@prisma-next/runtime-executor 0.3.0-dev.8 → 0.3.0-dev.80
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -0
- package/README.md +5 -3
- package/dist/index.d.mts +169 -0
- package/dist/index.d.mts.map +1 -0
- package/dist/index.mjs +557 -0
- package/dist/index.mjs.map +1 -0
- package/package.json +23 -16
- package/src/async-iterable-result.ts +39 -22
- package/src/exports/index.ts +3 -2
- package/src/marker.ts +1 -1
- package/src/runtime-core.ts +105 -28
- package/dist/async-iterable-result.d.ts +0 -17
- package/dist/async-iterable-result.d.ts.map +0 -1
- package/dist/errors.d.ts +0 -8
- package/dist/errors.d.ts.map +0 -1
- package/dist/exports/index.d.ts +0 -17
- package/dist/exports/index.d.ts.map +0 -1
- package/dist/fingerprint.d.ts +0 -2
- package/dist/fingerprint.d.ts.map +0 -1
- package/dist/guardrails/raw.d.ts +0 -28
- package/dist/guardrails/raw.d.ts.map +0 -1
- package/dist/index.d.ts +0 -2
- package/dist/index.d.ts.map +0 -1
- package/dist/index.js +0 -746
- package/dist/index.js.map +0 -1
- package/dist/marker.d.ts +0 -13
- package/dist/marker.d.ts.map +0 -1
- package/dist/plugins/budgets.d.ts +0 -16
- package/dist/plugins/budgets.d.ts.map +0 -1
- package/dist/plugins/lints.d.ts +0 -11
- package/dist/plugins/lints.d.ts.map +0 -1
- package/dist/plugins/types.d.ts +0 -27
- package/dist/plugins/types.d.ts.map +0 -1
- package/dist/runtime-core.d.ts +0 -37
- package/dist/runtime-core.d.ts.map +0 -1
- package/dist/runtime-spi.d.ts +0 -14
- package/dist/runtime-spi.d.ts.map +0 -1
- package/src/plugins/lints.ts +0 -85
package/dist/index.mjs
ADDED
|
@@ -0,0 +1,557 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
import { type } from "arktype";
|
|
3
|
+
|
|
4
|
+
//#region src/errors.ts
|
|
5
|
+
function runtimeError(code, message, details) {
|
|
6
|
+
const error = new Error(message);
|
|
7
|
+
Object.defineProperty(error, "name", {
|
|
8
|
+
value: "RuntimeError",
|
|
9
|
+
configurable: true
|
|
10
|
+
});
|
|
11
|
+
return Object.assign(error, {
|
|
12
|
+
code,
|
|
13
|
+
category: resolveCategory(code),
|
|
14
|
+
severity: "error",
|
|
15
|
+
message,
|
|
16
|
+
details
|
|
17
|
+
});
|
|
18
|
+
}
|
|
19
|
+
function resolveCategory(code) {
|
|
20
|
+
const prefix = code.split(".")[0] ?? "RUNTIME";
|
|
21
|
+
switch (prefix) {
|
|
22
|
+
case "PLAN":
|
|
23
|
+
case "CONTRACT":
|
|
24
|
+
case "LINT":
|
|
25
|
+
case "BUDGET": return prefix;
|
|
26
|
+
default: return "RUNTIME";
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
//#endregion
|
|
31
|
+
//#region src/async-iterable-result.ts
|
|
32
|
+
/**
|
|
33
|
+
* Custom async iterable result that extends AsyncIterable with a toArray() method.
|
|
34
|
+
* This provides a convenient way to collect all results from an async iterator.
|
|
35
|
+
*/
|
|
36
|
+
var AsyncIterableResult = class {
|
|
37
|
+
generator;
|
|
38
|
+
consumed = false;
|
|
39
|
+
consumedBy;
|
|
40
|
+
bufferedArrayPromise;
|
|
41
|
+
constructor(generator) {
|
|
42
|
+
this.generator = generator;
|
|
43
|
+
}
|
|
44
|
+
[Symbol.asyncIterator]() {
|
|
45
|
+
if (this.consumed) throw runtimeError("RUNTIME.ITERATOR_CONSUMED", `AsyncIterableResult iterator has already been consumed via ${this.consumedBy === "bufferedArray" ? "toArray()/then()" : "for-await loop"}. Each AsyncIterableResult can only be iterated once.`, {
|
|
46
|
+
consumedBy: this.consumedBy,
|
|
47
|
+
suggestion: this.consumedBy === "bufferedArray" ? "If you need to iterate multiple times, store the results from toArray() in a variable and reuse that." : "If you need to iterate multiple times, use toArray() to collect all results first."
|
|
48
|
+
});
|
|
49
|
+
this.consumed = true;
|
|
50
|
+
this.consumedBy = "iterator";
|
|
51
|
+
return this.generator;
|
|
52
|
+
}
|
|
53
|
+
/**
|
|
54
|
+
* Collects all values from the async iterator into an array.
|
|
55
|
+
* Once called, the iterator is consumed and cannot be reused.
|
|
56
|
+
*/
|
|
57
|
+
toArray() {
|
|
58
|
+
if (this.consumedBy === "iterator") return Promise.reject(runtimeError("RUNTIME.ITERATOR_CONSUMED", "AsyncIterableResult iterator has already been consumed via for-await loop. Each AsyncIterableResult can only be iterated once.", {
|
|
59
|
+
consumedBy: this.consumedBy,
|
|
60
|
+
suggestion: "The iterator was already consumed by a for-await loop. Use toArray() or await the result before iterating."
|
|
61
|
+
}));
|
|
62
|
+
if (this.bufferedArrayPromise) return this.bufferedArrayPromise;
|
|
63
|
+
this.consumed = true;
|
|
64
|
+
this.consumedBy = "bufferedArray";
|
|
65
|
+
this.bufferedArrayPromise = (async () => {
|
|
66
|
+
const out = [];
|
|
67
|
+
for await (const item of this.generator) out.push(item);
|
|
68
|
+
return out;
|
|
69
|
+
})();
|
|
70
|
+
return this.bufferedArrayPromise;
|
|
71
|
+
}
|
|
72
|
+
then(onfulfilled, onrejected) {
|
|
73
|
+
return this.toArray().then(onfulfilled, onrejected);
|
|
74
|
+
}
|
|
75
|
+
};
|
|
76
|
+
|
|
77
|
+
//#endregion
|
|
78
|
+
//#region src/fingerprint.ts
|
|
79
|
+
const STRING_LITERAL_REGEX = /'(?:''|[^'])*'/g;
|
|
80
|
+
const NUMERIC_LITERAL_REGEX = /\b\d+(?:\.\d+)?\b/g;
|
|
81
|
+
const WHITESPACE_REGEX = /\s+/g;
|
|
82
|
+
function computeSqlFingerprint(sql) {
|
|
83
|
+
const normalized = sql.replace(STRING_LITERAL_REGEX, "?").replace(NUMERIC_LITERAL_REGEX, "?").replace(WHITESPACE_REGEX, " ").trim().toLowerCase();
|
|
84
|
+
return `sha256:${createHash("sha256").update(normalized).digest("hex")}`;
|
|
85
|
+
}
|
|
86
|
+
|
|
87
|
+
//#endregion
|
|
88
|
+
//#region src/guardrails/raw.ts
|
|
89
|
+
const SELECT_STAR_REGEX = /select\s+\*/i;
|
|
90
|
+
const LIMIT_REGEX = /\blimit\b/i;
|
|
91
|
+
const MUTATION_PREFIX_REGEX = /^(insert|update|delete|create|alter|drop|truncate)\b/i;
|
|
92
|
+
const READ_ONLY_INTENTS = new Set([
|
|
93
|
+
"read",
|
|
94
|
+
"report",
|
|
95
|
+
"readonly"
|
|
96
|
+
]);
|
|
97
|
+
function evaluateRawGuardrails(plan, config) {
|
|
98
|
+
const lints = [];
|
|
99
|
+
const budgets$1 = [];
|
|
100
|
+
const normalized = normalizeWhitespace(plan.sql);
|
|
101
|
+
const statementType = classifyStatement(normalized);
|
|
102
|
+
if (statementType === "select") {
|
|
103
|
+
if (SELECT_STAR_REGEX.test(normalized)) lints.push(createLint("LINT.SELECT_STAR", "error", "Raw SQL plan selects all columns via *", { sql: snippet(plan.sql) }));
|
|
104
|
+
if (!LIMIT_REGEX.test(normalized)) {
|
|
105
|
+
const severity = config?.budgets?.unboundedSelectSeverity ?? "error";
|
|
106
|
+
lints.push(createLint("LINT.NO_LIMIT", "warn", "Raw SQL plan omits LIMIT clause", { sql: snippet(plan.sql) }));
|
|
107
|
+
budgets$1.push(createBudget("BUDGET.ROWS_EXCEEDED", severity, "Raw SQL plan is unbounded and may exceed row budget", {
|
|
108
|
+
sql: snippet(plan.sql),
|
|
109
|
+
...config?.budgets?.estimatedRows !== void 0 ? { estimatedRows: config.budgets.estimatedRows } : {}
|
|
110
|
+
}));
|
|
111
|
+
}
|
|
112
|
+
}
|
|
113
|
+
if (isMutationStatement(statementType) && isReadOnlyIntent(plan.meta)) lints.push(createLint("LINT.READ_ONLY_MUTATION", "error", "Raw SQL plan mutates data despite read-only intent", {
|
|
114
|
+
sql: snippet(plan.sql),
|
|
115
|
+
intent: plan.meta.annotations?.["intent"]
|
|
116
|
+
}));
|
|
117
|
+
const refs = plan.meta.refs;
|
|
118
|
+
if (refs) evaluateIndexCoverage(refs, lints);
|
|
119
|
+
return {
|
|
120
|
+
lints,
|
|
121
|
+
budgets: budgets$1,
|
|
122
|
+
statement: statementType
|
|
123
|
+
};
|
|
124
|
+
}
|
|
125
|
+
function evaluateIndexCoverage(refs, lints) {
|
|
126
|
+
const predicateColumns = refs.columns ?? [];
|
|
127
|
+
if (predicateColumns.length === 0) return;
|
|
128
|
+
const indexes = refs.indexes ?? [];
|
|
129
|
+
if (indexes.length === 0) {
|
|
130
|
+
lints.push(createLint("LINT.UNINDEXED_PREDICATE", "warn", "Raw SQL plan predicates lack supporting indexes", { predicates: predicateColumns }));
|
|
131
|
+
return;
|
|
132
|
+
}
|
|
133
|
+
if (!predicateColumns.every((column) => indexes.some((index) => index.table === column.table && index.columns.some((col) => col.toLowerCase() === column.column.toLowerCase())))) lints.push(createLint("LINT.UNINDEXED_PREDICATE", "warn", "Raw SQL plan predicates lack supporting indexes", { predicates: predicateColumns }));
|
|
134
|
+
}
|
|
135
|
+
function classifyStatement(sql) {
|
|
136
|
+
const trimmed = sql.trim();
|
|
137
|
+
const lower = trimmed.toLowerCase();
|
|
138
|
+
if (lower.startsWith("with")) {
|
|
139
|
+
if (lower.includes("select")) return "select";
|
|
140
|
+
}
|
|
141
|
+
if (lower.startsWith("select")) return "select";
|
|
142
|
+
if (MUTATION_PREFIX_REGEX.test(trimmed)) return "mutation";
|
|
143
|
+
return "other";
|
|
144
|
+
}
|
|
145
|
+
function isMutationStatement(statement) {
|
|
146
|
+
return statement === "mutation";
|
|
147
|
+
}
|
|
148
|
+
function isReadOnlyIntent(meta) {
|
|
149
|
+
const annotations = meta.annotations;
|
|
150
|
+
const intent = typeof annotations?.intent === "string" ? annotations.intent.toLowerCase() : void 0;
|
|
151
|
+
return intent !== void 0 && READ_ONLY_INTENTS.has(intent);
|
|
152
|
+
}
|
|
153
|
+
function normalizeWhitespace(value) {
|
|
154
|
+
return value.replace(/\s+/g, " ").trim();
|
|
155
|
+
}
|
|
156
|
+
function snippet(sql) {
|
|
157
|
+
return normalizeWhitespace(sql).slice(0, 200);
|
|
158
|
+
}
|
|
159
|
+
function createLint(code, severity, message, details) {
|
|
160
|
+
return {
|
|
161
|
+
code,
|
|
162
|
+
severity,
|
|
163
|
+
message,
|
|
164
|
+
...details ? { details } : {}
|
|
165
|
+
};
|
|
166
|
+
}
|
|
167
|
+
function createBudget(code, severity, message, details) {
|
|
168
|
+
return {
|
|
169
|
+
code,
|
|
170
|
+
severity,
|
|
171
|
+
message,
|
|
172
|
+
...details ? { details } : {}
|
|
173
|
+
};
|
|
174
|
+
}
|
|
175
|
+
|
|
176
|
+
//#endregion
|
|
177
|
+
//#region src/marker.ts
|
|
178
|
+
const MetaSchema = type({ "[string]": "unknown" });
|
|
179
|
+
function parseMeta(meta) {
|
|
180
|
+
if (meta === null || meta === void 0) return {};
|
|
181
|
+
let parsed;
|
|
182
|
+
if (typeof meta === "string") try {
|
|
183
|
+
parsed = JSON.parse(meta);
|
|
184
|
+
} catch {
|
|
185
|
+
return {};
|
|
186
|
+
}
|
|
187
|
+
else parsed = meta;
|
|
188
|
+
const result = MetaSchema(parsed);
|
|
189
|
+
if (result instanceof type.errors) return {};
|
|
190
|
+
return result;
|
|
191
|
+
}
|
|
192
|
+
const ContractMarkerRowSchema = type({
|
|
193
|
+
core_hash: "string",
|
|
194
|
+
profile_hash: "string",
|
|
195
|
+
"contract_json?": "unknown | null",
|
|
196
|
+
"canonical_version?": "number | null",
|
|
197
|
+
"updated_at?": "Date | string",
|
|
198
|
+
"app_tag?": "string | null",
|
|
199
|
+
"meta?": "unknown | null"
|
|
200
|
+
});
|
|
201
|
+
function parseContractMarkerRow(row) {
|
|
202
|
+
const result = ContractMarkerRowSchema(row);
|
|
203
|
+
if (result instanceof type.errors) {
|
|
204
|
+
const messages = result.map((p) => p.message).join("; ");
|
|
205
|
+
throw new Error(`Invalid contract marker row: ${messages}`);
|
|
206
|
+
}
|
|
207
|
+
const validatedRow = result;
|
|
208
|
+
const updatedAt = validatedRow.updated_at ? validatedRow.updated_at instanceof Date ? validatedRow.updated_at : new Date(validatedRow.updated_at) : /* @__PURE__ */ new Date();
|
|
209
|
+
return {
|
|
210
|
+
storageHash: validatedRow.core_hash,
|
|
211
|
+
profileHash: validatedRow.profile_hash,
|
|
212
|
+
contractJson: validatedRow.contract_json ?? null,
|
|
213
|
+
canonicalVersion: validatedRow.canonical_version ?? null,
|
|
214
|
+
updatedAt,
|
|
215
|
+
appTag: validatedRow.app_tag ?? null,
|
|
216
|
+
meta: parseMeta(validatedRow.meta)
|
|
217
|
+
};
|
|
218
|
+
}
|
|
219
|
+
|
|
220
|
+
//#endregion
|
|
221
|
+
//#region src/plugins/budgets.ts
|
|
222
|
+
async function computeEstimatedRows(plan, driver) {
|
|
223
|
+
if (typeof driver.explain !== "function") return;
|
|
224
|
+
try {
|
|
225
|
+
return extractEstimatedRows((await driver.explain(plan.sql, [...plan.params])).rows);
|
|
226
|
+
} catch {
|
|
227
|
+
return;
|
|
228
|
+
}
|
|
229
|
+
}
|
|
230
|
+
function extractEstimatedRows(rows) {
|
|
231
|
+
for (const row of rows) {
|
|
232
|
+
const estimate = findPlanRows(row);
|
|
233
|
+
if (estimate !== void 0) return estimate;
|
|
234
|
+
}
|
|
235
|
+
}
|
|
236
|
+
function findPlanRows(node) {
|
|
237
|
+
if (!node || typeof node !== "object") return;
|
|
238
|
+
const explainNode = node;
|
|
239
|
+
const planRows = explainNode["Plan Rows"];
|
|
240
|
+
if (typeof planRows === "number") return planRows;
|
|
241
|
+
if ("Plan" in explainNode && explainNode.Plan !== void 0) {
|
|
242
|
+
const nested = findPlanRows(explainNode.Plan);
|
|
243
|
+
if (nested !== void 0) return nested;
|
|
244
|
+
}
|
|
245
|
+
if (Array.isArray(explainNode.Plans)) for (const child of explainNode.Plans) {
|
|
246
|
+
const nested = findPlanRows(child);
|
|
247
|
+
if (nested !== void 0) return nested;
|
|
248
|
+
}
|
|
249
|
+
for (const value of Object.values(node)) if (typeof value === "object" && value !== null) {
|
|
250
|
+
const nested = findPlanRows(value);
|
|
251
|
+
if (nested !== void 0) return nested;
|
|
252
|
+
}
|
|
253
|
+
}
|
|
254
|
+
function budgetError(code, message, details) {
|
|
255
|
+
const error = new Error(message);
|
|
256
|
+
Object.defineProperty(error, "name", {
|
|
257
|
+
value: "RuntimeError",
|
|
258
|
+
configurable: true
|
|
259
|
+
});
|
|
260
|
+
return Object.assign(error, {
|
|
261
|
+
code,
|
|
262
|
+
category: "BUDGET",
|
|
263
|
+
severity: "error",
|
|
264
|
+
details
|
|
265
|
+
});
|
|
266
|
+
}
|
|
267
|
+
function estimateRows(plan, tableRows, defaultTableRows) {
|
|
268
|
+
if (!plan.ast) return null;
|
|
269
|
+
const table = plan.meta.refs?.tables?.[0];
|
|
270
|
+
if (!table) return null;
|
|
271
|
+
const tableEstimate = tableRows[table] ?? defaultTableRows;
|
|
272
|
+
if (plan.ast && typeof plan.ast === "object" && "kind" in plan.ast && plan.ast.kind === "select" && "limit" in plan.ast && typeof plan.ast.limit === "number") return Math.min(plan.ast.limit, tableEstimate);
|
|
273
|
+
return tableEstimate;
|
|
274
|
+
}
|
|
275
|
+
function hasDetectableLimit(plan) {
|
|
276
|
+
if (plan.ast && typeof plan.ast === "object" && "kind" in plan.ast && plan.ast.kind === "select" && "limit" in plan.ast && typeof plan.ast.limit === "number") return true;
|
|
277
|
+
const annotations = plan.meta.annotations;
|
|
278
|
+
return typeof annotations?.limit === "number" || typeof annotations?.LIMIT === "number";
|
|
279
|
+
}
|
|
280
|
+
function budgets(options) {
|
|
281
|
+
const maxRows = options?.maxRows ?? 1e4;
|
|
282
|
+
const defaultTableRows = options?.defaultTableRows ?? 1e4;
|
|
283
|
+
const tableRows = options?.tableRows ?? {};
|
|
284
|
+
const maxLatencyMs = options?.maxLatencyMs ?? 1e3;
|
|
285
|
+
const rowSeverity = options?.severities?.rowCount ?? "error";
|
|
286
|
+
const latencySeverity = options?.severities?.latency ?? "warn";
|
|
287
|
+
let observedRows = 0;
|
|
288
|
+
return Object.freeze({
|
|
289
|
+
name: "budgets",
|
|
290
|
+
async beforeExecute(plan, ctx) {
|
|
291
|
+
observedRows = 0;
|
|
292
|
+
ctx.now();
|
|
293
|
+
const estimated = estimateRows(plan, tableRows, defaultTableRows);
|
|
294
|
+
const isUnbounded = !hasDetectableLimit(plan);
|
|
295
|
+
const isSelect = plan.sql.trimStart().toUpperCase().startsWith("SELECT");
|
|
296
|
+
if (isSelect && isUnbounded) {
|
|
297
|
+
if (estimated !== null && estimated >= maxRows) {
|
|
298
|
+
const error$1 = budgetError("BUDGET.ROWS_EXCEEDED", "Unbounded SELECT query exceeds budget", {
|
|
299
|
+
source: "heuristic",
|
|
300
|
+
estimatedRows: estimated,
|
|
301
|
+
maxRows
|
|
302
|
+
});
|
|
303
|
+
if (rowSeverity === "error" || ctx.mode === "strict") throw error$1;
|
|
304
|
+
ctx.log.warn({
|
|
305
|
+
code: error$1.code,
|
|
306
|
+
message: error$1.message,
|
|
307
|
+
details: error$1.details
|
|
308
|
+
});
|
|
309
|
+
return;
|
|
310
|
+
}
|
|
311
|
+
const error = budgetError("BUDGET.ROWS_EXCEEDED", "Unbounded SELECT query exceeds budget", {
|
|
312
|
+
source: "heuristic",
|
|
313
|
+
maxRows
|
|
314
|
+
});
|
|
315
|
+
if (rowSeverity === "error" || ctx.mode === "strict") throw error;
|
|
316
|
+
ctx.log.warn({
|
|
317
|
+
code: error.code,
|
|
318
|
+
message: error.message,
|
|
319
|
+
details: error.details
|
|
320
|
+
});
|
|
321
|
+
return;
|
|
322
|
+
}
|
|
323
|
+
if (estimated !== null) {
|
|
324
|
+
if (estimated > maxRows) {
|
|
325
|
+
const error = budgetError("BUDGET.ROWS_EXCEEDED", "Estimated row count exceeds budget", {
|
|
326
|
+
source: "heuristic",
|
|
327
|
+
estimatedRows: estimated,
|
|
328
|
+
maxRows
|
|
329
|
+
});
|
|
330
|
+
if (rowSeverity === "error" || ctx.mode === "strict") throw error;
|
|
331
|
+
ctx.log.warn({
|
|
332
|
+
code: error.code,
|
|
333
|
+
message: error.message,
|
|
334
|
+
details: error.details
|
|
335
|
+
});
|
|
336
|
+
}
|
|
337
|
+
return;
|
|
338
|
+
}
|
|
339
|
+
if (!plan.ast) {
|
|
340
|
+
if (options?.explain?.enabled === true && isSelect && typeof ctx.driver === "object" && ctx.driver !== null) {
|
|
341
|
+
const estimatedRows = await computeEstimatedRows(plan, ctx.driver);
|
|
342
|
+
if (estimatedRows !== void 0) {
|
|
343
|
+
if (estimatedRows > maxRows) {
|
|
344
|
+
const error = budgetError("BUDGET.ROWS_EXCEEDED", "Estimated row count exceeds budget", {
|
|
345
|
+
source: "explain",
|
|
346
|
+
estimatedRows,
|
|
347
|
+
maxRows
|
|
348
|
+
});
|
|
349
|
+
if (rowSeverity === "error" || ctx.mode === "strict") throw error;
|
|
350
|
+
ctx.log.warn({
|
|
351
|
+
code: error.code,
|
|
352
|
+
message: error.message,
|
|
353
|
+
details: error.details
|
|
354
|
+
});
|
|
355
|
+
}
|
|
356
|
+
return;
|
|
357
|
+
}
|
|
358
|
+
}
|
|
359
|
+
}
|
|
360
|
+
},
|
|
361
|
+
async onRow(_row, _plan, _ctx) {
|
|
362
|
+
observedRows += 1;
|
|
363
|
+
if (observedRows > maxRows) throw budgetError("BUDGET.ROWS_EXCEEDED", "Observed row count exceeds budget", {
|
|
364
|
+
source: "observed",
|
|
365
|
+
observedRows,
|
|
366
|
+
maxRows
|
|
367
|
+
});
|
|
368
|
+
},
|
|
369
|
+
async afterExecute(_plan, result, ctx) {
|
|
370
|
+
const latencyMs = result.latencyMs;
|
|
371
|
+
if (latencyMs > maxLatencyMs) {
|
|
372
|
+
const error = budgetError("BUDGET.TIME_EXCEEDED", "Query latency exceeds budget", {
|
|
373
|
+
latencyMs,
|
|
374
|
+
maxLatencyMs
|
|
375
|
+
});
|
|
376
|
+
if (latencySeverity === "error" && ctx.mode === "strict") throw error;
|
|
377
|
+
ctx.log.warn({
|
|
378
|
+
code: error.code,
|
|
379
|
+
message: error.message,
|
|
380
|
+
details: error.details
|
|
381
|
+
});
|
|
382
|
+
}
|
|
383
|
+
}
|
|
384
|
+
});
|
|
385
|
+
}
|
|
386
|
+
|
|
387
|
+
//#endregion
|
|
388
|
+
//#region src/runtime-core.ts
|
|
389
|
+
var RuntimeCoreImpl = class {
|
|
390
|
+
_typeContract;
|
|
391
|
+
_typeAdapter;
|
|
392
|
+
_typeDriver;
|
|
393
|
+
contract;
|
|
394
|
+
familyAdapter;
|
|
395
|
+
driver;
|
|
396
|
+
plugins;
|
|
397
|
+
mode;
|
|
398
|
+
verify;
|
|
399
|
+
operationRegistry;
|
|
400
|
+
pluginContext;
|
|
401
|
+
verified;
|
|
402
|
+
startupVerified;
|
|
403
|
+
_telemetry;
|
|
404
|
+
constructor(options) {
|
|
405
|
+
const { familyAdapter, driver } = options;
|
|
406
|
+
this.contract = familyAdapter.contract;
|
|
407
|
+
this.familyAdapter = familyAdapter;
|
|
408
|
+
this.driver = driver;
|
|
409
|
+
this.plugins = options.plugins ?? [];
|
|
410
|
+
this.mode = options.mode ?? "strict";
|
|
411
|
+
this.verify = options.verify;
|
|
412
|
+
this.operationRegistry = options.operationRegistry;
|
|
413
|
+
this.verified = options.verify.mode === "startup" ? false : options.verify.mode === "always";
|
|
414
|
+
this.startupVerified = false;
|
|
415
|
+
this._telemetry = null;
|
|
416
|
+
this.pluginContext = {
|
|
417
|
+
contract: this.contract,
|
|
418
|
+
adapter: options.familyAdapter,
|
|
419
|
+
driver: this.driver,
|
|
420
|
+
mode: this.mode,
|
|
421
|
+
now: () => Date.now(),
|
|
422
|
+
log: options.log ?? {
|
|
423
|
+
info: () => {},
|
|
424
|
+
warn: () => {},
|
|
425
|
+
error: () => {}
|
|
426
|
+
}
|
|
427
|
+
};
|
|
428
|
+
}
|
|
429
|
+
async verifyPlanIfNeeded(_plan) {
|
|
430
|
+
if (this.verify.mode === "always") this.verified = false;
|
|
431
|
+
if (this.verified) return;
|
|
432
|
+
const readStatement = this.familyAdapter.markerReader.readMarkerStatement();
|
|
433
|
+
const result = await this.driver.query(readStatement.sql, readStatement.params);
|
|
434
|
+
if (result.rows.length === 0) {
|
|
435
|
+
if (this.verify.requireMarker) throw runtimeError("CONTRACT.MARKER_MISSING", "Contract marker not found in database");
|
|
436
|
+
this.verified = true;
|
|
437
|
+
return;
|
|
438
|
+
}
|
|
439
|
+
const marker = parseContractMarkerRow(result.rows[0]);
|
|
440
|
+
const contract = this.contract;
|
|
441
|
+
if (marker.storageHash !== contract.storageHash) throw runtimeError("CONTRACT.MARKER_MISMATCH", "Database storage hash does not match contract", {
|
|
442
|
+
expected: contract.storageHash,
|
|
443
|
+
actual: marker.storageHash
|
|
444
|
+
});
|
|
445
|
+
const expectedProfile = contract.profileHash ?? null;
|
|
446
|
+
if (expectedProfile !== null && marker.profileHash !== expectedProfile) throw runtimeError("CONTRACT.MARKER_MISMATCH", "Database profile hash does not match contract", {
|
|
447
|
+
expectedProfile,
|
|
448
|
+
actualProfile: marker.profileHash
|
|
449
|
+
});
|
|
450
|
+
this.verified = true;
|
|
451
|
+
this.startupVerified = true;
|
|
452
|
+
}
|
|
453
|
+
validatePlan(plan) {
|
|
454
|
+
this.familyAdapter.validatePlan(plan, this.contract);
|
|
455
|
+
}
|
|
456
|
+
recordTelemetry(plan, outcome, durationMs) {
|
|
457
|
+
const contract = this.contract;
|
|
458
|
+
this._telemetry = Object.freeze({
|
|
459
|
+
lane: plan.meta.lane,
|
|
460
|
+
target: contract.target,
|
|
461
|
+
fingerprint: computeSqlFingerprint(plan.sql),
|
|
462
|
+
outcome,
|
|
463
|
+
...durationMs !== void 0 ? { durationMs } : {}
|
|
464
|
+
});
|
|
465
|
+
}
|
|
466
|
+
execute(plan) {
|
|
467
|
+
return this.#executeWith(plan, this.driver);
|
|
468
|
+
}
|
|
469
|
+
async connection() {
|
|
470
|
+
const driverConn = await this.driver.acquireConnection();
|
|
471
|
+
const self = this;
|
|
472
|
+
return {
|
|
473
|
+
async transaction() {
|
|
474
|
+
const driverTx = await driverConn.beginTransaction();
|
|
475
|
+
return {
|
|
476
|
+
async commit() {
|
|
477
|
+
await driverTx.commit();
|
|
478
|
+
},
|
|
479
|
+
async rollback() {
|
|
480
|
+
await driverTx.rollback();
|
|
481
|
+
},
|
|
482
|
+
execute(plan) {
|
|
483
|
+
return self.#executeWith(plan, driverTx);
|
|
484
|
+
}
|
|
485
|
+
};
|
|
486
|
+
},
|
|
487
|
+
execute(plan) {
|
|
488
|
+
return self.#executeWith(plan, driverConn);
|
|
489
|
+
},
|
|
490
|
+
async release() {
|
|
491
|
+
await driverConn.release();
|
|
492
|
+
}
|
|
493
|
+
};
|
|
494
|
+
}
|
|
495
|
+
telemetry() {
|
|
496
|
+
return this._telemetry;
|
|
497
|
+
}
|
|
498
|
+
operations() {
|
|
499
|
+
return this.operationRegistry;
|
|
500
|
+
}
|
|
501
|
+
close() {
|
|
502
|
+
const driver = this.driver;
|
|
503
|
+
if (typeof driver.close === "function") return driver.close();
|
|
504
|
+
return Promise.resolve();
|
|
505
|
+
}
|
|
506
|
+
#executeWith(plan, queryable) {
|
|
507
|
+
this.validatePlan(plan);
|
|
508
|
+
this._telemetry = null;
|
|
509
|
+
const iterator = async function* (self) {
|
|
510
|
+
const startedAt = Date.now();
|
|
511
|
+
let rowCount = 0;
|
|
512
|
+
let completed = false;
|
|
513
|
+
if (!self.startupVerified && self.verify.mode === "startup") await self.verifyPlanIfNeeded(plan);
|
|
514
|
+
if (self.verify.mode === "onFirstUse") await self.verifyPlanIfNeeded(plan);
|
|
515
|
+
try {
|
|
516
|
+
if (self.verify.mode === "always") await self.verifyPlanIfNeeded(plan);
|
|
517
|
+
for (const plugin of self.plugins) if (plugin.beforeExecute) await plugin.beforeExecute(plan, self.pluginContext);
|
|
518
|
+
const encodedParams = plan.params;
|
|
519
|
+
for await (const row of queryable.execute({
|
|
520
|
+
sql: plan.sql,
|
|
521
|
+
params: encodedParams
|
|
522
|
+
})) {
|
|
523
|
+
for (const plugin of self.plugins) if (plugin.onRow) await plugin.onRow(row, plan, self.pluginContext);
|
|
524
|
+
rowCount++;
|
|
525
|
+
yield row;
|
|
526
|
+
}
|
|
527
|
+
completed = true;
|
|
528
|
+
self.recordTelemetry(plan, "success", Date.now() - startedAt);
|
|
529
|
+
} catch (error) {
|
|
530
|
+
if (self._telemetry === null) self.recordTelemetry(plan, "runtime-error", Date.now() - startedAt);
|
|
531
|
+
const latencyMs$1 = Date.now() - startedAt;
|
|
532
|
+
for (const plugin of self.plugins) if (plugin.afterExecute) try {
|
|
533
|
+
await plugin.afterExecute(plan, {
|
|
534
|
+
rowCount,
|
|
535
|
+
latencyMs: latencyMs$1,
|
|
536
|
+
completed
|
|
537
|
+
}, self.pluginContext);
|
|
538
|
+
} catch {}
|
|
539
|
+
throw error;
|
|
540
|
+
}
|
|
541
|
+
const latencyMs = Date.now() - startedAt;
|
|
542
|
+
for (const plugin of self.plugins) if (plugin.afterExecute) await plugin.afterExecute(plan, {
|
|
543
|
+
rowCount,
|
|
544
|
+
latencyMs,
|
|
545
|
+
completed
|
|
546
|
+
}, self.pluginContext);
|
|
547
|
+
};
|
|
548
|
+
return new AsyncIterableResult(iterator(this));
|
|
549
|
+
}
|
|
550
|
+
};
|
|
551
|
+
function createRuntimeCore(options) {
|
|
552
|
+
return new RuntimeCoreImpl(options);
|
|
553
|
+
}
|
|
554
|
+
|
|
555
|
+
//#endregion
|
|
556
|
+
export { AsyncIterableResult, budgets, computeSqlFingerprint, createRuntimeCore, evaluateRawGuardrails, parseContractMarkerRow, runtimeError };
|
|
557
|
+
//# sourceMappingURL=index.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.mjs","names":["out: Row[]","lints: LintFinding[]","budgets: BudgetFinding[]","parsed: unknown","error","#executeWith","latencyMs"],"sources":["../src/errors.ts","../src/async-iterable-result.ts","../src/fingerprint.ts","../src/guardrails/raw.ts","../src/marker.ts","../src/plugins/budgets.ts","../src/runtime-core.ts"],"sourcesContent":["export interface RuntimeErrorEnvelope extends Error {\n readonly code: string;\n readonly category: 'PLAN' | 'CONTRACT' | 'LINT' | 'BUDGET' | 'RUNTIME';\n readonly severity: 'error';\n readonly details?: Record<string, unknown>;\n}\n\nexport function runtimeError(\n code: string,\n message: string,\n details?: Record<string, unknown>,\n): RuntimeErrorEnvelope {\n const error = new Error(message) as RuntimeErrorEnvelope;\n Object.defineProperty(error, 'name', {\n value: 'RuntimeError',\n configurable: true,\n });\n\n return Object.assign(error, {\n code,\n category: resolveCategory(code),\n severity: 'error' as const,\n message,\n details,\n });\n}\n\nfunction resolveCategory(code: string): RuntimeErrorEnvelope['category'] {\n const prefix = code.split('.')[0] ?? 'RUNTIME';\n switch (prefix) {\n case 'PLAN':\n case 'CONTRACT':\n case 'LINT':\n case 'BUDGET':\n return prefix;\n default:\n return 'RUNTIME';\n }\n}\n","import { runtimeError } from './errors';\n\n/**\n * Custom async iterable result that extends AsyncIterable with a toArray() method.\n * This provides a convenient way to collect all results from an async iterator.\n */\nexport class AsyncIterableResult<Row> implements AsyncIterable<Row>, PromiseLike<Row[]> {\n private readonly generator: AsyncGenerator<Row, void, unknown>;\n private consumed = false;\n private consumedBy: 'bufferedArray' | 'iterator' | undefined;\n private bufferedArrayPromise: Promise<Row[]> | undefined;\n\n constructor(generator: AsyncGenerator<Row, void, unknown>) {\n this.generator = generator;\n }\n\n [Symbol.asyncIterator](): AsyncIterator<Row> {\n if (this.consumed) {\n throw runtimeError(\n 'RUNTIME.ITERATOR_CONSUMED',\n `AsyncIterableResult iterator has already been consumed via ${this.consumedBy === 'bufferedArray' ? 'toArray()/then()' : 'for-await loop'}. Each AsyncIterableResult can only be iterated once.`,\n {\n consumedBy: this.consumedBy,\n suggestion:\n this.consumedBy === 'bufferedArray'\n ? 'If you need to iterate multiple times, store the results from toArray() in a variable and reuse that.'\n : 'If you need to iterate multiple times, use toArray() to collect all results first.',\n },\n );\n }\n this.consumed = true;\n this.consumedBy = 'iterator';\n return this.generator;\n }\n\n /**\n * Collects all values from the async iterator into an array.\n * Once called, the iterator is consumed and cannot be reused.\n */\n toArray(): Promise<Row[]> {\n if (this.consumedBy === 'iterator') {\n return Promise.reject(\n runtimeError(\n 'RUNTIME.ITERATOR_CONSUMED',\n 'AsyncIterableResult iterator has already been consumed via for-await loop. Each AsyncIterableResult can only be iterated once.',\n {\n consumedBy: this.consumedBy,\n suggestion:\n 'The iterator was already consumed by a for-await loop. Use toArray() or await the result before iterating.',\n },\n ),\n );\n }\n\n if (this.bufferedArrayPromise) {\n return this.bufferedArrayPromise;\n }\n\n this.consumed = true;\n this.consumedBy = 'bufferedArray';\n this.bufferedArrayPromise = (async () => {\n const out: Row[] = [];\n for await (const item of this.generator) {\n out.push(item);\n }\n return out;\n })();\n return this.bufferedArrayPromise;\n }\n\n // biome-ignore lint/suspicious/noThenProperty: PromiseLike implementation is intentional for await support.\n then<TResult1 = Row[], TResult2 = never>(\n onfulfilled?: ((value: Row[]) => TResult1 | PromiseLike<TResult1>) | undefined | null,\n onrejected?: ((reason: unknown) => TResult2 | PromiseLike<TResult2>) | undefined | null,\n ): PromiseLike<TResult1 | TResult2> {\n return this.toArray().then(onfulfilled, onrejected);\n }\n}\n","import { createHash } from 'node:crypto';\n\nconst STRING_LITERAL_REGEX = /'(?:''|[^'])*'/g;\nconst NUMERIC_LITERAL_REGEX = /\\b\\d+(?:\\.\\d+)?\\b/g;\nconst WHITESPACE_REGEX = /\\s+/g;\n\nexport function computeSqlFingerprint(sql: string): string {\n const withoutStrings = sql.replace(STRING_LITERAL_REGEX, '?');\n const withoutNumbers = withoutStrings.replace(NUMERIC_LITERAL_REGEX, '?');\n const normalized = withoutNumbers.replace(WHITESPACE_REGEX, ' ').trim().toLowerCase();\n\n const hash = createHash('sha256').update(normalized).digest('hex');\n return `sha256:${hash}`;\n}\n","import type { ExecutionPlan, PlanMeta, PlanRefs } from '@prisma-next/contract/types';\n\nexport type LintSeverity = 'error' | 'warn';\nexport type BudgetSeverity = 'error' | 'warn';\n\nexport interface LintFinding {\n readonly code: `LINT.${string}`;\n readonly severity: LintSeverity;\n readonly message: string;\n readonly details?: Record<string, unknown>;\n}\n\nexport interface BudgetFinding {\n readonly code: `BUDGET.${string}`;\n readonly severity: BudgetSeverity;\n readonly message: string;\n readonly details?: Record<string, unknown>;\n}\n\nexport interface RawGuardrailConfig {\n readonly budgets?: {\n readonly unboundedSelectSeverity?: BudgetSeverity;\n readonly estimatedRows?: number;\n };\n}\n\nexport interface RawGuardrailResult {\n readonly lints: LintFinding[];\n readonly budgets: BudgetFinding[];\n readonly statement: 'select' | 'mutation' | 'other';\n}\n\nconst SELECT_STAR_REGEX = /select\\s+\\*/i;\nconst LIMIT_REGEX = /\\blimit\\b/i;\nconst MUTATION_PREFIX_REGEX = /^(insert|update|delete|create|alter|drop|truncate)\\b/i;\n\nconst READ_ONLY_INTENTS = new Set(['read', 'report', 'readonly']);\n\nexport function evaluateRawGuardrails(\n plan: ExecutionPlan,\n config?: RawGuardrailConfig,\n): RawGuardrailResult {\n const lints: LintFinding[] = [];\n const budgets: BudgetFinding[] = [];\n\n const normalized = normalizeWhitespace(plan.sql);\n const statementType = classifyStatement(normalized);\n\n if (statementType === 'select') {\n if (SELECT_STAR_REGEX.test(normalized)) {\n lints.push(\n createLint('LINT.SELECT_STAR', 'error', 'Raw SQL plan selects all columns via *', {\n sql: snippet(plan.sql),\n }),\n );\n }\n\n if (!LIMIT_REGEX.test(normalized)) {\n const severity = config?.budgets?.unboundedSelectSeverity ?? 'error';\n lints.push(\n createLint('LINT.NO_LIMIT', 'warn', 'Raw SQL plan omits LIMIT clause', {\n sql: snippet(plan.sql),\n }),\n );\n\n budgets.push(\n createBudget(\n 'BUDGET.ROWS_EXCEEDED',\n severity,\n 'Raw SQL plan is unbounded and may exceed row budget',\n {\n sql: snippet(plan.sql),\n ...(config?.budgets?.estimatedRows !== undefined\n ? { estimatedRows: config.budgets.estimatedRows }\n : {}),\n },\n ),\n );\n }\n }\n\n if (isMutationStatement(statementType) && isReadOnlyIntent(plan.meta)) {\n lints.push(\n createLint(\n 'LINT.READ_ONLY_MUTATION',\n 'error',\n 'Raw SQL plan mutates data despite read-only intent',\n {\n sql: snippet(plan.sql),\n intent: plan.meta.annotations?.['intent'],\n },\n ),\n );\n }\n\n const refs = plan.meta.refs;\n if (refs) {\n evaluateIndexCoverage(refs, lints);\n }\n\n return { lints, budgets, statement: statementType };\n}\n\nfunction evaluateIndexCoverage(refs: PlanRefs, lints: LintFinding[]) {\n const predicateColumns = refs.columns ?? [];\n if (predicateColumns.length === 0) {\n return;\n }\n\n const indexes = refs.indexes ?? [];\n\n if (indexes.length === 0) {\n lints.push(\n createLint(\n 'LINT.UNINDEXED_PREDICATE',\n 'warn',\n 'Raw SQL plan predicates lack supporting indexes',\n {\n predicates: predicateColumns,\n },\n ),\n );\n return;\n }\n\n const hasSupportingIndex = predicateColumns.every((column) =>\n indexes.some(\n (index) =>\n index.table === column.table &&\n index.columns.some((col) => col.toLowerCase() === column.column.toLowerCase()),\n ),\n );\n\n if (!hasSupportingIndex) {\n lints.push(\n createLint(\n 'LINT.UNINDEXED_PREDICATE',\n 'warn',\n 'Raw SQL plan predicates lack supporting indexes',\n {\n predicates: predicateColumns,\n },\n ),\n );\n }\n}\n\nfunction classifyStatement(sql: string): 'select' | 'mutation' | 'other' {\n const trimmed = sql.trim();\n const lower = trimmed.toLowerCase();\n\n if (lower.startsWith('with')) {\n if (lower.includes('select')) {\n return 'select';\n }\n }\n\n if (lower.startsWith('select')) {\n return 'select';\n }\n\n if (MUTATION_PREFIX_REGEX.test(trimmed)) {\n return 'mutation';\n }\n\n return 'other';\n}\n\nfunction isMutationStatement(statement: 'select' | 'mutation' | 'other'): boolean {\n return statement === 'mutation';\n}\n\nfunction isReadOnlyIntent(meta: PlanMeta): boolean {\n const annotations = meta.annotations as { intent?: string } | undefined;\n const intent =\n typeof annotations?.intent === 'string' ? annotations.intent.toLowerCase() : undefined;\n return intent !== undefined && READ_ONLY_INTENTS.has(intent);\n}\n\nfunction normalizeWhitespace(value: string): string {\n return value.replace(/\\s+/g, ' ').trim();\n}\n\nfunction snippet(sql: string): string {\n return normalizeWhitespace(sql).slice(0, 200);\n}\n\nfunction createLint(\n code: LintFinding['code'],\n severity: LintFinding['severity'],\n message: string,\n details?: Record<string, unknown>,\n): LintFinding {\n return { code, severity, message, ...(details ? { details } : {}) };\n}\n\nfunction createBudget(\n code: BudgetFinding['code'],\n severity: BudgetFinding['severity'],\n message: string,\n details?: Record<string, unknown>,\n): BudgetFinding {\n return { code, severity, message, ...(details ? { details } : {}) };\n}\n","import type { ContractMarkerRecord } from '@prisma-next/contract/types';\nimport { type } from 'arktype';\n\n// Re-export for backward compatibility\nexport type { ContractMarkerRecord } from '@prisma-next/contract/types';\n\nexport interface ContractMarkerRow {\n core_hash: string;\n profile_hash: string;\n contract_json: unknown | null;\n canonical_version: number | null;\n updated_at: Date;\n app_tag: string | null;\n meta: unknown | null;\n}\n\nconst MetaSchema = type({ '[string]': 'unknown' });\n\nfunction parseMeta(meta: unknown): Record<string, unknown> {\n if (meta === null || meta === undefined) {\n return {};\n }\n\n let parsed: unknown;\n if (typeof meta === 'string') {\n try {\n parsed = JSON.parse(meta);\n } catch {\n return {};\n }\n } else {\n parsed = meta;\n }\n\n const result = MetaSchema(parsed);\n if (result instanceof type.errors) {\n return {};\n }\n\n return result as Record<string, unknown>;\n}\n\nconst ContractMarkerRowSchema = type({\n core_hash: 'string',\n profile_hash: 'string',\n 'contract_json?': 'unknown | null',\n 'canonical_version?': 'number | null',\n 'updated_at?': 'Date | string',\n 'app_tag?': 'string | null',\n 'meta?': 'unknown | null',\n});\n\nexport function parseContractMarkerRow(row: unknown): ContractMarkerRecord {\n const result = ContractMarkerRowSchema(row);\n if (result instanceof type.errors) {\n const messages = result.map((p: { message: string }) => p.message).join('; ');\n throw new Error(`Invalid contract marker row: ${messages}`);\n }\n\n const validatedRow = result as {\n core_hash: string;\n profile_hash: string;\n contract_json?: unknown | null;\n canonical_version?: number | null;\n updated_at?: Date | string;\n app_tag?: string | null;\n meta?: unknown | null;\n };\n\n const updatedAt = validatedRow.updated_at\n ? validatedRow.updated_at instanceof Date\n ? validatedRow.updated_at\n : new Date(validatedRow.updated_at)\n : new Date();\n\n return {\n storageHash: validatedRow.core_hash,\n profileHash: validatedRow.profile_hash,\n contractJson: validatedRow.contract_json ?? null,\n canonicalVersion: validatedRow.canonical_version ?? null,\n updatedAt,\n appTag: validatedRow.app_tag ?? null,\n meta: parseMeta(validatedRow.meta),\n };\n}\n","import type { ExecutionPlan } from '@prisma-next/contract/types';\nimport type { AfterExecuteResult, Plugin, PluginContext } from './types';\n\nexport interface BudgetsOptions {\n readonly maxRows?: number;\n readonly defaultTableRows?: number;\n readonly tableRows?: Record<string, number>;\n readonly maxLatencyMs?: number;\n readonly severities?: {\n readonly rowCount?: 'warn' | 'error';\n readonly latency?: 'warn' | 'error';\n };\n readonly explain?: {\n readonly enabled?: boolean;\n };\n}\n\ninterface DriverWithExplain {\n explain?(\n sql: string,\n params: unknown[],\n ): Promise<{ rows: ReadonlyArray<Record<string, unknown>> }>;\n}\n\nasync function computeEstimatedRows(\n plan: ExecutionPlan,\n driver: DriverWithExplain,\n): Promise<number | undefined> {\n if (typeof driver.explain !== 'function') {\n return undefined;\n }\n\n try {\n const result = await driver.explain(plan.sql, [...plan.params]);\n return extractEstimatedRows(result.rows);\n } catch {\n return undefined;\n }\n}\n\nfunction extractEstimatedRows(rows: ReadonlyArray<Record<string, unknown>>): number | undefined {\n for (const row of rows) {\n const estimate = findPlanRows(row);\n if (estimate !== undefined) {\n return estimate;\n }\n }\n\n return undefined;\n}\n\ntype ExplainNode = {\n Plan?: unknown;\n Plans?: unknown[];\n 'Plan Rows'?: number;\n [key: string]: unknown;\n};\n\nfunction findPlanRows(node: unknown): number | undefined {\n if (!node || typeof node !== 'object') {\n return undefined;\n }\n\n const explainNode = node as ExplainNode;\n const planRows = explainNode['Plan Rows'];\n if (typeof planRows === 'number') {\n return planRows;\n }\n\n if ('Plan' in explainNode && explainNode.Plan !== undefined) {\n const nested = findPlanRows(explainNode.Plan);\n if (nested !== undefined) {\n return nested;\n }\n }\n\n if (Array.isArray(explainNode.Plans)) {\n for (const child of explainNode.Plans) {\n const nested = findPlanRows(child);\n if (nested !== undefined) {\n return nested;\n }\n }\n }\n\n for (const value of Object.values(node as Record<string, unknown>)) {\n if (typeof value === 'object' && value !== null) {\n const nested = findPlanRows(value);\n if (nested !== undefined) {\n return nested;\n }\n }\n }\n\n return undefined;\n}\n\nfunction budgetError(code: string, message: string, details?: Record<string, unknown>) {\n const error = new Error(message) as Error & {\n code: string;\n category: 'BUDGET';\n severity: 'error';\n details?: Record<string, unknown>;\n };\n Object.defineProperty(error, 'name', {\n value: 'RuntimeError',\n configurable: true,\n });\n return Object.assign(error, {\n code,\n category: 'BUDGET' as const,\n severity: 'error' as const,\n details,\n });\n}\n\nfunction estimateRows(\n plan: ExecutionPlan,\n tableRows: Record<string, number>,\n defaultTableRows: number,\n): number | null {\n if (!plan.ast) {\n return null;\n }\n\n const table = plan.meta.refs?.tables?.[0];\n if (!table) {\n return null;\n }\n\n const tableEstimate = tableRows[table] ?? defaultTableRows;\n\n if (\n plan.ast &&\n typeof plan.ast === 'object' &&\n 'kind' in plan.ast &&\n plan.ast.kind === 'select' &&\n 'limit' in plan.ast &&\n typeof plan.ast.limit === 'number'\n ) {\n return Math.min(plan.ast.limit, tableEstimate);\n }\n\n return tableEstimate;\n}\n\nfunction hasDetectableLimit(plan: ExecutionPlan): boolean {\n if (\n plan.ast &&\n typeof plan.ast === 'object' &&\n 'kind' in plan.ast &&\n plan.ast.kind === 'select' &&\n 'limit' in plan.ast &&\n typeof plan.ast.limit === 'number'\n ) {\n return true;\n }\n\n const annotations = plan.meta.annotations as { limit?: number; LIMIT?: number } | undefined;\n return typeof annotations?.limit === 'number' || typeof annotations?.LIMIT === 'number';\n}\n\nexport function budgets<TContract = unknown, TAdapter = unknown, TDriver = unknown>(\n options?: BudgetsOptions,\n): Plugin<TContract, TAdapter, TDriver> {\n const maxRows = options?.maxRows ?? 10_000;\n const defaultTableRows = options?.defaultTableRows ?? 10_000;\n const tableRows = options?.tableRows ?? {};\n const maxLatencyMs = options?.maxLatencyMs ?? 1_000;\n const rowSeverity = options?.severities?.rowCount ?? 'error';\n const latencySeverity = options?.severities?.latency ?? 'warn';\n\n let observedRows = 0;\n\n return Object.freeze({\n name: 'budgets',\n\n async beforeExecute(plan: ExecutionPlan, ctx: PluginContext<TContract, TAdapter, TDriver>) {\n observedRows = 0;\n void ctx.now();\n\n const estimated = estimateRows(plan, tableRows, defaultTableRows);\n const isUnbounded = !hasDetectableLimit(plan);\n const sqlUpper = plan.sql.trimStart().toUpperCase();\n const isSelect = sqlUpper.startsWith('SELECT');\n\n // Check for unbounded queries first - these should always error if they exceed or equal the budget\n if (isSelect && isUnbounded) {\n if (estimated !== null && estimated >= maxRows) {\n const error = budgetError(\n 'BUDGET.ROWS_EXCEEDED',\n 'Unbounded SELECT query exceeds budget',\n {\n source: 'heuristic',\n estimatedRows: estimated,\n maxRows,\n },\n );\n\n const shouldBlock = rowSeverity === 'error' || ctx.mode === 'strict';\n if (shouldBlock) {\n throw error;\n }\n ctx.log.warn({\n code: error.code,\n message: error.message,\n details: error.details,\n });\n return;\n }\n\n // Even if we can't estimate, unbounded queries should error\n const error = budgetError('BUDGET.ROWS_EXCEEDED', 'Unbounded SELECT query exceeds budget', {\n source: 'heuristic',\n maxRows,\n });\n\n const shouldBlock = rowSeverity === 'error' || ctx.mode === 'strict';\n if (shouldBlock) {\n throw error;\n }\n ctx.log.warn({\n code: error.code,\n message: error.message,\n details: error.details,\n });\n return;\n }\n\n // For bounded queries, check if estimated exceeds budget\n if (estimated !== null) {\n if (estimated > maxRows) {\n const error = budgetError('BUDGET.ROWS_EXCEEDED', 'Estimated row count exceeds budget', {\n source: 'heuristic',\n estimatedRows: estimated,\n maxRows,\n });\n\n const shouldBlock = rowSeverity === 'error' || ctx.mode === 'strict';\n if (shouldBlock) {\n throw error;\n }\n ctx.log.warn({\n code: error.code,\n message: error.message,\n details: error.details,\n });\n }\n return;\n }\n\n // Fallback: if no AST, try EXPLAIN if enabled\n if (!plan.ast) {\n const explainEnabled = options?.explain?.enabled === true;\n\n if (explainEnabled && isSelect && typeof ctx.driver === 'object' && ctx.driver !== null) {\n const estimatedRows = await computeEstimatedRows(plan, ctx.driver as DriverWithExplain);\n if (estimatedRows !== undefined) {\n if (estimatedRows > maxRows) {\n const error = budgetError(\n 'BUDGET.ROWS_EXCEEDED',\n 'Estimated row count exceeds budget',\n {\n source: 'explain',\n estimatedRows,\n maxRows,\n },\n );\n\n const shouldBlock = rowSeverity === 'error' || ctx.mode === 'strict';\n if (shouldBlock) {\n throw error;\n }\n ctx.log.warn({\n code: error.code,\n message: error.message,\n details: error.details,\n });\n }\n return;\n }\n }\n }\n },\n\n async onRow(\n _row: Record<string, unknown>,\n _plan: ExecutionPlan,\n _ctx: PluginContext<TContract, TAdapter, TDriver>,\n ) {\n void _row;\n void _plan;\n void _ctx;\n observedRows += 1;\n if (observedRows > maxRows) {\n throw budgetError('BUDGET.ROWS_EXCEEDED', 'Observed row count exceeds budget', {\n source: 'observed',\n observedRows,\n maxRows,\n });\n }\n },\n\n async afterExecute(\n _plan: ExecutionPlan,\n result: AfterExecuteResult,\n ctx: PluginContext<TContract, TAdapter, TDriver>,\n ) {\n const latencyMs = result.latencyMs;\n if (latencyMs > maxLatencyMs) {\n const error = budgetError('BUDGET.TIME_EXCEEDED', 'Query latency exceeds budget', {\n latencyMs,\n maxLatencyMs,\n });\n\n const shouldBlock = latencySeverity === 'error' && ctx.mode === 'strict';\n if (shouldBlock) {\n throw error;\n }\n ctx.log.warn({\n code: error.code,\n message: error.message,\n details: error.details,\n });\n }\n },\n });\n}\n","import type { ExecutionPlan } from '@prisma-next/contract/types';\nimport type { OperationRegistry } from '@prisma-next/operations';\nimport { AsyncIterableResult } from './async-iterable-result';\nimport { runtimeError } from './errors';\nimport { computeSqlFingerprint } from './fingerprint';\nimport { parseContractMarkerRow } from './marker';\nimport type { Log, Plugin, PluginContext } from './plugins/types';\nimport type { RuntimeFamilyAdapter } from './runtime-spi';\n\nexport interface RuntimeVerifyOptions {\n readonly mode: 'onFirstUse' | 'startup' | 'always';\n readonly requireMarker: boolean;\n}\n\nexport type TelemetryOutcome = 'success' | 'runtime-error';\n\nexport interface RuntimeTelemetryEvent {\n readonly lane: string;\n readonly target: string;\n readonly fingerprint: string;\n readonly outcome: TelemetryOutcome;\n readonly durationMs?: number;\n}\n\nexport interface RuntimeCoreOptions<TContract = unknown, TAdapter = unknown, TDriver = unknown> {\n readonly familyAdapter: RuntimeFamilyAdapter<TContract>;\n readonly driver: TDriver;\n readonly verify: RuntimeVerifyOptions;\n readonly plugins?: readonly Plugin<TContract, TAdapter, TDriver>[];\n readonly mode?: 'strict' | 'permissive';\n readonly log?: Log;\n readonly operationRegistry: OperationRegistry;\n}\n\nexport interface RuntimeCore<TContract = unknown, TAdapter = unknown, TDriver = unknown>\n extends RuntimeQueryable {\n // Type parameters are used in the implementation for type safety\n readonly _typeContract?: TContract;\n readonly _typeAdapter?: TAdapter;\n readonly _typeDriver?: TDriver;\n connection(): Promise<RuntimeConnection>;\n telemetry(): RuntimeTelemetryEvent | null;\n close(): Promise<void>;\n operations(): OperationRegistry;\n}\n\nexport interface RuntimeConnection extends RuntimeQueryable {\n transaction(): Promise<RuntimeTransaction>;\n release(): Promise<void>;\n}\n\nexport interface RuntimeTransaction extends RuntimeQueryable {\n commit(): Promise<void>;\n rollback(): Promise<void>;\n}\n\nexport interface RuntimeQueryable {\n execute<Row = Record<string, unknown>>(plan: ExecutionPlan<Row>): AsyncIterableResult<Row>;\n}\n\ninterface DriverWithQuery<_TDriver> {\n query(sql: string, params: readonly unknown[]): Promise<{ rows: ReadonlyArray<unknown> }>;\n}\n\ninterface DriverWithConnection<_TDriver> {\n acquireConnection(): Promise<DriverConnection>;\n}\n\nexport interface DriverConnection extends Queryable {\n beginTransaction(): Promise<DriverTransaction>;\n release(): Promise<void>;\n}\n\nexport interface DriverTransaction extends Queryable {\n commit(): Promise<void>;\n rollback(): Promise<void>;\n}\n\nexport interface Queryable {\n execute<Row = Record<string, unknown>>(options: {\n sql: string;\n params: readonly unknown[];\n }): AsyncIterable<Row>;\n}\n\ninterface DriverWithClose<_TDriver> {\n close(): Promise<void>;\n}\n\nclass RuntimeCoreImpl<TContract = unknown, TAdapter = unknown, TDriver = unknown>\n implements RuntimeCore<TContract, TAdapter, TDriver>\n{\n readonly _typeContract?: TContract;\n readonly _typeAdapter?: TAdapter;\n readonly _typeDriver?: TDriver;\n private readonly contract: TContract;\n private readonly familyAdapter: RuntimeFamilyAdapter<TContract>;\n private readonly driver: TDriver;\n private readonly plugins: readonly Plugin<TContract, TAdapter, TDriver>[];\n private readonly mode: 'strict' | 'permissive';\n private readonly verify: RuntimeVerifyOptions;\n private readonly operationRegistry: OperationRegistry;\n private readonly pluginContext: PluginContext<TContract, TAdapter, TDriver>;\n\n private verified: boolean;\n private startupVerified: boolean;\n private _telemetry: RuntimeTelemetryEvent | null;\n\n constructor(options: RuntimeCoreOptions<TContract, TAdapter, TDriver>) {\n const { familyAdapter, driver } = options;\n this.contract = familyAdapter.contract;\n this.familyAdapter = familyAdapter;\n this.driver = driver;\n this.plugins = options.plugins ?? [];\n this.mode = options.mode ?? 'strict';\n this.verify = options.verify;\n this.operationRegistry = options.operationRegistry;\n\n this.verified = options.verify.mode === 'startup' ? false : options.verify.mode === 'always';\n this.startupVerified = false;\n this._telemetry = null;\n\n this.pluginContext = {\n contract: this.contract,\n adapter: options.familyAdapter as unknown as TAdapter,\n driver: this.driver,\n mode: this.mode,\n now: () => Date.now(),\n log: options.log ?? {\n info: () => {\n // No-op in MVP - diagnostics stay out of runtime core\n },\n warn: () => {\n // No-op in MVP - diagnostics stay out of runtime core\n },\n error: () => {\n // No-op in MVP - diagnostics stay out of runtime core\n },\n },\n };\n }\n\n private async verifyPlanIfNeeded(_plan: ExecutionPlan): Promise<void> {\n void _plan;\n if (this.verify.mode === 'always') {\n this.verified = false;\n }\n\n if (this.verified) {\n return;\n }\n\n const readStatement = this.familyAdapter.markerReader.readMarkerStatement();\n const driver = this.driver as unknown as DriverWithQuery<TDriver>;\n const result = await driver.query(readStatement.sql, readStatement.params);\n\n if (result.rows.length === 0) {\n if (this.verify.requireMarker) {\n throw runtimeError('CONTRACT.MARKER_MISSING', 'Contract marker not found in database');\n }\n\n this.verified = true;\n return;\n }\n\n const marker = parseContractMarkerRow(result.rows[0]);\n\n const contract = this.contract as {\n storageHash: string;\n executionHash?: string | null;\n profileHash?: string | null;\n };\n if (marker.storageHash !== contract.storageHash) {\n throw runtimeError(\n 'CONTRACT.MARKER_MISMATCH',\n 'Database storage hash does not match contract',\n {\n expected: contract.storageHash,\n actual: marker.storageHash,\n },\n );\n }\n\n const expectedProfile = contract.profileHash ?? null;\n if (expectedProfile !== null && marker.profileHash !== expectedProfile) {\n throw runtimeError(\n 'CONTRACT.MARKER_MISMATCH',\n 'Database profile hash does not match contract',\n {\n expectedProfile,\n actualProfile: marker.profileHash,\n },\n );\n }\n\n this.verified = true;\n this.startupVerified = true;\n }\n\n private validatePlan(plan: ExecutionPlan): void {\n this.familyAdapter.validatePlan(plan, this.contract);\n }\n\n private recordTelemetry(\n plan: ExecutionPlan,\n outcome: TelemetryOutcome,\n durationMs?: number,\n ): void {\n const contract = this.contract as { target: string };\n this._telemetry = Object.freeze({\n lane: plan.meta.lane,\n target: contract.target,\n fingerprint: computeSqlFingerprint(plan.sql),\n outcome,\n ...(durationMs !== undefined ? { durationMs } : {}),\n });\n }\n\n execute<Row = Record<string, unknown>>(plan: ExecutionPlan<Row>): AsyncIterableResult<Row> {\n return this.#executeWith(plan, this.driver as Queryable);\n }\n\n async connection(): Promise<RuntimeConnection> {\n const driver = this.driver as unknown as DriverWithConnection<TDriver>;\n const driverConn = await driver.acquireConnection();\n const self = this;\n\n const runtimeConnection: RuntimeConnection = {\n async transaction(): Promise<RuntimeTransaction> {\n const driverTx = await driverConn.beginTransaction();\n const runtimeTx: RuntimeTransaction = {\n async commit(): Promise<void> {\n await driverTx.commit();\n },\n async rollback(): Promise<void> {\n await driverTx.rollback();\n },\n execute<Row = Record<string, unknown>>(\n plan: ExecutionPlan<Row>,\n ): AsyncIterableResult<Row> {\n return self.#executeWith(plan, driverTx);\n },\n };\n return runtimeTx;\n },\n execute<Row = Record<string, unknown>>(plan: ExecutionPlan<Row>): AsyncIterableResult<Row> {\n return self.#executeWith(plan, driverConn);\n },\n async release(): Promise<void> {\n await driverConn.release();\n },\n };\n\n return runtimeConnection;\n }\n\n telemetry(): RuntimeTelemetryEvent | null {\n return this._telemetry;\n }\n\n operations(): OperationRegistry {\n return this.operationRegistry;\n }\n\n close(): Promise<void> {\n const driver = this.driver as unknown as DriverWithClose<TDriver>;\n if (typeof driver.close === 'function') {\n return driver.close();\n }\n return Promise.resolve();\n }\n\n #executeWith<Row = Record<string, unknown>>(\n plan: ExecutionPlan<Row>,\n queryable: Queryable,\n ): AsyncIterableResult<Row> {\n this.validatePlan(plan);\n this._telemetry = null;\n\n const iterator = async function* (\n self: RuntimeCoreImpl<TContract, TAdapter, TDriver>,\n ): AsyncGenerator<Row, void, unknown> {\n const startedAt = Date.now();\n let rowCount = 0;\n let completed = false;\n\n if (!self.startupVerified && self.verify.mode === 'startup') {\n await self.verifyPlanIfNeeded(plan);\n }\n\n if (self.verify.mode === 'onFirstUse') {\n await self.verifyPlanIfNeeded(plan);\n }\n\n try {\n if (self.verify.mode === 'always') {\n await self.verifyPlanIfNeeded(plan);\n }\n\n for (const plugin of self.plugins) {\n if (plugin.beforeExecute) {\n await plugin.beforeExecute(plan, self.pluginContext);\n }\n }\n\n const encodedParams = plan.params;\n\n for await (const row of queryable.execute<Record<string, unknown>>({\n sql: plan.sql,\n params: encodedParams,\n })) {\n for (const plugin of self.plugins) {\n if (plugin.onRow) {\n await plugin.onRow(row, plan, self.pluginContext);\n }\n }\n rowCount++;\n yield row as Row;\n }\n\n completed = true;\n self.recordTelemetry(plan, 'success', Date.now() - startedAt);\n } catch (error) {\n if (self._telemetry === null) {\n self.recordTelemetry(plan, 'runtime-error', Date.now() - startedAt);\n }\n\n const latencyMs = Date.now() - startedAt;\n for (const plugin of self.plugins) {\n if (plugin.afterExecute) {\n try {\n await plugin.afterExecute(\n plan,\n { rowCount, latencyMs, completed },\n self.pluginContext,\n );\n } catch {\n // Ignore errors from afterExecute hooks\n }\n }\n }\n\n throw error;\n }\n\n const latencyMs = Date.now() - startedAt;\n for (const plugin of self.plugins) {\n if (plugin.afterExecute) {\n await plugin.afterExecute(plan, { rowCount, latencyMs, completed }, self.pluginContext);\n }\n }\n };\n\n return new AsyncIterableResult(iterator(this));\n }\n}\n\nexport function createRuntimeCore<TContract = unknown, TAdapter = unknown, TDriver = unknown>(\n options: RuntimeCoreOptions<TContract, TAdapter, TDriver>,\n): RuntimeCore<TContract, TAdapter, TDriver> {\n return new RuntimeCoreImpl(options);\n}\n"],"mappings":";;;;AAOA,SAAgB,aACd,MACA,SACA,SACsB;CACtB,MAAM,QAAQ,IAAI,MAAM,QAAQ;AAChC,QAAO,eAAe,OAAO,QAAQ;EACnC,OAAO;EACP,cAAc;EACf,CAAC;AAEF,QAAO,OAAO,OAAO,OAAO;EAC1B;EACA,UAAU,gBAAgB,KAAK;EAC/B,UAAU;EACV;EACA;EACD,CAAC;;AAGJ,SAAS,gBAAgB,MAAgD;CACvE,MAAM,SAAS,KAAK,MAAM,IAAI,CAAC,MAAM;AACrC,SAAQ,QAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,SACH,QAAO;EACT,QACE,QAAO;;;;;;;;;;AC9Bb,IAAa,sBAAb,MAAwF;CACtF,AAAiB;CACjB,AAAQ,WAAW;CACnB,AAAQ;CACR,AAAQ;CAER,YAAY,WAA+C;AACzD,OAAK,YAAY;;CAGnB,CAAC,OAAO,iBAAqC;AAC3C,MAAI,KAAK,SACP,OAAM,aACJ,6BACA,8DAA8D,KAAK,eAAe,kBAAkB,qBAAqB,iBAAiB,wDAC1I;GACE,YAAY,KAAK;GACjB,YACE,KAAK,eAAe,kBAChB,0GACA;GACP,CACF;AAEH,OAAK,WAAW;AAChB,OAAK,aAAa;AAClB,SAAO,KAAK;;;;;;CAOd,UAA0B;AACxB,MAAI,KAAK,eAAe,WACtB,QAAO,QAAQ,OACb,aACE,6BACA,kIACA;GACE,YAAY,KAAK;GACjB,YACE;GACH,CACF,CACF;AAGH,MAAI,KAAK,qBACP,QAAO,KAAK;AAGd,OAAK,WAAW;AAChB,OAAK,aAAa;AAClB,OAAK,wBAAwB,YAAY;GACvC,MAAMA,MAAa,EAAE;AACrB,cAAW,MAAM,QAAQ,KAAK,UAC5B,KAAI,KAAK,KAAK;AAEhB,UAAO;MACL;AACJ,SAAO,KAAK;;CAId,KACE,aACA,YACkC;AAClC,SAAO,KAAK,SAAS,CAAC,KAAK,aAAa,WAAW;;;;;;ACzEvD,MAAM,uBAAuB;AAC7B,MAAM,wBAAwB;AAC9B,MAAM,mBAAmB;AAEzB,SAAgB,sBAAsB,KAAqB;CAGzD,MAAM,aAFiB,IAAI,QAAQ,sBAAsB,IAAI,CACvB,QAAQ,uBAAuB,IAAI,CACvC,QAAQ,kBAAkB,IAAI,CAAC,MAAM,CAAC,aAAa;AAGrF,QAAO,UADM,WAAW,SAAS,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;;;;;ACqBpE,MAAM,oBAAoB;AAC1B,MAAM,cAAc;AACpB,MAAM,wBAAwB;AAE9B,MAAM,oBAAoB,IAAI,IAAI;CAAC;CAAQ;CAAU;CAAW,CAAC;AAEjE,SAAgB,sBACd,MACA,QACoB;CACpB,MAAMC,QAAuB,EAAE;CAC/B,MAAMC,YAA2B,EAAE;CAEnC,MAAM,aAAa,oBAAoB,KAAK,IAAI;CAChD,MAAM,gBAAgB,kBAAkB,WAAW;AAEnD,KAAI,kBAAkB,UAAU;AAC9B,MAAI,kBAAkB,KAAK,WAAW,CACpC,OAAM,KACJ,WAAW,oBAAoB,SAAS,0CAA0C,EAChF,KAAK,QAAQ,KAAK,IAAI,EACvB,CAAC,CACH;AAGH,MAAI,CAAC,YAAY,KAAK,WAAW,EAAE;GACjC,MAAM,WAAW,QAAQ,SAAS,2BAA2B;AAC7D,SAAM,KACJ,WAAW,iBAAiB,QAAQ,mCAAmC,EACrE,KAAK,QAAQ,KAAK,IAAI,EACvB,CAAC,CACH;AAED,aAAQ,KACN,aACE,wBACA,UACA,uDACA;IACE,KAAK,QAAQ,KAAK,IAAI;IACtB,GAAI,QAAQ,SAAS,kBAAkB,SACnC,EAAE,eAAe,OAAO,QAAQ,eAAe,GAC/C,EAAE;IACP,CACF,CACF;;;AAIL,KAAI,oBAAoB,cAAc,IAAI,iBAAiB,KAAK,KAAK,CACnE,OAAM,KACJ,WACE,2BACA,SACA,sDACA;EACE,KAAK,QAAQ,KAAK,IAAI;EACtB,QAAQ,KAAK,KAAK,cAAc;EACjC,CACF,CACF;CAGH,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,KACF,uBAAsB,MAAM,MAAM;AAGpC,QAAO;EAAE;EAAO;EAAS,WAAW;EAAe;;AAGrD,SAAS,sBAAsB,MAAgB,OAAsB;CACnE,MAAM,mBAAmB,KAAK,WAAW,EAAE;AAC3C,KAAI,iBAAiB,WAAW,EAC9B;CAGF,MAAM,UAAU,KAAK,WAAW,EAAE;AAElC,KAAI,QAAQ,WAAW,GAAG;AACxB,QAAM,KACJ,WACE,4BACA,QACA,mDACA,EACE,YAAY,kBACb,CACF,CACF;AACD;;AAWF,KAAI,CARuB,iBAAiB,OAAO,WACjD,QAAQ,MACL,UACC,MAAM,UAAU,OAAO,SACvB,MAAM,QAAQ,MAAM,QAAQ,IAAI,aAAa,KAAK,OAAO,OAAO,aAAa,CAAC,CACjF,CACF,CAGC,OAAM,KACJ,WACE,4BACA,QACA,mDACA,EACE,YAAY,kBACb,CACF,CACF;;AAIL,SAAS,kBAAkB,KAA8C;CACvE,MAAM,UAAU,IAAI,MAAM;CAC1B,MAAM,QAAQ,QAAQ,aAAa;AAEnC,KAAI,MAAM,WAAW,OAAO,EAC1B;MAAI,MAAM,SAAS,SAAS,CAC1B,QAAO;;AAIX,KAAI,MAAM,WAAW,SAAS,CAC5B,QAAO;AAGT,KAAI,sBAAsB,KAAK,QAAQ,CACrC,QAAO;AAGT,QAAO;;AAGT,SAAS,oBAAoB,WAAqD;AAChF,QAAO,cAAc;;AAGvB,SAAS,iBAAiB,MAAyB;CACjD,MAAM,cAAc,KAAK;CACzB,MAAM,SACJ,OAAO,aAAa,WAAW,WAAW,YAAY,OAAO,aAAa,GAAG;AAC/E,QAAO,WAAW,UAAa,kBAAkB,IAAI,OAAO;;AAG9D,SAAS,oBAAoB,OAAuB;AAClD,QAAO,MAAM,QAAQ,QAAQ,IAAI,CAAC,MAAM;;AAG1C,SAAS,QAAQ,KAAqB;AACpC,QAAO,oBAAoB,IAAI,CAAC,MAAM,GAAG,IAAI;;AAG/C,SAAS,WACP,MACA,UACA,SACA,SACa;AACb,QAAO;EAAE;EAAM;EAAU;EAAS,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;EAAG;;AAGrE,SAAS,aACP,MACA,UACA,SACA,SACe;AACf,QAAO;EAAE;EAAM;EAAU;EAAS,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;EAAG;;;;;AC1LrE,MAAM,aAAa,KAAK,EAAE,YAAY,WAAW,CAAC;AAElD,SAAS,UAAU,MAAwC;AACzD,KAAI,SAAS,QAAQ,SAAS,OAC5B,QAAO,EAAE;CAGX,IAAIC;AACJ,KAAI,OAAO,SAAS,SAClB,KAAI;AACF,WAAS,KAAK,MAAM,KAAK;SACnB;AACN,SAAO,EAAE;;KAGX,UAAS;CAGX,MAAM,SAAS,WAAW,OAAO;AACjC,KAAI,kBAAkB,KAAK,OACzB,QAAO,EAAE;AAGX,QAAO;;AAGT,MAAM,0BAA0B,KAAK;CACnC,WAAW;CACX,cAAc;CACd,kBAAkB;CAClB,sBAAsB;CACtB,eAAe;CACf,YAAY;CACZ,SAAS;CACV,CAAC;AAEF,SAAgB,uBAAuB,KAAoC;CACzE,MAAM,SAAS,wBAAwB,IAAI;AAC3C,KAAI,kBAAkB,KAAK,QAAQ;EACjC,MAAM,WAAW,OAAO,KAAK,MAA2B,EAAE,QAAQ,CAAC,KAAK,KAAK;AAC7E,QAAM,IAAI,MAAM,gCAAgC,WAAW;;CAG7D,MAAM,eAAe;CAUrB,MAAM,YAAY,aAAa,aAC3B,aAAa,sBAAsB,OACjC,aAAa,aACb,IAAI,KAAK,aAAa,WAAW,mBACnC,IAAI,MAAM;AAEd,QAAO;EACL,aAAa,aAAa;EAC1B,aAAa,aAAa;EAC1B,cAAc,aAAa,iBAAiB;EAC5C,kBAAkB,aAAa,qBAAqB;EACpD;EACA,QAAQ,aAAa,WAAW;EAChC,MAAM,UAAU,aAAa,KAAK;EACnC;;;;;AC3DH,eAAe,qBACb,MACA,QAC6B;AAC7B,KAAI,OAAO,OAAO,YAAY,WAC5B;AAGF,KAAI;AAEF,SAAO,sBADQ,MAAM,OAAO,QAAQ,KAAK,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,EAC5B,KAAK;SAClC;AACN;;;AAIJ,SAAS,qBAAqB,MAAkE;AAC9F,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,WAAW,aAAa,IAAI;AAClC,MAAI,aAAa,OACf,QAAO;;;AAcb,SAAS,aAAa,MAAmC;AACvD,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B;CAGF,MAAM,cAAc;CACpB,MAAM,WAAW,YAAY;AAC7B,KAAI,OAAO,aAAa,SACtB,QAAO;AAGT,KAAI,UAAU,eAAe,YAAY,SAAS,QAAW;EAC3D,MAAM,SAAS,aAAa,YAAY,KAAK;AAC7C,MAAI,WAAW,OACb,QAAO;;AAIX,KAAI,MAAM,QAAQ,YAAY,MAAM,CAClC,MAAK,MAAM,SAAS,YAAY,OAAO;EACrC,MAAM,SAAS,aAAa,MAAM;AAClC,MAAI,WAAW,OACb,QAAO;;AAKb,MAAK,MAAM,SAAS,OAAO,OAAO,KAAgC,CAChE,KAAI,OAAO,UAAU,YAAY,UAAU,MAAM;EAC/C,MAAM,SAAS,aAAa,MAAM;AAClC,MAAI,WAAW,OACb,QAAO;;;AAQf,SAAS,YAAY,MAAc,SAAiB,SAAmC;CACrF,MAAM,QAAQ,IAAI,MAAM,QAAQ;AAMhC,QAAO,eAAe,OAAO,QAAQ;EACnC,OAAO;EACP,cAAc;EACf,CAAC;AACF,QAAO,OAAO,OAAO,OAAO;EAC1B;EACA,UAAU;EACV,UAAU;EACV;EACD,CAAC;;AAGJ,SAAS,aACP,MACA,WACA,kBACe;AACf,KAAI,CAAC,KAAK,IACR,QAAO;CAGT,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS;AACvC,KAAI,CAAC,MACH,QAAO;CAGT,MAAM,gBAAgB,UAAU,UAAU;AAE1C,KACE,KAAK,OACL,OAAO,KAAK,QAAQ,YACpB,UAAU,KAAK,OACf,KAAK,IAAI,SAAS,YAClB,WAAW,KAAK,OAChB,OAAO,KAAK,IAAI,UAAU,SAE1B,QAAO,KAAK,IAAI,KAAK,IAAI,OAAO,cAAc;AAGhD,QAAO;;AAGT,SAAS,mBAAmB,MAA8B;AACxD,KACE,KAAK,OACL,OAAO,KAAK,QAAQ,YACpB,UAAU,KAAK,OACf,KAAK,IAAI,SAAS,YAClB,WAAW,KAAK,OAChB,OAAO,KAAK,IAAI,UAAU,SAE1B,QAAO;CAGT,MAAM,cAAc,KAAK,KAAK;AAC9B,QAAO,OAAO,aAAa,UAAU,YAAY,OAAO,aAAa,UAAU;;AAGjF,SAAgB,QACd,SACsC;CACtC,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,mBAAmB,SAAS,oBAAoB;CACtD,MAAM,YAAY,SAAS,aAAa,EAAE;CAC1C,MAAM,eAAe,SAAS,gBAAgB;CAC9C,MAAM,cAAc,SAAS,YAAY,YAAY;CACrD,MAAM,kBAAkB,SAAS,YAAY,WAAW;CAExD,IAAI,eAAe;AAEnB,QAAO,OAAO,OAAO;EACnB,MAAM;EAEN,MAAM,cAAc,MAAqB,KAAkD;AACzF,kBAAe;AACf,GAAK,IAAI,KAAK;GAEd,MAAM,YAAY,aAAa,MAAM,WAAW,iBAAiB;GACjE,MAAM,cAAc,CAAC,mBAAmB,KAAK;GAE7C,MAAM,WADW,KAAK,IAAI,WAAW,CAAC,aAAa,CACzB,WAAW,SAAS;AAG9C,OAAI,YAAY,aAAa;AAC3B,QAAI,cAAc,QAAQ,aAAa,SAAS;KAC9C,MAAMC,UAAQ,YACZ,wBACA,yCACA;MACE,QAAQ;MACR,eAAe;MACf;MACD,CACF;AAGD,SADoB,gBAAgB,WAAW,IAAI,SAAS,SAE1D,OAAMA;AAER,SAAI,IAAI,KAAK;MACX,MAAMA,QAAM;MACZ,SAASA,QAAM;MACf,SAASA,QAAM;MAChB,CAAC;AACF;;IAIF,MAAM,QAAQ,YAAY,wBAAwB,yCAAyC;KACzF,QAAQ;KACR;KACD,CAAC;AAGF,QADoB,gBAAgB,WAAW,IAAI,SAAS,SAE1D,OAAM;AAER,QAAI,IAAI,KAAK;KACX,MAAM,MAAM;KACZ,SAAS,MAAM;KACf,SAAS,MAAM;KAChB,CAAC;AACF;;AAIF,OAAI,cAAc,MAAM;AACtB,QAAI,YAAY,SAAS;KACvB,MAAM,QAAQ,YAAY,wBAAwB,sCAAsC;MACtF,QAAQ;MACR,eAAe;MACf;MACD,CAAC;AAGF,SADoB,gBAAgB,WAAW,IAAI,SAAS,SAE1D,OAAM;AAER,SAAI,IAAI,KAAK;MACX,MAAM,MAAM;MACZ,SAAS,MAAM;MACf,SAAS,MAAM;MAChB,CAAC;;AAEJ;;AAIF,OAAI,CAAC,KAAK,KAGR;QAFuB,SAAS,SAAS,YAAY,QAE/B,YAAY,OAAO,IAAI,WAAW,YAAY,IAAI,WAAW,MAAM;KACvF,MAAM,gBAAgB,MAAM,qBAAqB,MAAM,IAAI,OAA4B;AACvF,SAAI,kBAAkB,QAAW;AAC/B,UAAI,gBAAgB,SAAS;OAC3B,MAAM,QAAQ,YACZ,wBACA,sCACA;QACE,QAAQ;QACR;QACA;QACD,CACF;AAGD,WADoB,gBAAgB,WAAW,IAAI,SAAS,SAE1D,OAAM;AAER,WAAI,IAAI,KAAK;QACX,MAAM,MAAM;QACZ,SAAS,MAAM;QACf,SAAS,MAAM;QAChB,CAAC;;AAEJ;;;;;EAMR,MAAM,MACJ,MACA,OACA,MACA;AAIA,mBAAgB;AAChB,OAAI,eAAe,QACjB,OAAM,YAAY,wBAAwB,qCAAqC;IAC7E,QAAQ;IACR;IACA;IACD,CAAC;;EAIN,MAAM,aACJ,OACA,QACA,KACA;GACA,MAAM,YAAY,OAAO;AACzB,OAAI,YAAY,cAAc;IAC5B,MAAM,QAAQ,YAAY,wBAAwB,gCAAgC;KAChF;KACA;KACD,CAAC;AAGF,QADoB,oBAAoB,WAAW,IAAI,SAAS,SAE9D,OAAM;AAER,QAAI,IAAI,KAAK;KACX,MAAM,MAAM;KACZ,SAAS,MAAM;KACf,SAAS,MAAM;KAChB,CAAC;;;EAGP,CAAC;;;;;AC7OJ,IAAM,kBAAN,MAEA;CACE,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,SAA2D;EACrE,MAAM,EAAE,eAAe,WAAW;AAClC,OAAK,WAAW,cAAc;AAC9B,OAAK,gBAAgB;AACrB,OAAK,SAAS;AACd,OAAK,UAAU,QAAQ,WAAW,EAAE;AACpC,OAAK,OAAO,QAAQ,QAAQ;AAC5B,OAAK,SAAS,QAAQ;AACtB,OAAK,oBAAoB,QAAQ;AAEjC,OAAK,WAAW,QAAQ,OAAO,SAAS,YAAY,QAAQ,QAAQ,OAAO,SAAS;AACpF,OAAK,kBAAkB;AACvB,OAAK,aAAa;AAElB,OAAK,gBAAgB;GACnB,UAAU,KAAK;GACf,SAAS,QAAQ;GACjB,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,WAAW,KAAK,KAAK;GACrB,KAAK,QAAQ,OAAO;IAClB,YAAY;IAGZ,YAAY;IAGZ,aAAa;IAGd;GACF;;CAGH,MAAc,mBAAmB,OAAqC;AAEpE,MAAI,KAAK,OAAO,SAAS,SACvB,MAAK,WAAW;AAGlB,MAAI,KAAK,SACP;EAGF,MAAM,gBAAgB,KAAK,cAAc,aAAa,qBAAqB;EAE3E,MAAM,SAAS,MADA,KAAK,OACQ,MAAM,cAAc,KAAK,cAAc,OAAO;AAE1E,MAAI,OAAO,KAAK,WAAW,GAAG;AAC5B,OAAI,KAAK,OAAO,cACd,OAAM,aAAa,2BAA2B,wCAAwC;AAGxF,QAAK,WAAW;AAChB;;EAGF,MAAM,SAAS,uBAAuB,OAAO,KAAK,GAAG;EAErD,MAAM,WAAW,KAAK;AAKtB,MAAI,OAAO,gBAAgB,SAAS,YAClC,OAAM,aACJ,4BACA,iDACA;GACE,UAAU,SAAS;GACnB,QAAQ,OAAO;GAChB,CACF;EAGH,MAAM,kBAAkB,SAAS,eAAe;AAChD,MAAI,oBAAoB,QAAQ,OAAO,gBAAgB,gBACrD,OAAM,aACJ,4BACA,iDACA;GACE;GACA,eAAe,OAAO;GACvB,CACF;AAGH,OAAK,WAAW;AAChB,OAAK,kBAAkB;;CAGzB,AAAQ,aAAa,MAA2B;AAC9C,OAAK,cAAc,aAAa,MAAM,KAAK,SAAS;;CAGtD,AAAQ,gBACN,MACA,SACA,YACM;EACN,MAAM,WAAW,KAAK;AACtB,OAAK,aAAa,OAAO,OAAO;GAC9B,MAAM,KAAK,KAAK;GAChB,QAAQ,SAAS;GACjB,aAAa,sBAAsB,KAAK,IAAI;GAC5C;GACA,GAAI,eAAe,SAAY,EAAE,YAAY,GAAG,EAAE;GACnD,CAAC;;CAGJ,QAAuC,MAAoD;AACzF,SAAO,MAAKC,YAAa,MAAM,KAAK,OAAoB;;CAG1D,MAAM,aAAyC;EAE7C,MAAM,aAAa,MADJ,KAAK,OACY,mBAAmB;EACnD,MAAM,OAAO;AA4Bb,SA1B6C;GAC3C,MAAM,cAA2C;IAC/C,MAAM,WAAW,MAAM,WAAW,kBAAkB;AAcpD,WAbsC;KACpC,MAAM,SAAwB;AAC5B,YAAM,SAAS,QAAQ;;KAEzB,MAAM,WAA0B;AAC9B,YAAM,SAAS,UAAU;;KAE3B,QACE,MAC0B;AAC1B,aAAO,MAAKA,YAAa,MAAM,SAAS;;KAE3C;;GAGH,QAAuC,MAAoD;AACzF,WAAO,MAAKA,YAAa,MAAM,WAAW;;GAE5C,MAAM,UAAyB;AAC7B,UAAM,WAAW,SAAS;;GAE7B;;CAKH,YAA0C;AACxC,SAAO,KAAK;;CAGd,aAAgC;AAC9B,SAAO,KAAK;;CAGd,QAAuB;EACrB,MAAM,SAAS,KAAK;AACpB,MAAI,OAAO,OAAO,UAAU,WAC1B,QAAO,OAAO,OAAO;AAEvB,SAAO,QAAQ,SAAS;;CAG1B,aACE,MACA,WAC0B;AAC1B,OAAK,aAAa,KAAK;AACvB,OAAK,aAAa;EAElB,MAAM,WAAW,iBACf,MACoC;GACpC,MAAM,YAAY,KAAK,KAAK;GAC5B,IAAI,WAAW;GACf,IAAI,YAAY;AAEhB,OAAI,CAAC,KAAK,mBAAmB,KAAK,OAAO,SAAS,UAChD,OAAM,KAAK,mBAAmB,KAAK;AAGrC,OAAI,KAAK,OAAO,SAAS,aACvB,OAAM,KAAK,mBAAmB,KAAK;AAGrC,OAAI;AACF,QAAI,KAAK,OAAO,SAAS,SACvB,OAAM,KAAK,mBAAmB,KAAK;AAGrC,SAAK,MAAM,UAAU,KAAK,QACxB,KAAI,OAAO,cACT,OAAM,OAAO,cAAc,MAAM,KAAK,cAAc;IAIxD,MAAM,gBAAgB,KAAK;AAE3B,eAAW,MAAM,OAAO,UAAU,QAAiC;KACjE,KAAK,KAAK;KACV,QAAQ;KACT,CAAC,EAAE;AACF,UAAK,MAAM,UAAU,KAAK,QACxB,KAAI,OAAO,MACT,OAAM,OAAO,MAAM,KAAK,MAAM,KAAK,cAAc;AAGrD;AACA,WAAM;;AAGR,gBAAY;AACZ,SAAK,gBAAgB,MAAM,WAAW,KAAK,KAAK,GAAG,UAAU;YACtD,OAAO;AACd,QAAI,KAAK,eAAe,KACtB,MAAK,gBAAgB,MAAM,iBAAiB,KAAK,KAAK,GAAG,UAAU;IAGrE,MAAMC,cAAY,KAAK,KAAK,GAAG;AAC/B,SAAK,MAAM,UAAU,KAAK,QACxB,KAAI,OAAO,aACT,KAAI;AACF,WAAM,OAAO,aACX,MACA;MAAE;MAAU;MAAW;MAAW,EAClC,KAAK,cACN;YACK;AAMZ,UAAM;;GAGR,MAAM,YAAY,KAAK,KAAK,GAAG;AAC/B,QAAK,MAAM,UAAU,KAAK,QACxB,KAAI,OAAO,aACT,OAAM,OAAO,aAAa,MAAM;IAAE;IAAU;IAAW;IAAW,EAAE,KAAK,cAAc;;AAK7F,SAAO,IAAI,oBAAoB,SAAS,KAAK,CAAC;;;AAIlD,SAAgB,kBACd,SAC2C;AAC3C,QAAO,IAAI,gBAAgB,QAAQ"}
|