@ontemper/sdk 0.8.0 → 0.8.1

package/dist/ResourceRecords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceRecords.d.ts","sourceRoot":"","sources":["../src/ResourceRecords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAuB,MAAM,EAAqD,MAAM,QAAQ,CAAC;AAYhH,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAK5D,mFAAmF;AACnF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC;AAC3C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAC;AAkBlD,yGAAyG;AACzG,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAkC7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AA4BhE,uGAAuG;AACvG,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DAazB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,sHAAsH;AACtH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAUrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAqBhD,oGAAoG;AACpG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAU5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAwC9D;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CAiBxB,CAAC;AACF,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAC;;;;;;;AAIpD;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,4BAK3C;IACA,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,uBAAuB,CAU7E;CACF;AA2GD,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,GAAG;IAAE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAA;CAAE,CAAC;AAE7E;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,CAAC,SAAS,YAAY,UACzC,CAAC,OACJ,MAAM,SACJ,MAAM,CAAC,IAAI,KACjB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,uBAAuB,CAwBvE,CAAC"}

package/dist/ResourceRecords.js

@@ -0,0 +1,303 @@
+import { Effect, Predicate, Redacted, Schema, SchemaAST, SchemaTransformation } from 'effect';
+import { As2IdentityResource, As2PartnerResource } from './As2Resource.js';
+import { AbsoluteHttpUrl, AwsAuth, HttpApiResource, HttpProxy, OAuthTokenRequest, recordStruct, TlsSettings, } from './HttpApiResource.js';
+import { SDK_VERSION } from './Manifest.js';
+import { InvalidResourceError } from './ResourcesErrors.js';
+const Secret = Schema.RedactedFromValue(Schema.String);
+const NonEmptySecret = Schema.RedactedFromValue(Schema.String.check(Schema.isMinLength(1)));
+const NonEmptyString = Schema.String.check(Schema.isMinLength(1));
+const Port = Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 65_535 }));
+// Legacy SSH ports accept every integer, including those outside the safe-integer range and TCP port range.
+const SshPort = Schema.Number.check(Schema.makeFilter(Number.isInteger, { expected: 'an integer', toJsonSchema: () => ({ type: 'integer' }) }));
+const SshAlgorithms = recordStruct({
+    kex: Schema.optional(Schema.Array(Schema.String)),
+    serverHostKey: Schema.optional(Schema.Array(Schema.String)),
+    cipher: Schema.optional(Schema.Array(Schema.String)),
+    hmac: Schema.optional(Schema.Array(Schema.String)),
+});
+/** A `postgresql` record; `sslmode` carries libpq semantics, and `tls` the CA and client certificate. */
+export const PostgresqlResource = recordStruct({
+    host: NonEmptyString,
+    port: Port.pipe(Schema.withDecodingDefault(Effect.succeed(5432))),
+    dbname: NonEmptyString,
+    user: NonEmptyString,
+    // Closed: the type decides how the client signs in.
+    auth: Schema.Union([
+        recordStruct({ type: Schema.Literal('password'), password: Secret }),
+        recordStruct({ type: Schema.Literal('rds_iam'), region: NonEmptyString, awsAuth: AwsAuth }),
+        recordStruct({ type: Schema.Literal('none') }),
+    ]),
+    // Closed: libpq's weaker `allow` and `prefer` would map to no TLS at all.
+    sslmode: Schema.Literals(['disable', 'require', 'verify-ca', 'verify-full']).pipe(Schema.withDecodingDefault(Effect.succeed('verify-full'))),
+    tls: Schema.optional(TlsSettings),
+    sshTunnel: Schema.optional(recordStruct({
+        host: NonEmptyString,
+        port: SshPort.pipe(Schema.withDecodingDefault(Effect.succeed(22))),
+        username: Schema.String,
+        auth: Schema.Union([
+            recordStruct({
+                type: Schema.Literal('credentials'),
+                password: Schema.optional(Secret),
+                privateKey: Schema.optional(Secret),
+                passphrase: Schema.optional(Secret),
+            }),
+        ]).pipe(Schema.withDecodingDefault(Effect.succeed({ type: 'credentials' }))),
+        hostKeyFingerprints: Schema.optional(Schema.Array(NonEmptyString)),
+        algorithms: Schema.optional(SshAlgorithms),
+    })),
+    options: Schema.optional(Schema.String),
+});
+// The port is 1-65535 without leading zeros, as the API catalog requires; `\s` is spelled out for deploy's RE2.
+const KafkaBroker = Schema.String.check(Schema.isPattern(/^(\[[0-9A-Fa-f:.]+\]|[^\t\n\v\f\r\p{Z}:/@[\]]+):(?:[1-9][0-9]{0,3}|[1-5][0-9]{4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])$/u), Schema.makeFilter((broker) => !broker.includes(String.fromCodePoint(0xfeff)), {
+    expected: 'a broker without whitespace',
+    toJsonSchema: () => ({ not: { pattern: String.fromCodePoint(0xfeff) } }),
+}));
+const KafkaAuth = Schema.Union([
+    recordStruct({ type: Schema.Literal('none') }),
+    recordStruct({ type: Schema.Literal('sasl_plain'), username: Schema.String, password: Secret }),
+    recordStruct({
+        type: Schema.Literal('sasl_scram'),
+        mechanism: Schema.Literals(['SCRAM-SHA-256', 'SCRAM-SHA-512']).pipe(Schema.withDecodingDefault(Effect.succeed('SCRAM-SHA-512'))),
+        username: Schema.String,
+        password: Secret,
+    }),
+    recordStruct({ type: Schema.Literal('oauthbearer'), tokenRequest: OAuthTokenRequest }),
+    recordStruct({ type: Schema.Literal('aws_msk_iam'), region: NonEmptyString, awsAuth: AwsAuth }),
+]);
+/** A `kafka` record: bootstrap brokers, the `auth` variant, and `tls`, whose presence turns TLS on. */
+export const KafkaResource = recordStruct({
+    brokers: Schema.Array(KafkaBroker).check(Schema.isMinLength(1)),
+    clientId: Schema.optional(Schema.String),
+    // Closed: the type decides the SASL mechanism, and a client that falls back on an unknown one signs in without it.
+    auth: KafkaAuth,
+    tls: Schema.optional(TlsSettings),
+}).check(
+// MSK IAM and OAuth bearer send a token in the SASL payload; without `tls` it would cross the network in plaintext.
+Schema.makeFilter(({ auth, tls }) => (auth.type !== 'aws_msk_iam' && auth.type !== 'oauthbearer') ||
+    tls !== undefined || { path: ['tls'], issue: 'Expected tls with aws_msk_iam or oauthbearer' }));
+/** An `s3` record: bucket, region, an optional S3-compatible endpoint, and the AWS credential source under `auth`. */
+export const S3Resource = recordStruct({
+    bucket: NonEmptyString,
+    region: NonEmptyString.pipe(Schema.withDecodingDefault(Effect.succeed('us-east-1'))),
+    endpoint: Schema.optional(AbsoluteHttpUrl),
+    pathStyle: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
+    prefix: Schema.optional(Schema.String),
+    // Closed and required: `ambient` is an explicit choice (Temper-operated runtimes refuse it), never a fallback.
+    auth: AwsAuth,
+    tls: Schema.optional(TlsSettings),
+    proxy: Schema.optional(HttpProxy),
+});
+// Closed: the type decides which identity the client presents, and a guess could fall back to anonymous access.
+const AzureAuth = Schema.Union([
+    recordStruct({ type: Schema.Literal('shared_key'), accountKey: NonEmptySecret }),
+    recordStruct({ type: Schema.Literal('sas'), sasToken: NonEmptySecret }),
+    recordStruct({
+        type: Schema.Literal('service_principal'),
+        tenantId: NonEmptyString,
+        clientId: NonEmptyString,
+        clientSecret: NonEmptySecret,
+    }),
+    recordStruct({
+        type: Schema.Literal('service_principal_certificate'),
+        tenantId: NonEmptyString,
+        clientId: NonEmptyString,
+        certificatePem: NonEmptySecret,
+    }),
+    recordStruct({ type: Schema.Literal('ambient') }),
+]);
+/** An `azure_blob` record: account, container, endpoint, and the credential source under `auth`. */
+export const AzureBlobResource = recordStruct({
+    accountName: NonEmptyString,
+    containerName: NonEmptyString,
+    // A full Blob service URL (Azurite, a gateway, a custom domain); it overrides `endpointSuffix`.
+    endpoint: Schema.optional(AbsoluteHttpUrl),
+    endpointSuffix: NonEmptyString.pipe(Schema.withDecodingDefault(Effect.succeed('core.windows.net'))),
+    prefix: Schema.optional(Schema.String),
+    auth: AzureAuth,
+    tls: Schema.optional(TlsSettings),
+    proxy: Schema.optional(HttpProxy),
+});
+const sftpFields = {
+    host: NonEmptyString,
+    port: SshPort.pipe(Schema.withDecodingDefault(Effect.succeed(22))),
+    username: NonEmptyString,
+    // Closed: the type decides which credentials the client offers.
+    auth: Schema.Union([
+        recordStruct({ type: Schema.Literal('password'), password: Secret }),
+        recordStruct({
+            type: Schema.Literal('private_key'),
+            privateKey: Secret,
+            passphrase: Schema.optional(Secret),
+        }),
+        recordStruct({
+            type: Schema.Literal('private_key_and_password'),
+            privateKey: Secret,
+            passphrase: Schema.optional(Secret),
+            password: Secret,
+        }),
+    ]),
+    hostKeyFingerprints: Schema.optional(Schema.Array(NonEmptyString)),
+    algorithms: Schema.optional(SshAlgorithms),
+};
+const SftpLifted = Schema.toType(recordStruct({
+    ...sftpFields,
+    password: Schema.optional(Schema.Redacted(Schema.Unknown)),
+    privateKey: Schema.optional(Schema.Redacted(Schema.Unknown)),
+    passphrase: Schema.optional(Schema.Redacted(Schema.Unknown)),
+}));
+/**
+ * An `sftp` record; `hostKeyFingerprints` are the `SHA256:` fingerprints the client must pin when set. The
+ * credentials under `auth` are also lifted to the top level. Lifted values are Redacted<unknown>: legacy also copies
+ * undeclared credential fields; narrow those values before use, or read the typed fields of the auth variant.
+ */
+export const SftpResource = recordStruct(sftpFields).pipe(Schema.decodeTo(SftpLifted, SchemaTransformation.transform({
+    decode: (record) => {
+        const lifted = {};
+        for (const field of ['password', 'privateKey', 'passphrase']) {
+            const value = record.auth[field];
+            if (value !== undefined)
+                lifted[field] = Redacted.isRedacted(value) ? value : Redacted.make(value);
+        }
+        // Legacy lifting overwrites root credential copies, including stale fields the auth variant does not use.
+        const { password: _password, privateKey: _privateKey, passphrase: _passphrase, ...fields } = record;
+        return { ...fields, ...lifted };
+    },
+    encode: ({ password: _password, privateKey: _privateKey, passphrase: _passphrase, ...record }) => record,
+})));
+const CLIENT_NAME = '@ontemper/sdk';
+/**
+ * A built-in record holds a value this SDK does not know in a closed field: one that chooses TLS, where a key
+ * travels, or AS2 cryptography, where a guess would weaken security silently. The message names the fields and this
+ * SDK's version, never the value, which can be a mis-pointed secret.
+ */
+export class UnknownRecordValueError extends Schema.TaggedError()('UnknownRecordValueError', {
+    key: Schema.String,
+    fields: Schema.Array(Schema.String),
+    clientVersion: Schema.String,
+    message: Schema.String,
+}) {
+    static of(key, fields) {
+        const subject = fields.length === 1 ? `field ${fields[0]} uses a value` : `fields ${fields.join(', ')} use values`;
+        return new UnknownRecordValueError({
+            key,
+            fields,
+            clientVersion: SDK_VERSION,
+            message: `record ${key}: ${subject} this ${CLIENT_NAME} version (${SDK_VERSION}) does not know; ` +
+                'upgrade to a release that supports it',
+        });
+    }
+}
+// Only these schemas mirror the platform catalog; a caller's own closed value failing is not an outdated SDK.
+const BUILT_IN_RECORDS = new Set([
+    HttpApiResource,
+    SftpResource,
+    PostgresqlResource,
+    KafkaResource,
+    S3Resource,
+    AzureBlobResource,
+    As2IdentityResource,
+    As2PartnerResource,
+]);
+const isJsonObject = Schema.is(Schema.JsonObject);
+const isJsonArray = Schema.is(Schema.Array(Schema.Json));
+// The resolved value at an issue's path; closed values sit in objects, and arrays only hold brokers and fingerprints.
+const valueAt = (value, path) => path.reduce((current, segment) => {
+    if (isJsonArray(current))
+        return current[Number(segment)];
+    return isJsonObject(current) ? current[segment] : undefined;
+}, value);
+// The one property every member of a union of structs fixes to a literal, such as `type` or `mode`.
+const discriminatorOf = (types) => {
+    const literalKeys = (ast) => SchemaAST.isObjects(ast)
+        ? ast.propertySignatures.filter((field) => SchemaAST.isLiteral(field.type)).map((field) => String(field.name))
+        : [];
+    const [first, ...rest] = types;
+    if (first === undefined)
+        return undefined;
+    return literalKeys(first).find((key) => rest.every((member) => literalKeys(member).includes(key)));
+};
+// Never the received value: a secret mis-pointed at the field would land in the error.
+const leafMessage = (issue) => {
+    if (issue._tag === 'MissingKey')
+        return 'Missing key';
+    const invalid = issue._tag === 'Filter' ? issue.issue : issue;
+    const message = invalid._tag === 'InvalidValue' ? invalid.annotations?.message : undefined;
+    if (Predicate.isString(message))
+        return message;
+    const expected = issue._tag === 'Filter' ? issue.filter.annotations?.expected : undefined;
+    return Predicate.isString(expected) ? `Expected ${expected}` : 'Invalid value';
+};
+const unionFindings = (union, path, value) => {
+    if (!SchemaAST.isUnion(union))
+        return [{ path, message: 'Invalid value', unknownValue: false }];
+    const types = union.types.filter((member) => !SchemaAST.isUndefined(member));
+    const only = types[0];
+    if (types.length === 1 && only !== undefined && SchemaAST.isUnion(only))
+        return unionFindings(only, path, value);
+    const at = valueAt(value, path);
+    if (types.every(SchemaAST.isLiteral)) {
+        return [{ path, message: 'Invalid value', unknownValue: Predicate.isString(at) }];
+    }
+    const discriminator = discriminatorOf(types);
+    if (discriminator === undefined || !isJsonObject(at))
+        return [{ path, message: 'Invalid value', unknownValue: false }];
+    const received = at[discriminator];
+    return [
+        {
+            path: [...path, discriminator],
+            message: received === undefined ? 'Missing key' : 'Invalid value',
+            unknownValue: Predicate.isString(received),
+        },
+    ];
+};
+function findings(issue, path, value) {
+    switch (issue._tag) {
+        case 'Pointer':
+            return findings(issue.issue, [...path, ...issue.path.map(String)], value);
+        case 'Composite':
+            return issue.issues.flatMap((inner) => findings(inner, path, value));
+        case 'Encoding':
+            return findings(issue.issue, path, value);
+        case 'Filter':
+            // A filter that names a field (`{ path, issue }`) reports at that field.
+            return issue.issue._tag === 'Pointer'
+                ? findings(issue.issue, path, value)
+                : [{ path, message: leafMessage(issue), unknownValue: false }];
+        case 'AnyOf': {
+            if (issue.issues.length === 0)
+                return unionFindings(issue.ast, path, value);
+            const candidates = issue.issues.map((inner) => findings(inner, path, value));
+            // A catch-all member that fails only at `type` (`HttpApiAuth`'s unsupported variant) is not the intended one.
+            const intended = candidates.filter((found) => !found.every((finding) => finding.path.length === path.length + 1 && finding.path.at(-1) === 'type'));
+            return (intended.length > 0 ? intended : candidates).flat();
+        }
+        default:
+            return [{ path, message: leafMessage(issue), unknownValue: false }];
+    }
+}
+const PATTERN_MESSAGE = 'Expected a string matching the RegExp';
+/**
+ * Decodes a resolved record. A mismatch names the fields, never their values; a built-in record with a closed value
+ * this SDK does not know fails with `UnknownRecordValueError`.
+ */
+export const decodeRecord = (schema, key, value) => Schema.decodeUnknownEffect(schema)(value, { errors: 'all' }).pipe(Effect.mapError((error) => {
+    const found = findings(error.issue, [], value);
+    const unknown = [
+        ...new Set(found.filter((finding) => finding.unknownValue).map((finding) => finding.path.join('.'))),
+    ];
+    if (BUILT_IN_RECORDS.has(schema) && unknown.length > 0)
+        return UnknownRecordValueError.of(key, unknown);
+    const lines = found.map((finding) => ({
+        field: finding.path.join('.') || '<root>',
+        message: finding.message,
+    }));
+    // Overlapping patterns and custom checks can fail together; the custom message says why.
+    const shown = lines.filter(({ field, message }) => !message.startsWith(PATTERN_MESSAGE) ||
+        !lines.some((other) => other.field === field && !other.message.startsWith(PATTERN_MESSAGE)));
+    const issues = [...new Set(shown.map(({ field, message }) => `${field}: ${message}`))];
+    return new InvalidResourceError({
+        target: `key ${key}`,
+        message: `Resource ${key} does not match the expected schema: ${issues.join('; ')}`,
+    });
+}));
+//# sourceMappingURL=ResourceRecords.js.map

package/dist/ResourceRecords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceRecords.js","sourceRoot":"","sources":["../src/ResourceRecords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAoB,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAChH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACL,eAAe,EACf,OAAO,EACP,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAS5D,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACjF,4GAA4G;AAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACjC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAC3G,CAAC;AAEF,MAAM,aAAa,GAAG,YAAY,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CACnD,CAAC,CAAC;AAEH,yGAAyG;AACzG,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;IAC7C,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,cAAc;IACpB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;QACjB,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACpE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC3F,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;KAC/C,CAAC;IACF,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,aAAsB,CAAC,CAAC,CACnE;IACD,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC,QAAQ,CACxB,YAAY,CAAC;QACX,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;YACjB,YAAY,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;gBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aACpC,CAAC;SACH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,CAAC,CAAC,CAAC;QACrF,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;KAC3C,CAAC,CACH;IACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;CACxC,CAAC,CAAC;AAGH,gHAAgH;AAChH,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACrC,MAAM,CAAC,SAAS,CACd,4IAA4I,CAC7I,EACD,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE;IAC5E,QAAQ,EAAE,6BAA6B;IACvC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;CACzE,CAAC,CACH,CAAC;AAEF,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9C,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC/F,YAAY,CAAC;QACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,eAAwB,CAAC,CAAC,CACrE;QACD,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,QAAQ,EAAE,MAAM;KACjB,CAAC;IACF,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IACtF,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;CAChG,CAAC,CAAC;AAEH,uGAAuG;AACvG,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,mHAAmH;IACnH,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;CAClC,CAAC,CAAC,KAAK;AACN,oHAAoH;AACpH,MAAM,CAAC,UAAU,CACf,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAChB,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC;IAC5D,GAAG,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAChG,CACF,CAAC;AAGF,sHAAsH;AACtH,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;IACrC,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,+GAA+G;IAC/G,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;CAClC,CAAC,CAAC;AAGH,gHAAgH;AAChH,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IAChF,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IACvE,YAAY,CAAC;QACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACzC,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,cAAc;QACxB,YAAY,EAAE,cAAc;KAC7B,CAAC;IACF,YAAY,CAAC;QACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,+BAA+B,CAAC;QACrD,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE,cAAc;QACxB,cAAc,EAAE,cAAc;KAC/B,CAAC;IACF,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;IAC5C,WAAW,EAAE,cAAc;IAC3B,aAAa,EAAE,cAAc;IAC7B,gGAAgG;IAChG,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC1C,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnG,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;CAClC,CAAC,CAAC;AAGH,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,QAAQ,EAAE,cAAc;IACxB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;QACjB,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACpE,YAAY,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;YACnC,UAAU,EAAE,MAAM;YAClB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;SACpC,CAAC;QACF,YAAY,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC;YAChD,UAAU,EAAE,MAAM;YAClB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC;KACH,CAAC;IACF,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAClE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;CAC3C,CAAC;AAEF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC9B,YAAY,CAAC;IACX,GAAG,UAAU;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;CAC7D,CAAC,CACH,CAAC;AAQF;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,QAAQ,CACb,UAAU,EACV,oBAAoB,CAAC,SAAS,CAAC;IAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,CAAU,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrG,CAAC;QACD,0GAA0G;QAC1G,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;QACpG,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM;CACzG,CAAC,CACH,CACF,CAAC;AAGF,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,WAAW,EAA2B,CAAC,yBAAyB,EAAE;IACpH,GAAG,EAAE,MAAM,CAAC,MAAM;IAClB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC,MAAM;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CAAC;IACA,MAAM,CAAC,EAAE,CAAC,GAAW,EAAE,MAA6B;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACnH,OAAO,IAAI,uBAAuB,CAAC;YACjC,GAAG;YACH,MAAM;YACN,aAAa,EAAE,WAAW;YAC1B,OAAO,EACL,UAAU,GAAG,KAAK,OAAO,SAAS,WAAW,aAAa,WAAW,mBAAmB;gBACxF,uCAAuC;SAC1C,CAAC,CAAC;IACL,CAAC;CACF;AAED,8GAA8G;AAC9G,MAAM,gBAAgB,GAAyB,IAAI,GAAG,CAAC;IACrD,eAAe;IACf,YAAY;IACZ,kBAAkB;IAClB,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC,CAAC;AASH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAClD,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAEzD,sHAAsH;AACtH,MAAM,OAAO,GAAG,CAAC,KAAkB,EAAE,IAA2B,EAA2B,EAAE,CAC3F,IAAI,CAAC,MAAM,CAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IACxD,IAAI,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC,EAAE,KAAK,CAAC,CAAC;AAEZ,oGAAoG;AACpG,MAAM,eAAe,GAAG,CAAC,KAAmC,EAAsB,EAAE;IAClF,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAE,EAAE,CACzC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;QACtB,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9G,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC,CAAC;AAEF,uFAAuF;AACvF,MAAM,WAAW,GAAG,CAAC,KAAwB,EAAU,EAAE;IACvD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,aAAa,CAAC;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;AACjF,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,KAAoB,EACpB,IAA2B,EAC3B,KAAkB,EACM,EAAE;IAC1B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACjH,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;IACnC,OAAO;QACL;YACE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YAC9B,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe;YACjE,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC3C;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAA2B,EAAE,KAAkB;IACzF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5E,KAAK,WAAW;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,KAAK,QAAQ;YACX,yEAAyE;YACzE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBACnC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;gBACpC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,KAAK,OAAO,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7E,8GAA8G;YAC9G,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAChH,CAAC;YACF,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,CAAC;QACD;YACE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAKhE;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAS,EACT,GAAW,EACX,KAAkB,EACwD,EAAE,CAC5E,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAkD,EAAE;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;KACrG,CAAC;IACF,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,uBAAuB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC,CAAC;IACJ,yFAAyF;IACzF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACrB,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC;QACpC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAC9F,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,oBAAoB,CAAC;QAC9B,MAAM,EAAE,OAAO,GAAG,EAAE;QACpB,OAAO,EAAE,YAAY,GAAG,wCAAwC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACpF,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/dist/Resources.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Resource pools, records, and Kafka client options:
+ * `import { makePostgresqlPool, KafkaResource, kafkaConfig } from '@temper/workflow/resources'`. PostgreSQL pools load
+ * the optional `pg` and `ws` peers when a pool is built, and Kafka's optional AWS peers load only for MSK IAM, so
+ * importing this module needs none.
+ */
+export { As2IdentityResource, As2PartnerResource } from './As2Resource.js';
+export { HttpApiAuth, HttpApiResource, HttpApiUnsupportedAuth, HttpProxy, OAuthTokenRequest, TlsSettings, } from './HttpApiResource.js';
+export { makePostgresqlPool, type PostgresqlPoolError } from './PostgreSql.js';
+export { AzureBlobResource, type JsonObject, type JsonValue, KafkaResource, PostgresqlResource, S3Resource, SftpResource, UnknownRecordValueError, } from './ResourceRecords.js';
+export { kafkaConfig, type KafkaClientConfig, type KafkaClientSasl, type KafkaClientTlsOptions, type KafkaConfigOptions, OptionalKafkaDependencyError, UnsupportedKafkaAuthError, } from './Kafka.js';
+export { InvalidResourceError, ResourceNotFoundError, ResourceNotSelectableError, ResourcesUnauthorizedError, ResourcesUnavailableError, } from './ResourcesErrors.js';
+//# sourceMappingURL=Resources.d.ts.map

package/dist/Resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Resources.d.ts","sourceRoot":"","sources":["../src/Resources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACL,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EACL,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC"}

package/dist/Resources.js

@@ -0,0 +1,13 @@
+/**
+ * Resource pools, records, and Kafka client options:
+ * `import { makePostgresqlPool, KafkaResource, kafkaConfig } from '@temper/workflow/resources'`. PostgreSQL pools load
+ * the optional `pg` and `ws` peers when a pool is built, and Kafka's optional AWS peers load only for MSK IAM, so
+ * importing this module needs none.
+ */
+export { As2IdentityResource, As2PartnerResource } from './As2Resource.js';
+export { HttpApiAuth, HttpApiResource, HttpApiUnsupportedAuth, HttpProxy, OAuthTokenRequest, TlsSettings, } from './HttpApiResource.js';
+export { makePostgresqlPool } from './PostgreSql.js';
+export { AzureBlobResource, KafkaResource, PostgresqlResource, S3Resource, SftpResource, UnknownRecordValueError, } from './ResourceRecords.js';
+export { kafkaConfig, OptionalKafkaDependencyError, UnsupportedKafkaAuthError, } from './Kafka.js';
+export { InvalidResourceError, ResourceNotFoundError, ResourceNotSelectableError, ResourcesUnauthorizedError, ResourcesUnavailableError, } from './ResourcesErrors.js';
+//# sourceMappingURL=Resources.js.map

package/dist/Resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Resources.js","sourceRoot":"","sources":["../src/Resources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EACL,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAA4B,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EACL,iBAAiB,EAGjB,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EAKX,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC"}

package/dist/RuntimeResources.d.ts

@@ -1,10 +1,24 @@
 import { Context, Effect, Layer, Redacted, Schema } from 'effect';
 import { HttpClient } from 'effect/http';
-import { type SelectResourceRuntimeInputSchema } from './Contract/RuntimeApi.js';
+import { type RuntimeInspectedResourceSchema, type SelectResourceRuntimeInputSchema } from './Contract/RuntimeApi.js';
 import { InvalidResourceError, ResourceNotFoundError, ResourceNotSelectableError, ResourcesUnauthorizedError, ResourcesUnavailableError } from './ResourcesErrors.js';
 /** Finds the one record of a type whose `x-selectable` field equals the value a tenant presented. */
 export type ResourceSelector = typeof SelectResourceRuntimeInputSchema.Type;
 export type ReadError = ResourceNotFoundError | ResourcesUnauthorizedError | ResourcesUnavailableError;
+/** The resolver's answer to `inspect`: literal fields and metadata, never a secret. */
+export type InspectedResource = typeof RuntimeInspectedResourceSchema.Type;
+/** The `./resources` pool client: uncached runtime reads and the current runtime token. */
+export declare const makeRuntimeResourceClient: Effect.Effect<{
+    /**
+     * The token for one database tunnel; re-read on every call, never cached by the caller. The tunnel re-checks it
+     * every 2 s, so a token in its 30 s refresh window would end the connection when it expires.
+     */
+    tunnelToken: Effect.Effect<string, ResourcesUnauthorizedError, never>;
+    variable: (key: string) => Effect.Effect<string, ReadError, never>;
+    resolve: (key: string) => Effect.Effect<Schema.Json, InvalidResourceError | ReadError, never>;
+    inspect: (key: string) => Effect.Effect<InspectedResource, ReadError>;
+    select: (selector: ResourceSelector) => Effect.Effect<string, InvalidResourceError | ResourceNotSelectableError | ReadError, never>;
+}, never, HttpClient.HttpClient>;
 /** What declared resources read through: the Temper runtime API in production, fixed values in tests. */
 export interface ResourceReader {
     /** A Variable's live value; `Redacted` because the platform, not the caller, decides what is secret. */

package/dist/RuntimeResources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeResources.d.ts","sourceRoot":"","sources":["../src/RuntimeResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,OAAO,EAAY,MAAM,EAAQ,KAAK,EAAU,QAAQ,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAErH,OAAO,EAAE,UAAU,EAA2C,MAAM,aAAa,CAAC;AAElF,OAAO,EAQL,KAAK,gCAAgC,EACtC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,sBAAsB,CAAC;AAY9B,qGAAqG;AACrG,MAAM,MAAM,gBAAgB,GAAG,OAAO,gCAAgC,CAAC,IAAI,CAAC;AAE5E,MAAM,MAAM,SAAS,GAAG,qBAAqB,GAAG,0BAA0B,GAAG,yBAAyB,CAAC;AA2KvG,yGAAyG;AACzG,MAAM,WAAW,cAAc;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,oBAAoB,CAAC,CAAC;IAChG,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,CACf,QAAQ,EAAE,gBAAgB,KACvB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,0BAA0B,GAAG,oBAAoB,CAAC,CAAC;CAC3F;;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,qBAErC;IAEC,MAAM,CAAC,QAAQ,CAAC,KAAK,8DAAiD;CACvE"}
+{"version":3,"file":"RuntimeResources.d.ts","sourceRoot":"","sources":["../src/RuntimeResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,OAAO,EAAY,MAAM,EAAQ,KAAK,EAAU,QAAQ,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAErH,OAAO,EAAE,UAAU,EAA2C,MAAM,aAAa,CAAC;AAElF,OAAO,EAQL,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,EACtC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,sBAAsB,CAAC;AAY9B,qGAAqG;AACrG,MAAM,MAAM,gBAAgB,GAAG,OAAO,gCAAgC,CAAC,IAAI,CAAC;AAE5E,MAAM,MAAM,SAAS,GAAG,qBAAqB,GAAG,0BAA0B,GAAG,yBAAyB,CAAC;AA0BvG,uFAAuF;AACvF,MAAM,MAAM,iBAAiB,GAAG,OAAO,8BAA8B,CAAC,IAAI,CAAC;AA2I3E,2FAA2F;AAC3F,eAAO,MAAM,yBAAyB;IAGlC;;;OAGG;;oBAEa,MAAM;mBACP,MAAM;mBACN,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,SAAS,CAAC;uBAChD,gBAAgB;gCAErC,CAAC;AA8BH,yGAAyG;AACzG,MAAM,WAAW,cAAc;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,oBAAoB,CAAC,CAAC;IAChG,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,CACf,QAAQ,EAAE,gBAAgB,KACvB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,0BAA0B,GAAG,oBAAoB,CAAC,CAAC;CAC3F;;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,qBAErC;IAEC,MAAM,CAAC,QAAQ,CAAC,KAAK,8DAAiD;CACvE"}

package/dist/RuntimeResources.js

@@ -26,7 +26,8 @@ const statusOfRuntimeError = {
     RuntimeResourcesConflictError: 409,
     RuntimeResourcesUnavailableError: 503,
 };
-const ResourcesMake = Effect.gen(function* () {
+// One authenticated runtime API caller; `RuntimeResources` and the `@temper/workflow/resources` pools share it.
+const makeRuntimeCaller = Effect.gen(function* () {
     const tokens = yield* makeRuntimeTokens;
     // Each attempt's scope owns its request: leaving the scope aborts it, so no response outlives its attempt.
     const platform = HttpClient.withScope(yield* HttpClient.HttpClient).pipe(HttpClient.mapRequestEffect((request) => Config.NonEmptyString('UNNBOUND_API_URL').pipe(Effect.map((apiUrl) => HttpClientRequest.prependUrl(request, apiUrl)), Effect.mapError(() => new ApiUrlMissing()))));
@@ -75,27 +76,55 @@ const ResourcesMake = Effect.gen(function* () {
             const first = yield* attempt(client.resourcesRuntime, token).pipe(Effect.map(Option.some), Effect.catchTag('TokenRefused', () => Effect.succeedNone));
             if (Option.isSome(first))
                 return first.value;
-            return yield* attempt(client.resourcesRuntime, yield* tokens.replacing(token));
+            // A refused token stays a refusal if its provider cannot replace it; a cached credential must never outlive it.
+            const replacement = yield* tokens.replacing(token).pipe(Effect.mapError(() => new TokenRefused()));
+            return yield* attempt(client.resourcesRuntime, replacement);
         }).pipe(Effect.catchIf((error) => error._tag !== 'ResourcesUnauthorizedError' && error._tag !== 'ResourcesUnavailableError', (error) => Effect.fail(toReadError(error))));
     };
-    const cache = (lookup) => Cache.makeWith(lookup, {
-        capacity: CACHE_CAPACITY,
-        // A failure is not kept: the next read asks the resolver again.
-        timeToLive: (exit) => (Exit.isSuccess(exit) ? CACHE_TTL : Duration.zero),
-    });
-    const variables = yield* cache((key) => call('resolveVariable', `key ${key}`, (api, authorization) => api.resolveVariable({ headers: { authorization }, payload: { key } })));
-    const values = yield* cache((key) => call('resolveResource', `key ${key}`, (api, authorization) => api.resolveResource({ headers: { authorization }, payload: { key } }), (status, message) => (status === 409 ? new InvalidResourceError({ target: `key ${key}`, message }) : undefined)));
-    // Keyed by value: `{a,b}` and `{b,a}` share one entry, and each tenant's presented value gets its own.
-    const selections = yield* cache((selector) => {
+    return { tokens, call };
+});
+// Registers the answer's secrets in the caller's context, so a cached read masks them like a fresh one.
+const unwrap = (read) => read.pipe(Effect.tap(({ redactionMasks }) => registerSecrets(redactionMasks ?? [])), Effect.map(({ value }) => value));
+// The four runtime reads, uncached; each answer still carries its `redactionMasks`.
+const runtimeReads = (call) => ({
+    variable: (key) => call('resolveVariable', `key ${key}`, (api, authorization) => api.resolveVariable({ headers: { authorization }, payload: { key } })),
+    resolve: (key) => call('resolveResource', `key ${key}`, (api, authorization) => api.resolveResource({ headers: { authorization }, payload: { key } }), (status, message) => (status === 409 ? new InvalidResourceError({ target: `key ${key}`, message }) : undefined)),
+    inspect: (key) => call('inspectResource', `key ${key}`, (api, authorization) => api.inspectResource({ headers: { authorization }, payload: { key } })),
+    select: (selector) => {
         const target = `${selector.resourceTypeKey} matching ${Object.keys(selector.match).join(', ')}`;
         return call('selectResource', target, (api, authorization) => api.selectResource({ headers: { authorization }, payload: selector }), (status, message) => status === 400
             ? new ResourceNotSelectableError({ target, message })
             : status === 409
                 ? new InvalidResourceError({ target, message })
                 : undefined);
+    },
+});
+/** The `./resources` pool client: uncached runtime reads and the current runtime token. */
+export const makeRuntimeResourceClient = Effect.map(makeRuntimeCaller, ({ tokens, call }) => {
+    const reads = runtimeReads(call);
+    return {
+        /**
+         * The token for one database tunnel; re-read on every call, never cached by the caller. The tunnel re-checks it
+         * every 2 s, so a token in its 30 s refresh window would end the connection when it expires.
+         */
+        tunnelToken: tokens.current,
+        variable: (key) => unwrap(reads.variable(key)),
+        resolve: (key) => unwrap(reads.resolve(key)),
+        inspect: (key) => unwrap(reads.inspect(key)),
+        select: (selector) => Effect.map(unwrap(reads.select(selector)), (selected) => selected.key),
+    };
+});
+const ResourcesMake = Effect.gen(function* () {
+    const reads = runtimeReads((yield* makeRuntimeCaller).call);
+    const cache = (lookup) => Cache.makeWith(lookup, {
+        capacity: CACHE_CAPACITY,
+        // A failure is not kept: the next read asks the resolver again.
+        timeToLive: (exit) => (Exit.isSuccess(exit) ? CACHE_TTL : Duration.zero),
     });
-    // Registers the answer's secrets in the caller's context, so a cached read masks them like a fresh one.
-    const unwrap = (read) => read.pipe(Effect.tap(({ redactionMasks }) => registerSecrets(redactionMasks ?? [])), Effect.map(({ value }) => value));
+    const variables = yield* cache(reads.variable);
+    const values = yield* cache(reads.resolve);
+    // Keyed by value: `{a,b}` and `{b,a}` share one entry, and each tenant's presented value gets its own.
+    const selections = yield* cache(reads.select);
     return RuntimeResources.of({
         variable: (key) => Effect.map(unwrap(Cache.get(variables, key)), Redacted.make),
         // Each caller gets its own copy: the cached value is shared across requests for 30 s.

package/dist/RuntimeResources.js.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeResources.js","sourceRoot":"","sources":["../src/RuntimeResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AACrH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAwB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,mBAAmB,GAQpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,mHAAmH;AACnH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACvC,2GAA2G;AAC3G,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE5C,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;AAQxE,4GAA4G;AAC5G,MAAM,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE,EAAE,CAAC;CAAG;AACpF,MAAM,aAAc,SAAQ,MAAM,CAAC,WAAW,EAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;CAAG;AAYvF,sFAAsF;AACtF,MAAM,oBAAoB,GAAG;IAC3B,+BAA+B,EAAE,GAAG;IACpC,iCAAiC,EAAE,GAAG;IACtC,8BAA8B,EAAE,GAAG;IACnC,6BAA6B,EAAE,GAAG;IAClC,6BAA6B,EAAE,GAAG;IAClC,gCAAgC,EAAE,GAAG;CACkB,CAAC;AAE1D,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACxC,2GAA2G;IAC3G,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CACtE,UAAU,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CACtC,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EACrE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,CAC3C,CACF,CACF,CAAC;IACF,0GAA0G;IAC1G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,EAAE;QAChE,UAAU,EAAE,QAAQ,CAAC,IAAI,CACvB,UAAU,CAAC,YAAY,CACrB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,EACrC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CACzB,CACF;KACF,CAAC,CAAC;IAGH,6FAA6F;IAC7F,MAAM,IAAI,GAAG,CACX,SAAoB,EACpB,MAAc,EACd,IAAyF,EACzF,MAAM,GAAuD,GAAG,EAAE,CAAC,SAAS,EAC3C,EAAE;QACnC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,oBAAoB,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,eAAe,MAAM,KAAK,MAAM,EAAE,CAAC;QAEnH,0GAA0G;QAC1G,MAAM,WAAW,GAAG,CAAC,KAAgB,EAAiB,EAAE;YACtD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,eAAe;oBAClB,OAAO,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;gBAC5F,KAAK,cAAc;oBACjB,OAAO,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBACjF,KAAK,iBAAiB;oBACpB,OAAO,IAAI,yBAAyB,CAAC;wBACnC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC3F,CAAC,CAAC;gBACL,KAAK,aAAa;oBAChB,OAAO,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;gBACjF,SAAS,CAAC;oBACR,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAChD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;oBACnD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;wBAAE,OAAO,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;oBACzF,IAAI,MAAM,KAAK,GAAG;wBAAE,OAAO,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC1E,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,+GAA+G;QAC/G,MAAM,OAAO,GAAG,CAAC,aAAqB,EAAE,KAAa,EAAE,EAAE,CACvD,IAAI,CAAC,aAAa,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,yBAAyB,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,oBAAoB,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC;aAC7E,CAAC,CACH;SACJ,CAAC;QACF,4GAA4G;QAC5G,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAChE,CAAC;QAEJ,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EACvB,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAC1D,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CACZ,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EACpG,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAC3C,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAU,MAAuC,EAAE,EAAE,CACjE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,cAAc;QACxB,gEAAgE;QAChE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KACzE,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE,CAC7C,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAC3D,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CACtE,CACF,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAW,EAAE,EAAE,CAC1C,IAAI,CACF,iBAAiB,EACjB,OAAO,GAAG,EAAE,EACZ,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAC7F,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAChH,CACF,CAAC;IACF,uGAAuG;IACvG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,QAA0B,EAAE,EAAE;QAC7D,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChG,OAAO,IAAI,CACT,gBAAgB,EAChB,MAAM,EACN,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAC7F,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACrD,CAAC,CAAC,MAAM,KAAK,GAAG;gBACd,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC/C,CAAC,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,wGAAwG;IACxG,MAAM,MAAM,GAAG,CACb,IAA8F,EAC9F,EAAE,CACF,IAAI,CAAC,IAAI,CACP,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,EACzE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CACjC,CAAC;IAEJ,OAAO,gBAAgB,CAAC,EAAE,CAAC;QACzB,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC/E,sFAAsF;QACtF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/F,4HAA4H;QAC5H,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnB,MAAM,CAAC,GAAG,CACR,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAC1G,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAC3B;KACJ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAcH;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,OAAO,CAAC,OAAO,EAAoC,CACvF,mCAAmC,CACpC;IACC,mDAAmD;IACnD,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;CACvE"}
+{"version":3,"file":"RuntimeResources.js","sourceRoot":"","sources":["../src/RuntimeResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AACrH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAwB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,mBAAmB,GASpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,mHAAmH;AACnH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACvC,2GAA2G;AAC3G,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE5C,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;AAQxE,4GAA4G;AAC5G,MAAM,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE,EAAE,CAAC;CAAG;AACpF,MAAM,aAAc,SAAQ,MAAM,CAAC,WAAW,EAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;CAAG;AAYvF,sFAAsF;AACtF,MAAM,oBAAoB,GAAG;IAC3B,+BAA+B,EAAE,GAAG;IACpC,iCAAiC,EAAE,GAAG;IACtC,8BAA8B,EAAE,GAAG;IACnC,6BAA6B,EAAE,GAAG;IAClC,6BAA6B,EAAE,GAAG;IAClC,gCAAgC,EAAE,GAAG;CACkB,CAAC;AAK1D,gHAAgH;AAChH,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACxC,2GAA2G;IAC3G,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CACtE,UAAU,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,CACtC,MAAM,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EACrE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,CAC3C,CACF,CACF,CAAC;IACF,0GAA0G;IAC1G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,EAAE;QAChE,UAAU,EAAE,QAAQ,CAAC,IAAI,CACvB,UAAU,CAAC,YAAY,CACrB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,EACrC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CACzB,CACF;KACF,CAAC,CAAC;IAGH,6FAA6F;IAC7F,MAAM,IAAI,GAAG,CACX,SAAoB,EACpB,MAAc,EACd,IAAyF,EACzF,MAAM,GAAuD,GAAG,EAAE,CAAC,SAAS,EAC3C,EAAE;QACnC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,oBAAoB,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,eAAe,MAAM,KAAK,MAAM,EAAE,CAAC;QAEnH,0GAA0G;QAC1G,MAAM,WAAW,GAAG,CAAC,KAAgB,EAAiB,EAAE;YACtD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,eAAe;oBAClB,OAAO,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;gBAC5F,KAAK,cAAc;oBACjB,OAAO,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBACjF,KAAK,iBAAiB;oBACpB,OAAO,IAAI,yBAAyB,CAAC;wBACnC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC3F,CAAC,CAAC;gBACL,KAAK,aAAa;oBAChB,OAAO,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;gBACjF,SAAS,CAAC;oBACR,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAChD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;oBACnD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;wBAAE,OAAO,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;oBACzF,IAAI,MAAM,KAAK,GAAG;wBAAE,OAAO,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC1E,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,+GAA+G;QAC/G,MAAM,OAAO,GAAG,CAAC,aAAqB,EAAE,KAAa,EAAE,EAAE,CACvD,IAAI,CAAC,aAAa,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,yBAAyB,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,oBAAoB,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC;aAC7E,CAAC,CACH;SACJ,CAAC;QACF,4GAA4G;QAC5G,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAChE,CAAC;QAEJ,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EACvB,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAC1D,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;YAC7C,gHAAgH;YAChH,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC;YACnG,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CACZ,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EACpG,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAC3C,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEH,wGAAwG;AACxG,MAAM,MAAM,GAAG,CAAO,IAA8F,EAAE,EAAE,CACtH,IAAI,CAAC,IAAI,CACP,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,EACzE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CACjC,CAAC;AAIJ,oFAAoF;AACpF,MAAM,YAAY,GAAG,CAAC,IAAU,EAAE,EAAE,CAAC,CAAC;IACpC,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE,CACxB,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAC3D,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CACtE;IACH,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CACvB,IAAI,CACF,iBAAiB,EACjB,OAAO,GAAG,EAAE,EACZ,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAC7F,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAChH;IACH,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CACvB,IAAI,CACF,iBAAiB,EACjB,OAAO,GAAG,EAAE,EACZ,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAC9F;IACH,MAAM,EAAE,CAAC,QAA0B,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChG,OAAO,IAAI,CACT,gBAAgB,EAChB,MAAM,EACN,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAC7F,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,MAAM,KAAK,GAAG;YACZ,CAAC,CAAC,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACrD,CAAC,CAAC,MAAM,KAAK,GAAG;gBACd,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC/C,CAAC,CAAC,SAAS,CAClB,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;IAC1F,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO;QACL;;;WAGG;QACH,WAAW,EAAE,MAAM,CAAC,OAAO;QAC3B,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,EAAE,CAAC,GAAW,EAA+C,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjG,MAAM,EAAE,CAAC,QAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;KAC/G,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAG,CAAU,MAAuC,EAAE,EAAE,CACjE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;QACrB,QAAQ,EAAE,cAAc;QACxB,gEAAgE;QAChE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KACzE,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,uGAAuG;IACvG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE9C,OAAO,gBAAgB,CAAC,EAAE,CAAC;QACzB,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC/E,sFAAsF;QACtF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/F,4HAA4H;QAC5H,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnB,MAAM,CAAC,GAAG,CACR,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAC1G,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAC3B;KACJ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAcH;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,OAAO,CAAC,OAAO,EAAoC,CACvF,mCAAmC,CACpC;IACC,mDAAmD;IACnD,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;CACvE"}

package/dist/TransportResource.d.ts

@@ -1,33 +1,2 @@
-import { Schema } from 'effect';
-export declare const TransportTls: Schema.Struct<{
-    readonly caCertificate: Schema.optionalKey<Schema.String>;
-    readonly clientCertificate: Schema.optionalKey<Schema.String>;
-    readonly clientKey: Schema.optionalKey<Schema.RedactedFromValue<Schema.String>>;
-    readonly clientKeyPassphrase: Schema.optionalKey<Schema.RedactedFromValue<Schema.String>>;
-    readonly serverName: Schema.optionalKey<Schema.String>;
-}>;
-export declare const TransportAuth: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Struct<{
-    readonly type: Schema.Literal<"none">;
-}>, Schema.Struct<{
-    readonly type: Schema.Literal<"basic">;
-    readonly username: Schema.String;
-    readonly password: Schema.RedactedFromValue<Schema.String>;
-}>]>, never>;
-export declare const TransportProxy: Schema.Struct<{
-    readonly url: Schema.String;
-    readonly auth: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Struct<{
-        readonly type: Schema.Literal<"none">;
-    }>, Schema.Struct<{
-        readonly type: Schema.Literal<"basic">;
-        readonly username: Schema.String;
-        readonly password: Schema.RedactedFromValue<Schema.String>;
-    }>]>, never>;
-    readonly tls: Schema.optionalKey<Schema.Struct<{
-        readonly caCertificate: Schema.optionalKey<Schema.String>;
-        readonly clientCertificate: Schema.optionalKey<Schema.String>;
-        readonly clientKey: Schema.optionalKey<Schema.RedactedFromValue<Schema.String>>;
-        readonly clientKeyPassphrase: Schema.optionalKey<Schema.RedactedFromValue<Schema.String>>;
-        readonly serverName: Schema.optionalKey<Schema.String>;
-    }>>;
-}>;
+export { HttpBasicOrNoneAuth as TransportAuth, HttpProxy as TransportProxy, TlsSettings as TransportTls, } from './HttpApiResource.js';
 //# sourceMappingURL=TransportResource.d.ts.map

package/dist/TransportResource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TransportResource.d.ts","sourceRoot":"","sources":["../src/TransportResource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKxC,eAAO,MAAM,YAAY;;;;;;EAMvB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;YAGuD,CAAC;AAElF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;EAIzB,CAAC"}
+{"version":3,"file":"TransportResource.d.ts","sourceRoot":"","sources":["../src/TransportResource.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,IAAI,aAAa,EACpC,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,YAAY,GAC5B,MAAM,sBAAsB,CAAC"}

package/dist/TransportResource.js

@@ -1,20 +1,2 @@
-import { Effect, Schema } from 'effect';
-const Secret = Schema.RedactedFromValue(Schema.String);
-const NonEmptyString = Schema.String.check(Schema.isMinLength(1));
-export const TransportTls = Schema.Struct({
-    caCertificate: Schema.optionalKey(Schema.String),
-    clientCertificate: Schema.optionalKey(Schema.String),
-    clientKey: Schema.optionalKey(Secret),
-    clientKeyPassphrase: Schema.optionalKey(Secret),
-    serverName: Schema.optionalKey(NonEmptyString),
-});
-export const TransportAuth = Schema.Union([
-    Schema.Struct({ type: Schema.Literal('none') }),
-    Schema.Struct({ type: Schema.Literal('basic'), username: Schema.String, password: Secret }),
-]).pipe(Schema.withDecodingDefaultKey(Effect.succeed({ type: 'none' })));
-export const TransportProxy = Schema.Struct({
-    url: NonEmptyString,
-    auth: TransportAuth,
-    tls: Schema.optionalKey(TransportTls),
-});
+export { HttpBasicOrNoneAuth as TransportAuth, HttpProxy as TransportProxy, TlsSettings as TransportTls, } from './HttpApiResource.js';
 //# sourceMappingURL=TransportResource.js.map

package/dist/TransportResource.js.map

@@ -1 +1 @@
-{"version":3,"file":"TransportResource.js","sourceRoot":"","sources":["../src/TransportResource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAChD,iBAAiB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IACrC,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/C,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;CAC5F,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,aAAa;IACnB,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC;CACtC,CAAC,CAAC"}
+{"version":3,"file":"TransportResource.js","sourceRoot":"","sources":["../src/TransportResource.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,IAAI,aAAa,EACpC,SAAS,IAAI,cAAc,EAC3B,WAAW,IAAI,YAAY,GAC5B,MAAM,sBAAsB,CAAC"}