@noodleseed/one 0.83.0 → 0.84.0

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js

@@ -1,12 +1,56 @@
+import { PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX } from './platform-auth-inventory-source-fence-transaction-postgres.js';
 import { PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES, } from './platform-auth-inventory-sources.js';
 import { PlatformAuthMigrationError } from './platform-auth-migration.js';
+export { acquirePlatformAuthInventorySourceFence, releasePlatformAuthInventorySourceFence, runPlatformAuthInventorySourceFenceTransaction, } from './platform-auth-inventory-source-fence-transaction-postgres.js';
 const SOURCE_FENCE_TRIGGER = 'platform_auth_inventory_source_epoch_trigger';
-const SOURCE_FENCE_LOCK_PREFIX = 'platform-auth-inventory-source-fence:v1:';
+export const PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES = [
+    'apps',
+    'billing_account_defaults',
+    'billing_account_members',
+    'billing_accounts',
+    'billing_stripe_customers',
+    'billing_stripe_subscription_bindings',
+    'deploy_records',
+    'developer_access_grants',
+    'environments',
+    'oauth_authorization_codes',
+    'oauth_consent_grant_provenance',
+    'oauth_consent_grants',
+    'oauth_device_authorizations',
+    'oauth_refresh_tokens',
+    'org_billing_home_accounts',
+    'org_billing_links',
+    'org_members',
+    'orgs',
+    'personal_workspace_bindings',
+    'platform_auth_rollout_state',
+    'platform_identity_links',
+    'platform_principals',
+    'platform_verified_emails',
+    'repo_connections',
+    'state_handle_records',
+    'welcome_email_outbox',
+    'workos_import_attempt_evidence',
+    'workos_import_ledger',
+];
+export const PLATFORM_ACCOUNT_RESET_EXECUTION_TABLES = [
+    ...PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES,
+    'identity_migration_runs',
+    'platform_account_reset_cleanup_ledger',
+    'platform_account_reset_email_reservations',
+    'platform_account_reset_events',
+    'platform_account_reset_operations',
+    'platform_account_reset_rollback_previews',
+    'platform_account_reset_targets',
+    'platform_auth_inventory_candidates',
+    'platform_identity_sync_outbox',
+];
 export const PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES = [
     'platform_principals',
     'platform_identity_links',
     'platform_verified_emails',
 ];
+const PLATFORM_AUTH_INVENTORY_COMPANION_TABLES = ['oauth_consent_grant_provenance'];
 /** Installs additive, statement-level change evidence without serializing writers on a counter row. */
 export async function ensurePlatformAuthInventorySourceFenceSchema(pool) {
     await pool.query(`
@@ -30,7 +74,7 @@ export async function ensurePlatformAuthInventorySourceFenceSchema(pool) {
     CREATE OR REPLACE FUNCTION platform_auth_inventory_bump_source_epoch() RETURNS trigger AS $$
     BEGIN
       PERFORM pg_advisory_xact_lock_shared(
-        hashtextextended('${SOURCE_FENCE_LOCK_PREFIX}' || TG_TABLE_SCHEMA, 0)
+        hashtextextended('${PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX}' || TG_TABLE_SCHEMA, 0)
       );
       PERFORM nextval(
         format('%I.%I', TG_TABLE_SCHEMA, 'platform_auth_inventory_source_epoch_seq')::regclass
@@ -43,57 +87,60 @@ export async function ensurePlatformAuthInventorySourceFenceSchema(pool) {
 }
 /** Reconciles triggers after later service schema initializers create their owned source tables. */
 export async function installPlatformAuthInventorySourceFenceTriggers(pool) {
-    const foundation = await pool.query(`SELECT to_regclass('platform_auth_inventory_source_epoch_seq')::text AS sequence,
-            to_regprocedure('platform_auth_inventory_bump_source_epoch()')::text AS fn`);
+    const foundation = await pool.query(`SELECT current_schema() AS schema_name,
+            to_regclass(format(
+              '%I.%I', current_schema(), 'platform_auth_inventory_source_epoch_seq'
+            ))::text AS sequence,
+            to_regprocedure(format(
+              '%I.%I()', current_schema(), 'platform_auth_inventory_bump_source_epoch'
+            ))::text AS fn`);
     const foundationRow = foundation.rows[0];
-    if (foundationRow === undefined || foundationRow.sequence === null || foundationRow.fn === null)
+    if (foundationRow === undefined ||
+        foundationRow.schema_name === null ||
+        foundationRow.sequence === null ||
+        foundationRow.fn === null)
         return;
+    const schema = quoteIdentifier(foundationRow.schema_name);
     for (const table of [
         ...PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES,
         ...PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES,
+        ...PLATFORM_AUTH_INVENTORY_COMPANION_TABLES,
     ]) {
-        const relation = await pool.query('SELECT relkind::text FROM pg_class WHERE oid = to_regclass($1)', [table]);
+        const relation = await pool.query('SELECT relkind::text FROM pg_class WHERE oid = to_regclass($1)', [`${schema}.${quoteIdentifier(table)}`]);
         if (relation.rows[0]?.relkind !== 'r' && relation.rows[0]?.relkind !== 'p')
             continue;
-        const installed = await pool.query(`SELECT 1 FROM pg_trigger
-        WHERE tgrelid = to_regclass($1) AND tgname = $2 AND NOT tgisinternal
-          AND tgenabled <> 'D'
-          AND tgfoid = to_regprocedure('platform_auth_inventory_bump_source_epoch()')`, [table, SOURCE_FENCE_TRIGGER]);
-        if (installed.rows[0] !== undefined)
-            continue;
-        await pool.query(`CREATE TRIGGER ${SOURCE_FENCE_TRIGGER}
-         AFTER INSERT OR UPDATE OR DELETE OR TRUNCATE ON "${table}"
-         FOR EACH STATEMENT EXECUTE FUNCTION platform_auth_inventory_bump_source_epoch()`);
+        await pool.query(`CREATE OR REPLACE TRIGGER ${SOURCE_FENCE_TRIGGER}
+         AFTER INSERT OR UPDATE OR DELETE OR TRUNCATE ON ${schema}.${quoteIdentifier(table)}
+         FOR EACH STATEMENT EXECUTE FUNCTION ${schema}.platform_auth_inventory_bump_source_epoch()`);
     }
 }
 export async function assertPlatformAuthInventorySourceFence(pool, manifest) {
     const required = [
         ...PLATFORM_AUTH_INVENTORY_CANONICAL_TABLES,
         ...PLATFORM_AUTH_INVENTORY_AUTHORITY_SOURCES.filter((source) => manifest[source] === 'configured'),
+        ...(manifest.oauth_consent_grants === 'configured'
+            ? PLATFORM_AUTH_INVENTORY_COMPANION_TABLES
+            : []),
     ];
     const coverage = await pool.query(`SELECT required.table_name
        FROM unnest($1::text[]) AS required(table_name)
-      WHERE to_regclass(required.table_name) IS NULL
+      WHERE to_regclass(format('%I.%I', current_schema(), required.table_name)) IS NULL
          OR NOT EXISTS (
               SELECT 1 FROM pg_trigger trigger
-               WHERE trigger.tgrelid = to_regclass(required.table_name)
+               WHERE trigger.tgrelid =
+                 to_regclass(format('%I.%I', current_schema(), required.table_name))
                  AND trigger.tgname = $2 AND NOT trigger.tgisinternal
                  AND trigger.tgenabled <> 'D'
                  AND trigger.tgfoid =
-                   to_regprocedure('platform_auth_inventory_bump_source_epoch()')
+                   to_regprocedure(format(
+                     '%I.%I()', current_schema(), 'platform_auth_inventory_bump_source_epoch'
+                   ))
             )`, [required, SOURCE_FENCE_TRIGGER]);
     if (coverage.rows.length !== 0)
         throw new PlatformAuthMigrationError('inventory_unavailable');
 }
-export async function acquirePlatformAuthInventorySourceFence(connection) {
-    await connection.query(`SELECT pg_advisory_lock(
-       hashtextextended($1 || current_schema(), 0)
-     )`, [SOURCE_FENCE_LOCK_PREFIX]);
-}
-export async function releasePlatformAuthInventorySourceFence(connection) {
-    await connection.query(`SELECT pg_advisory_unlock(
-       hashtextextended($1 || current_schema(), 0)
-     )`, [SOURCE_FENCE_LOCK_PREFIX]);
+function quoteIdentifier(value) {
+    return `"${value.replaceAll('"', '""')}"`;
 }
 export async function readPlatformAuthInventorySourceEpoch(pool) {
     const result = await pool.query('SELECT last_value::text AS epoch FROM platform_auth_inventory_source_epoch_seq');
@@ -102,25 +149,17 @@ export async function readPlatformAuthInventorySourceEpoch(pool) {
         throw new PlatformAuthMigrationError('inventory_unavailable');
     return epoch;
 }
-export async function runPlatformAuthInventorySourceFenceTransaction(pool, task) {
-    const connection = pool.connect === undefined ? pool : await pool.connect();
-    let sourceFenceHeld = false;
-    try {
-        await acquirePlatformAuthInventorySourceFence(connection);
-        sourceFenceHeld = true;
-        await connection.query('BEGIN ISOLATION LEVEL REPEATABLE READ');
-        const result = await task(connection);
-        await connection.query('COMMIT');
-        return result;
-    }
-    catch (error) {
-        await connection.query('ROLLBACK').catch(() => undefined);
-        throw error;
-    }
-    finally {
-        if (sourceFenceHeld)
-            await releasePlatformAuthInventorySourceFence(connection).catch(() => undefined);
-        connection.release?.();
-    }
+/** Serializes reset previews/execution for the same immutable principal IDs, independent of input order. */
+export async function lockPlatformAuthInventorySourceFenceTargets(connection, principalIds) {
+    const targets = [...new Set(principalIds)].sort((left, right) => left.localeCompare(right));
+    for (const target of targets)
+        await connection.query(`SELECT pg_advisory_xact_lock(
+         hashtextextended('platform-account-reset-target:' || $1, 0)
+       )`, [target]);
+    await connection.query(`SELECT principal_id
+       FROM platform_principals
+      WHERE principal_id = ANY($1::text[])
+      ORDER BY principal_id
+      FOR SHARE`, [targets]);
 }
 //# sourceMappingURL=platform-auth-inventory-source-fence-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-auth-inventory-source-fence-postgres.js","sourceRoot":"","sources":["../src/platform-auth-inventory-source-fence-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yCAAyC,GAE1C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAM1E,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAC5E,MAAM,wBAAwB,GAAG,0CAA0C,CAAC;AAC5E,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,qBAAqB;IACrB,yBAAyB;IACzB,0BAA0B;CAClB,CAAC;AAEX,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;4BAgBS,wBAAwB;;;;;;;;GAQjD,CAAC,CAAC;IACH,MAAM,+CAA+C,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,+CAA+C,CACnE,IAA+B;IAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAIjC;uFACmF,CACpF,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,EAAE,KAAK,IAAI;QAC7F,OAAO;IACT,KAAK,MAAM,KAAK,IAAI;QAClB,GAAG,wCAAwC;QAC3C,GAAG,yCAAyC;KAC7C,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,gEAAgE,EAChE,CAAC,KAAK,CAAC,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,GAAG;YAAE,SAAS;QACrF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAChC;;;sFAGgF,EAChF,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAC9B,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9C,MAAM,IAAI,CAAC,KAAK,CACd,kBAAkB,oBAAoB;4DACgB,KAAK;yFACwB,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,IAA+B,EAC/B,QAA6C;IAE7C,MAAM,QAAQ,GAAG;QACf,GAAG,wCAAwC;QAC3C,GAAG,yCAAyC,CAAC,MAAM,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,YAAY,CAC9C;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;;;;;;cAUU,EACV,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CACjC,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC;IAErC,MAAM,UAAU,CAAC,KAAK,CACpB;;OAEG,EACH,CAAC,wBAAwB,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC;IAErC,MAAM,UAAU,CAAC,KAAK,CACpB;;OAEG,EACH,CAAC,wBAAwB,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,gFAAgF,CACjF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,IAAe,EACf,IAAiD;IAEjD,MAAM,UAAU,GAAoB,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7F,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,uCAAuC,CAAC,UAAU,CAAC,CAAC;QAC1D,eAAe,GAAG,IAAI,CAAC;QACvB,MAAM,UAAU,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,eAAe;YACjB,MAAM,uCAAuC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnF,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC"}
+{"version":3,"file":"platform-auth-inventory-source-fence-postgres.js","sourceRoot":"","sources":["../src/platform-auth-inventory-source-fence-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gDAAgD,EAAE,MAAM,gEAAgE,CAAC;AAClI,OAAO,EACL,yCAAyC,GAE1C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAG1E,OAAO,EACL,uCAAuC,EACvC,uCAAuC,EACvC,8CAA8C,GAC/C,MAAM,gEAAgE,CAAC;AAExE,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAC5E,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,MAAM;IACN,0BAA0B;IAC1B,yBAAyB;IACzB,kBAAkB;IAClB,0BAA0B;IAC1B,sCAAsC;IACtC,gBAAgB;IAChB,yBAAyB;IACzB,cAAc;IACd,2BAA2B;IAC3B,gCAAgC;IAChC,sBAAsB;IACtB,6BAA6B;IAC7B,sBAAsB;IACtB,2BAA2B;IAC3B,mBAAmB;IACnB,aAAa;IACb,MAAM;IACN,6BAA6B;IAC7B,6BAA6B;IAC7B,yBAAyB;IACzB,qBAAqB;IACrB,0BAA0B;IAC1B,kBAAkB;IAClB,sBAAsB;IACtB,sBAAsB;IACtB,gCAAgC;IAChC,sBAAsB;CACd,CAAC;AACX,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,GAAG,qCAAqC;IACxC,yBAAyB;IACzB,uCAAuC;IACvC,2CAA2C;IAC3C,+BAA+B;IAC/B,mCAAmC;IACnC,0CAA0C;IAC1C,gCAAgC;IAChC,oCAAoC;IACpC,+BAA+B;CACvB,CAAC;AACX,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,qBAAqB;IACrB,yBAAyB;IACzB,0BAA0B;CAClB,CAAC;AACX,MAAM,wCAAwC,GAAG,CAAC,gCAAgC,CAAU,CAAC;AAE7F,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,IAA+B;IAE/B,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;4BAgBS,gDAAgD;;;;;;;;GAQzE,CAAC,CAAC;IACH,MAAM,+CAA+C,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,+CAA+C,CACnE,IAA+B;IAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAKjC;;;;;;2BAMuB,CACxB,CAAC;IACF,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,IACE,aAAa,KAAK,SAAS;QAC3B,aAAa,CAAC,WAAW,KAAK,IAAI;QAClC,aAAa,CAAC,QAAQ,KAAK,IAAI;QAC/B,aAAa,CAAC,EAAE,KAAK,IAAI;QAEzB,OAAO;IACT,MAAM,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI;QAClB,GAAG,wCAAwC;QAC3C,GAAG,yCAAyC;QAC5C,GAAG,wCAAwC;KAC5C,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,gEAAgE,EAChE,CAAC,GAAG,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CACxC,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,GAAG;YAAE,SAAS;QACrF,MAAM,IAAI,CAAC,KAAK,CACd,6BAA6B,oBAAoB;2DACI,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC;+CAC5C,MAAM,8CAA8C,CAC9F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,IAA+B,EAC/B,QAA6C;IAE7C,MAAM,QAAQ,GAAG;QACf,GAAG,wCAAwC;QAC3C,GAAG,yCAAyC,CAAC,MAAM,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,YAAY,CAC9C;QACD,GAAG,CAAC,QAAQ,CAAC,oBAAoB,KAAK,YAAY;YAChD,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;;;;;;;;;cAaU,EACV,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CACjC,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,IAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,gFAAgF,CACjF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,UAAqC,EACrC,YAA+B;IAE/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5F,KAAK,MAAM,MAAM,IAAI,OAAO;QAC1B,MAAM,UAAU,CAAC,KAAK,CACpB;;SAEG,EACH,CAAC,MAAM,CAAC,CACT,CAAC;IACJ,MAAM,UAAU,CAAC,KAAK,CACpB;;;;gBAIY,EACZ,CAAC,OAAO,CAAC,CACV,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.d.ts

@@ -0,0 +1,17 @@
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+type FenceConnection = PlatformIdentityQueryable & {
+    release?: (error?: Error) => void;
+};
+type FencePool = PlatformIdentityQueryable & {
+    connect?: () => Promise<FenceConnection>;
+};
+export declare const PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX = "platform-auth-inventory-source-fence:v1:";
+export declare function acquirePlatformAuthInventorySourceFence(connection: PlatformIdentityQueryable): Promise<void>;
+export declare function releasePlatformAuthInventorySourceFence(connection: PlatformIdentityQueryable): Promise<void>;
+export declare function runPlatformAuthInventorySourceFenceTransaction<T>(pool: FencePool, task: (connection: FenceConnection) => Promise<T>, options?: {
+    readonly lockTables?: readonly string[];
+    readonly lockTimeoutMs?: number;
+    readonly statementTimeoutMs?: number;
+}): Promise<T>;
+export {};
+//# sourceMappingURL=platform-auth-inventory-source-fence-transaction-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-source-fence-transaction-postgres.d.ts","sourceRoot":"","sources":["../src/platform-auth-inventory-source-fence-transaction-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,KAAK,eAAe,GAAG,yBAAyB,GAAG;IAAE,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAA;CAAE,CAAC;AACzF,KAAK,SAAS,GAAG,yBAAyB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;CAAE,CAAC;AAE1F,eAAO,MAAM,gDAAgD,6CACjB,CAAC;AAE7C,wBAAsB,uCAAuC,CAC3D,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,uCAAuC,CAC3D,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,8CAA8C,CAAC,CAAC,EACpE,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,EACjD,OAAO,GAAE;IACP,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACjC,GACL,OAAO,CAAC,CAAC,CAAC,CAmGZ"}

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.js

@@ -0,0 +1,240 @@
+import { PlatformAuthMigrationError } from './platform-auth-migration.js';
+export const PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX = 'platform-auth-inventory-source-fence:v1:';
+export async function acquirePlatformAuthInventorySourceFence(connection) {
+    await connection.query(`SELECT pg_advisory_lock(
+       hashtextextended($1 || current_schema(), 0)
+     )`, [PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX]);
+}
+export async function releasePlatformAuthInventorySourceFence(connection) {
+    const unlocked = await connection.query(`SELECT pg_advisory_unlock(
+       hashtextextended($1 || current_schema(), 0)
+     ) AS unlocked`, [PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX]);
+    if (unlocked.rows[0]?.unlocked !== true)
+        throw new PlatformAuthMigrationError('inventory_unavailable');
+}
+export async function runPlatformAuthInventorySourceFenceTransaction(pool, task, options = {}) {
+    const lockTables = validatedPlatformAuthInventoryFenceTables(options.lockTables);
+    const deadline = platformAuthInventoryFenceDeadline(options);
+    const connection = pool.connect === undefined
+        ? pool
+        : await connectPlatformAuthInventoryFenceWithinDeadline(pool.connect.bind(pool), deadline);
+    const taskConnection = budgetedPlatformAuthInventoryFenceConnection(connection, deadline, options);
+    let sourceFenceHeld = false;
+    let transactionStarted = false;
+    let completed = false;
+    let result;
+    let failed = false;
+    let failure;
+    try {
+        if (lockTables.length === 0) {
+            await acquirePlatformAuthInventorySourceFenceWithinDeadline(connection, deadline);
+            sourceFenceHeld = true;
+        }
+        await queryPlatformAuthInventoryFenceWithinDeadline(connection, 'BEGIN ISOLATION LEVEL REPEATABLE READ', undefined, deadline);
+        transactionStarted = true;
+        await setPlatformAuthInventoryFenceTransactionTimeouts(connection, options, deadline);
+        if (lockTables.length !== 0)
+            await queryPlatformAuthInventoryFenceWithinDeadline(connection, `LOCK TABLE ${lockTables.map((table) => `"${table}"`).join(', ')} IN SHARE MODE`, undefined, deadline);
+        if (lockTables.length !== 0) {
+            await acquirePlatformAuthInventorySourceFenceWithinDeadline(connection, deadline);
+            sourceFenceHeld = true;
+        }
+        result = await runPlatformAuthInventoryFenceWithinDeadline(task(taskConnection.connection), deadline);
+        await setPlatformAuthInventoryFenceTransactionTimeouts(connection, options, deadline);
+        await queryPlatformAuthInventoryFenceWithinDeadline(connection, 'COMMIT', undefined, deadline);
+        transactionStarted = false;
+        completed = true;
+    }
+    catch (error) {
+        failed = true;
+        failure = error;
+    }
+    taskConnection.abort();
+    let cleanupFailed = false;
+    let cleanupFailure;
+    if (transactionStarted) {
+        try {
+            await queryPlatformAuthInventoryFenceWithinDeadline(connection, 'ROLLBACK', undefined, deadline);
+            transactionStarted = false;
+        }
+        catch (error) {
+            cleanupFailed = true;
+            cleanupFailure = error;
+        }
+    }
+    if (sourceFenceHeld && !cleanupFailed) {
+        try {
+            await releasePlatformAuthInventorySourceFenceWithinDeadline(connection, deadline);
+            sourceFenceHeld = false;
+        }
+        catch (error) {
+            cleanupFailed = true;
+            cleanupFailure = error;
+        }
+    }
+    const unsafeFailure = cleanupFailed ||
+        failure instanceof PlatformAuthInventoryFenceDeadlineError ||
+        platformAuthInventoryFenceDeadlineElapsed(deadline)
+        ? platformAuthInventoryFenceError(cleanupFailure ?? failure)
+        : undefined;
+    try {
+        connection.release?.(unsafeFailure);
+    }
+    catch (error) {
+        cleanupFailed = true;
+        cleanupFailure ??= error;
+    }
+    if (failed)
+        throw failure;
+    if (cleanupFailed)
+        throw cleanupFailure;
+    if (!completed)
+        throw new PlatformAuthMigrationError('inventory_unavailable');
+    return result;
+}
+class PlatformAuthInventoryFenceDeadlineError extends PlatformAuthMigrationError {
+    constructor() {
+        super('inventory_unavailable');
+        this.name = 'PlatformAuthInventoryFenceDeadlineError';
+    }
+}
+async function connectPlatformAuthInventoryFenceWithinDeadline(connect, deadline) {
+    const acquisition = connect();
+    try {
+        return await runPlatformAuthInventoryFenceWithinDeadline(acquisition, deadline);
+    }
+    catch (error) {
+        void acquisition.then((connection) => {
+            try {
+                connection.release?.(platformAuthInventoryFenceError(error));
+            }
+            catch {
+                // The pool already rejected acquisition; there is no further safe cleanup path.
+            }
+        }, () => undefined);
+        throw error;
+    }
+}
+async function queryPlatformAuthInventoryFenceWithinDeadline(connection, sql, values, deadline) {
+    assertPlatformAuthInventoryFenceWithinDeadline(deadline);
+    return runPlatformAuthInventoryFenceWithinDeadline(values === undefined ? connection.query(sql) : connection.query(sql, values), deadline);
+}
+async function releasePlatformAuthInventorySourceFenceWithinDeadline(connection, deadline) {
+    const unlocked = await queryPlatformAuthInventoryFenceWithinDeadline(connection, `SELECT pg_advisory_unlock(
+       hashtextextended($1 || current_schema(), 0)
+     ) AS unlocked`, [PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX], deadline);
+    if (unlocked.rows[0]?.unlocked !== true)
+        throw new PlatformAuthMigrationError('inventory_unavailable');
+}
+function platformAuthInventoryFenceError(error) {
+    return error instanceof Error ? error : new PlatformAuthMigrationError('inventory_unavailable');
+}
+function platformAuthInventoryFenceDeadlineElapsed(deadline) {
+    return deadline !== undefined && performance.now() >= deadline;
+}
+async function setPlatformAuthInventoryFenceTransactionTimeouts(connection, options, deadline = platformAuthInventoryFenceDeadline(options)) {
+    for (const [setting, timeout] of [
+        ['lock_timeout', options.lockTimeoutMs],
+        ['statement_timeout', options.statementTimeoutMs],
+    ]) {
+        if (timeout === undefined)
+            continue;
+        if (!Number.isSafeInteger(timeout) || timeout <= 0)
+            throw new PlatformAuthMigrationError('inventory_unavailable');
+        const remaining = remainingPlatformAuthInventoryFenceMilliseconds(deadline);
+        await queryPlatformAuthInventoryFenceWithinDeadline(connection, `SET LOCAL ${setting} TO '${Math.min(timeout, remaining)}ms'`, undefined, deadline);
+    }
+}
+function validatedPlatformAuthInventoryFenceTables(tables) {
+    const validated = [...new Set(tables ?? [])].sort();
+    if (validated.some((table) => !/^[a-z][a-z0-9_]*$/.test(table)))
+        throw new PlatformAuthMigrationError('inventory_unavailable');
+    return validated;
+}
+function platformAuthInventoryFenceDeadline(options) {
+    const configured = [options.lockTimeoutMs, options.statementTimeoutMs].filter((value) => value !== undefined);
+    for (const timeout of configured)
+        if (!Number.isSafeInteger(timeout) || timeout <= 0)
+            throw new PlatformAuthMigrationError('inventory_unavailable');
+    return configured.length === 0 ? undefined : performance.now() + Math.min(...configured);
+}
+async function acquirePlatformAuthInventorySourceFenceWithinDeadline(connection, deadline) {
+    if (deadline === undefined) {
+        await acquirePlatformAuthInventorySourceFence(connection);
+        return;
+    }
+    for (;;) {
+        assertPlatformAuthInventoryFenceWithinDeadline(deadline);
+        const acquired = await queryPlatformAuthInventoryFenceWithinDeadline(connection, `SELECT pg_try_advisory_lock(
+         hashtextextended($1 || current_schema(), 0)
+       ) AS acquired`, [PLATFORM_AUTH_INVENTORY_SOURCE_FENCE_LOCK_PREFIX], deadline);
+        if (acquired.rows[0]?.acquired === true)
+            return;
+        await delayPlatformAuthInventoryFence(Math.min(10, remainingPlatformAuthInventoryFenceMilliseconds(deadline)));
+    }
+}
+function budgetedPlatformAuthInventoryFenceConnection(connection, deadline, options) {
+    if (deadline === undefined)
+        return { connection, abort: () => undefined };
+    let aborted = false;
+    let pending = Promise.resolve();
+    return {
+        connection: {
+            query: (sql, values) => {
+                const query = pending.then(async () => {
+                    if (aborted)
+                        throw new PlatformAuthMigrationError('inventory_unavailable');
+                    await setPlatformAuthInventoryFenceTransactionTimeouts(connection, options, deadline);
+                    if (aborted)
+                        throw new PlatformAuthMigrationError('inventory_unavailable');
+                    return queryPlatformAuthInventoryFenceWithinDeadline(connection, sql, values, deadline);
+                });
+                pending = query.then(() => undefined, () => undefined);
+                return query;
+            },
+        },
+        abort: () => {
+            aborted = true;
+        },
+    };
+}
+async function runPlatformAuthInventoryFenceWithinDeadline(operation, deadline) {
+    if (deadline === undefined)
+        return operation;
+    let remaining;
+    try {
+        remaining = remainingPlatformAuthInventoryFenceMilliseconds(deadline);
+    }
+    catch (error) {
+        void operation.catch(() => undefined);
+        throw error;
+    }
+    let timeout;
+    try {
+        return await Promise.race([
+            operation,
+            new Promise((_, reject) => {
+                timeout = setTimeout(() => reject(new PlatformAuthInventoryFenceDeadlineError()), remaining);
+            }),
+        ]);
+    }
+    finally {
+        if (timeout !== undefined)
+            clearTimeout(timeout);
+    }
+}
+function remainingPlatformAuthInventoryFenceMilliseconds(deadline) {
+    if (deadline === undefined)
+        return Number.MAX_SAFE_INTEGER;
+    const remaining = Math.ceil(deadline - performance.now());
+    if (remaining <= 0)
+        throw new PlatformAuthInventoryFenceDeadlineError();
+    return remaining;
+}
+function assertPlatformAuthInventoryFenceWithinDeadline(deadline) {
+    remainingPlatformAuthInventoryFenceMilliseconds(deadline);
+}
+function delayPlatformAuthInventoryFence(milliseconds) {
+    return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+//# sourceMappingURL=platform-auth-inventory-source-fence-transaction-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-transaction-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-inventory-source-fence-transaction-postgres.js","sourceRoot":"","sources":["../src/platform-auth-inventory-source-fence-transaction-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAM1E,MAAM,CAAC,MAAM,gDAAgD,GAC3D,0CAA0C,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC;IAErC,MAAM,UAAU,CAAC,KAAK,CACpB;;OAEG,EACH,CAAC,gDAAgD,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CACrC;;mBAEe,EACf,CAAC,gDAAgD,CAAC,CACnD,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI;QACrC,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAClE,IAAe,EACf,IAAiD,EACjD,UAII,EAAE;IAEN,MAAM,UAAU,GAAG,yCAAyC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,kCAAkC,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,UAAU,GACd,IAAI,CAAC,OAAO,KAAK,SAAS;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,4CAA4C,CACjE,UAAU,EACV,QAAQ,EACR,OAAO,CACR,CAAC;IACF,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,MAAU,CAAC;IACf,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,qDAAqD,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClF,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,MAAM,6CAA6C,CACjD,UAAU,EACV,uCAAuC,EACvC,SAAS,EACT,QAAQ,CACT,CAAC;QACF,kBAAkB,GAAG,IAAI,CAAC;QAC1B,MAAM,gDAAgD,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YACzB,MAAM,6CAA6C,CACjD,UAAU,EACV,cAAc,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAChF,SAAS,EACT,QAAQ,CACT,CAAC;QACJ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,qDAAqD,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClF,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,MAAM,GAAG,MAAM,2CAA2C,CACxD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAC/B,QAAQ,CACT,CAAC;QACF,MAAM,gDAAgD,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtF,MAAM,6CAA6C,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/F,kBAAkB,GAAG,KAAK,CAAC;QAC3B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,IAAI,CAAC;QACd,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,cAAc,CAAC,KAAK,EAAE,CAAC;IAEvB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,cAAuB,CAAC;IAC5B,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,6CAA6C,CACjD,UAAU,EACV,UAAU,EACV,SAAS,EACT,QAAQ,CACT,CAAC;YACF,kBAAkB,GAAG,KAAK,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,GAAG,IAAI,CAAC;YACrB,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,eAAe,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,qDAAqD,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClF,eAAe,GAAG,KAAK,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,GAAG,IAAI,CAAC;YACrB,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GACjB,aAAa;QACb,OAAO,YAAY,uCAAuC;QAC1D,yCAAyC,CAAC,QAAQ,CAAC;QACjD,CAAC,CAAC,+BAA+B,CAAC,cAAc,IAAI,OAAO,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,GAAG,IAAI,CAAC;QACrB,cAAc,KAAK,KAAK,CAAC;IAC3B,CAAC;IAED,IAAI,MAAM;QAAE,MAAM,OAAO,CAAC;IAC1B,IAAI,aAAa;QAAE,MAAM,cAAc,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,uCAAwC,SAAQ,0BAA0B;IAC9E;QACE,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,yCAAyC,CAAC;IACxD,CAAC;CACF;AAED,KAAK,UAAU,+CAA+C,CAC5D,OAAuC,EACvC,QAA4B;IAE5B,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,MAAM,2CAA2C,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,WAAW,CAAC,IAAI,CACnB,CAAC,UAAU,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,UAAU,CAAC,OAAO,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,gFAAgF;YAClF,CAAC;QACH,CAAC,EACD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,6CAA6C,CAC1D,UAAqC,EACrC,GAAW,EACX,MAAsC,EACtC,QAA4B;IAE5B,8CAA8C,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,2CAA2C,CAChD,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAI,GAAG,EAAE,MAAM,CAAC,EAClF,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qDAAqD,CAClE,UAAqC,EACrC,QAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,6CAA6C,CAGlE,UAAU,EACV;;mBAEe,EACf,CAAC,gDAAgD,CAAC,EAClD,QAAQ,CACT,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI;QACrC,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,yCAAyC,CAAC,QAA4B;IAC7E,OAAO,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,gDAAgD,CAC7D,UAAqC,EACrC,OAGC,EACD,QAAQ,GAAG,kCAAkC,CAAC,OAAO,CAAC;IAEtD,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI;QAC/B,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC;QACvC,CAAC,mBAAmB,EAAE,OAAO,CAAC,kBAAkB,CAAC;KACzC,EAAE,CAAC;QACX,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;YAChD,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,+CAA+C,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,6CAA6C,CACjD,UAAU,EACV,aAAa,OAAO,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,EAC7D,SAAS,EACT,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yCAAyC,CAChD,MAAqC;IAErC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kCAAkC,CAAC,OAG3C;IACC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAC3E,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAChD,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,UAAU;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;YAChD,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,qDAAqD,CAClE,UAAqC,EACrC,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,uCAAuC,CAAC,UAAU,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,SAAS,CAAC;QACR,8CAA8C,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,6CAA6C,CAGlE,UAAU,EACV;;qBAEe,EACf,CAAC,gDAAgD,CAAC,EAClD,QAAQ,CACT,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI;YAAE,OAAO;QAChD,MAAM,+BAA+B,CACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,+CAA+C,CAAC,QAAQ,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,4CAA4C,CACnD,UAA2B,EAC3B,QAA4B,EAC5B,OAGC;IAKD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IAC1E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,OAAO;QACL,UAAU,EAAE;YACV,KAAK,EAAE,CAA8B,GAAW,EAAE,MAA2B,EAAE,EAAE;gBAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBACpC,IAAI,OAAO;wBAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;oBAC3E,MAAM,gDAAgD,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACtF,IAAI,OAAO;wBAAE,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;oBAC3E,OAAO,6CAA6C,CAClD,UAAU,EACV,GAAG,EACH,MAAM,EACN,QAAQ,CACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,OAAO,GAAG,KAAK,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;SACF;QACD,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2CAA2C,CACxD,SAAqB,EACrB,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,+CAA+C,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAkD,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,SAAS;YACT,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,uCAAuC,EAAE,CAAC,EAC3D,SAAS,CACV,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,+CAA+C,CAAC,QAA4B;IACnF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,uCAAuC,EAAE,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,8CAA8C,CAAC,QAA4B;IAClF,+CAA+C,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,+BAA+B,CAAC,YAAoB;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AACrE,CAAC"}