@owlmeans/server-api 0.1.18-rc.5 → 0.1.18-rc.50

package/README.md

@@ -1,80 +1,236 @@
 # @owlmeans/server-api
 
-Fastify-based HTTP/WebSocket server with handler wrappers for the OwlMeans module system.
-
-## Overview
-
-- `handleBody`, `handleParams`, `handleRequest` wrap business logic with context injection and error handling
-- Built on [Fastify](https://fastify.dev/) — registered modules become Fastify routes automatically
-- `createApiServer` / `appendApiServer` initialize the HTTP server in a context
-- Not typically used directly — import handlers from `@owlmeans/server-app`
+The Fastify HTTP server of an OwlMeans backend and the protocol-bound handler factories that serve
+it. An application imports `handlers<Context>()` in every HTTP handler module (often through the
+`@owlmeans/server-app` re-export) and `holdApiPort` for a guarded boot. The server itself —
+`appendApiServer` — is already added by `@owlmeans/server-app`'s `makeContext`; call it directly
+only when composing a context without that package. WebSocket routes belong to
+`@owlmeans/server-socket`, and calls to other services go through the `@owlmeans/api` client.
 
 ## Installation
 
 ```bash
-bun add @owlmeans/server-api
+bun add @owlmeans/server-api@^0.1.18-rc.50
 ```
 
+## Concepts
+
+- **API server** — the `api-server` service (`context.getApiServer()`), holding a `FastifyInstance`
+  and `listen()`. At context init it builds its route table from the registered entrypoints: backend
+  routes of this `cfg.service` only, excluding socket and queue protocols.
+- **Request pipeline** — intermediates run first; then the protocol's guards (the first guard whose
+  `match` hits handles the request and sets `request.auth`, and the organization entity is attached);
+  then its gates (`gate.assert`); then the handler.
+- **Protocol-bound handler** — `handlers<Context>().body / .params / .request` infer the request
+  sections and the response type from the declaration. A returned value resolves the entrypoint with
+  `EntrypointOutcome.Ok` (HTTP 200); a thrown error rejects it.
+- **Validation** — the contract's schemas are compiled with AJV (`removeAdditional`, `useDefaults`,
+  `coerceTypes`), so a handler receives cleaned, coerced input.
+- **Error mapping** — `AuthForbidden` / `AccessError` answer 403, `AuthorizationError` /
+  `AuthFailedError` answer 401, a class declaring `static httpStatus` as an integer 4xx answers that
+  status, and anything else 500 — always with the marshalled `ResilientError` as the body. A refusal
+  of the caller's condition declares its status; a fault declares nothing and stays 500. The status
+  is taken from the error as thrown first, and from the ensured (rebuilt) error only when that
+  answers 500. An auth family is matched by class or by exact registered type name (the instance's
+  `type` or a `typeName` on its constructor chain), so duplicate module copies answer the same.
+
 ## Usage
 
-Handler functions called via `elevate()` in modules:
+### Body, params and request handlers
 
-```typescript
-import { handleBody, handleParams, handleRequest } from '@owlmeans/server-app'
+```ts
+import { handlers } from '@owlmeans/server-api'
+import { bind } from '@owlmeans/server-entrypoint'
+import { requireEntityKey } from '@owlmeans/auth-common'
+import { projectProtocols } from 'my-app-common'
+import type { Context } from './context.js'
 
-// Body handler: receives parsed + validated body as first arg
-export const create = handleBody<CreateProject>(async (payload, context, req) => {
-  const ctx = context as Context
-  return await ctx.project().create({ ...payload, entityId: req.auth!.entityId })
-})
+const api = handlers<Context>()
 
-// Params handler: receives validated URL params as first arg
-export const get = handleParams<{ id: string }>(async (params, context, req) => {
-  return await (context as Context).project().get(params.id)
-})
+// body: the validated body first, then context and the full request
+const create = api.body(projectProtocols.create, async (payload, context, request) =>
+  context.project().create({ ...payload, entityId: requireEntityKey(request) }))
+
+// params: the validated URL params first
+const get = api.params(projectProtocols.get, async ({ id }, context, request) =>
+  context.project().load({ id, entityId: requireEntityKey(request) }))
+
+// request: every typed section plus request metadata (auth, entity, headers)
+const search = api.request(projectProtocols.search, async (request, context) =>
+  context.project().list({ entityId: requireEntityKey(request), ...request.query }))
+
+export const serverBindings = [
+  bind(projectProtocols.base),
+  bind(projectProtocols.create, create),
+  bind(projectProtocols.get, get),
+  bind(projectProtocols.search, search),
+]
+```
+
+### Refusing a request
+
+Guards and gates run before the handler; a handler still checks ownership and throws a typed error,
+which the server maps onto a status.
+
+```ts
+import { AuthForbidden } from '@owlmeans/auth'
+
+// the protocol declares both `params` and `body`
+export const rename = api.body(projectProtocols.rename, async ({ name }, context, request) => {
+  const entityId = requireEntityKey(request)
+  const project = await context.project().load({ id: request.params.id, entityId })
+  if (project == null) {
+    throw new AuthForbidden('project') // 403
+  }
 
-// Request handler: receives the full AbstractRequest
-export const health = handleRequest(async (req, context) => {
-  return { status: 'ok' }
+  return context.project().update({ ...project, name })
 })
 ```
 
-## API
+A refusal that is not about permission declares its own 4xx on the class. The declaring package
+never imports this one — the static property is read structurally and inherited by subclasses:
+
+```ts
+import { ResilientError } from '@owlmeans/error'
 
-### `handleBody<T>(handler): RefedModuleHandler`
+export class ProjectBusy extends ResilientError {
+  public static override typeName = 'ProjectBusy'
+  public static httpStatus = 409 // honoured only as an integer 400–499; anything else answers 500
 
-Wraps a handler that receives the validated request body as the first argument.
-```typescript
-handler: (payload: T, ctx: Context, req: AbstractRequest) => Promise<any>
+  constructor(message: string = 'error') {
+    super(ProjectBusy.typeName, `project-busy:${message}`)
+  }
+}
 ```
 
-### `handleParams<T>(handler): RefedModuleHandler`
+### File upload
+
+`uploadedFile(request)` is the only place a handler touches the Fastify multipart API. The protocol
+must declare a `body` section.
+
+```ts
+import { handlers, NoFileError, uploadedFile } from '@owlmeans/server-api'
+
+export const upload = api.request(invoiceProtocols.attach, async (request, context) => {
+  const file = await uploadedFile(request)
+  if (file == null) {
+    throw new NoFileError()
+  }
+
+  const content = await file.toBuffer()
 
-Wraps a handler that receives the validated URL params as the first argument.
-```typescript
-handler: (payload: T, ctx: Context, req: AbstractRequest) => Promise<any>
+  return context.attachment().create({
+    entityId: requireEntityKey(request),
+    name: file.filename,
+    mimetype: file.mimetype,
+    size: content.length,
+  })
+})
 ```
 
-### `handleRequest(handler): RefedModuleHandler`
+### Holding the port during boot
+
+```ts
+import { holdApiPort } from '@owlmeans/server-api'
 
-Wraps a handler that receives the full request object.
-```typescript
-handler: (req: AbstractRequest, ctx: Context, res?: AbstractResponse) => Promise<any>
+const hold = await holdApiPort(cfg, { okPath: '/healthz' }) // 200 on /healthz, 503 elsewhere
+await context.configure().init()
+await hold.release()
+await context.getApiServer().listen()
 ```
 
-### `handleIntermediate(handler): RefedModuleHandler`
+### A context without `@owlmeans/server-app`
+
+```ts
+import { makeServerContext } from '@owlmeans/server-context'
+import { appendApiServer } from '@owlmeans/server-api'
 
-Wraps middleware-layer handlers that do not return a final response.
+const context = appendApiServer(makeServerContext(cfg))
+context.registerEntrypoints(serverBindings)
+await context.configure().init()
 
-### `extractUploadedFile(req, fieldName): UploadedFile | null`
+// the Fastify instance, for plugins the framework does not register
+context.getApiServer().server.addHook('onResponse', async (request, reply) => {
+  console.log(request.url, reply.statusCode)
+})
 
-Extract a multipart-uploaded file from the request.
+await context.getApiServer().listen()
+```
 
-## Related Packages
+## API
 
-- [`@owlmeans/server-app`](../server-app) — re-exports all handlers; preferred import point
-- [`@owlmeans/server-module`](../server-module) — `elevate()` attaches handlers to modules
-- [`@owlmeans/server-socket`](../server-socket) — WebSocket `handleConnection` counterpart
+### Root export
+
+| Symbol | Kind | Purpose |
+|---|---|---|
+| `handlers<Context>()` | function | Factories `body(protocol, fn)`, `params(protocol, fn)`, `request(protocol, fn)` returning `BoundEntrypointHandler<Protocol>` |
+| `uploadedFile(request)` | function | The multipart file of a request, or `undefined` |
+| `extractUploadedFile(req)` | function | Same boundary for an untyped `AbstractRequest`; returns `Promise<UploadedFile \| undefined>` |
+| `holdApiPort(cfg, opts?)` | function | Bind the service port before init; returns `ApiPortHold` with `release()` |
+| `createApiServer(alias)` | function | Create the Fastify API server service |
+| `appendApiServer(ctx, alias = DEFAULT_ALIAS)` | function | Register the API server and `context.getApiServer()` |
+| `handleBody`, `handleParams`, `handleRequest`, `handleIntermediate` | function | Unbound compatibility wrappers returning `RefedEntrypointHandler` |
+| `AuthFailedError`, `AccessError`, `NoFileError` | class | Registered `ResilientError` subclasses (401, 403, 500) |
+| `DEFAULT_ALIAS` | const | `'api-server'` |
+| `PORT` | const | `80`, used when the service route declares no port |
+| `CLOSED_HOST`, `OPENED_HOST` | const | `'127.0.0.1'` and `'0.0.0.0'`; a service with `opened: true` listens on the second |
+| `ApiServer`, `ApiServerAppend` | type | The server service and its context mixin |
+| `ApiPortHold`, `ApiPortHoldOptions` | type | `holdApiPort` result and options (`okPath?`, `payload?`) |
+| `Config`, `Context` | type | `ServerConfig` and `ServerContext & ApiServerAppend` |
+| `Request`, `Response` | type | Fastify request and reply |
+| `UploadedFile` | type | Fastify `MultipartFile` |
+
+### `./utils` subpath
+
+For transport packages (such as `@owlmeans/server-socket`) that reuse the HTTP pipeline; application
+code does not need it.
+
+| Symbol | Kind | Purpose |
+|---|---|---|
+| `authorize(context, module, req, reply)` | function | Run guards, set `auth`, call `attachEntity` |
+| `createServerHandler(module, location)` | function | The Fastify handler: authorize, gates, handle, respond |
+| `canServeModule(context, module)` | function | Whether an entrypoint belongs on this HTTP server |
+| `provideRequest(alias, req, provision?)` | function | Build an `AbstractRequest` from a Fastify request |
+| `executeResponse(response, reply, throwOnError?)` | function | Send an `AbstractResponse` onto a reply |
+| `handleError(error, reply)` | function | Answer an error with `errorStatus` and the marshalled body |
+| `errorStatus(error)` | function | 403 / 401 for auth errors (by class or type name), else the class's declared 4xx, else 500 |
+| `declaredErrorStatus(error)` | function | The integer 4xx a class declares through `static httpStatus`, or `null` |
+| `HttpStatusDeclaration` | type | `{ httpStatus?: unknown }` — the structural shape a declaring class has |
+| `fixFormatDates(schema)` | function | Rewrite `date-time` object schemas as strings |
+| `populateContext(req, context)`, `extractContext(req, ctx?, location?)` | function | Carry the request-scoped context on the raw request |
+
+## Common pitfalls
+
+- `.body` and `.params` exist only for a protocol that declares that section; for anything else use
+  `.request`.
+- Do not reach into `request.original` from application code — `uploadedFile(request)` is the
+  multipart boundary.
+- Prefer `handlers<Context>()` over the unbound `handle*` wrappers, and never hand-write a
+  `RefedEntrypointHandler` for an HTTP route.
+- A handler is wrapped by `handlers<Context>()` **exactly once**: wrap a plain function where it is
+  bound (`bind(p, api.body(p, create))`), or bind the already-bound export directly
+  (`const create = api.body(p, ...)` then `bind(p, create)`) — never both. `tsc` rejects a double
+  wrap (`TS2345 "BoundEntrypointHandler<…> is not assignable"`); at runtime a handler already bound
+  to the SAME protocol is returned unchanged with a one-time console warning, and anything else that
+  is not a plain function fails that one route with `HandlerMisconfiguredError` instead of the
+  opaque `TypeError: handler is not a function`.
+- A guard only authenticates. Gates authorize, and the handler keeps its organization check keyed on
+  `requireEntityKey(request)` — never an id read from the token.
+- `request.entity` is absent when no entity resolver is registered; `requireEntityKey` falls back to
+  the slug there, `requireEntity` throws.
+- A handler always answers 200 on success. The port comes from `cfg.services[cfg.service]`
+  (`internalPort ?? port ?? 80`).
+- A `holdApiPort` bind failure must end the process with a non-zero exit.
+- WebSocket routes use `connection(protocol, callback)` from `@owlmeans/server-socket`.
+
+## Related packages
+
+- [`@owlmeans/server-entrypoint`](../server-entrypoint) — `bind()` attaches handlers to protocols
+- [`@owlmeans/server-app`](../server-app) — application bootstrap and re-exports
+- [`@owlmeans/server-socket`](../server-socket) — the WebSocket counterpart of `handlers`
+- [`@owlmeans/entrypoint`](../entrypoint) — `contract`, `typed`, request/response types
+- [`@owlmeans/auth-common`](../auth-common) — `requireEntityKey`, `attachEntity`, guard aliases
+- [`@owlmeans/api`](../api) — the client that calls these endpoints from other services
 
 <!-- owlmeans:agent-guidance:start -->
 ## Agent guidance
@@ -84,7 +240,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills
+npx @owlmeans/agent-skills@^0.1.18-rc.48
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-api",
-  "version": "0.1.18-rc.0",
-  "generatedAt": "2026-08-16T22:20:50.496Z",
+  "version": "0.1.18-rc.50",
+  "generatedAt": "2026-10-05T08:32:19.085Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-api/SKILL.md

@@ -1,40 +1,146 @@
 ---
 name: server-api
-description: How to use @owlmeans/server-api — Fastify-based API server factory, request/response shapes, server middleware integration. Auto-invoked when importing server-api types or extending the server middleware stack.
+description: Implement HTTP entrypoint protocols with @owlmeans/server-api handlers<Context>().body(), params(), request(), and uploadedFile(). Load before writing an API handler.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
 
 # @owlmeans/server-api
 
-**Layer:** Server
-**Install:** `"@owlmeans/server-api": "^0.1.18-rc.0"` in `dependencies`
+**Install:** `bun add @owlmeans/server-api@^0.1.18-rc.50`
 
-## Key Exports
+Make handlers from the protocol declaration so input and output types stay coupled to the shared
+contract:
 
-| Export | Description |
-|--------|-------------|
-| `makeServer()` | Factory for the Fastify-based API server |
-| `Server`, `ServerRequest`, `ServerResponse` types | Runtime shapes |
-| Errors | Typed transport errors |
-| Constants | Default ports, paths |
-| Helpers | Middleware composition |
+```ts
+const api = handlers<AppContext>()
 
-## Subpath Exports
+const create = api.body(projectProtocols.create, async (body, context, request) =>
+  context.projects.create(body, request.auth)
+)
 
-- `./utils` — server utility functions
+const get = api.params(projectProtocols.get, async ({ id }, context) =>
+  context.projects.get(id)
+)
 
-## Usage
+const search = api.request(projectProtocols.search, async (request, context) =>
+  context.projects.search(request.query)
+)
 
-The server is normally constructed transparently by `@owlmeans/server-app#main()`. Use `server-api` directly only when you need to register raw Fastify plugins or customize transport:
+export const serverBindings = [
+  bind(projectProtocols.create, create),
+  bind(projectProtocols.get, get),
+  bind(projectProtocols.search, search),
+]
+```
+
+`body` and `params` are available only for a protocol declaring that section. `request` works for
+any protocol and receives all its typed sections plus request metadata. A successful callback
+return resolves the entrypoint with `EntrypointOutcome.Ok`; a thrown error rejects it.
+
+A body contract may be a scalar (`schema<string>({ type: 'string' })`, a number, a boolean): the
+server's JSON parser takes any JSON value, so `"abc"`, `42` or `false` reach the handler as that
+value. An unquoted string or an empty body under `application/json` is invalid JSON and answers
+400 before the handler runs — `@owlmeans/api` never sends either (it quotes a scalar body).
+`tests/json-body.spec.ts` runs it through `appendApiServer`.
+
+## Wrap exactly once
 
-```typescript
-import { makeServer } from '@owlmeans/server-api'
-const server = makeServer({ port: 8080 })
-context.registerService(server)
+A handler is wrapped by `handlers<Context>()` exactly once — either shape above (create the bound
+handler and bind it directly) is correct on its own. Never combine them: a handler module that
+already exports a bound handler must be bound directly, not wrapped again where it is bound.
+
+```ts
+// WRONG — bound once in the handler module, wrapped a second time here
+export const create = api.body(projectProtocols.create, async (body, context) => ...)
+bind(projectProtocols.create, api.body(projectProtocols.create, create))
 ```
 
-## Depends On
+`tsc` rejects the double wrap (`TS2345 "Argument of type 'BoundEntrypointHandler<…>' is not
+assignable"`). At runtime, `body`/`params`/`request` return an already-bound handler for the SAME
+protocol unchanged, with a one-time warning; anything else that is not a plain function fails only
+that one route with `HandlerMisconfiguredError`, instead of the opaque
+`TypeError: handler is not a function`.
+
+## The status a thrown error answers
+
+A thrown error (or a rejected response) is answered with a body chosen by the exposure (§ Error
+exposure) and a status from `errorStatus(error)` (`./utils`), resolved in this order:
+
+| Error | Status |
+|---|---|
+| `AuthForbidden`, `AccessError` or a subclass — by class or registered type name | 403 |
+| `AuthorizationError`, `AuthFailedError` or a subclass — by class or registered type name | 401 |
+| a class declaring `static httpStatus` as an integer 400–499, or 500–599 with `static allowServerErrorStatus = true` | that status |
+| anything else, including a 5xx declared without the opt-in | 500 |
+
+- **A refusal of the caller's condition declares its status; a fault declares nothing.** 400 a
+  malformed request, 402 an unpaid balance or plan, 404 an addressed target that does not exist
+  (or is another organization's), 409 a target whose current state conflicts, 422 content or a body
+  that is understood and refused — and a missing configuration, a broken peer, a timeout or a bug
+  stays 500, because monitoring, logs, proxies and retry logic read a 5xx as the server failing.
+  The table and the leaf-class rule are the `error` skill's.
+- The storage refusals of `@owlmeans/resource` declare theirs: `UnknownRecordError` answers 404,
+  `RecordExists` 409, every other `ResourceError` 500 — so a handler that lets a `get()` miss
+  escape answers 404, and one reading a row the request did not address uses `load` instead.
+- Declare it on the class: `public static httpStatus = 409` (`override` only when an ancestor
+  already declares one). The declaration is structural — the package declaring an error never
+  imports `@owlmeans/server-api` — and a static property is inherited, so a subclass answers its
+  nearest declaring ancestor's status and redeclares to change it.
+- The auth branches win over a declaration, in that order (`AuthForbidden extends
+  AuthorizationError`, so 403 is tested first). An entitlement or permission refusal extends
+  `AuthForbidden` rather than declaring 403.
+- `handleError` resolves the status on the error AS THROWN first, and asks the ENSURED
+  (`ResilientError.ensure`) error only when that answers 500. The thrown object is the one whose
+  class is certainly what was raised; the rebuild is what gives a status to a marshalled error that
+  crossed a hop as a plain `Error`. `ensure` returns an error from any `@owlmeans/error` copy
+  untouched, so a development body keeps the thrown class's `type` (`AuthFailedError|||api:auth:…`) even in a
+  process holding duplicate module copies (`bun --preserve-symlinks`). `executeResponse` ensures
+  nothing and answers the rejected error's status. `@owlmeans/server-socket` answers an upgrade
+  through the same `handleError`.
+- An auth family is recognised by `instanceof` OR by an exact registered type name — the instance's
+  `type` or any static `typeName` on its constructor chain — so a class from another module copy
+  answers the same status. Match whole names, never substrings: a subclass's `typeName` does not
+  reliably embed its parent's (`EntitlementRefusal` extends `AuthForbidden`). A declared
+  `httpStatus` is a structural static read and survives duplicate copies as it is.
+- **The status is what a production client can act on.** Only a development body is rebuilt into
+  its class; a production body is the incident id alone, so a client knows a refusal by its status
+  (§ Error exposure) — give a refusal the client must act on its own distinct 4xx. Nothing in the
+  framework treats a 404 specially — a missing route is a Fastify JSON body the client turns into
+  a 404 `ApiStatusError`.
+
+`uploadedFile(request)` is the Fastify multipart boundary. Keep raw Fastify access there rather
+than reaching through `request.original` in application code.
+
+## Logging
+
+The server logs through `@owlmeans/log`, not a second pino: Fastify gets a pino-shaped adapter as its
+`loggerInstance` (scope `http`) with its own request/response lines disabled. A request is one `debug`
+record from `onResponse` (method, path without the query, status, ms). A failed request is logged once,
+in `handleError`, by what it means: **5xx → `error`** (the error with its stack and the incident id),
+**403 → `warn`, `event: 'access.forbidden'`**, 401 → `debug`, `event: 'auth.refused'`, any other 4xx →
+`debug`. The level and format come from `cfg.log` (`/log`); access lines at info are
+`cfg.log.debug: 'http'`.
+
+## Error exposure
+
+An exact IAM `AuthForbidden` or `AccessError` refusal answers with
+`X-OwlMeans-Denial: access-denied`, exposed through CORS. Subclasses such as entitlement refusals
+do not get this marker. The marker survives production exposure so browser clients can present a
+permission message while keeping diagnostic bodies private.
+
+`handleError` always assigns an incident UUID, attaches it to the logged error and returns it in the
+`X-Incident-ID` response header (`INCIDENT_ID_HEADER` in `./utils`, the same name and value
+`@owlmeans/api` exports; exposed through CORS).
+
+- **Production (the default):** a non-2xx body carries ONLY that incident id, under the resolved
+  HTTP status. A typed refusal is never exposed — its class, message and packed fields stay in the
+  server log under the id.
+- **Development** (an explicit `cfg.http.errors.exposure = 'development'`): the typed marshalled
+  form with message and stack, which the client rebuilds into its class.
+- A client reads a production failure with `@owlmeans/api`'s `./status` subpath: `httpStatusOf(e)`
+  (the status a 428 or 409 is acted on by) and `incidentIdOf(e)` (the id a person reports). Keep
+  the default production-safe, and tell a client to report the incident id.
 
-- `@owlmeans/context`, `@owlmeans/entrypoint`, `@owlmeans/route`
-- `fastify` (runtime)
+Do not use unbound compatibility handler wrappers. For a WebSocket route use
+`@owlmeans/server-socket`'s `connection(protocol, callback)`.

package/build/consts.local.d.ts

@@ -0,0 +1,2 @@
+export declare const bodyLimit: number;
+//# sourceMappingURL=consts.local.d.ts.map

package/build/consts.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.d.ts","sourceRoot":"","sources":["../src/consts.local.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,QAAmB,CAAA"}

package/build/consts.local.js

@@ -0,0 +1,2 @@
+export const bodyLimit = 1024 * 1024 * 20;
+//# sourceMappingURL=consts.local.js.map

package/build/consts.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.js","sourceRoot":"","sources":["../src/consts.local.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,CAAA"}

package/build/errors.d.ts

@@ -11,4 +11,16 @@ export declare class NoFileError extends ApiError {
     static typeName: string;
     constructor();
 }
+/**
+ * `handlers().body/params/request` was handed something it cannot serve — not a plain callback,
+ * and not a `BoundEntrypointHandler` bound to the SAME protocol it is being wrapped for. Thrown
+ * from inside the bound handler's own request path, so the module still loads and every OTHER
+ * route on it still answers; only the misconfigured one reports why, as a 500 rather than the
+ * opaque `TypeError: handler is not a function` a double wrap used to fail with. See
+ * `handlers()` in `protocol.ts` for what does and does not reach here.
+ */
+export declare class HandlerMisconfiguredError extends ApiError {
+    static typeName: string;
+    constructor(message?: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/build/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAGxC,qBAAa,eAAgB,SAAQ,QAAQ;IAC3C,OAAuB,QAAQ,SAAoB;IAEnD,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF;AAED,qBAAa,WAAY,SAAQ,QAAQ;IACvC,OAAuB,QAAQ,SAAsC;IAErE,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF;AAED,qBAAa,WAAY,SAAQ,QAAQ;IACvC,OAAuB,QAAQ,SAAgB;IAE/C,cAGC;CACF"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAGxC,qBAAa,eAAgB,SAAQ,QAAQ;IAC3C,OAAuB,QAAQ,SAAoB;IAEnD,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF;AAED,qBAAa,WAAY,SAAQ,QAAQ;IACvC,OAAuB,QAAQ,SAAsC;IAErE,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF;AAED,qBAAa,WAAY,SAAQ,QAAQ;IACvC,OAAuB,QAAQ,SAAgB;IAE/C,cAGC;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,yBAA0B,SAAQ,QAAQ;IACrD,OAAuB,QAAQ,SAA8B;IAE7D,YAAY,OAAO,GAAE,MAAgB,EAGpC;CACF"}

package/build/errors.js

@@ -21,7 +21,23 @@ export class NoFileError extends ApiError {
         this.type = NoFileError.typeName;
     }
 }
+/**
+ * `handlers().body/params/request` was handed something it cannot serve — not a plain callback,
+ * and not a `BoundEntrypointHandler` bound to the SAME protocol it is being wrapped for. Thrown
+ * from inside the bound handler's own request path, so the module still loads and every OTHER
+ * route on it still answers; only the misconfigured one reports why, as a 500 rather than the
+ * opaque `TypeError: handler is not a function` a double wrap used to fail with. See
+ * `handlers()` in `protocol.ts` for what does and does not reach here.
+ */
+export class HandlerMisconfiguredError extends ApiError {
+    static typeName = 'HandlerMisconfiguredError';
+    constructor(message = 'error') {
+        super(`handler:misconfigured:${message}`);
+        this.type = HandlerMisconfiguredError.typeName;
+    }
+}
 ResilientError.registerErrorClass(AuthFailedError);
 ResilientError.registerErrorClass(AccessError);
 ResilientError.registerErrorClass(NoFileError);
+ResilientError.registerErrorClass(HandlerMisconfiguredError);
 //# sourceMappingURL=errors.js.map

package/build/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhD,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IACpC,MAAM,CAAU,QAAQ,GAAG,iBAAiB,CAAA;IAEnD,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAA;IACtC,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAChC,MAAM,CAAU,QAAQ,GAAG,SAAS,eAAe,CAAC,QAAQ,EAAE,CAAA;IAErE,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAA;IAClC,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAChC,MAAM,CAAU,QAAQ,GAAG,aAAa,CAAA;IAE/C;QACE,KAAK,CAAC,SAAS,CAAC,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAA;IAClC,CAAC;CACF;AAED,cAAc,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAA;AAClD,cAAc,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;AAC9C,cAAc,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhD,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IACpC,MAAM,CAAU,QAAQ,GAAG,iBAAiB,CAAA;IAEnD,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAA;IACtC,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAChC,MAAM,CAAU,QAAQ,GAAG,SAAS,eAAe,CAAC,QAAQ,EAAE,CAAA;IAErE,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAA;IAClC,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,QAAQ;IAChC,MAAM,CAAU,QAAQ,GAAG,aAAa,CAAA;IAE/C;QACE,KAAK,CAAC,SAAS,CAAC,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAA;IAClC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,yBAA0B,SAAQ,QAAQ;IAC9C,MAAM,CAAU,QAAQ,GAAG,2BAA2B,CAAA;IAE7D,YAAY,OAAO,GAAW,OAAO;QACnC,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAA;IAChD,CAAC;CACF;AAED,cAAc,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAA;AAClD,cAAc,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;AAC9C,cAAc,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;AAC9C,cAAc,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAA"}

package/build/helper.d.ts

@@ -1,13 +1,10 @@
-import type { BasicConfig, BasicContext } from '@owlmeans/context';
-import type { AbstractRequest, AbstractResponse } from '@owlmeans/entrypoint';
+import { type BasicConfig, type BasicContext } from '@owlmeans/context';
+import { type AbstractRequest, type AbstractResponse } from '@owlmeans/entrypoint';
 import type { RefedEntrypointHandler } from '@owlmeans/server-entrypoint';
-import type { Context } from './types.js';
-import type { MultipartFile } from '@fastify/multipart';
+import type { Context, UploadedFile } from './types.js';
 export declare const handleBody: <T>(handler: (payload: T, ctx: BasicContext<BasicConfig>, req: AbstractRequest) => Promise<any>) => RefedEntrypointHandler<AbstractResponse<any>>;
 export declare const handleParams: <T>(handler: (payload: T, ctx: BasicContext<BasicConfig>, req: AbstractRequest) => Promise<any>) => RefedEntrypointHandler<AbstractResponse<any>>;
 export declare const handleRequest: (handler: (payload: AbstractRequest, ctx: BasicContext<BasicConfig>, res?: AbstractResponse<any>) => Promise<any>) => RefedEntrypointHandler<AbstractResponse<any>>;
 export declare const handleIntermediate: (handler: (payload: AbstractRequest, ctx: BasicContext<BasicConfig>) => Promise<BasicContext<BasicConfig> | null>) => RefedEntrypointHandler<AbstractResponse<Context | null>>;
 export declare const extractUploadedFile: <T extends {} = {}>(req: AbstractRequest<T>) => Promise<UploadedFile | undefined>;
-export interface UploadedFile extends MultipartFile {
-}
 //# sourceMappingURL=helper.d.ts.map

package/build/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAGlE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAAU,OAAO,EAAE,MAAM,YAAY,CAAA;AAEjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAMvD,eAAO,MAAM,UAAU,EAAE,CAAC,CAAC,EACzB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,CAAC,KACxF,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAahD,CAAA;AAED,eAAO,MAAM,YAAY,EAAE,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,CAAC,KAExF,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAahD,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,CAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,KAC7G,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAWhD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,CAC/B,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAC7G,sBAAsB,CAAC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC,CAc3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAU,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,eAAe,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAItH,CAAA;AAED,MAAM,WAAW,YAAa,SAAQ,aAAa;CAAI"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAiB,MAAM,mBAAmB,CAAA;AACtF,OAAO,EAAqB,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACrG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAAU,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAgB/D,eAAO,MAAM,UAAU,EAAE,CAAC,CAAC,EACzB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,CAAC,KACxF,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAahD,CAAA;AAED,eAAO,MAAM,YAAY,EAAE,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,GAAG,CAAC,KAExF,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAahD,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,CAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,KAC7G,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAWhD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,CAC/B,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAC7G,sBAAsB,CAAC,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC,CAc3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAU,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,eAAe,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAItH,CAAA"}

package/build/helper.js

@@ -1,7 +1,16 @@
 import { assertContext } from '@owlmeans/context';
 import { EntrypointOutcome } from '@owlmeans/entrypoint';
+/**
+ * The context a handler runs against.
+ *
+ * The HTTP boundary hangs the request-scoped context on the raw Fastify request, so a handler
+ * reached that way gets it from there. A request that did not come from Fastify has no `original`
+ * at all — a queued call is rebuilt from an envelope, and a socket frame carries its own — so this
+ * has to fall back rather than dereference: these handlers are the same functions on every
+ * transport, and only the way they were reached differs.
+ */
 const _castContextFromOriginal = (req, def) => {
-    return req.original._ctx ?? def;
+    return req.original?._ctx ?? def;
 };
 export const handleBody = handler => ref => async (req, res) => {
     const ctx = assertContext(ref.ref?.ctx);

package/build/helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAOxD,MAAM,wBAAwB,GAAG,CAAqE,GAAoB,EAAE,GAAM,EAAK,EAAE;IACvI,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAA;AACjC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAE8B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,MAAM,OAAO,CACvB,GAAG,CAAC,IAAW,EACf,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,EAChF,GAAG,CACJ,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAG4B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,MAAM,OAAO,CACvB,GAAG,CAAC,MAAa,EACjB,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,EAChF,GAAG,CACJ,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAE2B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,MAAM,OAAO,CACvB,GAAG,EAAE,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,EAAE,GAAG,CAC3F,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAEiC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnG,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,GAAG,EAAE,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,CACtF,CAAA;QACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QAED,OAAO,GAAG,CAAC,KAAK,CAAA;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAqB,GAAuB,EAAqC,EAAE;IACzH,MAAM,OAAO,GAAG,GAAG,CAAC,QAA0B,CAAA;IAE9C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA"}
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AACA,OAAO,EAAuC,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAA+C,MAAM,sBAAsB,CAAA;AAKrG;;;;;;;;GAQG;AACH,MAAM,wBAAwB,GAAG,CAAqE,GAAoB,EAAE,GAAM,EAAK,EAAE;IACvI,OAAO,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAA;AAClC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAE8B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,MAAM,OAAO,CACvB,GAAG,CAAC,IAAW,EACf,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,EAChF,GAAG,CACJ,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAG4B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,MAAM,OAAO,CACvB,GAAG,CAAC,MAAa,EACjB,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,EAChF,GAAG,CACJ,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAE2B,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACxF,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,GAAG,CAAC,OAAO,CAAC,MAAM,OAAO,CACvB,GAAG,EAAE,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,EAAE,GAAG,CAC3F,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAEiC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnG,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAY,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,GAAG,EAAE,wBAAwB,CAAkB,GAAG,EAAE,GAAG,CAA8B,CACtF,CAAA;QACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QAED,OAAO,GAAG,CAAC,KAAK,CAAA;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,CAAU,CAAC,CAAA;IACxB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAqB,GAAuB,EAAqC,EAAE;IACzH,MAAM,OAAO,GAAG,GAAG,CAAC,QAA0B,CAAA;IAE9C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAA;AACvB,CAAC,CAAA"}