@opengeni/db 5.0.1 → 6.0.0

package/dist/{chunk-MWMXWHJD.js → chunk-7JCDSMX2.js}

@@ -1,7 +1,7 @@
 import {
   nestedPostgresSqlState,
   rawRows
-} from "./chunk-DPONPYJD.js";
+} from "./chunk-CJI6G254.js";
 
 // src/managed-auth-session-sets.ts
 import {
@@ -296,4 +296,4 @@ export {
   reapManagedAuthIsolatedSessions,
   reapExpiredManagedAuthSessionSets
 };
-//# sourceMappingURL=chunk-MWMXWHJD.js.map
+//# sourceMappingURL=chunk-7JCDSMX2.js.map

package/dist/chunk-AJA2ZIUW.js

@@ -0,0 +1,219 @@
+import {
+  rawRows,
+  withWorkspaceSubjectRls
+} from "./chunk-CJI6G254.js";
+
+// src/connect-attempts.ts
+import { createHash } from "crypto";
+import { sql } from "drizzle-orm";
+import { ConnectAttempt } from "@opengeni/contracts/connect";
+import { ExternalActorContinuation } from "@opengeni/contracts/external-identities";
+import { stableJson } from "@opengeni/contracts";
+var ConnectAttemptConflictError = class extends Error {
+  code = "CONNECT_ATTEMPT_CONFLICT";
+  constructor(message = "Connect attempt changed; reload its current state") {
+    super(message);
+  }
+};
+var ConnectAttemptNotFoundError = class extends Error {
+  code = "CONNECT_ATTEMPT_NOT_FOUND";
+  constructor() {
+    super("Connect attempt not found");
+  }
+};
+function projection(row, scope) {
+  const value = ConnectAttempt.parse(row.projection);
+  if (row.account_id !== scope.accountId || row.workspace_id !== scope.workspaceId || row.subject_id !== scope.subjectId || value.id !== row.id || value.workspaceId !== scope.workspaceId) {
+    throw new ConnectAttemptNotFoundError();
+  }
+  return value;
+}
+function scoped(db, scope, run) {
+  return withWorkspaceSubjectRls(db, scope.workspaceId, scope.subjectId, run);
+}
+async function lockAttempt(tx, scope, id) {
+  const [row] = await rawRows(
+    tx,
+    sql`select *, expires_at <= clock_timestamp() as expired from connect_attempts
+    where id = ${id}::uuid and account_id = ${scope.accountId}::uuid
+      and workspace_id = ${scope.workspaceId}::uuid and subject_id = ${scope.subjectId}
+    for update`
+  );
+  if (!row) throw new ConnectAttemptNotFoundError();
+  return row;
+}
+function receiptFor(row, operationId, digest, scope) {
+  if (!Object.hasOwn(row.receipts, operationId)) return null;
+  const receipt = row.receipts[operationId];
+  if (receipt.digest !== digest)
+    throw new ConnectAttemptConflictError("Connect operation ID was reused");
+  return projection({ ...row, projection: receipt.result }, scope);
+}
+function validateOperation(id, digest) {
+  if (!id || new TextEncoder().encode(id).byteLength > 512 || !/^[0-9a-f]{64}$/.test(digest)) {
+    throw new ConnectAttemptConflictError("Invalid Connect operation identity");
+  }
+}
+async function getConnectBeginReplay(db, scope, input) {
+  validateOperation(input.idempotencyKey, input.requestDigest);
+  const origin = input.externalContinuation ? ExternalActorContinuation.parse(input.externalContinuation) : null;
+  const key = createHash("sha256").update(input.idempotencyKey).digest("hex");
+  return scoped(db, scope, async (tx) => {
+    const [existing] = await rawRows(
+      tx,
+      sql`select * from connect_attempts
+      where workspace_id = ${scope.workspaceId}::uuid and subject_id = ${scope.subjectId}
+        and idempotency_key_hash = ${key} and account_id = ${scope.accountId}::uuid`
+    );
+    if (!existing) return null;
+    if (existing.request_digest !== input.requestDigest || existing.return_url !== input.returnUrl || stableJson(existing.external_continuation ?? null) !== stableJson(origin))
+      throw new ConnectAttemptConflictError(
+        "Connect idempotency key was reused with different input"
+      );
+    return projection(existing, scope);
+  });
+}
+async function beginConnectAttempt(db, scope, input) {
+  const value = ConnectAttempt.parse(input.attempt);
+  const origin = input.externalContinuation ? ExternalActorContinuation.parse(input.externalContinuation) : null;
+  validateOperation(input.idempotencyKey, input.requestDigest);
+  if (value.workspaceId !== scope.workspaceId || value.revision !== 1)
+    throw new ConnectAttemptConflictError();
+  const key = createHash("sha256").update(input.idempotencyKey).digest("hex");
+  return scoped(db, scope, async (tx) => {
+    await tx.execute(sql`select pg_advisory_xact_lock(hashtextextended(
+      ${`connect:${scope.workspaceId}:${scope.subjectId}`}, 0))`);
+    await tx.execute(sql`with expired as (
+      select id from connect_attempts where workspace_id = ${scope.workspaceId}::uuid
+        and account_id = ${scope.accountId}::uuid and subject_id = ${scope.subjectId}
+        and expires_at < now() - interval '30 days'
+      order by expires_at, id limit 100 for update skip locked
+    ) delete from connect_attempts where id in (select id from expired)`);
+    const existing = await getConnectBeginReplay(tx, scope, input);
+    if (existing) return existing;
+    await input.authorizeAcquisition?.(tx);
+    const [count] = await rawRows(
+      tx,
+      sql`select count(*)::int as count from connect_attempts
+      where workspace_id = ${scope.workspaceId}::uuid and subject_id = ${scope.subjectId}
+        and (expires_at > now() or operation_id is not null)
+        and projection->>'state' not in ('complete','cancelled','expired')`
+    );
+    if ((count?.count ?? 0) >= 32)
+      throw new ConnectAttemptConflictError("Too many pending Connect attempts");
+    const [row] = await rawRows(
+      tx,
+      sql`insert into connect_attempts
+      (id, account_id, workspace_id, subject_id, idempotency_key_hash, request_digest, return_url, projection, expires_at, external_continuation)
+      values (${value.id}::uuid, ${scope.accountId}::uuid, ${scope.workspaceId}::uuid, ${scope.subjectId},
+        ${key}, ${input.requestDigest}, ${input.returnUrl}, ${JSON.stringify(value)}::jsonb, ${value.expiresAt}::timestamptz, ${origin ? JSON.stringify(origin) : null}::jsonb)
+      returning *`
+    );
+    if (!row) throw new Error("Connect attempt insert returned no result");
+    return projection(row, scope);
+  });
+}
+async function getConnectAttempt(db, scope, id) {
+  return scoped(db, scope, async (tx) => {
+    const row = await lockAttempt(tx, scope, id);
+    const current = projection(row, scope);
+    if (row.expired && !["complete", "cancelled", "expired", "uncertain"].includes(current.state)) {
+      const expired = ConnectAttempt.parse({
+        ...current,
+        revision: current.revision + 1,
+        state: row.operation_id ? "uncertain" : "expired",
+        nextAction: { type: "none" }
+      });
+      await tx.execute(sql`update connect_attempts set projection = ${JSON.stringify(expired)}::jsonb,
+        updated_at = now() where id = ${row.id}::uuid`);
+      row.projection = expired;
+    }
+    return {
+      attempt: projection(row, scope),
+      returnUrl: row.return_url,
+      operationInFlight: row.operation_id !== null
+    };
+  });
+}
+async function listPendingConnectAttempts(db, scope) {
+  return scoped(db, scope, async (tx) => {
+    const rows = await rawRows(
+      tx,
+      sql`select * from connect_attempts
+      where workspace_id = ${scope.workspaceId}::uuid and account_id = ${scope.accountId}::uuid
+        and subject_id = ${scope.subjectId} and (expires_at > now() or operation_id is not null)
+        and projection->>'state' not in ('complete','cancelled','expired')
+      order by created_at desc, id desc limit 32`
+    );
+    return rows.map((row) => projection(row, scope));
+  });
+}
+async function claimConnectOperation(db, scope, input) {
+  validateOperation(input.operationId, input.inputDigest);
+  return scoped(db, scope, async (tx) => {
+    const row = await lockAttempt(tx, scope, input.attemptId);
+    const current = projection(row, scope);
+    await input.authorize?.(
+      tx,
+      structuredClone(current),
+      row.external_continuation ? ExternalActorContinuation.parse(row.external_continuation) : null
+    );
+    const receipt = receiptFor(row, input.operationId, input.inputDigest, scope);
+    if (receipt) {
+      return { status: "replayed", attempt: receipt };
+    }
+    await input.authorizeAcquisition?.(tx, structuredClone(current));
+    if (row.operation_id)
+      throw new ConnectAttemptConflictError(
+        "Connect operation is in flight or uncertain; reconcile before retrying"
+      );
+    if (Object.keys(row.receipts).length >= 64 || current.revision !== input.expectedRevision || row.expired || ["complete", "cancelled", "expired"].includes(current.state)) {
+      throw new ConnectAttemptConflictError();
+    }
+    await tx.execute(sql`update connect_attempts set operation_id = ${input.operationId},
+      operation_digest = ${input.inputDigest}, updated_at = now() where id = ${row.id}::uuid`);
+    return { status: "claimed", attempt: current };
+  });
+}
+async function finishConnectOperation(db, scope, input) {
+  validateOperation(input.operationId, input.inputDigest);
+  return scoped(db, scope, async (tx) => {
+    const row = await lockAttempt(tx, scope, input.attemptId);
+    const current = projection(row, scope);
+    await input.authorize?.(
+      tx,
+      structuredClone(current),
+      row.external_continuation ? ExternalActorContinuation.parse(row.external_continuation) : null
+    );
+    const receipt = receiptFor(row, input.operationId, input.inputDigest, scope);
+    if (receipt) {
+      return receipt;
+    }
+    await input.authorizeAcquisition?.(tx, structuredClone(current));
+    if (row.operation_id !== input.operationId || row.operation_digest !== input.inputDigest)
+      throw new ConnectAttemptConflictError();
+    const next = ConnectAttempt.parse(await input.commit(tx, structuredClone(current)));
+    if (next.id !== current.id || next.workspaceId !== current.workspaceId || next.providerId !== current.providerId || next.ownership !== current.ownership || next.completionRequirement !== current.completionRequirement || stableJson(next.installationTarget ?? null) !== stableJson(current.installationTarget ?? null) || current.source !== void 0 && stableJson(next.source) !== stableJson(current.source) || next.expiresAt !== current.expiresAt || next.revision !== current.revision + 1 || current.credentialsCommitted && !next.credentialsCommitted || current.integrationInstalled && !next.integrationInstalled)
+      throw new ConnectAttemptConflictError();
+    const receipts = {
+      ...row.receipts,
+      [input.operationId]: { digest: input.inputDigest, result: next }
+    };
+    await tx.execute(sql`update connect_attempts set projection = ${JSON.stringify(next)}::jsonb,
+      receipts = ${JSON.stringify(receipts)}::jsonb, operation_id = null, operation_digest = null,
+      updated_at = now() where id = ${row.id}::uuid`);
+    return next;
+  });
+}
+
+export {
+  ConnectAttemptConflictError,
+  ConnectAttemptNotFoundError,
+  getConnectBeginReplay,
+  beginConnectAttempt,
+  getConnectAttempt,
+  listPendingConnectAttempts,
+  claimConnectOperation,
+  finishConnectOperation
+};
+//# sourceMappingURL=chunk-AJA2ZIUW.js.map

package/dist/chunk-AJA2ZIUW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connect-attempts.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { sql } from \"drizzle-orm\";\nimport { ConnectAttempt, type ConnectAttempt as Attempt } from \"@opengeni/contracts/connect\";\nimport { ExternalActorContinuation } from \"@opengeni/contracts/external-identities\";\nimport { stableJson } from \"@opengeni/contracts\";\nimport { rawRows, withWorkspaceSubjectRls, type Database } from \"./database\";\n\nexport type ConnectActorScope = { accountId: string; workspaceId: string; subjectId: string };\n/** Live admission under the attempt transaction. Implementations must acquire\n * their key/membership/link fences in a consistent order and hold them through\n * commit. No network I/O. The attempt argument is an isolated copy. */\nexport type ConnectOperationAuthorization = (\n  tx: Database,\n  attempt: Attempt,\n  origin: ExternalActorContinuation | null,\n) => Promise<void>;\ntype Receipt = { digest: string; result: Attempt };\ntype Row = {\n  id: string;\n  account_id: string;\n  workspace_id: string;\n  subject_id: string;\n  request_digest: string;\n  return_url: string;\n  projection: unknown;\n  operation_id: string | null;\n  operation_digest: string | null;\n  receipts: Record<string, Receipt>;\n  external_continuation: unknown;\n};\n\nexport class ConnectAttemptConflictError extends Error {\n  readonly code = \"CONNECT_ATTEMPT_CONFLICT\";\n  constructor(message = \"Connect attempt changed; reload its current state\") {\n    super(message);\n  }\n}\nexport class ConnectAttemptNotFoundError extends Error {\n  readonly code = \"CONNECT_ATTEMPT_NOT_FOUND\";\n  constructor() {\n    super(\"Connect attempt not found\");\n  }\n}\n\nfunction projection(row: Row, scope: ConnectActorScope): Attempt {\n  const value = ConnectAttempt.parse(row.projection);\n  if (\n    row.account_id !== scope.accountId ||\n    row.workspace_id !== scope.workspaceId ||\n    row.subject_id !== scope.subjectId ||\n    value.id !== row.id ||\n    value.workspaceId !== scope.workspaceId\n  ) {\n    throw new ConnectAttemptNotFoundError();\n  }\n  return value;\n}\nfunction scoped<T>(\n  db: Database,\n  scope: ConnectActorScope,\n  run: (tx: Database) => Promise<T>,\n): Promise<T> {\n  return withWorkspaceSubjectRls(db, scope.workspaceId, scope.subjectId, run);\n}\nasync function lockAttempt(\n  tx: Database,\n  scope: ConnectActorScope,\n  id: string,\n): Promise<Row & { expired: boolean }> {\n  const [row] = await rawRows<Row & { expired: boolean }>(\n    tx,\n    sql`select *, expires_at <= clock_timestamp() as expired from connect_attempts\n    where id = ${id}::uuid and account_id = ${scope.accountId}::uuid\n      and workspace_id = ${scope.workspaceId}::uuid and subject_id = ${scope.subjectId}\n    for update`,\n  );\n  if (!row) throw new ConnectAttemptNotFoundError();\n  return row;\n}\n\nfunction receiptFor(\n  row: Row,\n  operationId: string,\n  digest: string,\n  scope: ConnectActorScope,\n): Attempt | null {\n  if (!Object.hasOwn(row.receipts, operationId)) return null;\n  const receipt = row.receipts[operationId]!;\n  if (receipt.digest !== digest)\n    throw new ConnectAttemptConflictError(\"Connect operation ID was reused\");\n  return projection({ ...row, projection: receipt.result }, scope);\n}\nfunction validateOperation(id: string, digest: string): void {\n  if (!id || new TextEncoder().encode(id).byteLength > 512 || !/^[0-9a-f]{64}$/.test(digest)) {\n    throw new ConnectAttemptConflictError(\"Invalid Connect operation identity\");\n  }\n}\n\n/** Caller must establish live workspace/actor authority before this storage\n * seam. RLS scope is a consistency boundary, not proof of authentication. */\ntype ConnectBeginIdentity = {\n  idempotencyKey: string;\n  requestDigest: string;\n  returnUrl: string;\n  externalContinuation?: ExternalActorContinuation;\n};\n\n/** Recover only an exact saved begin request, under the caller's live actor\n * admission. This performs no provider work or acquisition. */\nexport async function getConnectBeginReplay(\n  db: Database,\n  scope: ConnectActorScope,\n  input: ConnectBeginIdentity,\n): Promise<Attempt | null> {\n  validateOperation(input.idempotencyKey, input.requestDigest);\n  const origin = input.externalContinuation\n    ? ExternalActorContinuation.parse(input.externalContinuation)\n    : null;\n  const key = createHash(\"sha256\").update(input.idempotencyKey).digest(\"hex\");\n  return scoped(db, scope, async (tx) => {\n    const [existing] = await rawRows<Row>(\n      tx,\n      sql`select * from connect_attempts\n      where workspace_id = ${scope.workspaceId}::uuid and subject_id = ${scope.subjectId}\n        and idempotency_key_hash = ${key} and account_id = ${scope.accountId}::uuid`,\n    );\n    if (!existing) return null;\n    if (\n      existing.request_digest !== input.requestDigest ||\n      existing.return_url !== input.returnUrl ||\n      stableJson(existing.external_continuation ?? null) !== stableJson(origin)\n    )\n      throw new ConnectAttemptConflictError(\n        \"Connect idempotency key was reused with different input\",\n      );\n    return projection(existing, scope);\n  });\n}\n\nexport async function beginConnectAttempt(\n  db: Database,\n  scope: ConnectActorScope,\n  input: {\n    idempotencyKey: string;\n    requestDigest: string;\n    returnUrl: string;\n    attempt: Attempt;\n    externalContinuation?: ExternalActorContinuation;\n    authorizeAcquisition?: (tx: Database) => Promise<void>;\n  },\n): Promise<Attempt> {\n  const value = ConnectAttempt.parse(input.attempt);\n  const origin = input.externalContinuation\n    ? ExternalActorContinuation.parse(input.externalContinuation)\n    : null;\n  validateOperation(input.idempotencyKey, input.requestDigest);\n  if (value.workspaceId !== scope.workspaceId || value.revision !== 1)\n    throw new ConnectAttemptConflictError();\n  const key = createHash(\"sha256\").update(input.idempotencyKey).digest(\"hex\");\n  return scoped(db, scope, async (tx) => {\n    // Serialize per-actor creation and quota, not the provider's remote request.\n    await tx.execute(sql`select pg_advisory_xact_lock(hashtextextended(\n      ${`connect:${scope.workspaceId}:${scope.subjectId}`}, 0))`);\n    // Bounded actor-local cleanup; no Connection credentials are deleted.\n    await tx.execute(sql`with expired as (\n      select id from connect_attempts where workspace_id = ${scope.workspaceId}::uuid\n        and account_id = ${scope.accountId}::uuid and subject_id = ${scope.subjectId}\n        and expires_at < now() - interval '30 days'\n      order by expires_at, id limit 100 for update skip locked\n    ) delete from connect_attempts where id in (select id from expired)`);\n    const existing = await getConnectBeginReplay(tx, scope, input);\n    if (existing) return existing;\n    await input.authorizeAcquisition?.(tx);\n    const [count] = await rawRows<{ count: number }>(\n      tx,\n      sql`select count(*)::int as count from connect_attempts\n      where workspace_id = ${scope.workspaceId}::uuid and subject_id = ${scope.subjectId}\n        and (expires_at > now() or operation_id is not null)\n        and projection->>'state' not in ('complete','cancelled','expired')`,\n    );\n    if ((count?.count ?? 0) >= 32)\n      throw new ConnectAttemptConflictError(\"Too many pending Connect attempts\");\n    const [row] = await rawRows<Row>(\n      tx,\n      sql`insert into connect_attempts\n      (id, account_id, workspace_id, subject_id, idempotency_key_hash, request_digest, return_url, projection, expires_at, external_continuation)\n      values (${value.id}::uuid, ${scope.accountId}::uuid, ${scope.workspaceId}::uuid, ${scope.subjectId},\n        ${key}, ${input.requestDigest}, ${input.returnUrl}, ${JSON.stringify(value)}::jsonb, ${value.expiresAt}::timestamptz, ${origin ? JSON.stringify(origin) : null}::jsonb)\n      returning *`,\n    );\n    if (!row) throw new Error(\"Connect attempt insert returned no result\");\n    return projection(row, scope);\n  });\n}\n\nexport async function getConnectAttempt(\n  db: Database,\n  scope: ConnectActorScope,\n  id: string,\n): Promise<{\n  attempt: Attempt;\n  returnUrl: string;\n  operationInFlight: boolean;\n}> {\n  return scoped(db, scope, async (tx) => {\n    const row = await lockAttempt(tx, scope, id);\n    const current = projection(row, scope);\n    if (row.expired && ![\"complete\", \"cancelled\", \"expired\", \"uncertain\"].includes(current.state)) {\n      const expired = ConnectAttempt.parse({\n        ...current,\n        revision: current.revision + 1,\n        state: row.operation_id ? \"uncertain\" : \"expired\",\n        nextAction: { type: \"none\" },\n      });\n      await tx.execute(sql`update connect_attempts set projection = ${JSON.stringify(expired)}::jsonb,\n        updated_at = now() where id = ${row.id}::uuid`);\n      row.projection = expired;\n    }\n    return {\n      attempt: projection(row, scope),\n      returnUrl: row.return_url,\n      operationInFlight: row.operation_id !== null,\n    };\n  });\n}\n\nexport async function listPendingConnectAttempts(\n  db: Database,\n  scope: ConnectActorScope,\n): Promise<Attempt[]> {\n  return scoped(db, scope, async (tx) => {\n    const rows = await rawRows<Row>(\n      tx,\n      sql`select * from connect_attempts\n      where workspace_id = ${scope.workspaceId}::uuid and account_id = ${scope.accountId}::uuid\n        and subject_id = ${scope.subjectId} and (expires_at > now() or operation_id is not null)\n        and projection->>'state' not in ('complete','cancelled','expired')\n      order by created_at desc, id desc limit 32`,\n    );\n    return rows.map((row) => projection(row, scope));\n  });\n}\n\n/** A claim is committed before remote effects. Never expire/reclaim it merely\n * because the caller timed out: the provider may have accepted the operation. */\nexport async function claimConnectOperation(\n  db: Database,\n  scope: ConnectActorScope,\n  input: {\n    attemptId: string;\n    expectedRevision: number;\n    operationId: string;\n    inputDigest: string;\n    authorize?: ConnectOperationAuthorization;\n    /** Additional acquisition admission, only after exact no-effect receipt replay. */\n    authorizeAcquisition?: (tx: Database, attempt: Attempt) => Promise<void>;\n  },\n): Promise<{ status: \"claimed\"; attempt: Attempt } | { status: \"replayed\"; attempt: Attempt }> {\n  validateOperation(input.operationId, input.inputDigest);\n  return scoped(db, scope, async (tx) => {\n    const row = await lockAttempt(tx, scope, input.attemptId);\n    const current = projection(row, scope);\n    await input.authorize?.(\n      tx,\n      structuredClone(current),\n      row.external_continuation ? ExternalActorContinuation.parse(row.external_continuation) : null,\n    );\n    const receipt = receiptFor(row, input.operationId, input.inputDigest, scope);\n    if (receipt) {\n      return { status: \"replayed\", attempt: receipt };\n    }\n    await input.authorizeAcquisition?.(tx, structuredClone(current));\n    if (row.operation_id)\n      throw new ConnectAttemptConflictError(\n        \"Connect operation is in flight or uncertain; reconcile before retrying\",\n      );\n    if (\n      Object.keys(row.receipts).length >= 64 ||\n      current.revision !== input.expectedRevision ||\n      row.expired ||\n      [\"complete\", \"cancelled\", \"expired\"].includes(current.state)\n    ) {\n      throw new ConnectAttemptConflictError();\n    }\n    await tx.execute(sql`update connect_attempts set operation_id = ${input.operationId},\n      operation_digest = ${input.inputDigest}, updated_at = now() where id = ${row.id}::uuid`);\n    return { status: \"claimed\", attempt: current };\n  });\n}\n\n/** Pass the same transaction to credential/installation persistence through\n * commit so its receipt and the public setup result become visible atomically.\n * Do not perform network effects inside commit. */\nexport async function finishConnectOperation(\n  db: Database,\n  scope: ConnectActorScope,\n  input: {\n    attemptId: string;\n    operationId: string;\n    inputDigest: string;\n    commit: (tx: Database, current: Attempt) => Promise<Attempt>;\n    authorize?: ConnectOperationAuthorization;\n    /** Additional acquisition admission, only after exact no-effect receipt replay. */\n    authorizeAcquisition?: (tx: Database, attempt: Attempt) => Promise<void>;\n  },\n): Promise<Attempt> {\n  validateOperation(input.operationId, input.inputDigest);\n  return scoped(db, scope, async (tx) => {\n    const row = await lockAttempt(tx, scope, input.attemptId);\n    const current = projection(row, scope);\n    await input.authorize?.(\n      tx,\n      structuredClone(current),\n      row.external_continuation ? ExternalActorContinuation.parse(row.external_continuation) : null,\n    );\n    const receipt = receiptFor(row, input.operationId, input.inputDigest, scope);\n    if (receipt) {\n      return receipt;\n    }\n    await input.authorizeAcquisition?.(tx, structuredClone(current));\n    if (row.operation_id !== input.operationId || row.operation_digest !== input.inputDigest)\n      throw new ConnectAttemptConflictError();\n    const next = ConnectAttempt.parse(await input.commit(tx, structuredClone(current)));\n    if (\n      next.id !== current.id ||\n      next.workspaceId !== current.workspaceId ||\n      next.providerId !== current.providerId ||\n      next.ownership !== current.ownership ||\n      next.completionRequirement !== current.completionRequirement ||\n      stableJson(next.installationTarget ?? null) !==\n        stableJson(current.installationTarget ?? null) ||\n      (current.source !== undefined && stableJson(next.source) !== stableJson(current.source)) ||\n      next.expiresAt !== current.expiresAt ||\n      next.revision !== current.revision + 1 ||\n      (current.credentialsCommitted && !next.credentialsCommitted) ||\n      (current.integrationInstalled && !next.integrationInstalled)\n    )\n      throw new ConnectAttemptConflictError();\n    const receipts = {\n      ...row.receipts,\n      [input.operationId]: { digest: input.inputDigest, result: next },\n    };\n    await tx.execute(sql`update connect_attempts set projection = ${JSON.stringify(next)}::jsonb,\n      receipts = ${JSON.stringify(receipts)}::jsonb, operation_id = null, operation_digest = null,\n      updated_at = now() where id = ${row.id}::uuid`);\n    return next;\n  });\n}\n"],"mappings":";;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,WAAW;AACpB,SAAS,sBAAsD;AAC/D,SAAS,iCAAiC;AAC1C,SAAS,kBAAkB;AA2BpB,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAC5C,OAAO;AAAA,EAChB,YAAY,UAAU,qDAAqD;AACzE,UAAM,OAAO;AAAA,EACf;AACF;AACO,IAAM,8BAAN,cAA0C,MAAM;AAAA,EAC5C,OAAO;AAAA,EAChB,cAAc;AACZ,UAAM,2BAA2B;AAAA,EACnC;AACF;AAEA,SAAS,WAAW,KAAU,OAAmC;AAC/D,QAAM,QAAQ,eAAe,MAAM,IAAI,UAAU;AACjD,MACE,IAAI,eAAe,MAAM,aACzB,IAAI,iBAAiB,MAAM,eAC3B,IAAI,eAAe,MAAM,aACzB,MAAM,OAAO,IAAI,MACjB,MAAM,gBAAgB,MAAM,aAC5B;AACA,UAAM,IAAI,4BAA4B;AAAA,EACxC;AACA,SAAO;AACT;AACA,SAAS,OACP,IACA,OACA,KACY;AACZ,SAAO,wBAAwB,IAAI,MAAM,aAAa,MAAM,WAAW,GAAG;AAC5E;AACA,eAAe,YACb,IACA,OACA,IACqC;AACrC,QAAM,CAAC,GAAG,IAAI,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,iBACa,EAAE,2BAA2B,MAAM,SAAS;AAAA,2BAClC,MAAM,WAAW,2BAA2B,MAAM,SAAS;AAAA;AAAA,EAEpF;AACA,MAAI,CAAC,IAAK,OAAM,IAAI,4BAA4B;AAChD,SAAO;AACT;AAEA,SAAS,WACP,KACA,aACA,QACA,OACgB;AAChB,MAAI,CAAC,OAAO,OAAO,IAAI,UAAU,WAAW,EAAG,QAAO;AACtD,QAAM,UAAU,IAAI,SAAS,WAAW;AACxC,MAAI,QAAQ,WAAW;AACrB,UAAM,IAAI,4BAA4B,iCAAiC;AACzE,SAAO,WAAW,EAAE,GAAG,KAAK,YAAY,QAAQ,OAAO,GAAG,KAAK;AACjE;AACA,SAAS,kBAAkB,IAAY,QAAsB;AAC3D,MAAI,CAAC,MAAM,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,aAAa,OAAO,CAAC,iBAAiB,KAAK,MAAM,GAAG;AAC1F,UAAM,IAAI,4BAA4B,oCAAoC;AAAA,EAC5E;AACF;AAaA,eAAsB,sBACpB,IACA,OACA,OACyB;AACzB,oBAAkB,MAAM,gBAAgB,MAAM,aAAa;AAC3D,QAAM,SAAS,MAAM,uBACjB,0BAA0B,MAAM,MAAM,oBAAoB,IAC1D;AACJ,QAAM,MAAM,WAAW,QAAQ,EAAE,OAAO,MAAM,cAAc,EAAE,OAAO,KAAK;AAC1E,SAAO,OAAO,IAAI,OAAO,OAAO,OAAO;AACrC,UAAM,CAAC,QAAQ,IAAI,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,6BACuB,MAAM,WAAW,2BAA2B,MAAM,SAAS;AAAA,qCACnD,GAAG,qBAAqB,MAAM,SAAS;AAAA,IACxE;AACA,QAAI,CAAC,SAAU,QAAO;AACtB,QACE,SAAS,mBAAmB,MAAM,iBAClC,SAAS,eAAe,MAAM,aAC9B,WAAW,SAAS,yBAAyB,IAAI,MAAM,WAAW,MAAM;AAExE,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,WAAO,WAAW,UAAU,KAAK;AAAA,EACnC,CAAC;AACH;AAEA,eAAsB,oBACpB,IACA,OACA,OAQkB;AAClB,QAAM,QAAQ,eAAe,MAAM,MAAM,OAAO;AAChD,QAAM,SAAS,MAAM,uBACjB,0BAA0B,MAAM,MAAM,oBAAoB,IAC1D;AACJ,oBAAkB,MAAM,gBAAgB,MAAM,aAAa;AAC3D,MAAI,MAAM,gBAAgB,MAAM,eAAe,MAAM,aAAa;AAChE,UAAM,IAAI,4BAA4B;AACxC,QAAM,MAAM,WAAW,QAAQ,EAAE,OAAO,MAAM,cAAc,EAAE,OAAO,KAAK;AAC1E,SAAO,OAAO,IAAI,OAAO,OAAO,OAAO;AAErC,UAAM,GAAG,QAAQ;AAAA,QACb,WAAW,MAAM,WAAW,IAAI,MAAM,SAAS,EAAE,OAAO;AAE5D,UAAM,GAAG,QAAQ;AAAA,6DACwC,MAAM,WAAW;AAAA,2BACnD,MAAM,SAAS,2BAA2B,MAAM,SAAS;AAAA;AAAA;AAAA,wEAGZ;AACpE,UAAM,WAAW,MAAM,sBAAsB,IAAI,OAAO,KAAK;AAC7D,QAAI,SAAU,QAAO;AACrB,UAAM,MAAM,uBAAuB,EAAE;AACrC,UAAM,CAAC,KAAK,IAAI,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,6BACuB,MAAM,WAAW,2BAA2B,MAAM,SAAS;AAAA;AAAA;AAAA,IAGpF;AACA,SAAK,OAAO,SAAS,MAAM;AACzB,YAAM,IAAI,4BAA4B,mCAAmC;AAC3E,UAAM,CAAC,GAAG,IAAI,MAAM;AAAA,MAClB;AAAA,MACA;AAAA;AAAA,gBAEU,MAAM,EAAE,WAAW,MAAM,SAAS,WAAW,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,UAC9F,GAAG,KAAK,MAAM,aAAa,KAAK,MAAM,SAAS,KAAK,KAAK,UAAU,KAAK,CAAC,YAAY,MAAM,SAAS,kBAAkB,SAAS,KAAK,UAAU,MAAM,IAAI,IAAI;AAAA;AAAA,IAElK;AACA,QAAI,CAAC,IAAK,OAAM,IAAI,MAAM,2CAA2C;AACrE,WAAO,WAAW,KAAK,KAAK;AAAA,EAC9B,CAAC;AACH;AAEA,eAAsB,kBACpB,IACA,OACA,IAKC;AACD,SAAO,OAAO,IAAI,OAAO,OAAO,OAAO;AACrC,UAAM,MAAM,MAAM,YAAY,IAAI,OAAO,EAAE;AAC3C,UAAM,UAAU,WAAW,KAAK,KAAK;AACrC,QAAI,IAAI,WAAW,CAAC,CAAC,YAAY,aAAa,WAAW,WAAW,EAAE,SAAS,QAAQ,KAAK,GAAG;AAC7F,YAAM,UAAU,eAAe,MAAM;AAAA,QACnC,GAAG;AAAA,QACH,UAAU,QAAQ,WAAW;AAAA,QAC7B,OAAO,IAAI,eAAe,cAAc;AAAA,QACxC,YAAY,EAAE,MAAM,OAAO;AAAA,MAC7B,CAAC;AACD,YAAM,GAAG,QAAQ,+CAA+C,KAAK,UAAU,OAAO,CAAC;AAAA,wCACrD,IAAI,EAAE,QAAQ;AAChD,UAAI,aAAa;AAAA,IACnB;AACA,WAAO;AAAA,MACL,SAAS,WAAW,KAAK,KAAK;AAAA,MAC9B,WAAW,IAAI;AAAA,MACf,mBAAmB,IAAI,iBAAiB;AAAA,IAC1C;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,2BACpB,IACA,OACoB;AACpB,SAAO,OAAO,IAAI,OAAO,OAAO,OAAO;AACrC,UAAM,OAAO,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,6BACuB,MAAM,WAAW,2BAA2B,MAAM,SAAS;AAAA,2BAC7D,MAAM,SAAS;AAAA;AAAA;AAAA,IAGtC;AACA,WAAO,KAAK,IAAI,CAAC,QAAQ,WAAW,KAAK,KAAK,CAAC;AAAA,EACjD,CAAC;AACH;AAIA,eAAsB,sBACpB,IACA,OACA,OAS6F;AAC7F,oBAAkB,MAAM,aAAa,MAAM,WAAW;AACtD,SAAO,OAAO,IAAI,OAAO,OAAO,OAAO;AACrC,UAAM,MAAM,MAAM,YAAY,IAAI,OAAO,MAAM,SAAS;AACxD,UAAM,UAAU,WAAW,KAAK,KAAK;AACrC,UAAM,MAAM;AAAA,MACV;AAAA,MACA,gBAAgB,OAAO;AAAA,MACvB,IAAI,wBAAwB,0BAA0B,MAAM,IAAI,qBAAqB,IAAI;AAAA,IAC3F;AACA,UAAM,UAAU,WAAW,KAAK,MAAM,aAAa,MAAM,aAAa,KAAK;AAC3E,QAAI,SAAS;AACX,aAAO,EAAE,QAAQ,YAAY,SAAS,QAAQ;AAAA,IAChD;AACA,UAAM,MAAM,uBAAuB,IAAI,gBAAgB,OAAO,CAAC;AAC/D,QAAI,IAAI;AACN,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,QACE,OAAO,KAAK,IAAI,QAAQ,EAAE,UAAU,MACpC,QAAQ,aAAa,MAAM,oBAC3B,IAAI,WACJ,CAAC,YAAY,aAAa,SAAS,EAAE,SAAS,QAAQ,KAAK,GAC3D;AACA,YAAM,IAAI,4BAA4B;AAAA,IACxC;AACA,UAAM,GAAG,QAAQ,iDAAiD,MAAM,WAAW;AAAA,2BAC5D,MAAM,WAAW,mCAAmC,IAAI,EAAE,QAAQ;AACzF,WAAO,EAAE,QAAQ,WAAW,SAAS,QAAQ;AAAA,EAC/C,CAAC;AACH;AAKA,eAAsB,uBACpB,IACA,OACA,OASkB;AAClB,oBAAkB,MAAM,aAAa,MAAM,WAAW;AACtD,SAAO,OAAO,IAAI,OAAO,OAAO,OAAO;AACrC,UAAM,MAAM,MAAM,YAAY,IAAI,OAAO,MAAM,SAAS;AACxD,UAAM,UAAU,WAAW,KAAK,KAAK;AACrC,UAAM,MAAM;AAAA,MACV;AAAA,MACA,gBAAgB,OAAO;AAAA,MACvB,IAAI,wBAAwB,0BAA0B,MAAM,IAAI,qBAAqB,IAAI;AAAA,IAC3F;AACA,UAAM,UAAU,WAAW,KAAK,MAAM,aAAa,MAAM,aAAa,KAAK;AAC3E,QAAI,SAAS;AACX,aAAO;AAAA,IACT;AACA,UAAM,MAAM,uBAAuB,IAAI,gBAAgB,OAAO,CAAC;AAC/D,QAAI,IAAI,iBAAiB,MAAM,eAAe,IAAI,qBAAqB,MAAM;AAC3E,YAAM,IAAI,4BAA4B;AACxC,UAAM,OAAO,eAAe,MAAM,MAAM,MAAM,OAAO,IAAI,gBAAgB,OAAO,CAAC,CAAC;AAClF,QACE,KAAK,OAAO,QAAQ,MACpB,KAAK,gBAAgB,QAAQ,eAC7B,KAAK,eAAe,QAAQ,cAC5B,KAAK,cAAc,QAAQ,aAC3B,KAAK,0BAA0B,QAAQ,yBACvC,WAAW,KAAK,sBAAsB,IAAI,MACxC,WAAW,QAAQ,sBAAsB,IAAI,KAC9C,QAAQ,WAAW,UAAa,WAAW,KAAK,MAAM,MAAM,WAAW,QAAQ,MAAM,KACtF,KAAK,cAAc,QAAQ,aAC3B,KAAK,aAAa,QAAQ,WAAW,KACpC,QAAQ,wBAAwB,CAAC,KAAK,wBACtC,QAAQ,wBAAwB,CAAC,KAAK;AAEvC,YAAM,IAAI,4BAA4B;AACxC,UAAM,WAAW;AAAA,MACf,GAAG,IAAI;AAAA,MACP,CAAC,MAAM,WAAW,GAAG,EAAE,QAAQ,MAAM,aAAa,QAAQ,KAAK;AAAA,IACjE;AACA,UAAM,GAAG,QAAQ,+CAA+C,KAAK,UAAU,IAAI,CAAC;AAAA,mBACrE,KAAK,UAAU,QAAQ,CAAC;AAAA,sCACL,IAAI,EAAE,QAAQ;AAChD,WAAO;AAAA,EACT,CAAC;AACH;","names":[]}

package/dist/chunk-CDAT6EKW.js

@@ -0,0 +1,247 @@
+import {
+  rawRows,
+  withWorkspaceRls
+} from "./chunk-CJI6G254.js";
+import {
+  sessionEvents,
+  sessionTurns
+} from "./chunk-MN5PZMEK.js";
+import {
+  LOSSLESS_JSON_STRING_PREFIX,
+  fromPostgresLosslessJson
+} from "./chunk-S2TZ3F4L.js";
+
+// src/session-event-slices.ts
+import { and, asc, desc, eq, gt, inArray, lt, notInArray, sql } from "drizzle-orm";
+import { resolveSessionEventTypeFilters } from "@opengeni/contracts";
+var WINDOW = 8192;
+var STRUCTURED_BYTES = 1024 * 1024;
+async function readSessionMessageSliceInScope(db, workspaceId, sessionId, identity, offset, windows = 1) {
+  if (!Number.isInteger(windows) || windows < 1 || windows > 4)
+    throw new Error("Invalid search scalar window budget");
+  const page = await listSessionEventSlicesInternal(
+    db,
+    workspaceId,
+    sessionId,
+    { sourceSequence: identity.sequence, sourceOffset: offset, view: "conversation" },
+    void 0,
+    identity,
+    WINDOW * windows
+  );
+  return page.slices?.[identity.sequence];
+}
+async function listSessionEventSlices(db, workspaceId, sessionId, options, legacyRead) {
+  return listSessionEventSlicesInternal(db, workspaceId, sessionId, options, legacyRead);
+}
+async function listSessionEventSlicesInternal(db, workspaceId, sessionId, options, legacyRead, selectedIdentity, scalarWindow = WINDOW) {
+  if (options.legacyUtf16) {
+    if (!legacyRead) throw new Error("Legacy continuation requires its original bounded reader");
+    return legacyRead({
+      ...options,
+      limit: 1,
+      maxBytes: 1024 * 1024
+    });
+  }
+  const offset = options.sourceOffset ?? 0;
+  if (!Number.isSafeInteger(offset) || offset < 0 || offset > 2147483647)
+    throw new Error("Invalid message continuation offset");
+  const direction = options.direction ?? (options.before === void 0 ? "after" : "before");
+  const limit = options.sourceSequence ? 1 : Math.max(1, Math.min(options.limit ?? 8, 8));
+  const filters = resolveSessionEventTypeFilters(options);
+  const predicates = [
+    eq(sessionEvents.workspaceId, workspaceId),
+    eq(sessionEvents.sessionId, sessionId),
+    gt(sessionEvents.sequence, Math.min(options.after ?? 0, 2147483647)),
+    // Same indexed exclusion as the audit/discovery reader. Do not substitute
+    // turn status: terminal-before-claim prompts must remain excluded too.
+    sql`(${sessionEvents.type} <> 'user.message' or not exists (
+      select 1 from ${sessionTurns} unclaimed_prompt_turn
+      where unclaimed_prompt_turn.workspace_id = ${workspaceId}
+        and unclaimed_prompt_turn.workspace_id = ${sessionEvents.workspaceId}
+        and unclaimed_prompt_turn.session_id = ${sessionEvents.sessionId}
+        and unclaimed_prompt_turn.trigger_event_id = ${sessionEvents.id}
+        and unclaimed_prompt_turn.source in ('user', 'api')
+        and unclaimed_prompt_turn.started_at is null
+    ))`
+  ];
+  if (options.before !== void 0 && options.before <= 2147483647)
+    predicates.push(lt(sessionEvents.sequence, options.before));
+  if (filters.includeTypes.length)
+    predicates.push(inArray(sessionEvents.type, filters.includeTypes));
+  if (filters.excludeTypes.length)
+    predicates.push(notInArray(sessionEvents.type, filters.excludeTypes));
+  const identities = selectedIdentity ? [selectedIdentity] : await withWorkspaceRls(
+    db,
+    workspaceId,
+    (tx) => tx.select({
+      id: sessionEvents.id,
+      sequence: sessionEvents.sequence,
+      type: sql`case when octet_length(${sessionEvents.type}) <= 256 then ${sessionEvents.type} else 'session.event.envelope_omitted' end`,
+      turnId: sessionEvents.turnId,
+      turnAssociation: sql`case when ${sessionEvents.turnAssociation} is null then null when ${sessionEvents.turnAssociation} = 'current' then 'current' else 'late_rejected' end`,
+      duplicateOfEventId: sessionEvents.duplicateOfEventId
+    }).from(sessionEvents).where(and(...predicates)).orderBy(
+      direction === "before" ? desc(sessionEvents.sequence) : asc(sessionEvents.sequence)
+    ).limit(limit + 1)
+  );
+  const ordered = identities.slice(0, limit).map(
+    (identity) => ({
+      ...identity,
+      workspaceId,
+      sessionId,
+      payload: {},
+      occurredAt: ""
+    })
+  );
+  const page = {
+    events: [],
+    hasMore: identities.length > limit,
+    bytes: 2,
+    fullPayloadsExact: true,
+    direction,
+    coveredSequence: null,
+    nextAfter: null,
+    nextBefore: null,
+    truncatedBy: identities.length > limit ? "count" : null
+  };
+  const slices = {};
+  const events = [];
+  let consumed = 0;
+  const readScalars = async (tx) => {
+    for (const event of ordered) {
+      consumed++;
+      if (event.duplicateOfEventId || event.turnAssociation && event.turnAssociation !== "current")
+        continue;
+      const p = sessionEvents.payload;
+      const output = event.type === "agent.toolCall.output";
+      let value = sql`${p}->'text'`;
+      if (options.view === "tools")
+        value = output ? sql`${p}->'output'` : sql`coalesce(nullif(${p}->'arguments', 'null'::jsonb), ${p}->'args')`;
+      else if (options.view === "results")
+        value = event.type === "turn.completed" ? sql`coalesce(nullif(${p}->'output', 'null'::jsonb), ${p}->'result')` : sql`${p}`;
+      const include = options.view !== "tools" || (output ? options.includeOutput : options.includeArguments);
+      if (!include) value = sql`null::jsonb`;
+      const start = options.sourceSequence === event.sequence ? offset : 0;
+      const prefix = LOSSLESS_JSON_STRING_PREFIX;
+      const raw = sql`raw`;
+      const encoded = sql`encoded`;
+      const tagged = sql`case when version = 1
+        and left(${raw}, ${prefix.length}) = ${prefix}
+        and length(${encoded}) > 0
+        and ${encoded} ~ '^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$'
+        then (length(${encoded}) / 4 * 3 - case when right(${encoded}, 2) = '==' then 2 when right(${encoded}, 1) = '=' then 1 else 0 end) % 2 = 0
+          and encode(decode(right(${encoded}, 4), 'base64'), 'base64') = right(${encoded}, 4)
+        else false end`;
+      const group = Math.floor(Math.max(0, start - 1) / 3);
+      const safeMetadata = (key) => sql`case when octet_length((${p}->${key})::text) <= 4096 then ${p}->${key} else null end`;
+      const callId = sql`coalesce(nullif(${p}->'callId', 'null'::jsonb), nullif(${p}->'call_id', 'null'::jsonb), ${p}->'id')`;
+      const metadataSql = options.view === "tools" ? sql`jsonb_strip_nulls(jsonb_build_object(
+          'callId', case when octet_length((${callId})::text) <= 4096 then ${callId} else null end,
+          'identityOmitted', case when octet_length((${callId})::text) > 4096 or octet_length((${p}->'name')::text) > 4096 then true else null end,
+          'name', ${safeMetadata("name")}, 'isError', case when ${p}->'isError' = 'true'::jsonb or (${output} and ${p}->'output'->'isError' = 'true'::jsonb) then true else null end,
+          'maintenance', case when ${p} ? 'maintenance' then true else null end,
+          'segmentLimit', case when ${p} ? 'segmentLimit' then true else null end))` : options.view === "results" && event.type === "turn.completed" ? sql`jsonb_strip_nulls(jsonb_build_object(
+            'maintenance', case when ${p} ? 'maintenance' then true else null end,
+            'segmentLimit', case when ${p} ? 'segmentLimit' then true else null end))` : sql`'{}'::jsonb`;
+      const [row] = await rawRows(
+        tx,
+        sql`with source as (
+        select ${value} as value, ${metadataSql} as metadata,
+          ${sessionEvents.payloadCodecVersion} as version
+        from ${sessionEvents}
+        where ${sessionEvents.workspaceId} = ${workspaceId}
+          and ${sessionEvents.sessionId} = ${sessionId}
+          and ${sessionEvents.id} = ${event.id}
+          and (${sessionEvents.turnAssociation} is null or ${sessionEvents.turnAssociation} = 'current')
+          and ${sessionEvents.duplicateOfEventId} is null
+        limit 1
+      ), scalar as (
+        select *, jsonb_typeof(value) as kind,
+          case when jsonb_typeof(value) = 'string' then value #>> '{}' else null end as raw,
+          case when jsonb_typeof(value) <> 'string' then octet_length(value::text) else 0 end as structured_bytes
+        from source offset 0
+      ), encoding as (
+        select *, case when version = 1 and left(raw, ${prefix.length}) = ${prefix}
+          then substring(raw from ${prefix.length + 1}::integer) else null end as encoded
+        from scalar offset 0
+      ), validated as (
+        select *, ${tagged} as tagged from encoding offset 0
+      )
+      select metadata, version, kind, tagged,
+        case when kind = 'string' then
+          case when tagged then (length(encoded) / 4 * 3 - case when right(encoded, 2) = '==' then 2 when right(encoded, 1) = '=' then 1 else 0 end) / 2
+          else length(raw) end else 0 end as total,
+        case when kind = 'string' then
+          case when tagged then substring(encoded from ${Math.min(group * 8 + 1, 2147483647)}::integer for ${Math.ceil((scalarWindow + 6) / 3) * 8}::integer)
+          else substring(raw from ${Math.min(start + 1, 2147483647)}::integer for ${scalarWindow}::integer) end else null end as window,
+        case when kind <> 'string' and structured_bytes <= ${STRUCTURED_BYTES} then value else null end as structured,
+        coalesce(kind <> 'string' and structured_bytes > ${STRUCTURED_BYTES}, false) as omitted
+      from validated`
+      );
+      if (!row) continue;
+      const metadata = fromPostgresLosslessJson(row.metadata, row.version);
+      for (const [key, budget] of [
+        ["callId", 4096],
+        ["name", 1024]
+      ]) {
+        if (metadata[key] !== void 0 && Buffer.byteLength(JSON.stringify(metadata[key]), "utf8") > budget) {
+          delete metadata[key];
+          metadata.identityOmitted = true;
+        }
+      }
+      let text = row.window ?? "";
+      if (row.tagged) {
+        text = fromPostgresLosslessJson(prefix + text, 1);
+        const local = start - group * 3;
+        if (local > 0 && /[\uD800-\uDBFF]/.test(text[local - 1]) && /[\uDC00-\uDFFF]/.test(text[local] ?? ""))
+          throw new Error("Invalid message continuation offset: splits a surrogate pair");
+        text = text.slice(local, local + scalarWindow);
+        if (start + text.length < row.total && /[\uD800-\uDBFF]/.test(text.at(-1)))
+          text = text.slice(0, -1);
+      }
+      if (start > row.total && row.kind === "string")
+        throw new Error("Invalid message continuation offset");
+      const logical = row.omitted ? {} : row.kind === "string" ? text : fromPostgresLosslessJson(row.structured, row.version);
+      let payload = { ...metadata };
+      if (options.view === "tools") {
+        if (row.kind !== null) payload[output ? "output" : "arguments"] = logical;
+      } else if (options.view === "results") {
+        if (event.type === "turn.completed") payload.output = logical;
+        else payload = logical ?? {};
+      } else payload.text = logical;
+      if (row.omitted) payload = { ...payload, sourceOmitted: true };
+      if (row.kind === "string" || row.omitted)
+        slices[event.sequence] = {
+          offset: start,
+          total: row.total,
+          unit: row.tagged ? "utf16" : "codepoint",
+          text,
+          omitted: row.omitted
+        };
+      events.push({ ...event, payload });
+      if (row.kind !== "string" && Buffer.byteLength(JSON.stringify(payload)) > WINDOW) break;
+      if (row.kind === "string" && start + (row.tagged ? text.length : Array.from(text).length) < row.total)
+        break;
+    }
+  };
+  if (selectedIdentity) await readScalars(db);
+  else await withWorkspaceRls(db, workspaceId, readScalars);
+  return {
+    ...page,
+    events: events.sort((a, b) => a.sequence - b.sequence),
+    hasMore: page.hasMore || consumed < ordered.length,
+    coveredSequence: consumed ? {
+      first: Math.min(ordered[0].sequence, ordered[consumed - 1].sequence),
+      last: Math.max(ordered[0].sequence, ordered[consumed - 1].sequence)
+    } : null,
+    bytes: Buffer.byteLength(JSON.stringify(events), "utf8"),
+    fullPayloadsExact: !Object.values(slices).some((slice) => slice.omitted),
+    slices
+  };
+}
+
+export {
+  readSessionMessageSliceInScope,
+  listSessionEventSlices
+};
+//# sourceMappingURL=chunk-CDAT6EKW.js.map

package/dist/chunk-CDAT6EKW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session-event-slices.ts"],"sourcesContent":["import { and, asc, desc, eq, gt, inArray, lt, notInArray, sql, type SQL } from \"drizzle-orm\";\nimport { resolveSessionEventTypeFilters, type SessionEvent } from \"@opengeni/contracts\";\nimport { rawRows, withWorkspaceRls, type Database } from \"./database\";\ntype ListSessionEventPageOptions = import(\"./index\").ListSessionEventPageOptions;\ntype SessionEventPage = import(\"./index\").SessionEventPage;\nimport { fromPostgresLosslessJson, LOSSLESS_JSON_STRING_PREFIX } from \"./lossless-json\";\nimport * as schema from \"./schema\";\n\nexport type SessionEventSliceOptions = ListSessionEventPageOptions & {\n  sourceSequence?: number;\n  sourceOffset?: number;\n  view?: \"conversation\" | \"results\" | \"tools\";\n  includeArguments?: boolean;\n  includeOutput?: boolean;\n  legacyUtf16?: boolean;\n};\nexport type SessionEventSlice = {\n  offset: number;\n  total: number;\n  unit: \"codepoint\" | \"utf16\";\n  text: string;\n  omitted: boolean;\n};\nexport type SessionEventSlicePage = SessionEventPage & {\n  slices?: Record<number, SessionEventSlice>;\n};\nconst WINDOW = 8192;\nconst STRUCTURED_BYTES = 1024 * 1024;\n\ntype SliceIdentity = Pick<\n  SessionEvent,\n  \"id\" | \"sequence\" | \"type\" | \"turnId\" | \"turnAssociation\" | \"duplicateOfEventId\"\n>;\n\n/** Internal search projection, NOT authorization. The scanner has selected this\n * exact identity under its subject RLS/list filters and still holds that same\n * transaction and tenancy/membership fences. Reuse them rather than creating\n * two nested scopes and rediscovering the identity for every scalar window.\n * The scalar query still checks the exact workspace/session/event and RLS.\n * Keep the codec/window implementation shared with the conversation reader.\n */\nexport async function readSessionMessageSliceInScope(\n  db: Database,\n  workspaceId: string,\n  sessionId: string,\n  identity: SliceIdentity,\n  offset: number,\n  windows = 1,\n): Promise<SessionEventSlice | undefined> {\n  if (!Number.isInteger(windows) || windows < 1 || windows > 4)\n    throw new Error(\"Invalid search scalar window budget\");\n  const page = await listSessionEventSlicesInternal(\n    db,\n    workspaceId,\n    sessionId,\n    { sourceSequence: identity.sequence, sourceOffset: offset, view: \"conversation\" },\n    undefined,\n    identity,\n    WINDOW * windows,\n  );\n  return page.slices?.[identity.sequence];\n}\n\n/** Bounded transfer over retained scalar truth. JSONB extraction/detoasting still\n * costs PostgreSQL work proportional to the individual source value, not history.\n * This is a read projection, not authorization: the MCP caller must authorize the\n * target on every request. Both metadata and scalar reads retain workspace RLS.\n */\nexport async function listSessionEventSlices(\n  db: Database,\n  workspaceId: string,\n  sessionId: string,\n  options: SessionEventSliceOptions,\n  legacyRead?: (options: ListSessionEventPageOptions) => Promise<SessionEventPage>,\n): Promise<SessionEventSlicePage> {\n  return listSessionEventSlicesInternal(db, workspaceId, sessionId, options, legacyRead);\n}\n\nasync function listSessionEventSlicesInternal(\n  db: Database,\n  workspaceId: string,\n  sessionId: string,\n  options: SessionEventSliceOptions,\n  legacyRead?: (options: ListSessionEventPageOptions) => Promise<SessionEventPage>,\n  selectedIdentity?: SliceIdentity,\n  scalarWindow = WINDOW,\n): Promise<SessionEventSlicePage> {\n  // Finish an already-issued UTF-16 cursor using its original bounded reader.\n  // New messages use source slices; no cursor offset is silently reinterpreted.\n  if (options.legacyUtf16) {\n    if (!legacyRead) throw new Error(\"Legacy continuation requires its original bounded reader\");\n    return legacyRead({\n      ...options,\n      limit: 1,\n      maxBytes: 1024 * 1024,\n    });\n  }\n  const offset = options.sourceOffset ?? 0;\n  if (!Number.isSafeInteger(offset) || offset < 0 || offset > 2_147_483_647)\n    throw new Error(\"Invalid message continuation offset\");\n  const direction = options.direction ?? (options.before === undefined ? \"after\" : \"before\");\n  const limit = options.sourceSequence ? 1 : Math.max(1, Math.min(options.limit ?? 8, 8));\n  const filters = resolveSessionEventTypeFilters(options);\n  const predicates: SQL[] = [\n    eq(schema.sessionEvents.workspaceId, workspaceId),\n    eq(schema.sessionEvents.sessionId, sessionId),\n    gt(schema.sessionEvents.sequence, Math.min(options.after ?? 0, 2_147_483_647)),\n    // Same indexed exclusion as the audit/discovery reader. Do not substitute\n    // turn status: terminal-before-claim prompts must remain excluded too.\n    sql`(${schema.sessionEvents.type} <> 'user.message' or not exists (\n      select 1 from ${schema.sessionTurns} unclaimed_prompt_turn\n      where unclaimed_prompt_turn.workspace_id = ${workspaceId}\n        and unclaimed_prompt_turn.workspace_id = ${schema.sessionEvents.workspaceId}\n        and unclaimed_prompt_turn.session_id = ${schema.sessionEvents.sessionId}\n        and unclaimed_prompt_turn.trigger_event_id = ${schema.sessionEvents.id}\n        and unclaimed_prompt_turn.source in ('user', 'api')\n        and unclaimed_prompt_turn.started_at is null\n    ))`,\n  ];\n  if (options.before !== undefined && options.before <= 2_147_483_647)\n    predicates.push(lt(schema.sessionEvents.sequence, options.before));\n  if (filters.includeTypes.length)\n    predicates.push(inArray(schema.sessionEvents.type, filters.includeTypes));\n  if (filters.excludeTypes.length)\n    predicates.push(notInArray(schema.sessionEvents.type, filters.excludeTypes));\n  // Unlike audit `none` mode, this identity query does not compute a payload\n  // projection merely to report its size. Only the selected scalar is extracted.\n  const identities = selectedIdentity\n    ? [selectedIdentity]\n    : await withWorkspaceRls(db, workspaceId, (tx) =>\n        tx\n          .select({\n            id: schema.sessionEvents.id,\n            sequence: schema.sessionEvents.sequence,\n            type: sql<string>`case when octet_length(${schema.sessionEvents.type}) <= 256 then ${schema.sessionEvents.type} else 'session.event.envelope_omitted' end`,\n            turnId: schema.sessionEvents.turnId,\n            turnAssociation: sql<\n              string | null\n            >`case when ${schema.sessionEvents.turnAssociation} is null then null when ${schema.sessionEvents.turnAssociation} = 'current' then 'current' else 'late_rejected' end`,\n            duplicateOfEventId: schema.sessionEvents.duplicateOfEventId,\n          })\n          .from(schema.sessionEvents)\n          .where(and(...predicates))\n          .orderBy(\n            direction === \"before\"\n              ? desc(schema.sessionEvents.sequence)\n              : asc(schema.sessionEvents.sequence),\n          )\n          .limit(limit + 1),\n      );\n  const ordered = identities.slice(0, limit).map(\n    (identity) =>\n      ({\n        ...identity,\n        workspaceId,\n        sessionId,\n        payload: {},\n        occurredAt: \"\",\n      }) as SessionEvent,\n  );\n  const page: SessionEventPage = {\n    events: [],\n    hasMore: identities.length > limit,\n    bytes: 2,\n    fullPayloadsExact: true,\n    direction,\n    coveredSequence: null,\n    nextAfter: null,\n    nextBefore: null,\n    truncatedBy: identities.length > limit ? \"count\" : null,\n  };\n  const slices: Record<number, SessionEventSlice> = {};\n  const events: SessionEvent[] = [];\n  let consumed = 0;\n  const readScalars = async (tx: Database) => {\n    for (const event of ordered) {\n      consumed++;\n      if (\n        event.duplicateOfEventId ||\n        (event.turnAssociation && event.turnAssociation !== \"current\")\n      )\n        continue;\n      const p = schema.sessionEvents.payload;\n      const output = event.type === \"agent.toolCall.output\";\n      let value: SQL = sql`${p}->'text'`;\n      if (options.view === \"tools\")\n        value = output\n          ? sql`${p}->'output'`\n          : sql`coalesce(nullif(${p}->'arguments', 'null'::jsonb), ${p}->'args')`;\n      else if (options.view === \"results\")\n        value =\n          event.type === \"turn.completed\"\n            ? sql`coalesce(nullif(${p}->'output', 'null'::jsonb), ${p}->'result')`\n            : sql`${p}`;\n      const include =\n        options.view !== \"tools\" || (output ? options.includeOutput : options.includeArguments);\n      if (!include) value = sql`null::jsonb`;\n      const start = options.sourceSequence === event.sequence ? offset : 0;\n      const prefix = LOSSLESS_JSON_STRING_PREFIX;\n      const raw = sql`raw`;\n      const encoded = sql`encoded`;\n      // Match exactly the JS codec's canonical-base64/even-byte acceptance.\n      // A malformed active marker remains literal, just like the shared codec.\n      const tagged = sql`case when version = 1\n        and left(${raw}, ${prefix.length}) = ${prefix}\n        and length(${encoded}) > 0\n        and ${encoded} ~ '^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$'\n        then (length(${encoded}) / 4 * 3 - case when right(${encoded}, 2) = '==' then 2 when right(${encoded}, 1) = '=' then 1 else 0 end) % 2 = 0\n          and encode(decode(right(${encoded}, 4), 'base64'), 'base64') = right(${encoded}, 4)\n        else false end`;\n      // Aligned base64 windows represent groups of three UTF-16 units. Include\n      // one preceding and one following unit to validate/avoid pair splits.\n      const group = Math.floor(Math.max(0, start - 1) / 3);\n      const safeMetadata = (key: string) =>\n        sql`case when octet_length((${p}->${key})::text) <= 4096 then ${p}->${key} else null end`;\n      const callId = sql`coalesce(nullif(${p}->'callId', 'null'::jsonb), nullif(${p}->'call_id', 'null'::jsonb), ${p}->'id')`;\n      const metadataSql =\n        options.view === \"tools\"\n          ? sql`jsonb_strip_nulls(jsonb_build_object(\n          'callId', case when octet_length((${callId})::text) <= 4096 then ${callId} else null end,\n          'identityOmitted', case when octet_length((${callId})::text) > 4096 or octet_length((${p}->'name')::text) > 4096 then true else null end,\n          'name', ${safeMetadata(\"name\")}, 'isError', case when ${p}->'isError' = 'true'::jsonb or (${output} and ${p}->'output'->'isError' = 'true'::jsonb) then true else null end,\n          'maintenance', case when ${p} ? 'maintenance' then true else null end,\n          'segmentLimit', case when ${p} ? 'segmentLimit' then true else null end))`\n          : options.view === \"results\" && event.type === \"turn.completed\"\n            ? sql`jsonb_strip_nulls(jsonb_build_object(\n            'maintenance', case when ${p} ? 'maintenance' then true else null end,\n            'segmentLimit', case when ${p} ? 'segmentLimit' then true else null end))`\n            : sql`'{}'::jsonb`;\n      const [row] = await rawRows<{\n        metadata: unknown;\n        version: number | null;\n        kind: string | null;\n        tagged: boolean;\n        total: number;\n        window: string | null;\n        structured: unknown;\n        omitted: boolean;\n      }>(\n        tx,\n        sql`with source as (\n        select ${value} as value, ${metadataSql} as metadata,\n          ${schema.sessionEvents.payloadCodecVersion} as version\n        from ${schema.sessionEvents}\n        where ${schema.sessionEvents.workspaceId} = ${workspaceId}\n          and ${schema.sessionEvents.sessionId} = ${sessionId}\n          and ${schema.sessionEvents.id} = ${event.id}\n          and (${schema.sessionEvents.turnAssociation} is null or ${schema.sessionEvents.turnAssociation} = 'current')\n          and ${schema.sessionEvents.duplicateOfEventId} is null\n        limit 1\n      ), scalar as (\n        select *, jsonb_typeof(value) as kind,\n          case when jsonb_typeof(value) = 'string' then value #>> '{}' else null end as raw,\n          case when jsonb_typeof(value) <> 'string' then octet_length(value::text) else 0 end as structured_bytes\n        from source offset 0\n      ), encoding as (\n        select *, case when version = 1 and left(raw, ${prefix.length}) = ${prefix}\n          then substring(raw from ${prefix.length + 1}::integer) else null end as encoded\n        from scalar offset 0\n      ), validated as (\n        select *, ${tagged} as tagged from encoding offset 0\n      )\n      select metadata, version, kind, tagged,\n        case when kind = 'string' then\n          case when tagged then (length(encoded) / 4 * 3 - case when right(encoded, 2) = '==' then 2 when right(encoded, 1) = '=' then 1 else 0 end) / 2\n          else length(raw) end else 0 end as total,\n        case when kind = 'string' then\n          case when tagged then substring(encoded from ${Math.min(group * 8 + 1, 2_147_483_647)}::integer for ${Math.ceil((scalarWindow + 6) / 3) * 8}::integer)\n          else substring(raw from ${Math.min(start + 1, 2_147_483_647)}::integer for ${scalarWindow}::integer) end else null end as window,\n        case when kind <> 'string' and structured_bytes <= ${STRUCTURED_BYTES} then value else null end as structured,\n        coalesce(kind <> 'string' and structured_bytes > ${STRUCTURED_BYTES}, false) as omitted\n      from validated`,\n      );\n      if (!row) continue;\n      const metadata = fromPostgresLosslessJson(row.metadata, row.version) as Record<\n        string,\n        unknown\n      >;\n      // Codec decoding can expand JSON escaping (notably NUL/lone surrogates).\n      // Keep identities bounded too, without falling back to a different alias.\n      for (const [key, budget] of [\n        [\"callId\", 4096],\n        [\"name\", 1024],\n      ] as const) {\n        if (\n          metadata[key] !== undefined &&\n          Buffer.byteLength(JSON.stringify(metadata[key]), \"utf8\") > budget\n        ) {\n          delete metadata[key];\n          metadata.identityOmitted = true;\n        }\n      }\n      let text = row.window ?? \"\";\n      if (row.tagged) {\n        // Window lengths are multiples of eight, so each partial block is also\n        // a complete canonical encoding accepted by the existing lossless codec.\n        text = fromPostgresLosslessJson(prefix + text, 1);\n        const local = start - group * 3;\n        if (\n          local > 0 &&\n          /[\\uD800-\\uDBFF]/.test(text[local - 1]!) &&\n          /[\\uDC00-\\uDFFF]/.test(text[local] ?? \"\")\n        )\n          throw new Error(\"Invalid message continuation offset: splits a surrogate pair\");\n        text = text.slice(local, local + scalarWindow);\n        if (start + text.length < row.total && /[\\uD800-\\uDBFF]/.test(text.at(-1)!))\n          text = text.slice(0, -1);\n      }\n      if (start > row.total && row.kind === \"string\")\n        throw new Error(\"Invalid message continuation offset\");\n      const logical = row.omitted\n        ? {}\n        : row.kind === \"string\"\n          ? text\n          : fromPostgresLosslessJson(row.structured, row.version);\n      let payload: Record<string, unknown> = { ...metadata };\n      if (options.view === \"tools\") {\n        if (row.kind !== null) payload[output ? \"output\" : \"arguments\"] = logical;\n      } else if (options.view === \"results\") {\n        if (event.type === \"turn.completed\") payload.output = logical;\n        else payload = (logical as Record<string, unknown>) ?? {};\n      } else payload.text = logical;\n      if (row.omitted) payload = { ...payload, sourceOmitted: true };\n      if (row.kind === \"string\" || row.omitted)\n        slices[event.sequence] = {\n          offset: start,\n          total: row.total,\n          unit: row.tagged ? \"utf16\" : \"codepoint\",\n          text,\n          omitted: row.omitted,\n        };\n      events.push({ ...event, payload });\n      // One large structured value preserves the previous bounded JSON path,\n      // without accumulating several megabyte-sized values in one source page.\n      if (row.kind !== \"string\" && Buffer.byteLength(JSON.stringify(payload)) > WINDOW) break;\n      if (\n        row.kind === \"string\" &&\n        start + (row.tagged ? text.length : Array.from(text).length) < row.total\n      )\n        break;\n    }\n  };\n  if (selectedIdentity) await readScalars(db);\n  else await withWorkspaceRls(db, workspaceId, readScalars);\n  // Preserve scan advancement even when every identity was excluded above.\n  return {\n    ...page,\n    events: events.sort((a, b) => a.sequence - b.sequence),\n    hasMore: page.hasMore || consumed < ordered.length,\n    coveredSequence: consumed\n      ? {\n          first: Math.min(ordered[0]!.sequence, ordered[consumed - 1]!.sequence),\n          last: Math.max(ordered[0]!.sequence, ordered[consumed - 1]!.sequence),\n        }\n      : null,\n    bytes: Buffer.byteLength(JSON.stringify(events), \"utf8\"),\n    fullPayloadsExact: !Object.values(slices).some((slice) => slice.omitted),\n    slices,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,KAAK,KAAK,MAAM,IAAI,IAAI,SAAS,IAAI,YAAY,WAAqB;AAC/E,SAAS,sCAAyD;AAyBlE,IAAM,SAAS;AACf,IAAM,mBAAmB,OAAO;AAchC,eAAsB,+BACpB,IACA,aACA,WACA,UACA,QACA,UAAU,GAC8B;AACxC,MAAI,CAAC,OAAO,UAAU,OAAO,KAAK,UAAU,KAAK,UAAU;AACzD,UAAM,IAAI,MAAM,qCAAqC;AACvD,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,gBAAgB,SAAS,UAAU,cAAc,QAAQ,MAAM,eAAe;AAAA,IAChF;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX;AACA,SAAO,KAAK,SAAS,SAAS,QAAQ;AACxC;AAOA,eAAsB,uBACpB,IACA,aACA,WACA,SACA,YACgC;AAChC,SAAO,+BAA+B,IAAI,aAAa,WAAW,SAAS,UAAU;AACvF;AAEA,eAAe,+BACb,IACA,aACA,WACA,SACA,YACA,kBACA,eAAe,QACiB;AAGhC,MAAI,QAAQ,aAAa;AACvB,QAAI,CAAC,WAAY,OAAM,IAAI,MAAM,0DAA0D;AAC3F,WAAO,WAAW;AAAA,MAChB,GAAG;AAAA,MACH,OAAO;AAAA,MACP,UAAU,OAAO;AAAA,IACnB,CAAC;AAAA,EACH;AACA,QAAM,SAAS,QAAQ,gBAAgB;AACvC,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,KAAK,SAAS;AAC1D,UAAM,IAAI,MAAM,qCAAqC;AACvD,QAAM,YAAY,QAAQ,cAAc,QAAQ,WAAW,SAAY,UAAU;AACjF,QAAM,QAAQ,QAAQ,iBAAiB,IAAI,KAAK,IAAI,GAAG,KAAK,IAAI,QAAQ,SAAS,GAAG,CAAC,CAAC;AACtF,QAAM,UAAU,+BAA+B,OAAO;AACtD,QAAM,aAAoB;AAAA,IACxB,GAAU,cAAc,aAAa,WAAW;AAAA,IAChD,GAAU,cAAc,WAAW,SAAS;AAAA,IAC5C,GAAU,cAAc,UAAU,KAAK,IAAI,QAAQ,SAAS,GAAG,UAAa,CAAC;AAAA;AAAA;AAAA,IAG7E,OAAc,cAAc,IAAI;AAAA,sBACP,YAAY;AAAA,mDACU,WAAW;AAAA,mDACJ,cAAc,WAAW;AAAA,iDAC3B,cAAc,SAAS;AAAA,uDACjB,cAAc,EAAE;AAAA;AAAA;AAAA;AAAA,EAI5E;AACA,MAAI,QAAQ,WAAW,UAAa,QAAQ,UAAU;AACpD,eAAW,KAAK,GAAU,cAAc,UAAU,QAAQ,MAAM,CAAC;AACnE,MAAI,QAAQ,aAAa;AACvB,eAAW,KAAK,QAAe,cAAc,MAAM,QAAQ,YAAY,CAAC;AAC1E,MAAI,QAAQ,aAAa;AACvB,eAAW,KAAK,WAAkB,cAAc,MAAM,QAAQ,YAAY,CAAC;AAG7E,QAAM,aAAa,mBACf,CAAC,gBAAgB,IACjB,MAAM;AAAA,IAAiB;AAAA,IAAI;AAAA,IAAa,CAAC,OACvC,GACG,OAAO;AAAA,MACN,IAAW,cAAc;AAAA,MACzB,UAAiB,cAAc;AAAA,MAC/B,MAAM,6BAA4C,cAAc,IAAI,iBAAwB,cAAc,IAAI;AAAA,MAC9G,QAAe,cAAc;AAAA,MAC7B,iBAAiB,gBAEI,cAAc,eAAe,2BAAkC,cAAc,eAAe;AAAA,MACjH,oBAA2B,cAAc;AAAA,IAC3C,CAAC,EACA,KAAY,aAAa,EACzB,MAAM,IAAI,GAAG,UAAU,CAAC,EACxB;AAAA,MACC,cAAc,WACV,KAAY,cAAc,QAAQ,IAClC,IAAW,cAAc,QAAQ;AAAA,IACvC,EACC,MAAM,QAAQ,CAAC;AAAA,EACpB;AACJ,QAAM,UAAU,WAAW,MAAM,GAAG,KAAK,EAAE;AAAA,IACzC,CAAC,cACE;AAAA,MACC,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,SAAS,CAAC;AAAA,MACV,YAAY;AAAA,IACd;AAAA,EACJ;AACA,QAAM,OAAyB;AAAA,IAC7B,QAAQ,CAAC;AAAA,IACT,SAAS,WAAW,SAAS;AAAA,IAC7B,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB;AAAA,IACA,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,aAAa,WAAW,SAAS,QAAQ,UAAU;AAAA,EACrD;AACA,QAAM,SAA4C,CAAC;AACnD,QAAM,SAAyB,CAAC;AAChC,MAAI,WAAW;AACf,QAAM,cAAc,OAAO,OAAiB;AAC1C,eAAW,SAAS,SAAS;AAC3B;AACA,UACE,MAAM,sBACL,MAAM,mBAAmB,MAAM,oBAAoB;AAEpD;AACF,YAAM,IAAW,cAAc;AAC/B,YAAM,SAAS,MAAM,SAAS;AAC9B,UAAI,QAAa,MAAM,CAAC;AACxB,UAAI,QAAQ,SAAS;AACnB,gBAAQ,SACJ,MAAM,CAAC,eACP,sBAAsB,CAAC,kCAAkC,CAAC;AAAA,eACvD,QAAQ,SAAS;AACxB,gBACE,MAAM,SAAS,mBACX,sBAAsB,CAAC,+BAA+B,CAAC,gBACvD,MAAM,CAAC;AACf,YAAM,UACJ,QAAQ,SAAS,YAAY,SAAS,QAAQ,gBAAgB,QAAQ;AACxE,UAAI,CAAC,QAAS,SAAQ;AACtB,YAAM,QAAQ,QAAQ,mBAAmB,MAAM,WAAW,SAAS;AACnE,YAAM,SAAS;AACf,YAAM,MAAM;AACZ,YAAM,UAAU;AAGhB,YAAM,SAAS;AAAA,mBACF,GAAG,KAAK,OAAO,MAAM,OAAO,MAAM;AAAA,qBAChC,OAAO;AAAA,cACd,OAAO;AAAA,uBACE,OAAO,+BAA+B,OAAO,iCAAiC,OAAO;AAAA,oCACxE,OAAO,sCAAsC,OAAO;AAAA;AAIlF,YAAM,QAAQ,KAAK,MAAM,KAAK,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;AACnD,YAAM,eAAe,CAAC,QACpB,8BAA8B,CAAC,KAAK,GAAG,yBAAyB,CAAC,KAAK,GAAG;AAC3E,YAAM,SAAS,sBAAsB,CAAC,sCAAsC,CAAC,gCAAgC,CAAC;AAC9G,YAAM,cACJ,QAAQ,SAAS,UACb;AAAA,8CACkC,MAAM,yBAAyB,MAAM;AAAA,uDAC5B,MAAM,oCAAoC,CAAC;AAAA,oBAC9E,aAAa,MAAM,CAAC,0BAA0B,CAAC,mCAAmC,MAAM,QAAQ,CAAC;AAAA,qCAChF,CAAC;AAAA,sCACA,CAAC,gDAC3B,QAAQ,SAAS,aAAa,MAAM,SAAS,mBAC3C;AAAA,uCACyB,CAAC;AAAA,wCACA,CAAC,gDAC3B;AACR,YAAM,CAAC,GAAG,IAAI,MAAM;AAAA,QAUlB;AAAA,QACA;AAAA,iBACS,KAAK,cAAc,WAAW;AAAA,YAC5B,cAAc,mBAAmB;AAAA,eAC9B,aAAa;AAAA,gBACZ,cAAc,WAAW,MAAM,WAAW;AAAA,gBAC1C,cAAc,SAAS,MAAM,SAAS;AAAA,gBACtC,cAAc,EAAE,MAAM,MAAM,EAAE;AAAA,iBAC7B,cAAc,eAAe,eAAsB,cAAc,eAAe;AAAA,gBACjF,cAAc,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wDAQC,OAAO,MAAM,OAAO,MAAM;AAAA,oCAC9C,OAAO,SAAS,CAAC;AAAA;AAAA;AAAA,oBAGjC,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yDAO+B,KAAK,IAAI,QAAQ,IAAI,GAAG,UAAa,CAAC,iBAAiB,KAAK,MAAM,eAAe,KAAK,CAAC,IAAI,CAAC;AAAA,oCACjH,KAAK,IAAI,QAAQ,GAAG,UAAa,CAAC,iBAAiB,YAAY;AAAA,6DACtC,gBAAgB;AAAA,2DAClB,gBAAgB;AAAA;AAAA,MAErE;AACA,UAAI,CAAC,IAAK;AACV,YAAM,WAAW,yBAAyB,IAAI,UAAU,IAAI,OAAO;AAMnE,iBAAW,CAAC,KAAK,MAAM,KAAK;AAAA,QAC1B,CAAC,UAAU,IAAI;AAAA,QACf,CAAC,QAAQ,IAAI;AAAA,MACf,GAAY;AACV,YACE,SAAS,GAAG,MAAM,UAClB,OAAO,WAAW,KAAK,UAAU,SAAS,GAAG,CAAC,GAAG,MAAM,IAAI,QAC3D;AACA,iBAAO,SAAS,GAAG;AACnB,mBAAS,kBAAkB;AAAA,QAC7B;AAAA,MACF;AACA,UAAI,OAAO,IAAI,UAAU;AACzB,UAAI,IAAI,QAAQ;AAGd,eAAO,yBAAyB,SAAS,MAAM,CAAC;AAChD,cAAM,QAAQ,QAAQ,QAAQ;AAC9B,YACE,QAAQ,KACR,kBAAkB,KAAK,KAAK,QAAQ,CAAC,CAAE,KACvC,kBAAkB,KAAK,KAAK,KAAK,KAAK,EAAE;AAExC,gBAAM,IAAI,MAAM,8DAA8D;AAChF,eAAO,KAAK,MAAM,OAAO,QAAQ,YAAY;AAC7C,YAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,kBAAkB,KAAK,KAAK,GAAG,EAAE,CAAE;AACxE,iBAAO,KAAK,MAAM,GAAG,EAAE;AAAA,MAC3B;AACA,UAAI,QAAQ,IAAI,SAAS,IAAI,SAAS;AACpC,cAAM,IAAI,MAAM,qCAAqC;AACvD,YAAM,UAAU,IAAI,UAChB,CAAC,IACD,IAAI,SAAS,WACX,OACA,yBAAyB,IAAI,YAAY,IAAI,OAAO;AAC1D,UAAI,UAAmC,EAAE,GAAG,SAAS;AACrD,UAAI,QAAQ,SAAS,SAAS;AAC5B,YAAI,IAAI,SAAS,KAAM,SAAQ,SAAS,WAAW,WAAW,IAAI;AAAA,MACpE,WAAW,QAAQ,SAAS,WAAW;AACrC,YAAI,MAAM,SAAS,iBAAkB,SAAQ,SAAS;AAAA,YACjD,WAAW,WAAuC,CAAC;AAAA,MAC1D,MAAO,SAAQ,OAAO;AACtB,UAAI,IAAI,QAAS,WAAU,EAAE,GAAG,SAAS,eAAe,KAAK;AAC7D,UAAI,IAAI,SAAS,YAAY,IAAI;AAC/B,eAAO,MAAM,QAAQ,IAAI;AAAA,UACvB,QAAQ;AAAA,UACR,OAAO,IAAI;AAAA,UACX,MAAM,IAAI,SAAS,UAAU;AAAA,UAC7B;AAAA,UACA,SAAS,IAAI;AAAA,QACf;AACF,aAAO,KAAK,EAAE,GAAG,OAAO,QAAQ,CAAC;AAGjC,UAAI,IAAI,SAAS,YAAY,OAAO,WAAW,KAAK,UAAU,OAAO,CAAC,IAAI,OAAQ;AAClF,UACE,IAAI,SAAS,YACb,SAAS,IAAI,SAAS,KAAK,SAAS,MAAM,KAAK,IAAI,EAAE,UAAU,IAAI;AAEnE;AAAA,IACJ;AAAA,EACF;AACA,MAAI,iBAAkB,OAAM,YAAY,EAAE;AAAA,MACrC,OAAM,iBAAiB,IAAI,aAAa,WAAW;AAExD,SAAO;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,OAAO,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAAA,IACrD,SAAS,KAAK,WAAW,WAAW,QAAQ;AAAA,IAC5C,iBAAiB,WACb;AAAA,MACE,OAAO,KAAK,IAAI,QAAQ,CAAC,EAAG,UAAU,QAAQ,WAAW,CAAC,EAAG,QAAQ;AAAA,MACrE,MAAM,KAAK,IAAI,QAAQ,CAAC,EAAG,UAAU,QAAQ,WAAW,CAAC,EAAG,QAAQ;AAAA,IACtE,IACA;AAAA,IACJ,OAAO,OAAO,WAAW,KAAK,UAAU,MAAM,GAAG,MAAM;AAAA,IACvD,mBAAmB,CAAC,OAAO,OAAO,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,OAAO;AAAA,IACvE;AAAA,EACF;AACF;","names":[]}