@source-repo/rpc 3.0.0

package/dist/Logging/ILogger.d.ts

@@ -0,0 +1,7 @@
+export type LogLevel = 'Verbose' | 'Debug' | 'Information' | 'Warning' | 'Error' | 'Fatal';
+export interface ILogger {
+    log: (level: LogLevel, messageTemplate: string, properties?: {
+        [key: string]: unknown;
+    }) => void;
+}
+//# sourceMappingURL=ILogger.d.ts.map

package/dist/Logging/ILogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ILogger.d.ts","sourceRoot":"","sources":["../../src/Logging/ILogger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;AAE1F,MAAM,WAAW,OAAO;IACpB,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAA;CACnG"}

package/dist/Logging/ILogger.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ILogger.js.map

package/dist/Logging/ILogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ILogger.js","sourceRoot":"","sources":["../../src/Logging/ILogger.ts"],"names":[],"mappings":""}

package/dist/NodeRpcServer.d.ts

@@ -0,0 +1,55 @@
+import type { Server } from 'http';
+import type { ServerOptions as TlsServerOptions } from 'https';
+import { Transport } from './RPC/Core.js';
+import { MqttTransportOptions } from './Transports/MqttTransport.js';
+import { ConnectServerOptions, RpcServerBase, RpcServerOptions, ServerOptions } from './RpcServer.js';
+/**
+ * The server for a process that can listen.
+ *
+ * This is what `RpcServer` means everywhere except a browser, where the package's `browser` export
+ * condition resolves to RpcServerBase instead. The split is not cosmetic: a page cannot open a
+ * listening socket or speak MQTT, and putting those shapes here means `{ port: 8080 }` in browser
+ * code is a compile error rather than a class that throws when constructed. It also keeps
+ * socket.io's server and the MQTT client out of a browser bundle, because nothing a browser
+ * resolves imports this file at all.
+ */
+/** A socket.io server this class opens and owns. */
+export interface HttpServerOptions extends ServerOptions {
+    port: number;
+    /**
+     * TLS material for this server. Present means HTTPS; absent means plain HTTP.
+     *
+     * ```ts
+     * { port: 8443, tls: { cert: readFileSync('plant.crt'), key: readFileSync('plant.key') } }
+     * ```
+     */
+    tls?: TlsServerOptions;
+    path?: string;
+    /**
+     * @deprecated Refused. `https: true` opened an HTTPS server with no certificate and no key, so
+     * it listened and then failed every handshake. Pass `tls` with the certificate instead, or hand
+     * over a `server` you have configured yourself.
+     */
+    https?: never;
+}
+/** Attach to an http.Server you already have, so a page and its RPC arrive on one port. */
+export interface ExternalServerOptions extends ServerOptions {
+    server: Server;
+    path?: string;
+}
+/** Serve over a broker. */
+export interface MqttServerOptions extends ServerOptions, MqttTransportOptions {
+    brokerurl: string;
+}
+export interface NodeRpcServerOptions extends Omit<RpcServerOptions, 'transports'> {
+    transports: (HttpServerOptions | ExternalServerOptions | ConnectServerOptions | MqttServerOptions | Transport)[];
+}
+export declare class NodeRpcServer extends RpcServerBase {
+    constructor(options?: Partial<NodeRpcServerOptions>);
+    /** A socket.io server on the default port, which is what an unconfigured server has always been. */
+    protected configuredTransports(): {
+        port: number;
+    }[] | (ConnectServerOptions | Transport)[];
+    protected buildTransport(serveroption: unknown): Promise<Transport | undefined>;
+}
+//# sourceMappingURL=NodeRpcServer.d.ts.map

package/dist/NodeRpcServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeRpcServer.d.ts","sourceRoot":"","sources":["../src/NodeRpcServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAA;AAClC,OAAO,KAAK,EAAE,aAAa,IAAI,gBAAgB,EAAE,MAAM,OAAO,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAiB,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEnF,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAGrG;;;;;;;;;GASG;AAEH,oDAAoD;AACpD,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACpD,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,gBAAgB,CAAA;IACtB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;OAIG;IACH,KAAK,CAAC,EAAE,KAAK,CAAA;CAChB;AAED,2FAA2F;AAC3F,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IACxD,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,2BAA2B;AAC3B,MAAM,WAAW,iBAAkB,SAAQ,aAAa,EAAE,oBAAoB;IAC1E,SAAS,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC;IAC9E,UAAU,EAAE,CAAC,iBAAiB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,SAAS,CAAC,EAAE,CAAA;CACnH;AAED,qBAAa,aAAc,SAAQ,aAAa;IAC5C,YAAY,OAAO,GAAE,OAAO,CAAC,oBAAoB,CAAM,EAItD;IAED,oGAAoG;IACpG,UAAmB,oBAAoB;;+CAEtC;IAED,UAAyB,cAAc,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CA+B7F;CACJ"}

package/dist/NodeRpcServer.js

@@ -0,0 +1,46 @@
+import { MqttTransport } from './Transports/MqttTransport.js';
+import { SocketIoServerTransport } from './Transports/SocketIoServerTransport.js';
+import { RpcServerBase } from './RpcServer.js';
+import { defaultWebSocketPort } from './RPC/Rpc.js';
+export class NodeRpcServer extends RpcServerBase {
+    constructor(options = {}) {
+        // The base stores the narrower union; this class only ever adds shapes to it, and
+        // buildTransport below is what actually reads them.
+        super(options);
+    }
+    /** A socket.io server on the default port, which is what an unconfigured server has always been. */
+    configuredTransports() {
+        return this.options.transports.length ? this.options.transports : [{ port: defaultWebSocketPort }];
+    }
+    async buildTransport(serveroption) {
+        const portable = await super.buildTransport(serveroption);
+        if (portable)
+            return portable;
+        if (serveroption.port) {
+            const httpOptions = serveroption;
+            // The type says `never`, which stops it at compile time; this stops it for a caller
+            // configuring the server from JSON, who would otherwise get a listening socket that
+            // fails every handshake.
+            if (serveroption.https)
+                throw new Error(`RpcServer '${this.options.name}': { https: true } is refused because it opened a server with no certificate. Pass tls: { cert, key } instead.`);
+            return new SocketIoServerTransport(this.options.name, undefined, httpOptions.port, httpOptions.tls, [], { path: httpOptions.path }, this.options.authenticate);
+        }
+        if (serveroption.server) {
+            const externalOptions = serveroption;
+            return new SocketIoServerTransport(this.options.name, externalOptions.server, 0, undefined, [], { path: externalOptions.path }, this.options.authenticate);
+        }
+        if (serveroption.brokerurl) {
+            const mqttServerOptions = serveroption;
+            return new MqttTransport(this.options.name, mqttServerOptions.brokerurl, {
+                // A server should not lose requests published while it was restarting, so it keeps
+                // its broker session by default. Clients do not: a late reply is useless to a call
+                // that has already timed out, and every short-lived peer would leave session state
+                // behind on the broker.
+                persistentSession: true,
+                ...mqttServerOptions
+            });
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=NodeRpcServer.js.map

package/dist/NodeRpcServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeRpcServer.js","sourceRoot":"","sources":["../src/NodeRpcServer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAwB,MAAM,+BAA+B,CAAA;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAA;AACjF,OAAO,EAAwB,aAAa,EAAmC,MAAM,gBAAgB,CAAA;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAgDnD,MAAM,OAAO,aAAc,SAAQ,aAAa;IAC5C,YAAY,OAAO,GAAkC,EAAE;QACnD,kFAAkF;QAClF,oDAAoD;QACpD,KAAK,CAAC,OAAoC,CAAC,CAAA;IAC/C,CAAC;IAED,oGAAoG;IACjF,oBAAoB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;IACtG,CAAC;IAEkB,KAAK,CAAC,cAAc,CAAC,YAAqB;QACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;QACzD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAE7B,IAAK,YAAkC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,YAAiC,CAAA;YACrD,oFAAoF;YACpF,oFAAoF;YACpF,yBAAyB;YACzB,IAAK,YAAoC,CAAC,KAAK;gBAC3C,MAAM,IAAI,KAAK,CACX,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,gHAAgH,CAClJ,CAAA;YACL,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAClK,CAAC;QACD,IAAK,YAAsC,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,eAAe,GAAG,YAAqC,CAAA;YAC7D,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9J,CAAC;QACD,IAAK,YAAkC,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,iBAAiB,GAAG,YAAiC,CAAA;YAC3D,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE;gBACrE,mFAAmF;gBACnF,mFAAmF;gBACnF,mFAAmF;gBACnF,wBAAwB;gBACxB,iBAAiB,EAAE,IAAI;gBACvB,GAAG,iBAAiB;aACvB,CAAC,CAAA;QACN,CAAC;QACD,OAAO,SAAS,CAAA;IACpB,CAAC;CACJ"}

package/dist/RPC/Auth.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Authentication and authorization types.
+ *
+ * Authentication happens at the transport, because that is the only layer that can tie a claim to
+ * a connection. The source field of a message header is supplied by the sender and is not evidence
+ * of anything on its own - a transport that authenticates must therefore pin each connection to
+ * one peer name and reject frames that claim a different one. Otherwise any authenticated peer
+ * could address messages as any other peer and inherit its rights.
+ *
+ * Authorization happens at the RPC layer, which is where a call is resolved to an instance and a
+ * method.
+ */
+/**
+ * A certificate authority to trust when dialling a TLS peer, as PEM text or the bytes of one.
+ *
+ * The counterpart to `allowInsecureTls`, and the one to reach for first: a plant with its own
+ * authority wants *its* certificates trusted, not every certificate accepted. Verification stays
+ * on, so a server presenting anything this does not vouch for is still refused - which is the whole
+ * difference between a private trust root and no trust at all.
+ */
+export type TrustedCertificateAuthority = string | Uint8Array | Array<string | Uint8Array>;
+/** An authenticated peer. */
+export interface RpcIdentity {
+    /**
+     * The peer name this identity may use as its message source. Frames claiming any other source
+     * are dropped, so an RpcClient's `name` option must match this when authentication is on.
+     */
+    name: string;
+    roles?: string[];
+    claims?: {
+        [key: string]: unknown;
+    };
+}
+/** What a transport knows about a peer trying to connect. */
+export interface RpcConnectionInfo {
+    /** Remote address, when the transport can determine one. Useful for allow-lists and audit. */
+    address?: string;
+}
+/**
+ * Verify credentials presented at connection time. Return the identity to accept the peer, or
+ * undefined to reject it. Throwing also rejects.
+ */
+export type RpcAuthenticator = (credentials: unknown, info: RpcConnectionInfo) => RpcIdentity | undefined | Promise<RpcIdentity | undefined>;
+/** Everything known about a call at the point the decision is made. */
+export interface RpcCallContext {
+    /**
+     * The authenticated caller, when the transport it arrived on authenticates. Undefined for
+     * transports that cannot authenticate, such as MQTT, where trust comes from the broker.
+     */
+    identity?: RpcIdentity;
+    /** Peer name the message claims as its source, and the address replies are sent to. */
+    source: string;
+    /** Name the target instance is exposed under. */
+    instanceName: string;
+    method: string;
+    params: unknown[];
+    /** True when the call is an event subscription rather than a method call. */
+    subscription: boolean;
+}
+/** Return false to reject a call with a Forbidden error. */
+export type RpcAuthorizer = (context: RpcCallContext) => boolean | Promise<boolean>;
+/**
+ * The parts of a frame a signature covers. Everything that decides where a message came from,
+ * where it is going and what it says, plus a nonce so a captured frame cannot be replayed.
+ *
+ * Both sides build these bytes the same way from the same fields, so there is no parsing
+ * ambiguity: see canonicalSignedBytes in Signing.ts for the exact encoding.
+ */
+export interface SignedFrame {
+    source: string;
+    target: string;
+    time: number;
+    seq: number;
+    nonce: string;
+    payload: Uint8Array;
+}
+/** What a signer knows about the frame beyond the bytes it is signing. */
+export interface SigningContext {
+    /** Peer that claims to have sent the frame. Selects which key to sign or verify with. */
+    source: string;
+}
+/**
+ * Produce a base64 signature over already-canonicalised bytes.
+ *
+ * Signers take bytes rather than a frame so one signer works across wire formats: the v1 header
+ * and the MQTT 5 property layout canonicalise different fields, and only the transport knows which
+ * it is speaking.
+ */
+export type MessageSigner = (canonicalBytes: Uint8Array, context: SigningContext) => string | Promise<string>;
+/**
+ * Check a signature over canonicalised bytes. Return the sender's identity to accept the frame,
+ * undefined to reject it.
+ *
+ * The returned identity's `name` must equal the frame's source; a transport rejects the frame
+ * otherwise, so a peer holding one key cannot sign messages claiming to come from another.
+ */
+export type MessageVerifier = (canonicalBytes: Uint8Array, signature: string, context: SigningContext) => RpcIdentity | undefined | Promise<RpcIdentity | undefined>;
+//# sourceMappingURL=Auth.d.ts.map

package/dist/RPC/Auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/RPC/Auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,CAAA;AAE1F,6BAA6B;AAC7B,MAAM,WAAW,WAAW;IACxB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;CACtC;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAC9B,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,KAAK,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;AAE5I,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC3B;;;OAGG;IACH,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,EAAE,CAAA;IACjB,6EAA6E;IAC7E,YAAY,EAAE,OAAO,CAAA;CACxB;AAED,4DAA4D;AAC5D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;AAEnF;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,UAAU,CAAA;CACtB;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC3B,yFAAyF;IACzF,MAAM,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;AAE7G;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAC1B,cAAc,EAAE,UAAU,EAC1B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,KACtB,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA"}

package/dist/RPC/Auth.js

@@ -0,0 +1,14 @@
+/**
+ * Authentication and authorization types.
+ *
+ * Authentication happens at the transport, because that is the only layer that can tie a claim to
+ * a connection. The source field of a message header is supplied by the sender and is not evidence
+ * of anything on its own - a transport that authenticates must therefore pin each connection to
+ * one peer name and reject frames that claim a different one. Otherwise any authenticated peer
+ * could address messages as any other peer and inherit its rights.
+ *
+ * Authorization happens at the RPC layer, which is where a call is resolved to an instance and a
+ * method.
+ */
+export {};
+//# sourceMappingURL=Auth.js.map

package/dist/RPC/Auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth.js","sourceRoot":"","sources":["../../src/RPC/Auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/RPC/Codec.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Turns a message into the bytes a transport puts on the wire, and back again.
+ *
+ * Encoding belongs to the transport rather than to a module in the chain. A transport whose wire
+ * format is structured - MQTT 5 carries the method, the correlation and the reply address as
+ * packet properties - needs to see the message, and a converter sitting above it would already
+ * have flattened it to an opaque blob.
+ */
+export interface FrameCodec {
+    /** MIME type for wire formats that can announce one, such as MQTT 5's contentType. */
+    readonly contentType: string;
+    encode(message: unknown): Uint8Array;
+    decode(bytes: Uint8Array): unknown;
+}
+/**
+ * The default. Sits between JSON and protobuf on size and parse cost without a schema toolchain,
+ * encodes Uint8Array natively, and has small allocation-light implementations for constrained
+ * targets.
+ */
+export declare const msgPackCodec: FrameCodec;
+/** Larger and lossy for binary, but readable in any tool and implementable anywhere. */
+export declare const jsonCodec: FrameCodec;
+export declare const codecFor: (useMsgPack: boolean) => FrameCodec;
+//# sourceMappingURL=Codec.d.ts.map

package/dist/RPC/Codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Codec.d.ts","sourceRoot":"","sources":["../../src/RPC/Codec.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACvB,sFAAsF;IACtF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAAA;IACpC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAA;CACrC;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,UAK1B,CAAA;AAED,wFAAwF;AACxF,eAAO,MAAM,SAAS,EAAE,UAIvB,CAAA;AAED,eAAO,MAAM,QAAQ,eAAgB,OAAO,eAA4C,CAAA"}

package/dist/RPC/Codec.js

@@ -0,0 +1,21 @@
+import { encode as msgPackEncode, decode as msgPackDecode } from '@msgpack/msgpack';
+import { stringToUint8Array, uint8ArrayToString } from 'uint8array-extras';
+/**
+ * The default. Sits between JSON and protobuf on size and parse cost without a schema toolchain,
+ * encodes Uint8Array natively, and has small allocation-light implementations for constrained
+ * targets.
+ */
+export const msgPackCodec = {
+    contentType: 'application/msgpack',
+    // ignoreUndefined keeps JSON's behaviour of dropping undefined object properties.
+    encode: (message) => msgPackEncode(message, { ignoreUndefined: true }),
+    decode: (bytes) => msgPackDecode(bytes)
+};
+/** Larger and lossy for binary, but readable in any tool and implementable anywhere. */
+export const jsonCodec = {
+    contentType: 'application/json',
+    encode: (message) => stringToUint8Array(JSON.stringify(message)),
+    decode: (bytes) => JSON.parse(uint8ArrayToString(bytes))
+};
+export const codecFor = (useMsgPack) => (useMsgPack ? msgPackCodec : jsonCodec);
+//# sourceMappingURL=Codec.js.map

package/dist/RPC/Codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Codec.js","sourceRoot":"","sources":["../../src/RPC/Codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAiB1E;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAe;IACpC,WAAW,EAAE,qBAAqB;IAClC,kFAAkF;IAClF,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACtE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC;CAC1C,CAAA;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,SAAS,GAAe;IACjC,WAAW,EAAE,kBAAkB;IAC/B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;CAC3D,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,UAAmB,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA"}

package/dist/RPC/Compatibility.d.ts

@@ -0,0 +1,39 @@
+import { NamespaceSchema, RpcSchema, TypeNode } from './Schema.js';
+/**
+ * Deciding whether a caller built against an older contract can safely talk to the current one.
+ *
+ * Validating an old call against its own old schema would prove nothing: it still reaches the
+ * current implementation, so acceptance would only move the failure from the validator into the
+ * method body. What the stored history is actually good for is comparing the two contracts and
+ * asking whether every call the old one permitted is still one this one handles.
+ *
+ * That is ordinary function subtyping. Parameters are contravariant - the current contract has to
+ * accept everything the old one allowed, so widening a parameter is safe and narrowing it is not.
+ * Returns are covariant - everything the current contract can return has to fit what the old
+ * caller expects, so narrowing a return is safe and widening it is not.
+ *
+ * The check is conservative: where it cannot prove compatibility it reports incompatibility, since
+ * a false "safe" is the expensive direction.
+ */
+export interface Incompatibility {
+    /** Where the problem is, e.g. "writeSetpoint argument 0". */
+    where: string;
+    reason: string;
+}
+/**
+ * True when every value valid under `from` is also valid under `to`.
+ *
+ * Recursive types are handled coinductively: a pair of named types already being compared is
+ * assumed to hold while the rest is proved. Without that, comparing a recursive type with itself
+ * descends forever and the depth guard reports it as incompatible - which would mark every
+ * recursive shape as a breaking change, including against an identical contract.
+ */
+export declare const assignable: (from: TypeNode, to: TypeNode, types?: RpcSchema['types'], depth?: number, assumed?: Set<string>) => boolean;
+/**
+ * Compares the contract a caller was built against with the one now being served. An empty result
+ * means every call the caller might make is still handled.
+ */
+export declare const namespaceProblems: (caller: NamespaceSchema, current: NamespaceSchema, types?: RpcSchema['types']) => Incompatibility[];
+/** One line naming why an older contract cannot be served, or undefined when it can. */
+export declare const describeProblems: (namespace: string, version: string, current: string | undefined, problems: Incompatibility[]) => string | undefined;
+//# sourceMappingURL=Compatibility.d.ts.map

package/dist/RPC/Compatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Compatibility.d.ts","sourceRoot":"","sources":["../../src/RPC/Compatibility.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEhF;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,eAAe;IAC5B,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACjB;AAWD;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,SAAU,QAAQ,MAAM,QAAQ,UAAS,SAAS,CAAC,OAAO,CAAC,4BAA2B,GAAG,CAAC,MAAM,CAAC,KAAe,OAqFtI,CAAA;AAyCD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,WAAY,eAAe,WAAW,eAAe,UAAS,SAAS,CAAC,OAAO,CAAC,KAAQ,eAAe,EAgCpI,CAAA;AAED,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,cAAe,MAAM,WAAW,MAAM,WAAW,MAAM,GAAG,SAAS,YAAY,eAAe,EAAE,uBAI1G,CAAA"}

package/dist/RPC/Compatibility.js

@@ -0,0 +1,195 @@
+import { SEMANTICS_RISK } from './Messages.js';
+const resolve = (type, types) => (type.kind === 'ref' ? resolve(types?.[type.name] ?? { kind: 'any' }, types) : type);
+const widerOrEqualNumber = (from, to) => {
+    if (to.integer && !from.integer)
+        return false;
+    if (to.min !== undefined && (from.min === undefined || from.min < to.min))
+        return false;
+    if (to.max !== undefined && (from.max === undefined || from.max > to.max))
+        return false;
+    return true;
+};
+/**
+ * True when every value valid under `from` is also valid under `to`.
+ *
+ * Recursive types are handled coinductively: a pair of named types already being compared is
+ * assumed to hold while the rest is proved. Without that, comparing a recursive type with itself
+ * descends forever and the depth guard reports it as incompatible - which would mark every
+ * recursive shape as a breaking change, including against an identical contract.
+ */
+export const assignable = (from, to, types = {}, depth = 0, assumed = new Set()) => {
+    if (depth > 64)
+        return false;
+    if (from.kind === 'ref' && to.kind === 'ref') {
+        const pair = `${from.name} <: ${to.name}`;
+        if (assumed.has(pair))
+            return true;
+        assumed.add(pair);
+    }
+    const source = resolve(from, types);
+    const target = resolve(to, types);
+    if (target.kind === 'any')
+        return true;
+    // An 'any' source can hold anything, so only an 'any' target can accept it.
+    if (source.kind === 'any')
+        return false;
+    if (source.kind === 'union')
+        return source.options.every((option) => assignable(option, target, types, depth + 1, assumed));
+    if (target.kind === 'union')
+        return target.options.some((option) => assignable(source, option, types, depth + 1, assumed));
+    if (source.kind === 'literal') {
+        if (target.kind === 'literal')
+            return source.value === target.value;
+        const literalKind = source.value === null ? 'null' : typeof source.value;
+        if (literalKind !== target.kind)
+            return false;
+        if (target.kind === 'number' && typeof source.value === 'number')
+            return widerOrEqualNumber({ min: source.value, max: source.value, integer: Number.isInteger(source.value) }, target);
+        return true;
+    }
+    if (source.kind !== target.kind)
+        return false;
+    switch (source.kind) {
+        case 'null':
+        case 'boolean':
+        case 'date':
+            return true;
+        case 'number':
+            return widerOrEqualNumber(source, target);
+        case 'string': {
+            const stringTarget = target;
+            if (stringTarget.minLength !== undefined && (source.minLength === undefined || source.minLength < stringTarget.minLength))
+                return false;
+            if (stringTarget.maxLength !== undefined && (source.maxLength === undefined || source.maxLength > stringTarget.maxLength))
+                return false;
+            // Regex subsumption is undecidable in general, so only an identical pattern counts.
+            if (stringTarget.pattern !== undefined && stringTarget.pattern !== source.pattern)
+                return false;
+            return true;
+        }
+        case 'bytes': {
+            const bytesTarget = target;
+            return bytesTarget.maxBytes === undefined || (source.maxBytes !== undefined && source.maxBytes <= bytesTarget.maxBytes);
+        }
+        case 'array': {
+            const arrayTarget = target;
+            if (arrayTarget.maxItems !== undefined && (source.maxItems === undefined || source.maxItems > arrayTarget.maxItems))
+                return false;
+            return assignable(source.items, arrayTarget.items, types, depth + 1, assumed);
+        }
+        case 'tuple': {
+            const tupleTarget = target;
+            if (source.items.length !== tupleTarget.items.length)
+                return false;
+            return source.items.every((item, index) => assignable(item, tupleTarget.items[index], types, depth + 1, assumed));
+        }
+        case 'record': {
+            const recordTarget = target;
+            if (recordTarget.maxEntries !== undefined && (source.maxEntries === undefined || source.maxEntries > recordTarget.maxEntries))
+                return false;
+            // As with a string pattern: deciding whether one regex admits everything another does
+            // is undecidable in general, so only an identical constraint counts.
+            if (recordTarget.keyPattern !== undefined && recordTarget.keyPattern !== source.keyPattern)
+                return false;
+            return assignable(source.values, recordTarget.values, types, depth + 1, assumed);
+        }
+        case 'object': {
+            const objectTarget = target;
+            for (const [name, field] of Object.entries(objectTarget.fields)) {
+                const sourceField = source.fields[name];
+                if (!sourceField) {
+                    // Gaining an optional field is the ordinary way a contract evolves; only a new
+                    // required field breaks a source that never supplied it.
+                    if (field.optional)
+                        continue;
+                    return false;
+                }
+                if (!field.optional && sourceField.optional)
+                    return false;
+                if (!assignable(sourceField.type, field.type, types, depth + 1, assumed))
+                    return false;
+            }
+            if (!objectTarget.additional) {
+                // The source could produce a property the target refuses.
+                for (const name of Object.keys(source.fields))
+                    if (!(name in objectTarget.fields))
+                        return false;
+            }
+            return true;
+        }
+        default:
+            return false;
+    }
+};
+/** Lowest number of arguments a caller of this method might send. */
+const requiredArity = (method) => method.params.filter((type) => !(type.kind === 'any' || (type.kind === 'union' && type.options.some((o) => o.kind === 'literal' && o.value === null)))).length;
+const methodProblems = (name, caller, current, types) => {
+    const problems = [];
+    // The current contract must accept every argument count the old caller might send.
+    if (!current.rest && current.params.length < caller.params.length)
+        problems.push({ where: name, reason: `takes at most ${current.params.length} arguments, but a caller may send ${caller.params.length}` });
+    if (requiredArity(current) > requiredArity(caller))
+        problems.push({ where: name, reason: `requires ${requiredArity(current)} arguments, but a caller may send as few as ${requiredArity(caller)}` });
+    // Parameters are contravariant: what the caller may send must still be accepted.
+    for (let i = 0; i < caller.params.length; i++) {
+        const currentParam = i < current.params.length ? current.params[i] : current.rest;
+        if (!currentParam)
+            continue;
+        if (!assignable(caller.params[i], currentParam, types))
+            problems.push({ where: `${name} argument ${i}`, reason: 'narrowed, so a value the caller may send is no longer accepted' });
+    }
+    // Returns are covariant: what this contract returns must still be understood.
+    if (caller.returns && current.returns && !assignable(current.returns, caller.returns, types))
+        problems.push({ where: `${name} return`, reason: 'widened, so a value this contract may return is not one the caller expects' });
+    // Semantics may become safer to repeat but not more dangerous. A caller told it was calling a
+    // query is entitled to have retried freely, and code written on that promise is still out there
+    // - so a method quietly becoming a command is a breaking change even though every type still
+    // lines up. This is the one incompatibility a type comparison cannot see.
+    const was = caller.semantics;
+    const now = current.semantics;
+    if (was && now && SEMANTICS_RISK[now] > SEMANTICS_RISK[was])
+        problems.push({ where: name, reason: `is now ${now} where the caller was told ${was}, so a retry the caller may already make is no longer safe` });
+    if (was && !now && SEMANTICS_RISK[was] < SEMANTICS_RISK['non-repeatable-command'])
+        problems.push({ where: name, reason: `no longer declares that it is ${was}, so a caller relying on that promise has nothing to rely on` });
+    return problems;
+};
+/**
+ * Compares the contract a caller was built against with the one now being served. An empty result
+ * means every call the caller might make is still handled.
+ */
+export const namespaceProblems = (caller, current, types = {}) => {
+    const problems = [];
+    for (const [name, callerMethod] of Object.entries(caller.methods)) {
+        const currentMethod = current.methods[name];
+        if (!currentMethod) {
+            problems.push({ where: name, reason: 'no longer exists' });
+            continue;
+        }
+        problems.push(...methodProblems(name, callerMethod, currentMethod, types));
+    }
+    // Events travel the other way: emitted here, received there.
+    for (const [name, callerEvent] of Object.entries(caller.events ?? {})) {
+        const currentEvent = current.events?.[name];
+        if (!currentEvent) {
+            // Not unsafe, but a subscription that can never fire is a silent failure worth naming.
+            problems.push({ where: `event ${name}`, reason: 'is no longer emitted, so a subscription to it would never fire' });
+            continue;
+        }
+        for (let i = 0; i < currentEvent.params.length; i++) {
+            const callerParam = callerEvent.params[i];
+            if (!callerParam) {
+                problems.push({ where: `event ${name} argument ${i}`, reason: 'is emitted but the caller does not expect it' });
+                continue;
+            }
+            if (!assignable(currentEvent.params[i], callerParam, types))
+                problems.push({ where: `event ${name} argument ${i}`, reason: 'widened, so a value this contract may emit is not one the caller expects' });
+        }
+    }
+    return problems;
+};
+/** One line naming why an older contract cannot be served, or undefined when it can. */
+export const describeProblems = (namespace, version, current, problems) => problems.length
+    ? `${namespace}@${version} is not compatible with ${namespace}@${current ?? 'current'}: ` +
+        problems.map((problem) => `${problem.where} ${problem.reason}`).join('; ')
+    : undefined;
+//# sourceMappingURL=Compatibility.js.map

package/dist/RPC/Compatibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Compatibility.js","sourceRoot":"","sources":["../../src/RPC/Compatibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AA0B9C,MAAM,OAAO,GAAG,CAAC,IAAc,EAAE,KAAyB,EAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAE7J,MAAM,kBAAkB,GAAG,CAAC,IAAuD,EAAE,EAAqD,EAAE,EAAE;IAC1I,IAAI,EAAE,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC7C,IAAI,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,IAAI,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAc,EAAE,EAAY,EAAE,KAAK,GAAuB,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,GAAgB,IAAI,GAAG,EAAE,EAAW,EAAE;IAC7I,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAA;IAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAA;QACzC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAEjC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACtC,4EAA4E;IAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAEvC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3H,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IAE1H,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAA;QACnE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAA;QACxE,IAAI,WAAW,KAAK,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACtL,OAAO,IAAI,CAAA;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAE7C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACP,OAAO,IAAI,CAAA;QACf,KAAK,QAAQ;YACT,OAAO,kBAAkB,CAAC,MAAM,EAAE,MAAuB,CAAC,CAAA;QAC9D,KAAK,QAAQ,EAAE,CAAC;YACZ,MAAM,YAAY,GAAG,MAAuB,CAAA;YAC5C,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAA;YACvI,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAA;YACvI,oFAAoF;YACpF,IAAI,YAAY,CAAC,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAA;YAC/F,OAAO,IAAI,CAAA;QACf,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,MAAuB,CAAA;YAC3C,OAAO,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC3H,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,MAAuB,CAAA;YAC3C,IAAI,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAA;YACjI,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QACjF,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,MAAuB,CAAA;YAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAA;YAClE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QACrH,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACZ,MAAM,YAAY,GAAG,MAAuB,CAAA;YAC5C,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC3I,sFAAsF;YACtF,qEAAqE;YACrE,IAAI,YAAY,CAAC,UAAU,KAAK,SAAS,IAAI,YAAY,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAA;YACxG,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QACpF,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACZ,MAAM,YAAY,GAAG,MAAuB,CAAA;YAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACvC,IAAI,CAAC,WAAW,EAAE,CAAC;oBACf,+EAA+E;oBAC/E,yDAAyD;oBACzD,IAAI,KAAK,CAAC,QAAQ;wBAAE,SAAQ;oBAC5B,OAAO,KAAK,CAAA;gBAChB,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAA;gBACzD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC;oBAAE,OAAO,KAAK,CAAA;YAC1F,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC3B,0DAA0D;gBAC1D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;oBAAE,IAAI,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC;wBAAE,OAAO,KAAK,CAAA;YACnG,CAAC;YACD,OAAO,IAAI,CAAA;QACf,CAAC;QACD;YACI,OAAO,KAAK,CAAA;IACpB,CAAC;AACL,CAAC,CAAA;AAED,qEAAqE;AACrE,MAAM,aAAa,GAAG,CAAC,MAAoB,EAAE,EAAE,CAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;AAElK,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,MAAoB,EAAE,OAAqB,EAAE,KAAyB,EAAqB,EAAE;IAC/H,MAAM,QAAQ,GAAsB,EAAE,CAAA;IAEtC,mFAAmF;IACnF,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM;QAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,OAAO,CAAC,MAAM,CAAC,MAAM,qCAAqC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7I,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,aAAa,CAAC,OAAO,CAAC,+CAA+C,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IAEpJ,iFAAiF;IACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAA;QACjF,IAAI,CAAC,YAAY;YAAE,SAAQ;QAC3B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,gEAAgE,EAAE,CAAC,CAAA;IACnI,CAAC;IAED,8EAA8E;IAC9E,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;QACxF,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,SAAS,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC,CAAA;IAEpI,8FAA8F;IAC9F,gGAAgG;IAChG,6FAA6F;IAC7F,0EAA0E;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAA;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAA;IAC7B,IAAI,GAAG,IAAI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAG,8BAA8B,GAAG,4DAA4D,EAAE,CAAC,CAAA;IACtJ,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,wBAAwB,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,GAAG,8DAA8D,EAAE,CAAC,CAAA;IAE9I,OAAO,QAAQ,CAAA;AACnB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAuB,EAAE,OAAwB,EAAE,KAAK,GAAuB,EAAE,EAAqB,EAAE;IACtI,MAAM,QAAQ,GAAsB,EAAE,CAAA;IAEtC,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC1D,SAAQ;QACZ,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,6DAA6D;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,uFAAuF;YACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,MAAM,EAAE,gEAAgE,EAAE,CAAC,CAAA;YACnH,SAAQ;QACZ,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACzC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAA;gBAC/G,SAAQ;YACZ,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,0EAA0E,EAAE,CAAC,CAAA;QACnJ,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAA;AACnB,CAAC,CAAA;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,OAA2B,EAAE,QAA2B,EAAE,EAAE,CAC7H,QAAQ,CAAC,MAAM;IACX,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,2BAA2B,SAAS,IAAI,OAAO,IAAI,SAAS,IAAI;QACvF,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5E,CAAC,CAAC,SAAS,CAAA"}