@qlever-llc/trellis 0.6.1 → 0.7.0-rc.2

package/script/trellis/transfer.js

@@ -0,0 +1,367 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var _BaseTransferHandle_nc, _BaseTransferHandle_auth, _BaseTransferHandle_timeoutMs, _UploadTransferHandle_grant, _DownloadTransferHandle_grant;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DownloadTransferHandle = exports.UploadTransferHandle = exports.TransferGrantSchema = exports.DownloadTransferGrantSchema = exports.UploadTransferGrantSchema = exports.FileInfoSchema = void 0;
+exports.createTransferHandle = createTransferHandle;
+exports.verifyTransferMessage = verifyTransferMessage;
+const result_1 = require("@qlever-llc/result");
+const nats_core_1 = require("@nats-io/nats-core");
+const typebox_1 = __importDefault(require("typebox"));
+const proof_ts_1 = require("../auth/proof.ts");
+const utils_ts_1 = require("../auth/utils.ts");
+const TransferError_ts_1 = require("./errors/TransferError.ts");
+const TRANSFER_SEQUENCE_HEADER = "trellis-transfer-seq";
+const TRANSFER_EOF_HEADER = "trellis-transfer-eof";
+exports.FileInfoSchema = typebox_1.default.Object({
+    key: typebox_1.default.String({ minLength: 1 }),
+    size: typebox_1.default.Integer({ minimum: 0 }),
+    updatedAt: typebox_1.default.String({ minLength: 1 }),
+    digest: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    contentType: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+    metadata: typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), typebox_1.default.String()),
+}, { additionalProperties: false });
+const TransferGrantBaseSchema = typebox_1.default.Object({
+    type: typebox_1.default.Literal("TransferGrant"),
+    service: typebox_1.default.String({ minLength: 1 }),
+    sessionKey: typebox_1.default.String({ minLength: 1 }),
+    transferId: typebox_1.default.String({ minLength: 1 }),
+    subject: typebox_1.default.String({ minLength: 1 }),
+    expiresAt: typebox_1.default.String({ minLength: 1 }),
+    chunkBytes: typebox_1.default.Integer({ minimum: 1 }),
+}, { additionalProperties: false });
+exports.UploadTransferGrantSchema = typebox_1.default.Intersect([
+    TransferGrantBaseSchema,
+    typebox_1.default.Object({
+        kind: typebox_1.default.Literal("upload"),
+        maxBytes: typebox_1.default.Optional(typebox_1.default.Integer({ minimum: 1 })),
+        contentType: typebox_1.default.Optional(typebox_1.default.String({ minLength: 1 })),
+        metadata: typebox_1.default.Optional(typebox_1.default.Record(typebox_1.default.String({ minLength: 1 }), typebox_1.default.String())),
+    }, { additionalProperties: false }),
+]);
+exports.DownloadTransferGrantSchema = typebox_1.default.Intersect([
+    TransferGrantBaseSchema,
+    typebox_1.default.Object({
+        kind: typebox_1.default.Literal("download"),
+        info: exports.FileInfoSchema,
+    }, { additionalProperties: false }),
+]);
+exports.TransferGrantSchema = typebox_1.default.Union([
+    exports.UploadTransferGrantSchema,
+    exports.DownloadTransferGrantSchema,
+]);
+async function createTransferProof(auth, subject, payload) {
+    const payloadHash = await (0, utils_ts_1.sha256)(payload);
+    const proofOk = await auth.sign(await (0, utils_ts_1.sha256)(buildTransferProofInput(auth.sessionKey, subject, payloadHash)));
+    return (0, utils_ts_1.base64urlEncode)(proofOk);
+}
+function buildTransferProofInput(sessionKey, subject, payloadHash) {
+    const enc = new TextEncoder();
+    const sessionKeyBytes = enc.encode(sessionKey);
+    const subjectBytes = enc.encode(subject);
+    const buf = new Uint8Array(4 + sessionKeyBytes.length + 4 + subjectBytes.length + 4 + payloadHash.length);
+    const view = new DataView(buf.buffer);
+    let offset = 0;
+    view.setUint32(offset, sessionKeyBytes.length);
+    offset += 4;
+    buf.set(sessionKeyBytes, offset);
+    offset += sessionKeyBytes.length;
+    view.setUint32(offset, subjectBytes.length);
+    offset += 4;
+    buf.set(subjectBytes, offset);
+    offset += subjectBytes.length;
+    view.setUint32(offset, payloadHash.length);
+    offset += 4;
+    buf.set(payloadHash, offset);
+    return buf;
+}
+function expired(expiresAt) {
+    return Date.now() >= Date.parse(expiresAt);
+}
+function asUint8Array(body) {
+    return body instanceof Uint8Array ? body : new Uint8Array(body);
+}
+function streamFromAsyncIterable(iterable) {
+    const iterator = iterable[Symbol.asyncIterator]();
+    return new ReadableStream({
+        async pull(controller) {
+            const next = await iterator.next();
+            if (next.done) {
+                controller.close();
+                return;
+            }
+            controller.enqueue(next.value);
+        },
+        async cancel(reason) {
+            await iterator.return?.(reason);
+        },
+    });
+}
+function streamFromBody(body) {
+    if (body instanceof Uint8Array || body instanceof ArrayBuffer) {
+        const bytes = asUint8Array(body);
+        return new ReadableStream({
+            start(controller) {
+                controller.enqueue(bytes);
+                controller.close();
+            },
+        });
+    }
+    return body instanceof ReadableStream ? body : streamFromAsyncIterable(body);
+}
+async function* chunkBody(body, chunkBytes) {
+    const reader = streamFromBody(body).getReader();
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done) {
+                return;
+            }
+            let offset = 0;
+            while (offset < next.value.length) {
+                const end = Math.min(offset + chunkBytes, next.value.length);
+                yield next.value.slice(offset, end);
+                offset = end;
+            }
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+function parseTransferAck(msg, operation) {
+    if (msg.headers?.get("status") === "error") {
+        return result_1.Result.err(deserializeTransferError(msg, operation));
+    }
+    try {
+        const value = JSON.parse(msg.string());
+        return result_1.Result.ok(value);
+    }
+    catch (cause) {
+        return result_1.Result.err(new TransferError_ts_1.TransferError({ operation, cause }));
+    }
+}
+function deserializeTransferError(msg, operation) {
+    try {
+        const value = JSON.parse(msg.string());
+        return new TransferError_ts_1.TransferError({
+            operation: value.operation ?? operation,
+            context: value.context,
+            cause: value.message ? new Error(value.message) : undefined,
+        });
+    }
+    catch (cause) {
+        return new TransferError_ts_1.TransferError({ operation, cause });
+    }
+}
+async function collectDownload(nc, inbox, timeoutMs) {
+    const sub = nc.subscribe(inbox);
+    const iterator = sub[Symbol.asyncIterator]();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const next = await new Promise((resolve, reject) => {
+                const timer = setTimeout(() => {
+                    clearTimeout(timer);
+                    reject(new TransferError_ts_1.TransferError({ operation: "get", context: { reason: "timeout" } }));
+                }, timeoutMs);
+                iterator.next().then((value) => {
+                    clearTimeout(timer);
+                    resolve(value);
+                }, (error) => {
+                    clearTimeout(timer);
+                    reject(error);
+                });
+            });
+            if (next.done) {
+                return result_1.Result.err(new TransferError_ts_1.TransferError({ operation: "get", context: { reason: "stream_closed" } }));
+            }
+            const msg = next.value;
+            if (msg.headers?.get("status") === "error") {
+                return result_1.Result.err(deserializeTransferError(msg, "get"));
+            }
+            if (msg.data.length > 0) {
+                chunks.push(msg.data);
+                total += msg.data.length;
+            }
+            if (msg.headers?.get(TRANSFER_EOF_HEADER) === "true") {
+                const merged = new Uint8Array(total);
+                let offset = 0;
+                for (const chunk of chunks) {
+                    merged.set(chunk, offset);
+                    offset += chunk.length;
+                }
+                return result_1.Result.ok(merged);
+            }
+        }
+    }
+    catch (cause) {
+        return result_1.Result.err(cause instanceof TransferError_ts_1.TransferError ? cause : new TransferError_ts_1.TransferError({ operation: "get", cause }));
+    }
+    finally {
+        sub.unsubscribe();
+    }
+}
+class BaseTransferHandle {
+    constructor(nc, auth, timeoutMs) {
+        _BaseTransferHandle_nc.set(this, void 0);
+        _BaseTransferHandle_auth.set(this, void 0);
+        _BaseTransferHandle_timeoutMs.set(this, void 0);
+        __classPrivateFieldSet(this, _BaseTransferHandle_nc, nc, "f");
+        __classPrivateFieldSet(this, _BaseTransferHandle_auth, auth, "f");
+        __classPrivateFieldSet(this, _BaseTransferHandle_timeoutMs, timeoutMs, "f");
+    }
+    get nc() {
+        return __classPrivateFieldGet(this, _BaseTransferHandle_nc, "f");
+    }
+    get auth() {
+        return __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f");
+    }
+    get timeoutMs() {
+        return __classPrivateFieldGet(this, _BaseTransferHandle_timeoutMs, "f");
+    }
+    validateGrant(grant, operation) {
+        if (expired(grant.expiresAt)) {
+            return result_1.Result.err(new TransferError_ts_1.TransferError({ operation, context: { reason: "expired", transferId: grant.transferId } }));
+        }
+        if (grant.sessionKey !== __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f").sessionKey) {
+            return result_1.Result.err(new TransferError_ts_1.TransferError({
+                operation,
+                context: {
+                    reason: "session_mismatch",
+                    expectedSessionKey: grant.sessionKey,
+                    actualSessionKey: __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f").sessionKey,
+                },
+            }));
+        }
+        return result_1.Result.ok(undefined);
+    }
+    async buildHeaders(subject, payload, seq, eof) {
+        const headers = (0, nats_core_1.headers)();
+        headers.set("session-key", __classPrivateFieldGet(this, _BaseTransferHandle_auth, "f").sessionKey);
+        headers.set("proof", await createTransferProof(__classPrivateFieldGet(this, _BaseTransferHandle_auth, "f"), subject, payload));
+        if (seq !== undefined) {
+            headers.set(TRANSFER_SEQUENCE_HEADER, String(seq));
+        }
+        if (eof) {
+            headers.set(TRANSFER_EOF_HEADER, "true");
+        }
+        return headers;
+    }
+}
+_BaseTransferHandle_nc = new WeakMap(), _BaseTransferHandle_auth = new WeakMap(), _BaseTransferHandle_timeoutMs = new WeakMap();
+class UploadTransferHandle extends BaseTransferHandle {
+    constructor(nc, auth, timeoutMs, grant) {
+        super(nc, auth, timeoutMs);
+        _UploadTransferHandle_grant.set(this, void 0);
+        __classPrivateFieldSet(this, _UploadTransferHandle_grant, grant, "f");
+    }
+    async put(body) {
+        const valid = this.validateGrant(__classPrivateFieldGet(this, _UploadTransferHandle_grant, "f"), "put").take();
+        if ((0, result_1.isErr)(valid)) {
+            return result_1.Result.err(valid.error);
+        }
+        let sentBytes = 0;
+        let seq = 0;
+        let completed = null;
+        for await (const chunk of chunkBody(body, __classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").chunkBytes)) {
+            sentBytes += chunk.length;
+            if (__classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").maxBytes !== undefined && sentBytes > __classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").maxBytes) {
+                return result_1.Result.err(new TransferError_ts_1.TransferError({
+                    operation: "put",
+                    context: {
+                        reason: "max_bytes_exceeded",
+                        maxBytes: __classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").maxBytes,
+                        attemptedBytes: sentBytes,
+                    },
+                }));
+            }
+            const headers = await this.buildHeaders(__classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").subject, chunk, seq, false);
+            const response = await result_1.AsyncResult.try(() => this.nc.request(__classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").subject, chunk, { timeout: this.timeoutMs, headers })).take();
+            if ((0, result_1.isErr)(response)) {
+                return result_1.Result.err(new TransferError_ts_1.TransferError({ operation: "put", cause: response.error }));
+            }
+            const ack = parseTransferAck(response, "put").take();
+            if ((0, result_1.isErr)(ack)) {
+                return result_1.Result.err(ack.error);
+            }
+            if (ack.status === "complete") {
+                completed = ack.info;
+            }
+            seq += 1;
+        }
+        const finalHeaders = await this.buildHeaders(__classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").subject, new Uint8Array(), seq, true);
+        const finalResponse = await result_1.AsyncResult.try(() => this.nc.request(__classPrivateFieldGet(this, _UploadTransferHandle_grant, "f").subject, new Uint8Array(), {
+            timeout: this.timeoutMs,
+            headers: finalHeaders,
+        })).take();
+        if ((0, result_1.isErr)(finalResponse)) {
+            return result_1.Result.err(new TransferError_ts_1.TransferError({ operation: "put", cause: finalResponse.error }));
+        }
+        const finalAck = parseTransferAck(finalResponse, "put").take();
+        if ((0, result_1.isErr)(finalAck)) {
+            return result_1.Result.err(finalAck.error);
+        }
+        if (finalAck.status !== "complete") {
+            return result_1.Result.err(new TransferError_ts_1.TransferError({ operation: "put", context: { reason: "missing_completion" } }));
+        }
+        return result_1.Result.ok(finalAck.info ?? completed);
+    }
+}
+exports.UploadTransferHandle = UploadTransferHandle;
+_UploadTransferHandle_grant = new WeakMap();
+class DownloadTransferHandle extends BaseTransferHandle {
+    constructor(nc, auth, timeoutMs, grant) {
+        super(nc, auth, timeoutMs);
+        _DownloadTransferHandle_grant.set(this, void 0);
+        __classPrivateFieldSet(this, _DownloadTransferHandle_grant, grant, "f");
+    }
+    async getBytes() {
+        const valid = this.validateGrant(__classPrivateFieldGet(this, _DownloadTransferHandle_grant, "f"), "get").take();
+        if ((0, result_1.isErr)(valid)) {
+            return result_1.Result.err(valid.error);
+        }
+        const inbox = (0, nats_core_1.createInbox)(`_INBOX.${this.auth.sessionKey.slice(0, 16)}`);
+        const payload = new Uint8Array();
+        const headers = await this.buildHeaders(__classPrivateFieldGet(this, _DownloadTransferHandle_grant, "f").subject, payload);
+        try {
+            this.nc.publish(__classPrivateFieldGet(this, _DownloadTransferHandle_grant, "f").subject, payload, { headers, reply: inbox });
+            await this.nc.flush();
+        }
+        catch (cause) {
+            return result_1.Result.err(new TransferError_ts_1.TransferError({ operation: "get", cause }));
+        }
+        return await collectDownload(this.nc, inbox, this.timeoutMs);
+    }
+}
+exports.DownloadTransferHandle = DownloadTransferHandle;
+_DownloadTransferHandle_grant = new WeakMap();
+function createTransferHandle(nc, auth, timeoutMs, grant) {
+    return grant.kind === "upload"
+        ? new UploadTransferHandle(nc, auth, timeoutMs, grant)
+        : new DownloadTransferHandle(nc, auth, timeoutMs, grant);
+}
+async function verifyTransferMessage(args) {
+    if (!args.proof || !args.sessionKey || args.sessionKey !== args.expectedSessionKey) {
+        return false;
+    }
+    return await (0, proof_ts_1.verifyProof)(args.expectedSessionKey, {
+        sessionKey: args.sessionKey,
+        subject: args.subject,
+        payloadHash: await (0, utils_ts_1.sha256)(args.payload),
+    }, args.proof);
+}

package/script/trellis/trellis.d.ts

@@ -11,6 +11,7 @@ import { RemoteError } from "./errors/RemoteError.ts";
 import { type LoggerLike } from "./globals.ts";
 import { TypedKV } from "./kv.ts";
 import { OperationInvoker, type OperationRefData } from "./operations.ts";
+import { type DownloadTransferGrant, type DownloadTransferHandle, type UploadTransferGrant, type UploadTransferHandle } from "./transfer.ts";
 export type AuthValidateRequestResponse = StaticDecode<typeof AuthValidateRequestResponseSchema>;
 export type AuthValidateRequestInput = StaticDecode<typeof AuthValidateRequestSchema>;
 export type SessionCaller = AuthValidateRequestResponse["caller"];
@@ -179,6 +180,8 @@ export declare class Trellis<TA extends AnyTrellisAPI = TrellisAPI, TMode extend
      * Returns the underlying NATS connection.
      */
     get natsConnection(): NatsConnection;
+    transfer(grant: UploadTransferGrant): UploadTransferHandle;
+    transfer(grant: DownloadTransferGrant): DownloadTransferHandle;
     operationStoreHandle(): Promise<TypedKV<typeof DurableOperationRecordSchema>>;
     loadOperationRecord(operationId: string): Promise<DurableOperationRecord | null>;
     saveOperationRecord(runtime: RuntimeOperationRecord): Promise<void>;

package/script/trellis/trellis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trellis.d.ts","sourceRoot":"","sources":["../../../trellis.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EAErB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,KAAK,GAAG,EACR,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAEV,eAAe,EACf,OAAO,EACP,UAAU,EACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,WAAW,EACX,KAAK,SAAS,EAId,KAAK,UAAU,EAEf,MAAM,EACP,MAAM,oBAAoB,CAAC;AAY5B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAEL,KAAK,SAAS,EAIf,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,oBAAoB,EACzB,eAAe,EACf,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,EAEtB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,2BAA2B,GAAG,YAAY,CACpD,OAAO,iCAAiC,CACzC,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,YAAY,CACjD,OAAO,yBAAyB,CACjC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;AAElE;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAErE;AAmBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAGxD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQrD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAQ3D;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGlE;AAED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,UAAU,GACtB,UAAU,CA+BZ;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,IAAI,EAAE,UAAU,KACb,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;AAEtC,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC9C,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACpD,MAAM,MAAM,SAAS,CAAC,EAAE,SAAS,aAAa,IAAI,QAAQ,CACxD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CACzB,CAAC;AACF,MAAM,MAAM,YAAY,CAAC,EAAE,SAAS,aAAa,IAAI,QAAQ,CAC3D,MAAM,EAAE,CAAC,YAAY,CAAC,GAAG,MAAM,CAChC,CAAC;AAEF,KAAK,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,IAClE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,MAAM,EAAE,MAAM,QAAQ,EAAE,MAAM,QAAQ,CAAC,GACtE,eAAe,CAAC,MAAM,CAAC,GACvB,KAAK,CAAC;AACZ,KAAK,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,IACnE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,OAAO,EAAE,MAAM,OAAO,EAAE,MAAM,QAAQ,CAAC,GACtE,eAAe,CAAC,OAAO,CAAC,GACxB,KAAK,CAAC;AAgBZ,MAAM,MAAM,gBAAgB,CAC1B,EAAE,SAAS,aAAa,EACxB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,KAAK,EAAE,MAAM,MAAM,CAAA;CAAE,GACnD,eAAe,CAAC,MAAM,CAAC,GACvB,KAAK,CAAC;AACV,MAAM,MAAM,mBAAmB,CAC7B,EAAE,SAAS,aAAa,EACxB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;CAAE,GACzD,SAAS,SAAS,SAAS,GAAG,OAAO,GACrC,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GACvC,OAAO,CAAC;AACZ,MAAM,MAAM,iBAAiB,CAC3B,EAAE,SAAS,aAAa,EACxB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,OAAO,CAAA;CAAE,GACrD,OAAO,SAAS,SAAS,GAAG,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAC3E,OAAO,CAAC;AACZ,MAAM,MAAM,sBAAsB,CAAC,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI;IAC3E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IACtE,QAAQ,CACN,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,IAAI,CACF,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IACrE,MAAM,CACJ,GAAG,EAAE;QAAE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;KAAE,GACnD,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;CAC/D,CAAC;AACF,MAAM,MAAM,uBAAuB,CACjC,MAAM,EACN,SAAS,GAAG,OAAO,EACnB,OAAO,GAAG,OAAO,IACf;IACF,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC;AACF,MAAM,MAAM,qBAAqB,CAC/B,MAAM,EACN,SAAS,GAAG,OAAO,EACnB,OAAO,GAAG,OAAO,IACf;IACF,MAAM,CACJ,OAAO,EAAE,CACP,OAAO,EAAE,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,KACzD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AACF,MAAM,MAAM,gBAAgB,CAC1B,EAAE,SAAS,aAAa,EACxB,KAAK,SAAS,WAAW,EACzB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,KAAK,SAAS,QAAQ,GAAG,qBAAqB,CAC9C,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,EACvB,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,EAC1B,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,CACzB,GACC,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC;AAEjE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAErC;AACD,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,wBAAwB,CAAC;CACpC,CAAC;AAyBF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;EAIvC,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,wBAAwB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,CACD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,OAAO,CACL,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,IAAI,CACF,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,MAAM,CACJ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;CAC/D,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,IAAI,CACX,sBAAsB,EACtB,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAC5C,EACD,KAAK,EAAE,qBAAqB,EAC5B,KAAK,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACxC,wBAAwB,CA+B1B;AAeD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,wBAAwB,CAKnC;AAED,KAAK,oBAAoB,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,EAAE,SAAS,aAAa,IAAI;IAClD,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,GAAG,CAAC,EAAE,EAAE,CAAC;IACT,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,IAAI,CACzE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EACvB,OAAO,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,KACnD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAuBlE,qBAAa,OAAO,CAClB,EAAE,SAAS,aAAa,GAAG,UAAU,EACrC,KAAK,SAAS,WAAW,GAAG,QAAQ;;IAEpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC;IAC/B,SAAS,CAAC,EAAE,EAAE,eAAe,CAAC;IAC9B,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;gBAUf,IAAI,EAAE,MAAM,EAAE,+BAA+B;IAC7C,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;IAsBxB;;OAEG;IACH,IAAI,cAAc,IAAI,cAAc,CAEnC;IAYK,oBAAoB,IAAI,OAAO,CACnC,OAAO,CAAC,OAAO,4BAA4B,CAAC,CAC7C;IAyBK,mBAAmB,CACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAUnC,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgOzE,SAAS,CAAC,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,EAClC,SAAS,EAAE,CAAC,GACX,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAqB3B,KAAK,CACT,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CACF,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KACnD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAqWrD,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG,oBAAoB,GAAG,IAAI;IAI/D,OAAO,CACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAAC,CAAC;IAuCrD,KAAK,CACT,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,GACpD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAAC,CAAC;IAmG3D,IAAI,IAAI,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC;IAKpC,QAAQ,CACN,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,cAAc,UAAQ,GACrB,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;cA8HlB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CACR,MAAM,CACJ,2BAA2B,EAC3B,WAAW,GAAG,eAAe,GAAG,eAAe,CAChD,CACF;CAcF;AAED,MAAM,WAAW,OAAO,CACtB,EAAE,SAAS,aAAa,GAAG,UAAU,EACrC,KAAK,SAAS,WAAW,GAAG,QAAQ;IAEpC,OAAO,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EAC7B,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CACR,MAAM,CACJ,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EACrB,WAAW,GAAG,eAAe,GAAG,eAAe,CAChD,CACF,CAAC;IACF,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EACpC,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,OAAO,CACtB,EAAE,SAAS,aAAa,GAAG,UAAU,EACrC,KAAK,SAAS,WAAW,GAAG,QAAQ;IAEpC,OAAO,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EAC7B,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CACR,MAAM,CACJ,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EACrB,WAAW,GAAG,eAAe,GAAG,eAAe,CAChD,CACF,CAAC;IACF,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EACpC,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;CACnC"}
+{"version":3,"file":"trellis.d.ts","sourceRoot":"","sources":["../../../trellis.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EAErB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,KAAK,GAAG,EACR,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAEV,eAAe,EACf,OAAO,EACP,UAAU,EACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,WAAW,EACX,KAAK,SAAS,EAId,KAAK,UAAU,EAEf,MAAM,EACP,MAAM,oBAAoB,CAAC;AAY5B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAEL,KAAK,SAAS,EAIf,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,oBAAoB,EACzB,eAAe,EACf,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,EAEtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAE3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,2BAA2B,GAAG,YAAY,CACpD,OAAO,iCAAiC,CACzC,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,YAAY,CACjD,OAAO,yBAAyB,CACjC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;AAElE;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,CAErE;AAmBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAGxD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQrD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAQ3D;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGlE;AAED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,UAAU,GACtB,UAAU,CA+BZ;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,IAAI,EAAE,UAAU,KACb,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;AAEtC,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC;AACvC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC9C,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACpD,MAAM,MAAM,SAAS,CAAC,EAAE,SAAS,aAAa,IAAI,QAAQ,CACxD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CACzB,CAAC;AACF,MAAM,MAAM,YAAY,CAAC,EAAE,SAAS,aAAa,IAAI,QAAQ,CAC3D,MAAM,EAAE,CAAC,YAAY,CAAC,GAAG,MAAM,CAChC,CAAC;AAEF,KAAK,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,IAClE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,MAAM,EAAE,MAAM,QAAQ,EAAE,MAAM,QAAQ,CAAC,GACtE,eAAe,CAAC,MAAM,CAAC,GACvB,KAAK,CAAC;AACZ,KAAK,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,IACnE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,OAAO,EAAE,MAAM,OAAO,EAAE,MAAM,QAAQ,CAAC,GACtE,eAAe,CAAC,OAAO,CAAC,GACxB,KAAK,CAAC;AAgBZ,MAAM,MAAM,gBAAgB,CAC1B,EAAE,SAAS,aAAa,EACxB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,KAAK,EAAE,MAAM,MAAM,CAAA;CAAE,GACnD,eAAe,CAAC,MAAM,CAAC,GACvB,KAAK,CAAC;AACV,MAAM,MAAM,mBAAmB,CAC7B,EAAE,SAAS,aAAa,EACxB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;CAAE,GACzD,SAAS,SAAS,SAAS,GAAG,OAAO,GACrC,eAAe,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GACvC,OAAO,CAAC;AACZ,MAAM,MAAM,iBAAiB,CAC3B,EAAE,SAAS,aAAa,EACxB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,OAAO,CAAA;CAAE,GACrD,OAAO,SAAS,SAAS,GAAG,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAC3E,OAAO,CAAC;AACZ,MAAM,MAAM,sBAAsB,CAAC,SAAS,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI;IAC3E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IACtE,QAAQ,CACN,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,IAAI,CACF,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IACrE,MAAM,CACJ,GAAG,EAAE;QAAE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;KAAE,GACnD,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;CAC/D,CAAC;AACF,MAAM,MAAM,uBAAuB,CACjC,MAAM,EACN,SAAS,GAAG,OAAO,EACnB,OAAO,GAAG,OAAO,IACf;IACF,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC;AACF,MAAM,MAAM,qBAAqB,CAC/B,MAAM,EACN,SAAS,GAAG,OAAO,EACnB,OAAO,GAAG,OAAO,IACf;IACF,MAAM,CACJ,OAAO,EAAE,CACP,OAAO,EAAE,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,KACzD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AACF,MAAM,MAAM,gBAAgB,CAC1B,EAAE,SAAS,aAAa,EACxB,KAAK,SAAS,WAAW,EACzB,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,IACxB,KAAK,SAAS,QAAQ,GAAG,qBAAqB,CAC9C,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,EACvB,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,EAC1B,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,CACzB,GACC,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC;AAEjE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAErC;AACD,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,wBAAwB,CAAC;CACpC,CAAC;AAyBF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;EAIvC,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,gBAAgB,CAAC;IACtB,QAAQ,EAAE,wBAAwB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,CACD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,OAAO,CACL,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,IAAI,CACF,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9D,MAAM,CACJ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC,CAAC;CAC/D,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,IAAI,CACX,sBAAsB,EACtB,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAC5C,EACD,KAAK,EAAE,qBAAqB,EAC5B,KAAK,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACxC,wBAAwB,CA+B1B;AAeD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,wBAAwB,CAKnC;AAED,KAAK,oBAAoB,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,EAAE,SAAS,aAAa,IAAI;IAClD,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,GAAG,CAAC,EAAE,EAAE,CAAC;IACT,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,IAAI,CACzE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EACvB,OAAO,EAAE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,KACnD,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAmClE,qBAAa,OAAO,CAClB,EAAE,SAAS,aAAa,GAAG,UAAU,EACrC,KAAK,SAAS,WAAW,GAAG,QAAQ;;IAEpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC;IAC/B,SAAS,CAAC,EAAE,EAAE,eAAe,CAAC;IAC9B,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;gBAUf,IAAI,EAAE,MAAM,EAAE,+BAA+B;IAC7C,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;IAsBxB;;OAEG;IACH,IAAI,cAAc,IAAI,cAAc,CAEnC;IAED,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB;IAC1D,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB;IAexD,oBAAoB,IAAI,OAAO,CACnC,OAAO,CAAC,OAAO,4BAA4B,CAAC,CAC7C;IAyBK,mBAAmB,CACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAUnC,mBAAmB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgOzE,SAAS,CAAC,CAAC,SAAS,YAAY,CAAC,EAAE,CAAC,EAClC,SAAS,EAAE,CAAC,GACX,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAqB3B,KAAK,CACT,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CACF,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,KACnD,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAwYrD,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG,oBAAoB,GAAG,IAAI;IAI/D,OAAO,CACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAAC,CAAC;IAuCrD,KAAK,CACT,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,GACpD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAAC,CAAC;IAmG3D,IAAI,IAAI,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC;IAKpC,QAAQ,CACN,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,cAAc,UAAQ,GACrB,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;cA8HlB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CACR,MAAM,CACJ,2BAA2B,EAC3B,WAAW,GAAG,eAAe,GAAG,eAAe,CAChD,CACF;CAcF;AAED,MAAM,WAAW,OAAO,CACtB,EAAE,SAAS,aAAa,GAAG,UAAU,EACrC,KAAK,SAAS,WAAW,GAAG,QAAQ;IAEpC,OAAO,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EAC7B,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CACR,MAAM,CACJ,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EACrB,WAAW,GAAG,eAAe,GAAG,eAAe,CAChD,CACF,CAAC;IACF,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EACpC,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,OAAO,CACtB,EAAE,SAAS,aAAa,GAAG,UAAU,EACrC,KAAK,SAAS,WAAW,GAAG,QAAQ;IAEpC,OAAO,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EAC7B,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CACR,MAAM,CACJ,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,EACrB,WAAW,GAAG,eAAe,GAAG,eAAe,CAChD,CACF,CAAC;IACF,cAAc,CAAC,CAAC,SAAS,SAAS,CAAC,EAAE,CAAC,EACpC,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;CACnC"}

package/script/trellis/trellis.js

@@ -36,6 +36,7 @@ const globals_ts_1 = require("./globals.ts");
 const kv_ts_1 = require("./kv.ts");
 const TrellisError_ts_1 = require("./models/trellis/TrellisError.ts");
 const operations_ts_1 = require("./operations.ts");
+const transfer_ts_1 = require("./transfer.ts");
 const tasks_ts_1 = require("./tasks.ts");
 /**
  * Safely extract JSON from a NATS message.
@@ -180,12 +181,22 @@ function isTerminalRuntimeOperationSnapshot(value) {
 const NATS_SUBJECT_TOKEN_FORBIDDEN = /[\u0000\s.*>~]/gu;
 const DEFAULT_NO_RESPONDER_MAX_RETRIES = 2;
 const DEFAULT_NO_RESPONDER_RETRY_MS = 200;
+const DEFAULT_AUTH_VALIDATE_SESSION_RETRY_ATTEMPTS = 3;
+const DEFAULT_AUTH_VALIDATE_SESSION_RETRY_MS = 25;
 const EMPTY_TRELLIS_API = {
     rpc: {},
     operations: {},
     events: {},
     subjects: {},
 };
+function isTransientAuthValidateSessionError(error) {
+    return error instanceof RemoteError_ts_1.RemoteError &&
+        error.remoteError.type === "AuthError" &&
+        error.remoteError.reason === "session_not_found";
+}
+async function sleep(ms) {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+}
 class Trellis {
     constructor(name, // Must be unique for a service
     nats, auth, opts) {
@@ -262,6 +273,9 @@ class Trellis {
     get natsConnection() {
         return this.nats;
     }
+    transfer(grant) {
+        return (0, transfer_ts_1.createTransferHandle)(this.nats, this.auth, this.timeout, grant);
+    }
     async operationStoreHandle() {
         if (!__classPrivateFieldGet(this, _Trellis_operationStore, "f")) {
             const bucket = `trellis_operations_${this.name.replace(/[^A-Za-z0-9_-]/g, "_")}`;
@@ -679,28 +693,45 @@ _Trellis_log = new WeakMap(), _Trellis_tasks = new WeakMap(), _Trellis_hasExplic
                         context: { sessionKey },
                     }));
                 }
-                const authResult = await this.requestAuthValidate({
-                    sessionKey,
-                    proof,
-                    subject: msg.subject,
-                    payloadHash: base64urlEncode(payloadHash),
-                    capabilities: ctx.callerCapabilities,
-                });
-                const auth = authResult.take();
-                if ((0, result_1.isErr)(auth)) {
+                let auth;
+                for (let attempt = 0; attempt < DEFAULT_AUTH_VALIDATE_SESSION_RETRY_ATTEMPTS; attempt++) {
+                    const authResult = await this.requestAuthValidate({
+                        sessionKey,
+                        proof,
+                        subject: msg.subject,
+                        payloadHash: base64urlEncode(payloadHash),
+                        capabilities: ctx.callerCapabilities,
+                    });
+                    const authValue = authResult.take();
+                    if (!(0, result_1.isErr)(authValue)) {
+                        auth = authValue;
+                        break;
+                    }
+                    const authError = authValue.error;
+                    if (!isTransientAuthValidateSessionError(authError) ||
+                        attempt === DEFAULT_AUTH_VALIDATE_SESSION_RETRY_ATTEMPTS - 1) {
+                        auth = authError;
+                        break;
+                    }
+                    await sleep(DEFAULT_AUTH_VALIDATE_SESSION_RETRY_MS * (attempt + 1));
+                }
+                if (!auth) {
+                    return (0, result_1.err)(new index_ts_1.UnexpectedError({ context: { reason: "missing_auth_validate_result" } }));
+                }
+                if (auth instanceof Error) {
                     __classPrivateFieldGet(this, _Trellis_log, "f").warn({
                         method,
-                        error: auth.error.message,
-                        errorType: auth.error.name,
-                        remoteError: auth.error instanceof RemoteError_ts_1.RemoteError
-                            ? auth.error.toSerializable()
+                        error: auth.message,
+                        errorType: auth.name,
+                        remoteError: auth instanceof RemoteError_ts_1.RemoteError
+                            ? auth.toSerializable()
                             : undefined,
                     }, "Auth.ValidateRequest failed");
                     span.setStatus({
                         code: tracing_ts_1.SpanStatusCode.ERROR,
                         message: "Auth.ValidateRequest failed",
                     });
-                    return (0, result_1.err)(auth.error);
+                    return (0, result_1.err)(auth);
                 }
                 if (!auth.allowed) {
                     span.setStatus({
@@ -736,9 +767,9 @@ _Trellis_log = new WeakMap(), _Trellis_tasks = new WeakMap(), _Trellis_hasExplic
             if (caller.type === "service") {
                 span.setAttribute("service.id", caller.id);
             }
-            if (caller.type === "workload") {
-                span.setAttribute("workload.instance_id", caller.instanceId);
-                span.setAttribute("workload.profile_id", caller.profileId);
+            if (caller.type === "device") {
+                span.setAttribute("device.id", caller.deviceId);
+                span.setAttribute("device.profile_id", caller.profileId);
             }
             const handlerResultWrapped = await result_1.AsyncResult.try(() => fn(parsedInput, {
                 caller,