@substrat-run/control-plane-api 0.146.0 → 0.148.0

package/dist/platform-entry.d.ts

@@ -84,6 +84,28 @@ declared: {
  * and a later upload never re-declares one that is already live.
  */
 export declare function deployedDoClasses(doClasses: readonly string[], supplySweeper: boolean | undefined): string[];
+/** The flag that gives a script `node:async_hooks` and nothing else of node (#2245). */
+export declare const ASYNC_LOCAL_STORAGE_FLAG = "nodejs_als";
+/**
+ * The compatibility flags a wrapped script is uploaded with, and whether the platform entry
+ * may import `AsyncLocalStorage` (#2245, RFC §6: the request runs in one, so its store calls
+ * reach its line). The entry imports `node:async_hooks`, which workerd allows only under
+ * `nodejs_als` or `nodejs_compat`:
+ *
+ * - either flag already there: the flags go up exactly as declared;
+ * - neither: `nodejs_als` is appended, after the declared ones. It has no compatibility-date
+ *   gate, and it adds `node:async_hooks` alone — no other node module, no globals;
+ * - the script opts out with `no_nodejs_als`: the flags go up as declared and the entry drops
+ *   its import, so the upload never fails over it. With `nodejs_compat` beside the opt-out,
+ *   vertical-host still reaches `AsyncLocalStorage` through `process.getBuiltinModule` and the
+ *   line names the calls; with no `nodejs_compat` either, the line names no store calls.
+ *
+ * Existing flags are never removed or reordered.
+ */
+export declare function platformEntryFlags(declared: readonly string[] | undefined): {
+    flags: string[];
+    asyncLocalStorage: boolean;
+};
 /**
  * The bundle as uploaded: the platform's entry module added (or refreshed) and named as
  * the script's main module, importing the vertical's own entry — and, when the version's
@@ -94,5 +116,5 @@ export declare function deployedDoClasses(doClasses: readonly string[], supplySw
  * bundle the platform cannot or need not wrap comes back unchanged, apart from dropping stale
  * platform modules it can no longer reach.
  */
-export declare function withPlatformEntry<B extends Pick<VerticalBundle, 'entry' | 'modules'> & Partial<Pick<VerticalBundle, 'doClasses' | 'bindings' | 'supplySweeper'>>>(bundle: B): B;
+export declare function withPlatformEntry<B extends Pick<VerticalBundle, 'entry' | 'modules'> & Partial<Pick<VerticalBundle, 'doClasses' | 'bindings' | 'supplySweeper' | 'compatibilityFlags'>>>(bundle: B): B;
 //# sourceMappingURL=platform-entry.d.ts.map

package/dist/platform-entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-entry.d.ts","sourceRoot":"","sources":["../src/platform-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,qBAAqB,EAGrB,uBAAuB,EAExB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,CAAC;AAoB1D;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAc7G;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,uBAAuB;AACrC,qGAAqG;AACrG,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,EAC7G,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GAChD;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CA2D1C;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,aAAa,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,EAAE,CAE5G;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC,CAAC,EAC/H,MAAM,EAAE,CAAC,GAAG,CAAC,CA+Bd"}
+{"version":3,"file":"platform-entry.d.ts","sourceRoot":"","sources":["../src/platform-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAGL,qBAAqB,EAGrB,uBAAuB,EAExB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,CAAC;AAoB1D;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAc7G;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,uBAAuB;AACrC,qGAAqG;AACrG,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,EAC7G,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GAChD;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CA2D1C;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,aAAa,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,EAAE,CAE5G;AAED,wFAAwF;AACxF,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,EAAE,OAAO,CAAA;CAAE,CAK3H;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,oBAAoB,CAAC,CAAC,EAClG,MAAM,EAAE,CAAC,GAAG,CAAC,CAkCd"}

package/dist/platform-entry.generated.d.ts

@@ -7,8 +7,16 @@
 export declare const PLATFORM_ENTRY_MODULE = "substrat-platform-entry.js";
 /** The import specifier the uploader replaces with `./<the bundle's entry>`. */
 export declare const PLATFORM_ENTRY_PLACEHOLDER = "__SUBSTRAT_VERTICAL_ENTRY__";
-/** The entry itself — 10668 bytes of ESM. */
+/** The entry itself — 12959 bytes of ESM. */
 export declare const PLATFORM_ENTRY_SOURCE: string;
+/**
+ * #2245: the entry's `node:async_hooks` import, as it appears in `PLATFORM_ENTRY_SOURCE`, and
+ * the line the uploader puts in its place for a script that can have no `AsyncLocalStorage`
+ * (one that opts out with `no_nodejs_als`). With no `nodejs_compat` either, that script's line names
+ * no store calls; with it, vertical-host reaches the class through `process.getBuiltinModule`.
+ */
+export declare const PLATFORM_ENTRY_ALS_IMPORT = "import { AsyncLocalStorage } from \"node:async_hooks\";";
+export declare const PLATFORM_ENTRY_ALS_FALLBACK = "const AsyncLocalStorage = undefined;";
 /**
  * The scope sweeper the platform supplies (#1902) — uploaded beside the entry, which
  * re-exports its class, when a vertical declares schedules and brings no sweeper of its own.

package/dist/platform-entry.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-entry.generated.d.ts","sourceRoot":"","sources":["../src/platform-entry.generated.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAElE,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,gCAAgC,CAAC;AAExE,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,EAAE,MAA02V,CAAC;AAE/4V;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AAEtE,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,EAAE,MAA60T,CAAC"}
+{"version":3,"file":"platform-entry.generated.d.ts","sourceRoot":"","sources":["../src/platform-entry.generated.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAElE,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,gCAAgC,CAAC;AAExE,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,EAAE,MAA0qa,CAAC;AAE/sa;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,4DAA4D,CAAC;AACnG,eAAO,MAAM,2BAA2B,yCAAyC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AAEtE,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,EAAE,MAA60T,CAAC"}

package/dist/platform-entry.generated.js

@@ -9,8 +9,16 @@
 export const PLATFORM_ENTRY_MODULE = 'substrat-platform-entry.js';
 /** The import specifier the uploader replaces with `./<the bundle's entry>`. */
 export const PLATFORM_ENTRY_PLACEHOLDER = '__SUBSTRAT_VERTICAL_ENTRY__';
-/** The entry itself — 10668 bytes of ESM. */
-export const PLATFORM_ENTRY_SOURCE = "// packages/contracts/dist/invocation-record.js\nvar INVOCATION_RECORD_HEADER = \"x-substrat-invocation-record\";\nvar REQUEST_ID_HEADER = \"x-substrat-request-id\";\nvar INVOCATION_RECORD_FIELD_MAX = 128;\nvar FIELDS = [\"operation\", \"problemCode\", \"principalKind\"];\nfunction encodeInvocationRecord(record) {\n  const params = new URLSearchParams();\n  for (const key of FIELDS) {\n    const v = record[key];\n    if (typeof v === \"string\" && v !== \"\")\n      params.set(key, v.slice(0, INVOCATION_RECORD_FIELD_MAX));\n  }\n  const value = params.toString();\n  return value === \"\" ? null : value;\n}\nvar FIELD_COVERAGE_HEADER = \"x-substrat-field-coverage\";\nfunction invocationLevelOf(status, threw, problemCode) {\n  if (threw || status === null || status >= 500)\n    return \"error\";\n  if (status >= 400)\n    return \"warn\";\n  if (problemCode)\n    return \"warn\";\n  return \"info\";\n}\n\n// packages/kernel/dist/invocation-line.js\nfunction invocationLine(f) {\n  const emitted = f.emitted;\n  return {\n    substrat: \"invocation\",\n    ...f.kind ? { kind: f.kind } : {},\n    tenantId: f.tenantId,\n    scopeId: f.scopeId,\n    vertical: f.vertical ?? null,\n    surface: f.surface ?? null,\n    method: f.method ?? null,\n    path: f.path ?? null,\n    status: f.status ?? null,\n    threw: f.threw,\n    durationMs: f.durationMs,\n    invocationId: f.invocationId,\n    level: f.level,\n    operation: f.operation ?? null,\n    problemCode: f.problemCode ?? null,\n    principalKind: f.principalKind ?? null,\n    eventCount: emitted ? emitted.total : null,\n    eventTypes: emitted ? distinct(emitted.events.map((e) => e.type)) : [],\n    entities: emitted && f.withEntities !== false ? distinct(emitted.events.map((e) => e.entity)) : [],\n    versionId: f.versionId ?? null,\n    ...f.outputFields ? { outputFields: f.outputFields, ...f.fieldCoverageId ? { fieldCoverageId: f.fieldCoverageId } : {} } : {},\n    ...f.async ?? {}\n  };\n}\nfunction distinct(values) {\n  return [...new Set(values)];\n}\n\n// packages/kernel/dist/ulid.js\nvar B32 = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";\nvar MAX_ULID_TIME = 2 ** 48 - 1;\nvar ULID_SHAPE = /^[0-9A-HJKMNP-TV-Z]{26}$/;\nvar unencodable = (t) => `not an encodable ULID instant: ${t} (want 0..${MAX_ULID_TIME})`;\nfunction encodeTime(time) {\n  let ts = \"\";\n  let t = time;\n  for (let i = 0; i < 10; i++) {\n    ts = B32[t % 32] + ts;\n    t = Math.floor(t / 32);\n  }\n  return ts;\n}\nfunction createUlid() {\n  let lastTime = -1;\n  const lastRand = new Array(16).fill(0);\n  function freshRandom() {\n    const bytes = crypto.getRandomValues(new Uint8Array(16));\n    for (let i = 0; i < 16; i++)\n      lastRand[i] = bytes[i] % 32;\n  }\n  function incrementRandom() {\n    for (let i = 15; i >= 0; i--) {\n      if (lastRand[i] < 31) {\n        lastRand[i]++;\n        return true;\n      }\n      lastRand[i] = 0;\n    }\n    return false;\n  }\n  const mint = ((now = Date.now()) => {\n    if (!Number.isSafeInteger(now))\n      throw new RangeError(unencodable(now));\n    let time = now;\n    if (time <= lastTime) {\n      time = lastTime;\n      if (!incrementRandom()) {\n        time = lastTime + 1;\n        freshRandom();\n      }\n    } else {\n      freshRandom();\n    }\n    if (time < 0 || time > MAX_ULID_TIME)\n      throw new RangeError(unencodable(time));\n    lastTime = time;\n    let r = \"\";\n    for (const d of lastRand)\n      r += B32[d];\n    return encodeTime(time) + r;\n  });\n  mint.seedFrom = (id) => {\n    const time = ulidTime(id);\n    if (time < lastTime)\n      return;\n    const rand = [];\n    for (const ch of id.slice(10))\n      rand.push(B32.indexOf(ch));\n    if (time === lastTime) {\n      let ahead = false;\n      for (let i = 0; i < 16; i++) {\n        if (rand[i] !== lastRand[i]) {\n          ahead = rand[i] > lastRand[i];\n          break;\n        }\n      }\n      if (!ahead)\n        return;\n    }\n    lastTime = time;\n    for (let i = 0; i < 16; i++)\n      lastRand[i] = rand[i];\n  };\n  return mint;\n}\nvar processUlid = createUlid();\nfunction ulid(now = Date.now()) {\n  return processUlid(now);\n}\nfunction ulidTime(id) {\n  if (!ULID_SHAPE.test(id))\n    throw new Error(`not a ULID: ${id}`);\n  let t = 0;\n  for (const ch of id.slice(0, 10))\n    t = t * 32 + B32.indexOf(ch);\n  if (t > MAX_ULID_TIME)\n    throw new Error(`not a ULID: ${id}`);\n  return t;\n}\n\n// packages/contracts/dist/wire-auth.js\nfunction secretMatches(presented, expected) {\n  const given = presented ?? \"\";\n  let diff = given.length ^ expected.length | (given.length === 0 ? 1 : 0);\n  for (let i = 0; i < expected.length; i++) {\n    diff |= (i < given.length ? given.charCodeAt(i) : 0) ^ expected.charCodeAt(i);\n  }\n  return diff === 0;\n}\n\n// packages/vertical-host/src/routed-node.ts\nvar ROUTED_ID = /^[0-9A-HJKMNP-TV-Z]{26}$/;\nvar RouterAssertionError = class extends Error {\n};\nfunction readRoutedNode(headers, options = {}) {\n  const rawTenant = headers.get(\"x-substrat-tenant\");\n  const rawScope = headers.get(\"x-substrat-scope\");\n  if (!rawTenant && !rawScope) return null;\n  const { expectedSecret, allowUnsigned = false } = options;\n  if (expectedSecret) {\n    if (!secretMatches(headers.get(\"x-substrat-router\"), expectedSecret)) {\n      throw new RouterAssertionError(\"router assertion is not signed by a known router\");\n    }\n  } else if (!allowUnsigned) {\n    throw new RouterAssertionError(\n      \"router assertion cannot be verified: this worker has no ROUTER_SECRET configured\"\n    );\n  }\n  if (!rawTenant || !rawScope) {\n    throw new RouterAssertionError(\"router assertion is incomplete\");\n  }\n  if (!ROUTED_ID.test(rawTenant) || !ROUTED_ID.test(rawScope)) {\n    throw new RouterAssertionError(\"router assertion carries a malformed id\");\n  }\n  return {\n    tenantId: rawTenant,\n    scopeId: rawScope,\n    surface: headers.get(\"x-substrat-surface\") ?? \"app\",\n    verticalSlug: headers.get(\"x-substrat-vertical\")\n  };\n}\n\n// packages/vertical-host/src/invocation-log.ts\nfunction versionIdOf(env) {\n  const v = env?.SUBSTRAT_VERSION_ID;\n  return typeof v === \"string\" && v.length > 0 ? v : null;\n}\nfunction pathOf(url) {\n  try {\n    return new URL(url).pathname;\n  } catch {\n    return \"/\";\n  }\n}\nvar STAMPS = /* @__PURE__ */ Symbol.for(\"substrat.invocation-stamp\");\nfunction stamps() {\n  const g = globalThis;\n  return g[STAMPS] ??= /* @__PURE__ */ new WeakMap();\n}\nfunction invocationStampOf(request) {\n  return stamps().get(request);\n}\nfunction withRequestId(response, id) {\n  const headers = response?.headers;\n  try {\n    headers?.set?.(REQUEST_ID_HEADER, id);\n    return response;\n  } catch {\n  }\n  try {\n    const r = response;\n    if (r.status === 101) return response;\n    const copy = new Response(r.body, r);\n    copy.headers.set(REQUEST_ID_HEADER, id);\n    return copy;\n  } catch {\n    return response;\n  }\n}\nfunction beginStamp(request, env, options) {\n  const stamp = { invocationId: ulid(), record: {} };\n  const fieldCoverageId = armedFieldCoverageId(request.headers, env, options);\n  if (fieldCoverageId) stamp.fieldCoverageId = fieldCoverageId;\n  stamps().set(request, stamp);\n  return stamp;\n}\nfunction armedFieldCoverageId(headers, env, options) {\n  let id;\n  try {\n    id = headers.get(FIELD_COVERAGE_HEADER);\n  } catch {\n    return void 0;\n  }\n  if (id === null || !ROUTED_ID.test(id)) return void 0;\n  return routedNodeOrNull(headers, env, options) !== null ? id : void 0;\n}\nfunction writeInvocationLine(stamp, done, options) {\n  try {\n    writeLineOrThrow(stamp, done, options);\n  } catch (e) {\n    try {\n      console.log(JSON.stringify({ substrat: \"invocation-log-fault\", detail: String(e) }));\n    } catch {\n    }\n  }\n}\nfunction writeLineOrThrow(stamp, done, options) {\n  const node = routedNodeOrNull(done.request.headers, done.env, options);\n  if (!node) return;\n  const { record, invocationId } = stamp;\n  const line = invocationLine({\n    tenantId: node.tenantId,\n    scopeId: node.scopeId,\n    vertical: node.verticalSlug,\n    surface: node.surface,\n    method: done.request.method,\n    path: pathOf(done.request.url),\n    status: done.status,\n    threw: done.threw,\n    durationMs: Date.now() - done.started,\n    invocationId,\n    level: invocationLevelOf(done.status, done.threw, record.problemCode),\n    operation: record.operation,\n    problemCode: record.problemCode,\n    principalKind: record.principalKind,\n    ...record.emitted ? { emitted: record.emitted } : {},\n    versionId: versionIdOf(done.env),\n    ...record.outputFields ? { outputFields: record.outputFields } : {},\n    ...stamp.fieldCoverageId ? { fieldCoverageId: stamp.fieldCoverageId } : {}\n  });\n  console.log(JSON.stringify(line));\n}\nvar OTHER_HANDLERS = [\"scheduled\", \"queue\", \"email\", \"tail\", \"trace\", \"alarm\", \"test\"];\nfunction withInvocationLog(worker, options = {}) {\n  const inner = worker?.fetch;\n  if (typeof inner !== \"function\") return worker;\n  const wrapped = {\n    async fetch(request, env, ctx) {\n      if (invocationStampOf(request)) return inner.call(worker, request, env, ctx);\n      const started = Date.now();\n      const stamp = beginStamp(request, env, options);\n      let status = null;\n      let threw = false;\n      try {\n        const response = withRequestId(await inner.call(worker, request, env, ctx), stamp.invocationId);\n        status = response.status;\n        handRecordToRouter(response, stamp.record, request, env, options);\n        return response;\n      } catch (e) {\n        threw = true;\n        throw e;\n      } finally {\n        writeInvocationLine(stamp, { request, env, status, threw, started }, options);\n      }\n    }\n  };\n  for (const name of OTHER_HANDLERS) {\n    const h = worker[name];\n    if (typeof h === \"function\") wrapped[name] = h.bind(worker);\n  }\n  return wrapped;\n}\nfunction handRecordToRouter(response, record, request, env, options) {\n  try {\n    const value = encodeInvocationRecord(record);\n    if (value === null || !routedNodeOrNull(request.headers, env, options)) return;\n    response.headers?.set?.(\n      INVOCATION_RECORD_HEADER,\n      value\n    );\n  } catch {\n  }\n}\nfunction routedNodeOrNull(headers, env, options) {\n  try {\n    return readRoutedNode(headers, {\n      expectedSecret: options.routerSecret?.(env),\n      allowUnsigned: options.allowUnsigned?.(env) ?? false\n    });\n  } catch (e) {\n    if (!(e instanceof RouterAssertionError)) console.log(JSON.stringify({ substrat: \"invocation-log-fault\", detail: String(e) }));\n    return null;\n  }\n}\n\n// substrat-platform-entry.ts\nimport * as vertical from \"__SUBSTRAT_VERTICAL_ENTRY__\";\nexport * from \"__SUBSTRAT_VERTICAL_ENTRY__\";\nvar substrat_platform_entry_default = withInvocationLog(vertical.default, {\n  routerSecret: (env) => env.ROUTER_SECRET,\n  allowUnsigned: (env) => env.ALLOW_DEV_NODE === \"true\"\n});\nexport {\n  substrat_platform_entry_default as default\n};\n";
+/** The entry itself — 12959 bytes of ESM. */
+export const PLATFORM_ENTRY_SOURCE = "// substrat-platform-entry.ts\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\n// packages/contracts/dist/invocation-record.js\nvar INVOCATION_RECORD_HEADER = \"x-substrat-invocation-record\";\nvar REQUEST_ID_HEADER = \"x-substrat-request-id\";\nvar INVOCATION_RECORD_FIELD_MAX = 128;\nvar FIELDS = [\"operation\", \"problemCode\", \"principalKind\"];\nfunction encodeInvocationRecord(record) {\n  const params = new URLSearchParams();\n  for (const key of FIELDS) {\n    const v = record[key];\n    if (typeof v === \"string\" && v !== \"\")\n      params.set(key, v.slice(0, INVOCATION_RECORD_FIELD_MAX));\n  }\n  const value = params.toString();\n  return value === \"\" ? null : value;\n}\nvar FIELD_COVERAGE_HEADER = \"x-substrat-field-coverage\";\nfunction invocationLevelOf(status, threw, problemCode) {\n  if (threw || status === null || status >= 500)\n    return \"error\";\n  if (status >= 400)\n    return \"warn\";\n  if (problemCode)\n    return \"warn\";\n  return \"info\";\n}\n\n// packages/kernel/dist/invocation-line.js\nfunction invocationLine(f) {\n  const emitted = f.emitted;\n  return {\n    substrat: \"invocation\",\n    ...f.kind ? { kind: f.kind } : {},\n    tenantId: f.tenantId,\n    scopeId: f.scopeId,\n    vertical: f.vertical ?? null,\n    surface: f.surface ?? null,\n    method: f.method ?? null,\n    path: f.path ?? null,\n    status: f.status ?? null,\n    threw: f.threw,\n    durationMs: f.durationMs,\n    invocationId: f.invocationId,\n    level: f.level,\n    operation: f.operation ?? null,\n    problemCode: f.problemCode ?? null,\n    principalKind: f.principalKind ?? null,\n    eventCount: emitted ? emitted.total : null,\n    eventTypes: emitted ? distinct(emitted.events.map((e) => e.type)) : [],\n    entities: emitted && f.withEntities !== false ? distinct(emitted.events.map((e) => e.entity)) : [],\n    versionId: f.versionId ?? null,\n    ...f.outputFields ? { outputFields: f.outputFields, ...f.fieldCoverageId ? { fieldCoverageId: f.fieldCoverageId } : {} } : {},\n    ...f.storeCalls && f.storeCalls.length > 0 ? { storeCalls: f.storeCalls } : {},\n    ...f.storeCallsDropped ? { storeCallsDropped: f.storeCallsDropped } : {},\n    ...f.async ?? {}\n  };\n}\nvar STORE_CALL_LOG_CAP = 16;\nfunction tallyStoreCall(tally, call) {\n  const calls = tally.storeCalls ?? (tally.storeCalls = []);\n  if (calls.length < STORE_CALL_LOG_CAP) {\n    calls.push({ binding: call.binding, operation: call.operation, outcome: call.outcome, durationMs: call.durationMs });\n  } else {\n    tally.storeCallsDropped = (tally.storeCallsDropped ?? 0) + 1;\n  }\n}\nvar STORE_CALL_SINK_KEY = \"substrat.store-call-sink\";\nfunction distinct(values) {\n  return [...new Set(values)];\n}\n\n// packages/kernel/dist/ulid.js\nvar B32 = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";\nvar MAX_ULID_TIME = 2 ** 48 - 1;\nvar ULID_SHAPE = /^[0-9A-HJKMNP-TV-Z]{26}$/;\nvar unencodable = (t) => `not an encodable ULID instant: ${t} (want 0..${MAX_ULID_TIME})`;\nfunction encodeTime(time) {\n  let ts = \"\";\n  let t = time;\n  for (let i = 0; i < 10; i++) {\n    ts = B32[t % 32] + ts;\n    t = Math.floor(t / 32);\n  }\n  return ts;\n}\nfunction createUlid() {\n  let lastTime = -1;\n  const lastRand = new Array(16).fill(0);\n  function freshRandom() {\n    const bytes = crypto.getRandomValues(new Uint8Array(16));\n    for (let i = 0; i < 16; i++)\n      lastRand[i] = bytes[i] % 32;\n  }\n  function incrementRandom() {\n    for (let i = 15; i >= 0; i--) {\n      if (lastRand[i] < 31) {\n        lastRand[i]++;\n        return true;\n      }\n      lastRand[i] = 0;\n    }\n    return false;\n  }\n  const mint = ((now = Date.now()) => {\n    if (!Number.isSafeInteger(now))\n      throw new RangeError(unencodable(now));\n    let time = now;\n    if (time <= lastTime) {\n      time = lastTime;\n      if (!incrementRandom()) {\n        time = lastTime + 1;\n        freshRandom();\n      }\n    } else {\n      freshRandom();\n    }\n    if (time < 0 || time > MAX_ULID_TIME)\n      throw new RangeError(unencodable(time));\n    lastTime = time;\n    let r = \"\";\n    for (const d of lastRand)\n      r += B32[d];\n    return encodeTime(time) + r;\n  });\n  mint.seedFrom = (id) => {\n    const time = ulidTime(id);\n    if (time < lastTime)\n      return;\n    const rand = [];\n    for (const ch of id.slice(10))\n      rand.push(B32.indexOf(ch));\n    if (time === lastTime) {\n      let ahead = false;\n      for (let i = 0; i < 16; i++) {\n        if (rand[i] !== lastRand[i]) {\n          ahead = rand[i] > lastRand[i];\n          break;\n        }\n      }\n      if (!ahead)\n        return;\n    }\n    lastTime = time;\n    for (let i = 0; i < 16; i++)\n      lastRand[i] = rand[i];\n  };\n  return mint;\n}\nvar processUlid = createUlid();\nfunction ulid(now = Date.now()) {\n  return processUlid(now);\n}\nfunction ulidTime(id) {\n  if (!ULID_SHAPE.test(id))\n    throw new Error(`not a ULID: ${id}`);\n  let t = 0;\n  for (const ch of id.slice(0, 10))\n    t = t * 32 + B32.indexOf(ch);\n  if (t > MAX_ULID_TIME)\n    throw new Error(`not a ULID: ${id}`);\n  return t;\n}\n\n// packages/contracts/dist/wire-auth.js\nfunction secretMatches(presented, expected) {\n  const given = presented ?? \"\";\n  let diff = given.length ^ expected.length | (given.length === 0 ? 1 : 0);\n  for (let i = 0; i < expected.length; i++) {\n    diff |= (i < given.length ? given.charCodeAt(i) : 0) ^ expected.charCodeAt(i);\n  }\n  return diff === 0;\n}\n\n// packages/vertical-host/src/routed-node.ts\nvar ROUTED_ID = /^[0-9A-HJKMNP-TV-Z]{26}$/;\nvar RouterAssertionError = class extends Error {\n};\nfunction readRoutedNode(headers, options = {}) {\n  const rawTenant = headers.get(\"x-substrat-tenant\");\n  const rawScope = headers.get(\"x-substrat-scope\");\n  if (!rawTenant && !rawScope) return null;\n  const { expectedSecret, allowUnsigned = false } = options;\n  if (expectedSecret) {\n    if (!secretMatches(headers.get(\"x-substrat-router\"), expectedSecret)) {\n      throw new RouterAssertionError(\"router assertion is not signed by a known router\");\n    }\n  } else if (!allowUnsigned) {\n    throw new RouterAssertionError(\n      \"router assertion cannot be verified: this worker has no ROUTER_SECRET configured\"\n    );\n  }\n  if (!rawTenant || !rawScope) {\n    throw new RouterAssertionError(\"router assertion is incomplete\");\n  }\n  if (!ROUTED_ID.test(rawTenant) || !ROUTED_ID.test(rawScope)) {\n    throw new RouterAssertionError(\"router assertion carries a malformed id\");\n  }\n  return {\n    tenantId: rawTenant,\n    scopeId: rawScope,\n    surface: headers.get(\"x-substrat-surface\") ?? \"app\",\n    verticalSlug: headers.get(\"x-substrat-vertical\")\n  };\n}\n\n// packages/vertical-host/src/invocation-log.ts\nfunction builtinAsyncLocalStorage() {\n  try {\n    const proc = globalThis.process;\n    const mod = proc?.getBuiltinModule?.(\"node:async_hooks\");\n    return typeof mod?.AsyncLocalStorage === \"function\" ? mod.AsyncLocalStorage : void 0;\n  } catch {\n    return void 0;\n  }\n}\nfunction storeCallSlot(provided) {\n  try {\n    const g = globalThis;\n    const key = Symbol.for(STORE_CALL_SINK_KEY);\n    const existing = g[key];\n    if (typeof existing?.run === \"function\" && typeof existing.current === \"function\") return existing;\n    const Als = provided ?? builtinAsyncLocalStorage();\n    if (!Als) return void 0;\n    const storage = new Als();\n    const slot = {\n      current() {\n        const tally = storage.getStore();\n        return tally ? (call) => tallyStoreCall(tally, call) : void 0;\n      },\n      run: (tally, fn) => storage.run(tally, fn)\n    };\n    g[key] = slot;\n    return slot;\n  } catch {\n    return void 0;\n  }\n}\nfunction runRecordingStoreCalls(record, provided, fn) {\n  const slot = storeCallSlot(provided);\n  return slot ? slot.run(record, fn) : fn();\n}\nfunction versionIdOf(env) {\n  const v = env?.SUBSTRAT_VERSION_ID;\n  return typeof v === \"string\" && v.length > 0 ? v : null;\n}\nvar UPLOAD_LINK_SECRET_SEGMENT = /^(\\/api\\/attachment-uploads\\/[^/]+\\/[^/]+\\/)[^/]+/;\nvar redactUploadLinkSecret = (pathname) => pathname.replace(UPLOAD_LINK_SECRET_SEGMENT, \"$1[redacted]\");\nfunction pathOf(url) {\n  try {\n    return redactUploadLinkSecret(new URL(url).pathname);\n  } catch {\n    return \"/\";\n  }\n}\nvar STAMPS = /* @__PURE__ */ Symbol.for(\"substrat.invocation-stamp\");\nfunction stamps() {\n  const g = globalThis;\n  return g[STAMPS] ??= /* @__PURE__ */ new WeakMap();\n}\nfunction invocationStampOf(request) {\n  return stamps().get(request);\n}\nfunction withRequestId(response, id) {\n  const headers = response?.headers;\n  try {\n    headers?.set?.(REQUEST_ID_HEADER, id);\n    return response;\n  } catch {\n  }\n  try {\n    const r = response;\n    if (r.status === 101) return response;\n    const copy = new Response(r.body, r);\n    copy.headers.set(REQUEST_ID_HEADER, id);\n    return copy;\n  } catch {\n    return response;\n  }\n}\nfunction beginStamp(request, env, options) {\n  const stamp = { invocationId: ulid(), record: {} };\n  const fieldCoverageId = armedFieldCoverageId(request.headers, env, options);\n  if (fieldCoverageId) stamp.fieldCoverageId = fieldCoverageId;\n  stamps().set(request, stamp);\n  return stamp;\n}\nfunction armedFieldCoverageId(headers, env, options) {\n  let id;\n  try {\n    id = headers.get(FIELD_COVERAGE_HEADER);\n  } catch {\n    return void 0;\n  }\n  if (id === null || !ROUTED_ID.test(id)) return void 0;\n  return routedNodeOrNull(headers, env, options) !== null ? id : void 0;\n}\nfunction writeInvocationLine(stamp, done, options) {\n  try {\n    writeLineOrThrow(stamp, done, options);\n  } catch (e) {\n    try {\n      console.log(JSON.stringify({ substrat: \"invocation-log-fault\", detail: String(e) }));\n    } catch {\n    }\n  }\n}\nfunction writeLineOrThrow(stamp, done, options) {\n  const node = routedNodeOrNull(done.request.headers, done.env, options);\n  if (!node) return;\n  const { record, invocationId } = stamp;\n  const line = invocationLine({\n    tenantId: node.tenantId,\n    scopeId: node.scopeId,\n    vertical: node.verticalSlug,\n    surface: node.surface,\n    method: done.request.method,\n    path: pathOf(done.request.url),\n    status: done.status,\n    threw: done.threw,\n    durationMs: Date.now() - done.started,\n    invocationId,\n    level: invocationLevelOf(done.status, done.threw, record.problemCode),\n    operation: record.operation,\n    problemCode: record.problemCode,\n    principalKind: record.principalKind,\n    ...record.emitted ? { emitted: record.emitted } : {},\n    versionId: versionIdOf(done.env),\n    ...record.outputFields ? { outputFields: record.outputFields } : {},\n    ...stamp.fieldCoverageId ? { fieldCoverageId: stamp.fieldCoverageId } : {},\n    ...record.storeCalls && record.storeCalls.length > 0 ? { storeCalls: record.storeCalls } : {},\n    ...record.storeCallsDropped ? { storeCallsDropped: record.storeCallsDropped } : {}\n  });\n  console.log(JSON.stringify(line));\n}\nvar OTHER_HANDLERS = [\"scheduled\", \"queue\", \"email\", \"tail\", \"trace\", \"alarm\", \"test\"];\nfunction withInvocationLog(worker, options = {}) {\n  const inner = worker?.fetch;\n  if (typeof inner !== \"function\") return worker;\n  const wrapped = {\n    async fetch(request, env, ctx) {\n      if (invocationStampOf(request)) return inner.call(worker, request, env, ctx);\n      const started = Date.now();\n      const stamp = beginStamp(request, env, options);\n      let status = null;\n      let threw = false;\n      try {\n        const response = withRequestId(\n          await runRecordingStoreCalls(stamp.record, options.asyncLocalStorage, () => inner.call(worker, request, env, ctx)),\n          stamp.invocationId\n        );\n        status = response.status;\n        handRecordToRouter(response, stamp.record, request, env, options);\n        return response;\n      } catch (e) {\n        threw = true;\n        throw e;\n      } finally {\n        writeInvocationLine(stamp, { request, env, status, threw, started }, options);\n      }\n    }\n  };\n  for (const name of OTHER_HANDLERS) {\n    const h = worker[name];\n    if (typeof h === \"function\") wrapped[name] = h.bind(worker);\n  }\n  return wrapped;\n}\nfunction handRecordToRouter(response, record, request, env, options) {\n  try {\n    const value = encodeInvocationRecord(record);\n    if (value === null || !routedNodeOrNull(request.headers, env, options)) return;\n    response.headers?.set?.(\n      INVOCATION_RECORD_HEADER,\n      value\n    );\n  } catch {\n  }\n}\nfunction routedNodeOrNull(headers, env, options) {\n  try {\n    return readRoutedNode(headers, {\n      expectedSecret: options.routerSecret?.(env),\n      allowUnsigned: options.allowUnsigned?.(env) ?? false\n    });\n  } catch (e) {\n    if (!(e instanceof RouterAssertionError)) console.log(JSON.stringify({ substrat: \"invocation-log-fault\", detail: String(e) }));\n    return null;\n  }\n}\n\n// substrat-platform-entry.ts\nimport * as vertical from \"__SUBSTRAT_VERTICAL_ENTRY__\";\nexport * from \"__SUBSTRAT_VERTICAL_ENTRY__\";\nvar substrat_platform_entry_default = withInvocationLog(vertical.default, {\n  routerSecret: (env) => env.ROUTER_SECRET,\n  allowUnsigned: (env) => env.ALLOW_DEV_NODE === \"true\",\n  asyncLocalStorage: AsyncLocalStorage\n});\nexport {\n  substrat_platform_entry_default as default\n};\n";
+/**
+ * #2245: the entry's `node:async_hooks` import, as it appears in `PLATFORM_ENTRY_SOURCE`, and
+ * the line the uploader puts in its place for a script that can have no `AsyncLocalStorage`
+ * (one that opts out with `no_nodejs_als`). With no `nodejs_compat` either, that script's line names
+ * no store calls; with it, vertical-host reaches the class through `process.getBuiltinModule`.
+ */
+export const PLATFORM_ENTRY_ALS_IMPORT = "import { AsyncLocalStorage } from \"node:async_hooks\";";
+export const PLATFORM_ENTRY_ALS_FALLBACK = "const AsyncLocalStorage = undefined;";
 /**
  * The scope sweeper the platform supplies (#1902) — uploaded beside the entry, which
  * re-exports its class, when a vertical declares schedules and brings no sweeper of its own.

package/dist/platform-entry.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-entry.generated.js","sourceRoot":"","sources":["../src/platform-entry.generated.ts"],"names":[],"mappings":"AAAA,8KAA8K;AAC9K,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAElE,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAExE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAW,i2VAAi2V,CAAC;AAE/4V;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAEtE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAW,o0TAAo0T,CAAC"}
+{"version":3,"file":"platform-entry.generated.js","sourceRoot":"","sources":["../src/platform-entry.generated.ts"],"names":[],"mappings":"AAAA,8KAA8K;AAC9K,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAElE,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAExE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAW,iqaAAiqa,CAAC;AAE/sa;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yDAAyD,CAAC;AACnG,MAAM,CAAC,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAElF;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAEtE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAW,o0TAAo0T,CAAC"}

package/dist/platform-entry.js

@@ -30,7 +30,7 @@
  * keeps that answer for every later upload.
  */
 import { PLATFORM_SWEEPER_BINDING, PLATFORM_SWEEPER_CLASS, PLATFORM_SWEEPER_VAR, PLATFORM_SWEEP_HOST_KEY, sweeperConflict, } from '@substrat-run/contracts';
-import { PLATFORM_ENTRY_MODULE, PLATFORM_ENTRY_PLACEHOLDER, PLATFORM_ENTRY_SOURCE, PLATFORM_SWEEPER_MODULE, PLATFORM_SWEEPER_SOURCE, } from './platform-entry.generated.js';
+import { PLATFORM_ENTRY_ALS_FALLBACK, PLATFORM_ENTRY_ALS_IMPORT, PLATFORM_ENTRY_MODULE, PLATFORM_ENTRY_PLACEHOLDER, PLATFORM_ENTRY_SOURCE, PLATFORM_SWEEPER_MODULE, PLATFORM_SWEEPER_SOURCE, } from './platform-entry.generated.js';
 export { PLATFORM_ENTRY_MODULE, PLATFORM_SWEEPER_MODULE };
 const PLATFORM_MODULES = new Set([PLATFORM_ENTRY_MODULE, PLATFORM_SWEEPER_MODULE]);
 /** The line `invocationLog` writes, as it appears in any build: `substrat:"invocation"`. */
@@ -182,6 +182,32 @@ declared, bundle) {
 export function deployedDoClasses(doClasses, supplySweeper) {
     return supplySweeper ? [...new Set([...doClasses, PLATFORM_SWEEPER_CLASS])] : [...doClasses];
 }
+/** The flag that gives a script `node:async_hooks` and nothing else of node (#2245). */
+export const ASYNC_LOCAL_STORAGE_FLAG = 'nodejs_als';
+/**
+ * The compatibility flags a wrapped script is uploaded with, and whether the platform entry
+ * may import `AsyncLocalStorage` (#2245, RFC §6: the request runs in one, so its store calls
+ * reach its line). The entry imports `node:async_hooks`, which workerd allows only under
+ * `nodejs_als` or `nodejs_compat`:
+ *
+ * - either flag already there: the flags go up exactly as declared;
+ * - neither: `nodejs_als` is appended, after the declared ones. It has no compatibility-date
+ *   gate, and it adds `node:async_hooks` alone — no other node module, no globals;
+ * - the script opts out with `no_nodejs_als`: the flags go up as declared and the entry drops
+ *   its import, so the upload never fails over it. With `nodejs_compat` beside the opt-out,
+ *   vertical-host still reaches `AsyncLocalStorage` through `process.getBuiltinModule` and the
+ *   line names the calls; with no `nodejs_compat` either, the line names no store calls.
+ *
+ * Existing flags are never removed or reordered.
+ */
+export function platformEntryFlags(declared) {
+    const flags = [...(declared ?? [])];
+    if (flags.includes(`no_${ASYNC_LOCAL_STORAGE_FLAG}`))
+        return { flags, asyncLocalStorage: false };
+    if (flags.includes(ASYNC_LOCAL_STORAGE_FLAG) || flags.includes('nodejs_compat'))
+        return { flags, asyncLocalStorage: true };
+    return { flags: [...flags, ASYNC_LOCAL_STORAGE_FLAG], asyncLocalStorage: true };
+}
 /**
  * The bundle as uploaded: the platform's entry module added (or refreshed) and named as
  * the script's main module, importing the vertical's own entry — and, when the version's
@@ -198,14 +224,18 @@ export function withPlatformEntry(bundle) {
         return bundle;
     const own = bundle.modules.filter((m) => !PLATFORM_MODULES.has(m.name));
     const encode = (text) => new TextEncoder().encode(text);
+    const { flags, asyncLocalStorage } = platformEntryFlags(bundle.compatibilityFlags);
     // Module names are paths from the script root, where the platform entry sits too.
     let source = PLATFORM_ENTRY_SOURCE.split(PLATFORM_ENTRY_PLACEHOLDER).join(`./${bundle.entry}`);
+    if (!asyncLocalStorage)
+        source = source.split(PLATFORM_ENTRY_ALS_IMPORT).join(PLATFORM_ENTRY_ALS_FALLBACK);
     if (supply)
         source += `export { ${PLATFORM_SWEEPER_CLASS} } from "./${PLATFORM_SWEEPER_MODULE}";\n`;
     const kind = 'application/javascript+module';
     return {
         ...bundle,
         entry: PLATFORM_ENTRY_MODULE,
+        compatibilityFlags: flags,
         modules: [
             { name: PLATFORM_ENTRY_MODULE, content: encode(source), contentType: kind },
             ...(supply ? [{ name: PLATFORM_SWEEPER_MODULE, content: encode(PLATFORM_SWEEPER_SOURCE), contentType: kind }] : []),

package/dist/platform-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-entry.js","sourceRoot":"","sources":["../src/platform-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,GAEhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,CAAC;AAE1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAEnF,4FAA4F;AAC5F,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD,MAAM,QAAQ,GAAG,CAAC,CAAoC,EAAE,EAAE,CACxD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEvE,0FAA0F;AAC1F,QAAQ,CAAC,CAAC,UAAU,CAAC,MAAuC;IAC1D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiD;IACvF,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB,EAAE,CAAC;QAC3C,OAAO,2FAA2F,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,+CAA+C,CAAC;IACjH,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,MAAM;YAAE,MAAM,CAAC,gEAAgE;IAC/F,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,sFAAsF,CAAC;IACrH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,kBAAkB,CAAC,MAAuC;IACjE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,uBAAuB;AACrC,qGAAqG;AACrG,QAA6G,EAC7G,MAAiD;IAEjD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,iDAAiD,GAAG,EAAE,EAAE,CAAC,CAAC;IACrG,4FAA4F;IAC5F,uFAAuF;IACvF,MAAM,MAAM,GAAG;QACb,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAChH,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACxD,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,CAAC;IACpC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YACrC,OAAO,MAAM,CACX,6CAA6C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;gBAClG,gGAAgG;gBAChG,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CACX,6CAA6C,sBAAsB,eAAe,wBAAwB,SAAS;gBACjH,8BAA8B,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,wBAAwB,GAAG,CAAC,CAAC,CAAC,cAAc,sBAAsB,GAAG,GAAG;gBACvJ,yGAAyG;gBACzG,mEAAmE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,UAAU,KAAK,sBAAsB,EAAE,CAAC;YAChG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CACX,oFAAoF;gBAClF,GAAG,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,wBAAwB,oBAAoB,CAAC,CAAC,CAAC,cAAc,sBAAsB,sBAAsB,IAAI;gBACjK,kGAAkG,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CACX,8FAA8F,IAAI,KAAK;YACrG,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CACX,yGAAyG;YACvG,0GAA0G;YAC1G,2GAA2G;YAC3G,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA4B,EAAE,aAAkC;IAChG,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAE/B,MAAS;IACT,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC;IAC7C,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChE,kFAAkF;IAClF,IAAI,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,IAAI,MAAM;QAAE,MAAM,IAAI,YAAY,sBAAsB,cAAc,uBAAuB,MAAM,CAAC;IACpG,MAAM,IAAI,GAAG,+BAA+B,CAAC;IAC7C,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;YAC3E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC,uBAAuB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnH,GAAG,GAAG;SACP;QACD,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,mFAAmF;gBACnF,0DAA0D;gBAC1D,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,CAAC;gBAC1D,QAAQ,EAAE;oBACR,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAC1B,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,sBAAsB,EAAE;oBACxG,+FAA+F;oBAC/F,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,wBAAwB,EAAwC;iBACzH;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"platform-entry.js","sourceRoot":"","sources":["../src/platform-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,GAEhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,CAAC;AAE1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAEnF,4FAA4F;AAC5F,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD,MAAM,QAAQ,GAAG,CAAC,CAAoC,EAAE,EAAE,CACxD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEvE,0FAA0F;AAC1F,QAAQ,CAAC,CAAC,UAAU,CAAC,MAAuC;IAC1D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiD;IACvF,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB,EAAE,CAAC;QAC3C,OAAO,2FAA2F,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,+CAA+C,CAAC;IACjH,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,MAAM;YAAE,MAAM,CAAC,gEAAgE;IAC/F,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,sFAAsF,CAAC;IACrH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,kBAAkB,CAAC,MAAuC;IACjE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,uBAAuB;AACrC,qGAAqG;AACrG,QAA6G,EAC7G,MAAiD;IAEjD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,iDAAiD,GAAG,EAAE,EAAE,CAAC,CAAC;IACrG,4FAA4F;IAC5F,uFAAuF;IACvF,MAAM,MAAM,GAAG;QACb,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAChH,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACxD,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,cAAc,CAAC;IACpC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;YACrC,OAAO,MAAM,CACX,6CAA6C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;gBAClG,gGAAgG;gBAChG,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CACX,6CAA6C,sBAAsB,eAAe,wBAAwB,SAAS;gBACjH,8BAA8B,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,wBAAwB,GAAG,CAAC,CAAC,CAAC,cAAc,sBAAsB,GAAG,GAAG;gBACvJ,yGAAyG;gBACzG,mEAAmE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,UAAU,KAAK,sBAAsB,EAAE,CAAC;YAChG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CACX,oFAAoF;gBAClF,GAAG,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,wBAAwB,oBAAoB,CAAC,CAAC,CAAC,cAAc,sBAAsB,sBAAsB,IAAI;gBACjK,kGAAkG,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CACX,8FAA8F,IAAI,KAAK;YACrG,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CACX,yGAAyG;YACvG,0GAA0G;YAC1G,2GAA2G;YAC3G,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA4B,EAAE,aAAkC;IAChG,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;AAC/F,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAErD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuC;IACxE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,wBAAwB,EAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACjG,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC3H,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAG/B,MAAS;IACT,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC;IAC7C,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACnF,kFAAkF;IAClF,IAAI,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,iBAAiB;QAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3G,IAAI,MAAM;QAAE,MAAM,IAAI,YAAY,sBAAsB,cAAc,uBAAuB,MAAM,CAAC;IACpG,MAAM,IAAI,GAAG,+BAA+B,CAAC;IAC7C,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,qBAAqB;QAC5B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;YAC3E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,CAAC,uBAAuB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnH,GAAG,GAAG;SACP;QACD,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,mFAAmF;gBACnF,0DAA0D;gBAC1D,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,CAAC;gBAC1D,QAAQ,EAAE;oBACR,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAC1B,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,sBAAsB,EAAE;oBACxG,+FAA+F;oBAC/F,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,wBAAwB,EAAwC;iBACzH;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/platform-scope-stores.d.ts

@@ -0,0 +1,151 @@
+import { type PlatformActorId, type ReservedStoreOperation, type Scope, type ScopeDumpTable, type StoreKindRegistration } from '@substrat-run/contracts';
+import { type HostAdmin } from '@substrat-run/kernel';
+/**
+ * A reserved scope-store call, made by the control plane straight at the store
+ * script (#2207). The vertical is not on this path: it holds neither the
+ * namespace nor the key. The key signs the envelope here, audience `platform`,
+ * which is the only audience a `substrat.*` operation accepts.
+ */
+export interface PlatformScopeStoreDispatch {
+    /** PKCS8 Ed25519 private key, base64url. Signs audience `platform`. */
+    readonly platformKey: string;
+    fetch(scriptName: string, request: Request): Promise<Response>;
+}
+export interface PlatformScopeStoreTarget {
+    readonly vertical: string;
+    readonly kind: string;
+    readonly tenantId: string;
+    readonly scopeId: string;
+    readonly binding: string;
+}
+/** One declared binding, as a version manifest lists it. */
+export interface DeclaredScopeStore {
+    readonly binding: string;
+    readonly kind: string;
+}
+export interface PlatformScopeStores {
+    exportStores(input: {
+        tenantId: string;
+        scopeId: string;
+        vertical: string;
+        stores: readonly DeclaredScopeStore[];
+    }): Promise<{
+        binding: string;
+        kind: string;
+        tables: ScopeDumpTable[];
+    }[]>;
+    importStores(input: {
+        tenantId: string;
+        scopeId: string;
+        vertical: string;
+        stores: readonly {
+            binding: string;
+            kind: string;
+            tables: ScopeDumpTable[];
+        }[];
+    }): Promise<void>;
+    eraseSubject(input: {
+        tenantId: string;
+        scopeId: string;
+        vertical: string;
+        subjectId: string;
+        stores: readonly DeclaredScopeStore[];
+    }): Promise<{
+        binding: string;
+        erased: number;
+    }[]>;
+    wipeStores(input: {
+        tenantId: string;
+        scopeId: string;
+        vertical: string;
+        stores: readonly DeclaredScopeStore[];
+    }): Promise<void>;
+    sizeStores(input: {
+        tenantId: string;
+        scopeId: string;
+        vertical: string;
+        stores: readonly DeclaredScopeStore[];
+    }): Promise<{
+        binding: string;
+        bytes: number;
+    }[]>;
+}
+/** Bindings a version manifest declares. Missing JSON is none. Unreadable JSON fails closed. */
+export declare function declaredStoresOf(manifestJson: string | null): DeclaredScopeStore[];
+/**
+ * The version a scope's deployment runs, read once (#2207, L14). A scope with a serving pin runs
+ * the serving pointer's version when the pointer's ref is its pin, and an unknown one otherwise;
+ * a scope with no pin runs its bound version. `servingPointer` is the pointer as read, for a scope
+ * with a pin: the pair a subject-erasure claim requires to still hold (#2285). A pointer that
+ * cannot be read refuses (503): neither the version nor the fence can be named.
+ */
+export interface RunningVersion {
+    readonly versionId: string | null;
+    readonly servingPointer?: {
+        ref: string;
+        versionId: string;
+    } | null;
+}
+export declare function runningVersionOf(admin: Pick<HostAdmin, 'verticalServing'>, actor: PlatformActorId, scope: Pick<Scope, 'vertical' | 'verticalVersionId' | 'servingRef'>): Promise<RunningVersion>;
+/**
+ * Stop the router serving a scope, before its stores are wiped (#2285, L6). The router admits a
+ * scope only while one of its hostnames is `active`, and it reads that row on every request, so
+ * unbinding is immediate. Unbind is idempotent: a retry after a failed wipe finds nothing left
+ * to remove. A hostname set merely non-active would not hold — the issuance reconcile heals a
+ * platform hostname back to `active`.
+ */
+export declare function unrouteScope(admin: Pick<HostAdmin, 'listHostnames' | 'unbindHostname'>, actor: PlatformActorId, scope: Pick<Scope, 'tenantId' | 'id'>): Promise<void>;
+/**
+ * The scope stores of the version a scope's deployment runs (#2207). A scope on its vertical's
+ * serving pin runs the serving pointer's version, and any other scope its bound version; this
+ * is the version the router reads a scope's stores from (`READ_ROUTE_SQL`), and the one a restore
+ * may import into (L8). The lifecycle reaches more: `scopeStoresOf`. Provisioning sets the
+ * serving pin and no bound version, so reading the bound version alone answers "no store" for an
+ * ordinary install whose store the router serves. A pin that names another script than the
+ * pointer's is unknown, as #2242's erasure gate has it.
+ *
+ * The gate is `mayHoldScopeStores`: with no kind registered nothing can hold a store, and the
+ * answer is none. Otherwise a version that cannot be named, a manifest that cannot be read, or one
+ * the gate says may hold a store without naming it refuses (503), rather than let a backup, a
+ * wipe, a replay or an erasure skip a store that may hold data.
+ *
+ * `running` is a resolution the caller already holds (`runningVersionOf`), so a caller that fences
+ * on the version reads it once and judges the stores against the same read.
+ */
+export declare function runningVersionStoresOf(admin: Pick<HostAdmin, 'verticalServing' | 'versionManifest'>, actor: PlatformActorId, scope: Pick<Scope, 'id' | 'vertical' | 'verticalVersionId' | 'servingRef'>, kinds?: readonly StoreKindRegistration[], running?: RunningVersion): Promise<DeclaredScopeStore[]>;
+/**
+ * What the lifecycle reaches for a scope (#2286, L17): the running version's stores
+ * (`runningVersionStoresOf`, which still fails closed first), and every binding any version of its
+ * vertical has declared (`HostAdmin.verticalScopeStores`, read by its keys). Export, wipe, erasure
+ * and the meter reach `all`, so an object under a binding a later version dropped is still
+ * reached. A restore imports only into `running` (L8).
+ *
+ * A binding keeps its kind for the life of the vertical, since publish refuses a re-kind; a
+ * running version whose kind disagrees with the record, or a record that cannot be read,
+ * refuses (503).
+ */
+export declare function scopeStoreReachOf(admin: Pick<HostAdmin, 'verticalServing' | 'versionManifest' | 'verticalScopeStores'>, actor: PlatformActorId, scope: Pick<Scope, 'id' | 'vertical' | 'verticalVersionId' | 'servingRef'>, kinds?: readonly StoreKindRegistration[], running?: RunningVersion): Promise<{
+    running: DeclaredScopeStore[];
+    all: DeclaredScopeStore[];
+}>;
+/** `scopeStoreReachOf`'s `all`: every store the lifecycle reaches for a scope (#2286). */
+export declare function scopeStoresOf(admin: Pick<HostAdmin, 'verticalServing' | 'versionManifest' | 'verticalScopeStores'>, actor: PlatformActorId, scope: Pick<Scope, 'id' | 'vertical' | 'verticalVersionId' | 'servingRef'>, kinds?: readonly StoreKindRegistration[], running?: RunningVersion): Promise<DeclaredScopeStore[]>;
+/** Sign the envelope and POST the reserved operation at that kind's script. */
+export declare function callPlatformScopeStore(dispatch: PlatformScopeStoreDispatch, target: PlatformScopeStoreTarget, operation: ReservedStoreOperation, input?: unknown): Promise<unknown>;
+/**
+ * The same call at a named script and object: the platform's canary (#2300), which no
+ * (vertical, scope) names. Its answer is parsed as every reserved answer is.
+ */
+export declare function callPlatformScopeStoreAt(dispatch: PlatformScopeStoreDispatch, target: {
+    readonly scriptName: string;
+    readonly objectName: string;
+}, operation: ReservedStoreOperation, input?: unknown): Promise<unknown>;
+/** The five reserved operations, one call per declared binding. */
+export declare function platformScopeStoresFor(dispatch: PlatformScopeStoreDispatch): PlatformScopeStores;
+/**
+ * The caller of a hosted control plane that has no route to the store scripts (#2207): every
+ * call is refused (503). A hosted control plane always passes a caller, this one included, so
+ * a missing route refuses the backup, wipe or erasure that needs a store instead of skipping it.
+ */
+export declare function unreachablePlatformScopeStores(): PlatformScopeStores;
+//# sourceMappingURL=platform-scope-stores.d.ts.map

package/dist/platform-scope-stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-scope-stores.d.ts","sourceRoot":"","sources":["../src/platform-scope-stores.ts"],"names":[],"mappings":"AAAA,OAAO,EAeL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,KAAK,EACV,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA8B,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAIlF;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACvC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAA;KAAE,EAAE,CAAC,CAAC;IAC3E,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,SAAS;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,cAAc,EAAE,CAAA;SAAE,EAAE,CAAC;KAChF,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACvC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IACnD,UAAU,CAAC,KAAK,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACvC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,KAAK,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;KACvC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;CACnD;AAED,gGAAgG;AAChG,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,kBAAkB,EAAE,CAalF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrE;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EACzC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,mBAAmB,GAAG,YAAY,CAAC,GAClE,OAAO,CAAC,cAAc,CAAC,CAUzB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,GAAG,gBAAgB,CAAC,EAC1D,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,GAAG,iBAAiB,CAAC,EAC7D,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,UAAU,GAAG,mBAAmB,GAAG,YAAY,CAAC,EAC1E,KAAK,GAAE,SAAS,qBAAqB,EAAgB,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAU/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,qBAAqB,CAAC,EACrF,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,UAAU,GAAG,mBAAmB,GAAG,YAAY,CAAC,EAC1E,KAAK,GAAE,SAAS,qBAAqB,EAAgB,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,GAAG,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAC,CAkBvE;AAED,0FAA0F;AAC1F,wBAAsB,aAAa,CACjC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,qBAAqB,CAAC,EACrF,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,UAAU,GAAG,mBAAmB,GAAG,YAAY,CAAC,EAC1E,KAAK,GAAE,SAAS,qBAAqB,EAAgB,EACrD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAE/B;AASD,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,0BAA0B,EACpC,MAAM,EAAE,wBAAwB,EAChC,SAAS,EAAE,sBAAsB,EACjC,KAAK,CAAC,EAAE,OAAO,GACd,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,0BAA0B,EACpC,MAAM,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EACpE,SAAS,EAAE,sBAAsB,EACjC,KAAK,CAAC,EAAE,OAAO,GACd,OAAO,CAAC,OAAO,CAAC,CA6ClB;AAED,mEAAmE;AACnE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,0BAA0B,GAAG,mBAAmB,CA6ChG;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,mBAAmB,CAKpE"}