@substrat-run/contracts 0.159.0 → 0.160.0

package/dist/attachments.d.ts

@@ -35,6 +35,61 @@ export declare const attachmentRecord: z.ZodObject<{
     createdAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
 }, z.core.$strip>;
 export type AttachmentRecord = z.infer<typeof attachmentRecord>;
+/**
+ * A record without what only its bytes can say (#2498): an upload judges these fields before it
+ * writes a byte, and a streamed body's `size` and `sha256` are known only once it has been read.
+ */
+export declare const attachmentRecordFields: z.ZodObject<{
+    id: z.ZodString;
+    entity: z.ZodObject<{
+        entityType: z.ZodString;
+        entityId: z.ZodString;
+    }, z.core.$strip>;
+    filename: z.ZodString;
+    contentType: z.ZodString;
+    visibility: z.ZodEnum<{
+        customer: "customer";
+        internal: "internal";
+    }>;
+    createdBy: z.ZodString;
+    createdAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+}, z.core.$strip>;
+/** The fields as a caller hands them over, before they are judged. */
+export type AttachmentRecordFields = z.input<typeof attachmentRecordFields>;
+/**
+ * The longest each caller-supplied string of a NEW attachment may be, in UTF-16 units (#2519). A
+ * connector reads a record back through a response header, where a non-ASCII unit costs up to 6
+ * bytes escaped, so the strings it carries are bounded where the record is made: at 512 + 255 +
+ * 128 + 255 + 128 units the record is under 8.2 KiB. 512 keeps a realistic 400-character path
+ * storable. {@link attachmentRecord} itself is NOT capped: it is also what a stored row is parsed
+ * against, and a row written before these bounds must stay readable.
+ */
+export declare const ATTACHMENT_FIELD_MAX: {
+    readonly filename: 512;
+    readonly contentType: 255;
+    readonly entityType: 128;
+    readonly entityId: 255;
+    readonly createdBy: 128;
+};
+/**
+ * {@link attachmentRecordFields} as an upload judges it: the same fields, each bounded by
+ * {@link ATTACHMENT_FIELD_MAX}. One judge for every door that stores an attachment.
+ */
+export declare const attachmentUploadFields: z.ZodObject<{
+    id: z.ZodString;
+    visibility: z.ZodEnum<{
+        customer: "customer";
+        internal: "internal";
+    }>;
+    createdAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+    entity: z.ZodObject<{
+        entityType: z.ZodString;
+        entityId: z.ZodString;
+    }, z.core.$strip>;
+    filename: z.ZodString;
+    contentType: z.ZodString;
+    createdBy: z.ZodString;
+}, z.core.$strip>;
 /**
  * The spine events attachment mutations emit (#473) — kernel-emitted, fat payload (the
  * full `attachmentRecord`), so a consumer (a timeline projection, attachment GC) never
@@ -225,4 +280,51 @@ export declare const attachmentUploadLinkRevokedPayload: z.ZodObject<{
     revokedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
 }, z.core.$strip>;
 export type AttachmentUploadLinkRevokedPayload = z.infer<typeof attachmentUploadLinkRevokedPayload>;
+/**
+ * How many bytes a connector upload's metadata takes on the wire: its JSON, URI-encoded, which is
+ * what the stream route's header carries. The multipart route carries the same JSON in a field and
+ * is held to the same count, taken WITHOUT the stream route's `size` member, so one filename is
+ * accepted or refused the same way on both (#2516).
+ */
+export declare function connectorAttachmentMetaBytes(metaJson: string): number;
+/** The one sentence every end uses to refuse metadata over {@link CONNECTOR_ATTACHMENT_META_MAX_BYTES}. */
+export declare function connectorAttachmentMetaRefusal(bytes: number): string;
+/**
+ * The most bytes one streamed connector upload may carry (#2516). Streaming took the worker's
+ * memory out of the limit, which left nothing bounding a file; this is that bound, held where the
+ * bytes arrive (the stream route) and again by the platform before it sends, so a file too large
+ * is refused with an answer before anything is read or stored. The platform reaches the route
+ * through the dispatch namespace, not a zone's edge; the value is kept under 100 MB decimal (about
+ * 95.4 MiB), the lowest plan's Workers request-body limit, so that the same file is also one a
+ * deployment reached directly by a public request could take.
+ */
+export declare const CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES: number;
+/**
+ * The most bytes one BUFFERED connector upload may carry (#2538): the multipart route's file part,
+ * and the platform client's `Uint8Array` body. Lower than {@link CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES}
+ * because that one is a request-size limit and this one is a memory limit: a stream is never held, but
+ * a buffered file is resident several times over at once (the raw body, the parsed form's copy, then
+ * the bytes handed on; on the platform side the caller's buffer, the form's copy, the encoded request
+ * and the copy read to bind its digest) against a 128 MB isolate. The platform side is the tighter, at
+ * about four times the file (an estimate, not a measurement), so 16 MiB (about 64 MiB resident) keeps
+ * twice that in hand; it is below the buffered upload-link cap ({@link UPLOAD_LINK_MAX_BYTES_CEILING}).
+ * Above it a caller sends a streamed upload, which is the route for a large file.
+ */
+export declare const CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES: number;
+/**
+ * What the multipart route's body may carry beyond the file (#2538): the `meta` field (at most
+ * {@link CONNECTOR_ATTACHMENT_META_MAX_BYTES} once encoded, never more raw), the part headers and
+ * the boundaries, with room to spare. A body over the buffered bound plus this is refused unread.
+ */
+export declare const CONNECTOR_ATTACHMENT_MULTIPART_ENVELOPE_BYTES: number;
+/** The one sentence every end uses to refuse a declared size over {@link CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES}. */
+export declare function connectorAttachmentSizeRefusal(declared: number): string;
+/** The sentence for a buffered file over {@link CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES}: its own bytes, once known. */
+export declare function connectorAttachmentBufferedRefusal(bytes: number): string;
+/**
+ * The sentence for a multipart BODY refused before its file part could be told apart: a
+ * `Content-Length` over the bound plus the envelope (`bytes` is that header), or a body cut off while
+ * it was read (`bytes` omitted: nobody declared a size). Names the body, not the attachment.
+ */
+export declare function connectorAttachmentBodyRefusal(bytes?: number): string;
 //# sourceMappingURL=attachments.d.ts.map

package/dist/attachments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,UAAU;;;EAAmC,CAAC;AAC3D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;iBAe3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAevD,kGAAkG;AAClG,eAAO,MAAM,yBAAyB,UAAU,CAAC;AACjD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,QAA6B,CAAC;AACnE,2FAA2F;AAC3F,eAAO,MAAM,uBAAuB,WAAY,OAAO,KAAG,MAAM,IAAI,MACC,CAAC;AACtE,+DAA+D;AAC/D,eAAO,MAAM,+BAA+B,MAAM,CAAC;AACnD,+DAA+D;AAC/D,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAChD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D,yGAAyG;AACzG,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,oBAAoB,CAAC;AAChE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,QAAuC,CAAC;AACtF,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAS,OAAO,KAAG,GAAG,IAAI,MACO,CAAC;AACzE;;;GAGG;AACH,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAEpD,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,aAG8G,CAAC;AAEjJ;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,aAKoC,CAAC;AAEpE,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;kBAUrB,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,+HAA+H;AAC/H,wBAAgB,cAAc,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvG;AAED,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,eAAO,MAAM,eAAe;;;;;EAAwD,CAAC;AACrF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,sEAAsE;AACtE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;iBAc3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,gEAAgE;AAChE,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAC7E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AACjF,6CAA6C;AAC7C,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAE/E,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;iBAS5C,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAElG,eAAO,MAAM,mCAAmC;;;;;;;;;;iBAO9C,CAAC;AACH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEtG,eAAO,MAAM,kCAAkC;;;;;;;iBAI7C,CAAC;AACH,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC"}
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,UAAU;;;EAAmC,CAAC;AAC3D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;iBAe3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;iBAAsD,CAAC;AAC1F,sEAAsE;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB;aAC/B,QAAQ,EAAE,GAAG;aACb,WAAW,EAAE,GAAG;aAChB,UAAU,EAAE,GAAG;aACf,QAAQ,EAAE,GAAG;aACb,SAAS,EAAE,GAAG;CACN,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;iBAQjC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAevD,kGAAkG;AAClG,eAAO,MAAM,yBAAyB,UAAU,CAAC;AACjD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,QAA6B,CAAC;AACnE,2FAA2F;AAC3F,eAAO,MAAM,uBAAuB,WAAY,OAAO,KAAG,MAAM,IAAI,MACC,CAAC;AACtE,+DAA+D;AAC/D,eAAO,MAAM,+BAA+B,MAAM,CAAC;AACnD,+DAA+D;AAC/D,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAChD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D,yGAAyG;AACzG,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,oBAAoB,CAAC;AAChE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,QAAuC,CAAC;AACtF,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAS,OAAO,KAAG,GAAG,IAAI,MACO,CAAC;AACzE;;;GAGG;AACH,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAEpD,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,aAG8G,CAAC;AAEjJ;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,aAKoC,CAAC;AAEpE,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;kBAYrB,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,+HAA+H;AAC/H,wBAAgB,cAAc,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvG;AAED,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,eAAO,MAAM,eAAe;;;;;EAAwD,CAAC;AACrF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,sEAAsE;AACtE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;iBAc3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,gEAAgE;AAChE,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAC7E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AACjF,6CAA6C;AAC7C,eAAO,MAAM,8BAA8B,mCAAmC,CAAC;AAE/E,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;iBAS5C,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAElG,eAAO,MAAM,mCAAmC;;;;;;;;;;iBAO9C,CAAC;AACH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEtG,eAAO,MAAM,kCAAkC;;;;;;;iBAI7C,CAAC;AACH,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAIpG;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,2GAA2G;AAC3G,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC,QAAmB,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uCAAuC,QAAmB,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,6CAA6C,QAAY,CAAC;AAEvE,oHAAoH;AACpH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvE;AAED,wHAAwH;AACxH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxE;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAMrE"}

package/dist/attachments.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { entityRef } from './events.js';
 import { instant, principalId } from './ids.js';
+import { CONNECTOR_ATTACHMENT_META_MAX_BYTES } from './wire-headers.js';
 // Visibility classification for attachment items — documents, comments,
 // custom-field values (K-13). Mandatory wherever data can reach the customer
 // portal: like piiClass on events, a classification is only total if it was
@@ -36,6 +37,39 @@ export const attachmentRecord = z.object({
     createdBy: z.string().min(1),
     createdAt: instant,
 });
+/**
+ * A record without what only its bytes can say (#2498): an upload judges these fields before it
+ * writes a byte, and a streamed body's `size` and `sha256` are known only once it has been read.
+ */
+export const attachmentRecordFields = attachmentRecord.omit({ size: true, sha256: true });
+/**
+ * The longest each caller-supplied string of a NEW attachment may be, in UTF-16 units (#2519). A
+ * connector reads a record back through a response header, where a non-ASCII unit costs up to 6
+ * bytes escaped, so the strings it carries are bounded where the record is made: at 512 + 255 +
+ * 128 + 255 + 128 units the record is under 8.2 KiB. 512 keeps a realistic 400-character path
+ * storable. {@link attachmentRecord} itself is NOT capped: it is also what a stored row is parsed
+ * against, and a row written before these bounds must stay readable.
+ */
+export const ATTACHMENT_FIELD_MAX = {
+    filename: 512,
+    contentType: 255,
+    entityType: 128,
+    entityId: 255,
+    createdBy: 128,
+};
+/**
+ * {@link attachmentRecordFields} as an upload judges it: the same fields, each bounded by
+ * {@link ATTACHMENT_FIELD_MAX}. One judge for every door that stores an attachment.
+ */
+export const attachmentUploadFields = attachmentRecordFields.extend({
+    entity: z.object({
+        entityType: z.string().min(1).max(ATTACHMENT_FIELD_MAX.entityType),
+        entityId: z.string().min(1).max(ATTACHMENT_FIELD_MAX.entityId),
+    }),
+    filename: z.string().min(1).max(ATTACHMENT_FIELD_MAX.filename),
+    contentType: z.string().min(1).max(ATTACHMENT_FIELD_MAX.contentType),
+    createdBy: z.string().min(1).max(ATTACHMENT_FIELD_MAX.createdBy),
+});
 /**
  * The spine events attachment mutations emit (#473) — kernel-emitted, fat payload (the
  * full `attachmentRecord`), so a consumer (a timeline projection, attachment GC) never
@@ -124,7 +158,9 @@ export const uploadLinkFilename = z
 /** `ctx.attachments.mintUploadUrl`'s input. */
 export const uploadLinkMintInput = z
     .object({
-    entity: entityRef,
+    // Bounded like an upload (#2519): a link for an entity no redemption could store is refused
+    // at the mint, to the minter, not at the redemption, to the uploader.
+    entity: attachmentUploadFields.shape.entity,
     /** Fixes the stored name. Absent: the uploader names the file (`?filename=` or `Content-Disposition`). */
     filename: uploadLinkFilename.optional(),
     /** Narrows the target's `maxBytes`; a larger value is refused, not clamped. */
@@ -187,4 +223,67 @@ export const attachmentUploadLinkRevokedPayload = z.object({
     entity: entityRef,
     revokedBy: principalId,
 });
+// -- connector upload bounds (#2516) --------------------------------------------
+/**
+ * How many bytes a connector upload's metadata takes on the wire: its JSON, URI-encoded, which is
+ * what the stream route's header carries. The multipart route carries the same JSON in a field and
+ * is held to the same count, taken WITHOUT the stream route's `size` member, so one filename is
+ * accepted or refused the same way on both (#2516).
+ */
+export function connectorAttachmentMetaBytes(metaJson) {
+    return encodeURIComponent(metaJson).length;
+}
+/** The one sentence every end uses to refuse metadata over {@link CONNECTOR_ATTACHMENT_META_MAX_BYTES}. */
+export function connectorAttachmentMetaRefusal(bytes) {
+    return (`the attachment's metadata is ${bytes} bytes once encoded, over the ` +
+        `${CONNECTOR_ATTACHMENT_META_MAX_BYTES}-byte bound a connector upload carries it in — shorten the filename`);
+}
+/**
+ * The most bytes one streamed connector upload may carry (#2516). Streaming took the worker's
+ * memory out of the limit, which left nothing bounding a file; this is that bound, held where the
+ * bytes arrive (the stream route) and again by the platform before it sends, so a file too large
+ * is refused with an answer before anything is read or stored. The platform reaches the route
+ * through the dispatch namespace, not a zone's edge; the value is kept under 100 MB decimal (about
+ * 95.4 MiB), the lowest plan's Workers request-body limit, so that the same file is also one a
+ * deployment reached directly by a public request could take.
+ */
+export const CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES = 95 * 1024 * 1024;
+/**
+ * The most bytes one BUFFERED connector upload may carry (#2538): the multipart route's file part,
+ * and the platform client's `Uint8Array` body. Lower than {@link CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES}
+ * because that one is a request-size limit and this one is a memory limit: a stream is never held, but
+ * a buffered file is resident several times over at once (the raw body, the parsed form's copy, then
+ * the bytes handed on; on the platform side the caller's buffer, the form's copy, the encoded request
+ * and the copy read to bind its digest) against a 128 MB isolate. The platform side is the tighter, at
+ * about four times the file (an estimate, not a measurement), so 16 MiB (about 64 MiB resident) keeps
+ * twice that in hand; it is below the buffered upload-link cap ({@link UPLOAD_LINK_MAX_BYTES_CEILING}).
+ * Above it a caller sends a streamed upload, which is the route for a large file.
+ */
+export const CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES = 16 * 1024 * 1024;
+/**
+ * What the multipart route's body may carry beyond the file (#2538): the `meta` field (at most
+ * {@link CONNECTOR_ATTACHMENT_META_MAX_BYTES} once encoded, never more raw), the part headers and
+ * the boundaries, with room to spare. A body over the buffered bound plus this is refused unread.
+ */
+export const CONNECTOR_ATTACHMENT_MULTIPART_ENVELOPE_BYTES = 16 * 1024;
+/** The one sentence every end uses to refuse a declared size over {@link CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES}. */
+export function connectorAttachmentSizeRefusal(declared) {
+    return (`the attachment declares ${declared} bytes, over the ${CONNECTOR_ATTACHMENT_STREAM_MAX_BYTES}-byte ` +
+        `bound on a streamed connector upload`);
+}
+/** The sentence for a buffered file over {@link CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES}: its own bytes, once known. */
+export function connectorAttachmentBufferedRefusal(bytes) {
+    return (`the attachment is ${bytes} bytes, over the ${CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES}-byte bound ` +
+        `on a buffered connector upload — use the streaming upload above ${CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES / (1024 * 1024)} MiB`);
+}
+/**
+ * The sentence for a multipart BODY refused before its file part could be told apart: a
+ * `Content-Length` over the bound plus the envelope (`bytes` is that header), or a body cut off while
+ * it was read (`bytes` omitted: nobody declared a size). Names the body, not the attachment.
+ */
+export function connectorAttachmentBodyRefusal(bytes) {
+    const bound = CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES + CONNECTOR_ATTACHMENT_MULTIPART_ENVELOPE_BYTES;
+    return ((bytes === undefined ? `the request body ran past the ${bound}-byte bound` : `the request body is ${bytes} bytes, over the ${bound}-byte bound`) +
+        ` on a buffered connector upload (the file plus its multipart envelope) — use the streaming upload above ${CONNECTOR_ATTACHMENT_BUFFERED_MAX_BYTES / (1024 * 1024)} MiB`);
+}
 //# sourceMappingURL=attachments.js.map

package/dist/attachments.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEhD,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,6BAA6B;AAE7B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAG3D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,6DAA6D;IAC7D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,+FAA+F;IAC/F,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,uCAAuC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,6EAA6E;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,UAAU;IACV,wFAAwF;IACxF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,8EAA8E;AAC9E,wFAAwF;AACxF,yFAAyF;AACzF,yDAAyD;AACzD,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,oFAAoF;AACpF,0FAA0F;AAC1F,yFAAyF;AACzF,sFAAsF;AACtF,8EAA8E;AAE9E,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AACjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AACnE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAe,EAAoB,EAAE,CAC3E,OAAO,MAAM,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACtE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAChD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,yGAAyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC;AAChE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,oCAAoC,CAAC;AACtF,oGAAoG;AACpG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAY,EAAiB,EAAE,CACxE,OAAO,GAAG,KAAK,QAAQ,IAAI,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,iEAAiE,EAAE,mEAAmE,CAAC,CAAC;AAEjJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACxE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;IACT,4CAA4C;KAC3C,KAAK,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,SAAS;IACjB,0GAA0G;IAC1G,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACnF,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,+HAA+H;AAC/H,MAAM,UAAU,cAAc,CAAC,MAAgD,EAAE,MAAc;IAC7F,OAAO,GAAG,uBAAuB,IAAI,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;AAChI,CAAC;AAcD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAGrF,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACvD,UAAU;IACV,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,OAAO;IAClB,KAAK,EAAE,eAAe;IACtB,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,sFAAsF;IACtF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAYH,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAC7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AACjF,6CAA6C;AAC7C,MAAM,CAAC,MAAM,8BAA8B,GAAG,gCAAgC,CAAC;AAE/E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACvD,UAAU;IACV,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,SAAS;IACjB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,SAAS;IACjB,SAAS,EAAE,WAAW;CACvB,CAAC,CAAC"}
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,mCAAmC,EAAE,MAAM,mBAAmB,CAAC;AAExE,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,6BAA6B;AAE7B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAG3D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,6DAA6D;IAC7D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,+FAA+F;IAC/F,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,uCAAuC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,6EAA6E;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,UAAU;IACV,wFAAwF;IACxF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAI1F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ,EAAE,GAAG;IACb,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;CACN,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAClE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAClE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC;KAC/D,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,WAAW,CAAC;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;CACjE,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,8EAA8E;AAC9E,wFAAwF;AACxF,yFAAyF;AACzF,yDAAyD;AACzD,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,oFAAoF;AACpF,0FAA0F;AAC1F,yFAAyF;AACzF,sFAAsF;AACtF,8EAA8E;AAE9E,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AACjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AACnE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAe,EAAoB,EAAE,CAC3E,OAAO,MAAM,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACtE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAChD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,yGAAyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC;AAChE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,oCAAoC,CAAC;AACtF,oGAAoG;AACpG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAY,EAAiB,EAAE,CACxE,OAAO,GAAG,KAAK,QAAQ,IAAI,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzE;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,iEAAiE,EAAE,mEAAmE,CAAC,CAAC;AAEjJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACxE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;IACT,4CAA4C;KAC3C,KAAK,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,4FAA4F;IAC5F,sEAAsE;IACtE,MAAM,EAAE,sBAAsB,CAAC,KAAK,CAAC,MAAM;IAC3C,0GAA0G;IAC1G,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC,+EAA+E;IAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACnF,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,+HAA+H;AAC/H,MAAM,UAAU,cAAc,CAAC,MAAgD,EAAE,MAAc;IAC7F,OAAO,GAAG,uBAAuB,IAAI,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;AAChI,CAAC;AAcD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAGrF,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACvD,UAAU;IACV,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,OAAO;IAClB,KAAK,EAAE,eAAe;IACtB,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC9B,sFAAsF;IACtF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAYH,gEAAgE;AAChE,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAC7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AACjF,6CAA6C;AAC7C,MAAM,CAAC,MAAM,8BAA8B,GAAG,gCAAgC,CAAC;AAE/E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACvD,UAAU;IACV,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,SAAS;IACjB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,SAAS;IACjB,SAAS,EAAE,WAAW;CACvB,CAAC,CAAC;AAGH,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO,CACL,gCAAgC,KAAK,gCAAgC;QACrE,GAAG,mCAAmC,qEAAqE,CAC5G,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvE,oHAAoH;AACpH,MAAM,UAAU,8BAA8B,CAAC,QAAgB;IAC7D,OAAO,CACL,2BAA2B,QAAQ,oBAAoB,qCAAqC,QAAQ;QACpG,sCAAsC,CACvC,CAAC;AACJ,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,kCAAkC,CAAC,KAAa;IAC9D,OAAO,CACL,qBAAqB,KAAK,oBAAoB,uCAAuC,cAAc;QACnG,mEAAmE,uCAAuC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CACjI,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,MAAM,KAAK,GAAG,uCAAuC,GAAG,6CAA6C,CAAC;IACtG,OAAO,CACL,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,iCAAiC,KAAK,aAAa,CAAC,CAAC,CAAC,uBAAuB,KAAK,oBAAoB,KAAK,aAAa,CAAC;QAChJ,2GAA2G,uCAAuC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CACzK,CAAC;AACJ,CAAC"}