@smart-data-engines/sde 0.1.0-dev.0

package/dist/hashing.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Hashed identifiers - a port of section 2a of the format contract, not of the Python file.
+ *
+ * The distinction is the same one `canonical.ts` makes, and it earns its keep the same way. What is
+ * being pinned here is not the HMAC; anything computes an HMAC. It is the *message*: NFC-normalised
+ * parts, joined with U+0000, prefix outside, fields hashed together with their entity. Every one of
+ * those four is invisible in a test whose identifiers are ASCII, and three of them are things a
+ * translator would plausibly get wrong while every existing test stayed green.
+ *
+ * The NFC rule is here because the reference implementation got it wrong first. Section 1 normalises
+ * before emitting bytes, which is why two libraries that declare an identifier in different normal
+ * forms compute the same `model_version`. Hashing the raw name threw that away: two digests, two
+ * versions, and a placement map issued for the Python service that this one would refuse. It passed
+ * every test in both languages, because every other identifier in every other test is ASCII, where
+ * the two forms coincide. `conformance/vectors/hashing/002-normalisation` exists so that neither
+ * implementation can lose it again.
+ *
+ * Two JavaScript-specific notes, and the first one is a correctness bug this file had.
+ *
+ * **Every name-keyed object here is `Object.create(null)`, never `{}`.** A plain object inherits
+ * `Object.prototype`, so a client entity or field named `__proto__` does not get an own property:
+ * assigning a string to `__proto__` is silently a no-op, and reading it back yields the prototype
+ * object rather than a digest. Worse, `relationNames[source] ?? {}` would then hand back
+ * `Object.prototype` itself - truthy, so the `??` does not fire - and the next line writes a property
+ * onto it, polluting every object in the process. Python's `dict` has none of this, so the same model
+ * hashed in both languages produced a correct result in one and a corrupt one in the other: the byte
+ * contract's failure mode arriving through the container rather than the encoder.
+ * `conformance/vectors/hashing/003-reserved-object-keys` exists so neither implementation can lose it,
+ * and `constructor` is in that vector alongside `__proto__` because it is a name a real model might
+ * plausibly use.
+ *
+ * The second note is about ordering. It matters twice below - members within an atomicity group,
+ * and the groups among themselves - and both use `compareCodePoints` rather than the default
+ * comparator. Hashed names are `e_` plus hex, so UTF-16 and code point order agree on them today and
+ * the default sort would pass every vector. It is still wrong, for the same reason it is wrong in
+ * `canonical.ts`: the day a prefix or a digest alphabet changes, a silent divergence is worse than a
+ * loud one.
+ */
+import type { LogicalModel } from './model.js';
+/**
+ * Twelve hex characters, i.e. 48 bits. Half a `model_version`, because these end up in table names.
+ * A collision would merge two entities into one, so it is checked and refused rather than assumed.
+ */
+export declare const DIGEST_CHARS = 12;
+/**
+ * The translation between what the client wrote and what we see.
+ *
+ * Held only in the client's process. The library needs it because the placement map is keyed by
+ * hashed names while the application still says `session.get('User', ...)`, so every lookup crosses
+ * this boundary and this is the only thing that does.
+ */
+export interface NameMap {
+    readonly entities: Readonly<Record<string, string>>;
+    readonly fields: Readonly<Record<string, Readonly<Record<string, string>>>>;
+    readonly relations: Readonly<Record<string, Readonly<Record<string, string>>>>;
+}
+/**
+ * Return an equivalent model with every identifier replaced by a keyed digest.
+ *
+ * What is deliberately not hashed: `residency`, because a jurisdiction is not an identifier and a
+ * hashed placement constraint is an unenforceable one; the cost ceiling, because it is a number and
+ * a currency; and types, keys and nullability, because the physical schema is derived from them and
+ * none of them is a name.
+ */
+export declare function hashIdentifiers(model: LogicalModel, salt: Buffer): {
+    readonly model: LogicalModel;
+    readonly names: NameMap;
+};

package/dist/hashing.js

@@ -0,0 +1,146 @@
+/**
+ * Hashed identifiers - a port of section 2a of the format contract, not of the Python file.
+ *
+ * The distinction is the same one `canonical.ts` makes, and it earns its keep the same way. What is
+ * being pinned here is not the HMAC; anything computes an HMAC. It is the *message*: NFC-normalised
+ * parts, joined with U+0000, prefix outside, fields hashed together with their entity. Every one of
+ * those four is invisible in a test whose identifiers are ASCII, and three of them are things a
+ * translator would plausibly get wrong while every existing test stayed green.
+ *
+ * The NFC rule is here because the reference implementation got it wrong first. Section 1 normalises
+ * before emitting bytes, which is why two libraries that declare an identifier in different normal
+ * forms compute the same `model_version`. Hashing the raw name threw that away: two digests, two
+ * versions, and a placement map issued for the Python service that this one would refuse. It passed
+ * every test in both languages, because every other identifier in every other test is ASCII, where
+ * the two forms coincide. `conformance/vectors/hashing/002-normalisation` exists so that neither
+ * implementation can lose it again.
+ *
+ * Two JavaScript-specific notes, and the first one is a correctness bug this file had.
+ *
+ * **Every name-keyed object here is `Object.create(null)`, never `{}`.** A plain object inherits
+ * `Object.prototype`, so a client entity or field named `__proto__` does not get an own property:
+ * assigning a string to `__proto__` is silently a no-op, and reading it back yields the prototype
+ * object rather than a digest. Worse, `relationNames[source] ?? {}` would then hand back
+ * `Object.prototype` itself - truthy, so the `??` does not fire - and the next line writes a property
+ * onto it, polluting every object in the process. Python's `dict` has none of this, so the same model
+ * hashed in both languages produced a correct result in one and a corrupt one in the other: the byte
+ * contract's failure mode arriving through the container rather than the encoder.
+ * `conformance/vectors/hashing/003-reserved-object-keys` exists so neither implementation can lose it,
+ * and `constructor` is in that vector alongside `__proto__` because it is a name a real model might
+ * plausibly use.
+ *
+ * The second note is about ordering. It matters twice below - members within an atomicity group,
+ * and the groups among themselves - and both use `compareCodePoints` rather than the default
+ * comparator. Hashed names are `e_` plus hex, so UTF-16 and code point order agree on them today and
+ * the default sort would pass every vector. It is still wrong, for the same reason it is wrong in
+ * `canonical.ts`: the day a prefix or a digest alphabet changes, a silent divergence is worse than a
+ * loud one.
+ */
+import { createHmac } from 'node:crypto';
+import { compareCodePoints } from './canonical.js';
+import { DeclarationError } from './errors.js';
+import { assemble } from './model.js';
+/**
+ * Twelve hex characters, i.e. 48 bits. Half a `model_version`, because these end up in table names.
+ * A collision would merge two entities into one, so it is checked and refused rather than assumed.
+ */
+export const DIGEST_CHARS = 12;
+const ENTITY_PREFIX = 'e_';
+const FIELD_PREFIX = 'f_';
+const RELATION_PREFIX = 'r_';
+/**
+ * U+0000, which cannot occur in an identifier - so the join is unambiguous. Written as a code point
+ * rather than an escape in a string literal, because a raw NUL in a source file survives a git diff,
+ * a code review and a copy-paste in ways nobody intends.
+ */
+const SEPARATOR = String.fromCodePoint(0);
+/** The shortest salt this library will accept. A guessable salt hides nothing. */
+const MIN_SALT_BYTES = 16;
+function digest(salt, prefix, parts) {
+    const message = parts.map((part) => part.normalize('NFC')).join(SEPARATOR);
+    const hex = createHmac('sha256', salt).update(message, 'utf8').digest('hex');
+    return prefix + hex.slice(0, DIGEST_CHARS);
+}
+/** Lexicographic over two already-sorted member lists, by code point. */
+function compareGroups(left, right) {
+    for (let index = 0; index < Math.min(left.length, right.length); index += 1) {
+        const order = compareCodePoints(left[index], right[index]);
+        if (order !== 0)
+            return order;
+    }
+    return left.length - right.length;
+}
+/**
+ * Return an equivalent model with every identifier replaced by a keyed digest.
+ *
+ * What is deliberately not hashed: `residency`, because a jurisdiction is not an identifier and a
+ * hashed placement constraint is an unenforceable one; the cost ceiling, because it is a number and
+ * a currency; and types, keys and nullability, because the physical schema is derived from them and
+ * none of them is a name.
+ */
+export function hashIdentifiers(model, salt) {
+    if (salt.length < MIN_SALT_BYTES) {
+        throw new DeclarationError(`the salt must be at least ${MIN_SALT_BYTES} bytes`);
+    }
+    // Object.create(null), not {}, and this is a correctness rule rather than a style one - see the
+    // note about reserved keys at the top of this file.
+    const entityNames = Object.create(null);
+    const seen = new Map();
+    for (const spec of model.entities) {
+        const hashed = digest(salt, ENTITY_PREFIX, [spec.name]);
+        const clash = seen.get(hashed);
+        if (clash !== undefined) {
+            throw new DeclarationError(`${spec.name} and ${clash} hash to the same name. Refused rather than merged: a model ` +
+                'with one entity where there were two would place both in one engine and write both ' +
+                'into one table. Change the salt.');
+        }
+        seen.set(hashed, spec.name);
+        entityNames[spec.name] = hashed;
+    }
+    const fieldNames = Object.create(null);
+    const relationNames = Object.create(null);
+    const entities = [];
+    for (const spec of model.entities) {
+        const mapping = Object.create(null);
+        for (const field of spec.fields) {
+            mapping[field.name] = digest(salt, FIELD_PREFIX, [spec.name, field.name]);
+        }
+        if (new Set(Object.values(mapping)).size !== Object.keys(mapping).length) {
+            throw new DeclarationError(`two fields of ${spec.name} hash to the same name. Refused rather than merged. ` +
+                'Change the salt.');
+        }
+        fieldNames[spec.name] = mapping;
+        entities.push({
+            name: entityNames[spec.name],
+            fields: spec.fields.map((field) => ({
+                name: mapping[field.name],
+                type: field.type,
+                nullable: field.nullable,
+            })),
+            key: spec.key.map((field) => mapping[field]),
+            pii: spec.pii.map((field) => mapping[field]),
+            residency: spec.residency,
+        });
+    }
+    const relations = [];
+    for (const relation of model.relations) {
+        const hashed = digest(salt, RELATION_PREFIX, [relation.source, relation.name]);
+        const bucket = relationNames[relation.source] ?? Object.create(null);
+        bucket[relation.name] = hashed;
+        relationNames[relation.source] = bucket;
+        relations.push({
+            name: hashed,
+            source: entityNames[relation.source],
+            target: entityNames[relation.target],
+        });
+    }
+    const atomic = model.atomic
+        .map((group) => group.map((member) => entityNames[member]).sort(compareCodePoints))
+        .sort(compareGroups);
+    const costCeiling = model.costCeiling;
+    return {
+        model: assemble(entities, relations, atomic, costCeiling),
+        names: { entities: entityNames, fields: fieldNames, relations: relationNames },
+    };
+}
+//# sourceMappingURL=hashing.js.map

package/dist/hashing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashing.js","sourceRoot":"","sources":["../src/hashing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAA;AAE9B,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B;;;;GAIG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;AAEzC,kFAAkF;AAClF,MAAM,cAAc,GAAG,EAAE,CAAA;AAezB,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc,EAAE,KAAwB;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5E,OAAO,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;AAC5C,CAAC;AAED,yEAAyE;AACzE,SAAS,aAAa,CAAC,IAAuB,EAAE,KAAwB;IACtE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAW,EAAE,KAAK,CAAC,KAAK,CAAW,CAAC,CAAA;QAC9E,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAmB,EACnB,IAAY;IAEZ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,cAAc,QAAQ,CAAC,CAAA;IACjF,CAAC;IAED,gGAAgG;IAChG,oDAAoD;IACpD,MAAM,WAAW,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAA;IACzF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CACxB,GAAG,IAAI,CAAC,IAAI,QAAQ,KAAK,8DAA8D;gBACrF,qFAAqF;gBACrF,kCAAkC,CACrC,CAAA;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;IACjC,CAAC;IAED,MAAM,UAAU,GACd,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2C,CAAA;IAC/D,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2C,CAAA;IAE/D,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAA;QACrF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;YACzE,MAAM,IAAI,gBAAgB,CACxB,iBAAiB,IAAI,CAAC,IAAI,sDAAsD;gBAC9E,kBAAkB,CACrB,CAAA;QACH,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAA;QAE/B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAW;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAW;gBACnC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAW,CAAC;YACtD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAW,CAAC;YACtD,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,SAAS,GAAmB,EAAE,CAAA;IACpC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9E,MAAM,MAAM,GACV,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAA;QACnF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;QAC9B,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAA;QACvC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAW;YAC9C,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAW;SAC/C,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;SAC5F,IAAI,CAAC,aAAa,CAAC,CAAA;IAEtB,MAAM,WAAW,GAAuB,KAAK,CAAC,WAAW,CAAA;IACzD,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC;QACzD,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE;KAC/E,CAAA;AACH,CAAC"}

package/dist/in-place-index.d.ts

@@ -0,0 +1,43 @@
+import type { LogicalModel } from './model.js';
+import { type LoadOptions, type PlacementMap } from './placement.js';
+/** Indexes added to one group's source, built on the tables in force; no copy, no cutover. */
+export declare const INDEX_PROTOCOL = 1;
+/** Indexes added to and removed from one group's source, in place; at least one removed. */
+export declare const INDEX_CHANGE_PROTOCOL = 2;
+/** A day. The budget bounds a build on a server that stopped answering; nothing is paused while
+ * it runs, so it is not a pause budget and it is deliberately far longer than a cutover's. */
+export declare const MAX_BUILD_BUDGET_MS = 86400000;
+type PublicKeys = NonNullable<LoadOptions['publicKey']>;
+type Index = Readonly<Record<string, unknown>>;
+/** The physical name of the `position`-th index an in-place build adds (one-based). */
+export declare function indexBuildName(indexId: string, position: number): string;
+export declare class IndexPlan {
+    readonly indexId: string;
+    readonly projectId: string;
+    readonly group: string;
+    readonly current: PlacementMap;
+    readonly prepared: PlacementMap;
+    readonly buildBudgetMs: number;
+    /** The new index definitions, in position order, exactly as the prepared map carries them. */
+    readonly added: readonly Index[];
+    readonly verifiedWith: string | null;
+    /** Protocol 2: the definitions in force the next map drops, in their order in force. */
+    readonly removed: readonly Index[];
+    constructor(indexId: string, projectId: string, group: string, current: PlacementMap, prepared: PlacementMap, buildBudgetMs: number, 
+    /** The new index definitions, in position order, exactly as the prepared map carries them. */
+    added: readonly Index[], verifiedWith: string | null, 
+    /** Protocol 2: the definitions in force the next map drops, in their order in force. */
+    removed?: readonly Index[]);
+    private loaded;
+    get fingerprint(): string | undefined;
+    get protocol(): number;
+    asRecord(): Record<string, unknown>;
+    preparedPayload(): Uint8Array;
+    checkCurrent(current: PlacementMap): void;
+}
+export declare function loadIndexPlan(raw: unknown, options: {
+    model: LogicalModel;
+    projectId: string;
+    publicKey: PublicKeys;
+}): IndexPlan;
+export {};

package/dist/in-place-index.js

@@ -0,0 +1,272 @@
+/**
+ * Signed authorization to build indexes on the tables in force, in place.
+ *
+ * A design that only adds indexes to a group's source used to run as a relayout: a fresh copy with
+ * the index, then a cutover that copies and compares every row while the source's writes are
+ * frozen - a pause linear in the table. Building the index on the live table moves no row and
+ * pauses no write. This authorization binds that build: the exact map in force and the next map,
+ * which differs from it only by indexes added to one group's source. The Python library executes
+ * it; this loader holds both libraries to one reading of the packet.
+ *
+ * Protocol 2 also removes indexes the map in force declares: the removed ones leave the next map,
+ * the others keep their order, and the new ones follow. The operator removes them after its decision.
+ */
+import { createHash } from 'node:crypto';
+import { CanonicalError, canonicalBytes, compareCodePoints } from './canonical.js';
+import { MapError, MigrationRefused } from './errors.js';
+import { checkMapProject, GENERATIONS_SINCE } from './generation.js';
+import { fingerprintOf, loadMap, verifyMapSignature } from './placement.js';
+/** Indexes added to one group's source, built on the tables in force; no copy, no cutover. */
+export const INDEX_PROTOCOL = 1;
+/** Indexes added to and removed from one group's source, in place; at least one removed. */
+export const INDEX_CHANGE_PROTOCOL = 2;
+/** A day. The budget bounds a build on a server that stopped answering; nothing is paused while
+ * it runs, so it is not a pause budget and it is deliberately far longer than a cutover's. */
+export const MAX_BUILD_BUDGET_MS = 86_400_000;
+const FIELDS = ['kind', 'protocol', 'index_id', 'project_id', 'group', 'current', 'prepared', 'build_budget_ms', 'signature']
+    .sort(compareCodePoints);
+const provenance = new WeakMap();
+function record(value, name) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new MigrationRefused(`index build ${name} must be an object`);
+    }
+    return value;
+}
+function hex(value, width, name) {
+    if (typeof value !== 'string' || !new RegExp(`^[0-9a-f]{${width}}$`).test(value)) {
+        throw new MigrationRefused(`index build ${name} must be ${width} lowercase hexadecimal digits`);
+    }
+    return value;
+}
+function equal(left, right) {
+    return canonicalBytes(left).equals(canonicalBytes(right));
+}
+function sortedKeys(value) {
+    return Object.keys(value).sort(compareCodePoints);
+}
+function signature(document) {
+    const value = record(document['signature'], 'signature');
+    const names = sortedKeys(value);
+    if (!equal(names, ['alg', 'value']) && !equal(names, ['alg', 'key_id', 'value'])) {
+        throw new MigrationRefused('index build signatures have missing or unknown fields');
+    }
+    const malformed = 'index build signatures must use ed25519 and canonical base64';
+    if (value['alg'] !== 'ed25519' || typeof value['value'] !== 'string')
+        throw new MigrationRefused(malformed);
+    const decoded = Buffer.from(value['value'], 'base64');
+    if (decoded.length !== 64 || decoded.toString('base64') !== value['value'])
+        throw new MigrationRefused(malformed);
+    if ('key_id' in value && typeof value['key_id'] !== 'string') {
+        throw new MigrationRefused('index build signature key_id must be a string');
+    }
+}
+function except(value, keys) {
+    return Object.fromEntries(Object.entries(value).filter(([name]) => !keys.includes(name)));
+}
+function withoutIndexes(material) {
+    return { ...material, layout: except(record(material['layout'], 'layout'), ['indexes']) };
+}
+function indexesOf(material) {
+    const value = record(material['layout'], 'layout')['indexes'];
+    return Array.isArray(value) ? value : [];
+}
+/** Every table and index name any layout of a map document uses. */
+function names(document) {
+    const found = new Set();
+    for (const rawGroup of Object.values(record(document['groups'], 'groups'))) {
+        const value = record(rawGroup, 'group');
+        const copies = Array.isArray(value['derived']) ? value['derived'] : [];
+        for (const material of [value['source'], ...copies]) {
+            const layout = record(record(material, 'materialization')['layout'], 'layout');
+            for (const table of Object.values(record(layout['tables'] ?? {}, 'tables')))
+                found.add(String(table));
+            for (const index of indexesOf(record(material, 'materialization')))
+                found.add(String(record(index, 'index')['name']));
+        }
+    }
+    return found;
+}
+/** The physical name of the `position`-th index an in-place build adds (one-based). */
+export function indexBuildName(indexId, position) {
+    hex(indexId, 32, 'index_id');
+    if (!Number.isInteger(position) || position < 1 || position > 999999) {
+        throw new MigrationRefused('index build position must be an integer from 1 through 999999');
+    }
+    return `sde_i_${indexId}_${String(position).padStart(6, '0')}`;
+}
+export class IndexPlan {
+    indexId;
+    projectId;
+    group;
+    current;
+    prepared;
+    buildBudgetMs;
+    added;
+    verifiedWith;
+    removed;
+    constructor(indexId, projectId, group, current, prepared, buildBudgetMs, 
+    /** The new index definitions, in position order, exactly as the prepared map carries them. */
+    added, verifiedWith, 
+    /** Protocol 2: the definitions in force the next map drops, in their order in force. */
+    removed = []) {
+        this.indexId = indexId;
+        this.projectId = projectId;
+        this.group = group;
+        this.current = current;
+        this.prepared = prepared;
+        this.buildBudgetMs = buildBudgetMs;
+        this.added = added;
+        this.verifiedWith = verifiedWith;
+        this.removed = removed;
+        Object.freeze(this);
+    }
+    loaded() {
+        const saved = provenance.get(this);
+        if (saved === undefined)
+            throw new MigrationRefused('an index build requires an immutable loaded authorization');
+        return saved;
+    }
+    get fingerprint() { return provenance.get(this)?.fingerprint; }
+    get protocol() { return this.asRecord()['protocol']; }
+    asRecord() { return JSON.parse(this.loaded().document); }
+    preparedPayload() { return canonicalBytes(this.asRecord()['prepared']); }
+    checkCurrent(current) {
+        this.loaded();
+        checkMapProject(current, this.projectId);
+        if (!current.signed || fingerprintOf(current) !== fingerprintOf(this.current)) {
+            throw new MigrationRefused('index build authorization does not name the signed current map');
+        }
+    }
+}
+function load(raw, model, projectId, publicKey) {
+    const body = record(structuredClone(raw), 'authorization');
+    if (!equal(sortedKeys(body), FIELDS))
+        throw new MigrationRefused('index build authorization has missing or unknown fields');
+    if (typeof body['protocol'] !== 'number' || ![INDEX_PROTOCOL, INDEX_CHANGE_PROTOCOL].includes(body['protocol']) ||
+        body['kind'] !== 'sde-index') {
+        throw new MigrationRefused('unsupported index build authorization kind or protocol');
+    }
+    const protocol = body['protocol'];
+    const identity = hex(body['index_id'], 32, 'index_id'), local = hex(body['project_id'], 32, 'project_id');
+    if (local !== projectId)
+        throw new MigrationRefused('index build authorization belongs to another local project');
+    const group = body['group'];
+    if (typeof group !== 'string' || group.length === 0)
+        throw new MigrationRefused('index build group must be a nonempty string');
+    const budget = body['build_budget_ms'];
+    if (typeof budget !== 'number' || !Number.isInteger(budget) || budget < 1 || budget > MAX_BUILD_BUDGET_MS) {
+        throw new MigrationRefused(`index build budget must be an integer from 1 through ${MAX_BUILD_BUDGET_MS} ms`);
+    }
+    signature(body);
+    const verified = verifyMapSignature(body, publicKey);
+    const maps = [];
+    for (const name of ['current', 'prepared']) {
+        const document = record(body[name], name);
+        signature(document);
+        for (const rawGroup of Object.values(record(document['groups'], 'groups'))) {
+            const value = record(rawGroup, 'group'), copies = value['derived'] === undefined ? [] : value['derived'];
+            if (!Array.isArray(copies))
+                throw new MigrationRefused('index build derived copies must be an array');
+            for (const rawMaterial of [value['source'], ...copies]) {
+                const layout = record(record(rawMaterial, 'materialization')['layout'], 'layout');
+                if (layout['auto'])
+                    throw new MigrationRefused('index build maps need explicit physical layouts');
+            }
+        }
+        const parsed = loadMap(document, { model, publicKey, requireSignature: true });
+        if (parsed.contract < GENERATIONS_SINCE) {
+            throw new MigrationRefused(`index build protocol ${protocol} requires map contract ${GENERATIONS_SINCE} or later`);
+        }
+        checkMapProject(parsed, projectId);
+        for (const placed of Object.values(parsed.groups)) {
+            for (const material of [placed.source, ...placed.derived]) {
+                if (Object.keys(material.layout.tables).length === 0 || Object.keys(material.layout.columns).length === 0) {
+                    throw new MigrationRefused('index build maps need explicit physical layouts');
+                }
+            }
+        }
+        maps.push(parsed);
+    }
+    const current = maps[0], prepared = maps[1];
+    // The prepared map may raise the contract, because an index method first appears here - a BRIN
+    // index under a contract-4 current map. It may not lower it: a lower number would tell an older
+    // library it may ignore keys that the current map already relies on.
+    if (prepared.contract < current.contract)
+        throw new MigrationRefused('an index build cannot lower the placement map contract');
+    if (current.mapVersion >= prepared.mapVersion)
+        throw new MigrationRefused('an index build must allocate a newer prepared map');
+    if (!(group in current.groups) || !equal(Object.keys(current.groups).sort(compareCodePoints), Object.keys(prepared.groups).sort(compareCodePoints))) {
+        throw new MigrationRefused('an index build cannot add or remove colocation groups');
+    }
+    const old = current.groups[group], next = prepared.groups[group];
+    if (old.derived.length !== 0 || old.alsoWrite.length !== 0 || next.derived.length !== 0 || next.alsoWrite.length !== 0) {
+        throw new MigrationRefused('an index build begins and ends with a source-only group');
+    }
+    // Nothing is fenced: the tables stay and every running process keeps writing to them.
+    if (next.writeEpoch !== old.writeEpoch)
+        throw new MigrationRefused("an index build keeps the source's write generation");
+    const currentRaw = record(body['current'], 'current'), preparedRaw = record(body['prepared'], 'prepared');
+    const oldGroups = record(currentRaw['groups'], 'groups'), newGroups = record(preparedRaw['groups'], 'groups');
+    const oldGroup = record(oldGroups[group], 'group'), newGroup = record(newGroups[group], 'group');
+    if (!equal(sortedKeys(oldGroup), ['source', 'write_epoch']) || !equal(sortedKeys(newGroup), ['source', 'write_epoch'])) {
+        throw new MigrationRefused('an index build group is a source and its write generation only');
+    }
+    const oldSource = record(oldGroup['source'], 'source'), newSource = record(newGroup['source'], 'source');
+    if (!equal(withoutIndexes(oldSource), withoutIndexes(newSource))) {
+        throw new MigrationRefused('an index build changes nothing about the source but its indexes; a new key order, ' +
+            'partition, table or engine is a relayout or a move');
+    }
+    const inForce = indexesOf(oldSource), after = indexesOf(newSource);
+    const nameOf = (index) => String(record(index, 'index')['name']);
+    let kept = inForce, removed = [];
+    if (protocol === INDEX_PROTOCOL) {
+        if (after.length <= kept.length || !equal(after.slice(0, kept.length), kept)) {
+            throw new MigrationRefused('an index build keeps every index in force, in order, and adds at least one after them');
+        }
+    }
+    else {
+        const remaining = new Set(after.map(nameOf));
+        kept = inForce.filter(index => remaining.has(nameOf(index)));
+        removed = inForce.filter(index => !remaining.has(nameOf(index)));
+        if (removed.length === 0)
+            throw new MigrationRefused('index build protocol 2 removes at least one index in force');
+        if (!equal(after.slice(0, kept.length), kept)) {
+            throw new MigrationRefused('an index change keeps the other indexes in force, in order, before the new ones');
+        }
+    }
+    const added = after.slice(kept.length);
+    added.forEach((index, offset) => {
+        if (record(index, 'index')['name'] !== indexBuildName(identity, offset + 1)) {
+            throw new MigrationRefused('new indexes need fresh names bound to the index build id and their position');
+        }
+    });
+    const used = names(currentRaw);
+    if (added.some(index => used.has(String(record(index, 'index')['name'])))) {
+        throw new MigrationRefused('an index build cannot reuse a name the current map uses');
+    }
+    const ignored = ['signature', 'map_version', 'groups', 'contract'];
+    if (!equal(except(currentRaw, ignored), except(preparedRaw, ignored)) || !equal(current.routing, prepared.routing)) {
+        throw new MigrationRefused('an index build cannot change routing or other map attributes');
+    }
+    for (const other of Object.keys(current.groups)) {
+        if (other !== group && !equal(oldGroups[other], newGroups[other]))
+            throw new MigrationRefused('an index build cannot change an unaffected group');
+    }
+    // From the loaded map, which freezes nested structures, not from the caller's objects.
+    const gone = new Set(removed.map(nameOf));
+    const plan = new IndexPlan(identity, local, group, current, prepared, budget, next.source.layout.indexes.slice(kept.length), verified, old.source.layout.indexes.filter(index => gone.has(String(index['name']))));
+    provenance.set(plan, { document: canonicalBytes(body).toString('utf8'),
+        fingerprint: createHash('sha256').update(canonicalBytes(except(body, ['signature']))).digest('hex') });
+    return plan;
+}
+export function loadIndexPlan(raw, options) {
+    try {
+        return load(raw, options.model, options.projectId, options.publicKey);
+    }
+    catch (error) {
+        if (error instanceof MapError || error instanceof CanonicalError)
+            throw new MigrationRefused(`index build authorization refused: ${error.message}`);
+        throw error;
+    }
+}
+//# sourceMappingURL=in-place-index.js.map

package/dist/in-place-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-place-index.js","sourceRoot":"","sources":["../src/in-place-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEpE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAuC,MAAM,gBAAgB,CAAA;AAEhH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAA;AAC/B,4FAA4F;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAA;AACtC;8FAC8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAA;AAC7C,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;KAC1H,IAAI,CAAC,iBAAiB,CAAC,CAAA;AAG1B,MAAM,UAAU,GAAG,IAAI,OAAO,EAAwD,CAAA;AAEtF,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CAAC,eAAe,IAAI,oBAAoB,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AACD,SAAS,GAAG,CAAC,KAAc,EAAE,KAAa,EAAE,IAAY;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,gBAAgB,CAAC,eAAe,IAAI,YAAY,KAAK,+BAA+B,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,KAAK,CAAC,IAAa,EAAE,KAAc;IAC1C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;AAC3D,CAAC;AACD,SAAS,UAAU,CAAC,KAA8B;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;AACnD,CAAC;AACD,SAAS,SAAS,CAAC,QAAiC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,gBAAgB,CAAC,uDAAuD,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,SAAS,GAAG,8DAA8D,CAAA;IAChF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC3G,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAA;IACjH,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,gBAAgB,CAAC,+CAA+C,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AACD,SAAS,MAAM,CAAC,KAA8B,EAAE,IAAuB;IACrE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC3F,CAAC;AACD,SAAS,cAAc,CAAC,QAAiC;IACvD,OAAO,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAA;AAC3F,CAAC;AACD,SAAS,SAAS,CAAC,QAAiC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAA;IAC7D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1C,CAAC;AACD,oEAAoE;AACpE,SAAS,KAAK,CAAC,QAAiC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACtE,KAAK,MAAM,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;YAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YACrG,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACvH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAgB;IAC9D,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,gBAAgB,CAAC,+DAA+D,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,SAAS,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,MAAM,OAAO,SAAS;IACC;IAA0B;IAA4B;IAChE;IAAgC;IAAiC;IAEjE;IAAkC;IAElC;IALX,YAAqB,OAAe,EAAW,SAAiB,EAAW,KAAa,EAC7E,OAAqB,EAAW,QAAsB,EAAW,aAAqB;IAC/F,8FAA8F;IACrF,KAAuB,EAAW,YAA2B;IACtE,wFAAwF;IAC/E,UAA4B,EAAE;QALpB,YAAO,GAAP,OAAO,CAAQ;QAAW,cAAS,GAAT,SAAS,CAAQ;QAAW,UAAK,GAAL,KAAK,CAAQ;QAC7E,YAAO,GAAP,OAAO,CAAc;QAAW,aAAQ,GAAR,QAAQ,CAAc;QAAW,kBAAa,GAAb,aAAa,CAAQ;QAEtF,UAAK,GAAL,KAAK,CAAkB;QAAW,iBAAY,GAAZ,YAAY,CAAe;QAE7D,YAAO,GAAP,OAAO,CAAuB;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IACO,MAAM;QACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,2DAA2D,CAAC,CAAA;QAChH,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,WAAW,KAAyB,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA,CAAC,CAAC;IAClF,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAW,CAAA,CAAC,CAAC;IACvE,QAAQ,KAA8B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAA4B,CAAA,CAAC,CAAC;IAC5G,eAAe,KAAiB,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA,CAAC,CAAC;IACpF,YAAY,CAAC,OAAqB;QAChC,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,gBAAgB,CAAC,gEAAgE,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;CACF;AAED,SAAS,IAAI,CAAC,GAAY,EAAE,KAAmB,EAAE,SAAiB,EAAE,SAAqB;IACvF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,CAAC,CAAA;IAC3H,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,wDAAwD,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,CAAA;IACzG,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,4DAA4D,CAAC,CAAA;IACjH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAA;IAC9H,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC1G,MAAM,IAAI,gBAAgB,CAAC,wDAAwD,mBAAmB,KAAK,CAAC,CAAA;IAC9G,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAA;IACf,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACpD,MAAM,IAAI,GAAmB,EAAE,CAAA;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;QACzC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAA;YACrG,KAAK,MAAM,WAAW,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;gBACjF,IAAI,MAAM,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,iDAAiD,CAAC,CAAA;YACnG,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9E,IAAI,MAAM,CAAC,QAAQ,GAAG,iBAAiB,EAAE,CAAC;YACxC,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,QAAQ,0BAA0B,iBAAiB,WAAW,CAAC,CAAA;QACpH,CAAC;QACD,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAClC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1G,MAAM,IAAI,gBAAgB,CAAC,iDAAiD,CAAC,CAAA;gBAC/E,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;IAC7C,+FAA+F;IAC/F,gGAAgG;IAChG,qEAAqE;IACrE,IAAI,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,gBAAgB,CAAC,wDAAwD,CAAC,CAAA;IAC9H,IAAI,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;QAAE,MAAM,IAAI,gBAAgB,CAAC,mDAAmD,CAAC,CAAA;IAC9H,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACpJ,MAAM,IAAI,gBAAgB,CAAC,uDAAuD,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAE,EAAE,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAE,CAAA;IAClE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvH,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,CAAC,CAAA;IACvF,CAAC;IACD,sFAAsF;IACtF,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QAAE,MAAM,IAAI,gBAAgB,CAAC,oDAAoD,CAAC,CAAA;IACxH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;IACzG,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC7G,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;IAChG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACvH,MAAM,IAAI,gBAAgB,CAAC,gEAAgE,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;IACxG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CAAC,oFAAoF;YAC7G,oDAAoD,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACzE,IAAI,IAAI,GAAG,OAAO,EAAE,OAAO,GAAc,EAAE,CAAA;IAC3C,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,gBAAgB,CAAC,uFAAuF,CAAC,CAAA;QACrH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,4DAA4D,CAAC,CAAA;QAClH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,gBAAgB,CAAC,iFAAiF,CAAC,CAAA;QAC/G,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,gBAAgB,CAAC,6EAA6E,CAAC,CAAA;QAC3G,CAAC;IACH,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,gBAAgB,CAAC,8DAA8D,CAAC,CAAA;IAC5F,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,kDAAkD,CAAC,CAAA;IACnJ,CAAC;IACD,uFAAuF;IACvF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EACzH,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvF,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpE,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACxG,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,OAA0E;IACpH,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAAC,CAAC;IAC7E,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACnJ,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}