@rubytech/create-maxy-code 0.1.458 → 0.1.460

package/payload/platform/lib/storage-broker/dist/cf-exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cf-exec.d.ts","sourceRoot":"","sources":["../src/cf-exec.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAI7D,MAAM,MAAM,KAAK,GAAG,CAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACxB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAMjC,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACrE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAEvE,MAAM,WAAW,MAAM;IACrB,MAAM,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAmDD,wBAAgB,UAAU,CACxB,IAAI,EAAE,eAAe,EACrB,GAAG,GAAE,KAAkB,EACvB,OAAO,GAAE,OAAsB,GAC9B,MAAM,CAmGR;AASD,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE,KAAkB,EACvB,OAAO,GAAE,OAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAMjB"}
+{"version":3,"file":"cf-exec.d.ts","sourceRoot":"","sources":["../src/cf-exec.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAI7D,MAAM,MAAM,KAAK,GAAG,CAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACxB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAYjC,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,KAClF,OAAO,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACpE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAkJD,wBAAgB,UAAU,CACxB,IAAI,EAAE,eAAe,EACrB,GAAG,GAAE,KAAkB,EACvB,OAAO,GAAE,OAAsB,GAC9B,MAAM,CAoMR;AASD,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE,KAAkB,EACvB,OAAO,GAAE,OAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/payload/platform/lib/storage-broker/dist/cf-exec.js

@@ -9,6 +9,24 @@ const node_child_process_1 = require("node:child_process");
 const node_path_1 = require("node:path");
 const house_credential_js_1 = require("./house-credential.js");
 const house_scoped_token_js_1 = require("./house-scoped-token.js");
+// An object key carries `/` as a real path separator (the data portal's
+// per-person prefixes), so it is encoded segment-wise rather than whole:
+// separators stay separators, and spaces and specials are escaped. This
+// encoding is not doc-confirmed; it is chosen so that a wrong guess surfaces as
+// a 404 carrying its body, never as a silently misfiled object.
+function encodeObjectKey(key) {
+    return key.split("/").map(encodeURIComponent).join("/");
+}
+// The single-object endpoint, shared by get/put/delete so the three cannot drift
+// apart on encoding.
+function objectUrl(accountId, bucket, key) {
+    return `https://api.cloudflare.com/client/v4/accounts/${accountId}/r2/buckets/${encodeURIComponent(bucket)}/objects/${encodeObjectKey(key)}`;
+}
+// The cast is confined to this adapter. A Uint8Array is a valid fetch body at
+// runtime, but the DOM lib's BodyInit does not admit TypeScript's generic
+// Uint8Array<ArrayBufferLike>, so consumers compiled against DOM typings (the
+// ui server) reject the call the Node typings accept. Casting here keeps the
+// seam's own type honest for every caller and test.
 const defaultFetch = (url, init) => fetch(url, init);
 const defaultRun = (cmd, args, env) => new Promise((resolve, reject) => {
     (0, node_child_process_1.execFile)(cmd, args, { env }, (err, stdout, stderr) => {
@@ -49,6 +67,67 @@ async function cfApiJson(fetchFn, url, init, context) {
     }
     return { parsed, body };
 }
+// The one pagination loop for the object listing, shared by r2ObjectList and
+// r2ObjectFind so the two cannot drift apart on cursor discipline — the same
+// reason objectUrl is shared by get/put/delete.
+//
+// 1665's rules live here and nowhere else: follow the cursor to exhaustion,
+// is_truncated is authoritative when present, a truncated page naming no cursor
+// is an anomaly to surface rather than a partial list, and a repeated cursor is
+// a cycle rather than progress. per_page is deliberately never sent — its
+// default is unconfirmed, and omitting it takes whatever page size Cloudflare
+// serves rather than guessing a value.
+//
+// It yields pages rather than returning a list, which is what lets r2ObjectFind
+// stop early: an async generator is pull-based, so a consumer that stops
+// iterating never triggers the next request.
+async function* r2ObjectPages(fetchFn, cred, bucket, prefix) {
+    const base = `https://api.cloudflare.com/client/v4/accounts/${cred.accountId}/r2/buckets/${encodeURIComponent(bucket)}/objects`;
+    const seen = new Set();
+    let cursor;
+    for (;;) {
+        const params = new URLSearchParams();
+        if (prefix !== undefined)
+            params.set("prefix", prefix);
+        if (cursor !== undefined)
+            params.set("cursor", cursor);
+        const qs = params.toString();
+        const { parsed, body } = await cfApiJson(fetchFn, qs ? `${base}?${qs}` : base, { method: "GET", headers: { Authorization: `Bearer ${cred.apiToken}` } }, "r2 object list");
+        const page = parsed;
+        const objects = [];
+        for (const o of page.result ?? []) {
+            objects.push({ key: o.key, size: o.size, etag: o.etag, lastModified: o.last_modified });
+        }
+        yield objects;
+        const truncated = page.result_info?.is_truncated;
+        const next = page.result_info?.cursor;
+        // is_truncated is authoritative *when present*: a last page may still carry
+        // a cursor, and following it would issue a pointless request or trip the
+        // cycle guard below on a healthy response.
+        if (truncated === false)
+            return;
+        // The API says there is more but names no cursor: the response is not the
+        // shape we understand. Surface it rather than stop, which would silently
+        // truncate the audit's listing — the failure this loop exists to prevent.
+        if (truncated === true && !next) {
+            throw new Error(`storage-broker: r2 object list reported truncated but gave no pagination cursor: ${body}`);
+        }
+        // is_truncated absent: it is itself an unmeasured fact, so it must not be
+        // what decides correctness. Fall back to cursor presence — the rule r2List
+        // uses on the same envelope — so an envelope without the flag paginates
+        // rather than truncating silently.
+        if (!next)
+            return;
+        // A cursor seen before means the API is cycling rather than advancing: it
+        // would loop forever, re-yielding the same objects each pass. Tracking every
+        // cursor (not just the last) also catches a cycle of period >= 2.
+        if (seen.has(next)) {
+            throw new Error(`storage-broker: r2 object list returned a repeated pagination cursor: ${next}`);
+        }
+        seen.add(next);
+        cursor = next;
+    }
+}
 function makeCfExec(cred, run = defaultRun, fetchFn = defaultFetch) {
     const env = {
         ...process.env,
@@ -129,6 +208,92 @@ function makeCfExec(cred, run = defaultRun, fetchFn = defaultFetch) {
         async r2Create(name) {
             await run("npx", ["wrangler", "r2", "bucket", "create", name], env);
         },
+        // --- R2 objects (Task 1691) -------------------------------------------
+        //
+        // The v4 REST API exposes the object surface under
+        // /accounts/{id}/r2/buckets/{bucket}/objects and accepts the same Bearer
+        // token as the bucket endpoints (account-level Workers R2 Storage Write).
+        // The r2/api/tokens/ note that "Object Read & Write" is S3-only constrains
+        // the bucket-item-scoped *permission types*, not these endpoints.
+        //
+        // The endpoint's existence and token class are doc-confirmed. Its behaviour
+        // was unmeasured until Task 1697, which probed the live v4 API on 2026-07-16
+        // from the laptop's own maxy-code install (no house Cloudflare credential
+        // exists on the dev Mac, which is why the tests fake the fetch seam). What
+        // that probe established, so nobody re-guesses it:
+        //
+        // - The listing is NOT in ascending UTF-8 binary order. `prefix=a/photo.jpg`
+        //   returns `a/photo.jpg.bak` before `a/photo.jpg`, so the exact key is not
+        //   the first element and `per_page=1` returns a neighbour. S3's
+        //   ListObjectsV2 ordering guarantee does not transfer to this endpoint.
+        // - HEAD is routed only for single-segment keys: any key containing "/"
+        //   returns 405 while GET on the identical URL returns 404.
+        // - A ranged GET is honoured at 2 MB and ignored at 12 B, so it cannot size
+        //   an object without an undocumented size threshold deciding correctness.
+        // - per_page is bounded 0..1000 (error 10029), and per_page=0 returns zero
+        //   objects with is_truncated:true — a loop trap. It is still never sent.
+        //
+        // The design keeps every unmeasured fact unable to affect correctness:
+        // per_page is never sent, order is never assumed, and nothing fails
+        // silently. Evidence:
+        // docs/superpowers/specs/2026-07-16-storage-broker-get-sizing-early-exit-design.md
+        async r2ObjectList(bucket, prefix) {
+            // The standing audit needs the complete set: a truncated object listing
+            // reads as "those objects are absent", producing false phantom rows and
+            // hiding real orphans — the same bug r2List had, one endpoint over. So
+            // this drains every page. r2ObjectFind is the caller that needs one
+            // record and must not pay for this.
+            const objects = [];
+            for await (const page of r2ObjectPages(fetchFn, cred, bucket, prefix)) {
+                for (const o of page)
+                    objects.push(o);
+            }
+            return objects;
+        },
+        async r2ObjectFind(bucket, key) {
+            // Task 1697 — the size source for a get. Scans each page for the exact key
+            // and returns on the first match, so it holds one page rather than every
+            // object sharing the key as a prefix, and issues no request past the page
+            // carrying the match.
+            //
+            // Exact match, not prefix: a prefix of `a/photo.jpg` also matches
+            // `a/photo.jpg.bak`, and sizing the neighbour would either reject a legal
+            // get or admit an oversized one. Exiting on the match rather than on
+            // position is what makes this independent of listing order — measured
+            // 2026-07-16 against the live v4 API, the listing is NOT in ascending
+            // UTF-8 binary order, so the exact key is not the first element and
+            // `per_page=1` returns a neighbour.
+            //
+            // An absent key still drains every page, because proving absence requires
+            // seeing them all. That residual is accepted and permanent; nothing on
+            // this endpoint sizes one object in bounded work. See
+            // docs/superpowers/specs/2026-07-16-storage-broker-get-sizing-early-exit-design.md
+            for await (const page of r2ObjectPages(fetchFn, cred, bucket, key)) {
+                const hit = page.find((o) => o.key === key);
+                if (hit)
+                    return hit;
+            }
+            return null;
+        },
+        async r2ObjectGet(bucket, key) {
+            // The one method cfApiJson cannot wrap: get returns the raw object body,
+            // not a success envelope, so there is nothing to parse or assert
+            // success:true on. The error body is still retained on a non-2xx.
+            const res = await fetchFn(objectUrl(cred.accountId, bucket, key), {
+                method: "GET",
+                headers: { Authorization: `Bearer ${cred.apiToken}` },
+            });
+            if (!res.ok) {
+                throw new Error(`storage-broker: r2 object get failed: ${res.status}\n${await res.text()}`);
+            }
+            return new Uint8Array(await res.arrayBuffer());
+        },
+        async r2ObjectPut(bucket, key, body) {
+            await cfApiJson(fetchFn, objectUrl(cred.accountId, bucket, key), { method: "PUT", headers: { Authorization: `Bearer ${cred.apiToken}` }, body }, "r2 object put");
+        },
+        async r2ObjectDelete(bucket, key) {
+            await cfApiJson(fetchFn, objectUrl(cred.accountId, bucket, key), { method: "DELETE", headers: { Authorization: `Bearer ${cred.apiToken}` } }, "r2 object delete");
+        },
     };
 }
 // Task 1670 — build a CfExec whose token is a D1+R2 "storage" scope minted from

package/payload/platform/lib/storage-broker/dist/cf-exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"cf-exec.js","sourceRoot":"","sources":["../src/cf-exec.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,iFAAiF;AACjF,iFAAiF;;AAgFjF,gCAuGC;AASD,0CAUC;AAxMD,2DAA8C;AAC9C,yCAAiC;AAEjC,+DAA4D;AAC5D,mEAAkE;AAyBlE,MAAM,YAAY,GAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAE9D,MAAM,UAAU,GAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAC3C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,IAAA,6BAAQ,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,SAAS,SAAS,CAAC,GAAW,EAAE,OAAe;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,0CAA0C;AAC1C,KAAK,UAAU,SAAS,CACtB,OAAgB,EAChB,GAAW,EACX,IAAwE,EACxE,OAAe;IAEf,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,YAAY,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,yEAAyE;IACzE,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAiC,CAAC;IACxE,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,eAAe,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAgB,UAAU,CACxB,IAAqB,EACrB,MAAa,UAAU,EACvB,UAAmB,YAAY;IAE/B,MAAM,GAAG,GAAG;QACV,GAAG,OAAO,CAAC,GAAG;QACd,oBAAoB,EAAE,IAAI,CAAC,QAAQ;QACnC,qBAAqB,EAAE,IAAI,CAAC,SAAS;KACZ,CAAC;IAE5B,2EAA2E;IAC3E,2EAA2E;IAC3E,gFAAgF;IAChF,OAAO;QACL,KAAK,CAAC,MAAM;YACV,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,SAAS,CAAC,MAAM,EAAE,SAAS,CAAqC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjB,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,GAAG,GAAG,iDAAiD,IAAI,CAAC,SAAS,cAAc,CAAC;YAC1F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CACtC,OAAO,EACP,GAAG,EACH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aAC/B,EACD,WAAW,CACZ,CAAC;YACF,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,IAAI,GAAI,MAAyC,CAAC,MAAM,EAAE,IAAI,CAAC;YACrE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;YACrB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAC1B,KAAK,EACL,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,EAC3E,GAAG,CACJ,CAAC;YACF,OAAO,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,MAAM;YACV,yEAAyE;YACzE,qEAAqE;YACrE,gEAAgE;YAChE,EAAE;YACF,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,IAAI,GAAG,iDAAiD,IAAI,CAAC,SAAS,aAAa,CAAC;YAC1F,MAAM,OAAO,GAAuB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,MAA0B,CAAC;YAC/B,SAAS,CAAC;gBACR,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,OAAO,EACP,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EACxE,gBAAgB,CACjB,CAAC;gBACF,MAAM,IAAI,GAAG,MAGZ,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3E,uEAAuE;gBACvE,uEAAuE;gBACvE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;gBACtC,IAAI,CAAC,IAAI;oBAAE,OAAO,OAAO,CAAC;gBAC1B,yEAAyE;gBACzE,qEAAqE;gBACrE,oEAAoE;gBACpE,wEAAwE;gBACxE,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,yEAAyE,IAAI,EAAE,CAChF,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,wEAAwE;AACxE,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,yDAAyD;AAClD,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,MAAa,UAAU,EACvB,UAAmB,YAAY;IAE/B,MAAM,IAAI,GAAG,IAAA,yCAAmB,EAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,IAAA,+CAAuB,EAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC"}
+{"version":3,"file":"cf-exec.js","sourceRoot":"","sources":["../src/cf-exec.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,iFAAiF;AACjF,iFAAiF;;AAsMjF,gCAwMC;AASD,0CAUC;AA/ZD,2DAA8C;AAC9C,yCAAiC;AAEjC,+DAA4D;AAC5D,mEAAkE;AAgDlE,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,gFAAgF;AAChF,gEAAgE;AAChE,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,iFAAiF;AACjF,qBAAqB;AACrB,SAAS,SAAS,CAAC,SAAiB,EAAE,MAAc,EAAE,GAAW;IAC/D,OAAO,iDAAiD,SAAS,eAAe,kBAAkB,CAAC,MAAM,CAAC,YAAY,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/I,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,oDAAoD;AACpD,MAAM,YAAY,GAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAmB,CAAC,CAAC;AAE7E,MAAM,UAAU,GAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAC3C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,IAAA,6BAAQ,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,SAAS,SAAS,CAAC,GAAW,EAAE,OAAe;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,0CAA0C;AAC1C,KAAK,UAAU,SAAS,CACtB,OAAgB,EAChB,GAAW,EACX,IAAqF,EACrF,OAAe;IAEf,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,YAAY,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,yEAAyE;IACzE,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAiC,CAAC;IACxE,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,eAAe,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,uCAAuC;AACvC,EAAE;AACF,gFAAgF;AAChF,yEAAyE;AACzE,6CAA6C;AAC7C,KAAK,SAAS,CAAC,CAAC,aAAa,CAC3B,OAAgB,EAChB,IAAqB,EACrB,MAAc,EACd,MAAe;IAEf,MAAM,IAAI,GAAG,iDAAiD,IAAI,CAAC,SAAS,eAAe,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;IAChI,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CACtC,OAAO,EACP,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAC3B,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EACxE,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,GAAG,MAGZ,CAAC;QACF,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,OAAO,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QACtC,4EAA4E;QAC5E,yEAAyE;QACzE,2CAA2C;QAC3C,IAAI,SAAS,KAAK,KAAK;YAAE,OAAO;QAChC,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,oFAAoF,IAAI,EAAE,CAC3F,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,mCAAmC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,0EAA0E;QAC1E,6EAA6E;QAC7E,kEAAkE;QAClE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,yEAAyE,IAAI,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CACxB,IAAqB,EACrB,MAAa,UAAU,EACvB,UAAmB,YAAY;IAE/B,MAAM,GAAG,GAAG;QACV,GAAG,OAAO,CAAC,GAAG;QACd,oBAAoB,EAAE,IAAI,CAAC,QAAQ;QACnC,qBAAqB,EAAE,IAAI,CAAC,SAAS;KACZ,CAAC;IAE5B,2EAA2E;IAC3E,2EAA2E;IAC3E,gFAAgF;IAChF,OAAO;QACL,KAAK,CAAC,MAAM;YACV,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,SAAS,CAAC,MAAM,EAAE,SAAS,CAAqC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjB,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,GAAG,GAAG,iDAAiD,IAAI,CAAC,SAAS,cAAc,CAAC;YAC1F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CACtC,OAAO,EACP,GAAG,EACH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;oBACxC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aAC/B,EACD,WAAW,CACZ,CAAC;YACF,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,IAAI,GAAI,MAAyC,CAAC,MAAM,EAAE,IAAI,CAAC;YACrE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;YACrB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAC1B,KAAK,EACL,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,EAC3E,GAAG,CACJ,CAAC;YACF,OAAO,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,MAAM;YACV,yEAAyE;YACzE,qEAAqE;YACrE,gEAAgE;YAChE,EAAE;YACF,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,IAAI,GAAG,iDAAiD,IAAI,CAAC,SAAS,aAAa,CAAC;YAC1F,MAAM,OAAO,GAAuB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,MAA0B,CAAC;YAC/B,SAAS,CAAC;gBACR,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,OAAO,EACP,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EACxE,gBAAgB,CACjB,CAAC;gBACF,MAAM,IAAI,GAAG,MAGZ,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3E,uEAAuE;gBACvE,uEAAuE;gBACvE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;gBACtC,IAAI,CAAC,IAAI;oBAAE,OAAO,OAAO,CAAC;gBAC1B,yEAAyE;gBACzE,qEAAqE;gBACrE,oEAAoE;gBACpE,wEAAwE;gBACxE,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,yEAAyE,IAAI,EAAE,CAChF,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACf,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI;YACjB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,yEAAyE;QACzE,EAAE;QACF,mDAAmD;QACnD,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,EAAE;QACF,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,6EAA6E;QAC7E,4EAA4E;QAC5E,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,EAAE;QACF,uEAAuE;QACvE,oEAAoE;QACpE,sBAAsB;QACtB,mFAAmF;QACnF,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM;YAC/B,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,oEAAoE;YACpE,oCAAoC;YACpC,MAAM,OAAO,GAAe,EAAE,CAAC;YAC/B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG;YAC5B,2EAA2E;YAC3E,yEAAyE;YACzE,0EAA0E;YAC1E,sBAAsB;YACtB,EAAE;YACF,kEAAkE;YAClE,0EAA0E;YAC1E,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,oCAAoC;YACpC,EAAE;YACF,0EAA0E;YAC1E,uEAAuE;YACvE,sDAAsD;YACtD,mFAAmF;YACnF,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC5C,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC;YACtB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG;YAC3B,yEAAyE;YACzE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE;gBAChE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE;aACtD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAC3E,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI;YACjC,MAAM,SAAS,CACb,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EACtC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAC9E,eAAe,CAChB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG;YAC9B,MAAM,SAAS,CACb,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EACtC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EAC3E,kBAAkB,CACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,wEAAwE;AACxE,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,yDAAyD;AAClD,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,MAAa,UAAU,EACvB,UAAmB,YAAY;IAE/B,MAAM,IAAI,GAAG,IAAA,yCAAmB,EAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,oCAAoC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,IAAA,+CAAuB,EAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AACnF,CAAC"}

package/payload/platform/lib/storage-broker/dist/house-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"house-credential.d.ts","sourceRoot":"","sources":["../src/house-credential.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CAkBzE"}
+{"version":3,"file":"house-credential.d.ts","sourceRoot":"","sources":["../src/house-credential.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CAkBzE"}

package/payload/platform/lib/storage-broker/dist/house-credential.js

@@ -3,8 +3,10 @@
 // config directory. This file is the one place the account-wide capability
 // lives. House-only is a location convention plus the cf-token.sh caller gate,
 // NOT an OS permission: every account's session runs as the same unix user, so
-// a sub-account agent holding Bash can read this path directly. Task 1690
-// tracks the OS user separation that would make this a real boundary. Parses
+// a sub-account agent holding Bash can read this path directly. That is a
+// permanent property, not a pending gap: OS user separation was costed and
+// declined as disproportionate (Task 1690, archived undone), so nothing tracks
+// it. Do not cite this file's location or mode as a boundary. Parses
 // KEY=value lines without polluting process.env (same discipline as
 // reconcile-bookings' readEnvFile).
 Object.defineProperty(exports, "__esModule", { value: true });

package/payload/platform/lib/storage-broker/dist/house-credential.js.map

@@ -1 +1 @@
-{"version":3,"file":"house-credential.js","sourceRoot":"","sources":["../src/house-credential.ts"],"names":[],"mappings":";AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,oEAAoE;AACpE,oCAAoC;;AAUpC,kDAkBC;AA1BD,qCAAuC;AACvC,yCAAiC;AAOjC,SAAgB,mBAAmB,CAAC,YAAoB;IACtD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAClE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3D,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"house-credential.js","sourceRoot":"","sources":["../src/house-credential.ts"],"names":[],"mappings":";AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,2EAA2E;AAC3E,+EAA+E;AAC/E,qEAAqE;AACrE,oEAAoE;AACpE,oCAAoC;;AAUpC,kDAkBC;AA1BD,qCAAuC;AACvC,yCAAiC;AAOjC,SAAgB,mBAAmB,CAAC,YAAoB;IACtD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAClE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3D,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/payload/platform/lib/storage-broker/dist/index.d.ts

@@ -1,5 +1,7 @@
 export * from "./authorize.js";
+export * from "./object-limits.js";
 export * from "./registry.js";
+export * from "./resource-limits.js";
 export * from "./house-credential.js";
 export * from "./cf-exec.js";
 export * from "./house-scoped-token.js";

package/payload/platform/lib/storage-broker/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/payload/platform/lib/storage-broker/dist/index.js

@@ -22,7 +22,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authorize.js"), exports);
+__exportStar(require("./object-limits.js"), exports);
 __exportStar(require("./registry.js"), exports);
+__exportStar(require("./resource-limits.js"), exports);
 __exportStar(require("./house-credential.js"), exports);
 __exportStar(require("./cf-exec.js"), exports);
 __exportStar(require("./house-scoped-token.js"), exports);

package/payload/platform/lib/storage-broker/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,4DAA4D;;;;;;;;;;;;;;;;AAE5D,iDAA+B;AAC/B,gDAA8B;AAC9B,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,6CAA2B;AAC3B,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,4DAA4D;;;;;;;;;;;;;;;;AAE5D,iDAA+B;AAC/B,qDAAmC;AACnC,gDAA8B;AAC9B,uDAAqC;AACrC,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,6CAA2B;AAC3B,iDAA+B"}

package/payload/platform/lib/storage-broker/dist/object-limits.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The byte cap on R2 object transfer, and the arithmetic the routes need to
+ * enforce it before they buffer anything.
+ *
+ * One number, one home (Task 1695). The storage-broker MCP tools and the house
+ * ui routes both read the cap from here, so the process that rejects a too-large
+ * file and the process that would otherwise buffer it cannot drift apart.
+ *
+ * Deliberately dependency-free: the MCP imports this module directly, without
+ * the rest of the lib (cf-exec, registry, audit, remediate), which it has no use
+ * for. The ui route reads it through the barrel.
+ */
+/**
+ * The maximum size, in bytes, of an object moved through storage-r2-object-get
+ * or storage-r2-object-put.
+ *
+ * Set independently of the email plugin's OUTBOUND_ATTACHMENT_MAX_BYTES (25 MiB)
+ * even though the payload class is the same. The two exist for different reasons
+ * and must be free to move for different reasons: email's tracks an SMTP-side
+ * rejection threshold, this one tracks house-process memory. Do not couple them.
+ *
+ * Not bounded by R2. A single-part upload may be up to 5 GiB (doc-confirmed:
+ * developers.cloudflare.com/r2/platform/limits/), roughly fifty times this, and
+ * the v4 REST API states no separate object-size limit. This cap is the only
+ * bound on either transfer.
+ *
+ * The bound is not small: at the cap a get still leaves the house process
+ * holding the object and its base64 form, roughly 2.4x the object. That cost was
+ * weighed and accepted when the number was chosen.
+ */
+export declare const R2_OBJECT_MAX_BYTES: number;
+/** base64 emits 4 characters per 3 input bytes, padded up to the next quantum. */
+export declare function base64Ceiling(bytes: number): number;
+/**
+ * The largest JSON body an object route's metadata envelope can legitimately
+ * carry: a bucket name, one key or prefix, and JSON punctuation. No payload term.
+ *
+ * Used twice, because it answers one question — how large can an envelope
+ * legitimately get. `/r2/object/list`, `get` and `delete` carry an envelope and
+ * nothing else, so this is their whole body limit (Task 1698). `put` carries the
+ * same envelope plus base64 object bytes, so it adds this to the base64 ceiling
+ * below, which is the allowance that keeps a legal at-cap put from being rejected
+ * by its own key.
+ *
+ * Deliberately one constant rather than two that happen to match. This is the
+ * opposite ruling to the email cap above, for the opposite reason: that pair must
+ * stay independent because the numbers track different constraints and would drift
+ * for different reasons. Here the constraint is identical, so a change to either
+ * use must move both.
+ *
+ * Sized from confirmed R2 limits rather than assumed. An object key is at most
+ * 1,024 bytes (developers.cloudflare.com/r2/platform/limits/) and a bucket name is
+ * 3-63 characters (developers.cloudflare.com/r2/buckets/create-buckets/), so a
+ * real envelope is about 1.1 KB, or roughly 6 KiB if every key byte takes a
+ * six-character \uXXXX escape. This clears that by about ten times and sits about
+ * 2,100 times below put's body limit: far above anything a real caller sends, far
+ * below anything that threatens house memory. Nothing here depends on either
+ * figure being exact.
+ */
+export declare const R2_OBJECT_ENVELOPE_MAX_BODY_BYTES: number;
+/**
+ * The largest JSON body /r2/object/put can legitimately carry.
+ *
+ * This bounds house memory; it does not adjudicate the last kilobyte. The exact
+ * decoded-byte rule lives in the MCP, which knows the source's size exactly.
+ */
+export declare const R2_OBJECT_PUT_MAX_BODY_BYTES: number;
+/**
+ * The over-cap message, worded once so the MCP and the routes agree. Names the
+ * offending object and the limit, which is what makes the failure actionable
+ * rather than an opaque out-of-memory kill.
+ *
+ * Exact bytes accompany the MiB figures because MiB alone rounds: an object one
+ * byte over the cap reads "100.0 MiB, which exceeds the 100.0 MiB limit", which
+ * is a message that appears to contradict itself and invites the reader to treat
+ * the rejection as a bug. The bytes are what make it legible; the MiB is what
+ * makes it quick.
+ */
+export declare function tooLargeMessage(what: string, actualBytes: number): string;
+//# sourceMappingURL=object-limits.d.ts.map

package/payload/platform/lib/storage-broker/dist/object-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-limits.d.ts","sourceRoot":"","sources":["../src/object-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,mBAAmB,QAAoB,CAAC;AAErD,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,iCAAiC,QAAY,CAAC;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAC+B,CAAC;AAMzE;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAIzE"}

package/payload/platform/lib/storage-broker/dist/object-limits.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * The byte cap on R2 object transfer, and the arithmetic the routes need to
+ * enforce it before they buffer anything.
+ *
+ * One number, one home (Task 1695). The storage-broker MCP tools and the house
+ * ui routes both read the cap from here, so the process that rejects a too-large
+ * file and the process that would otherwise buffer it cannot drift apart.
+ *
+ * Deliberately dependency-free: the MCP imports this module directly, without
+ * the rest of the lib (cf-exec, registry, audit, remediate), which it has no use
+ * for. The ui route reads it through the barrel.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.R2_OBJECT_PUT_MAX_BODY_BYTES = exports.R2_OBJECT_ENVELOPE_MAX_BODY_BYTES = exports.R2_OBJECT_MAX_BYTES = void 0;
+exports.base64Ceiling = base64Ceiling;
+exports.tooLargeMessage = tooLargeMessage;
+/**
+ * The maximum size, in bytes, of an object moved through storage-r2-object-get
+ * or storage-r2-object-put.
+ *
+ * Set independently of the email plugin's OUTBOUND_ATTACHMENT_MAX_BYTES (25 MiB)
+ * even though the payload class is the same. The two exist for different reasons
+ * and must be free to move for different reasons: email's tracks an SMTP-side
+ * rejection threshold, this one tracks house-process memory. Do not couple them.
+ *
+ * Not bounded by R2. A single-part upload may be up to 5 GiB (doc-confirmed:
+ * developers.cloudflare.com/r2/platform/limits/), roughly fifty times this, and
+ * the v4 REST API states no separate object-size limit. This cap is the only
+ * bound on either transfer.
+ *
+ * The bound is not small: at the cap a get still leaves the house process
+ * holding the object and its base64 form, roughly 2.4x the object. That cost was
+ * weighed and accepted when the number was chosen.
+ */
+exports.R2_OBJECT_MAX_BYTES = 100 * 1024 * 1024;
+/** base64 emits 4 characters per 3 input bytes, padded up to the next quantum. */
+function base64Ceiling(bytes) {
+    return 4 * Math.ceil(bytes / 3);
+}
+/**
+ * The largest JSON body an object route's metadata envelope can legitimately
+ * carry: a bucket name, one key or prefix, and JSON punctuation. No payload term.
+ *
+ * Used twice, because it answers one question — how large can an envelope
+ * legitimately get. `/r2/object/list`, `get` and `delete` carry an envelope and
+ * nothing else, so this is their whole body limit (Task 1698). `put` carries the
+ * same envelope plus base64 object bytes, so it adds this to the base64 ceiling
+ * below, which is the allowance that keeps a legal at-cap put from being rejected
+ * by its own key.
+ *
+ * Deliberately one constant rather than two that happen to match. This is the
+ * opposite ruling to the email cap above, for the opposite reason: that pair must
+ * stay independent because the numbers track different constraints and would drift
+ * for different reasons. Here the constraint is identical, so a change to either
+ * use must move both.
+ *
+ * Sized from confirmed R2 limits rather than assumed. An object key is at most
+ * 1,024 bytes (developers.cloudflare.com/r2/platform/limits/) and a bucket name is
+ * 3-63 characters (developers.cloudflare.com/r2/buckets/create-buckets/), so a
+ * real envelope is about 1.1 KB, or roughly 6 KiB if every key byte takes a
+ * six-character \uXXXX escape. This clears that by about ten times and sits about
+ * 2,100 times below put's body limit: far above anything a real caller sends, far
+ * below anything that threatens house memory. Nothing here depends on either
+ * figure being exact.
+ */
+exports.R2_OBJECT_ENVELOPE_MAX_BODY_BYTES = 64 * 1024;
+/**
+ * The largest JSON body /r2/object/put can legitimately carry.
+ *
+ * This bounds house memory; it does not adjudicate the last kilobyte. The exact
+ * decoded-byte rule lives in the MCP, which knows the source's size exactly.
+ */
+exports.R2_OBJECT_PUT_MAX_BODY_BYTES = base64Ceiling(exports.R2_OBJECT_MAX_BYTES) + exports.R2_OBJECT_ENVELOPE_MAX_BODY_BYTES;
+function formatMiB(bytes) {
+    return (bytes / 1024 / 1024).toFixed(1);
+}
+/**
+ * The over-cap message, worded once so the MCP and the routes agree. Names the
+ * offending object and the limit, which is what makes the failure actionable
+ * rather than an opaque out-of-memory kill.
+ *
+ * Exact bytes accompany the MiB figures because MiB alone rounds: an object one
+ * byte over the cap reads "100.0 MiB, which exceeds the 100.0 MiB limit", which
+ * is a message that appears to contradict itself and invites the reader to treat
+ * the rejection as a bug. The bytes are what make it legible; the MiB is what
+ * makes it quick.
+ */
+function tooLargeMessage(what, actualBytes) {
+    return `${what} is ${formatMiB(actualBytes)} MiB (${actualBytes} bytes), which exceeds the ${formatMiB(exports.R2_OBJECT_MAX_BYTES)} MiB (${exports.R2_OBJECT_MAX_BYTES} bytes) R2 object limit.`;
+}
+//# sourceMappingURL=object-limits.js.map

package/payload/platform/lib/storage-broker/dist/object-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-limits.js","sourceRoot":"","sources":["../src/object-limits.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAuBH,sCAEC;AAsDD,0CAIC;AAjFD;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,mBAAmB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,kFAAkF;AAClF,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACU,QAAA,iCAAiC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3D;;;;;GAKG;AACU,QAAA,4BAA4B,GACvC,aAAa,CAAC,2BAAmB,CAAC,GAAG,yCAAiC,CAAC;AAEzE,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,eAAe,CAAC,IAAY,EAAE,WAAmB;IAC/D,OAAO,GAAG,IAAI,OAAO,SAAS,CAAC,WAAW,CAAC,SAAS,WAAW,8BAA8B,SAAS,CACpG,2BAAmB,CACpB,SAAS,2BAAmB,0BAA0B,CAAC;AAC1D,CAAC"}

package/payload/platform/lib/storage-broker/dist/resource-limits.d.ts

@@ -0,0 +1,102 @@
+/**
+ * The bounds on the request bodies the resource-level routes will buffer:
+ * /d1/create, /d1/query and /r2/create (Task 1702).
+ *
+ * Parallel to object-limits.ts, which bounds the object routes. Kept separate
+ * because the facts differ: an object envelope is dominated by R2's 1,024-byte
+ * object key limit, and these routes carry no key at all. Coupling them would tie
+ * a D1 database name to R2's key limit, so a revision to either would move a bound
+ * that has no reason to move.
+ *
+ * These are bounds on house memory. They do not adjudicate the last byte of a name
+ * or a statement — the same stance object-limits.ts takes, for the same reason. The
+ * house process holds the account-wide credential, so an out-of-memory kill there
+ * takes the brand server down, and on the target hardware that is a hard freeze
+ * that emits nothing.
+ *
+ * Deliberately dependency-free, like object-limits.ts: the ui route reads these
+ * through the barrel, and nothing here needs the rest of the lib.
+ */
+/**
+ * Cloudflare's documented maximum SQL statement length.
+ *
+ * "Maximum SQL statement length | 100,000 bytes (100 KB)"
+ * https://developers.cloudflare.com/d1/platform/limits/
+ *
+ * Recorded because it is what governs a legitimate `sql`, and because
+ * D1_QUERY_MAX_BODY_BYTES below is only knowable as safe by way of it.
+ *
+ * A second, independent bound applies to the same string on the way out, and is
+ * recorded here so nobody rediscovers it as a bug: cf-exec's d1Query shells
+ * `execFile("npx", ["wrangler", "d1", "execute", ..., "--command", sql])`, so the
+ * decoded statement travels as a single argv element. Linux caps one such element
+ * at MAX_ARG_STRLEN = 131,072 bytes and fails execve with E2BIG above it
+ * (https://man7.org/linux/man-pages/man2/execve.2.html). That is a property of the
+ * spawn path, not of D1. It does not bind first: 100,000 < 131,072, so a statement
+ * D1 would accept always fits the spawn.
+ */
+export declare const D1_MAX_SQL_STATEMENT_BYTES = 100000;
+/**
+ * The worst-case expansion of a byte when it is serialized into a JSON string.
+ *
+ * A single ASCII control byte becomes the six characters \uXXXX. Multi-byte
+ * characters are cheaper per byte — a 3-byte UTF-8 character also becomes six
+ * characters (2x), and a non-BMP character becomes a 12-character surrogate pair
+ * for 4 bytes (3x) — so 6 is a true ceiling over bytes, reached by ASCII.
+ *
+ * This is why a body limit is not simply the statement limit: the cap bounds the
+ * wire body, and escaping moves the two apart.
+ */
+export declare const JSON_STRING_WORST_CASE_EXPANSION = 6;
+/**
+ * The largest JSON body /d1/create or /r2/create can legitimately carry: a single
+ * resource name and JSON punctuation. No payload term, and no key term.
+ *
+ * Sized on headroom rather than a tight derivation, because only one of the two
+ * names it bounds has a documented hard limit:
+ *
+ * - R2 bucket name: 3-63 characters, lowercase letters, digits and hyphens.
+ *   https://developers.cloudflare.com/r2/buckets/create-buckets/
+ * - D1 database name: no documented limit. The API reference states only
+ *   `name: string`, "D1 database name" — no maxLength, pattern or charset.
+ *   https://developers.cloudflare.com/api/resources/d1/subresources/database/
+ *   The get-started guide gives guidance, not a limit: names "should use a
+ *   combination of ASCII characters, shorter than 32 characters".
+ *
+ * So a real body is under ~100 bytes and 64 KiB clears it by roughly 650x, while
+ * sitting ~2,100x below put's body limit: far above anything a real caller sends,
+ * far below anything that threatens house memory. Nothing here depends on either
+ * figure being exact. An undocumented D1 name limit cannot plausibly approach 64
+ * KiB, and a request body is the wrong place to discover that it had.
+ *
+ * Deliberately not R2_OBJECT_ENVELOPE_MAX_BODY_BYTES, which happens to hold the
+ * same value. That constant is governed by R2's object key limit; this one is not,
+ * and the two must be free to drift. Couple what is one fact; separate what merely
+ * matches today.
+ */
+export declare const STORAGE_RESOURCE_NAME_MAX_BODY_BYTES: number;
+/**
+ * The largest JSON body /d1/query can legitimately carry: a database name and a
+ * SQL statement.
+ *
+ * The envelope reasoning behind the object routes' bound does not govern this. A
+ * large but entirely legal migration or batch statement is not a 1,024-byte object
+ * key, so applying that constant here would reject correct queries.
+ *
+ * The bound is on the wire body, not the decoded statement, and JSON escaping moves
+ * those apart. The largest legal statement (D1_MAX_SQL_STATEMENT_BYTES) can present
+ * a wire body of up to
+ *
+ *   JSON_STRING_WORST_CASE_EXPANSION * 100,000 + 65,536 = 665,536 bytes
+ *
+ * so capping at 100,000 would 413 a statement D1 would have accepted. 1 MiB clears
+ * the worst case by about 1.6x and sits ~133x below put's body limit.
+ *
+ * It is a flat number rather than that expression, for legibility at the call site.
+ * The arithmetic is not decoration: it is the only thing that makes 1 MiB knowable
+ * as safe, so resource-limits.test.ts asserts the relationship. If D1 ever raises
+ * its statement limit above 163,840 bytes, that test fails rather than this route
+ * quietly beginning to refuse legal SQL.
+ */
+export declare const D1_QUERY_MAX_BODY_BYTES: number;
+//# sourceMappingURL=resource-limits.d.ts.map

package/payload/platform/lib/storage-broker/dist/resource-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-limits.d.ts","sourceRoot":"","sources":["../src/resource-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAElD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oCAAoC,QAAY,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,uBAAuB,QAAc,CAAC"}