@spine-event-engine/server 2.0.0-snapshot.25 → 2.0.0-snapshot.28

package/dist/services/app-query-execution.d.ts

@@ -0,0 +1,53 @@
+import { type Message } from "@bufbuild/protobuf";
+import type { AppQueryResponseFor } from "@spine-event-engine/core";
+import { type TrustedReaderContext } from "@spine-event-engine/core/spi/trusted-reader";
+import { type ActorContext } from "@spine-event-engine/proto";
+import { type AppQuery, type AppQueryResponse } from "@spine-event-engine/proto/client";
+import { AppQueryHandler } from "../handler/app-query-handler.js";
+import { RegisteredTargets } from "./registered-targets.js";
+import { ReadSideFilterEngine } from "../stand/read-side-filter-engine.js";
+/**
+ * Dispatches only the App Query handlers selected for one Server assembly.
+ */
+export declare class AppQueryExecution {
+    #private;
+    /**
+     * Resolves exact-class generated metadata before the Server listener opens.
+     *
+     * @param handlers Explicit handler instances selected by this Server.
+     * @param targets Entity state routes installed in this Server.
+     * @param serverFilters Policies applied only when the result crosses gRPC.
+     */
+    constructor(handlers: readonly AppQueryHandler<never, Message>[], targets: RegisteredTargets, serverFilters?: ReadSideFilterEngine);
+    /**
+     * Executes one detached and validated App Query through its selected handler.
+     *
+     * @param input App Query envelope captured at the Server boundary.
+     * @param reader Verified current invocation facts.
+     * @param signal Current invocation cancellation, when available.
+     * @returns One paired result in a successful response envelope.
+     */
+    execute(input: AppQuery, reader: TrustedReaderContext, signal?: AbortSignal): Promise<AppQueryResponse>;
+    /**
+     * Stops accepting App Queries while allowing admitted work to settle.
+     */
+    beginClose(): void;
+    /**
+     * Waits for admitted work without treating request failure as a close failure.
+     *
+     * @returns Completion after every admitted handler settles.
+     */
+    drain(): Promise<void>;
+    /**
+     * Wraps a generated application request and returns its paired generated result.
+     *
+     * @typeParam Q Generated request associated with a declared response.
+     * @param request Request from trusted application code.
+     * @param actor Current effective actor and tenant context.
+     * @param reader Verified current identity and authority facts.
+     * @param signal Current invocation cancellation, when available.
+     * @returns The selected handler's paired generated result.
+     */
+    executeTyped<Q extends Message>(request: Q, actor: ActorContext, reader: TrustedReaderContext, signal?: AbortSignal): Promise<AppQueryResponseFor<Q>>;
+}
+//# sourceMappingURL=app-query-execution.d.ts.map

package/dist/services/app-query-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-query-execution.d.ts","sourceRoot":"","sources":["../../src/services/app-query-execution.ts"],"names":[],"mappings":"AAcA,OAAO,EAA6B,KAAK,OAAO,EAAqB,MAAM,oBAAoB,CAAC;AAIhG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAIL,KAAK,YAAY,EAElB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAIL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACtB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,eAAe,EAAwB,MAAM,iCAAiC,CAAC;AAWxF,OAAO,EAAE,iBAAiB,EAAyB,MAAM,yBAAyB,CAAC;AAKnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAW3E;;GAEG;AACH,qBAAa,iBAAiB;;IAe5B;;;;;;OAMG;gBAED,QAAQ,EAAE,SAAS,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EACpD,OAAO,EAAE,iBAAiB,EAC1B,aAAa,CAAC,EAAE,oBAAoB;IAmBtC;;;;;;;OAOG;IACH,OAAO,CACL,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,gBAAgB,CAAC;IA8B5B;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B5B;;;;;;;;;OASG;IACG,YAAY,CAAC,CAAC,SAAS,OAAO,EAClC,OAAO,EAAE,CAAC,EACV,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,oBAAoB,EAC5B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAkVnC"}

package/dist/services/app-query-execution.js

@@ -0,0 +1,408 @@
+/*
+ * Copyright 2026, CodeMatters. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+import { clone, create, fromBinary } from "@bufbuild/protobuf";
+import { Code, ConnectError } from "@connectrpc/connect";
+import { AnyPacker, TypeUrls, Validate, QUERY_SERVICE_MAX_RESULTS } from "@spine-event-engine/core";
+import { snapshotTrustedReader, } from "@spine-event-engine/core/spi/trusted-reader";
+import { ActorContextSchema, ResponseSchema, StatusSchema, } from "@spine-event-engine/proto";
+import { AppQuerySchema, AppQueryResponseSchema, QueryIdSchema, } from "@spine-event-engine/proto/client";
+import { randomUUID } from "node:crypto";
+import { AppQueryHandler } from "../handler/app-query-handler.js";
+import { SpineMetadataInventory, } from "../handler/spine-metadata-inventory.js";
+import { ReadRequestStatus } from "./read-request-status.js";
+import { processManagerQueryAccess } from "../entity/entity.js";
+import { RegisteredTargets } from "./registered-targets.js";
+import { QueryReader } from "./query-reader.js";
+import { EffectiveTenants } from "../context/effective-tenant.js";
+import { TenantAdmissions, TenantUnknownError } from "../context/tenant-unknown-error.js";
+import { boundedContextAccess } from "../context/bounded-context.js";
+import { ReadSideFilterEngine } from "../stand/read-side-filter-engine.js";
+/**
+ * Dispatches only the App Query handlers selected for one Server assembly.
+ */
+export class AppQueryExecution {
+    #active = new Set();
+    #closing = false;
+    #routes = new Map();
+    #typedRoutes = new Map();
+    #targets;
+    #serverFilters;
+    #readStatuses = new WeakSet();
+    /**
+     * Resolves exact-class generated metadata before the Server listener opens.
+     *
+     * @param handlers Explicit handler instances selected by this Server.
+     * @param targets Entity state routes installed in this Server.
+     * @param serverFilters Policies applied only when the result crosses gRPC.
+     */
+    constructor(handlers, targets, serverFilters) {
+        this.#targets = targets;
+        this.#serverFilters = serverFilters;
+        const descriptions = SpineMetadataInventory.selectQueries(handlers.map((handler) => handler.constructor));
+        for (let index = 0; index < handlers.length; index++) {
+            const handler = handlers[index];
+            const description = descriptions[index];
+            if (handler === undefined || description === undefined)
+                continue;
+            const typeUrl = TypeUrls.derive(description.querySchema);
+            if (this.#routes.has(typeUrl))
+                throw new Error(`Two App Query handlers are registered for ${typeUrl}.`);
+            this.#routes.set(typeUrl, { handler, description });
+            this.#typedRoutes.set(description.querySchema.typeName, { handler, description });
+        }
+    }
+    /**
+     * Executes one detached and validated App Query through its selected handler.
+     *
+     * @param input App Query envelope captured at the Server boundary.
+     * @param reader Verified current invocation facts.
+     * @param signal Current invocation cancellation, when available.
+     * @returns One paired result in a successful response envelope.
+     */
+    execute(input, reader, signal) {
+        return this.#execute(input, reader, signal, true);
+    }
+    /**
+     * Tracks one accepted handler call while selecting its outward boundary.
+     *
+     * @param input Captured application request.
+     * @param reader Verified caller facts.
+     * @param signal Current cancellation.
+     * @param outward Whether the result leaves this Server over gRPC.
+     * @returns Paired result and successful envelope.
+     */
+    #execute(input, reader, signal, outward) {
+        if (this.#closing)
+            return Promise.reject(new ConnectError("App Query execution is closed.", Code.Unavailable));
+        const work = this.#run(input, reader, signal, outward);
+        this.#active.add(work);
+        void work.then(() => this.#active.delete(work), () => this.#active.delete(work));
+        return work;
+    }
+    /**
+     * Stops accepting App Queries while allowing admitted work to settle.
+     */
+    beginClose() {
+        this.#closing = true;
+    }
+    /**
+     * Waits for admitted work without treating request failure as a close failure.
+     *
+     * @returns Completion after every admitted handler settles.
+     */
+    async drain() {
+        await Promise.allSettled(this.#active);
+    }
+    /**
+     * Validates and invokes one admitted query inside a releasable read scope.
+     *
+     * @param input Captured application query envelope.
+     * @param reader Verified current invocation facts.
+     * @param signal Current invocation cancellation, when available.
+     * @param outward Whether the final result crosses gRPC.
+     * @returns One paired result in a successful response envelope.
+     */
+    async #run(input, reader, signal, outward = true) {
+        this.#checkCanceled(signal);
+        const { query, route, request } = this.#validated(input);
+        const { context, release } = this.#scope(query, reader, signal);
+        try {
+            const result = await this.#invoke(route, request, context);
+            this.#checkCanceled(signal);
+            return await this.#response(route, result, query, reader, signal, outward);
+        }
+        finally {
+            release();
+        }
+    }
+    /**
+     * Wraps a generated application request and returns its paired generated result.
+     *
+     * @typeParam Q Generated request associated with a declared response.
+     * @param request Request from trusted application code.
+     * @param actor Current effective actor and tenant context.
+     * @param reader Verified current identity and authority facts.
+     * @param signal Current invocation cancellation, when available.
+     * @returns The selected handler's paired generated result.
+     */
+    async executeTyped(request, actor, reader, signal) {
+        this.#checkCanceled(signal);
+        const route = this.#typedRoutes.get(request.$typeName);
+        if (route === undefined)
+            throw ReadRequestStatus.invalid("query", true, "App Query target is unsupported.");
+        let message;
+        try {
+            message = AnyPacker.pack(route.description.querySchema, request);
+        }
+        catch {
+            throw ReadRequestStatus.invalid("query", false, "App Query payload is malformed.");
+        }
+        const envelope = create(AppQuerySchema, {
+            id: create(QueryIdSchema, { value: randomUUID() }),
+            context: clone(ActorContextSchema, actor),
+            message,
+        });
+        const response = await this.#execute(envelope, reader, signal, false);
+        const packed = response.message[0];
+        if (packed === undefined)
+            throw new ConnectError("App Query response is missing.", Code.Internal);
+        return AnyPacker.unpack(packed, route.description.responseSchema);
+    }
+    /**
+     * Resolves the selected handler only after both envelope and root Q validation.
+     *
+     * @param input Captured application query envelope.
+     * @returns Detached envelope, handler route, and decoded request.
+     */
+    #validated(input) {
+        const query = clone(AppQuerySchema, input);
+        ReadRequestStatus.check("query", () => Validate.check(AppQuerySchema, query));
+        const route = this.#routes.get(query.message?.typeUrl ?? "");
+        if (route === undefined)
+            throw ReadRequestStatus.invalid("query", true, "App Query target is unsupported.");
+        const request = this.#decode(route, query);
+        ReadRequestStatus.check("query", () => Validate.check(route.description.querySchema, request));
+        return { query, route, request };
+    }
+    /**
+     * Binds one invocation's actor and verified reader to its Entity read scope.
+     *
+     * @param query Validated detached envelope.
+     * @param reader Verified facts for this operation.
+     * @param signal Current invocation cancellation, when available.
+     * @returns Context and release callback for this invocation only.
+     */
+    #scope(query, reader, signal) {
+        const scope = {};
+        if (query.context === undefined)
+            throw ReadRequestStatus.invalid("query", false, "App Query context is required.");
+        const actor = clone(ActorContextSchema, query.context);
+        const context = this.#context(scope, actor, reader, signal);
+        const release = processManagerQueryAccess.bind(scope, (plan, schema, wire) => this.#read(plan, schema, wire, query, reader, signal), actor);
+        return { context, release };
+    }
+    /**
+     * Builds the immutable handler view over one active read scope.
+     *
+     * @param scope Invocation binding used by the existing Entity read facade.
+     * @param actor Detached effective actor and tenant.
+     * @param reader Verified current identity and authority facts.
+     * @param signal Current invocation cancellation, when available.
+     * @returns A handler-facing capability that fails after release.
+     */
+    #context(scope, actor, reader, signal) {
+        const trusted = snapshotTrustedReader(reader);
+        return Object.freeze({
+            actorContext: actor,
+            ...(trusted.principal === undefined ? {} : { principal: trusted.principal }),
+            ...(trusted.authorityFacts === undefined ? {} : { authorityFacts: trusted.authorityFacts }),
+            ...(signal === undefined ? {} : { signal }),
+            /**
+             * Selects an Entity read using this invocation's actor and registered targets.
+             *
+             * @typeParam Schema Generated state schema of the target Entity.
+             * @typeParam Id Identifier type used by the Entity query description.
+             * @param description Registered description of the target Entity.
+             * @returns A typed read builder bound to this invocation.
+             */
+            select(description) {
+                return processManagerQueryAccess.select(scope, description);
+            },
+        });
+    }
+    /**
+     * Calls one selected handler while mapping private failures to safe statuses.
+     *
+     * @param route Handler selected by exact Q type URL.
+     * @param request Validated generated Q message.
+     * @param context Current read and authority scope.
+     * @returns Handler-produced paired response message.
+     */
+    async #invoke(route, request, context) {
+        try {
+            return await route.handler.execute(request, context);
+        }
+        catch (error) {
+            this.#checkCanceled(context.signal);
+            if (error instanceof ConnectError && this.#readStatuses.has(error))
+                throw error;
+            throw ReadRequestStatus.technical(error, "App Query execution failed.");
+        }
+    }
+    /**
+     * Checks the paired generated R type and serializes one successful result.
+     *
+     * @param route Selected handler's generated response schema.
+     * @param result Handler-produced result message.
+     * @param query Original validated application envelope.
+     * @param reader Verified current reader facts.
+     * @param signal Current cancellation, when supplied.
+     * @param outward Whether the response crosses gRPC.
+     * @returns Transport response with zero or one packed R.
+     */
+    async #response(route, result, query, reader, signal, outward) {
+        if (result?.$typeName !== route.description.responseSchema.typeName)
+            throw new ConnectError("App Query response type is invalid.", Code.Internal);
+        const visible = await this.#visibleResponse(route, result, query, reader, signal, outward);
+        try {
+            return create(AppQueryResponseSchema, {
+                response: create(ResponseSchema, {
+                    status: create(StatusSchema, { status: { case: "ok", value: {} } }),
+                }),
+                message: visible === null ? [] : [AnyPacker.pack(route.description.responseSchema, visible)],
+            });
+        }
+        catch {
+            throw new ConnectError("App Query response is invalid.", Code.Internal);
+        }
+    }
+    /**
+     * Applies Server egress policy and maps policy faults to safe transport statuses.
+     * @param route Selected Q/R pairing.
+     * @param result Handler-produced response.
+     * @param query Validated application query.
+     * @param reader Verified invocation facts.
+     * @param signal Current cancellation.
+     * @param outward Whether this result crosses gRPC.
+     * @returns Visible response or null when removed.
+     */
+    async #visibleResponse(route, result, query, reader, signal, outward) {
+        if (!outward || this.#serverFilters === undefined)
+            return result;
+        try {
+            return await this.#serverFilters.apply(route.description.responseSchema, result, {
+                operation: { kind: "app-query", appQuery: query },
+                ...(query.context === undefined ? {} : { actorContext: query.context }),
+                ...(query.context?.tenantId === undefined
+                    ? {}
+                    : { effectiveTenant: query.context.tenantId }),
+                ...reader,
+                ...(signal === undefined ? {} : { signal }),
+            });
+        }
+        catch (error) {
+            throw ReadRequestStatus.technical(error, "App Query execution failed.");
+        }
+    }
+    /**
+     * Routes a handler's scoped Entity read through this Server's registered target.
+     *
+     * @typeParam Schema Generated Entity state schema selected by the handler.
+     * @param plan Existing Entity query predicates and ordering.
+     * @param schema Generated target state schema.
+     * @param wire Query with the current trusted actor and tenant context.
+     * @param enclosing Original application query using this child read.
+     * @param reader Verified current reader facts.
+     * @param signal Current invocation cancellation, checked before and after the read.
+     * @returns Detached matching state snapshots.
+     */
+    async #read(plan, schema, wire, enclosing, reader, signal) {
+        this.#checkCanceled(signal);
+        const target = this.#targets.find(TypeUrls.derive(schema));
+        if (target === undefined)
+            throw this.#readStatus(ReadRequestStatus.invalid("query", true, "Entity query target is unsupported."));
+        const visibility = target.repository.metadata.visibility;
+        if (visibility !== "query" && visibility !== "full")
+            throw this.#readStatus(new ConnectError("Entity query target is not visible.", Code.PermissionDenied));
+        this.#targets.validate(target, plan);
+        const effective = await this.#admitTenant(target, wire);
+        const destination = EffectiveTenants.destination(effective, target.context.isMultitenant);
+        const result = await QueryReader.read(target.context.stand(), schema, plan, destination, QUERY_SERVICE_MAX_RESULTS, wire, this.#childReadContext(wire, enclosing, target, reader, destination, signal));
+        this.#checkCanceled(signal);
+        return Object.freeze(result.map((entry) => entry.state));
+    }
+    /**
+     * Describes one handler-scoped Entity read with its actual target and reader.
+     *
+     * @param wire Current child Query.
+     * @param enclosing Application Query using this read.
+     * @param target Registered producing Entity route.
+     * @param reader Verified invocation facts.
+     * @param tenant Admitted destination tenant, if multitenant.
+     * @param signal Current cancellation signal.
+     * @returns Detached policy context for the producing Bounded Context.
+     */
+    #childReadContext(wire, enclosing, target, reader, tenant, signal) {
+        return {
+            operation: { kind: "query", query: wire },
+            enclosingAppQuery: enclosing,
+            ...(wire.context === undefined ? {} : { actorContext: wire.context }),
+            ...(tenant === undefined ? {} : { effectiveTenant: tenant }),
+            producingContext: target.context,
+            ...reader,
+            ...(signal === undefined ? {} : { signal }),
+        };
+    }
+    /**
+     * Checks target tenancy before a scoped Entity read.
+     *
+     * @param target Registered target selected by state schema.
+     * @param wire Query carrying the effective actor and tenant.
+     * @returns The resolved tenant scope for destination lookup.
+     */
+    async #admitTenant(target, wire) {
+        const tenantId = wire.context?.tenantId;
+        if (target.context.isMultitenant && tenantId === undefined)
+            throw this.#readStatus(ReadRequestStatus.tenant("TENANT_REQUIRED", "Tenant is required for this query."));
+        if (!target.context.isMultitenant && tenantId !== undefined)
+            throw this.#readStatus(ReadRequestStatus.tenant("TENANT_INAPPLICABLE", "Tenant is not applicable for this query."));
+        const effective = EffectiveTenants.current(target.context.isMultitenant, tenantId);
+        try {
+            await boundedContextAccess.admitServiceInput(target.context, tenantId, () => TenantAdmissions.require(target.context.tenantIndex, target.context.name.value, target.context.isMultitenant, tenantId));
+        }
+        catch (error) {
+            if (error instanceof TenantUnknownError)
+                throw this.#readStatus(ReadRequestStatus.unknownTenant(error));
+            throw error;
+        }
+        return effective;
+    }
+    /**
+     * Marks a status produced by Server read admission for safe propagation.
+     *
+     * @param error Structured read failure from this execution scope.
+     * @returns The same status for throwing through the handler boundary.
+     */
+    #readStatus(error) {
+        this.#readStatuses.add(error);
+        return error;
+    }
+    /**
+     * Stops a canceled invocation before more handler or read work occurs.
+     *
+     * @param signal Current cancellation signal, when supplied.
+     */
+    #checkCanceled(signal) {
+        if (signal?.aborted)
+            throw new ConnectError("App Query was canceled.", Code.Canceled);
+    }
+    /**
+     * Rejects malformed known request bytes before invoking a handler.
+     *
+     * @param route Selected handler and generated request schema.
+     * @param query Validated App Query envelope.
+     * @returns Decoded generated Q message.
+     */
+    #decode(route, query) {
+        try {
+            if (query.message === undefined)
+                throw new Error("Missing App Query message.");
+            return fromBinary(route.description.querySchema, query.message.value);
+        }
+        catch {
+            throw ReadRequestStatus.invalid("query", false, "App Query payload is malformed.");
+        }
+    }
+}
+//# sourceMappingURL=app-query-execution.js.map

package/dist/services/app-query-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-query-execution.js","sourceRoot":"","sources":["../../src/services/app-query-execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAmC,MAAM,oBAAoB,CAAC;AAEhG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAEpG,OAAO,EACL,qBAAqB,GAEtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,YAAY,GAGb,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,aAAa,GAGd,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAwB,MAAM,iCAAiC,CAAC;AACxF,OAAO,EACL,sBAAsB,GAEvB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAIhE,OAAO,EAAE,iBAAiB,EAAyB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAW3E;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACnB,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE/C,QAAQ,GAAG,KAAK,CAAC;IAER,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAExC,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE7C,QAAQ,CAAoB;IAE5B,cAAc,CAAmC;IAEjD,aAAa,GAAG,IAAI,OAAO,EAAgB,CAAC;IAErD;;;;;;OAMG;IACH,YACE,QAAoD,EACpD,OAA0B,EAC1B,aAAoC;QAEpC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,MAAM,YAAY,GAAG,sBAAsB,CAAC,aAAa,CACvD,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAiD,CAAC,CACrF,CAAC;QACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;gBAAE,SAAS;YACjE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,GAAG,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CACL,KAAe,EACf,MAA4B,EAC5B,MAAoB;QAEpB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,KAAe,EACf,MAA4B,EAC5B,MAA+B,EAC/B,OAAgB;QAEhB,IAAI,IAAI,CAAC,QAAQ;YACf,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,gCAAgC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,IAAI,CAAC,IAAI,CACZ,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAC/B,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,CACR,KAAe,EACf,MAA4B,EAC5B,MAAoB,EACpB,OAAO,GAAG,IAAI;QAEd,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,OAAU,EACV,KAAmB,EACnB,MAA4B,EAC5B,MAAoB;QAEpB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,iCAAiC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,EAAE;YACtC,EAAE,EAAE,MAAM,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;YAClD,OAAO,EAAE,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC;YACzC,OAAO;SACR,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,IAAI,YAAY,CAAC,gCAAgC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,cAAc,CAA2B,CAAC;IAC9F,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,KAAe;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC3C,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CACJ,KAAe,EACf,MAA4B,EAC5B,MAAoB;QAEpB,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAC7B,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,gCAAgC,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAC5C,KAAK,EACL,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAC7E,KAAK,CACN,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CACN,KAAa,EACb,KAAmB,EACnB,MAA4B,EAC5B,MAAoB;QAEpB,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,YAAY,EAAE,KAAK;YACnB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3F,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAE3C;;;;;;;eAOG;YACH,MAAM,CACJ,WAA+C;gBAE/C,OAAO,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,KAAiB,EAAE,OAAgB,EAAE,OAAwB;QACzE,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAgB,EAAE,OAAO,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,KAAK,YAAY,YAAY,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChF,MAAM,iBAAiB,CAAC,SAAS,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,CACb,KAAiB,EACjB,MAAe,EACf,KAAe,EACf,MAA4B,EAC5B,MAA+B,EAC/B,OAAgB;QAEhB,IAAK,MAA8B,EAAE,SAAS,KAAK,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ;YAC1F,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3F,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,sBAAsB,EAAE;gBACpC,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE;oBAC/B,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;iBACpE,CAAC;gBACF,OAAO,EACL,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,gCAAgC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAiB,EACjB,MAAe,EACf,KAAe,EACf,MAA4B,EAC5B,MAA+B,EAC/B,OAAgB;QAEhB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACjE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE;gBAC/E,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;gBACjD,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAChD,GAAG,MAAM;gBACT,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,iBAAiB,CAAC,SAAS,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CACT,IAAqB,EACrB,MAAc,EACd,IAAW,EACX,SAAmB,EACnB,MAA4B,EAC5B,MAAoB;QAEpB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,IAAI,CAAC,WAAW,CACpB,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,qCAAqC,CAAC,CAChF,CAAC;QACJ,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,MAAM;YACjD,MAAM,IAAI,CAAC,WAAW,CACpB,IAAI,YAAY,CAAC,qCAAqC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAC/E,CAAC;QACJ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CACnC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EACtB,MAAM,EACN,IAAI,EACJ,WAAW,EACX,yBAAyB,EACzB,IAAI,EACJ,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAC7E,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;;;;OAUG;IACH,iBAAiB,CACf,IAAW,EACX,SAAmB,EACnB,MAAwB,EACxB,MAA4B,EAC5B,MAA4B,EAC5B,MAAoB;QAEpB,OAAO;YACL,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;YACzC,iBAAiB,EAAE,SAAS;YAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;YAC5D,gBAAgB,EAAE,MAAM,CAAC,OAAO;YAChC,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,MAAwB,EAAE,IAAW;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,KAAK,SAAS;YACxD,MAAM,IAAI,CAAC,WAAW,CACpB,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAClF,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,QAAQ,KAAK,SAAS;YACzD,MAAM,IAAI,CAAC,WAAW,CACpB,iBAAiB,CAAC,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAC5F,CAAC;QACJ,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAC1E,gBAAgB,CAAC,OAAO,CACtB,MAAM,CAAC,OAAO,CAAC,WAAW,EAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EACzB,MAAM,CAAC,OAAO,CAAC,aAAa,EAC5B,QAAQ,CACT,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB;gBACrC,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,KAAmB;QAC7B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,MAAoB;QACjC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,KAAiB,EAAE,KAAe;QACxC,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC/E,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,iCAAiC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF"}

package/dist/services/native-operation.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Host-managed lifetime spanning native authentication and all output.
+ */
+export declare class NativeOperation {
+    #private;
+    /**
+     * Starts one native invocation before its authenticator runs.
+     *
+     * @param transport Incoming peer cancellation.
+     * @param shutdown Local host shutdown.
+     */
+    constructor(transport: AbortSignal, shutdown: AbortSignal);
+    /**
+     * Returns the signal used by admission, filters, backend work and output guards.
+     *
+     * @returns Effective operation cancellation.
+     */
+    get signal(): AbortSignal;
+    /**
+     * Captures the authenticator's process-local invalidation signal once.
+     *
+     * @param invalidated Optional authenticated session invalidation.
+     */
+    link(invalidated?: AbortSignal): void;
+    /**
+     * Rejects side effects or output after any linked cancellation.
+     */
+    check(): void;
+    /**
+     * Closes the invocation even when its transport peer remains connected.
+     */
+    close(): void;
+}
+//# sourceMappingURL=native-operation.d.ts.map

package/dist/services/native-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-operation.d.ts","sourceRoot":"","sources":["../../src/services/native-operation.ts"],"names":[],"mappings":"AAgBA;;GAEG;AACH,qBAAa,eAAe;;IAS1B;;;;;OAKG;gBACS,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW;IAQzD;;;;OAIG;IACH,IAAI,MAAM,IAAI,WAAW,CAExB;IAED;;;;OAIG;IACH,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI;IAMrC;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,KAAK,IAAI,IAAI;CAUd"}

package/dist/services/native-operation.js

@@ -0,0 +1,77 @@
+/*
+ * Copyright 2026, CodeMatters. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+/**
+ * Host-managed lifetime spanning native authentication and all output.
+ */
+export class NativeOperation {
+    #controller = new AbortController();
+    #transport;
+    #shutdown;
+    #invalidated;
+    /**
+     * Starts one native invocation before its authenticator runs.
+     *
+     * @param transport Incoming peer cancellation.
+     * @param shutdown Local host shutdown.
+     */
+    constructor(transport, shutdown) {
+        this.#transport = transport;
+        this.#shutdown = shutdown;
+        transport.addEventListener("abort", this.#abort, { once: true });
+        shutdown.addEventListener("abort", this.#abort, { once: true });
+        if (transport.aborted || shutdown.aborted)
+            this.#abort();
+    }
+    /**
+     * Returns the signal used by admission, filters, backend work and output guards.
+     *
+     * @returns Effective operation cancellation.
+     */
+    get signal() {
+        return this.#controller.signal;
+    }
+    /**
+     * Captures the authenticator's process-local invalidation signal once.
+     *
+     * @param invalidated Optional authenticated session invalidation.
+     */
+    link(invalidated) {
+        this.#invalidated = invalidated;
+        invalidated?.addEventListener("abort", this.#abort, { once: true });
+        if (invalidated?.aborted)
+            this.#abort();
+    }
+    /**
+     * Rejects side effects or output after any linked cancellation.
+     */
+    check() {
+        if (this.signal.aborted)
+            throw new ConnectError("Reader operation cancelled.", Code.Canceled);
+    }
+    /**
+     * Closes the invocation even when its transport peer remains connected.
+     */
+    close() {
+        this.#abort();
+        this.#transport.removeEventListener("abort", this.#abort);
+        this.#shutdown.removeEventListener("abort", this.#abort);
+        this.#invalidated?.removeEventListener("abort", this.#abort);
+    }
+    #abort = () => {
+        if (!this.#controller.signal.aborted)
+            this.#controller.abort();
+    };
+}
+//# sourceMappingURL=native-operation.js.map

package/dist/services/native-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-operation.js","sourceRoot":"","sources":["../../src/services/native-operation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;GAEG;AACH,MAAM,OAAO,eAAe;IACjB,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAEpC,UAAU,CAAc;IAExB,SAAS,CAAc;IAEhC,YAAY,CAA0B;IAEtC;;;;;OAKG;IACH,YAAY,SAAsB,EAAE,QAAqB;QACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,SAAS,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;YAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,WAAyB;QAC5B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,WAAW,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,WAAW,EAAE,OAAO;YAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAEQ,MAAM,GAAG,GAAS,EAAE;QAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IACjE,CAAC,CAAC;CACH"}

package/dist/services/query-reader.d.ts

@@ -2,18 +2,43 @@ import type { MessageSchema } from "@spine-event-engine/core";
 import type { TenantId } from "@spine-event-engine/proto";
 import { type Query } from "@spine-event-engine/proto/client";
 import type { NormalizedQueryPlan } from "@spine-event-engine/storage";
-import type { Stand, StandReadResult } from "../stand/stand.js";
+import { type Stand, type StandReadResult } from "../stand/stand.js";
+import type { ReadSideContext } from "../stand/read-side-filter.js";
+/**
+ * Callback notified when a typed Stand query is read.
+ */
 type QueryReaderObserver = (query: Readonly<Query>) => void;
+/**
+ * Describes typed Stand queries and the testing-only read observer.
+ */
+interface QueryReaderAccess {
+    /**
+     * Reads a typed state through its Stand while retaining the actual query context.
+     * @typeParam Schema Registered state schema.
+     * @param stand Context read facade.
+     * @param schema Requested state schema.
+     * @param plan Normalized storage plan.
+     * @param tenantId Effective tenant.
+     * @param candidateLimit Existing query candidate limit.
+     * @param query Original submitted Query, if present.
+     * @param readSide Trusted invocation context, if present.
+     * @returns Visible state records.
+     */
+    read<Schema extends MessageSchema>(stand: Stand, schema: Schema, plan: NormalizedQueryPlan<unknown>, tenantId: TenantId | undefined, candidateLimit: number, query?: Query, readSide?: ReadSideContext): Promise<readonly StandReadResult<Schema>[]>;
+    /**
+     * Observes original queries for tests without changing read execution.
+     * @param onRead Observer called with a detached Query.
+     * @returns Handle that removes this observer.
+     */
+    observe(onRead: QueryReaderObserver): {
+        readonly close: () => void;
+    };
+}
 /**
  * Executes normalized Entity query plans against a Stand and exposes a testing-only read observer.
  *
  * @internal
  */
-export declare const QueryReader: Readonly<{
-    readonly read: <Schema extends MessageSchema>(stand: Stand, schema: Schema, plan: NormalizedQueryPlan<unknown>, tenantId: TenantId | undefined, candidateLimit: number, query?: Query) => Promise<readonly StandReadResult<Schema>[]>;
-    readonly observe: (onRead: QueryReaderObserver) => {
-        readonly close: () => void;
-    };
-}>;
+export declare const QueryReader: Readonly<QueryReaderAccess>;
 export {};
 //# sourceMappingURL=query-reader.d.ts.map