAC,SAAS,SAAS,EAAE;GACvD,YAAY,GAAG,IAAI;GACnB,eAAe;GAEhB,EACF,CAAC,EAC2B,MAAM,yCAAyC,CAAC;;;CAKjF,MAAa,aAAa,OAAgC,EAAE,EAAmB;EAC7E,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,MAAM,MAAM,KAAK,cAAc,OAAO,KAAK,KAAK,eAAe;EAC/D,MAAM,gBAAA,GAAA,2BAAA,UACJ,KAAK,iBAAiB,UACtB,4CACD;AAED,MAAI,cAAcA,mBAAAA,eAChB,SACE,MAAM,GAAG,aAAa;GACpB,OAAO;GACP,YAAY;IAAE,SAAS;IAAK,OAAO;IAAG;GACvC,CAAC,CAAC,UACH;MAKF,SAAA,GAAA,2BAAA,WAAiB,MAHJ,GAAG,KAAK,oBAAoB,EACvC,MAAM;GAAE,OAAO;GAAc,YAAY,GAAG,IAAI;GAAI,EACrD,CAAC,EAC2B,MAAM,2CAA2C,CAAC;;CAInF,MAAa,OAAwD;EACnE,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,IAAI;AACJ,MAAI,cAAcA,mBAAAA,eAChB,SAAQ,MAAM,GAAG,KAAK,EAAE,CAAC,EAAE;OACtB;GAGL,MAAM,YAAA,GAAA,2BAAA,WACH,MAAM,GAAG,IAAI,WAAW,EAAE,MAC3B,wCACD;AACD,UAAO;IACL,GAAI;IAEJ,cAAe,SAAiB,gBAAgB,EAAE;IACnD;;AAEH,OAAK,cAAc;AACnB,SAAO;;;CAIT,IAAW,aAAqD;AAC9D,MAAI,CAAC,KAAK,YACR,OAAM,IAAI,MAAM,0DAA0D;AAE5E,SAAO,KAAK;;;CAId,cAAqB,YAAwC;AAC3D,SAAOY,qBAAAA,cAAc,KAAK,WAAW,cAAc,WAAW;;;;;CAMhE,IAAW,6BAAsC;AAC/C,SAAO,iBAAiB,KAAK,WAAW,aAAa;GAAC;GAAG;GAAG;GAAE,CAAC;;;;;;;;;;;CAYjE,IAAW,+BAAwC;AACjD,SAAO,eAAe,KAAK,WAAW,aAAa;GAAC;GAAG;GAAG;GAAE,CAAC;;;;;;;CAQ/D,MAAc,4BAA4B;AACxC,MAAI,KAAK,KAAK,aACZ;EAUF,MAAM,oBAAoB;EAC1B,MAAM,mBAAmB;EACzB,MAAM,eAA6B;GACjC,MAAM;GACN,aAAa;GACb,cAAc;GACd,mBAAmB;GACnB,QAAQ;GACR,UAAU;GACX;EAED,IAAI,UAAU;EACd,IAAI,gBAAgB;AACpB,SAAA,GAAA,2BAAA,cAAA,GAAA,2BAAA,aACoB,KAAK,MAAM,EAAE,cAAc,EAC7C,eACC,MAAe;AACd,OAAIC,eAAAA,eAAe,EAAE,EAAE;AACrB,SAAK,IAAI,QAAQ,KACf,+CAA+C,cAAc,cAAc,QAAQ,SAAS,KAAK,aAClG;AAED,QAAI,UAAU,MAAM,EAElB,iBAAgB,KAAK,IACnB,KAAK,MAAM,gBAAgB,kBAAkB,EAC7C,iBACD;SAGH,MAAK,IAAI,QAAQ,KACf,+CAA+C,QAAQ,SAAS,KAAK,WAAW,QAAQ,OAAO,EAAE,GAClG;AAGH;GACA,MAAM,WAAW,KAAK,eAAe,SAAS,SAAS;AACvD,QAAK,IAAI,QAAQ,KACf,yDAAyD,SAAS,iBAAiB,cAAc,IAClG;AACD,QAAK,mBAAmB,SAAS;AACjC,UAAO;IAEV;;CAGH,MAAa,UAA8D;EACzE,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,MAAI,cAAcb,mBAAAA,eAChB,SAAQ,MAAM,GAAG,QAAQ,EAAE,CAAC,EAAE;OACzB;GACL,MAAM,QAAA,GAAA,2BAAA,WACH,MAAM,GAAG,IAAI,cAAc,EAAE,MAC9B,2CACD;AACD,UAAO;IACL,QAAQ,KAAK;IACb,MAAM,KAAK;IACX,cAAc,WAAW,KAAK,OAAO,KAAK,KAAK,aAAa,CAAC;IAC9D;;;CAIL,MAAa,cAA+D;EAC1E,MAAM,KAAK,KAAK,eAAe,KAAK;EACpC,IAAI;AACJ,MAAI,cAAcA,mBAAAA,eAChB,SAAQ,MAAM,GAAG,YAAY,EAAE,CAAC,EAAE;MAQlC,QAAO,EACL,WAAA,GAAA,2BAAA,WANC,MAAM,GAAG,IAAI,mBAAmB,EAAE,MACnC,gDACD,CAIsB,WAAW,EAAE,EAAE,KAAK,MAAgD;GACvF,MAAM,OAAO;IAAE,IAAI,EAAE;IAAI,aAAa,EAAE;IAAa;AACrD,OAAI,EAAE,UAAU,KAAA,EACd,QAAO;IAAE,GAAG;IAAM,QAAQ;KAAE,WAAW;KAAS,OAAO,EAAE;KAAO;IAAE;AAEpE,OAAI,EAAE,UAAU,KAAA,EACd,QAAO;IAAE,GAAG;IAAM,QAAQ;KAAE,WAAW;KAAS,OAAO,EAAE;KAAO;IAAE;AAEpE,OAAI,EAAE,QAAQ,KAAA,EACZ,QAAO;IAAE,GAAG;IAAM,QAAQ;KAAE,WAAW;KAAO,KAAK,EAAE;KAAK;IAAE;AAE9D,UAAO;IAAE,GAAG;IAAM,QAAQ,EAAE,WAAW,KAAA,GAAW;IAAE;IACpD,EACH;AAGH,OAAK,mBAAmB;AACxB,SAAO;;CAGT,IAAW,kBAA0D;AACnE,MAAI,CAAC,KAAK,iBACR,OAAM,IAAI,MAAM,+DAA+D;AAEjF,SAAO,KAAK;;CAGd,MAAa,YACX,OAAwD,EAAE,EACT;EACjD,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,MAAI,cAAcA,mBAAAA,eAChB,SACE,MAAM,GAAG,YAAY;GACnB,OAAO,KAAK,SAAS;GACrB,mBAAmB,KAAK,qBAAqB;GAC9C,CAAC,EACF;OACG;GACL,MAAM,QAAA,GAAA,2BAAA,WAEF,MAAM,GAAG,KAAK,sBAAsB,EAClC,MAAM;IACJ,OAAO,KAAK,SAAS;IACrB,mBAAmB,KAAK,qBAAqB;IAC9C,EACF,CAAC,EACF,MACF,+CACD;AACD,UAAO,EACL,UAAU,KAAK,WACX;IACE,YAAY,OAAO,KAAK,SAAS,WAAW;IAC5C,mBAAmB,WAAW,KAC5B,OAAO,KAAK,KAAK,SAAS,mBAAmB,SAAS,CACvD;IACF,GACD,KAAA,GACL;;;CAIL,MAAa,kBACX,OAA+D,EAAE,EACR;EACzD,MAAM,KAAK,KAAK,eAAe,KAAK;AAEpC,MAAI,EAAE,cAAcA,mBAAAA,gBAClB,OAAM,IAAI,MAAM,uEAAuE;EAGzF,MAAM,OAAO,GAAG,kBAAkB;GAChC,OAAO,KAAK,SAAS;GACrB,WAAW,KAAK,aAAa;GAC7B,OAAO,KAAK,SAAS;GACtB,CAAC;EACF,MAAM,YAA4D,EAAE;AACpE,aAAW,MAAM,OAAO,KAAK,UAC3B,WAAU,KAAK,IAAI;AAErB,SAAO;;CAGT,MAAa,OAAO,MAA6B;EAC/C,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,MAAI,cAAcA,mBAAAA,eAChB,OAAM,GAAG,OAAO,EAAE,MAAM,OAAO,KAAK,EAAE,CAAC;MAEvC,OAAM,GAAG,KAAK,eAAe,EAAE,MAAM,EAAE,MAAM,KAAK,UAAU,EAAE,EAAE,CAAC;;CAIrE,SAAS,IAAa,MAAiB,EAAE,EAAmB;AAC1D,SAAO,IAAIc,uBAAAA,iBAAiB,gBAAgB;GAC1C,IAAI,mBAAmB;AACvB,OAAI,IAAI,YAAa,oBAAmB,YAAY,IAAI,CAAC,kBAAkB,IAAI,YAAY,CAAC;GAE5F,MAAM,UACJ,IAAI,YACH,KAAK,KAAK,KAAK,8BAA8B,KAAK,KAAK;GAE1D,MAAM,KAAK,KAAK,eAAe,KAAK;AACpC,OAAI,cAAcd,mBAAAA,eAChB,QAAO,GAAG,GAAG;IACX,OAAO;IACP;IACD,CAAC;GAGJ,MAAM,WAAW,KAAK;AACtB,OAAI,SAAS,SAAS,QAAQ;AAE5B,QAAI,YAAY,KAAA,EACd,oBAAmB,YAAY,IAAI,CAAC,kBAAkB,YAAY,QAAQ,QAAQ,CAAC,CAAC;AAItF,SAAK,gCAAgC;AAMrC,WAAO,IAAIe,yBAAAA,oBAJG,KAAK,KAAK,MACpB,SAAS,KAAK,KAAK,YAAY,aAC/B,QAAQ,KAAK,KAAK,YAAY,aAI/B,QAAQC,YAAAA,oBAAoB,SAAS,IAAI,GACzC,SAASC,YAAAA,oBAAoB,WAAW,IAAI,WAAW,KAAK,CAAC,EAC9D;KACE,aAAa;KACb,UAAU,KAAK,iBAAiB;KAChC,YAAY,SAAS;KAErB,YAAY,OAAO,WACjB,OAAO,SAAS,KAAK;MAEnB,WAAW;MACX,SAAS;OAAE,WAAW;OAAe,aAAa,EAAE;OAAE;MACvD,CAAC;KACL,CACF;;AAGH,SAAM,IAAI,MAAM,oDAAoD,KAAK,aAAa;IACtF;;;CAIJ,MAAa,QAAQ;AACnB,MAAI,KAAK,eAAe,SAAS,OAC/B,MAAK,eAAe,UAAU,OAAO;AAIvC,QAAM,KAAK,eAAe,SAAS"}

package/dist/core/ll_client.d.ts

@@ -110,8 +110,10 @@ declare class LLPlClient implements WireClientProviderFactory {
   get serverInfo(): MaintenanceAPI_Ping_Response;
   /** Synchronous capability check against the cached Ping response. */
   hasCapability(capability: BackendCapability): boolean;
-  /** True if the backend implements the setDefaultColor TX request. */
-  get supportsSetDefaultColor(): boolean;
+  /** True if the backend produces signed resource ids (and accepts the
+   * setDefaultColor TX request). Tagged at 3.3.0 — backends older than this
+   * return resources without signatures and reject color-proof requests. */
+  get supportsResourceSignatures(): boolean;
   /**
    * True if the backend honors per-file `permissions` on workdir fill rules
    * (PR #1830 in milaboratory/pl). Backends before this change ignore the

package/dist/core/ll_client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ll_client.d.ts","names":[],"sources":["../../src/core/ll_client.ts"],"mappings":";;;;;;;;;;;UA6CiB,SAAA;EACf,OAAA;EACA,WAAA,GAAc,WAAA;AAAA;;cA0DH,UAAA,YAAsB,yBAAA;EAAA,SA+Df,IAAA,EAAM,cAAA;EAAA,iBACL,GAAA;EA1HM;EAAA,QA4DjB,eAAA;EAFc;EAAA,iBAIL,YAAA;EA2DO;EAAA,iBAzDP,WAAA;EAqBqD;EAAA,iBAnBrD,oBAAA;EAqBe;EAAA,QAnBxB,gBAAA;EAwBG;EAAA,QArBH,WAAA;EAAA,QACA,gBAAA;EAAA,QAEA,OAAA;EAAA,iBACS,cAAA;EAAA,QAET,UAAA;EAAA,QACA,SAAA;EAAA,iBAES,iBAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,iBAAA;EAAA,iBACA,SAAA;EAAA,SAED,cAAA,EAAgB,kBAAA,CAAmB,gBAAA,GAAmB,cAAA;EAAA,SAEtD,cAAA,EAAgB,UAAA;EAAA,OAEZ,KAAA,CAClB,eAAA,EAAiB,cAAA,WACjB,GAAA;IACE,IAAA,GAAO,OAAA;IACP,cAAA,GAAiB,0BAAA;IACjB,aAAA;IACA,MAAA,GAAS,QAAA;IACT,yBAAA;EAAA,IACI,OAAA,CAAA,UAAA;EAAA,QAuBD,WAAA,CAAA;EAAA,QA4DC,kBAAA;EAAA,QAiBA,kBAAA;EAibyB;;;;EAAA,QAnazB,kBAAA;EAAA,QA8CA,sBAAA;EAAA,QAoBA,sBAAA;EAifL;;;;;EA1eI,wBAAA,QAAA,CACL,iBAAA,GAAoB,SAAA,EAAW,cAAA,KAAmB,MAAA,GACjD,kBAAA,CAAmB,MAAA;EAAA,IAqBX,cAAA,CAAA,GAAkB,cAAA;EAAA,IAIlB,YAAA,CAAA,GAAgB,YAAA;EA7P+B;;;EAAA,IAoQ/C,aAAA,CAAA;EArMa;EAAA,IA0Mb,QAAA,CAAA;EAAA,QAUH,YAAA;EAAA,IAUG,MAAA,CAAA,GAAU,kBAAA;EAAA,QAIb,qBAAA;EAAA,QAEA,8BAAA;EAzRA;;;;;EAAA,QA6TA,yBAAA;EAnTA;EAAA,QAoVA,0BAAA;EAAA,QAoBA,yBAAA;EApWS;EAAA,QAsXT,yBAAA;EAgBK,WAAA,CACX,UAAA,UACA,OAAA;IAAY,aAAA;IAAwB,IAAA,GAAO,YAAA;EAAA,IAC1C,OAAA;EApYa;EAgaH,UAAA,CACX,IAAA,UACA,QAAA,UACA,IAAA;IAAQ,UAAA;IAAqB,IAAA,GAAO,YAAA;EAAA,IACnC,OAAA;EA/ZC;;EAgcS,cAAA,CACX,KAAA,EAAO,UAAA,WACP,IAAA;IAAQ,UAAA;IAAqB,IAAA,GAAO,YAAA;EAAA,IACnC,OAAA;EAhcU;EAieA,YAAA,CAAa,IAAA;IAAQ,UAAA;EAAA,IAA6B,OAAA;EAuBlD,IAAA,CAAA,GAAQ,OAAA,CAAQ,4BAAA;EA/dtB;EAAA,IAsfI,UAAA,CAAA,GAAc,4BAAA;EAzajB;EAibD,aAAA,CAAc,UAAA,EAAY,iBAAA;EArXzB;EAAA,IA0XG,uBAAA,CAAA;EA/VJ;;;;;;;;;EAAA,IA4WI,4BAAA,CAAA;EAjVA;;;;;EAAA,QA0VG,yBAAA;EA0DD,OAAA,CAAA,GAAW,OAAA,CAAQ,+BAAA;EAiBnB,WAAA,CAAA,GAAe,OAAA,CAAQ,4BAAA;EAAA,IAiCzB,eAAA,CAAA,GAAmB,4BAAA;EAOjB,WAAA,CACX,IAAA;IAAQ,KAAA;IAAgB,iBAAA;EAAA,IACvB,OAAA,CAAQ,4BAAA;EAkCE,iBAAA,CACX,IAAA;IAAQ,KAAA;IAAgB,SAAA;IAAoB,KAAA;EAAA,IAC3C,OAAA,CAAQ,kCAAA;EAmBE,MAAA,CAAO,IAAA,WAAe,OAAA;EASnC,QAAA,CAAS,EAAA,WAAa,GAAA,GAAK,SAAA,GAAiB,eAAA;EA/U/B;EAsYA,KAAA,CAAA,GAAK,OAAA;AAAA"}
+{"version":3,"file":"ll_client.d.ts","names":[],"sources":["../../src/core/ll_client.ts"],"mappings":";;;;;;;;;;;UA8CiB,SAAA;EACf,OAAA;EACA,WAAA,GAAc,WAAA;AAAA;;cA0DH,UAAA,YAAsB,yBAAA;EAAA,SAkEf,IAAA,EAAM,cAAA;EAAA,iBACL,GAAA;EA7HM;EAAA,QA4DjB,eAAA;EAFc;EAAA,iBAIL,YAAA;EA8DO;EAAA,iBA5DP,WAAA;EAqBqD;EAAA,iBAnBrD,oBAAA;EAqBe;EAAA,QAnBxB,gBAAA;EAwBG;EAAA,QArBH,WAAA;EAAA,QACA,gBAAA;EAAA,QAEA,OAAA;EAAA,iBACS,cAAA;EAAA,QAET,UAAA;EAAA,QACA,SAAA;EAAA,iBAES,iBAAA;EAAA,iBACA,gBAAA;EAAA,iBACA,iBAAA;EAAA,iBACA,SAAA;EAAA,SAED,cAAA,EAAgB,kBAAA,CAAmB,gBAAA,GAAmB,cAAA;EAAA,SAEtD,cAAA,EAAgB,UAAA;EAAA,OAEZ,KAAA,CAClB,eAAA,EAAiB,cAAA,WACjB,GAAA;IACE,IAAA,GAAO,OAAA;IACP,cAAA,GAAiB,0BAAA;IACjB,aAAA;IACA,MAAA,GAAS,QAAA;IACT,yBAAA;EAAA,IACI,OAAA,CAAA,UAAA;EAAA,QA0BD,WAAA,CAAA;EAAA,QA4DC,kBAAA;EAAA,QAiBA,kBAAA;EAibyB;;;;EAAA,QAnazB,kBAAA;EAAA,QA8CA,sBAAA;EAAA,QAoBA,sBAAA;EAmfL;;;;;EA5eI,wBAAA,QAAA,CACL,iBAAA,GAAoB,SAAA,EAAW,cAAA,KAAmB,MAAA,GACjD,kBAAA,CAAmB,MAAA;EAAA,IAqBX,cAAA,CAAA,GAAkB,cAAA;EAAA,IAIlB,YAAA,CAAA,GAAgB,YAAA;EAhQ+B;;;EAAA,IAuQ/C,aAAA,CAAA;EArMa;EAAA,IA0Mb,QAAA,CAAA;EAAA,QAUH,YAAA;EAAA,IAUG,MAAA,CAAA,GAAU,kBAAA;EAAA,QAIb,qBAAA;EAAA,QAEA,8BAAA;EA5RA;;;;;EAAA,QAgUA,yBAAA;EAtTA;EAAA,QAuVA,0BAAA;EAAA,QAoBA,yBAAA;EAvWS;EAAA,QAyXT,yBAAA;EAgBK,WAAA,CACX,UAAA,UACA,OAAA;IAAY,aAAA;IAAwB,IAAA,GAAO,YAAA;EAAA,IAC1C,OAAA;EAvYa;EAmaH,UAAA,CACX,IAAA,UACA,QAAA,UACA,IAAA;IAAQ,UAAA;IAAqB,IAAA,GAAO,YAAA;EAAA,IACnC,OAAA;EAlaC;;EAmcS,cAAA,CACX,KAAA,EAAO,UAAA,WACP,IAAA;IAAQ,UAAA;IAAqB,IAAA,GAAO,YAAA;EAAA,IACnC,OAAA;EAncU;EAoeA,YAAA,CAAa,IAAA;IAAQ,UAAA;EAAA,IAA6B,OAAA;EAuBlD,IAAA,CAAA,GAAQ,OAAA,CAAQ,4BAAA;EA/dtB;EAAA,IAsfI,UAAA,CAAA,GAAc,4BAAA;EAzajB;EAibD,aAAA,CAAc,UAAA,EAAY,iBAAA;EArXzB;;;EAAA,IA4XG,0BAAA,CAAA;EAhWsB;;;;;;;;;EAAA,IA6WtB,4BAAA,CAAA;EA5UA;;;;;EAAA,QAqVG,yBAAA;EA0DD,OAAA,CAAA,GAAW,OAAA,CAAQ,+BAAA;EAiBnB,WAAA,CAAA,GAAe,OAAA,CAAQ,4BAAA;EAAA,IAiCzB,eAAA,CAAA,GAAmB,4BAAA;EAOjB,WAAA,CACX,IAAA;IAAQ,KAAA;IAAgB,iBAAA;EAAA,IACvB,OAAA,CAAQ,4BAAA;EAkCE,iBAAA,CACX,IAAA;IAAQ,KAAA;IAAgB,SAAA;IAAoB,KAAA;EAAA,IAC3C,OAAA,CAAQ,kCAAA;EAmBE,MAAA,CAAO,IAAA,WAAe,OAAA;EASnC,QAAA,CAAS,EAAA,WAAa,GAAA,GAAK,SAAA,GAAiB,eAAA;EA/U1C;EAsYW,KAAA,CAAA,GAAK,OAAA;AAAA"}

package/dist/core/ll_client.js

@@ -1,3 +1,4 @@
+import { setResourceSignaturesRequired } from "./types.js";
 import { AuthAPI_Role, TxAPI_ClientMessage, TxAPI_ServerMessage } from "../proto-grpc/github.com/milaboratory/pl/plapi/plapiproto/api.js";
 import { Code } from "../proto-grpc/google/rpc/code.js";
 import { isAbortedError } from "./errors.js";
@@ -82,6 +83,7 @@ var LLPlClient = class LLPlClient {
 		const pl = new LLPlClient(typeof configOrAddress === "string" ? plAddressToConfig(configOrAddress) : configOrAddress, ops);
 		if (ops.useAutoDetectWireProtocol) await pl.detectOptimalWireProtocol();
 		if (!pl._serverInfo) await pl.ping();
+		setResourceSignaturesRequired(pl.supportsResourceSignatures);
 		if (!pl._authMethodsSync) await pl.authMethods();
 		return pl;
 	}
@@ -449,8 +451,10 @@ var LLPlClient = class LLPlClient {
 	hasCapability(capability) {
 		return hasCapability(this.serverInfo.capabilities, capability);
 	}
-	/** True if the backend implements the setDefaultColor TX request. */
-	get supportsSetDefaultColor() {
+	/** True if the backend produces signed resource ids (and accepts the
+	* setDefaultColor TX request). Tagged at 3.3.0 — backends older than this
+	* return resources without signatures and reject color-proof requests. */
+	get supportsResourceSignatures() {
 		return isVersionAtLeast(this.serverInfo.coreVersion, [
 			3,
 			3,