@powerhousedao/switchboard 6.0.0-dev.212 → 6.0.0-dev.214

package/CHANGELOG.md

@@ -1,3 +1,22 @@
+## 6.0.0-dev.214 (2026-05-05)
+
+### 🚀 Features
+
+- **switchboard:** env var to force a specific pg version when using pglite ([5cdd35ca1](https://github.com/powerhouse-inc/powerhouse/commit/5cdd35ca1))
+- **switchboard:** adding pglite migration flag ([952075b11](https://github.com/powerhouse-inc/powerhouse/commit/952075b11))
+
+### 🩹 Fixes
+
+- **reactor-api:** a number of hacks to get around the way vite works, and pre-empt sigterm and sigkill ([36bf0918c](https://github.com/powerhouse-inc/powerhouse/commit/36bf0918c))
+
+### ❤️ Thank You
+
+- Benjamin Jordan
+
+## 6.0.0-dev.213 (2026-05-04)
+
+This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
+
 ## 6.0.0-dev.212 (2026-05-03)
 
 This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.

package/dist/index.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as startSwitchboard } from "./server-8U7q7B7r.mjs";
+import { n as startSwitchboard, r as parseForcePgVersion } from "./server-DVr-c0CZ.mjs";
 import "./utils-DFl0ezBT.mjs";
 import * as Sentry from "@sentry/node";
 import { childLogger } from "document-model";
@@ -15,6 +15,8 @@ const config = {
 	database: { url: process.env.PH_SWITCHBOARD_DATABASE_URL ?? switchboard?.database?.url ?? "dev.db" },
 	port: process.env.PH_SWITCHBOARD_PORT && !isNaN(Number(process.env.PH_SWITCHBOARD_PORT)) ? Number(process.env.PH_SWITCHBOARD_PORT) : switchboard?.port ?? 4001,
 	mcp: true,
+	migratePglite: process.env.PH_MIGRATE_PGLITE === "true",
+	forcePgVersion: parseForcePgVersion(process.env.PH_FORCE_PG_VERSION),
 	drive: {
 		id: "powerhouse",
 		slug: "powerhouse",
@@ -119,8 +121,11 @@ if (process.env.PYROSCOPE_SERVER_ADDRESS) try {
 	Sentry.captureException(e);
 	logger.error("Error starting profiler: @error", e);
 }
+const cliMigratePglite = process.argv.slice(2).includes("--migrate-pglite");
 startSwitchboard({
 	...config,
+	migratePglite: cliMigratePglite || config.migratePglite,
+	forcePgVersion: config.forcePgVersion ?? void 0,
 	meterProvider
 }).catch(console.error);
 //#endregion

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["logger"],"sources":["../src/config.ts","../src/metrics.ts","../src/profiler.ts","../src/index.mts"],"sourcesContent":["import dotenv from \"dotenv\";\ndotenv.config();\n\nimport { getConfig } from \"@powerhousedao/config/node\";\nimport type { DriveInput } from \"@powerhousedao/shared/document-drive\";\nconst phConfig = getConfig();\nconst { switchboard } = phConfig;\ninterface Config {\n  database: {\n    url: string;\n  };\n  port: number;\n  mcp: boolean;\n  drive: DriveInput;\n}\nexport const config: Config = {\n  database: {\n    // url: process.env.PH_SWITCHBOARD_DATABASE_URL ?? switchboard?.database?.url ?? \"dev.db\",\n    url:\n      process.env.PH_SWITCHBOARD_DATABASE_URL ??\n      switchboard?.database?.url ??\n      \"dev.db\",\n  },\n  port:\n    process.env.PH_SWITCHBOARD_PORT &&\n    !isNaN(Number(process.env.PH_SWITCHBOARD_PORT))\n      ? Number(process.env.PH_SWITCHBOARD_PORT)\n      : (switchboard?.port ?? 4001),\n  mcp: true,\n  drive: {\n    id: \"powerhouse\",\n    slug: \"powerhouse\",\n    global: {\n      name: \"Powerhouse\",\n      icon: \"https://ipfs.io/ipfs/QmcaTDBYn8X2psGaXe7iQ6qd8q6oqHLgxvMX9yXf7f9uP7\",\n    },\n    local: {\n      availableOffline: true,\n      listeners: [],\n      sharingType: \"public\",\n      triggers: [],\n    },\n  },\n};\n","import { OTLPMetricExporter } from \"@opentelemetry/exporter-metrics-otlp-http\";\nimport { Resource } from \"@opentelemetry/resources\";\nimport {\n  MeterProvider,\n  PeriodicExportingMetricReader,\n} from \"@opentelemetry/sdk-metrics\";\nimport { childLogger } from \"document-model\";\n\nconst logger = childLogger([\"switchboard\", \"metrics\"]);\n\nexport function createMeterProviderFromEnv(env: {\n  OTEL_EXPORTER_OTLP_ENDPOINT?: string;\n  OTEL_METRIC_EXPORT_INTERVAL?: string;\n  OTEL_SERVICE_NAME?: string;\n}): MeterProvider | undefined {\n  const endpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT;\n  if (!endpoint) return undefined;\n\n  const parsed = parseInt(env.OTEL_METRIC_EXPORT_INTERVAL ?? \"\", 10);\n  const exportIntervalMillis =\n    Number.isFinite(parsed) && parsed > 0 ? parsed : 5_000;\n\n  const base = endpoint.replace(/\\/$/, \"\");\n  const exporterUrl = base.endsWith(\"/v1/metrics\")\n    ? base\n    : `${base}/v1/metrics`;\n\n  logger.info(`Initializing OpenTelemetry metrics exporter at: ${endpoint}`);\n  const meterProvider = new MeterProvider({\n    resource: new Resource({\n      \"service.name\": env.OTEL_SERVICE_NAME ?? \"switchboard\",\n    }),\n    readers: [\n      new PeriodicExportingMetricReader({\n        exporter: new OTLPMetricExporter({\n          url: exporterUrl,\n        }),\n        exportIntervalMillis,\n        exportTimeoutMillis: Math.max(exportIntervalMillis - 250, 1),\n      }),\n    ],\n  });\n  logger.info(`Metrics export enabled (interval: ${exportIntervalMillis}ms)`);\n  return meterProvider;\n}\n","import type { PyroscopeConfig } from \"@pyroscope/nodejs\";\n\nexport async function initProfilerFromEnv(env: typeof process.env) {\n  const {\n    PYROSCOPE_SERVER_ADDRESS: serverAddress,\n    PYROSCOPE_APPLICATION_NAME: appName,\n    PYROSCOPE_USER: basicAuthUser,\n    PYROSCOPE_PASSWORD: basicAuthPassword,\n    PYROSCOPE_WALL_ENABLED: wallEnabled,\n    PYROSCOPE_HEAP_ENABLED: heapEnabled,\n  } = env;\n\n  const options: PyroscopeConfig = {\n    serverAddress,\n    appName,\n    basicAuthUser,\n    basicAuthPassword,\n    // Wall profiling captures wall-clock time (includes async I/O waits)\n    // This shows GraphQL resolvers even when waiting for database\n    wall: {\n      samplingDurationMs: 10000, // 10 second sampling windows\n      samplingIntervalMicros: 10000, // 10ms sampling interval (100 samples/sec)\n      collectCpuTime: true, // Also collect CPU time alongside wall time\n    },\n    // Heap profiling for memory allocation tracking\n    heap: {\n      samplingIntervalBytes: 512 * 1024, // Sample every 512KB allocated\n      stackDepth: 64, // Capture deeper stacks for better context\n    },\n  };\n  return initProfiler(options, {\n    wallEnabled: wallEnabled !== \"false\",\n    heapEnabled: heapEnabled === \"true\",\n  });\n}\n\ninterface ProfilerFlags {\n  wallEnabled?: boolean;\n  heapEnabled?: boolean;\n}\n\nexport async function initProfiler(\n  options?: PyroscopeConfig,\n  flags: ProfilerFlags = { wallEnabled: true, heapEnabled: false },\n) {\n  console.log(\"Initializing Pyroscope profiler at:\", options?.serverAddress);\n  console.log(\"  Wall profiling:\", flags.wallEnabled ? \"enabled\" : \"disabled\");\n  console.log(\"  Heap profiling:\", flags.heapEnabled ? \"enabled\" : \"disabled\");\n\n  const { default: Pyroscope } = await import(\"@pyroscope/nodejs\");\n  Pyroscope.init(options);\n\n  // Start wall profiling (captures async I/O time - shows resolvers)\n  if (flags.wallEnabled) {\n    Pyroscope.startWallProfiling();\n  }\n\n  // Start CPU profiling (captures CPU-bound work)\n  Pyroscope.startCpuProfiling();\n\n  // Optionally start heap profiling (memory allocations)\n  if (flags.heapEnabled) {\n    Pyroscope.startHeapProfiling();\n  }\n}\n","#!/usr/bin/env node\nimport * as Sentry from \"@sentry/node\";\nimport { childLogger } from \"document-model\";\nimport { config } from \"./config.js\";\nimport { createMeterProviderFromEnv } from \"./metrics.js\";\nimport { initProfilerFromEnv } from \"./profiler.js\";\nimport { startSwitchboard } from \"./server.mjs\";\n\nconst logger = childLogger([\"switchboard\"]);\n\nfunction ensureNodeVersion(minVersion = \"24\") {\n  const version = process.versions.node;\n  if (!version) {\n    return;\n  }\n\n  if (version < minVersion) {\n    console.error(\n      `Node version ${minVersion} or higher is required. Current version: ${version}`,\n    );\n    process.exit(1);\n  }\n}\n// Ensure minimum Node.js version\nensureNodeVersion(\"24\");\n\n// Each subgraph registers its own SIGINT/SIGTERM listeners, and the count\n// scales with dynamically-loaded document models beyond the default cap of 10.\nprocess.setMaxListeners(0);\n\nconst meterProvider = createMeterProviderFromEnv({\n  OTEL_EXPORTER_OTLP_ENDPOINT: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,\n  OTEL_METRIC_EXPORT_INTERVAL: process.env.OTEL_METRIC_EXPORT_INTERVAL,\n  OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME,\n});\n\nasync function shutdown() {\n  console.log(\"\\nShutting down...\");\n  // Flush final metrics before exit. Races against a 5s deadline so an\n  // unresponsive OTLP endpoint cannot exhaust terminationGracePeriodSeconds.\n  await Promise.race([\n    meterProvider?.shutdown().catch(() => undefined),\n    new Promise<void>((resolve) => setTimeout(resolve, 5_000)),\n  ]);\n  process.exit(0);\n}\n\n// SIGINT: Ctrl-C in development; SIGTERM: graceful shutdown in Docker/Kubernetes\nprocess.on(\"SIGINT\", shutdown);\nprocess.on(\"SIGTERM\", shutdown);\n\nif (process.env.PYROSCOPE_SERVER_ADDRESS) {\n  try {\n    await initProfilerFromEnv(process.env);\n  } catch (e) {\n    Sentry.captureException(e);\n    logger.error(\"Error starting profiler: @error\", e);\n  }\n}\n\nstartSwitchboard({ ...config, meterProvider }).catch(console.error);\n"],"mappings":";;;;;;;;;;;AACA,OAAO,QAAQ;AAKf,MAAM,EAAE,gBADS,WAAW;AAU5B,MAAa,SAAiB;CAC5B,UAAU,EAER,KACE,QAAQ,IAAI,+BACZ,aAAa,UAAU,OACvB,UACH;CACD,MACE,QAAQ,IAAI,uBACZ,CAAC,MAAM,OAAO,QAAQ,IAAI,oBAAoB,CAAC,GAC3C,OAAO,QAAQ,IAAI,oBAAoB,GACtC,aAAa,QAAQ;CAC5B,KAAK;CACL,OAAO;EACL,IAAI;EACJ,MAAM;EACN,QAAQ;GACN,MAAM;GACN,MAAM;GACP;EACD,OAAO;GACL,kBAAkB;GAClB,WAAW,EAAE;GACb,aAAa;GACb,UAAU,EAAE;GACb;EACF;CACF;;;ACnCD,MAAMA,WAAS,YAAY,CAAC,eAAe,UAAU,CAAC;AAEtD,SAAgB,2BAA2B,KAIb;CAC5B,MAAM,WAAW,IAAI;AACrB,KAAI,CAAC,SAAU,QAAO,KAAA;CAEtB,MAAM,SAAS,SAAS,IAAI,+BAA+B,IAAI,GAAG;CAClE,MAAM,uBACJ,OAAO,SAAS,OAAO,IAAI,SAAS,IAAI,SAAS;CAEnD,MAAM,OAAO,SAAS,QAAQ,OAAO,GAAG;CACxC,MAAM,cAAc,KAAK,SAAS,cAAc,GAC5C,OACA,GAAG,KAAK;AAEZ,UAAO,KAAK,mDAAmD,WAAW;CAC1E,MAAM,gBAAgB,IAAI,cAAc;EACtC,UAAU,IAAI,SAAS,EACrB,gBAAgB,IAAI,qBAAqB,eAC1C,CAAC;EACF,SAAS,CACP,IAAI,8BAA8B;GAChC,UAAU,IAAI,mBAAmB,EAC/B,KAAK,aACN,CAAC;GACF;GACA,qBAAqB,KAAK,IAAI,uBAAuB,KAAK,EAAE;GAC7D,CAAC,CACH;EACF,CAAC;AACF,UAAO,KAAK,qCAAqC,qBAAqB,KAAK;AAC3E,QAAO;;;;ACzCT,eAAsB,oBAAoB,KAAyB;CACjE,MAAM,EACJ,0BAA0B,eAC1B,4BAA4B,SAC5B,gBAAgB,eAChB,oBAAoB,mBACpB,wBAAwB,aACxB,wBAAwB,gBACtB;AAoBJ,QAAO,aAlB0B;EAC/B;EACA;EACA;EACA;EAGA,MAAM;GACJ,oBAAoB;GACpB,wBAAwB;GACxB,gBAAgB;GACjB;EAED,MAAM;GACJ,uBAAuB,MAAM;GAC7B,YAAY;GACb;EACF,EAC4B;EAC3B,aAAa,gBAAgB;EAC7B,aAAa,gBAAgB;EAC9B,CAAC;;AAQJ,eAAsB,aACpB,SACA,QAAuB;CAAE,aAAa;CAAM,aAAa;CAAO,EAChE;AACA,SAAQ,IAAI,uCAAuC,SAAS,cAAc;AAC1E,SAAQ,IAAI,qBAAqB,MAAM,cAAc,YAAY,WAAW;AAC5E,SAAQ,IAAI,qBAAqB,MAAM,cAAc,YAAY,WAAW;CAE5E,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO;AAC5C,WAAU,KAAK,QAAQ;AAGvB,KAAI,MAAM,YACR,WAAU,oBAAoB;AAIhC,WAAU,mBAAmB;AAG7B,KAAI,MAAM,YACR,WAAU,oBAAoB;;;;ACtDlC,MAAM,SAAS,YAAY,CAAC,cAAc,CAAC;AAE3C,SAAS,kBAAkB,aAAa,MAAM;CAC5C,MAAM,UAAU,QAAQ,SAAS;AACjC,KAAI,CAAC,QACH;AAGF,KAAI,UAAU,YAAY;AACxB,UAAQ,MACN,gBAAgB,WAAW,2CAA2C,UACvE;AACD,UAAQ,KAAK,EAAE;;;AAInB,kBAAkB,KAAK;AAIvB,QAAQ,gBAAgB,EAAE;AAE1B,MAAM,gBAAgB,2BAA2B;CAC/C,6BAA6B,QAAQ,IAAI;CACzC,6BAA6B,QAAQ,IAAI;CACzC,mBAAmB,QAAQ,IAAI;CAChC,CAAC;AAEF,eAAe,WAAW;AACxB,SAAQ,IAAI,qBAAqB;AAGjC,OAAM,QAAQ,KAAK,CACjB,eAAe,UAAU,CAAC,YAAY,KAAA,EAAU,EAChD,IAAI,SAAe,YAAY,WAAW,SAAS,IAAM,CAAC,CAC3D,CAAC;AACF,SAAQ,KAAK,EAAE;;AAIjB,QAAQ,GAAG,UAAU,SAAS;AAC9B,QAAQ,GAAG,WAAW,SAAS;AAE/B,IAAI,QAAQ,IAAI,yBACd,KAAI;AACF,OAAM,oBAAoB,QAAQ,IAAI;SAC/B,GAAG;AACV,QAAO,iBAAiB,EAAE;AAC1B,QAAO,MAAM,mCAAmC,EAAE;;AAItD,iBAAiB;CAAE,GAAG;CAAQ;CAAe,CAAC,CAAC,MAAM,QAAQ,MAAM"}
+{"version":3,"file":"index.mjs","names":["logger"],"sources":["../src/config.ts","../src/metrics.ts","../src/profiler.ts","../src/index.mts"],"sourcesContent":["import dotenv from \"dotenv\";\ndotenv.config();\n\nimport { getConfig } from \"@powerhousedao/config/node\";\nimport type { DriveInput } from \"@powerhousedao/shared/document-drive\";\nimport { parseForcePgVersion } from \"./pglite-version.js\";\nconst phConfig = getConfig();\nconst { switchboard } = phConfig;\ninterface Config {\n  database: {\n    url: string;\n  };\n  port: number;\n  mcp: boolean;\n  migratePglite: boolean;\n  forcePgVersion: 16 | 17 | null;\n  drive: DriveInput;\n}\nexport const config: Config = {\n  database: {\n    // url: process.env.PH_SWITCHBOARD_DATABASE_URL ?? switchboard?.database?.url ?? \"dev.db\",\n    url:\n      process.env.PH_SWITCHBOARD_DATABASE_URL ??\n      switchboard?.database?.url ??\n      \"dev.db\",\n  },\n  port:\n    process.env.PH_SWITCHBOARD_PORT &&\n    !isNaN(Number(process.env.PH_SWITCHBOARD_PORT))\n      ? Number(process.env.PH_SWITCHBOARD_PORT)\n      : (switchboard?.port ?? 4001),\n  mcp: true,\n  migratePglite: process.env.PH_MIGRATE_PGLITE === \"true\",\n  forcePgVersion: parseForcePgVersion(process.env.PH_FORCE_PG_VERSION),\n  drive: {\n    id: \"powerhouse\",\n    slug: \"powerhouse\",\n    global: {\n      name: \"Powerhouse\",\n      icon: \"https://ipfs.io/ipfs/QmcaTDBYn8X2psGaXe7iQ6qd8q6oqHLgxvMX9yXf7f9uP7\",\n    },\n    local: {\n      availableOffline: true,\n      listeners: [],\n      sharingType: \"public\",\n      triggers: [],\n    },\n  },\n};\n","import { OTLPMetricExporter } from \"@opentelemetry/exporter-metrics-otlp-http\";\nimport { Resource } from \"@opentelemetry/resources\";\nimport {\n  MeterProvider,\n  PeriodicExportingMetricReader,\n} from \"@opentelemetry/sdk-metrics\";\nimport { childLogger } from \"document-model\";\n\nconst logger = childLogger([\"switchboard\", \"metrics\"]);\n\nexport function createMeterProviderFromEnv(env: {\n  OTEL_EXPORTER_OTLP_ENDPOINT?: string;\n  OTEL_METRIC_EXPORT_INTERVAL?: string;\n  OTEL_SERVICE_NAME?: string;\n}): MeterProvider | undefined {\n  const endpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT;\n  if (!endpoint) return undefined;\n\n  const parsed = parseInt(env.OTEL_METRIC_EXPORT_INTERVAL ?? \"\", 10);\n  const exportIntervalMillis =\n    Number.isFinite(parsed) && parsed > 0 ? parsed : 5_000;\n\n  const base = endpoint.replace(/\\/$/, \"\");\n  const exporterUrl = base.endsWith(\"/v1/metrics\")\n    ? base\n    : `${base}/v1/metrics`;\n\n  logger.info(`Initializing OpenTelemetry metrics exporter at: ${endpoint}`);\n  const meterProvider = new MeterProvider({\n    resource: new Resource({\n      \"service.name\": env.OTEL_SERVICE_NAME ?? \"switchboard\",\n    }),\n    readers: [\n      new PeriodicExportingMetricReader({\n        exporter: new OTLPMetricExporter({\n          url: exporterUrl,\n        }),\n        exportIntervalMillis,\n        exportTimeoutMillis: Math.max(exportIntervalMillis - 250, 1),\n      }),\n    ],\n  });\n  logger.info(`Metrics export enabled (interval: ${exportIntervalMillis}ms)`);\n  return meterProvider;\n}\n","import type { PyroscopeConfig } from \"@pyroscope/nodejs\";\n\nexport async function initProfilerFromEnv(env: typeof process.env) {\n  const {\n    PYROSCOPE_SERVER_ADDRESS: serverAddress,\n    PYROSCOPE_APPLICATION_NAME: appName,\n    PYROSCOPE_USER: basicAuthUser,\n    PYROSCOPE_PASSWORD: basicAuthPassword,\n    PYROSCOPE_WALL_ENABLED: wallEnabled,\n    PYROSCOPE_HEAP_ENABLED: heapEnabled,\n  } = env;\n\n  const options: PyroscopeConfig = {\n    serverAddress,\n    appName,\n    basicAuthUser,\n    basicAuthPassword,\n    // Wall profiling captures wall-clock time (includes async I/O waits)\n    // This shows GraphQL resolvers even when waiting for database\n    wall: {\n      samplingDurationMs: 10000, // 10 second sampling windows\n      samplingIntervalMicros: 10000, // 10ms sampling interval (100 samples/sec)\n      collectCpuTime: true, // Also collect CPU time alongside wall time\n    },\n    // Heap profiling for memory allocation tracking\n    heap: {\n      samplingIntervalBytes: 512 * 1024, // Sample every 512KB allocated\n      stackDepth: 64, // Capture deeper stacks for better context\n    },\n  };\n  return initProfiler(options, {\n    wallEnabled: wallEnabled !== \"false\",\n    heapEnabled: heapEnabled === \"true\",\n  });\n}\n\ninterface ProfilerFlags {\n  wallEnabled?: boolean;\n  heapEnabled?: boolean;\n}\n\nexport async function initProfiler(\n  options?: PyroscopeConfig,\n  flags: ProfilerFlags = { wallEnabled: true, heapEnabled: false },\n) {\n  console.log(\"Initializing Pyroscope profiler at:\", options?.serverAddress);\n  console.log(\"  Wall profiling:\", flags.wallEnabled ? \"enabled\" : \"disabled\");\n  console.log(\"  Heap profiling:\", flags.heapEnabled ? \"enabled\" : \"disabled\");\n\n  const { default: Pyroscope } = await import(\"@pyroscope/nodejs\");\n  Pyroscope.init(options);\n\n  // Start wall profiling (captures async I/O time - shows resolvers)\n  if (flags.wallEnabled) {\n    Pyroscope.startWallProfiling();\n  }\n\n  // Start CPU profiling (captures CPU-bound work)\n  Pyroscope.startCpuProfiling();\n\n  // Optionally start heap profiling (memory allocations)\n  if (flags.heapEnabled) {\n    Pyroscope.startHeapProfiling();\n  }\n}\n","#!/usr/bin/env node\nimport * as Sentry from \"@sentry/node\";\nimport { childLogger } from \"document-model\";\nimport { config } from \"./config.js\";\nimport { createMeterProviderFromEnv } from \"./metrics.js\";\nimport { initProfilerFromEnv } from \"./profiler.js\";\nimport { startSwitchboard } from \"./server.mjs\";\n\nconst logger = childLogger([\"switchboard\"]);\n\nfunction ensureNodeVersion(minVersion = \"24\") {\n  const version = process.versions.node;\n  if (!version) {\n    return;\n  }\n\n  if (version < minVersion) {\n    console.error(\n      `Node version ${minVersion} or higher is required. Current version: ${version}`,\n    );\n    process.exit(1);\n  }\n}\n// Ensure minimum Node.js version\nensureNodeVersion(\"24\");\n\n// Each subgraph registers its own SIGINT/SIGTERM listeners, and the count\n// scales with dynamically-loaded document models beyond the default cap of 10.\nprocess.setMaxListeners(0);\n\nconst meterProvider = createMeterProviderFromEnv({\n  OTEL_EXPORTER_OTLP_ENDPOINT: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,\n  OTEL_METRIC_EXPORT_INTERVAL: process.env.OTEL_METRIC_EXPORT_INTERVAL,\n  OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME,\n});\n\nasync function shutdown() {\n  console.log(\"\\nShutting down...\");\n  // Flush final metrics before exit. Races against a 5s deadline so an\n  // unresponsive OTLP endpoint cannot exhaust terminationGracePeriodSeconds.\n  await Promise.race([\n    meterProvider?.shutdown().catch(() => undefined),\n    new Promise<void>((resolve) => setTimeout(resolve, 5_000)),\n  ]);\n  process.exit(0);\n}\n\n// SIGINT: Ctrl-C in development; SIGTERM: graceful shutdown in Docker/Kubernetes\nprocess.on(\"SIGINT\", shutdown);\nprocess.on(\"SIGTERM\", shutdown);\n\nif (process.env.PYROSCOPE_SERVER_ADDRESS) {\n  try {\n    await initProfilerFromEnv(process.env);\n  } catch (e) {\n    Sentry.captureException(e);\n    logger.error(\"Error starting profiler: @error\", e);\n  }\n}\n\nconst cliMigratePglite = process.argv.slice(2).includes(\"--migrate-pglite\");\n\nstartSwitchboard({\n  ...config,\n  migratePglite: cliMigratePglite || config.migratePglite,\n  forcePgVersion: config.forcePgVersion ?? undefined,\n  meterProvider,\n}).catch(console.error);\n"],"mappings":";;;;;;;;;;;AACA,OAAO,QAAQ;AAMf,MAAM,EAAE,gBADS,WAAW;AAY5B,MAAa,SAAiB;CAC5B,UAAU,EAER,KACE,QAAQ,IAAI,+BACZ,aAAa,UAAU,OACvB,UACH;CACD,MACE,QAAQ,IAAI,uBACZ,CAAC,MAAM,OAAO,QAAQ,IAAI,oBAAoB,CAAC,GAC3C,OAAO,QAAQ,IAAI,oBAAoB,GACtC,aAAa,QAAQ;CAC5B,KAAK;CACL,eAAe,QAAQ,IAAI,sBAAsB;CACjD,gBAAgB,oBAAoB,QAAQ,IAAI,oBAAoB;CACpE,OAAO;EACL,IAAI;EACJ,MAAM;EACN,QAAQ;GACN,MAAM;GACN,MAAM;GACP;EACD,OAAO;GACL,kBAAkB;GAClB,WAAW,EAAE;GACb,aAAa;GACb,UAAU,EAAE;GACb;EACF;CACF;;;ACxCD,MAAMA,WAAS,YAAY,CAAC,eAAe,UAAU,CAAC;AAEtD,SAAgB,2BAA2B,KAIb;CAC5B,MAAM,WAAW,IAAI;AACrB,KAAI,CAAC,SAAU,QAAO,KAAA;CAEtB,MAAM,SAAS,SAAS,IAAI,+BAA+B,IAAI,GAAG;CAClE,MAAM,uBACJ,OAAO,SAAS,OAAO,IAAI,SAAS,IAAI,SAAS;CAEnD,MAAM,OAAO,SAAS,QAAQ,OAAO,GAAG;CACxC,MAAM,cAAc,KAAK,SAAS,cAAc,GAC5C,OACA,GAAG,KAAK;AAEZ,UAAO,KAAK,mDAAmD,WAAW;CAC1E,MAAM,gBAAgB,IAAI,cAAc;EACtC,UAAU,IAAI,SAAS,EACrB,gBAAgB,IAAI,qBAAqB,eAC1C,CAAC;EACF,SAAS,CACP,IAAI,8BAA8B;GAChC,UAAU,IAAI,mBAAmB,EAC/B,KAAK,aACN,CAAC;GACF;GACA,qBAAqB,KAAK,IAAI,uBAAuB,KAAK,EAAE;GAC7D,CAAC,CACH;EACF,CAAC;AACF,UAAO,KAAK,qCAAqC,qBAAqB,KAAK;AAC3E,QAAO;;;;ACzCT,eAAsB,oBAAoB,KAAyB;CACjE,MAAM,EACJ,0BAA0B,eAC1B,4BAA4B,SAC5B,gBAAgB,eAChB,oBAAoB,mBACpB,wBAAwB,aACxB,wBAAwB,gBACtB;AAoBJ,QAAO,aAlB0B;EAC/B;EACA;EACA;EACA;EAGA,MAAM;GACJ,oBAAoB;GACpB,wBAAwB;GACxB,gBAAgB;GACjB;EAED,MAAM;GACJ,uBAAuB,MAAM;GAC7B,YAAY;GACb;EACF,EAC4B;EAC3B,aAAa,gBAAgB;EAC7B,aAAa,gBAAgB;EAC9B,CAAC;;AAQJ,eAAsB,aACpB,SACA,QAAuB;CAAE,aAAa;CAAM,aAAa;CAAO,EAChE;AACA,SAAQ,IAAI,uCAAuC,SAAS,cAAc;AAC1E,SAAQ,IAAI,qBAAqB,MAAM,cAAc,YAAY,WAAW;AAC5E,SAAQ,IAAI,qBAAqB,MAAM,cAAc,YAAY,WAAW;CAE5E,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO;AAC5C,WAAU,KAAK,QAAQ;AAGvB,KAAI,MAAM,YACR,WAAU,oBAAoB;AAIhC,WAAU,mBAAmB;AAG7B,KAAI,MAAM,YACR,WAAU,oBAAoB;;;;ACtDlC,MAAM,SAAS,YAAY,CAAC,cAAc,CAAC;AAE3C,SAAS,kBAAkB,aAAa,MAAM;CAC5C,MAAM,UAAU,QAAQ,SAAS;AACjC,KAAI,CAAC,QACH;AAGF,KAAI,UAAU,YAAY;AACxB,UAAQ,MACN,gBAAgB,WAAW,2CAA2C,UACvE;AACD,UAAQ,KAAK,EAAE;;;AAInB,kBAAkB,KAAK;AAIvB,QAAQ,gBAAgB,EAAE;AAE1B,MAAM,gBAAgB,2BAA2B;CAC/C,6BAA6B,QAAQ,IAAI;CACzC,6BAA6B,QAAQ,IAAI;CACzC,mBAAmB,QAAQ,IAAI;CAChC,CAAC;AAEF,eAAe,WAAW;AACxB,SAAQ,IAAI,qBAAqB;AAGjC,OAAM,QAAQ,KAAK,CACjB,eAAe,UAAU,CAAC,YAAY,KAAA,EAAU,EAChD,IAAI,SAAe,YAAY,WAAW,SAAS,IAAM,CAAC,CAC3D,CAAC;AACF,SAAQ,KAAK,EAAE;;AAIjB,QAAQ,GAAG,UAAU,SAAS;AAC9B,QAAQ,GAAG,WAAW,SAAS;AAE/B,IAAI,QAAQ,IAAI,yBACd,KAAI;AACF,OAAM,oBAAoB,QAAQ,IAAI;SAC/B,GAAG;AACV,QAAO,iBAAiB,EAAE;AAC1B,QAAO,MAAM,mCAAmC,EAAE;;AAItD,MAAM,mBAAmB,QAAQ,KAAK,MAAM,EAAE,CAAC,SAAS,mBAAmB;AAE3E,iBAAiB;CACf,GAAG;CACH,eAAe,oBAAoB,OAAO;CAC1C,gBAAgB,OAAO,kBAAkB,KAAA;CACzC;CACD,CAAC,CAAC,MAAM,QAAQ,MAAM"}

package/dist/{server-8U7q7B7r.mjs → server-DVr-c0CZ.mjs}

@@ -4,7 +4,8 @@ import * as Sentry from "@sentry/node";
 import { childLogger, documentModelDocumentModelModule, setLogLevel } from "document-model";
 import dotenv from "dotenv";
 import { getConfig } from "@powerhousedao/config/node";
-import { PGlite } from "@electric-sql/pglite";
+import { promises } from "node:fs";
+import path from "node:path";
 import { metrics } from "@opentelemetry/api";
 import { ReactorInstrumentation } from "@powerhousedao/opentelemetry-instrumentation-reactor";
 import { ChannelScheme, EventBus, ReactorBuilder, ReactorClientBuilder, driveCollectionId, parseDriveUrl } from "@powerhousedao/reactor";
@@ -17,13 +18,67 @@ import { processorFactory } from "@powerhousedao/vetra/processors";
 import { Kysely, PostgresDialect } from "kysely";
 import { PGliteDialect } from "kysely-pglite-dialect";
 import net from "node:net";
-import path from "path";
+import path$1 from "path";
 import { Pool } from "pg";
 import { AttachmentNotFound, InvalidAttachmentRef, ReservationNotFound } from "@powerhousedao/reactor-attachments";
 import { Readable } from "node:stream";
 import { EnvVarProvider } from "@openfeature/env-var-provider";
 import { OpenFeature } from "@openfeature/server-sdk";
 import { DEFAULT_RENOWN_URL, NodeKeyStorage, RenownBuilder, RenownCryptoBuilder, createSignatureVerifier } from "@renown/sdk/node";
+//#region src/pglite-version.ts
+const SUPPORTED_PG_MAJORS = [16, 17];
+async function readPgVersionFile(dataDir) {
+	try {
+		const raw = await promises.readFile(path.join(dataDir, "PG_VERSION"), "utf8");
+		const major = parseInt(raw.trim(), 10);
+		return Number.isFinite(major) ? major : null;
+	} catch {
+		return null;
+	}
+}
+function isSupportedMajor(major) {
+	return SUPPORTED_PG_MAJORS.includes(major);
+}
+/**
+* Parses the `PH_FORCE_PG_VERSION` env var. Returns the validated major, or
+* `null` when the var is unset/empty. Throws on any value that is not a
+* supported major — invalid configuration must fail before the server starts
+* touching disk.
+*/
+function parseForcePgVersion(raw) {
+	if (raw === void 0 || raw.trim() === "") return null;
+	const parsed = Number(raw);
+	if (Number.isInteger(parsed) && isSupportedMajor(parsed)) return parsed;
+	throw new Error(`PH_FORCE_PG_VERSION must be one of: ${SUPPORTED_PG_MAJORS.join(", ")} (got: ${raw})`);
+}
+async function loadPGliteModule(major) {
+	if (major === 16) return await import("pglite-legacy-02");
+	return import("@electric-sql/pglite");
+}
+async function loadPgDump(major) {
+	if (major === 16) return (await import("pglite-tools-legacy-02/pg_dump")).pgDump;
+	return (await import("@electric-sql/pglite-tools/pg_dump")).pgDump;
+}
+//#endregion
+//#region src/pglite-dialect.ts
+var ClosablePGliteDialect = class extends PGliteDialect {
+	#pglite;
+	constructor(pglite) {
+		super(pglite);
+		this.#pglite = pglite;
+	}
+	createDriver() {
+		const driver = super.createDriver();
+		const pglite = this.#pglite;
+		const innerDestroy = driver.destroy.bind(driver);
+		driver.destroy = async () => {
+			await innerDestroy();
+			if (!pglite.closed) await pglite.close();
+		};
+		return driver;
+	}
+};
+//#endregion
 //#region src/attachments/auth.ts
 /**
 * Wrap a Node-style handler so that, when `authService` is provided and auth is
@@ -230,6 +285,105 @@ async function initFeatureFlags() {
 	return OpenFeature.getClient();
 }
 //#endregion
+//#region src/pglite-migration.ts
+function backupPath(dataDir, major) {
+	return `${dataDir}.backup-pg${major}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
+}
+async function pathExists(p) {
+	try {
+		await promises.stat(p);
+		return true;
+	} catch {
+		return false;
+	}
+}
+function logRestoreFailure(dataDir, sql, err, logger) {
+	const errObj = err;
+	const position = typeof errObj.position === "string" ? parseInt(errObj.position, 10) : typeof errObj.position === "number" ? errObj.position : NaN;
+	logger.error(`[pglite-migration] Restore failed for ${dataDir}: code=${errObj.code ?? ""} severity=${errObj.severity ?? ""} message=${errObj.message ?? ""} sqlLength=${sql.length}`);
+	if (Number.isFinite(position) && position > 0) {
+		const zeroBased = position - 1;
+		const start = Math.max(0, zeroBased - 200);
+		const end = Math.min(sql.length, zeroBased + 200);
+		const before = sql.slice(start, zeroBased);
+		const at = sql.slice(zeroBased, zeroBased + 1);
+		const after = sql.slice(zeroBased + 1, end);
+		logger.error(`[pglite-migration] SQL context around position ${position}:\n${before}»${at}«${after}`);
+	} else logger.error(`[pglite-migration] No position info. First 2000 chars of dump:\n${sql.slice(0, 2e3)}`);
+}
+/**
+* Migrate a filesystem PGLite data directory from a legacy PG major to the
+* current one. Renames the existing dir to a timestamped backup, dumps via the
+* matching legacy `pg_dump`, restores into a fresh current-version PGLite at
+* the original path. On failure, the original dir is restored from the backup.
+*
+* No-op when the dir is missing or already at the current major.
+*/
+async function migratePgliteDir(dataDir, logger) {
+	const major = await readPgVersionFile(dataDir);
+	if (major === null) {
+		logger.info(`[pglite-migration] No PG_VERSION at ${dataDir}; skipping migration`);
+		return;
+	}
+	if (major === 17) return;
+	if (!isSupportedMajor(major)) throw new Error(`Unsupported legacy PGlite data dir: PG_VERSION=${major} for ${dataDir}`);
+	const backupDir = backupPath(dataDir, major);
+	logger.info(`[pglite-migration] Migrating ${dataDir} from PG${major} to PG17; backup: ${backupDir}`);
+	await promises.rename(dataDir, backupDir);
+	let sql;
+	try {
+		const [legacyMod, pgDump] = await Promise.all([loadPGliteModule(major), loadPgDump(major)]);
+		const LegacyPGlite = legacyMod.PGlite;
+		const pg = new LegacyPGlite(backupDir);
+		try {
+			await pg.waitReady;
+			sql = await (await pgDump({ pg })).text();
+		} finally {
+			await pg.close();
+		}
+	} catch (err) {
+		await rollback(dataDir, backupDir, err, logger);
+		throw err;
+	}
+	try {
+		const CurrentPGlite = (await loadPGliteModule(17)).PGlite;
+		const pg = new CurrentPGlite(dataDir, { relaxedDurability: false });
+		try {
+			await pg.waitReady;
+			try {
+				await pg.exec("SET standard_conforming_strings = off;");
+			} catch (gucErr) {
+				logger.warn(`[pglite-migration] Could not force standard_conforming_strings=off: ${String(gucErr)}`);
+			}
+			try {
+				await pg.exec(sql);
+			} catch (execErr) {
+				logRestoreFailure(dataDir, sql, execErr, logger);
+				throw execErr;
+			}
+		} finally {
+			await pg.close();
+		}
+	} catch (err) {
+		await rollback(dataDir, backupDir, err, logger);
+		throw err;
+	}
+	logger.info(`[pglite-migration] Migration of ${dataDir} complete. Backup retained at ${backupDir}; remove it manually once you have verified the upgrade.`);
+}
+async function rollback(dataDir, backupDir, originalError, logger) {
+	try {
+		if (await pathExists(dataDir)) await promises.rm(dataDir, {
+			recursive: true,
+			force: true
+		});
+		if (await pathExists(backupDir)) await promises.rename(backupDir, dataDir);
+	} catch (rollbackErr) {
+		logger.error(`[pglite-migration] Migration AND rollback failed for ${dataDir}. Original error: ${String(originalError)}; rollback error: ${String(rollbackErr)}; backup may still exist at ${backupDir}.`);
+		return;
+	}
+	logger.error(`[pglite-migration] Migration failed for ${dataDir}; rolled back from ${backupDir}. Original error: ${String(originalError)}`);
+}
+//#endregion
 //#region src/renown.ts
 const logger = childLogger(["switchboard", "renown"]);
 /**
@@ -316,8 +470,50 @@ async function initServer(serverPort, options, renown) {
 	if (options.meterProvider) metrics.setGlobalMeterProvider(options.meterProvider);
 	const { dev, packages = [], remoteDrives = [], logger = defaultLogger } = options;
 	logger.level = LogLevel;
-	const readModelPath = (options.dbPath ?? process.env.DATABASE_URL) || ".ph/read-storage";
-	const config = getConfig(options.configFile ?? path.join(process.cwd(), "powerhouse.config.json"));
+	const dbPath = options.dbPath ?? process.env.DATABASE_URL;
+	const readModelPath = dbPath || ".ph/read-storage";
+	const reactorDbUrl = process.env.PH_REACTOR_DATABASE_URL;
+	const reactorPgliteDir = !reactorDbUrl || !isPostgresUrl(reactorDbUrl) ? "./.ph/reactor-storage" : null;
+	const readModelPgliteDir = !dbPath || !isPostgresUrl(dbPath) ? readModelPath : null;
+	const pgliteDirs = [reactorPgliteDir, readModelPgliteDir].filter((d) => d !== null);
+	const detectedMajors = /* @__PURE__ */ new Map();
+	if (options.forcePgVersion !== void 0 && pgliteDirs.length > 0) {
+		if (options.migratePglite) logger.warn("PH_FORCE_PG_VERSION is set; ignoring --migrate-pglite/PH_MIGRATE_PGLITE because the data dirs will be wiped.");
+		logger.warn(`PH_FORCE_PG_VERSION=${options.forcePgVersion} set; wiping PGLite data dirs and re-initializing at PG${options.forcePgVersion}.`);
+		for (const dir of pgliteDirs) {
+			await promises.rm(dir, {
+				recursive: true,
+				force: true
+			});
+			logger.info(`Wiped PGLite data dir ${dir}`);
+		}
+	} else if (options.forcePgVersion === void 0) {
+		for (const dir of pgliteDirs) {
+			const major = await readPgVersionFile(dir);
+			if (major !== null) detectedMajors.set(dir, major);
+		}
+		if (options.migratePglite) for (const [dir, major] of detectedMajors) {
+			if (major === 17) continue;
+			await migratePgliteDir(dir, logger);
+			const after = await readPgVersionFile(dir);
+			if (after !== null) detectedMajors.set(dir, after);
+		}
+		else for (const [dir, major] of detectedMajors) {
+			if (major === 17) continue;
+			logger.warn(`PGLite data dir at ${dir} was created with PG${major} but Switchboard ships PG17. Running on legacy PGLite. Re-start with --migrate-pglite (or PH_MIGRATE_PGLITE=true) to upgrade.`);
+		}
+	}
+	function resolvePgliteMajorForDir(dir) {
+		if (options.forcePgVersion !== void 0) return options.forcePgVersion;
+		const detected = detectedMajors.get(dir);
+		if (detected === void 0) return 17;
+		if (!isSupportedMajor(detected)) throw new Error(`Unsupported PGLite data dir at ${dir}: PG_VERSION=${detected}`);
+		return detected;
+	}
+	const reactorPgliteMajor = reactorPgliteDir ? resolvePgliteMajorForDir(reactorPgliteDir) : null;
+	const readModelPgliteMajor = readModelPgliteDir ? resolvePgliteMajorForDir(readModelPgliteDir) : null;
+	const apiRef = { current: void 0 };
+	const config = getConfig(options.configFile ?? path$1.join(process.cwd(), "powerhouse.config.json"));
 	const registryUrl = process.env.PH_REGISTRY_URL ?? config.packageRegistryUrl;
 	const registryPackages = process.env.PH_REGISTRY_PACKAGES;
 	const dynamicModelLoading = options.dynamicModelLoading ?? process.env.DYNAMIC_MODEL_LOADING === "true";
@@ -344,16 +540,20 @@ async function initServer(serverPort, options, renown) {
 			builder.withExecutorConfig({ maxSkipThreshold });
 			logger.info(`Reactor maxSkipThreshold set to ${maxSkipThreshold}`);
 		}
-		const reactorDbUrl = process.env.PH_REACTOR_DATABASE_URL;
 		if (reactorDbUrl && isPostgresUrl(reactorDbUrl)) {
 			const kysely = new Kysely({ dialect: new PostgresDialect({ pool: new Pool({ connectionString: reactorDbUrl.includes("?") ? reactorDbUrl : `${reactorDbUrl}?sslmode=disable` }) }) });
 			builder.withKysely(kysely);
 			logger.info("Using PostgreSQL for reactor storage");
 		} else {
-			const kysely = new Kysely({ dialect: new PGliteDialect(new PGlite("./.ph/reactor-storage")) });
+			if (!reactorPgliteDir || reactorPgliteMajor === null) throw new Error("Reactor PGLite directory not resolved");
+			const { PGlite } = await loadPGliteModule(reactorPgliteMajor);
+			const kysely = new Kysely({ dialect: new ClosablePGliteDialect(new PGlite(reactorPgliteDir)) });
 			builder.withKysely(kysely);
-			logger.info("Using PGlite for reactor storage");
+			logger.info(`Using PGlite (PG${reactorPgliteMajor}) for reactor storage at ${reactorPgliteDir}`);
 		}
+		builder.withShutdownHook(async () => {
+			if (apiRef.current) await apiRef.current.dispose();
+		});
 		if (httpLoader && dynamicModelLoading) builder.withDocumentModelLoader(httpLoader.documentModelLoader);
 		const clientBuilder = new ReactorClientBuilder().withReactorBuilder(builder);
 		if (renown) {
@@ -383,19 +583,26 @@ async function initServer(serverPort, options, renown) {
 		});
 	}
 	const apiLogger = logger.child(["reactor-api"]);
+	let pgliteFactory;
+	if (readModelPgliteDir && readModelPgliteMajor !== null) {
+		const { PGlite: ReadModelPGlite } = await loadPGliteModule(readModelPgliteMajor);
+		pgliteFactory = (connectionString) => new ReadModelPGlite(connectionString ?? readModelPgliteDir);
+	}
 	const api = await initializeAndStartAPI(initializeClient, {
 		port: serverPort,
 		dbPath: readModelPath,
+		pgliteFactory,
 		https: options.https,
 		packageLoaders: packageLoaders.length > 0 ? packageLoaders : void 0,
 		packages,
 		processorConfig: options.processorConfig,
 		processors: { "@powerhousedao/vetra": [processorFactory] },
-		configFile: options.configFile ?? path.join(process.cwd(), "powerhouse.config.json"),
+		configFile: options.configFile ?? path$1.join(process.cwd(), "powerhouse.config.json"),
 		mcp: options.mcp ?? true,
 		logger: apiLogger,
 		enableDocumentModelSubgraphs: options.enableDocumentModelSubgraphs
 	}, "switchboard");
+	apiRef.current = api;
 	registerAttachmentRoutes(api);
 	if (process.env.SENTRY_DSN) api.httpAdapter.setupSentryErrorHandler(Sentry);
 	const { client, graphqlManager, documentModelRegistry } = api;
@@ -488,6 +695,6 @@ const startSwitchboard = async (options = {}) => {
 };
 if (import.meta.main) await startSwitchboard();
 //#endregion
-export { startSwitchboard as n, isPortAvailable as t };
+export { startSwitchboard as n, parseForcePgVersion as r, isPortAvailable as t };
 
-//# sourceMappingURL=server-8U7q7B7r.mjs.map
+//# sourceMappingURL=server-DVr-c0CZ.mjs.map

package/dist/server-DVr-c0CZ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-DVr-c0CZ.mjs","names":["fs","#pglite","logger","fs","fs","path","vetraDocumentModels","documentModels","vetraProcessorFactory"],"sources":["../src/pglite-version.ts","../src/pglite-dialect.ts","../src/attachments/auth.ts","../src/attachments/mount-auth.ts","../src/attachments/routes.ts","../src/attachments/index.ts","../src/feature-flags.ts","../src/pglite-migration.ts","../src/renown.ts","../src/server.mts"],"sourcesContent":["import type * as CurrentPGliteModuleNs from \"@electric-sql/pglite\";\nimport { promises as fs } from \"node:fs\";\nimport path from \"node:path\";\n\nexport const CURRENT_PG_MAJOR = 17;\nexport const SUPPORTED_PG_MAJORS = [16, 17] as const;\nexport type SupportedPgMajor = (typeof SUPPORTED_PG_MAJORS)[number];\n\ntype CurrentPGliteModule = typeof CurrentPGliteModuleNs;\n\nexport async function readPgVersionFile(\n  dataDir: string,\n): Promise<number | null> {\n  try {\n    const raw = await fs.readFile(path.join(dataDir, \"PG_VERSION\"), \"utf8\");\n    const major = parseInt(raw.trim(), 10);\n    return Number.isFinite(major) ? major : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function isSupportedMajor(major: number): major is SupportedPgMajor {\n  return (SUPPORTED_PG_MAJORS as readonly number[]).includes(major);\n}\n\n/**\n * Parses the `PH_FORCE_PG_VERSION` env var. Returns the validated major, or\n * `null` when the var is unset/empty. Throws on any value that is not a\n * supported major — invalid configuration must fail before the server starts\n * touching disk.\n */\nexport function parseForcePgVersion(\n  raw: string | undefined,\n): SupportedPgMajor | null {\n  if (raw === undefined || raw.trim() === \"\") return null;\n  const parsed = Number(raw);\n  if (Number.isInteger(parsed) && isSupportedMajor(parsed)) return parsed;\n  throw new Error(\n    `PH_FORCE_PG_VERSION must be one of: ${SUPPORTED_PG_MAJORS.join(\", \")} (got: ${raw})`,\n  );\n}\n\nexport async function loadPGliteModule(\n  major: SupportedPgMajor,\n): Promise<CurrentPGliteModule> {\n  if (major === 16) {\n    return (await import(\"pglite-legacy-02\")) as unknown as CurrentPGliteModule;\n  }\n  return import(\"@electric-sql/pglite\");\n}\n\ntype PgDumpFn = (options: {\n  pg: unknown;\n}) => Promise<{ text(): Promise<string> }>;\n\nexport async function loadPgDump(major: SupportedPgMajor): Promise<PgDumpFn> {\n  if (major === 16) {\n    const mod = (await import(\"pglite-tools-legacy-02/pg_dump\")) as {\n      pgDump: PgDumpFn;\n    };\n    return mod.pgDump;\n  }\n  const mod = (await import(\"@electric-sql/pglite-tools/pg_dump\")) as {\n    pgDump: PgDumpFn;\n  };\n  return mod.pgDump;\n}\n","import type { PGlite } from \"@electric-sql/pglite\";\nimport type { Driver } from \"kysely\";\nimport { PGliteDialect } from \"kysely-pglite-dialect\";\n\n// kysely-pglite-dialect's driver.destroy() only nulls its reference to the\n// PGlite client — it never calls pglite.close(). Without close(), WAL is not\n// flushed and the data dir is left in a state that aborts the wasm on the\n// next open. This wrapper closes the dialect's PGlite as part of the\n// reactor's database.destroy() chain.\nexport class ClosablePGliteDialect extends PGliteDialect {\n  readonly #pglite: PGlite;\n\n  constructor(pglite: PGlite) {\n    super(pglite);\n    this.#pglite = pglite;\n  }\n\n  createDriver(): Driver {\n    const driver = super.createDriver();\n    const pglite = this.#pglite;\n    const innerDestroy = driver.destroy.bind(driver);\n    driver.destroy = async () => {\n      await innerDestroy();\n      if (!pglite.closed) {\n        await pglite.close();\n      }\n    };\n    return driver;\n  }\n}\n","import type { AuthService } from \"@powerhousedao/reactor-api\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\n\nexport type NodeHandler = (\n  req: IncomingMessage,\n  res: ServerResponse,\n) => Promise<void> | void;\n\n/**\n * Wrap a Node-style handler so that, when `authService` is provided and auth is\n * enabled, the request must carry a verifiable Bearer token.\n */\nexport function requireAuth(\n  authService: AuthService | undefined,\n  handler: NodeHandler,\n): NodeHandler {\n  if (!authService) return handler;\n\n  return async (req, res) => {\n    let result;\n    try {\n      result = await authService.verifyBearer(req.headers.authorization);\n    } catch {\n      res.statusCode = 500;\n      res.setHeader(\"Content-Type\", \"application/json\");\n      res.end(JSON.stringify({ error: \"Internal authentication error\" }));\n      return;\n    }\n\n    if (result instanceof Response) {\n      const body = await result.text();\n      res.statusCode = result.status;\n      const contentType = result.headers.get(\"content-type\");\n      if (contentType) res.setHeader(\"Content-Type\", contentType);\n      res.end(body);\n      return;\n    }\n\n    if (result.auth_enabled && !result.user) {\n      res.statusCode = 401;\n      res.setHeader(\"Content-Type\", \"application/json\");\n      res.end(JSON.stringify({ error: \"Authentication required\" }));\n      return;\n    }\n\n    await handler(req, res);\n  };\n}\n","import type { API } from \"@powerhousedao/reactor-api\";\nimport { requireAuth, type NodeHandler } from \"./auth.js\";\n\nexport type HttpMethod = \"DELETE\" | \"GET\" | \"POST\" | \"PUT\";\n\n/**\n * Mount a Node-style attachment route with `requireAuth` applied unconditionally.\n * When `api.authService` is undefined (auth disabled), `requireAuth` returns the\n * handler unchanged — that is the only way to opt out. To register a route\n * without auth wrapping you must call `api.httpAdapter.mountNodeRoute` directly.\n */\nexport function mountAuthenticatedNodeRoute(\n  api: Pick<API, \"httpAdapter\" | \"authService\">,\n  method: HttpMethod,\n  path: string,\n  handler: NodeHandler,\n): void {\n  api.httpAdapter.mountNodeRoute(\n    method,\n    path,\n    requireAuth(api.authService, handler),\n  );\n}\n","import {\n  AttachmentNotFound,\n  InvalidAttachmentRef,\n  ReservationNotFound,\n  type AttachmentBuildResult,\n  type ReserveAttachmentOptions,\n} from \"@powerhousedao/reactor-attachments\";\nimport type { AttachmentHash } from \"@powerhousedao/reactor\";\nimport { childLogger } from \"document-model\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { Readable } from \"node:stream\";\nimport type { ReadableStream as NodeReadableStream } from \"node:stream/web\";\n\nconst logger = childLogger([\"switchboard\", \"attachments\"]);\n\nconst HASH_PATTERN = /^[a-f0-9]{64}$/;\n// eslint-disable-next-line no-control-regex\nconst CONTROL_CHARS = /[\\x00-\\x1f\\x7f]/;\n// RFC 6838 token chars; allows optional `; param=value` pairs (token or quoted-string).\nconst MIME_TYPE_PATTERN =\n  /^[!#$%&'*+\\-.^_`|~\\w]+\\/[!#$%&'*+\\-.^_`|~\\w]+(?:\\s*;\\s*[!#$%&'*+\\-.^_`|~\\w]+=(?:[!#$%&'*+\\-.^_`|~\\w]+|\"(?:[^\"\\\\\\r\\n]|\\\\[^\\r\\n])*\"))*$/;\nconst MAX_FILENAME_LEN = 255;\nconst MAX_MIMETYPE_LEN = 255;\n\nfunction sendJson(res: ServerResponse, status: number, body: unknown): void {\n  res.statusCode = status;\n  res.setHeader(\"Content-Type\", \"application/json\");\n  res.end(JSON.stringify(body));\n}\n\nfunction sendError(res: ServerResponse, status: number, message: string): void {\n  sendJson(res, status, { error: message });\n}\n\nfunction statusForError(err: unknown): number {\n  if (err instanceof AttachmentNotFound) return 404;\n  if (err instanceof ReservationNotFound) return 404;\n  if (err instanceof InvalidAttachmentRef) return 400;\n  return 500;\n}\n\nfunction sendErrorFromException(res: ServerResponse, err: unknown): void {\n  const status = statusForError(err);\n  if (status >= 500) {\n    logger.error(\"Attachment route error: @error\", err);\n    sendError(res, status, \"Internal error\");\n    return;\n  }\n  sendError(res, status, err instanceof Error ? err.message : String(err));\n}\n\nasync function readJsonBody(\n  req: IncomingMessage,\n  body: unknown,\n): Promise<unknown> {\n  // The Express body-parser may have already populated `body`. When that\n  // happens we trust it; otherwise read the raw stream ourselves so this\n  // module is independent of upstream middleware ordering.\n  if (body !== undefined && body !== null && typeof body === \"object\") {\n    return body;\n  }\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    chunks.push(chunk as Buffer);\n  }\n  if (chunks.length === 0) return undefined;\n  const text = Buffer.concat(chunks).toString(\"utf8\");\n  if (text.length === 0) return undefined;\n  return JSON.parse(text);\n}\n\nexport function parseReserveOptions(\n  input: unknown,\n): ReserveAttachmentOptions | null {\n  if (input === null || typeof input !== \"object\") return null;\n  const obj = input as Record<string, unknown>;\n  if (\n    typeof obj.mimeType !== \"string\" ||\n    obj.mimeType.length === 0 ||\n    obj.mimeType.length > MAX_MIMETYPE_LEN ||\n    !MIME_TYPE_PATTERN.test(obj.mimeType)\n  ) {\n    return null;\n  }\n  if (\n    typeof obj.fileName !== \"string\" ||\n    obj.fileName.length === 0 ||\n    obj.fileName.length > MAX_FILENAME_LEN ||\n    CONTROL_CHARS.test(obj.fileName)\n  ) {\n    return null;\n  }\n  let extension: string | null = null;\n  if (typeof obj.extension === \"string\") {\n    if (obj.extension.length === 0 || /[\\\\/]/.test(obj.extension)) return null;\n    extension = obj.extension;\n  } else if (obj.extension !== undefined && obj.extension !== null) {\n    return null;\n  }\n  return {\n    mimeType: obj.mimeType,\n    fileName: obj.fileName,\n    extension,\n  };\n}\n\nexport function quoteFilename(name: string): string {\n  // RFC 6266: quoted-string with internal \" and \\ escaped.\n  return `\"${name.replace(/[\\\\\"]/g, \"\\\\$&\")}\"`;\n}\n\nexport function buildContentDisposition(fileName: string): string {\n  // ASCII fallback: replace any byte outside printable ASCII (0x20-0x7e),\n  // plus `\"` and `\\`, with `_`. Browsers fall back to this when they don't\n  // grok `filename*=`; the modern parameter carries the real name.\n  const ascii = fileName.replace(/[^\\x20-\\x21\\x23-\\x5b\\x5d-\\x7e]/g, \"_\");\n  // RFC 5987: percent-encode UTF-8 bytes. encodeURIComponent leaves a few\n  // chars that 5987 disallows in token; re-encode them.\n  const encoded = encodeURIComponent(fileName).replace(\n    /['()*!]/g,\n    (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`,\n  );\n  return `attachment; filename=${quoteFilename(ascii)}; filename*=UTF-8''${encoded}`;\n}\n\nexport function makeReserveHandler(attachments: AttachmentBuildResult) {\n  return async (\n    req: IncomingMessage,\n    res: ServerResponse,\n    body?: unknown,\n  ): Promise<void> => {\n    let parsed: unknown;\n    try {\n      parsed = await readJsonBody(req, body);\n    } catch {\n      sendError(res, 400, \"Invalid JSON body\");\n      return;\n    }\n    const opts = parseReserveOptions(parsed);\n    if (!opts) {\n      sendError(\n        res,\n        400,\n        \"Body must be { mimeType: string (type/subtype), fileName: string (no control characters, max 255 chars), extension?: string|null }\",\n      );\n      return;\n    }\n    try {\n      const upload = await attachments.service.reserve(opts);\n      sendJson(res, 201, { reservationId: upload.reservationId });\n    } catch (err) {\n      sendErrorFromException(res, err);\n    }\n  };\n}\n\nexport function makeUploadHandler(attachments: AttachmentBuildResult) {\n  return async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    const reservationId = extractParam(req, \"reservationId\");\n    if (!reservationId) {\n      sendError(res, 400, \"Missing reservationId\");\n      return;\n    }\n\n    let reservation;\n    try {\n      reservation = await attachments.reservations.get(reservationId);\n    } catch (err) {\n      sendErrorFromException(res, err);\n      return;\n    }\n\n    const upload = attachments.uploadFactory.createUpload(\n      reservation.reservationId,\n      {\n        mimeType: reservation.mimeType,\n        fileName: reservation.fileName,\n        extension: reservation.extension,\n      },\n    );\n\n    const webStream = Readable.toWeb(\n      req as Readable,\n    ) as ReadableStream<Uint8Array>;\n\n    try {\n      const result = await upload.send(webStream);\n      sendJson(res, 200, result);\n    } catch (err) {\n      sendErrorFromException(res, err);\n    }\n  };\n}\n\nexport function makeDownloadHandler(attachments: AttachmentBuildResult) {\n  return async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    const hash = extractParam(req, \"hash\");\n    if (!hash || !HASH_PATTERN.test(hash)) {\n      sendError(res, 400, \"Invalid attachment hash\");\n      return;\n    }\n\n    const controller = new AbortController();\n    req.once(\"close\", () => controller.abort());\n\n    let response;\n    try {\n      response = await attachments.store.get(\n        hash as AttachmentHash,\n        controller.signal,\n      );\n    } catch (err) {\n      sendErrorFromException(res, err);\n      return;\n    }\n\n    const { header, body } = response;\n    res.statusCode = 200;\n    res.setHeader(\"Content-Type\", header.mimeType);\n    res.setHeader(\"Content-Length\", String(header.sizeBytes));\n    res.setHeader(\n      \"Content-Disposition\",\n      buildContentDisposition(header.fileName),\n    );\n    res.setHeader(\n      \"X-Attachment-Metadata\",\n      JSON.stringify({\n        mimeType: header.mimeType,\n        fileName: header.fileName,\n        sizeBytes: header.sizeBytes,\n        extension: header.extension,\n      }),\n    );\n\n    Readable.fromWeb(body as unknown as NodeReadableStream<Uint8Array>).pipe(\n      res,\n    );\n  };\n}\n\nfunction extractParam(req: IncomingMessage, name: string): string | undefined {\n  const expressParams = (\n    req as IncomingMessage & {\n      params?: Record<string, string>;\n    }\n  ).params;\n  return expressParams?.[name];\n}\n","import type { API } from \"@powerhousedao/reactor-api\";\nimport { mountAuthenticatedNodeRoute } from \"./mount-auth.js\";\nimport {\n  makeDownloadHandler,\n  makeReserveHandler,\n  makeUploadHandler,\n} from \"./routes.js\";\n\nexport function registerAttachmentRoutes(api: API): void {\n  const { attachments } = api;\n\n  mountAuthenticatedNodeRoute(\n    api,\n    \"POST\",\n    \"/attachments/reservations\",\n    makeReserveHandler(attachments),\n  );\n\n  mountAuthenticatedNodeRoute(\n    api,\n    \"PUT\",\n    \"/attachments/reservations/:reservationId\",\n    makeUploadHandler(attachments),\n  );\n\n  mountAuthenticatedNodeRoute(\n    api,\n    \"GET\",\n    \"/attachments/:hash\",\n    makeDownloadHandler(attachments),\n  );\n}\n","import { EnvVarProvider } from \"@openfeature/env-var-provider\";\nimport { OpenFeature } from \"@openfeature/server-sdk\";\n\nexport async function initFeatureFlags() {\n  // for now, we're only using env vars for feature flags\n  const provider = new EnvVarProvider();\n\n  await OpenFeature.setProviderAndWait(provider);\n\n  return OpenFeature.getClient();\n}\n","import type { ILogger } from \"document-model\";\nimport { promises as fs } from \"node:fs\";\nimport {\n  CURRENT_PG_MAJOR,\n  isSupportedMajor,\n  loadPGliteModule,\n  loadPgDump,\n  readPgVersionFile,\n  type SupportedPgMajor,\n} from \"./pglite-version.js\";\n\ntype PGliteCtor = new (\n  dataDir: string,\n  options?: Record<string, unknown>,\n) => {\n  waitReady: Promise<void>;\n  exec: (sql: string) => Promise<unknown>;\n  close: () => Promise<void>;\n};\n\nfunction backupPath(dataDir: string, major: number): string {\n  const stamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n  return `${dataDir}.backup-pg${major}-${stamp}`;\n}\n\nasync function pathExists(p: string): Promise<boolean> {\n  try {\n    await fs.stat(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction logRestoreFailure(\n  dataDir: string,\n  sql: string,\n  err: unknown,\n  logger: ILogger,\n): void {\n  const errObj = err as {\n    message?: string;\n    position?: string | number;\n    severity?: string;\n    code?: string;\n    detail?: string;\n    where?: string;\n  };\n  const position =\n    typeof errObj.position === \"string\"\n      ? parseInt(errObj.position, 10)\n      : typeof errObj.position === \"number\"\n        ? errObj.position\n        : NaN;\n\n  logger.error(\n    `[pglite-migration] Restore failed for ${dataDir}: code=${errObj.code ?? \"\"} severity=${errObj.severity ?? \"\"} message=${errObj.message ?? \"\"} sqlLength=${sql.length}`,\n  );\n\n  if (Number.isFinite(position) && position > 0) {\n    const zeroBased = position - 1;\n    const start = Math.max(0, zeroBased - 200);\n    const end = Math.min(sql.length, zeroBased + 200);\n    const before = sql.slice(start, zeroBased);\n    const at = sql.slice(zeroBased, zeroBased + 1);\n    const after = sql.slice(zeroBased + 1, end);\n    logger.error(\n      `[pglite-migration] SQL context around position ${position}:\\n${before}»${at}«${after}`,\n    );\n  } else {\n    logger.error(\n      `[pglite-migration] No position info. First 2000 chars of dump:\\n${sql.slice(0, 2000)}`,\n    );\n  }\n}\n\n/**\n * Migrate a filesystem PGLite data directory from a legacy PG major to the\n * current one. Renames the existing dir to a timestamped backup, dumps via the\n * matching legacy `pg_dump`, restores into a fresh current-version PGLite at\n * the original path. On failure, the original dir is restored from the backup.\n *\n * No-op when the dir is missing or already at the current major.\n */\nexport async function migratePgliteDir(\n  dataDir: string,\n  logger: ILogger,\n): Promise<void> {\n  const major = await readPgVersionFile(dataDir);\n  if (major === null) {\n    logger.info(\n      `[pglite-migration] No PG_VERSION at ${dataDir}; skipping migration`,\n    );\n    return;\n  }\n  if (major === CURRENT_PG_MAJOR) return;\n\n  if (!isSupportedMajor(major)) {\n    throw new Error(\n      `Unsupported legacy PGlite data dir: PG_VERSION=${major} for ${dataDir}`,\n    );\n  }\n\n  const backupDir = backupPath(dataDir, major);\n  logger.info(\n    `[pglite-migration] Migrating ${dataDir} from PG${major} to PG${CURRENT_PG_MAJOR}; backup: ${backupDir}`,\n  );\n\n  await fs.rename(dataDir, backupDir);\n\n  let sql: string;\n  try {\n    const [legacyMod, pgDump] = await Promise.all([\n      loadPGliteModule(major as SupportedPgMajor),\n      loadPgDump(major as SupportedPgMajor),\n    ]);\n    const LegacyPGlite = (legacyMod as unknown as { PGlite: PGliteCtor })\n      .PGlite;\n    const pg = new LegacyPGlite(backupDir);\n    try {\n      await pg.waitReady;\n      const file = await pgDump({ pg });\n      sql = await file.text();\n    } finally {\n      await pg.close();\n    }\n  } catch (err) {\n    await rollback(dataDir, backupDir, err, logger);\n    throw err;\n  }\n\n  try {\n    const currentMod = await loadPGliteModule(CURRENT_PG_MAJOR);\n    const CurrentPGlite = (currentMod as unknown as { PGlite: PGliteCtor })\n      .PGlite;\n    const pg = new CurrentPGlite(dataDir, { relaxedDurability: false });\n    try {\n      await pg.waitReady;\n      try {\n        await pg.exec(\"SET standard_conforming_strings = off;\");\n      } catch (gucErr) {\n        logger.warn(\n          `[pglite-migration] Could not force standard_conforming_strings=off: ${String(gucErr)}`,\n        );\n      }\n      try {\n        await pg.exec(sql);\n      } catch (execErr) {\n        logRestoreFailure(dataDir, sql, execErr, logger);\n        throw execErr;\n      }\n    } finally {\n      await pg.close();\n    }\n  } catch (err) {\n    await rollback(dataDir, backupDir, err, logger);\n    throw err;\n  }\n\n  logger.info(\n    `[pglite-migration] Migration of ${dataDir} complete. Backup retained at ${backupDir}; remove it manually once you have verified the upgrade.`,\n  );\n}\n\nasync function rollback(\n  dataDir: string,\n  backupDir: string,\n  originalError: unknown,\n  logger: ILogger,\n): Promise<void> {\n  try {\n    if (await pathExists(dataDir)) {\n      await fs.rm(dataDir, { recursive: true, force: true });\n    }\n    if (await pathExists(backupDir)) {\n      await fs.rename(backupDir, dataDir);\n    }\n  } catch (rollbackErr) {\n    logger.error(\n      `[pglite-migration] Migration AND rollback failed for ${dataDir}. Original error: ${String(originalError)}; rollback error: ${String(rollbackErr)}; backup may still exist at ${backupDir}.`,\n    );\n    return;\n  }\n  logger.error(\n    `[pglite-migration] Migration failed for ${dataDir}; rolled back from ${backupDir}. Original error: ${String(originalError)}`,\n  );\n}\n","import type { SignerConfig } from \"@powerhousedao/reactor\";\nimport {\n  createSignatureVerifier,\n  DEFAULT_RENOWN_URL,\n  NodeKeyStorage,\n  RenownBuilder,\n  RenownCryptoBuilder,\n  type IRenown,\n} from \"@renown/sdk/node\";\nimport { childLogger } from \"document-model\";\n\nconst logger = childLogger([\"switchboard\", \"renown\"]);\n\nexport interface RenownOptions {\n  /** Path to the keypair file. Defaults to .ph/.keypair.json in cwd */\n  keypairPath?: string;\n  /** If true, won't generate a new keypair if none exists */\n  requireExisting?: boolean;\n  /** Base url of the Renown instance to use */\n  baseUrl?: string;\n}\n\n/**\n * Initialize Renown for the Switchboard instance.\n * This allows Switchboard to authenticate with remote services\n * using the same identity established during `ph login`.\n */\nexport async function initRenown(\n  options: RenownOptions = {},\n): Promise<IRenown | null> {\n  const {\n    keypairPath,\n    requireExisting = false,\n    baseUrl = DEFAULT_RENOWN_URL,\n  } = options;\n\n  const keyStorage = new NodeKeyStorage(keypairPath, {\n    logger,\n  });\n\n  // Check if we have an existing keypair\n  const existingKeyPair = await keyStorage.loadKeyPair();\n\n  if (!existingKeyPair && requireExisting) {\n    throw new Error(\n      \"No existing keypair found and requireExisting is true. \" +\n        'Run \"ph login\" to create one.',\n    );\n  }\n\n  if (!existingKeyPair) {\n    logger.info(\"No existing keypair found. A new one will be generated.\");\n  }\n\n  const renownCrypto = await new RenownCryptoBuilder()\n    .withKeyPairStorage(keyStorage)\n    .build();\n\n  const renown = await new RenownBuilder(\"switchboard\", {})\n    .withCrypto(renownCrypto)\n    .withBaseUrl(baseUrl)\n    .build();\n\n  logger.info(\"Switchboard identity initialized: @did\", renownCrypto.did);\n\n  return renown;\n}\n\n/**\n * Get the signer config for the given renown instance.\n *\n * @param renown - The renown instance\n * @param requireSignature - If true, unsigned actions are rejected\n */\nexport function getRenownSignerConfig(\n  renown: IRenown,\n  requireSignature?: boolean,\n): SignerConfig {\n  return {\n    signer: renown.signer,\n    verifier: createSignatureVerifier(requireSignature),\n  };\n}\n","#!/usr/bin/env node\nimport type { PGlite } from \"@electric-sql/pglite\";\nimport { metrics } from \"@opentelemetry/api\";\nimport { getConfig } from \"@powerhousedao/config/node\";\nimport { ReactorInstrumentation } from \"@powerhousedao/opentelemetry-instrumentation-reactor\";\nimport {\n  ChannelScheme,\n  EventBus,\n  ReactorBuilder,\n  ReactorClientBuilder,\n  driveCollectionId,\n  parseDriveUrl,\n  type Database,\n} from \"@powerhousedao/reactor\";\nimport {\n  HttpPackageLoader,\n  ImportPackageLoader,\n  PackageManagementService,\n  PackagesSubgraph,\n  getUniqueDocumentModels,\n  initializeAndStartAPI,\n  type IPackageLoader,\n} from \"@powerhousedao/reactor-api\";\nimport { httpsHooksPath } from \"@powerhousedao/reactor-api/https-hooks\";\nimport {\n  VitePackageLoader,\n  createViteLogger,\n  startViteServer,\n} from \"@powerhousedao/reactor-api/vite\";\nimport { driveDocumentModelModule } from \"@powerhousedao/shared/document-drive\";\nimport type { DocumentModelModule } from \"@powerhousedao/shared/document-model\";\nimport { documentModels as vetraDocumentModels } from \"@powerhousedao/vetra\";\nimport { processorFactory as vetraProcessorFactory } from \"@powerhousedao/vetra/processors\";\nimport type { IRenown } from \"@renown/sdk/node\";\nimport * as Sentry from \"@sentry/node\";\nimport {\n  childLogger,\n  documentModelDocumentModelModule,\n  setLogLevel,\n  type ILogger,\n} from \"document-model\";\nimport dotenv from \"dotenv\";\nimport { Kysely, PostgresDialect } from \"kysely\";\nimport { ClosablePGliteDialect } from \"./pglite-dialect.js\";\nimport { promises as fs } from \"node:fs\";\nimport net from \"node:net\";\nimport { register } from \"node:module\";\nimport path from \"path\";\nimport { Pool } from \"pg\";\nimport { registerAttachmentRoutes } from \"./attachments/index.js\";\nimport { initFeatureFlags } from \"./feature-flags.js\";\nimport { migratePgliteDir } from \"./pglite-migration.js\";\nimport {\n  CURRENT_PG_MAJOR,\n  isSupportedMajor,\n  loadPGliteModule,\n  readPgVersionFile,\n  type SupportedPgMajor,\n} from \"./pglite-version.js\";\nimport { getRenownSignerConfig, initRenown } from \"./renown.js\";\nimport type { StartServerOptions, SwitchboardReactor } from \"./types.js\";\nimport { addDefaultDrive, isPostgresUrl } from \"./utils.mjs\";\n\nconst defaultLogger = childLogger([\"switchboard\"]);\n\nconst LogLevel = (process.env.LOG_LEVEL as ILogger[\"level\"] | \"\") || \"info\";\nsetLogLevel(LogLevel);\n\ndotenv.config();\n\n// Feature flag constants\nconst DOCUMENT_MODEL_SUBGRAPHS_ENABLED = \"DOCUMENT_MODEL_SUBGRAPHS_ENABLED\";\nconst DOCUMENT_MODEL_SUBGRAPHS_ENABLED_DEFAULT = true;\nconst REQUIRE_SIGNATURES = \"REQUIRE_SIGNATURES\";\nconst REQUIRE_SIGNATURES_DEFAULT = false;\n\nif (process.env.SENTRY_DSN) {\n  defaultLogger.info(\n    \"Initialized Sentry with env: @env\",\n    process.env.SENTRY_ENV,\n  );\n  Sentry.init({\n    dsn: process.env.SENTRY_DSN,\n    environment: process.env.SENTRY_ENV,\n    // Match the version tag uploaded by release-branch.yml so source maps\n    // resolve. Populated by the CI (WORKSPACE_VERSION) or npm at runtime.\n    release:\n      process.env.SENTRY_RELEASE ||\n      (process.env.npm_package_version\n        ? `v${process.env.npm_package_version}`\n        : undefined),\n  });\n}\n\nconst DEFAULT_PORT = process.env.PORT ? Number(process.env.PORT) : 4001;\n\n// How many ports forward from the requested one we will try before giving up.\nconst PORT_FALLBACK_ATTEMPTS = 20;\n\n/**\n * Attempt to bind a throwaway TCP server to the given port. Resolves true if\n * the port is free, false if the OS reports it in use. Any other error is\n * surfaced so we don't silently mask real issues (permissions, bad host, …).\n */\nexport function isPortAvailable(port: number): Promise<boolean> {\n  return new Promise((resolve, reject) => {\n    const tester = net.createServer();\n    tester.once(\"error\", (err: NodeJS.ErrnoException) => {\n      if (err.code === \"EADDRINUSE\" || err.code === \"EACCES\") {\n        resolve(false);\n      } else {\n        reject(err);\n      }\n    });\n    tester.once(\"listening\", () => {\n      tester.close(() => resolve(true));\n    });\n    // Bind on the unspecified IPv6 address so we detect collisions with both\n    // IPv6 and IPv4 listeners (Node maps `::` to dual-stack on most systems).\n    tester.listen({ port, host: \"::\" });\n  });\n}\n\nasync function resolveServerPort(\n  requested: number,\n  strictPort: boolean,\n  logger: ILogger,\n): Promise<number> {\n  if (strictPort) return requested;\n  for (let i = 0; i < PORT_FALLBACK_ATTEMPTS; i++) {\n    const candidate = requested + i;\n    if (await isPortAvailable(candidate)) {\n      if (candidate !== requested) {\n        logger.info(\n          `Port ${requested} is in use. Falling back to port ${candidate}.`,\n        );\n      }\n      return candidate;\n    }\n  }\n  // Couldn't find a free port in the window; let the caller surface the\n  // original EADDRINUSE when the real bind attempts runs.\n  return requested;\n}\n\nasync function initServer(\n  serverPort: number,\n  options: StartServerOptions,\n  renown: IRenown | null,\n) {\n  // Register the global MeterProvider before ReactorInstrumentation is\n  // constructed. setGlobalMeterProvider is a one-way door — once set it cannot\n  // be unset — so this must happen before initializeClient calls\n  // instrumentation.start() → createMetrics() → metrics.getMeter().\n  if (options.meterProvider) {\n    metrics.setGlobalMeterProvider(options.meterProvider);\n  }\n\n  const {\n    dev,\n    packages = [],\n    remoteDrives = [],\n    logger = defaultLogger,\n  } = options;\n  logger.level = LogLevel;\n  const dbPath = options.dbPath ?? process.env.DATABASE_URL;\n\n  // use postgres url for read model storage if available, otherwise use local PGlite path\n  const readModelPath = dbPath || \".ph/read-storage\";\n\n  const reactorDbUrl = process.env.PH_REACTOR_DATABASE_URL;\n  const reactorPgliteDir =\n    !reactorDbUrl || !isPostgresUrl(reactorDbUrl)\n      ? \"./.ph/reactor-storage\"\n      : null;\n  const readModelPgliteDir =\n    !dbPath || !isPostgresUrl(dbPath) ? readModelPath : null;\n\n  // PGLite version pre-flight: when PH_FORCE_PG_VERSION is set, wipe local\n  // data dirs and re-initdb at the chosen version. Otherwise detect on-disk\n  // PG_VERSION and either migrate (when --migrate-pglite is set) or warn and\n  // fall through to the matching legacy PGLite at runtime.\n  const pgliteDirs = [reactorPgliteDir, readModelPgliteDir].filter(\n    (d): d is string => d !== null,\n  );\n  const detectedMajors = new Map<string, number>();\n\n  if (options.forcePgVersion !== undefined && pgliteDirs.length > 0) {\n    if (options.migratePglite) {\n      logger.warn(\n        \"PH_FORCE_PG_VERSION is set; ignoring --migrate-pglite/PH_MIGRATE_PGLITE because the data dirs will be wiped.\",\n      );\n    }\n    logger.warn(\n      `PH_FORCE_PG_VERSION=${options.forcePgVersion} set; wiping PGLite data dirs and re-initializing at PG${options.forcePgVersion}.`,\n    );\n    for (const dir of pgliteDirs) {\n      await fs.rm(dir, { recursive: true, force: true });\n      logger.info(`Wiped PGLite data dir ${dir}`);\n    }\n  } else if (options.forcePgVersion === undefined) {\n    for (const dir of pgliteDirs) {\n      const major = await readPgVersionFile(dir);\n      if (major !== null) detectedMajors.set(dir, major);\n    }\n\n    if (options.migratePglite) {\n      for (const [dir, major] of detectedMajors) {\n        if (major === CURRENT_PG_MAJOR) continue;\n        await migratePgliteDir(dir, logger);\n        // refresh detected major after a successful migration\n        const after = await readPgVersionFile(dir);\n        if (after !== null) detectedMajors.set(dir, after);\n      }\n    } else {\n      for (const [dir, major] of detectedMajors) {\n        if (major === CURRENT_PG_MAJOR) continue;\n        logger.warn(\n          `PGLite data dir at ${dir} was created with PG${major} but Switchboard ships PG${CURRENT_PG_MAJOR}. Running on legacy PGLite. Re-start with --migrate-pglite (or PH_MIGRATE_PGLITE=true) to upgrade.`,\n        );\n      }\n    }\n  }\n\n  function resolvePgliteMajorForDir(dir: string): SupportedPgMajor {\n    if (options.forcePgVersion !== undefined) return options.forcePgVersion;\n    const detected = detectedMajors.get(dir);\n    if (detected === undefined) return CURRENT_PG_MAJOR;\n    if (!isSupportedMajor(detected)) {\n      throw new Error(\n        `Unsupported PGLite data dir at ${dir}: PG_VERSION=${detected}`,\n      );\n    }\n    return detected;\n  }\n\n  const reactorPgliteMajor = reactorPgliteDir\n    ? resolvePgliteMajorForDir(reactorPgliteDir)\n    : null;\n  const readModelPgliteMajor = readModelPgliteDir\n    ? resolvePgliteMajorForDir(readModelPgliteDir)\n    : null;\n\n  // The reactor-api owns its own PGlite/HTTP/WS resources but has no shutdown\n  // path of its own; we register `api.dispose` as a reactor shutdown hook so\n  // those resources drain inside the reactor's SIGINT chain. The reference\n  // is forward — `initializeClient` runs (and registers the hook) before\n  // `initializeAndStartAPI` returns the api — so the closure reads `apiRef`\n  // at hook-fire time, not at registration time.\n  const apiRef: { current: { dispose: () => Promise<void> } | undefined } = {\n    current: undefined,\n  };\n\n  // HTTP registry package loading\n  const configPath =\n    options.configFile ?? path.join(process.cwd(), \"powerhouse.config.json\");\n  const config = getConfig(configPath);\n  const registryUrl = process.env.PH_REGISTRY_URL ?? config.packageRegistryUrl;\n  const registryPackages = process.env.PH_REGISTRY_PACKAGES;\n  const dynamicModelLoading =\n    options.dynamicModelLoading ?? process.env.DYNAMIC_MODEL_LOADING === \"true\";\n  let httpLoader: HttpPackageLoader | undefined;\n\n  if (registryUrl) {\n    // Register HTTP/HTTPS module loader hooks for dynamic package imports\n    register(httpsHooksPath, import.meta.url);\n    httpLoader = new HttpPackageLoader({ registryUrl });\n    registryPackages?.split(\",\").forEach((p) => {\n      const name = p.trim();\n      if (!packages.includes(name)) {\n        packages.push(name);\n      }\n    });\n  }\n\n  const reactorLogger = logger.child([\"reactor\"]);\n  const initializeClient = async (documentModels: DocumentModelModule[]) => {\n    const eventBus = new EventBus();\n    const builder = new ReactorBuilder()\n      .withEventBus(eventBus)\n      .withDocumentModels(\n        getUniqueDocumentModels([\n          documentModelDocumentModelModule,\n          driveDocumentModelModule,\n          ...vetraDocumentModels,\n          ...documentModels,\n        ]),\n      )\n      .withChannelScheme(ChannelScheme.SWITCHBOARD)\n      .withSignalHandlers()\n      .withLogger(reactorLogger);\n\n    const maxSkipThreshold = parseInt(process.env.MAX_SKIP_THRESHOLD ?? \"\", 10);\n    if (!isNaN(maxSkipThreshold) && maxSkipThreshold > 0) {\n      builder.withExecutorConfig({ maxSkipThreshold });\n      logger.info(`Reactor maxSkipThreshold set to ${maxSkipThreshold}`);\n    }\n\n    if (reactorDbUrl && isPostgresUrl(reactorDbUrl)) {\n      const connectionString = reactorDbUrl.includes(\"?\")\n        ? reactorDbUrl\n        : `${reactorDbUrl}?sslmode=disable`;\n      const pool = new Pool({ connectionString });\n      const kysely = new Kysely<Database>({\n        dialect: new PostgresDialect({ pool }),\n      });\n      builder.withKysely(kysely);\n      logger.info(\"Using PostgreSQL for reactor storage\");\n    } else {\n      if (!reactorPgliteDir || reactorPgliteMajor === null) {\n        throw new Error(\"Reactor PGLite directory not resolved\");\n      }\n      const { PGlite } = await loadPGliteModule(reactorPgliteMajor);\n      const pglite = new PGlite(reactorPgliteDir);\n      const kysely = new Kysely<Database>({\n        dialect: new ClosablePGliteDialect(pglite),\n      });\n      builder.withKysely(kysely);\n      logger.info(\n        `Using PGlite (PG${reactorPgliteMajor}) for reactor storage at ${reactorPgliteDir}`,\n      );\n    }\n\n    builder.withShutdownHook(async () => {\n      if (apiRef.current) await apiRef.current.dispose();\n    });\n\n    if (httpLoader && dynamicModelLoading) {\n      builder.withDocumentModelLoader(httpLoader.documentModelLoader);\n    }\n\n    const clientBuilder = new ReactorClientBuilder().withReactorBuilder(\n      builder,\n    );\n\n    if (renown) {\n      const signerConfig = getRenownSignerConfig(\n        renown,\n        options.identity?.requireSignatures,\n      );\n      clientBuilder.withSigner(signerConfig);\n    }\n\n    const module = await clientBuilder.buildModule();\n\n    if (module.reactorModule) {\n      const instrumentation = new ReactorInstrumentation(module.reactorModule);\n      instrumentation.start();\n      reactorLogger.info(\"Reactor metrics instrumentation started\");\n    }\n\n    return module;\n  };\n\n  let defaultDriveUrl: undefined | string = undefined;\n\n  // TODO get path from powerhouse config\n  // start vite server if dev mode is enabled\n  const basePath = process.cwd();\n  const viteLogger = createViteLogger(logger);\n  const vite = dev\n    ? await startViteServer(process.cwd(), viteLogger)\n    : undefined;\n\n  // get paths to local document models\n  if (!options.disableLocalPackages) {\n    packages.push(basePath);\n  }\n\n  // create loaders\n  const packageLoaders: IPackageLoader[] = [];\n  if (vite) {\n    packageLoaders.push(VitePackageLoader.build(vite));\n  } else {\n    packageLoaders.push(new ImportPackageLoader());\n  }\n  if (httpLoader) {\n    packageLoaders.push(httpLoader);\n    registryPackages?.split(\",\").forEach((p) => {\n      const name = p.trim();\n      if (!packages.includes(name)) {\n        packages.push(name);\n      }\n    });\n  }\n\n  const apiLogger = logger.child([\"reactor-api\"]);\n  // When the read-model store is on disk, hand reactor-api a factory that\n  // constructs the matching PGLite (current or legacy) for the detected\n  // PG_VERSION. reactor-api calls the factory synchronously, so the legacy\n  // module is preloaded above.\n  let pgliteFactory:\n    | ((connectionString: string | undefined) => PGlite)\n    | undefined;\n  if (readModelPgliteDir && readModelPgliteMajor !== null) {\n    const { PGlite: ReadModelPGlite } =\n      await loadPGliteModule(readModelPgliteMajor);\n    pgliteFactory = (connectionString) =>\n      new ReadModelPGlite(connectionString ?? readModelPgliteDir);\n  }\n\n  const api = await initializeAndStartAPI(\n    initializeClient,\n    {\n      port: serverPort,\n      dbPath: readModelPath,\n      pgliteFactory,\n      https: options.https,\n      packageLoaders: packageLoaders.length > 0 ? packageLoaders : undefined,\n      packages: packages,\n      processorConfig: options.processorConfig,\n      processors: {\n        \"@powerhousedao/vetra\": [vetraProcessorFactory],\n      },\n      configFile:\n        options.configFile ??\n        path.join(process.cwd(), \"powerhouse.config.json\"),\n      mcp: options.mcp ?? true,\n      logger: apiLogger,\n      enableDocumentModelSubgraphs: options.enableDocumentModelSubgraphs,\n    },\n    \"switchboard\",\n  );\n  apiRef.current = api;\n\n  registerAttachmentRoutes(api);\n\n  if (process.env.SENTRY_DSN) {\n    // Register Sentry error handler after all routes are established.\n    // The adapter calls the framework-specific Sentry setup internally.\n    api.httpAdapter.setupSentryErrorHandler(Sentry);\n  }\n\n  const { client, graphqlManager, documentModelRegistry } = api;\n\n  // Wire up dynamic package management if HTTP loader is configured\n  if (httpLoader) {\n    const packageManagementService = new PackageManagementService({\n      defaultRegistryUrl: registryUrl,\n      httpLoader,\n      documentModelRegistry,\n    });\n\n    packageManagementService.setOnModelsChanged(() => {\n      graphqlManager.regenerateDocumentModelSubgraphs().catch(logger.error);\n    });\n\n    const packagesSubgraph = new PackagesSubgraph({\n      relationalDb: undefined as never,\n      analyticsStore: undefined as never,\n      reactorClient: client,\n      graphqlManager,\n      syncManager: api.syncManager,\n      path: graphqlManager.getBasePath(),\n      packageManagementService,\n    });\n\n    void graphqlManager\n      .registerSubgraphInstance(packagesSubgraph, \"graphql\", false)\n      .then(() => graphqlManager.updateRouter())\n      .catch((error: unknown) => {\n        logger.error(\"Failed to register packages subgraph: @error\", error);\n      });\n  }\n\n  // Create default drive if provided\n  if (options.drive) {\n    if (!renown) {\n      throw new Error(\"Cannot create default drive without Renown identity\");\n    }\n\n    defaultDriveUrl = await addDefaultDrive(client, options.drive, serverPort);\n  }\n\n  // add vite middleware after express app is initialized if applicable\n  if (vite) {\n    api.httpAdapter.mountRawMiddleware(vite.middlewares);\n  }\n\n  // Connect to remote drives AFTER packages are loaded\n  if (remoteDrives.length > 0) {\n    for (const remoteDriveUrl of remoteDrives) {\n      let driveId: string | undefined;\n\n      try {\n        const { syncManager } = api;\n        const parsed = parseDriveUrl(remoteDriveUrl);\n        driveId = parsed.driveId;\n        const remoteName = `remote-drive-${driveId}-${crypto.randomUUID()}`;\n        await syncManager.add(remoteName, driveCollectionId(\"main\", driveId), {\n          type: \"gql\",\n          parameters: { url: parsed.graphqlEndpoint },\n        });\n        logger.debug(\"Remote drive @remoteDriveUrl synced\", remoteDriveUrl);\n      } catch (error) {\n        if (\n          error instanceof Error &&\n          error.message.includes(\"already exists\")\n        ) {\n          logger.debug(\n            \"Remote drive already added: @remoteDriveUrl\",\n            remoteDriveUrl,\n          );\n          driveId = remoteDriveUrl.split(\"/\").pop();\n        } else {\n          logger.error(\n            \"Failed to connect to remote drive @remoteDriveUrl: @error\",\n            remoteDriveUrl,\n            error,\n          );\n        }\n      } finally {\n        // Construct local URL once in finally block\n        if (!defaultDriveUrl && driveId) {\n          const protocol = options.https ? \"https\" : \"http\";\n          defaultDriveUrl = `${protocol}://localhost:${serverPort}/d/${driveId}`;\n        }\n      }\n    }\n  }\n\n  return {\n    defaultDriveUrl,\n    api,\n    reactor: client,\n    renown,\n    port: serverPort,\n  };\n}\n\nexport const startSwitchboard = async (\n  options: StartServerOptions = {},\n): Promise<SwitchboardReactor> => {\n  const requestedPort = options.port ?? DEFAULT_PORT;\n  const logger = options.logger ?? defaultLogger;\n  const serverPort = await resolveServerPort(\n    requestedPort,\n    options.strictPort ?? false,\n    logger,\n  );\n\n  // Initialize feature flags\n  const featureFlags = await initFeatureFlags();\n\n  const enableDocumentModelSubgraphs = await featureFlags.getBooleanValue(\n    DOCUMENT_MODEL_SUBGRAPHS_ENABLED,\n    options.enableDocumentModelSubgraphs ??\n      DOCUMENT_MODEL_SUBGRAPHS_ENABLED_DEFAULT,\n  );\n\n  options.enableDocumentModelSubgraphs = enableDocumentModelSubgraphs;\n\n  const requireSignatures =\n    options.identity?.requireSignatures ??\n    (await featureFlags.getBooleanValue(\n      REQUIRE_SIGNATURES,\n      REQUIRE_SIGNATURES_DEFAULT,\n    ));\n  options.identity = { ...options.identity, requireSignatures };\n\n  logger.info(\n    \"Feature flags: @flags\",\n    JSON.stringify(\n      {\n        DOCUMENT_MODEL_SUBGRAPHS_ENABLED: enableDocumentModelSubgraphs,\n        REQUIRE_SIGNATURES: requireSignatures,\n      },\n      null,\n      2,\n    ),\n  );\n\n  // Initialize Renown if identity options are provided or keypair exists\n  let renown: IRenown | null = null;\n  try {\n    renown = await initRenown(options.identity);\n  } catch (e) {\n    logger.warn(\"Failed to initialize ConnectCrypto: @error\", e);\n    if (options.identity?.requireExisting) {\n      throw new Error(\n        'Identity required but failed to initialize. Run \"ph login\" first.',\n      );\n    }\n  }\n\n  try {\n    return await initServer(serverPort, options, renown);\n  } catch (e) {\n    Sentry.captureException(e);\n    logger.error(\"App crashed: @error\", e);\n    throw e;\n  }\n};\n\nexport * from \"./types.js\";\n\nif (import.meta.main) {\n  await startSwitchboard();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,MAAa,sBAAsB,CAAC,IAAI,GAAG;AAK3C,eAAsB,kBACpB,SACwB;AACxB,KAAI;EACF,MAAM,MAAM,MAAMA,SAAG,SAAS,KAAK,KAAK,SAAS,aAAa,EAAE,OAAO;EACvE,MAAM,QAAQ,SAAS,IAAI,MAAM,EAAE,GAAG;AACtC,SAAO,OAAO,SAAS,MAAM,GAAG,QAAQ;SAClC;AACN,SAAO;;;AAIX,SAAgB,iBAAiB,OAA0C;AACzE,QAAQ,oBAA0C,SAAS,MAAM;;;;;;;;AASnE,SAAgB,oBACd,KACyB;AACzB,KAAI,QAAQ,KAAA,KAAa,IAAI,MAAM,KAAK,GAAI,QAAO;CACnD,MAAM,SAAS,OAAO,IAAI;AAC1B,KAAI,OAAO,UAAU,OAAO,IAAI,iBAAiB,OAAO,CAAE,QAAO;AACjE,OAAM,IAAI,MACR,uCAAuC,oBAAoB,KAAK,KAAK,CAAC,SAAS,IAAI,GACpF;;AAGH,eAAsB,iBACpB,OAC8B;AAC9B,KAAI,UAAU,GACZ,QAAQ,MAAM,OAAO;AAEvB,QAAO,OAAO;;AAOhB,eAAsB,WAAW,OAA4C;AAC3E,KAAI,UAAU,GAIZ,SAHa,MAAM,OAAO,mCAGf;AAKb,SAHa,MAAM,OAAO,uCAGf;;;;ACzDb,IAAa,wBAAb,cAA2C,cAAc;CACvD;CAEA,YAAY,QAAgB;AAC1B,QAAM,OAAO;AACb,QAAA,SAAe;;CAGjB,eAAuB;EACrB,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,SAAS,MAAA;EACf,MAAM,eAAe,OAAO,QAAQ,KAAK,OAAO;AAChD,SAAO,UAAU,YAAY;AAC3B,SAAM,cAAc;AACpB,OAAI,CAAC,OAAO,OACV,OAAM,OAAO,OAAO;;AAGxB,SAAO;;;;;;;;;ACfX,SAAgB,YACd,aACA,SACa;AACb,KAAI,CAAC,YAAa,QAAO;AAEzB,QAAO,OAAO,KAAK,QAAQ;EACzB,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,YAAY,aAAa,IAAI,QAAQ,cAAc;UAC5D;AACN,OAAI,aAAa;AACjB,OAAI,UAAU,gBAAgB,mBAAmB;AACjD,OAAI,IAAI,KAAK,UAAU,EAAE,OAAO,iCAAiC,CAAC,CAAC;AACnE;;AAGF,MAAI,kBAAkB,UAAU;GAC9B,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,aAAa,OAAO;GACxB,MAAM,cAAc,OAAO,QAAQ,IAAI,eAAe;AACtD,OAAI,YAAa,KAAI,UAAU,gBAAgB,YAAY;AAC3D,OAAI,IAAI,KAAK;AACb;;AAGF,MAAI,OAAO,gBAAgB,CAAC,OAAO,MAAM;AACvC,OAAI,aAAa;AACjB,OAAI,UAAU,gBAAgB,mBAAmB;AACjD,OAAI,IAAI,KAAK,UAAU,EAAE,OAAO,2BAA2B,CAAC,CAAC;AAC7D;;AAGF,QAAM,QAAQ,KAAK,IAAI;;;;;;;;;;;AClC3B,SAAgB,4BACd,KACA,QACA,MACA,SACM;AACN,KAAI,YAAY,eACd,QACA,MACA,YAAY,IAAI,aAAa,QAAQ,CACtC;;;;ACRH,MAAME,WAAS,YAAY,CAAC,eAAe,cAAc,CAAC;AAE1D,MAAM,eAAe;AAErB,MAAM,gBAAgB;AAEtB,MAAM,oBACJ;AACF,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAEzB,SAAS,SAAS,KAAqB,QAAgB,MAAqB;AAC1E,KAAI,aAAa;AACjB,KAAI,UAAU,gBAAgB,mBAAmB;AACjD,KAAI,IAAI,KAAK,UAAU,KAAK,CAAC;;AAG/B,SAAS,UAAU,KAAqB,QAAgB,SAAuB;AAC7E,UAAS,KAAK,QAAQ,EAAE,OAAO,SAAS,CAAC;;AAG3C,SAAS,eAAe,KAAsB;AAC5C,KAAI,eAAe,mBAAoB,QAAO;AAC9C,KAAI,eAAe,oBAAqB,QAAO;AAC/C,KAAI,eAAe,qBAAsB,QAAO;AAChD,QAAO;;AAGT,SAAS,uBAAuB,KAAqB,KAAoB;CACvE,MAAM,SAAS,eAAe,IAAI;AAClC,KAAI,UAAU,KAAK;AACjB,WAAO,MAAM,kCAAkC,IAAI;AACnD,YAAU,KAAK,QAAQ,iBAAiB;AACxC;;AAEF,WAAU,KAAK,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;;AAG1E,eAAe,aACb,KACA,MACkB;AAIlB,KAAI,SAAS,KAAA,KAAa,SAAS,QAAQ,OAAO,SAAS,SACzD,QAAO;CAET,MAAM,SAAmB,EAAE;AAC3B,YAAW,MAAM,SAAS,IACxB,QAAO,KAAK,MAAgB;AAE9B,KAAI,OAAO,WAAW,EAAG,QAAO,KAAA;CAChC,MAAM,OAAO,OAAO,OAAO,OAAO,CAAC,SAAS,OAAO;AACnD,KAAI,KAAK,WAAW,EAAG,QAAO,KAAA;AAC9B,QAAO,KAAK,MAAM,KAAK;;AAGzB,SAAgB,oBACd,OACiC;AACjC,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;CACxD,MAAM,MAAM;AACZ,KACE,OAAO,IAAI,aAAa,YACxB,IAAI,SAAS,WAAW,KACxB,IAAI,SAAS,SAAS,oBACtB,CAAC,kBAAkB,KAAK,IAAI,SAAS,CAErC,QAAO;AAET,KACE,OAAO,IAAI,aAAa,YACxB,IAAI,SAAS,WAAW,KACxB,IAAI,SAAS,SAAS,oBACtB,cAAc,KAAK,IAAI,SAAS,CAEhC,QAAO;CAET,IAAI,YAA2B;AAC/B,KAAI,OAAO,IAAI,cAAc,UAAU;AACrC,MAAI,IAAI,UAAU,WAAW,KAAK,QAAQ,KAAK,IAAI,UAAU,CAAE,QAAO;AACtE,cAAY,IAAI;YACP,IAAI,cAAc,KAAA,KAAa,IAAI,cAAc,KAC1D,QAAO;AAET,QAAO;EACL,UAAU,IAAI;EACd,UAAU,IAAI;EACd;EACD;;AAGH,SAAgB,cAAc,MAAsB;AAElD,QAAO,IAAI,KAAK,QAAQ,UAAU,OAAO,CAAC;;AAG5C,SAAgB,wBAAwB,UAA0B;CAIhE,MAAM,QAAQ,SAAS,QAAQ,mCAAmC,IAAI;CAGtE,MAAM,UAAU,mBAAmB,SAAS,CAAC,QAC3C,aACC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,SAAS,GAAG,CAAC,aAAa,GACtD;AACD,QAAO,wBAAwB,cAAc,MAAM,CAAC,qBAAqB;;AAG3E,SAAgB,mBAAmB,aAAoC;AACrE,QAAO,OACL,KACA,KACA,SACkB;EAClB,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,aAAa,KAAK,KAAK;UAChC;AACN,aAAU,KAAK,KAAK,oBAAoB;AACxC;;EAEF,MAAM,OAAO,oBAAoB,OAAO;AACxC,MAAI,CAAC,MAAM;AACT,aACE,KACA,KACA,qIACD;AACD;;AAEF,MAAI;AAEF,YAAS,KAAK,KAAK,EAAE,gBADN,MAAM,YAAY,QAAQ,QAAQ,KAAK,EACX,eAAe,CAAC;WACpD,KAAK;AACZ,0BAAuB,KAAK,IAAI;;;;AAKtC,SAAgB,kBAAkB,aAAoC;AACpE,QAAO,OAAO,KAAsB,QAAuC;EACzE,MAAM,gBAAgB,aAAa,KAAK,gBAAgB;AACxD,MAAI,CAAC,eAAe;AAClB,aAAU,KAAK,KAAK,wBAAwB;AAC5C;;EAGF,IAAI;AACJ,MAAI;AACF,iBAAc,MAAM,YAAY,aAAa,IAAI,cAAc;WACxD,KAAK;AACZ,0BAAuB,KAAK,IAAI;AAChC;;EAGF,MAAM,SAAS,YAAY,cAAc,aACvC,YAAY,eACZ;GACE,UAAU,YAAY;GACtB,UAAU,YAAY;GACtB,WAAW,YAAY;GACxB,CACF;EAED,MAAM,YAAY,SAAS,MACzB,IACD;AAED,MAAI;AAEF,YAAS,KAAK,KADC,MAAM,OAAO,KAAK,UAAU,CACjB;WACnB,KAAK;AACZ,0BAAuB,KAAK,IAAI;;;;AAKtC,SAAgB,oBAAoB,aAAoC;AACtE,QAAO,OAAO,KAAsB,QAAuC;EACzE,MAAM,OAAO,aAAa,KAAK,OAAO;AACtC,MAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,EAAE;AACrC,aAAU,KAAK,KAAK,0BAA0B;AAC9C;;EAGF,MAAM,aAAa,IAAI,iBAAiB;AACxC,MAAI,KAAK,eAAe,WAAW,OAAO,CAAC;EAE3C,IAAI;AACJ,MAAI;AACF,cAAW,MAAM,YAAY,MAAM,IACjC,MACA,WAAW,OACZ;WACM,KAAK;AACZ,0BAAuB,KAAK,IAAI;AAChC;;EAGF,MAAM,EAAE,QAAQ,SAAS;AACzB,MAAI,aAAa;AACjB,MAAI,UAAU,gBAAgB,OAAO,SAAS;AAC9C,MAAI,UAAU,kBAAkB,OAAO,OAAO,UAAU,CAAC;AACzD,MAAI,UACF,uBACA,wBAAwB,OAAO,SAAS,CACzC;AACD,MAAI,UACF,yBACA,KAAK,UAAU;GACb,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,WAAW,OAAO;GAClB,WAAW,OAAO;GACnB,CAAC,CACH;AAED,WAAS,QAAQ,KAAkD,CAAC,KAClE,IACD;;;AAIL,SAAS,aAAa,KAAsB,MAAkC;AAM5E,QAJE,IAGA,SACqB;;;;AC9OzB,SAAgB,yBAAyB,KAAgB;CACvD,MAAM,EAAE,gBAAgB;AAExB,6BACE,KACA,QACA,6BACA,mBAAmB,YAAY,CAChC;AAED,6BACE,KACA,OACA,4CACA,kBAAkB,YAAY,CAC/B;AAED,6BACE,KACA,OACA,sBACA,oBAAoB,YAAY,CACjC;;;;AC3BH,eAAsB,mBAAmB;CAEvC,MAAM,WAAW,IAAI,gBAAgB;AAErC,OAAM,YAAY,mBAAmB,SAAS;AAE9C,QAAO,YAAY,WAAW;;;;ACWhC,SAAS,WAAW,SAAiB,OAAuB;AAE1D,QAAO,GAAG,QAAQ,YAAY,MAAM,oBADtB,IAAI,MAAM,EAAC,aAAa,CAAC,QAAQ,SAAS,IAAI;;AAI9D,eAAe,WAAW,GAA6B;AACrD,KAAI;AACF,QAAMC,SAAG,KAAK,EAAE;AAChB,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,kBACP,SACA,KACA,KACA,QACM;CACN,MAAM,SAAS;CAQf,MAAM,WACJ,OAAO,OAAO,aAAa,WACvB,SAAS,OAAO,UAAU,GAAG,GAC7B,OAAO,OAAO,aAAa,WACzB,OAAO,WACP;AAER,QAAO,MACL,yCAAyC,QAAQ,SAAS,OAAO,QAAQ,GAAG,YAAY,OAAO,YAAY,GAAG,WAAW,OAAO,WAAW,GAAG,aAAa,IAAI,SAChK;AAED,KAAI,OAAO,SAAS,SAAS,IAAI,WAAW,GAAG;EAC7C,MAAM,YAAY,WAAW;EAC7B,MAAM,QAAQ,KAAK,IAAI,GAAG,YAAY,IAAI;EAC1C,MAAM,MAAM,KAAK,IAAI,IAAI,QAAQ,YAAY,IAAI;EACjD,MAAM,SAAS,IAAI,MAAM,OAAO,UAAU;EAC1C,MAAM,KAAK,IAAI,MAAM,WAAW,YAAY,EAAE;EAC9C,MAAM,QAAQ,IAAI,MAAM,YAAY,GAAG,IAAI;AAC3C,SAAO,MACL,kDAAkD,SAAS,KAAK,OAAO,GAAG,GAAG,GAAG,QACjF;OAED,QAAO,MACL,mEAAmE,IAAI,MAAM,GAAG,IAAK,GACtF;;;;;;;;;;AAYL,eAAsB,iBACpB,SACA,QACe;CACf,MAAM,QAAQ,MAAM,kBAAkB,QAAQ;AAC9C,KAAI,UAAU,MAAM;AAClB,SAAO,KACL,uCAAuC,QAAQ,sBAChD;AACD;;AAEF,KAAI,UAAA,GAA4B;AAEhC,KAAI,CAAC,iBAAiB,MAAM,CAC1B,OAAM,IAAI,MACR,kDAAkD,MAAM,OAAO,UAChE;CAGH,MAAM,YAAY,WAAW,SAAS,MAAM;AAC5C,QAAO,KACL,gCAAgC,QAAQ,UAAU,MAAM,oBAAqC,YAC9F;AAED,OAAMA,SAAG,OAAO,SAAS,UAAU;CAEnC,IAAI;AACJ,KAAI;EACF,MAAM,CAAC,WAAW,UAAU,MAAM,QAAQ,IAAI,CAC5C,iBAAiB,MAA0B,EAC3C,WAAW,MAA0B,CACtC,CAAC;EACF,MAAM,eAAgB,UACnB;EACH,MAAM,KAAK,IAAI,aAAa,UAAU;AACtC,MAAI;AACF,SAAM,GAAG;AAET,SAAM,OADO,MAAM,OAAO,EAAE,IAAI,CAAC,EAChB,MAAM;YACf;AACR,SAAM,GAAG,OAAO;;UAEX,KAAK;AACZ,QAAM,SAAS,SAAS,WAAW,KAAK,OAAO;AAC/C,QAAM;;AAGR,KAAI;EAEF,MAAM,iBADa,MAAM,iBAAA,GAAkC,EAExD;EACH,MAAM,KAAK,IAAI,cAAc,SAAS,EAAE,mBAAmB,OAAO,CAAC;AACnE,MAAI;AACF,SAAM,GAAG;AACT,OAAI;AACF,UAAM,GAAG,KAAK,yCAAyC;YAChD,QAAQ;AACf,WAAO,KACL,uEAAuE,OAAO,OAAO,GACtF;;AAEH,OAAI;AACF,UAAM,GAAG,KAAK,IAAI;YACX,SAAS;AAChB,sBAAkB,SAAS,KAAK,SAAS,OAAO;AAChD,UAAM;;YAEA;AACR,SAAM,GAAG,OAAO;;UAEX,KAAK;AACZ,QAAM,SAAS,SAAS,WAAW,KAAK,OAAO;AAC/C,QAAM;;AAGR,QAAO,KACL,mCAAmC,QAAQ,gCAAgC,UAAU,0DACtF;;AAGH,eAAe,SACb,SACA,WACA,eACA,QACe;AACf,KAAI;AACF,MAAI,MAAM,WAAW,QAAQ,CAC3B,OAAMA,SAAG,GAAG,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AAExD,MAAI,MAAM,WAAW,UAAU,CAC7B,OAAMA,SAAG,OAAO,WAAW,QAAQ;UAE9B,aAAa;AACpB,SAAO,MACL,wDAAwD,QAAQ,oBAAoB,OAAO,cAAc,CAAC,oBAAoB,OAAO,YAAY,CAAC,8BAA8B,UAAU,GAC3L;AACD;;AAEF,QAAO,MACL,2CAA2C,QAAQ,qBAAqB,UAAU,oBAAoB,OAAO,cAAc,GAC5H;;;;AC9KH,MAAM,SAAS,YAAY,CAAC,eAAe,SAAS,CAAC;;;;;;AAgBrD,eAAsB,WACpB,UAAyB,EAAE,EACF;CACzB,MAAM,EACJ,aACA,kBAAkB,OAClB,UAAU,uBACR;CAEJ,MAAM,aAAa,IAAI,eAAe,aAAa,EACjD,QACD,CAAC;CAGF,MAAM,kBAAkB,MAAM,WAAW,aAAa;AAEtD,KAAI,CAAC,mBAAmB,gBACtB,OAAM,IAAI,MACR,yFAED;AAGH,KAAI,CAAC,gBACH,QAAO,KAAK,0DAA0D;CAGxE,MAAM,eAAe,MAAM,IAAI,qBAAqB,CACjD,mBAAmB,WAAW,CAC9B,OAAO;CAEV,MAAM,SAAS,MAAM,IAAI,cAAc,eAAe,EAAE,CAAC,CACtD,WAAW,aAAa,CACxB,YAAY,QAAQ,CACpB,OAAO;AAEV,QAAO,KAAK,0CAA0C,aAAa,IAAI;AAEvE,QAAO;;;;;;;;AAST,SAAgB,sBACd,QACA,kBACc;AACd,QAAO;EACL,QAAQ,OAAO;EACf,UAAU,wBAAwB,iBAAiB;EACpD;;;;AClBH,MAAM,gBAAgB,YAAY,CAAC,cAAc,CAAC;AAElD,MAAM,WAAY,QAAQ,IAAI,aAAuC;AACrE,YAAY,SAAS;AAErB,OAAO,QAAQ;AAGf,MAAM,mCAAmC;AACzC,MAAM,2CAA2C;AACjD,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAEnC,IAAI,QAAQ,IAAI,YAAY;AAC1B,eAAc,KACZ,qCACA,QAAQ,IAAI,WACb;AACD,QAAO,KAAK;EACV,KAAK,QAAQ,IAAI;EACjB,aAAa,QAAQ,IAAI;EAGzB,SACE,QAAQ,IAAI,mBACX,QAAQ,IAAI,sBACT,IAAI,QAAQ,IAAI,wBAChB,KAAA;EACP,CAAC;;AAGJ,MAAM,eAAe,QAAQ,IAAI,OAAO,OAAO,QAAQ,IAAI,KAAK,GAAG;AAGnE,MAAM,yBAAyB;;;;;;AAO/B,SAAgB,gBAAgB,MAAgC;AAC9D,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,SAAS,IAAI,cAAc;AACjC,SAAO,KAAK,UAAU,QAA+B;AACnD,OAAI,IAAI,SAAS,gBAAgB,IAAI,SAAS,SAC5C,SAAQ,MAAM;OAEd,QAAO,IAAI;IAEb;AACF,SAAO,KAAK,mBAAmB;AAC7B,UAAO,YAAY,QAAQ,KAAK,CAAC;IACjC;AAGF,SAAO,OAAO;GAAE;GAAM,MAAM;GAAM,CAAC;GACnC;;AAGJ,eAAe,kBACb,WACA,YACA,QACiB;AACjB,KAAI,WAAY,QAAO;AACvB,MAAK,IAAI,IAAI,GAAG,IAAI,wBAAwB,KAAK;EAC/C,MAAM,YAAY,YAAY;AAC9B,MAAI,MAAM,gBAAgB,UAAU,EAAE;AACpC,OAAI,cAAc,UAChB,QAAO,KACL,QAAQ,UAAU,mCAAmC,UAAU,GAChE;AAEH,UAAO;;;AAKX,QAAO;;AAGT,eAAe,WACb,YACA,SACA,QACA;AAKA,KAAI,QAAQ,cACV,SAAQ,uBAAuB,QAAQ,cAAc;CAGvD,MAAM,EACJ,KACA,WAAW,EAAE,EACb,eAAe,EAAE,EACjB,SAAS,kBACP;AACJ,QAAO,QAAQ;CACf,MAAM,SAAS,QAAQ,UAAU,QAAQ,IAAI;CAG7C,MAAM,gBAAgB,UAAU;CAEhC,MAAM,eAAe,QAAQ,IAAI;CACjC,MAAM,mBACJ,CAAC,gBAAgB,CAAC,cAAc,aAAa,GACzC,0BACA;CACN,MAAM,qBACJ,CAAC,UAAU,CAAC,cAAc,OAAO,GAAG,gBAAgB;CAMtD,MAAM,aAAa,CAAC,kBAAkB,mBAAmB,CAAC,QACvD,MAAmB,MAAM,KAC3B;CACD,MAAM,iCAAiB,IAAI,KAAqB;AAEhD,KAAI,QAAQ,mBAAmB,KAAA,KAAa,WAAW,SAAS,GAAG;AACjE,MAAI,QAAQ,cACV,QAAO,KACL,+GACD;AAEH,SAAO,KACL,uBAAuB,QAAQ,eAAe,yDAAyD,QAAQ,eAAe,GAC/H;AACD,OAAK,MAAM,OAAO,YAAY;AAC5B,SAAMC,SAAG,GAAG,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AAClD,UAAO,KAAK,yBAAyB,MAAM;;YAEpC,QAAQ,mBAAmB,KAAA,GAAW;AAC/C,OAAK,MAAM,OAAO,YAAY;GAC5B,MAAM,QAAQ,MAAM,kBAAkB,IAAI;AAC1C,OAAI,UAAU,KAAM,gBAAe,IAAI,KAAK,MAAM;;AAGpD,MAAI,QAAQ,cACV,MAAK,MAAM,CAAC,KAAK,UAAU,gBAAgB;AACzC,OAAI,UAAA,GAA4B;AAChC,SAAM,iBAAiB,KAAK,OAAO;GAEnC,MAAM,QAAQ,MAAM,kBAAkB,IAAI;AAC1C,OAAI,UAAU,KAAM,gBAAe,IAAI,KAAK,MAAM;;MAGpD,MAAK,MAAM,CAAC,KAAK,UAAU,gBAAgB;AACzC,OAAI,UAAA,GAA4B;AAChC,UAAO,KACL,sBAAsB,IAAI,sBAAsB,MAAM,+HACvD;;;CAKP,SAAS,yBAAyB,KAA+B;AAC/D,MAAI,QAAQ,mBAAmB,KAAA,EAAW,QAAO,QAAQ;EACzD,MAAM,WAAW,eAAe,IAAI,IAAI;AACxC,MAAI,aAAa,KAAA,EAAW,QAAA;AAC5B,MAAI,CAAC,iBAAiB,SAAS,CAC7B,OAAM,IAAI,MACR,kCAAkC,IAAI,eAAe,WACtD;AAEH,SAAO;;CAGT,MAAM,qBAAqB,mBACvB,yBAAyB,iBAAiB,GAC1C;CACJ,MAAM,uBAAuB,qBACzB,yBAAyB,mBAAmB,GAC5C;CAQJ,MAAM,SAAoE,EACxE,SAAS,KAAA,GACV;CAKD,MAAM,SAAS,UADb,QAAQ,cAAcC,OAAK,KAAK,QAAQ,KAAK,EAAE,yBAAyB,CACtC;CACpC,MAAM,cAAc,QAAQ,IAAI,mBAAmB,OAAO;CAC1D,MAAM,mBAAmB,QAAQ,IAAI;CACrC,MAAM,sBACJ,QAAQ,uBAAuB,QAAQ,IAAI,0BAA0B;CACvE,IAAI;AAEJ,KAAI,aAAa;AAEf,WAAS,gBAAgB,OAAO,KAAK,IAAI;AACzC,eAAa,IAAI,kBAAkB,EAAE,aAAa,CAAC;AACnD,oBAAkB,MAAM,IAAI,CAAC,SAAS,MAAM;GAC1C,MAAM,OAAO,EAAE,MAAM;AACrB,OAAI,CAAC,SAAS,SAAS,KAAK,CAC1B,UAAS,KAAK,KAAK;IAErB;;CAGJ,MAAM,gBAAgB,OAAO,MAAM,CAAC,UAAU,CAAC;CAC/C,MAAM,mBAAmB,OAAO,qBAA0C;EACxE,MAAM,WAAW,IAAI,UAAU;EAC/B,MAAM,UAAU,IAAI,gBAAgB,CACjC,aAAa,SAAS,CACtB,mBACC,wBAAwB;GACtB;GACA;GACA,GAAGC;GACH,GAAGC;GACJ,CAAC,CACH,CACA,kBAAkB,cAAc,YAAY,CAC5C,oBAAoB,CACpB,WAAW,cAAc;EAE5B,MAAM,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,IAAI,GAAG;AAC3E,MAAI,CAAC,MAAM,iBAAiB,IAAI,mBAAmB,GAAG;AACpD,WAAQ,mBAAmB,EAAE,kBAAkB,CAAC;AAChD,UAAO,KAAK,mCAAmC,mBAAmB;;AAGpE,MAAI,gBAAgB,cAAc,aAAa,EAAE;GAK/C,MAAM,SAAS,IAAI,OAAiB,EAClC,SAAS,IAAI,gBAAgB,EAAE,MAFpB,IAAI,KAAK,EAAE,kBAHC,aAAa,SAAS,IAAI,GAC/C,eACA,GAAG,aAAa,mBACsB,CAAC,EAEJ,CAAC,EACvC,CAAC;AACF,WAAQ,WAAW,OAAO;AAC1B,UAAO,KAAK,uCAAuC;SAC9C;AACL,OAAI,CAAC,oBAAoB,uBAAuB,KAC9C,OAAM,IAAI,MAAM,wCAAwC;GAE1D,MAAM,EAAE,WAAW,MAAM,iBAAiB,mBAAmB;GAE7D,MAAM,SAAS,IAAI,OAAiB,EAClC,SAAS,IAAI,sBAFA,IAAI,OAAO,iBAAiB,CAEC,EAC3C,CAAC;AACF,WAAQ,WAAW,OAAO;AAC1B,UAAO,KACL,mBAAmB,mBAAmB,2BAA2B,mBAClE;;AAGH,UAAQ,iBAAiB,YAAY;AACnC,OAAI,OAAO,QAAS,OAAM,OAAO,QAAQ,SAAS;IAClD;AAEF,MAAI,cAAc,oBAChB,SAAQ,wBAAwB,WAAW,oBAAoB;EAGjE,MAAM,gBAAgB,IAAI,sBAAsB,CAAC,mBAC/C,QACD;AAED,MAAI,QAAQ;GACV,MAAM,eAAe,sBACnB,QACA,QAAQ,UAAU,kBACnB;AACD,iBAAc,WAAW,aAAa;;EAGxC,MAAM,SAAS,MAAM,cAAc,aAAa;AAEhD,MAAI,OAAO,eAAe;AACA,OAAI,uBAAuB,OAAO,cAAc,CACxD,OAAO;AACvB,iBAAc,KAAK,0CAA0C;;AAG/D,SAAO;;CAGT,IAAI,kBAAsC,KAAA;CAI1C,MAAM,WAAW,QAAQ,KAAK;CAC9B,MAAM,aAAa,iBAAiB,OAAO;CAC3C,MAAM,OAAO,MACT,MAAM,gBAAgB,QAAQ,KAAK,EAAE,WAAW,GAChD,KAAA;AAGJ,KAAI,CAAC,QAAQ,qBACX,UAAS,KAAK,SAAS;CAIzB,MAAM,iBAAmC,EAAE;AAC3C,KAAI,KACF,gBAAe,KAAK,kBAAkB,MAAM,KAAK,CAAC;KAElD,gBAAe,KAAK,IAAI,qBAAqB,CAAC;AAEhD,KAAI,YAAY;AACd,iBAAe,KAAK,WAAW;AAC/B,oBAAkB,MAAM,IAAI,CAAC,SAAS,MAAM;GAC1C,MAAM,OAAO,EAAE,MAAM;AACrB,OAAI,CAAC,SAAS,SAAS,KAAK,CAC1B,UAAS,KAAK,KAAK;IAErB;;CAGJ,MAAM,YAAY,OAAO,MAAM,CAAC,cAAc,CAAC;CAK/C,IAAI;AAGJ,KAAI,sBAAsB,yBAAyB,MAAM;EACvD,MAAM,EAAE,QAAQ,oBACd,MAAM,iBAAiB,qBAAqB;AAC9C,mBAAiB,qBACf,IAAI,gBAAgB,oBAAoB,mBAAmB;;CAG/D,MAAM,MAAM,MAAM,sBAChB,kBACA;EACE,MAAM;EACN,QAAQ;EACR;EACA,OAAO,QAAQ;EACf,gBAAgB,eAAe,SAAS,IAAI,iBAAiB,KAAA;EACnD;EACV,iBAAiB,QAAQ;EACzB,YAAY,EACV,wBAAwB,CAACC,iBAAsB,EAChD;EACD,YACE,QAAQ,cACRH,OAAK,KAAK,QAAQ,KAAK,EAAE,yBAAyB;EACpD,KAAK,QAAQ,OAAO;EACpB,QAAQ;EACR,8BAA8B,QAAQ;EACvC,EACD,cACD;AACD,QAAO,UAAU;AAEjB,0BAAyB,IAAI;AAE7B,KAAI,QAAQ,IAAI,WAGd,KAAI,YAAY,wBAAwB,OAAO;CAGjD,MAAM,EAAE,QAAQ,gBAAgB,0BAA0B;AAG1D,KAAI,YAAY;EACd,MAAM,2BAA2B,IAAI,yBAAyB;GAC5D,oBAAoB;GACpB;GACA;GACD,CAAC;AAEF,2BAAyB,yBAAyB;AAChD,kBAAe,kCAAkC,CAAC,MAAM,OAAO,MAAM;IACrE;EAEF,MAAM,mBAAmB,IAAI,iBAAiB;GAC5C,cAAc,KAAA;GACd,gBAAgB,KAAA;GAChB,eAAe;GACf;GACA,aAAa,IAAI;GACjB,MAAM,eAAe,aAAa;GAClC;GACD,CAAC;AAEG,iBACF,yBAAyB,kBAAkB,WAAW,MAAM,CAC5D,WAAW,eAAe,cAAc,CAAC,CACzC,OAAO,UAAmB;AACzB,UAAO,MAAM,gDAAgD,MAAM;IACnE;;AAIN,KAAI,QAAQ,OAAO;AACjB,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,sDAAsD;AAGxE,oBAAkB,MAAM,gBAAgB,QAAQ,QAAQ,OAAO,WAAW;;AAI5E,KAAI,KACF,KAAI,YAAY,mBAAmB,KAAK,YAAY;AAItD,KAAI,aAAa,SAAS,EACxB,MAAK,MAAM,kBAAkB,cAAc;EACzC,IAAI;AAEJ,MAAI;GACF,MAAM,EAAE,gBAAgB;GACxB,MAAM,SAAS,cAAc,eAAe;AAC5C,aAAU,OAAO;GACjB,MAAM,aAAa,gBAAgB,QAAQ,GAAG,OAAO,YAAY;AACjE,SAAM,YAAY,IAAI,YAAY,kBAAkB,QAAQ,QAAQ,EAAE;IACpE,MAAM;IACN,YAAY,EAAE,KAAK,OAAO,iBAAiB;IAC5C,CAAC;AACF,UAAO,MAAM,uCAAuC,eAAe;WAC5D,OAAO;AACd,OACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,iBAAiB,EACxC;AACA,WAAO,MACL,+CACA,eACD;AACD,cAAU,eAAe,MAAM,IAAI,CAAC,KAAK;SAEzC,QAAO,MACL,6DACA,gBACA,MACD;YAEK;AAER,OAAI,CAAC,mBAAmB,QAEtB,mBAAkB,GADD,QAAQ,QAAQ,UAAU,OACb,eAAe,WAAW,KAAK;;;AAMrE,QAAO;EACL;EACA;EACA,SAAS;EACT;EACA,MAAM;EACP;;AAGH,MAAa,mBAAmB,OAC9B,UAA8B,EAAE,KACA;CAChC,MAAM,gBAAgB,QAAQ,QAAQ;CACtC,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,aAAa,MAAM,kBACvB,eACA,QAAQ,cAAc,OACtB,OACD;CAGD,MAAM,eAAe,MAAM,kBAAkB;CAE7C,MAAM,+BAA+B,MAAM,aAAa,gBACtD,kCACA,QAAQ,gCACN,yCACH;AAED,SAAQ,+BAA+B;CAEvC,MAAM,oBACJ,QAAQ,UAAU,qBACjB,MAAM,aAAa,gBAClB,oBACA,2BACD;AACH,SAAQ,WAAW;EAAE,GAAG,QAAQ;EAAU;EAAmB;AAE7D,QAAO,KACL,yBACA,KAAK,UACH;EACE,kCAAkC;EAClC,oBAAoB;EACrB,EACD,MACA,EACD,CACF;CAGD,IAAI,SAAyB;AAC7B,KAAI;AACF,WAAS,MAAM,WAAW,QAAQ,SAAS;UACpC,GAAG;AACV,SAAO,KAAK,8CAA8C,EAAE;AAC5D,MAAI,QAAQ,UAAU,gBACpB,OAAM,IAAI,MACR,sEACD;;AAIL,KAAI;AACF,SAAO,MAAM,WAAW,YAAY,SAAS,OAAO;UAC7C,GAAG;AACV,SAAO,iBAAiB,EAAE;AAC1B,SAAO,MAAM,uBAAuB,EAAE;AACtC,QAAM;;;AAMV,IAAI,OAAO,KAAK,KACd,OAAM,kBAAkB"}

package/dist/server.d.mts

@@ -68,6 +68,26 @@ type StartServerOptions = {
    * instrumentation.start() reads the global provider via metrics.getMeter().
    */
   meterProvider?: MeterProvider;
+  /**
+   * When true, on startup any local PGLite data dirs whose `PG_VERSION` is
+   * older than the bundled PGLite are migrated to the current version
+   * (backup → dump → restore) before the server boots. When false, the
+   * server logs a warning and runs against the legacy data using the
+   * matching legacy PGLite module.
+   *
+   * Triggered by the `--migrate-pglite` CLI flag or `PH_MIGRATE_PGLITE=true`.
+   */
+  migratePglite?: boolean;
+  /**
+   * Force a specific PGLite-embedded PG major (16 or 17) on startup.
+   *
+   * **Destructive**: any existing local PGLite data dirs are wiped before
+   * the chosen PGLite re-`initdb`'s them at the requested version. Postgres
+   * URLs are unaffected. Takes precedence over `migratePglite`.
+   *
+   * Triggered by `PH_FORCE_PG_VERSION=16|17`.
+   */
+  forcePgVersion?: 16 | 17;
 };
 type SwitchboardReactor = {
   defaultDriveUrl: string | undefined;

package/dist/server.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.mts","names":[],"sources":["../src/types.ts","../src/server.mts"],"mappings":";;;;;;;KAMY,cAAA;EACV,IAAA;EACA,cAAA;EACA,WAAA;AAAA;AAAA,KAGU,eAAA;EALV,+DAOA,WAAA;EALA;;;AAGF;EAOE,eAAA;EAGA,OAAA,WARA;EAWA,iBAAA;AAAA;AAAA,KAGU,kBAAA;EACV,UAAA;EACA,IAAA;EAFU;;;;;EAQV,UAAA;EACA,GAAA;EACA,MAAA;EACA,KAAA,GAAQ,UAAA;EACR,QAAA;EACA,YAAA;EACA,KAAA;IAEM,OAAA;IACA,QAAA;EAAA;EAIN,IAAA;IACE,OAAA;IACA,MAAA;IACA,KAAA;IACA,MAAA;EAAA;EARI;;;;;EAeN,QAAA,GAAW,eAAA;EACX,GAAA;EACA,eAAA,GAAkB,GAAA;EAClB,oBAAA;EACA,4BAAA;EAFkB;;;;;EAQlB,mBAAA;EACA,MAAA,GAAS,OAAA;EAOO;;;AAGlB;;;EAHE,aAAA,GAAgB,aAAA;AAAA;AAAA,KAGN,kBAAA;EACV,eAAA;EACA,OAAA,EAAS,cAAA,EAED;EAAR,MAAA,EAAQ,OAAA;EAKJ;;;;EAAJ,IAAA;AAAA;;;;;;;;iBCKc,eAAA,CAAgB,IAAA,WAAe,OAAA;AAAA,cA+TlC,gBAAA,GACX,OAAA,GAAS,kBAAA,KACR,OAAA,CAAQ,kBAAA"}
+{"version":3,"file":"server.d.mts","names":[],"sources":["../src/types.ts","../src/server.mts"],"mappings":";;;;;;;KAMY,cAAA;EACV,IAAA;EACA,cAAA;EACA,WAAA;AAAA;AAAA,KAGU,eAAA;EALV,+DAOA,WAAA;EALA;;;AAGF;EAOE,eAAA;EAGA,OAAA,WARA;EAWA,iBAAA;AAAA;AAAA,KAGU,kBAAA;EACV,UAAA;EACA,IAAA;EAFU;;;;;EAQV,UAAA;EACA,GAAA;EACA,MAAA;EACA,KAAA,GAAQ,UAAA;EACR,QAAA;EACA,YAAA;EACA,KAAA;IAEM,OAAA;IACA,QAAA;EAAA;EAIN,IAAA;IACE,OAAA;IACA,MAAA;IACA,KAAA;IACA,MAAA;EAAA;EARI;;;;;EAeN,QAAA,GAAW,eAAA;EACX,GAAA;EACA,eAAA,GAAkB,GAAA;EAClB,oBAAA;EACA,4BAAA;EAFkB;;;;;EAQlB,mBAAA;EACA,MAAA,GAAS,OAAA;EAOO;;;;;AAuBlB;EAvBE,aAAA,GAAgB,aAAA;;;;;;;;;;EAUhB,aAAA;;;;ACgBF;;;;;AA0aA;EDhbE,cAAA;AAAA;AAAA,KAGU,kBAAA;EACV,eAAA;EACA,OAAA,EAAS,cAAA,EC6aD;ED3aR,MAAA,EAAQ,OAAA;EC0aC;;;;EDraT,IAAA;AAAA;;;;;;;;iBCNc,eAAA,CAAgB,IAAA,WAAe,OAAA;AAAA,cA0alC,gBAAA,GACX,OAAA,GAAS,kBAAA,KACR,OAAA,CAAQ,kBAAA"}

package/dist/server.mjs

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-import { n as startSwitchboard, t as isPortAvailable } from "./server-8U7q7B7r.mjs";
+import { n as startSwitchboard, t as isPortAvailable } from "./server-DVr-c0CZ.mjs";
 import "./utils-DFl0ezBT.mjs";
 export { isPortAvailable, startSwitchboard };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@powerhousedao/switchboard",
   "type": "module",
-  "version": "6.0.0-dev.212",
+  "version": "6.0.0-dev.214",
   "main": "dist/index.mjs",
   "exports": {
     ".": {
@@ -32,6 +32,9 @@
   "description": "",
   "dependencies": {
     "@electric-sql/pglite": "0.3.15",
+    "@electric-sql/pglite-tools": "0.2.20",
+    "pglite-legacy-02": "npm:@electric-sql/pglite@0.2.17",
+    "pglite-tools-legacy-02": "npm:@electric-sql/pglite-tools@0.2.4",
     "@openfeature/core": "1.9.1",
     "@openfeature/env-var-provider": "0.3.1",
     "@openfeature/server-sdk": "1.19.0",
@@ -47,15 +50,15 @@
     "kysely-pglite-dialect": "1.2.0",
     "pg": "8.18.0",
     "vite": "8.0.8",
-    "@powerhousedao/config": "6.0.0-dev.212",
-    "@powerhousedao/shared": "6.0.0-dev.212",
-    "@powerhousedao/opentelemetry-instrumentation-reactor": "6.0.0-dev.212",
-    "@powerhousedao/reactor-api": "6.0.0-dev.212",
-    "@powerhousedao/vetra": "6.0.0-dev.212",
-    "@powerhousedao/reactor-attachments": "6.0.0-dev.212",
-    "@powerhousedao/reactor": "6.0.0-dev.212",
-    "@renown/sdk": "6.0.0-dev.212",
-    "document-model": "6.0.0-dev.212"
+    "@powerhousedao/config": "6.0.0-dev.214",
+    "@powerhousedao/opentelemetry-instrumentation-reactor": "6.0.0-dev.214",
+    "@powerhousedao/shared": "6.0.0-dev.214",
+    "@powerhousedao/reactor": "6.0.0-dev.214",
+    "@powerhousedao/vetra": "6.0.0-dev.214",
+    "@powerhousedao/reactor-api": "6.0.0-dev.214",
+    "@powerhousedao/reactor-attachments": "6.0.0-dev.214",
+    "document-model": "6.0.0-dev.214",
+    "@renown/sdk": "6.0.0-dev.214"
   },
   "devDependencies": {
     "@types/express": "^4.17.25",

package/test/pglite-dialect.test.ts

@@ -0,0 +1,40 @@
+import { PGlite } from "@electric-sql/pglite";
+import { Kysely, sql } from "kysely";
+import { afterEach, describe, expect, it } from "vitest";
+import { ClosablePGliteDialect } from "../src/pglite-dialect.js";
+
+describe("ClosablePGliteDialect", () => {
+  const created: PGlite[] = [];
+
+  afterEach(async () => {
+    for (const p of created.splice(0)) {
+      if (!p.closed) await p.close();
+    }
+  });
+
+  it("closes the underlying PGlite when the Kysely instance is destroyed", async () => {
+    const pglite = new PGlite();
+    created.push(pglite);
+    const db = new Kysely({ dialect: new ClosablePGliteDialect(pglite) });
+
+    // Kysely lazy-inits the driver on first query; no query means destroy
+    // skips the driver, which would defeat the purpose of this test.
+    await sql`select 1`.execute(db);
+    expect(pglite.closed).toBe(false);
+
+    await db.destroy();
+    expect(pglite.closed).toBe(true);
+  });
+
+  it("is idempotent if the PGlite is already closed", async () => {
+    const pglite = new PGlite();
+    created.push(pglite);
+    const db = new Kysely({ dialect: new ClosablePGliteDialect(pglite) });
+
+    await sql`select 1`.execute(db);
+    await pglite.close();
+    expect(pglite.closed).toBe(true);
+
+    await expect(db.destroy()).resolves.toBeUndefined();
+  });
+});

package/test/pglite-version.test.ts

@@ -0,0 +1,37 @@
+import { describe, expect, it } from "vitest";
+import { parseForcePgVersion } from "../src/pglite-version.js";
+
+describe("parseForcePgVersion", () => {
+  it("returns null for undefined", () => {
+    expect(parseForcePgVersion(undefined)).toBeNull();
+  });
+
+  it("returns null for empty string", () => {
+    expect(parseForcePgVersion("")).toBeNull();
+  });
+
+  it("returns null for whitespace-only string", () => {
+    expect(parseForcePgVersion("   ")).toBeNull();
+  });
+
+  it("returns 16 for '16'", () => {
+    expect(parseForcePgVersion("16")).toBe(16);
+  });
+
+  it("returns 17 for '17'", () => {
+    expect(parseForcePgVersion("17")).toBe(17);
+  });
+
+  it("throws for unsupported major", () => {
+    expect(() => parseForcePgVersion("15")).toThrow(/PH_FORCE_PG_VERSION/);
+    expect(() => parseForcePgVersion("15")).toThrow(/got: 15/);
+  });
+
+  it("throws for non-numeric", () => {
+    expect(() => parseForcePgVersion("foo")).toThrow(/PH_FORCE_PG_VERSION/);
+  });
+
+  it("throws for non-integer numeric", () => {
+    expect(() => parseForcePgVersion("16.5")).toThrow(/PH_FORCE_PG_VERSION/);
+  });
+});

package/dist/server-8U7q7B7r.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-8U7q7B7r.mjs","names":["logger","vetraDocumentModels","documentModels","vetraProcessorFactory"],"sources":["../src/attachments/auth.ts","../src/attachments/mount-auth.ts","../src/attachments/routes.ts","../src/attachments/index.ts","../src/feature-flags.ts","../src/renown.ts","../src/server.mts"],"sourcesContent":["import type { AuthService } from \"@powerhousedao/reactor-api\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\n\nexport type NodeHandler = (\n  req: IncomingMessage,\n  res: ServerResponse,\n) => Promise<void> | void;\n\n/**\n * Wrap a Node-style handler so that, when `authService` is provided and auth is\n * enabled, the request must carry a verifiable Bearer token.\n */\nexport function requireAuth(\n  authService: AuthService | undefined,\n  handler: NodeHandler,\n): NodeHandler {\n  if (!authService) return handler;\n\n  return async (req, res) => {\n    let result;\n    try {\n      result = await authService.verifyBearer(req.headers.authorization);\n    } catch {\n      res.statusCode = 500;\n      res.setHeader(\"Content-Type\", \"application/json\");\n      res.end(JSON.stringify({ error: \"Internal authentication error\" }));\n      return;\n    }\n\n    if (result instanceof Response) {\n      const body = await result.text();\n      res.statusCode = result.status;\n      const contentType = result.headers.get(\"content-type\");\n      if (contentType) res.setHeader(\"Content-Type\", contentType);\n      res.end(body);\n      return;\n    }\n\n    if (result.auth_enabled && !result.user) {\n      res.statusCode = 401;\n      res.setHeader(\"Content-Type\", \"application/json\");\n      res.end(JSON.stringify({ error: \"Authentication required\" }));\n      return;\n    }\n\n    await handler(req, res);\n  };\n}\n","import type { API } from \"@powerhousedao/reactor-api\";\nimport { requireAuth, type NodeHandler } from \"./auth.js\";\n\nexport type HttpMethod = \"DELETE\" | \"GET\" | \"POST\" | \"PUT\";\n\n/**\n * Mount a Node-style attachment route with `requireAuth` applied unconditionally.\n * When `api.authService` is undefined (auth disabled), `requireAuth` returns the\n * handler unchanged — that is the only way to opt out. To register a route\n * without auth wrapping you must call `api.httpAdapter.mountNodeRoute` directly.\n */\nexport function mountAuthenticatedNodeRoute(\n  api: Pick<API, \"httpAdapter\" | \"authService\">,\n  method: HttpMethod,\n  path: string,\n  handler: NodeHandler,\n): void {\n  api.httpAdapter.mountNodeRoute(\n    method,\n    path,\n    requireAuth(api.authService, handler),\n  );\n}\n","import {\n  AttachmentNotFound,\n  InvalidAttachmentRef,\n  ReservationNotFound,\n  type AttachmentBuildResult,\n  type ReserveAttachmentOptions,\n} from \"@powerhousedao/reactor-attachments\";\nimport type { AttachmentHash } from \"@powerhousedao/reactor\";\nimport { childLogger } from \"document-model\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { Readable } from \"node:stream\";\nimport type { ReadableStream as NodeReadableStream } from \"node:stream/web\";\n\nconst logger = childLogger([\"switchboard\", \"attachments\"]);\n\nconst HASH_PATTERN = /^[a-f0-9]{64}$/;\n// eslint-disable-next-line no-control-regex\nconst CONTROL_CHARS = /[\\x00-\\x1f\\x7f]/;\n// RFC 6838 token chars; allows optional `; param=value` pairs (token or quoted-string).\nconst MIME_TYPE_PATTERN =\n  /^[!#$%&'*+\\-.^_`|~\\w]+\\/[!#$%&'*+\\-.^_`|~\\w]+(?:\\s*;\\s*[!#$%&'*+\\-.^_`|~\\w]+=(?:[!#$%&'*+\\-.^_`|~\\w]+|\"(?:[^\"\\\\\\r\\n]|\\\\[^\\r\\n])*\"))*$/;\nconst MAX_FILENAME_LEN = 255;\nconst MAX_MIMETYPE_LEN = 255;\n\nfunction sendJson(res: ServerResponse, status: number, body: unknown): void {\n  res.statusCode = status;\n  res.setHeader(\"Content-Type\", \"application/json\");\n  res.end(JSON.stringify(body));\n}\n\nfunction sendError(res: ServerResponse, status: number, message: string): void {\n  sendJson(res, status, { error: message });\n}\n\nfunction statusForError(err: unknown): number {\n  if (err instanceof AttachmentNotFound) return 404;\n  if (err instanceof ReservationNotFound) return 404;\n  if (err instanceof InvalidAttachmentRef) return 400;\n  return 500;\n}\n\nfunction sendErrorFromException(res: ServerResponse, err: unknown): void {\n  const status = statusForError(err);\n  if (status >= 500) {\n    logger.error(\"Attachment route error: @error\", err);\n    sendError(res, status, \"Internal error\");\n    return;\n  }\n  sendError(res, status, err instanceof Error ? err.message : String(err));\n}\n\nasync function readJsonBody(\n  req: IncomingMessage,\n  body: unknown,\n): Promise<unknown> {\n  // The Express body-parser may have already populated `body`. When that\n  // happens we trust it; otherwise read the raw stream ourselves so this\n  // module is independent of upstream middleware ordering.\n  if (body !== undefined && body !== null && typeof body === \"object\") {\n    return body;\n  }\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    chunks.push(chunk as Buffer);\n  }\n  if (chunks.length === 0) return undefined;\n  const text = Buffer.concat(chunks).toString(\"utf8\");\n  if (text.length === 0) return undefined;\n  return JSON.parse(text);\n}\n\nexport function parseReserveOptions(\n  input: unknown,\n): ReserveAttachmentOptions | null {\n  if (input === null || typeof input !== \"object\") return null;\n  const obj = input as Record<string, unknown>;\n  if (\n    typeof obj.mimeType !== \"string\" ||\n    obj.mimeType.length === 0 ||\n    obj.mimeType.length > MAX_MIMETYPE_LEN ||\n    !MIME_TYPE_PATTERN.test(obj.mimeType)\n  ) {\n    return null;\n  }\n  if (\n    typeof obj.fileName !== \"string\" ||\n    obj.fileName.length === 0 ||\n    obj.fileName.length > MAX_FILENAME_LEN ||\n    CONTROL_CHARS.test(obj.fileName)\n  ) {\n    return null;\n  }\n  let extension: string | null = null;\n  if (typeof obj.extension === \"string\") {\n    if (obj.extension.length === 0 || /[\\\\/]/.test(obj.extension)) return null;\n    extension = obj.extension;\n  } else if (obj.extension !== undefined && obj.extension !== null) {\n    return null;\n  }\n  return {\n    mimeType: obj.mimeType,\n    fileName: obj.fileName,\n    extension,\n  };\n}\n\nexport function quoteFilename(name: string): string {\n  // RFC 6266: quoted-string with internal \" and \\ escaped.\n  return `\"${name.replace(/[\\\\\"]/g, \"\\\\$&\")}\"`;\n}\n\nexport function buildContentDisposition(fileName: string): string {\n  // ASCII fallback: replace any byte outside printable ASCII (0x20-0x7e),\n  // plus `\"` and `\\`, with `_`. Browsers fall back to this when they don't\n  // grok `filename*=`; the modern parameter carries the real name.\n  const ascii = fileName.replace(/[^\\x20-\\x21\\x23-\\x5b\\x5d-\\x7e]/g, \"_\");\n  // RFC 5987: percent-encode UTF-8 bytes. encodeURIComponent leaves a few\n  // chars that 5987 disallows in token; re-encode them.\n  const encoded = encodeURIComponent(fileName).replace(\n    /['()*!]/g,\n    (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`,\n  );\n  return `attachment; filename=${quoteFilename(ascii)}; filename*=UTF-8''${encoded}`;\n}\n\nexport function makeReserveHandler(attachments: AttachmentBuildResult) {\n  return async (\n    req: IncomingMessage,\n    res: ServerResponse,\n    body?: unknown,\n  ): Promise<void> => {\n    let parsed: unknown;\n    try {\n      parsed = await readJsonBody(req, body);\n    } catch {\n      sendError(res, 400, \"Invalid JSON body\");\n      return;\n    }\n    const opts = parseReserveOptions(parsed);\n    if (!opts) {\n      sendError(\n        res,\n        400,\n        \"Body must be { mimeType: string (type/subtype), fileName: string (no control characters, max 255 chars), extension?: string|null }\",\n      );\n      return;\n    }\n    try {\n      const upload = await attachments.service.reserve(opts);\n      sendJson(res, 201, { reservationId: upload.reservationId });\n    } catch (err) {\n      sendErrorFromException(res, err);\n    }\n  };\n}\n\nexport function makeUploadHandler(attachments: AttachmentBuildResult) {\n  return async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    const reservationId = extractParam(req, \"reservationId\");\n    if (!reservationId) {\n      sendError(res, 400, \"Missing reservationId\");\n      return;\n    }\n\n    let reservation;\n    try {\n      reservation = await attachments.reservations.get(reservationId);\n    } catch (err) {\n      sendErrorFromException(res, err);\n      return;\n    }\n\n    const upload = attachments.uploadFactory.createUpload(\n      reservation.reservationId,\n      {\n        mimeType: reservation.mimeType,\n        fileName: reservation.fileName,\n        extension: reservation.extension,\n      },\n    );\n\n    const webStream = Readable.toWeb(\n      req as Readable,\n    ) as ReadableStream<Uint8Array>;\n\n    try {\n      const result = await upload.send(webStream);\n      sendJson(res, 200, result);\n    } catch (err) {\n      sendErrorFromException(res, err);\n    }\n  };\n}\n\nexport function makeDownloadHandler(attachments: AttachmentBuildResult) {\n  return async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    const hash = extractParam(req, \"hash\");\n    if (!hash || !HASH_PATTERN.test(hash)) {\n      sendError(res, 400, \"Invalid attachment hash\");\n      return;\n    }\n\n    const controller = new AbortController();\n    req.once(\"close\", () => controller.abort());\n\n    let response;\n    try {\n      response = await attachments.store.get(\n        hash as AttachmentHash,\n        controller.signal,\n      );\n    } catch (err) {\n      sendErrorFromException(res, err);\n      return;\n    }\n\n    const { header, body } = response;\n    res.statusCode = 200;\n    res.setHeader(\"Content-Type\", header.mimeType);\n    res.setHeader(\"Content-Length\", String(header.sizeBytes));\n    res.setHeader(\n      \"Content-Disposition\",\n      buildContentDisposition(header.fileName),\n    );\n    res.setHeader(\n      \"X-Attachment-Metadata\",\n      JSON.stringify({\n        mimeType: header.mimeType,\n        fileName: header.fileName,\n        sizeBytes: header.sizeBytes,\n        extension: header.extension,\n      }),\n    );\n\n    Readable.fromWeb(body as unknown as NodeReadableStream<Uint8Array>).pipe(\n      res,\n    );\n  };\n}\n\nfunction extractParam(req: IncomingMessage, name: string): string | undefined {\n  const expressParams = (\n    req as IncomingMessage & {\n      params?: Record<string, string>;\n    }\n  ).params;\n  return expressParams?.[name];\n}\n","import type { API } from \"@powerhousedao/reactor-api\";\nimport { mountAuthenticatedNodeRoute } from \"./mount-auth.js\";\nimport {\n  makeDownloadHandler,\n  makeReserveHandler,\n  makeUploadHandler,\n} from \"./routes.js\";\n\nexport function registerAttachmentRoutes(api: API): void {\n  const { attachments } = api;\n\n  mountAuthenticatedNodeRoute(\n    api,\n    \"POST\",\n    \"/attachments/reservations\",\n    makeReserveHandler(attachments),\n  );\n\n  mountAuthenticatedNodeRoute(\n    api,\n    \"PUT\",\n    \"/attachments/reservations/:reservationId\",\n    makeUploadHandler(attachments),\n  );\n\n  mountAuthenticatedNodeRoute(\n    api,\n    \"GET\",\n    \"/attachments/:hash\",\n    makeDownloadHandler(attachments),\n  );\n}\n","import { EnvVarProvider } from \"@openfeature/env-var-provider\";\nimport { OpenFeature } from \"@openfeature/server-sdk\";\n\nexport async function initFeatureFlags() {\n  // for now, we're only using env vars for feature flags\n  const provider = new EnvVarProvider();\n\n  await OpenFeature.setProviderAndWait(provider);\n\n  return OpenFeature.getClient();\n}\n","import type { SignerConfig } from \"@powerhousedao/reactor\";\nimport {\n  createSignatureVerifier,\n  DEFAULT_RENOWN_URL,\n  NodeKeyStorage,\n  RenownBuilder,\n  RenownCryptoBuilder,\n  type IRenown,\n} from \"@renown/sdk/node\";\nimport { childLogger } from \"document-model\";\n\nconst logger = childLogger([\"switchboard\", \"renown\"]);\n\nexport interface RenownOptions {\n  /** Path to the keypair file. Defaults to .ph/.keypair.json in cwd */\n  keypairPath?: string;\n  /** If true, won't generate a new keypair if none exists */\n  requireExisting?: boolean;\n  /** Base url of the Renown instance to use */\n  baseUrl?: string;\n}\n\n/**\n * Initialize Renown for the Switchboard instance.\n * This allows Switchboard to authenticate with remote services\n * using the same identity established during `ph login`.\n */\nexport async function initRenown(\n  options: RenownOptions = {},\n): Promise<IRenown | null> {\n  const {\n    keypairPath,\n    requireExisting = false,\n    baseUrl = DEFAULT_RENOWN_URL,\n  } = options;\n\n  const keyStorage = new NodeKeyStorage(keypairPath, {\n    logger,\n  });\n\n  // Check if we have an existing keypair\n  const existingKeyPair = await keyStorage.loadKeyPair();\n\n  if (!existingKeyPair && requireExisting) {\n    throw new Error(\n      \"No existing keypair found and requireExisting is true. \" +\n        'Run \"ph login\" to create one.',\n    );\n  }\n\n  if (!existingKeyPair) {\n    logger.info(\"No existing keypair found. A new one will be generated.\");\n  }\n\n  const renownCrypto = await new RenownCryptoBuilder()\n    .withKeyPairStorage(keyStorage)\n    .build();\n\n  const renown = await new RenownBuilder(\"switchboard\", {})\n    .withCrypto(renownCrypto)\n    .withBaseUrl(baseUrl)\n    .build();\n\n  logger.info(\"Switchboard identity initialized: @did\", renownCrypto.did);\n\n  return renown;\n}\n\n/**\n * Get the signer config for the given renown instance.\n *\n * @param renown - The renown instance\n * @param requireSignature - If true, unsigned actions are rejected\n */\nexport function getRenownSignerConfig(\n  renown: IRenown,\n  requireSignature?: boolean,\n): SignerConfig {\n  return {\n    signer: renown.signer,\n    verifier: createSignatureVerifier(requireSignature),\n  };\n}\n","#!/usr/bin/env node\nimport { PGlite } from \"@electric-sql/pglite\";\nimport { metrics } from \"@opentelemetry/api\";\nimport { getConfig } from \"@powerhousedao/config/node\";\nimport { ReactorInstrumentation } from \"@powerhousedao/opentelemetry-instrumentation-reactor\";\nimport {\n  ChannelScheme,\n  EventBus,\n  ReactorBuilder,\n  ReactorClientBuilder,\n  driveCollectionId,\n  parseDriveUrl,\n  type Database,\n} from \"@powerhousedao/reactor\";\nimport {\n  HttpPackageLoader,\n  ImportPackageLoader,\n  PackageManagementService,\n  PackagesSubgraph,\n  getUniqueDocumentModels,\n  initializeAndStartAPI,\n  type IPackageLoader,\n} from \"@powerhousedao/reactor-api\";\nimport { httpsHooksPath } from \"@powerhousedao/reactor-api/https-hooks\";\nimport {\n  VitePackageLoader,\n  createViteLogger,\n  startViteServer,\n} from \"@powerhousedao/reactor-api/vite\";\nimport { driveDocumentModelModule } from \"@powerhousedao/shared/document-drive\";\nimport type { DocumentModelModule } from \"@powerhousedao/shared/document-model\";\nimport { documentModels as vetraDocumentModels } from \"@powerhousedao/vetra\";\nimport { processorFactory as vetraProcessorFactory } from \"@powerhousedao/vetra/processors\";\nimport type { IRenown } from \"@renown/sdk/node\";\nimport * as Sentry from \"@sentry/node\";\nimport {\n  childLogger,\n  documentModelDocumentModelModule,\n  setLogLevel,\n  type ILogger,\n} from \"document-model\";\nimport dotenv from \"dotenv\";\nimport { Kysely, PostgresDialect } from \"kysely\";\nimport { PGliteDialect } from \"kysely-pglite-dialect\";\nimport net from \"node:net\";\nimport { register } from \"node:module\";\nimport path from \"path\";\nimport { Pool } from \"pg\";\nimport { registerAttachmentRoutes } from \"./attachments/index.js\";\nimport { initFeatureFlags } from \"./feature-flags.js\";\nimport { getRenownSignerConfig, initRenown } from \"./renown.js\";\nimport type { StartServerOptions, SwitchboardReactor } from \"./types.js\";\nimport { addDefaultDrive, isPostgresUrl } from \"./utils.mjs\";\n\nconst defaultLogger = childLogger([\"switchboard\"]);\n\nconst LogLevel = (process.env.LOG_LEVEL as ILogger[\"level\"] | \"\") || \"info\";\nsetLogLevel(LogLevel);\n\ndotenv.config();\n\n// Feature flag constants\nconst DOCUMENT_MODEL_SUBGRAPHS_ENABLED = \"DOCUMENT_MODEL_SUBGRAPHS_ENABLED\";\nconst DOCUMENT_MODEL_SUBGRAPHS_ENABLED_DEFAULT = true;\nconst REQUIRE_SIGNATURES = \"REQUIRE_SIGNATURES\";\nconst REQUIRE_SIGNATURES_DEFAULT = false;\n\nif (process.env.SENTRY_DSN) {\n  defaultLogger.info(\n    \"Initialized Sentry with env: @env\",\n    process.env.SENTRY_ENV,\n  );\n  Sentry.init({\n    dsn: process.env.SENTRY_DSN,\n    environment: process.env.SENTRY_ENV,\n    // Match the version tag uploaded by release-branch.yml so source maps\n    // resolve. Populated by the CI (WORKSPACE_VERSION) or npm at runtime.\n    release:\n      process.env.SENTRY_RELEASE ||\n      (process.env.npm_package_version\n        ? `v${process.env.npm_package_version}`\n        : undefined),\n  });\n}\n\nconst DEFAULT_PORT = process.env.PORT ? Number(process.env.PORT) : 4001;\n\n// How many ports forward from the requested one we will try before giving up.\nconst PORT_FALLBACK_ATTEMPTS = 20;\n\n/**\n * Attempt to bind a throwaway TCP server to the given port. Resolves true if\n * the port is free, false if the OS reports it in use. Any other error is\n * surfaced so we don't silently mask real issues (permissions, bad host, …).\n */\nexport function isPortAvailable(port: number): Promise<boolean> {\n  return new Promise((resolve, reject) => {\n    const tester = net.createServer();\n    tester.once(\"error\", (err: NodeJS.ErrnoException) => {\n      if (err.code === \"EADDRINUSE\" || err.code === \"EACCES\") {\n        resolve(false);\n      } else {\n        reject(err);\n      }\n    });\n    tester.once(\"listening\", () => {\n      tester.close(() => resolve(true));\n    });\n    // Bind on the unspecified IPv6 address so we detect collisions with both\n    // IPv6 and IPv4 listeners (Node maps `::` to dual-stack on most systems).\n    tester.listen({ port, host: \"::\" });\n  });\n}\n\nasync function resolveServerPort(\n  requested: number,\n  strictPort: boolean,\n  logger: ILogger,\n): Promise<number> {\n  if (strictPort) return requested;\n  for (let i = 0; i < PORT_FALLBACK_ATTEMPTS; i++) {\n    const candidate = requested + i;\n    if (await isPortAvailable(candidate)) {\n      if (candidate !== requested) {\n        logger.info(\n          `Port ${requested} is in use. Falling back to port ${candidate}.`,\n        );\n      }\n      return candidate;\n    }\n  }\n  // Couldn't find a free port in the window; let the caller surface the\n  // original EADDRINUSE when the real bind attempts runs.\n  return requested;\n}\n\nasync function initServer(\n  serverPort: number,\n  options: StartServerOptions,\n  renown: IRenown | null,\n) {\n  // Register the global MeterProvider before ReactorInstrumentation is\n  // constructed. setGlobalMeterProvider is a one-way door — once set it cannot\n  // be unset — so this must happen before initializeClient calls\n  // instrumentation.start() → createMetrics() → metrics.getMeter().\n  if (options.meterProvider) {\n    metrics.setGlobalMeterProvider(options.meterProvider);\n  }\n\n  const {\n    dev,\n    packages = [],\n    remoteDrives = [],\n    logger = defaultLogger,\n  } = options;\n  logger.level = LogLevel;\n  const dbPath = options.dbPath ?? process.env.DATABASE_URL;\n\n  // use postgres url for read model storage if available, otherwise use local PGlite path\n  const readModelPath = dbPath || \".ph/read-storage\";\n\n  // HTTP registry package loading\n  const configPath =\n    options.configFile ?? path.join(process.cwd(), \"powerhouse.config.json\");\n  const config = getConfig(configPath);\n  const registryUrl = process.env.PH_REGISTRY_URL ?? config.packageRegistryUrl;\n  const registryPackages = process.env.PH_REGISTRY_PACKAGES;\n  const dynamicModelLoading =\n    options.dynamicModelLoading ?? process.env.DYNAMIC_MODEL_LOADING === \"true\";\n  let httpLoader: HttpPackageLoader | undefined;\n\n  if (registryUrl) {\n    // Register HTTP/HTTPS module loader hooks for dynamic package imports\n    register(httpsHooksPath, import.meta.url);\n    httpLoader = new HttpPackageLoader({ registryUrl });\n    registryPackages?.split(\",\").forEach((p) => {\n      const name = p.trim();\n      if (!packages.includes(name)) {\n        packages.push(name);\n      }\n    });\n  }\n\n  const reactorLogger = logger.child([\"reactor\"]);\n  const initializeClient = async (documentModels: DocumentModelModule[]) => {\n    const eventBus = new EventBus();\n    const builder = new ReactorBuilder()\n      .withEventBus(eventBus)\n      .withDocumentModels(\n        getUniqueDocumentModels([\n          documentModelDocumentModelModule,\n          driveDocumentModelModule,\n          ...vetraDocumentModels,\n          ...documentModels,\n        ]),\n      )\n      .withChannelScheme(ChannelScheme.SWITCHBOARD)\n      .withSignalHandlers()\n      .withLogger(reactorLogger);\n\n    const maxSkipThreshold = parseInt(process.env.MAX_SKIP_THRESHOLD ?? \"\", 10);\n    if (!isNaN(maxSkipThreshold) && maxSkipThreshold > 0) {\n      builder.withExecutorConfig({ maxSkipThreshold });\n      logger.info(`Reactor maxSkipThreshold set to ${maxSkipThreshold}`);\n    }\n\n    const reactorDbUrl = process.env.PH_REACTOR_DATABASE_URL;\n    if (reactorDbUrl && isPostgresUrl(reactorDbUrl)) {\n      const connectionString = reactorDbUrl.includes(\"?\")\n        ? reactorDbUrl\n        : `${reactorDbUrl}?sslmode=disable`;\n      const pool = new Pool({ connectionString });\n      const kysely = new Kysely<Database>({\n        dialect: new PostgresDialect({ pool }),\n      });\n      builder.withKysely(kysely);\n      logger.info(\"Using PostgreSQL for reactor storage\");\n    } else {\n      const pglitePath = \"./.ph/reactor-storage\";\n      const pglite = new PGlite(pglitePath);\n      const kysely = new Kysely<Database>({\n        dialect: new PGliteDialect(pglite),\n      });\n      builder.withKysely(kysely);\n      logger.info(\"Using PGlite for reactor storage\");\n    }\n\n    if (httpLoader && dynamicModelLoading) {\n      builder.withDocumentModelLoader(httpLoader.documentModelLoader);\n    }\n\n    const clientBuilder = new ReactorClientBuilder().withReactorBuilder(\n      builder,\n    );\n\n    if (renown) {\n      const signerConfig = getRenownSignerConfig(\n        renown,\n        options.identity?.requireSignatures,\n      );\n      clientBuilder.withSigner(signerConfig);\n    }\n\n    const module = await clientBuilder.buildModule();\n\n    if (module.reactorModule) {\n      const instrumentation = new ReactorInstrumentation(module.reactorModule);\n      instrumentation.start();\n      reactorLogger.info(\"Reactor metrics instrumentation started\");\n    }\n\n    return module;\n  };\n\n  let defaultDriveUrl: undefined | string = undefined;\n\n  // TODO get path from powerhouse config\n  // start vite server if dev mode is enabled\n  const basePath = process.cwd();\n  const viteLogger = createViteLogger(logger);\n  const vite = dev\n    ? await startViteServer(process.cwd(), viteLogger)\n    : undefined;\n\n  // get paths to local document models\n  if (!options.disableLocalPackages) {\n    packages.push(basePath);\n  }\n\n  // create loaders\n  const packageLoaders: IPackageLoader[] = [];\n  if (vite) {\n    packageLoaders.push(VitePackageLoader.build(vite));\n  } else {\n    packageLoaders.push(new ImportPackageLoader());\n  }\n  if (httpLoader) {\n    packageLoaders.push(httpLoader);\n    registryPackages?.split(\",\").forEach((p) => {\n      const name = p.trim();\n      if (!packages.includes(name)) {\n        packages.push(name);\n      }\n    });\n  }\n\n  const apiLogger = logger.child([\"reactor-api\"]);\n  const api = await initializeAndStartAPI(\n    initializeClient,\n    {\n      port: serverPort,\n      dbPath: readModelPath,\n      https: options.https,\n      packageLoaders: packageLoaders.length > 0 ? packageLoaders : undefined,\n      packages: packages,\n      processorConfig: options.processorConfig,\n      processors: {\n        \"@powerhousedao/vetra\": [vetraProcessorFactory],\n      },\n      configFile:\n        options.configFile ??\n        path.join(process.cwd(), \"powerhouse.config.json\"),\n      mcp: options.mcp ?? true,\n      logger: apiLogger,\n      enableDocumentModelSubgraphs: options.enableDocumentModelSubgraphs,\n    },\n    \"switchboard\",\n  );\n\n  registerAttachmentRoutes(api);\n\n  if (process.env.SENTRY_DSN) {\n    // Register Sentry error handler after all routes are established.\n    // The adapter calls the framework-specific Sentry setup internally.\n    api.httpAdapter.setupSentryErrorHandler(Sentry);\n  }\n\n  const { client, graphqlManager, documentModelRegistry } = api;\n\n  // Wire up dynamic package management if HTTP loader is configured\n  if (httpLoader) {\n    const packageManagementService = new PackageManagementService({\n      defaultRegistryUrl: registryUrl,\n      httpLoader,\n      documentModelRegistry,\n    });\n\n    packageManagementService.setOnModelsChanged(() => {\n      graphqlManager.regenerateDocumentModelSubgraphs().catch(logger.error);\n    });\n\n    const packagesSubgraph = new PackagesSubgraph({\n      relationalDb: undefined as never,\n      analyticsStore: undefined as never,\n      reactorClient: client,\n      graphqlManager,\n      syncManager: api.syncManager,\n      path: graphqlManager.getBasePath(),\n      packageManagementService,\n    });\n\n    void graphqlManager\n      .registerSubgraphInstance(packagesSubgraph, \"graphql\", false)\n      .then(() => graphqlManager.updateRouter())\n      .catch((error: unknown) => {\n        logger.error(\"Failed to register packages subgraph: @error\", error);\n      });\n  }\n\n  // Create default drive if provided\n  if (options.drive) {\n    if (!renown) {\n      throw new Error(\"Cannot create default drive without Renown identity\");\n    }\n\n    defaultDriveUrl = await addDefaultDrive(client, options.drive, serverPort);\n  }\n\n  // add vite middleware after express app is initialized if applicable\n  if (vite) {\n    api.httpAdapter.mountRawMiddleware(vite.middlewares);\n  }\n\n  // Connect to remote drives AFTER packages are loaded\n  if (remoteDrives.length > 0) {\n    for (const remoteDriveUrl of remoteDrives) {\n      let driveId: string | undefined;\n\n      try {\n        const { syncManager } = api;\n        const parsed = parseDriveUrl(remoteDriveUrl);\n        driveId = parsed.driveId;\n        const remoteName = `remote-drive-${driveId}-${crypto.randomUUID()}`;\n        await syncManager.add(remoteName, driveCollectionId(\"main\", driveId), {\n          type: \"gql\",\n          parameters: { url: parsed.graphqlEndpoint },\n        });\n        logger.debug(\"Remote drive @remoteDriveUrl synced\", remoteDriveUrl);\n      } catch (error) {\n        if (\n          error instanceof Error &&\n          error.message.includes(\"already exists\")\n        ) {\n          logger.debug(\n            \"Remote drive already added: @remoteDriveUrl\",\n            remoteDriveUrl,\n          );\n          driveId = remoteDriveUrl.split(\"/\").pop();\n        } else {\n          logger.error(\n            \"Failed to connect to remote drive @remoteDriveUrl: @error\",\n            remoteDriveUrl,\n            error,\n          );\n        }\n      } finally {\n        // Construct local URL once in finally block\n        if (!defaultDriveUrl && driveId) {\n          const protocol = options.https ? \"https\" : \"http\";\n          defaultDriveUrl = `${protocol}://localhost:${serverPort}/d/${driveId}`;\n        }\n      }\n    }\n  }\n\n  return {\n    defaultDriveUrl,\n    api,\n    reactor: client,\n    renown,\n    port: serverPort,\n  };\n}\n\nexport const startSwitchboard = async (\n  options: StartServerOptions = {},\n): Promise<SwitchboardReactor> => {\n  const requestedPort = options.port ?? DEFAULT_PORT;\n  const logger = options.logger ?? defaultLogger;\n  const serverPort = await resolveServerPort(\n    requestedPort,\n    options.strictPort ?? false,\n    logger,\n  );\n\n  // Initialize feature flags\n  const featureFlags = await initFeatureFlags();\n\n  const enableDocumentModelSubgraphs = await featureFlags.getBooleanValue(\n    DOCUMENT_MODEL_SUBGRAPHS_ENABLED,\n    options.enableDocumentModelSubgraphs ??\n      DOCUMENT_MODEL_SUBGRAPHS_ENABLED_DEFAULT,\n  );\n\n  options.enableDocumentModelSubgraphs = enableDocumentModelSubgraphs;\n\n  const requireSignatures =\n    options.identity?.requireSignatures ??\n    (await featureFlags.getBooleanValue(\n      REQUIRE_SIGNATURES,\n      REQUIRE_SIGNATURES_DEFAULT,\n    ));\n  options.identity = { ...options.identity, requireSignatures };\n\n  logger.info(\n    \"Feature flags: @flags\",\n    JSON.stringify(\n      {\n        DOCUMENT_MODEL_SUBGRAPHS_ENABLED: enableDocumentModelSubgraphs,\n        REQUIRE_SIGNATURES: requireSignatures,\n      },\n      null,\n      2,\n    ),\n  );\n\n  // Initialize Renown if identity options are provided or keypair exists\n  let renown: IRenown | null = null;\n  try {\n    renown = await initRenown(options.identity);\n  } catch (e) {\n    logger.warn(\"Failed to initialize ConnectCrypto: @error\", e);\n    if (options.identity?.requireExisting) {\n      throw new Error(\n        'Identity required but failed to initialize. Run \"ph login\" first.',\n      );\n    }\n  }\n\n  try {\n    return await initServer(serverPort, options, renown);\n  } catch (e) {\n    Sentry.captureException(e);\n    logger.error(\"App crashed: @error\", e);\n    throw e;\n  }\n};\n\nexport * from \"./types.js\";\n\nif (import.meta.main) {\n  await startSwitchboard();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,SAAgB,YACd,aACA,SACa;AACb,KAAI,CAAC,YAAa,QAAO;AAEzB,QAAO,OAAO,KAAK,QAAQ;EACzB,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,YAAY,aAAa,IAAI,QAAQ,cAAc;UAC5D;AACN,OAAI,aAAa;AACjB,OAAI,UAAU,gBAAgB,mBAAmB;AACjD,OAAI,IAAI,KAAK,UAAU,EAAE,OAAO,iCAAiC,CAAC,CAAC;AACnE;;AAGF,MAAI,kBAAkB,UAAU;GAC9B,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,aAAa,OAAO;GACxB,MAAM,cAAc,OAAO,QAAQ,IAAI,eAAe;AACtD,OAAI,YAAa,KAAI,UAAU,gBAAgB,YAAY;AAC3D,OAAI,IAAI,KAAK;AACb;;AAGF,MAAI,OAAO,gBAAgB,CAAC,OAAO,MAAM;AACvC,OAAI,aAAa;AACjB,OAAI,UAAU,gBAAgB,mBAAmB;AACjD,OAAI,IAAI,KAAK,UAAU,EAAE,OAAO,2BAA2B,CAAC,CAAC;AAC7D;;AAGF,QAAM,QAAQ,KAAK,IAAI;;;;;;;;;;;AClC3B,SAAgB,4BACd,KACA,QACA,MACA,SACM;AACN,KAAI,YAAY,eACd,QACA,MACA,YAAY,IAAI,aAAa,QAAQ,CACtC;;;;ACRH,MAAMA,WAAS,YAAY,CAAC,eAAe,cAAc,CAAC;AAE1D,MAAM,eAAe;AAErB,MAAM,gBAAgB;AAEtB,MAAM,oBACJ;AACF,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAEzB,SAAS,SAAS,KAAqB,QAAgB,MAAqB;AAC1E,KAAI,aAAa;AACjB,KAAI,UAAU,gBAAgB,mBAAmB;AACjD,KAAI,IAAI,KAAK,UAAU,KAAK,CAAC;;AAG/B,SAAS,UAAU,KAAqB,QAAgB,SAAuB;AAC7E,UAAS,KAAK,QAAQ,EAAE,OAAO,SAAS,CAAC;;AAG3C,SAAS,eAAe,KAAsB;AAC5C,KAAI,eAAe,mBAAoB,QAAO;AAC9C,KAAI,eAAe,oBAAqB,QAAO;AAC/C,KAAI,eAAe,qBAAsB,QAAO;AAChD,QAAO;;AAGT,SAAS,uBAAuB,KAAqB,KAAoB;CACvE,MAAM,SAAS,eAAe,IAAI;AAClC,KAAI,UAAU,KAAK;AACjB,WAAO,MAAM,kCAAkC,IAAI;AACnD,YAAU,KAAK,QAAQ,iBAAiB;AACxC;;AAEF,WAAU,KAAK,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;;AAG1E,eAAe,aACb,KACA,MACkB;AAIlB,KAAI,SAAS,KAAA,KAAa,SAAS,QAAQ,OAAO,SAAS,SACzD,QAAO;CAET,MAAM,SAAmB,EAAE;AAC3B,YAAW,MAAM,SAAS,IACxB,QAAO,KAAK,MAAgB;AAE9B,KAAI,OAAO,WAAW,EAAG,QAAO,KAAA;CAChC,MAAM,OAAO,OAAO,OAAO,OAAO,CAAC,SAAS,OAAO;AACnD,KAAI,KAAK,WAAW,EAAG,QAAO,KAAA;AAC9B,QAAO,KAAK,MAAM,KAAK;;AAGzB,SAAgB,oBACd,OACiC;AACjC,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;CACxD,MAAM,MAAM;AACZ,KACE,OAAO,IAAI,aAAa,YACxB,IAAI,SAAS,WAAW,KACxB,IAAI,SAAS,SAAS,oBACtB,CAAC,kBAAkB,KAAK,IAAI,SAAS,CAErC,QAAO;AAET,KACE,OAAO,IAAI,aAAa,YACxB,IAAI,SAAS,WAAW,KACxB,IAAI,SAAS,SAAS,oBACtB,cAAc,KAAK,IAAI,SAAS,CAEhC,QAAO;CAET,IAAI,YAA2B;AAC/B,KAAI,OAAO,IAAI,cAAc,UAAU;AACrC,MAAI,IAAI,UAAU,WAAW,KAAK,QAAQ,KAAK,IAAI,UAAU,CAAE,QAAO;AACtE,cAAY,IAAI;YACP,IAAI,cAAc,KAAA,KAAa,IAAI,cAAc,KAC1D,QAAO;AAET,QAAO;EACL,UAAU,IAAI;EACd,UAAU,IAAI;EACd;EACD;;AAGH,SAAgB,cAAc,MAAsB;AAElD,QAAO,IAAI,KAAK,QAAQ,UAAU,OAAO,CAAC;;AAG5C,SAAgB,wBAAwB,UAA0B;CAIhE,MAAM,QAAQ,SAAS,QAAQ,mCAAmC,IAAI;CAGtE,MAAM,UAAU,mBAAmB,SAAS,CAAC,QAC3C,aACC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,SAAS,GAAG,CAAC,aAAa,GACtD;AACD,QAAO,wBAAwB,cAAc,MAAM,CAAC,qBAAqB;;AAG3E,SAAgB,mBAAmB,aAAoC;AACrE,QAAO,OACL,KACA,KACA,SACkB;EAClB,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,aAAa,KAAK,KAAK;UAChC;AACN,aAAU,KAAK,KAAK,oBAAoB;AACxC;;EAEF,MAAM,OAAO,oBAAoB,OAAO;AACxC,MAAI,CAAC,MAAM;AACT,aACE,KACA,KACA,qIACD;AACD;;AAEF,MAAI;AAEF,YAAS,KAAK,KAAK,EAAE,gBADN,MAAM,YAAY,QAAQ,QAAQ,KAAK,EACX,eAAe,CAAC;WACpD,KAAK;AACZ,0BAAuB,KAAK,IAAI;;;;AAKtC,SAAgB,kBAAkB,aAAoC;AACpE,QAAO,OAAO,KAAsB,QAAuC;EACzE,MAAM,gBAAgB,aAAa,KAAK,gBAAgB;AACxD,MAAI,CAAC,eAAe;AAClB,aAAU,KAAK,KAAK,wBAAwB;AAC5C;;EAGF,IAAI;AACJ,MAAI;AACF,iBAAc,MAAM,YAAY,aAAa,IAAI,cAAc;WACxD,KAAK;AACZ,0BAAuB,KAAK,IAAI;AAChC;;EAGF,MAAM,SAAS,YAAY,cAAc,aACvC,YAAY,eACZ;GACE,UAAU,YAAY;GACtB,UAAU,YAAY;GACtB,WAAW,YAAY;GACxB,CACF;EAED,MAAM,YAAY,SAAS,MACzB,IACD;AAED,MAAI;AAEF,YAAS,KAAK,KADC,MAAM,OAAO,KAAK,UAAU,CACjB;WACnB,KAAK;AACZ,0BAAuB,KAAK,IAAI;;;;AAKtC,SAAgB,oBAAoB,aAAoC;AACtE,QAAO,OAAO,KAAsB,QAAuC;EACzE,MAAM,OAAO,aAAa,KAAK,OAAO;AACtC,MAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,EAAE;AACrC,aAAU,KAAK,KAAK,0BAA0B;AAC9C;;EAGF,MAAM,aAAa,IAAI,iBAAiB;AACxC,MAAI,KAAK,eAAe,WAAW,OAAO,CAAC;EAE3C,IAAI;AACJ,MAAI;AACF,cAAW,MAAM,YAAY,MAAM,IACjC,MACA,WAAW,OACZ;WACM,KAAK;AACZ,0BAAuB,KAAK,IAAI;AAChC;;EAGF,MAAM,EAAE,QAAQ,SAAS;AACzB,MAAI,aAAa;AACjB,MAAI,UAAU,gBAAgB,OAAO,SAAS;AAC9C,MAAI,UAAU,kBAAkB,OAAO,OAAO,UAAU,CAAC;AACzD,MAAI,UACF,uBACA,wBAAwB,OAAO,SAAS,CACzC;AACD,MAAI,UACF,yBACA,KAAK,UAAU;GACb,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,WAAW,OAAO;GAClB,WAAW,OAAO;GACnB,CAAC,CACH;AAED,WAAS,QAAQ,KAAkD,CAAC,KAClE,IACD;;;AAIL,SAAS,aAAa,KAAsB,MAAkC;AAM5E,QAJE,IAGA,SACqB;;;;AC9OzB,SAAgB,yBAAyB,KAAgB;CACvD,MAAM,EAAE,gBAAgB;AAExB,6BACE,KACA,QACA,6BACA,mBAAmB,YAAY,CAChC;AAED,6BACE,KACA,OACA,4CACA,kBAAkB,YAAY,CAC/B;AAED,6BACE,KACA,OACA,sBACA,oBAAoB,YAAY,CACjC;;;;AC3BH,eAAsB,mBAAmB;CAEvC,MAAM,WAAW,IAAI,gBAAgB;AAErC,OAAM,YAAY,mBAAmB,SAAS;AAE9C,QAAO,YAAY,WAAW;;;;ACEhC,MAAM,SAAS,YAAY,CAAC,eAAe,SAAS,CAAC;;;;;;AAgBrD,eAAsB,WACpB,UAAyB,EAAE,EACF;CACzB,MAAM,EACJ,aACA,kBAAkB,OAClB,UAAU,uBACR;CAEJ,MAAM,aAAa,IAAI,eAAe,aAAa,EACjD,QACD,CAAC;CAGF,MAAM,kBAAkB,MAAM,WAAW,aAAa;AAEtD,KAAI,CAAC,mBAAmB,gBACtB,OAAM,IAAI,MACR,yFAED;AAGH,KAAI,CAAC,gBACH,QAAO,KAAK,0DAA0D;CAGxE,MAAM,eAAe,MAAM,IAAI,qBAAqB,CACjD,mBAAmB,WAAW,CAC9B,OAAO;CAEV,MAAM,SAAS,MAAM,IAAI,cAAc,eAAe,EAAE,CAAC,CACtD,WAAW,aAAa,CACxB,YAAY,QAAQ,CACpB,OAAO;AAEV,QAAO,KAAK,0CAA0C,aAAa,IAAI;AAEvE,QAAO;;;;;;;;AAST,SAAgB,sBACd,QACA,kBACc;AACd,QAAO;EACL,QAAQ,OAAO;EACf,UAAU,wBAAwB,iBAAiB;EACpD;;;;AC3BH,MAAM,gBAAgB,YAAY,CAAC,cAAc,CAAC;AAElD,MAAM,WAAY,QAAQ,IAAI,aAAuC;AACrE,YAAY,SAAS;AAErB,OAAO,QAAQ;AAGf,MAAM,mCAAmC;AACzC,MAAM,2CAA2C;AACjD,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAEnC,IAAI,QAAQ,IAAI,YAAY;AAC1B,eAAc,KACZ,qCACA,QAAQ,IAAI,WACb;AACD,QAAO,KAAK;EACV,KAAK,QAAQ,IAAI;EACjB,aAAa,QAAQ,IAAI;EAGzB,SACE,QAAQ,IAAI,mBACX,QAAQ,IAAI,sBACT,IAAI,QAAQ,IAAI,wBAChB,KAAA;EACP,CAAC;;AAGJ,MAAM,eAAe,QAAQ,IAAI,OAAO,OAAO,QAAQ,IAAI,KAAK,GAAG;AAGnE,MAAM,yBAAyB;;;;;;AAO/B,SAAgB,gBAAgB,MAAgC;AAC9D,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,SAAS,IAAI,cAAc;AACjC,SAAO,KAAK,UAAU,QAA+B;AACnD,OAAI,IAAI,SAAS,gBAAgB,IAAI,SAAS,SAC5C,SAAQ,MAAM;OAEd,QAAO,IAAI;IAEb;AACF,SAAO,KAAK,mBAAmB;AAC7B,UAAO,YAAY,QAAQ,KAAK,CAAC;IACjC;AAGF,SAAO,OAAO;GAAE;GAAM,MAAM;GAAM,CAAC;GACnC;;AAGJ,eAAe,kBACb,WACA,YACA,QACiB;AACjB,KAAI,WAAY,QAAO;AACvB,MAAK,IAAI,IAAI,GAAG,IAAI,wBAAwB,KAAK;EAC/C,MAAM,YAAY,YAAY;AAC9B,MAAI,MAAM,gBAAgB,UAAU,EAAE;AACpC,OAAI,cAAc,UAChB,QAAO,KACL,QAAQ,UAAU,mCAAmC,UAAU,GAChE;AAEH,UAAO;;;AAKX,QAAO;;AAGT,eAAe,WACb,YACA,SACA,QACA;AAKA,KAAI,QAAQ,cACV,SAAQ,uBAAuB,QAAQ,cAAc;CAGvD,MAAM,EACJ,KACA,WAAW,EAAE,EACb,eAAe,EAAE,EACjB,SAAS,kBACP;AACJ,QAAO,QAAQ;CAIf,MAAM,iBAHS,QAAQ,UAAU,QAAQ,IAAI,iBAGb;CAKhC,MAAM,SAAS,UADb,QAAQ,cAAc,KAAK,KAAK,QAAQ,KAAK,EAAE,yBAAyB,CACtC;CACpC,MAAM,cAAc,QAAQ,IAAI,mBAAmB,OAAO;CAC1D,MAAM,mBAAmB,QAAQ,IAAI;CACrC,MAAM,sBACJ,QAAQ,uBAAuB,QAAQ,IAAI,0BAA0B;CACvE,IAAI;AAEJ,KAAI,aAAa;AAEf,WAAS,gBAAgB,OAAO,KAAK,IAAI;AACzC,eAAa,IAAI,kBAAkB,EAAE,aAAa,CAAC;AACnD,oBAAkB,MAAM,IAAI,CAAC,SAAS,MAAM;GAC1C,MAAM,OAAO,EAAE,MAAM;AACrB,OAAI,CAAC,SAAS,SAAS,KAAK,CAC1B,UAAS,KAAK,KAAK;IAErB;;CAGJ,MAAM,gBAAgB,OAAO,MAAM,CAAC,UAAU,CAAC;CAC/C,MAAM,mBAAmB,OAAO,qBAA0C;EACxE,MAAM,WAAW,IAAI,UAAU;EAC/B,MAAM,UAAU,IAAI,gBAAgB,CACjC,aAAa,SAAS,CACtB,mBACC,wBAAwB;GACtB;GACA;GACA,GAAGC;GACH,GAAGC;GACJ,CAAC,CACH,CACA,kBAAkB,cAAc,YAAY,CAC5C,oBAAoB,CACpB,WAAW,cAAc;EAE5B,MAAM,mBAAmB,SAAS,QAAQ,IAAI,sBAAsB,IAAI,GAAG;AAC3E,MAAI,CAAC,MAAM,iBAAiB,IAAI,mBAAmB,GAAG;AACpD,WAAQ,mBAAmB,EAAE,kBAAkB,CAAC;AAChD,UAAO,KAAK,mCAAmC,mBAAmB;;EAGpE,MAAM,eAAe,QAAQ,IAAI;AACjC,MAAI,gBAAgB,cAAc,aAAa,EAAE;GAK/C,MAAM,SAAS,IAAI,OAAiB,EAClC,SAAS,IAAI,gBAAgB,EAAE,MAFpB,IAAI,KAAK,EAAE,kBAHC,aAAa,SAAS,IAAI,GAC/C,eACA,GAAG,aAAa,mBACsB,CAAC,EAEJ,CAAC,EACvC,CAAC;AACF,WAAQ,WAAW,OAAO;AAC1B,UAAO,KAAK,uCAAuC;SAC9C;GAGL,MAAM,SAAS,IAAI,OAAiB,EAClC,SAAS,IAAI,cAFA,IAAI,OADA,wBACkB,CAED,EACnC,CAAC;AACF,WAAQ,WAAW,OAAO;AAC1B,UAAO,KAAK,mCAAmC;;AAGjD,MAAI,cAAc,oBAChB,SAAQ,wBAAwB,WAAW,oBAAoB;EAGjE,MAAM,gBAAgB,IAAI,sBAAsB,CAAC,mBAC/C,QACD;AAED,MAAI,QAAQ;GACV,MAAM,eAAe,sBACnB,QACA,QAAQ,UAAU,kBACnB;AACD,iBAAc,WAAW,aAAa;;EAGxC,MAAM,SAAS,MAAM,cAAc,aAAa;AAEhD,MAAI,OAAO,eAAe;AACA,OAAI,uBAAuB,OAAO,cAAc,CACxD,OAAO;AACvB,iBAAc,KAAK,0CAA0C;;AAG/D,SAAO;;CAGT,IAAI,kBAAsC,KAAA;CAI1C,MAAM,WAAW,QAAQ,KAAK;CAC9B,MAAM,aAAa,iBAAiB,OAAO;CAC3C,MAAM,OAAO,MACT,MAAM,gBAAgB,QAAQ,KAAK,EAAE,WAAW,GAChD,KAAA;AAGJ,KAAI,CAAC,QAAQ,qBACX,UAAS,KAAK,SAAS;CAIzB,MAAM,iBAAmC,EAAE;AAC3C,KAAI,KACF,gBAAe,KAAK,kBAAkB,MAAM,KAAK,CAAC;KAElD,gBAAe,KAAK,IAAI,qBAAqB,CAAC;AAEhD,KAAI,YAAY;AACd,iBAAe,KAAK,WAAW;AAC/B,oBAAkB,MAAM,IAAI,CAAC,SAAS,MAAM;GAC1C,MAAM,OAAO,EAAE,MAAM;AACrB,OAAI,CAAC,SAAS,SAAS,KAAK,CAC1B,UAAS,KAAK,KAAK;IAErB;;CAGJ,MAAM,YAAY,OAAO,MAAM,CAAC,cAAc,CAAC;CAC/C,MAAM,MAAM,MAAM,sBAChB,kBACA;EACE,MAAM;EACN,QAAQ;EACR,OAAO,QAAQ;EACf,gBAAgB,eAAe,SAAS,IAAI,iBAAiB,KAAA;EACnD;EACV,iBAAiB,QAAQ;EACzB,YAAY,EACV,wBAAwB,CAACC,iBAAsB,EAChD;EACD,YACE,QAAQ,cACR,KAAK,KAAK,QAAQ,KAAK,EAAE,yBAAyB;EACpD,KAAK,QAAQ,OAAO;EACpB,QAAQ;EACR,8BAA8B,QAAQ;EACvC,EACD,cACD;AAED,0BAAyB,IAAI;AAE7B,KAAI,QAAQ,IAAI,WAGd,KAAI,YAAY,wBAAwB,OAAO;CAGjD,MAAM,EAAE,QAAQ,gBAAgB,0BAA0B;AAG1D,KAAI,YAAY;EACd,MAAM,2BAA2B,IAAI,yBAAyB;GAC5D,oBAAoB;GACpB;GACA;GACD,CAAC;AAEF,2BAAyB,yBAAyB;AAChD,kBAAe,kCAAkC,CAAC,MAAM,OAAO,MAAM;IACrE;EAEF,MAAM,mBAAmB,IAAI,iBAAiB;GAC5C,cAAc,KAAA;GACd,gBAAgB,KAAA;GAChB,eAAe;GACf;GACA,aAAa,IAAI;GACjB,MAAM,eAAe,aAAa;GAClC;GACD,CAAC;AAEG,iBACF,yBAAyB,kBAAkB,WAAW,MAAM,CAC5D,WAAW,eAAe,cAAc,CAAC,CACzC,OAAO,UAAmB;AACzB,UAAO,MAAM,gDAAgD,MAAM;IACnE;;AAIN,KAAI,QAAQ,OAAO;AACjB,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,sDAAsD;AAGxE,oBAAkB,MAAM,gBAAgB,QAAQ,QAAQ,OAAO,WAAW;;AAI5E,KAAI,KACF,KAAI,YAAY,mBAAmB,KAAK,YAAY;AAItD,KAAI,aAAa,SAAS,EACxB,MAAK,MAAM,kBAAkB,cAAc;EACzC,IAAI;AAEJ,MAAI;GACF,MAAM,EAAE,gBAAgB;GACxB,MAAM,SAAS,cAAc,eAAe;AAC5C,aAAU,OAAO;GACjB,MAAM,aAAa,gBAAgB,QAAQ,GAAG,OAAO,YAAY;AACjE,SAAM,YAAY,IAAI,YAAY,kBAAkB,QAAQ,QAAQ,EAAE;IACpE,MAAM;IACN,YAAY,EAAE,KAAK,OAAO,iBAAiB;IAC5C,CAAC;AACF,UAAO,MAAM,uCAAuC,eAAe;WAC5D,OAAO;AACd,OACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,iBAAiB,EACxC;AACA,WAAO,MACL,+CACA,eACD;AACD,cAAU,eAAe,MAAM,IAAI,CAAC,KAAK;SAEzC,QAAO,MACL,6DACA,gBACA,MACD;YAEK;AAER,OAAI,CAAC,mBAAmB,QAEtB,mBAAkB,GADD,QAAQ,QAAQ,UAAU,OACb,eAAe,WAAW,KAAK;;;AAMrE,QAAO;EACL;EACA;EACA,SAAS;EACT;EACA,MAAM;EACP;;AAGH,MAAa,mBAAmB,OAC9B,UAA8B,EAAE,KACA;CAChC,MAAM,gBAAgB,QAAQ,QAAQ;CACtC,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,aAAa,MAAM,kBACvB,eACA,QAAQ,cAAc,OACtB,OACD;CAGD,MAAM,eAAe,MAAM,kBAAkB;CAE7C,MAAM,+BAA+B,MAAM,aAAa,gBACtD,kCACA,QAAQ,gCACN,yCACH;AAED,SAAQ,+BAA+B;CAEvC,MAAM,oBACJ,QAAQ,UAAU,qBACjB,MAAM,aAAa,gBAClB,oBACA,2BACD;AACH,SAAQ,WAAW;EAAE,GAAG,QAAQ;EAAU;EAAmB;AAE7D,QAAO,KACL,yBACA,KAAK,UACH;EACE,kCAAkC;EAClC,oBAAoB;EACrB,EACD,MACA,EACD,CACF;CAGD,IAAI,SAAyB;AAC7B,KAAI;AACF,WAAS,MAAM,WAAW,QAAQ,SAAS;UACpC,GAAG;AACV,SAAO,KAAK,8CAA8C,EAAE;AAC5D,MAAI,QAAQ,UAAU,gBACpB,OAAM,IAAI,MACR,sEACD;;AAIL,KAAI;AACF,SAAO,MAAM,WAAW,YAAY,SAAS,OAAO;UAC7C,GAAG;AACV,SAAO,iBAAiB,EAAE;AAC1B,SAAO,MAAM,uBAAuB,EAAE;AACtC,QAAM;;;AAMV,IAAI,OAAO,KAAK,KACd,OAAM,kBAAkB"}