@substrat-run/control-plane-api 0.150.0 → 0.152.0

package/dist/preview-auth.js

@@ -1,4 +1,4 @@
-import { SHARED_ISSUER_CONFIG_KEY, oidcCallbackUrl, } from '@substrat-run/contracts';
+import { MCP_RESOURCES_CONFIG_PREFIX, SHARED_ISSUER_CONFIG_KEY, mcpResourceOf, oidcCallbackUrl, } from '@substrat-run/contracts';
 import { ControlPlaneError } from '@substrat-run/control-plane-client';
 /**
  * A preview's login (#1704) — the control plane's half. The issuer's half, and why the
@@ -36,6 +36,38 @@ import { ControlPlaneError } from '@substrat-run/control-plane-client';
  *      exists) means stop: the push that minted it owns what happens next. Only `kept: false`
  *      — its own client vanished while its version is still bound — is retried, three
  *      attempts in all; running out is a failure, never a success.
+ *
+ * ## Its MCP endpoint
+ *
+ * The issuer that now signs the preview in is also told to mint for the preview's MCP
+ * endpoint, or an MCP client pointed at the preview meets `invalid_target` before any login
+ * page (#1619). It is the dashboard's own delivery, `substrat:resources:<scope id>` through
+ * the issuer's `/internal/configure`, keyed by the PREVIEW's scope: the issuer touches only
+ * rows marked for that key, so prod's registration is never read or written. The value is
+ * the whole set, so every push re-asserts it at no cost, and the reap clears it. Like the
+ * dashboard's registration it is best-effort: a login that works is not failed for it.
+ *
+ * ## A reap racing a push
+ *
+ * The reap keeps the preview's row until its very last step, so the row alone cannot tell a
+ * push that the preview is going. The reap therefore ARCHIVES it before it touches any issuer
+ * (`retireClientsOfReapedScope`), and a push reads anything but `active` as gone. Archived is
+ * one-way here: no push ever restores a scope. Every issuer write of a push is followed by
+ * one of its looks at the binding before it answers, so either that look came before the
+ * archive, and the reap's issuer step, which runs after the archive, removes what the push
+ * wrote; or the look sees the archive, and the push removes what it wrote itself.
+ *
+ * Both removals clear the registration BEFORE they retire the clients. The issuer refuses to
+ * treat a scope it minted preview clients for as a parent, while the registration's row
+ * carries the same platform marker an app's does; clearing first means that row never
+ * outlives the clients that make the issuer read the scope as a preview.
+ *
+ * One row per endpoint, and the issuer moves it to whichever key delivered it last. A fresh
+ * preview of the same tag holds the same `--<tag>` hostname under a new scope, so a push still
+ * running for the reaped one could move that preview's row onto its own key, and its removal
+ * would then delete it. A push therefore registers only the hostnames the directory says its
+ * preview holds now, and after its removal hands back any such row to the preview of the same
+ * app that holds the hostname (`handBack`).
  */
 /** The capability a vertical declares to be a team issuer (manifest `provides`, #427). */
 const OIDC_ISSUER = 'oidc-issuer';
@@ -44,6 +76,8 @@ const LEGACY_ISSUER_SLUG = 'auth-server';
 /** The most callbacks a parent's hostnames yield in one check (the wire bound). */
 const MAX_PARENT_CALLBACKS = 32;
 const MAX_ATTEMPTS = 3;
+/** The statuses `archiveScope` leaves; anything else is gone already, or past archived. */
+const ARCHIVABLE = new Set(['provisioning', 'active', 'suspended']);
 /** The team's own auth-servers: active, not a fork, not a preview, of a vertical that provides `oidc-issuer`. */
 export async function tenantIssuers(deps, tenantId) {
     const verticals = await deps.admin.listVerticals(deps.actor);
@@ -59,6 +93,10 @@ function issuerHostname(bound) {
     return (pick(active) ?? pick(live))?.hostname;
 }
 const reasonOf = (e) => (e instanceof Error ? e.message : String(e));
+/** The issuer's registration of a preview's MCP endpoints (#1619's entry): `[]` clears them. */
+function previewResourcesEntry(previewScopeId, resources) {
+    return { key: `${MCP_RESOURCES_CONFIG_PREFIX}${previewScopeId}`, value: resources.length > 0 ? JSON.stringify(resources) : '' };
+}
 /** Re-exported for the preview routes, which name a preview's callback on every row. */
 export { oidcCallbackUrl };
 /** Why a push left the login alone, as `preview create` reports it. */
@@ -157,15 +195,87 @@ export async function wirePreviewAuth(deps, input) {
     const issuer = `https://${claim.hostname}`;
     const address = { tenantId: input.tenantId, scopeId: claim.scope.id, previewScopeId: input.previewId };
     const retireOwn = (minted) => claim.client.retirePreviewClients({ ...address, only: minted.clientId }).then(() => null, (e) => reasonOf(e));
+    /** Deliver a scope's whole set of MCP endpoints, under that scope's own key, at this issuer. */
+    const registerMcp = (scopeId, hosts) => (deps.retry ?? ((fn) => fn()))(() => claim.client.configureInstance({
+        tenantId: input.tenantId,
+        scopeId: claim.scope.id,
+        entries: [previewResourcesEntry(scopeId, hosts.map((h) => mcpResourceOf(`https://${h}`)))],
+    }));
+    /**
+     * The hostnames a scope's endpoints are, by the dashboard's rule (`mcpResourcesFor`): every
+     * one the directory says it actively answers on NOW. Never one it no longer holds: the issuer
+     * moves a row to whichever key delivered it last, so a push still running for a reaped
+     * preview must not claim the `--<tag>` hostname a newer preview of the same tag holds.
+     */
+    const activeHosts = async (scopeId) => [
+        ...new Set((await deps.admin.listHostnames(deps.actor, { scopeId }))
+            .filter((h) => h.status === 'active')
+            .map((h) => h.hostname)),
+    ].sort();
+    /** Anything but `active` is gone: the reap archives a preview before its issuer step. */
     const bound = async () => {
         const rec = await deps.admin.getScopeRecord(deps.actor, input.tenantId, input.previewId);
         if (!rec || rec.status !== 'active')
             return 'gone';
         return rec.verticalVersionId === input.versionId ? 'ours' : 'moved';
     };
+    /** Set once this push has minted: from then on it may have left something at the issuer. */
+    let wrote = false;
+    /** What this push last asked the issuer to register — the rows its delivery may have moved. */
+    let registeredHosts = [];
+    /** Is this scope an active preview of the same app — one a hand-back may write for? */
+    const liveSibling = async (scopeId) => {
+        const rec = await deps.admin.getScopeRecord(deps.actor, input.tenantId, scopeId);
+        return rec?.status === 'active' && rec.kind === 'preview' && rec.forkedFrom === parent.id;
+    };
+    /**
+     * After this push cleared its own key: hand back a row it moved off a NEWER preview of the
+     * same app (the same `--<tag>` hostname under a fresh scope), which the clear just deleted.
+     * The directory names who holds each hostname now; that preview gets its own whole set back
+     * under its own key, as its own push sends it. Anything else holding one is left alone.
+     *
+     * The hand-back is an issuer write like any other, so it is followed by a look: a holder
+     * reaped while it was in flight has its key cleared again. Its reap archives it before its
+     * own clear, so either this look sees the archive or that clear lands after this write.
+     */
+    const handBack = async () => {
+        const holders = new Set();
+        for (const hostname of registeredHosts) {
+            const route = await deps.admin.resolveHostname(hostname);
+            if (route && route.tenantId === input.tenantId && route.scopeId !== input.previewId)
+                holders.add(route.scopeId);
+        }
+        for (const holder of holders) {
+            if (!(await liveSibling(holder)))
+                continue;
+            await registerMcp(holder, await activeHosts(holder));
+            if (!(await liveSibling(holder)))
+                await registerMcp(holder, []);
+        }
+    };
     const reapedMeanwhile = async () => {
-        // The preview was reaped while this push ran: nothing may outlive it at the issuer.
-        await claim.client.retirePreviewClients(address).catch(() => undefined);
+        // The preview was reaped while this push ran. What this push wrote after the reap's issuer
+        // step is this push's to remove (see "A reap racing a push"), and a step that fails is
+        // said, each in its own words: after the row is gone, nothing names those writes again.
+        // Every step runs whatever the others did, except that the clients stay when the clear
+        // failed, so the registration never outlives them (clear first, as the reap does).
+        if (wrote) {
+            const failed = [];
+            const step = (what, run) => run().then(() => true, (e) => {
+                failed.push(`${what} failed (${reasonOf(e)})`);
+                return false;
+            });
+            const cleared = await step("clearing this preview's MCP registration", () => registerMcp(input.previewId, []));
+            await step('handing back the MCP registration of the newer preview that holds its hostname', handBack);
+            if (cleared)
+                await step("deleting this push's client", () => claim.client.retirePreviewClients(address));
+            else
+                failed.push("its client was kept, so it does not outlive the registration that failed to clear");
+            if (failed.length > 0) {
+                throw new ControlPlaneError(502, `preview '${input.tag}' was reaped while this push ran, and at the auth server ${claim.scope.id} ` +
+                    `${failed.join('; ')}.`);
+            }
+        }
         return superseded(callbackUrl, 'the preview was reaped while this push ran');
     };
     const noLogin = (why) => new ControlPlaneError(502, `preview '${input.tag}' was created but has NO working login: ${why}. Re-run \`preview create\` to retry.`);
@@ -189,6 +299,7 @@ export async function wirePreviewAuth(deps, input) {
         catch (e) {
             throw noLogin(`the auth server ${claim.scope.id} did not mint its client (${reasonOf(e)})`);
         }
+        wrote = true;
         try {
             await input.deliver([
                 {
@@ -205,29 +316,51 @@ export async function wirePreviewAuth(deps, input) {
                 (cleanup ? `, and removing that client failed too (${cleanup}) — the preview's reap removes it` : ''));
         }
         const after = await bound();
-        if (after !== 'ours') {
+        if (after === 'gone')
+            return reapedMeanwhile(); // which removes our client with the rest
+        if (after === 'moved') {
             // Our client sits only in our own version's store, which is no longer served.
             await retireOwn(minted);
-            return after === 'gone' ? reapedMeanwhile() : superseded(callbackUrl, 'another push re-bound the preview');
+            return superseded(callbackUrl, 'another push re-bound the preview');
         }
-        let retired;
+        // Delivered and bound: the issuer signs this preview in now, so it may mint for the
+        // preview's MCP endpoints too. A repeat (a retry below, every later push) writes nothing.
+        const mcp = await activeHosts(input.previewId)
+            .then(async (hosts) => {
+            registeredHosts = hosts;
+            await registerMcp(input.previewId, hosts);
+            return hosts.length > 0
+                ? ` MCP: ${hosts.map((h) => mcpResourceOf(`https://${h}`)).join(', ')} registered there too, and un-registered by the same reap.`
+                : ` MCP: the preview answers on no active hostname yet, so no endpoint of it is registered there.`;
+        })
+            .catch((e) => ` MCP: the preview's endpoint could not be registered there (${reasonOf(e)}), so an MCP client ` +
+            `pointed at the preview gets invalid_target until the next push registers it.`);
+        let older = '';
         try {
-            retired = await claim.client.retirePreviewClients({ ...address, keep: minted.clientId });
+            const retired = await claim.client.retirePreviewClients({ ...address, keep: minted.clientId });
+            if (retired.kept === false)
+                continue; // our own client vanished while our version is bound
         }
         catch (e) {
             // Delivered and bound: the login works. What is left is older clients, which the next
             // push or the reap removes — said, not hidden.
-            return wired(claim.scope.id, issuer, minted.clientId, callbackUrl, ` Older clients of this preview could not be removed yet (${reasonOf(e)}); the next push or the reap removes them.`);
+            older = ` Older clients of this preview could not be removed yet (${reasonOf(e)}); the next push or the reap removes them.`;
         }
-        if (retired.kept === false)
-            continue; // our own client vanished while our version is bound
+        // The look after this push's last issuer write, on every way to `wired` (see "A reap racing a push").
         if ((await bound()) === 'gone')
             return reapedMeanwhile();
-        return wired(claim.scope.id, issuer, minted.clientId, callbackUrl);
+        return wired(claim.scope.id, issuer, minted.clientId, callbackUrl, `${mcp}${older}`);
     }
+    // The last attempt's `continue` lands here, after its writes: the same look, before giving up,
+    // and the same answers the loop gives.
+    const last = await bound();
+    if (last === 'gone')
+        return reapedMeanwhile();
+    if (last === 'moved')
+        return superseded(callbackUrl, 'another push re-bound the preview');
     throw noLogin(`its client kept disappearing at the auth server ${claim.scope.id} (${MAX_ATTEMPTS} attempts)`);
 }
-function wired(issuerScopeId, issuer, clientId, callbackUrl, extra = '') {
+function wired(issuerScopeId, issuer, clientId, callbackUrl, extra) {
     return {
         status: 'wired',
         callbackUrl,
@@ -237,11 +370,14 @@ function wired(issuerScopeId, issuer, clientId, callbackUrl, extra = '') {
         note: `Sign-in: this preview has its own client at your auth server ${issuer} (client ${clientId}); it is deleted when the preview is reaped.${extra}`,
     };
 }
+/** A refusal that says the deployment does not implement the call: it cannot hold what the call removes. */
+const predates = (e) => e instanceof ControlPlaneError && e.status === 501;
 /**
- * Delete every client minted for a preview, at every auth-server of its tenant — the reap's
- * half, run BEFORE the preview's storage and row go, so a failure leaves a preview a retry can
- * still find. An auth-server that predates preview clients cannot have minted one and is
- * skipped; any other failure throws.
+ * Un-register a preview's MCP endpoint and delete every client minted for it, at every
+ * auth-server of its tenant, in that order (see "A reap racing a push") — the reap's half,
+ * run BEFORE the preview's storage and row go, so a failure leaves a preview a retry can still
+ * find. A deployment that takes no delivery holds no registration, and one that predates
+ * preview clients holds no client; each is skipped for that half. Any other failure throws.
  */
 export async function retireAllPreviewClients(deps, tenantId, previewScopeId) {
     const deleted = [];
@@ -249,25 +385,46 @@ export async function retireAllPreviewClients(deps, tenantId, previewScopeId) {
         const client = await deps.issuerClient(scope);
         if (!client)
             throw new ControlPlaneError(502, `the auth server ${scope.id} could not be reached to delete preview ${previewScopeId}'s clients`);
+        await client
+            .configureInstance({ tenantId, scopeId: scope.id, entries: [previewResourcesEntry(previewScopeId, [])] })
+            .catch((e) => {
+            if (!predates(e))
+                throw e;
+        });
         try {
             deleted.push(...(await client.retirePreviewClients({ tenantId, scopeId: scope.id, previewScopeId })).deleted);
         }
         catch (e) {
-            if (e instanceof ControlPlaneError && e.status === 501)
-                continue;
-            throw e;
+            if (!predates(e))
+                throw e;
         }
     }
     return deleted;
 }
 /**
  * The reap's half for ANY scope about to go, as the platform sweep's expiry GC sees it: a
- * preview fork's clients are retired, and anything else — a snapshot, a clean room — has none
- * and is left alone. One predicate for the interactive reap and the sweep, so they agree.
+ * preview fork is archived — so no push still running can wire it again — and then its MCP
+ * registration is cleared and its clients retired; anything else — a snapshot, a clean room —
+ * has neither and is left alone. One predicate for the interactive reap and the sweep, so
+ * they agree. A reap that fails after the archive leaves an archived preview, which the reap's
+ * retry (the DELETE, the sweep's next pass, a create of the same tag) finds and finishes.
  */
 export async function retireClientsOfReapedScope(deps, scope) {
     if (!scope || scope.kind !== 'preview' || !scope.forkedFrom)
         return [];
+    await archiveForReap(deps, scope);
     return retireAllPreviewClients(deps, scope.tenantId, scope.id);
 }
+/** Archive a preview about to be reaped, unless it is archived (or gone) already — by a reap racing this one, too. */
+async function archiveForReap(deps, scope) {
+    const current = async () => (await deps.admin.getScopeRecord(deps.actor, scope.tenantId, scope.id))?.status;
+    const status = await current();
+    if (status === undefined || !ARCHIVABLE.has(status))
+        return;
+    await deps.admin.archiveScope(deps.actor, scope.tenantId, scope.id).catch(async (e) => {
+        const now = await current();
+        if (now !== undefined && ARCHIVABLE.has(now))
+            throw e;
+    });
+}
 //# sourceMappingURL=preview-auth.js.map

package/dist/preview-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"preview-auth.js","sourceRoot":"","sources":["../src/preview-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,eAAe,GAQhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAGvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,0FAA0F;AAC1F,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,YAAY,GAAG,CAAC,CAAC;AASvB,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAqB,EAAE,QAAkB;IAC3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAC9H,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,cAAc,CAAC,KAAiC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,EAA8B,EAAE,EAAE,CAC9C,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC;AAChD,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtF,wFAAwF;AACxF,OAAO,EAAE,eAAe,EAAE,CAAC;AAiB3B,uEAAuE;AACvE,SAAS,UAAU,CAAC,WAAmB,EAAE,GAAW;IAClD,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,WAAW;QACX,IAAI,EAAE,YAAY,GAAG,yEAAyE;KAC/F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB,EAAE,KAA2B;IACtF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,WAAW;YACX,IAAI,EAAE,sGAAsG;SAC7G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,kBAAkB,GAAG;QACzB,GAAG,IAAI,GAAG,CACR,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;aACjE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAC3C;KACF,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAe,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,cAAc;QACtB,WAAW;QACX,IAAI,EACF,yGAAyG;YACzG,4CAA4C,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,sCAAsC;YAC1G,6BAA6B,WAAW,+DAA+D;YACvG,yGAAyG;YACzG,sGAAsG;YACtG,oBAAoB;KACvB,CAAC,CAAC;IACH,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,iDAAiD,CAAC,CAAC;IAE5G,sEAAsE;IACtE,MAAM,MAAM,GAAsE,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAuD,EAAE,CAAC;IACxE,KAAK,MAAM,KAAK,IAAI,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC;gBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,aAAa,EAAE,MAAM,CAAC,EAAE;gBACxB,kBAAkB;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;gBAChH,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,WAAW;YACX,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,EACF,gFAAgF;gBAChF,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD;gBAC/F,qGAAqG;SACxG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,EAAE,CAAC;QACjD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW;YACX,OAAO,EAAE,QAAQ;YACjB,IAAI,EACF,yBAAyB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,gBAAgB;gBACvG,uBAAuB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAC7G,gFAAgF;SACnF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACvG,MAAM,SAAS,GAAG,CAAC,MAA2B,EAAE,EAAE,CAChD,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC3E,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5B,CAAC;IACJ,MAAM,KAAK,GAAG,KAAK,IAAwC,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QACnD,OAAO,GAAG,CAAC,iBAAiB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,IAA0B,EAAE;QACvD,oFAAoF;QACpF,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxE,OAAO,UAAU,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAqB,EAAE,CACjD,IAAI,iBAAiB,CACnB,GAAG,EACH,YAAY,KAAK,CAAC,GAAG,2CAA2C,GAAG,uCAAuC,CAC3G,CAAC;IAEJ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,eAAe,EAAE,CAAC;QAChD,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAE5F,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBAC5C,GAAG,OAAO;gBACV,aAAa,EAAE,MAAM,CAAC,EAAE;gBACxB,kBAAkB;gBAClB,WAAW,EAAE,WAAW;gBACxB,qBAAqB,EAAE,WAAW,KAAK,CAAC,eAAe,GAAG;gBAC1D,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,GAAG,GAAG;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,CAAC,mBAAmB,KAAK,CAAC,KAAK,CAAC,EAAE,6BAA6B,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC;gBAClB;oBACE,GAAG,EAAE,eAAe;oBACpB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;iBAC9G;gBACD,iGAAiG;gBACjG,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,CACX,iCAAiC,QAAQ,CAAC,CAAC,CAAC,GAAG;gBAC7C,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C,OAAO,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC,CACxG,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,8EAA8E;YAC9E,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAC7G,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sFAAsF;YACtF,+CAA+C;YAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,4DAA4D,QAAQ,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC;QAC1L,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;YAAE,SAAS,CAAC,qDAAqD;QAC3F,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,KAAK,MAAM;YAAE,OAAO,eAAe,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,CAAC,mDAAmD,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,YAAY,YAAY,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,KAAK,CAAC,aAAsB,EAAE,MAAc,EAAE,QAAgB,EAAE,WAAmB,EAAE,KAAK,GAAG,EAAE;IACtG,OAAO;QACL,MAAM,EAAE,OAAO;QACf,WAAW;QACX,MAAM;QACN,aAAa;QACb,QAAQ;QACR,IAAI,EAAE,gEAAgE,MAAM,YAAY,QAAQ,+CAA+C,KAAK,EAAE;KACvJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAqB,EACrB,QAAkB,EAClB,cAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,KAAK,CAAC,EAAE,2CAA2C,cAAc,YAAY,CAAC,CAAC;QAChJ,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,SAAS;YACjE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAqB,EAAE,KAAwB;IAC9F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IACvE,OAAO,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"preview-auth.js","sourceRoot":"","sources":["../src/preview-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,aAAa,EACb,eAAe,GAQhB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAGvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAEH,0FAA0F;AAC1F,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,YAAY,GAAG,CAAC,CAAC;AAWvB,2FAA2F;AAC3F,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEzF,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAqB,EAAE,QAAkB;IAC3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAC9H,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,cAAc,CAAC,KAAiC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,EAA8B,EAAE,EAAE,CAC9C,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC;AAChD,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtF,gGAAgG;AAChG,SAAS,qBAAqB,CAAC,cAAuB,EAAE,SAA4B;IAClF,OAAO,EAAE,GAAG,EAAE,GAAG,2BAA2B,GAAG,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAClI,CAAC;AAED,wFAAwF;AACxF,OAAO,EAAE,eAAe,EAAE,CAAC;AAiB3B,uEAAuE;AACvE,SAAS,UAAU,CAAC,WAAmB,EAAE,GAAW;IAClD,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,WAAW;QACX,IAAI,EAAE,YAAY,GAAG,yEAAyE;KAC/F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB,EAAE,KAA2B;IACtF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,WAAW;YACX,IAAI,EAAE,sGAAsG;SAC7G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,kBAAkB,GAAG;QACzB,GAAG,IAAI,GAAG,CACR,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;aACjE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAC3C;KACF,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAe,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,cAAc;QACtB,WAAW;QACX,IAAI,EACF,yGAAyG;YACzG,4CAA4C,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,sCAAsC;YAC1G,6BAA6B,WAAW,+DAA+D;YACvG,yGAAyG;YACzG,sGAAsG;YACtG,oBAAoB;KACvB,CAAC,CAAC;IACH,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,iDAAiD,CAAC,CAAC;IAE5G,sEAAsE;IACtE,MAAM,MAAM,GAAsE,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAuD,EAAE,CAAC;IACxE,KAAK,MAAM,KAAK,IAAI,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC;gBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,aAAa,EAAE,MAAM,CAAC,EAAE;gBACxB,kBAAkB;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;gBAChH,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,WAAW;YACX,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,EACF,gFAAgF;gBAChF,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD;gBAC/F,qGAAqG;SACxG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,EAAE,CAAC;QACjD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW;YACX,OAAO,EAAE,QAAQ;YACjB,IAAI,EACF,yBAAyB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,gBAAgB;gBACvG,uBAAuB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAC7G,gFAAgF;SACnF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACvG,MAAM,SAAS,GAAG,CAAC,MAA2B,EAAE,EAAE,CAChD,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC3E,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5B,CAAC;IACJ,gGAAgG;IAChG,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,KAAwB,EAAE,EAAE,CACjE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAClC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QACvB,OAAO,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;KAC3F,CAAC,CACH,CAAC;IACJ;;;;;OAKG;IACH,MAAM,WAAW,GAAG,KAAK,EAAE,OAAgB,EAAqB,EAAE,CAChE;QACE,GAAG,IAAI,GAAG,CACR,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC1B;KACF,CAAC,IAAI,EAAE,CAAC;IACX,yFAAyF;IACzF,MAAM,KAAK,GAAG,KAAK,IAAwC,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QACnD,OAAO,GAAG,CAAC,iBAAiB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,CAAC,CAAC;IACF,4FAA4F;IAC5F,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,+FAA+F;IAC/F,IAAI,eAAe,GAAa,EAAE,CAAC;IACnC,uFAAuF;IACvF,MAAM,WAAW,GAAG,KAAK,EAAE,OAAgB,EAAoB,EAAE;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC;IACF;;;;;;;;;OASG;IACH,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAW,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAAE,SAAS;YAC3C,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,IAA0B,EAAE;QACvD,2FAA2F;QAC3F,uFAAuF;QACvF,wFAAwF;QACxF,uFAAuF;QACvF,mFAAmF;QACnF,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAA2B,EAAE,EAAE,CACzD,GAAG,EAAE,CAAC,IAAI,CACR,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,CAAU,EAAE,EAAE;gBACb,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC,CACF,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/G,MAAM,IAAI,CAAC,gFAAgF,EAAE,QAAQ,CAAC,CAAC;YACvG,IAAI,OAAO;gBAAE,MAAM,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;;gBACpG,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;YACtG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,YAAY,KAAK,CAAC,GAAG,4DAA4D,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG;oBAChG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAqB,EAAE,CACjD,IAAI,iBAAiB,CACnB,GAAG,EACH,YAAY,KAAK,CAAC,GAAG,2CAA2C,GAAG,uCAAuC,CAC3G,CAAC;IAEJ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,eAAe,EAAE,CAAC;QAChD,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAE5F,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBAC5C,GAAG,OAAO;gBACV,aAAa,EAAE,MAAM,CAAC,EAAE;gBACxB,kBAAkB;gBAClB,WAAW,EAAE,WAAW;gBACxB,qBAAqB,EAAE,WAAW,KAAK,CAAC,eAAe,GAAG;gBAC1D,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,GAAG,GAAG;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,CAAC,mBAAmB,KAAK,CAAC,KAAK,CAAC,EAAE,6BAA6B,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;QAEb,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC;gBAClB;oBACE,GAAG,EAAE,eAAe;oBACpB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;iBAC9G;gBACD,iGAAiG;gBACjG,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,CACX,iCAAiC,QAAQ,CAAC,CAAC,CAAC,GAAG;gBAC7C,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C,OAAO,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC,CACxG,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,eAAe,EAAE,CAAC,CAAC,yCAAyC;QACzF,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,8EAA8E;YAC9E,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QACtE,CAAC;QAED,oFAAoF;QACpF,0FAA0F;QAC1F,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;aAC3C,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACpB,eAAe,GAAG,KAAK,CAAC;YACxB,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;gBACrB,CAAC,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D;gBACjI,CAAC,CAAC,gGAAgG,CAAC;QACvG,CAAC,CAAC;aACD,KAAK,CACJ,CAAC,CAAU,EAAE,EAAE,CACb,+DAA+D,QAAQ,CAAC,CAAC,CAAC,sBAAsB;YAChG,8EAA8E,CACjF,CAAC;QAEJ,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/F,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;gBAAE,SAAS,CAAC,qDAAqD;QAC7F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sFAAsF;YACtF,+CAA+C;YAC/C,KAAK,GAAG,4DAA4D,QAAQ,CAAC,CAAC,CAAC,4CAA4C,CAAC;QAC9H,CAAC;QACD,sGAAsG;QACtG,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,KAAK,MAAM;YAAE,OAAO,eAAe,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,+FAA+F;IAC/F,uCAAuC;IACvC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3B,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,EAAE,CAAC;IAC9C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;IAC1F,MAAM,OAAO,CAAC,mDAAmD,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,YAAY,YAAY,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,KAAK,CAAC,aAAsB,EAAE,MAAc,EAAE,QAAgB,EAAE,WAAmB,EAAE,KAAa;IACzG,OAAO;QACL,MAAM,EAAE,OAAO;QACf,WAAW;QACX,MAAM;QACN,aAAa;QACb,QAAQ;QACR,IAAI,EAAE,gEAAgE,MAAM,YAAY,QAAQ,+CAA+C,KAAK,EAAE;KACvJ,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAqB,EACrB,QAAkB,EAClB,cAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,KAAK,CAAC,EAAE,2CAA2C,cAAc,YAAY,CAAC,CAAC;QAChJ,MAAM,MAAM;aACT,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;aACxG,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACL,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAqB,EAAE,KAAwB;IAC9F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IACvE,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,OAAO,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,sHAAsH;AACtH,KAAK,UAAU,cAAc,CAAC,IAAqB,EAAE,KAAY;IAC/D,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;IAC5G,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAU,EAAE,EAAE;QAC7F,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/store-entry.d.ts

@@ -1,4 +1,4 @@
-import { type DeclaredBinding } from '@substrat-run/contracts';
+import { type DeclaredBinding, type PythonStoreModuleClass } from '@substrat-run/contracts';
 import type { VerticalBundle } from './deploy.js';
 export { STORE_CLASS_PLACEHOLDER, STORE_ENTRY_MODULE, STORE_ENTRY_PYTHON_MODULE, STORE_ENTRY_PYTHON_SOURCE, STORE_ENTRY_PYTHON_VERIFIER_SOURCE, STORE_ENTRY_SOURCE, STORE_DRIVER_PLACEHOLDER, STORE_OBJECT_BINDING, STORE_OBJECT_CLASS, STORE_PYTHON_COMPATIBILITY_DATE, STORE_RESERVED_MODULES, STORE_VERIFIER_MODULE, } from './store-entry.generated.js';
 export interface StoreEntryOptions {
@@ -67,24 +67,34 @@ export interface PythonStoreScript {
     readonly compatibilityFlags: readonly string[];
     readonly bindings: readonly DeclaredBinding[];
 }
+/**
+ * Workers' Data module type. Vendored `python_modules/` files, `.py` included, upload as this:
+ * that is the multipart type a Data module uses, and it is what the upload already sends for
+ * opaque bytes. The driver's own `.py` modules stay `text/x-python`.
+ */
+export declare const STORE_PYTHON_DATA_CONTENT_TYPE = "application/octet-stream";
 /**
  * The store script as uploaded for a Python driver (#2290, #2210). The Python entry is the main
  * module, with the driver's module and class in place of its two placeholders, and the verifier
  * it imports is shipped beside it, so it runs the JavaScript entry's check. The driver's modules
- * follow, byte for byte. The bindings and the two flags are the JavaScript entry's
- * (`withStoreEntry`), with `python_workers`.
+ * follow, byte for byte, and so do its vendored `python_modules/` (#2390), as Data modules. The
+ * bindings and the two flags are the JavaScript entry's (`withStoreEntry`), with `python_workers`.
+ *
+ * The script imports `workers` from the Python workers runtime those flags and
+ * {@link STORE_PYTHON_COMPATIBILITY_DATE} select. The release does not ship that SDK.
  *
  * Refused, before anything is built (D-63): a class name that is not a Python identifier or is
- * the entry's own class; a module that is not `driver_<package>/…/<module>.py`; modules under more
- * than one package; a module named twice; an entry that is not one of the modules; and
- * whatever `withStoreEntry` refuses of the script name and the keys. A reserved module name
- * cannot pass the path rule, and is refused again by name.
+ * the entry's own class; a module {@link classifyPythonStoreModule} refuses; modules under more
+ * than one `driver_` package; a module named twice; an entry that is not one of the modules, or
+ * not a driver module; and whatever `withStoreEntry` refuses of the script name and the keys. A
+ * reserved module name is refused again by name.
  */
 export declare function withPythonStoreEntry(release: PythonStoreDriverRelease, options: StoreEntryOptions): PythonStoreScript;
 /**
- * The module rule of a Python driver's release (D-63): every module is `driver_<package>/…/<module>.py`
- * under one package, none twice, and the entry is one of them. The upload applies it when a
- * release arrives (#2300), and `withPythonStoreEntry` again before every script it builds.
+ * The module rule of a Python driver's release (D-63, #2390): one `driver_<package>` of `.py`
+ * modules, optionally `python_modules/<path>` beside it, none twice, and the entry one of the
+ * driver modules. The upload applies it when a release arrives (#2300), and `withPythonStoreEntry`
+ * again before every script it builds. Returns each module's class, so nothing classifies twice.
  */
-export declare function assertPythonDriverModules(release: PythonStoreDriverRelease): void;
+export declare function assertPythonDriverModules(release: PythonStoreDriverRelease): ReadonlyMap<string, PythonStoreModuleClass>;
 //# sourceMappingURL=store-entry.d.ts.map

package/dist/store-entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-entry.d.ts","sourceRoot":"","sources":["../src/store-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAqBlD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,0FAA0F;IAC1F,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAKD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAuC/D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAC5B,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,UAAU,GAAG,oBAAoB,CAAC,CAAC,EAChF,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,CAAC,CAqC1C;AAED,kFAAkF;AAClF,MAAM,WAAW,wBAAwB;IACvC,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;CACtF;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC/C;AAUD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAwBrH;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAkBjF"}
+{"version":3,"file":"store-entry.d.ts","sourceRoot":"","sources":["../src/store-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuD,KAAK,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjJ,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAqBlD,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,0FAA0F;IAC1F,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAKD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAuC/D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAC5B,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,UAAU,GAAG,oBAAoB,CAAC,CAAC,EAChF,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,iBAAiB,GAAG,CAAC,CAqC1C;AAED,kFAAkF;AAClF,MAAM,WAAW,wBAAwB;IACvC,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;CACtF;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC/C;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAEzE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CA4BrH;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,wBAAwB,GAAG,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAsBxH"}

package/dist/store-entry.js

@@ -1,4 +1,4 @@
-import { scopeStorePublicKeysFrom } from '@substrat-run/contracts';
+import { classifyPythonStoreModule, scopeStorePublicKeysFrom } from '@substrat-run/contracts';
 import { STORE_CALLER_KEYS_VAR, STORE_CLASS_PLACEHOLDER, STORE_ENTRY_MODULE, STORE_ENTRY_PYTHON_MODULE, STORE_ENTRY_PYTHON_SOURCE, STORE_ENTRY_PYTHON_VERIFIER_SOURCE, STORE_ENTRY_SOURCE, STORE_DRIVER_PLACEHOLDER, STORE_OBJECT_BINDING, STORE_OBJECT_CLASS, STORE_PLATFORM_KEYS_VAR, STORE_PYTHON_COMPATIBILITY_DATE, STORE_PYTHON_COMPATIBILITY_FLAGS, STORE_RESERVED_BINDING_PREFIX, STORE_RESERVED_MODULES, STORE_SCRIPT_VAR, STORE_VERIFIER_MODULE, } from './store-entry.generated.js';
 export { STORE_CLASS_PLACEHOLDER, STORE_ENTRY_MODULE, STORE_ENTRY_PYTHON_MODULE, STORE_ENTRY_PYTHON_SOURCE, STORE_ENTRY_PYTHON_VERIFIER_SOURCE, STORE_ENTRY_SOURCE, STORE_DRIVER_PLACEHOLDER, STORE_OBJECT_BINDING, STORE_OBJECT_CLASS, STORE_PYTHON_COMPATIBILITY_DATE, STORE_RESERVED_MODULES, STORE_VERIFIER_MODULE, } from './store-entry.generated.js';
 /** A module name the uploader can write and the entry can import: relative, no `..`, JavaScript. */
@@ -106,28 +106,30 @@ export function withStoreEntry(bundle, options) {
     };
 }
 /**
- * A Python driver module's path: one top-level package that starts with `driver_`, then
- * identifiers, ending in `.py`. The prefix keeps a driver's modules off every name the Python
- * entry imports or the runtime provides (`workers`, `js`, `pyodide`, the entry, its verifier),
- * and off `metadata`, the upload's own form part.
+ * Workers' Data module type. Vendored `python_modules/` files, `.py` included, upload as this:
+ * that is the multipart type a Data module uses, and it is what the upload already sends for
+ * opaque bytes. The driver's own `.py` modules stay `text/x-python`.
  */
-const PYTHON_DRIVER_MODULE = /^(driver_[a-z0-9_]+)(?:\/[A-Za-z_][A-Za-z0-9_]*)*\/[A-Za-z_][A-Za-z0-9_]*\.py$/;
+export const STORE_PYTHON_DATA_CONTENT_TYPE = 'application/octet-stream';
 /**
  * The store script as uploaded for a Python driver (#2290, #2210). The Python entry is the main
  * module, with the driver's module and class in place of its two placeholders, and the verifier
  * it imports is shipped beside it, so it runs the JavaScript entry's check. The driver's modules
- * follow, byte for byte. The bindings and the two flags are the JavaScript entry's
- * (`withStoreEntry`), with `python_workers`.
+ * follow, byte for byte, and so do its vendored `python_modules/` (#2390), as Data modules. The
+ * bindings and the two flags are the JavaScript entry's (`withStoreEntry`), with `python_workers`.
+ *
+ * The script imports `workers` from the Python workers runtime those flags and
+ * {@link STORE_PYTHON_COMPATIBILITY_DATE} select. The release does not ship that SDK.
  *
  * Refused, before anything is built (D-63): a class name that is not a Python identifier or is
- * the entry's own class; a module that is not `driver_<package>/…/<module>.py`; modules under more
- * than one package; a module named twice; an entry that is not one of the modules; and
- * whatever `withStoreEntry` refuses of the script name and the keys. A reserved module name
- * cannot pass the path rule, and is refused again by name.
+ * the entry's own class; a module {@link classifyPythonStoreModule} refuses; modules under more
+ * than one `driver_` package; a module named twice; an entry that is not one of the modules, or
+ * not a driver module; and whatever `withStoreEntry` refuses of the script name and the keys. A
+ * reserved module name is refused again by name.
  */
 export function withPythonStoreEntry(release, options) {
     assertDriverClass(options.className, /^[A-Za-z_][A-Za-z0-9_]*$/);
-    assertPythonDriverModules(release);
+    const classes = assertPythonDriverModules(release);
     const bindings = storeEntryBindings(options);
     const driverModule = release.entry.replace(/\.py$/, '').replaceAll('/', '.');
     const source = STORE_ENTRY_PYTHON_SOURCE.split(STORE_DRIVER_PLACEHOLDER)
@@ -143,7 +145,11 @@ export function withPythonStoreEntry(release, options) {
                 content: encode(STORE_ENTRY_PYTHON_VERIFIER_SOURCE),
                 contentType: 'application/javascript+module',
             },
-            ...release.modules.map((module) => ({ name: module.name, content: module.content, contentType: 'text/x-python' })),
+            ...release.modules.map((module) => ({
+                name: module.name,
+                content: module.content,
+                contentType: classes.get(module.name).kind === 'vendored' ? STORE_PYTHON_DATA_CONTENT_TYPE : 'text/x-python',
+            })),
         ],
         compatibilityDate: STORE_PYTHON_COMPATIBILITY_DATE,
         compatibilityFlags: [...STORE_PYTHON_COMPATIBILITY_FLAGS, STORE_DISALLOW_IMPORTABLE_ENV, STORE_DISABLE_CTX_EXPORTS],
@@ -151,28 +157,35 @@ export function withPythonStoreEntry(release, options) {
     };
 }
 /**
- * The module rule of a Python driver's release (D-63): every module is `driver_<package>/…/<module>.py`
- * under one package, none twice, and the entry is one of them. The upload applies it when a
- * release arrives (#2300), and `withPythonStoreEntry` again before every script it builds.
+ * The module rule of a Python driver's release (D-63, #2390): one `driver_<package>` of `.py`
+ * modules, optionally `python_modules/<path>` beside it, none twice, and the entry one of the
+ * driver modules. The upload applies it when a release arrives (#2300), and `withPythonStoreEntry`
+ * again before every script it builds. Returns each module's class, so nothing classifies twice.
  */
 export function assertPythonDriverModules(release) {
     const packages = new Set();
-    const names = new Set();
+    const classes = new Map();
     for (const module of release.modules) {
-        const path = PYTHON_DRIVER_MODULE.exec(module.name);
-        if (!path || STORE_RESERVED_MODULES.includes(module.name)) {
-            throw new Error(`a store driver release may not ship a module named '${module.name}': a driver module is driver_<package>/…/<module>.py`);
+        if (STORE_RESERVED_MODULES.includes(module.name)) {
+            throw new Error(`a store driver release may not ship a module named '${module.name}': a driver module is driver_<package>/…/<module>.py, or a dependency is python_modules/<path>`);
         }
-        if (names.has(module.name))
+        const classified = classifyPythonStoreModule(module.name);
+        if (classes.has(module.name))
             throw new Error(`a store driver release ships '${module.name}' twice`);
-        names.add(module.name);
-        packages.add(path[1]);
+        classes.set(module.name, classified);
+        if (classified.kind === 'driver')
+            packages.add(classified.packageName);
     }
     if (packages.size > 1) {
         throw new Error(`a store driver release ships more than one package (${[...packages].sort().join(', ')})`);
     }
-    if (!names.has(release.entry)) {
+    if (packages.size === 0)
+        throw new Error('a store driver release ships no driver_ package');
+    const entry = classes.get(release.entry);
+    if (!entry)
         throw new Error(`store driver entry '${release.entry}' is not one of the release's modules`);
-    }
+    if (entry.kind !== 'driver')
+        throw new Error(`store driver entry '${release.entry}' is not a driver module`);
+    return classes;
 }
 //# sourceMappingURL=store-entry.js.map

package/dist/store-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"store-entry.js","sourceRoot":"","sources":["../src/store-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAwB,MAAM,yBAAyB,CAAC;AAEzF,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,+BAA+B,EAC/B,gCAAgC,EAChC,6BAA6B,EAC7B,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAgBpC,oGAAoG;AACpG,MAAM,WAAW,GAAG,gDAAgD,CAAC;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAE/D,4FAA4F;AAC5F,MAAM,oBAAoB,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;AAE5E,wGAAwG;AACxG,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAoB,CAAC;AAE1G,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAEhE,8FAA8F;AAC9F,SAAS,iBAAiB,CAAC,SAAiB,EAAE,UAAkB;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,wBAAwB,CAAC,CAAC;IAC3G,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,mCAAmC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,OAA0B;IACpD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC;QACpC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO;QACL,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,kBAAkB,EAAE;QAChG,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC;QAC3C,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAG5B,MAAS,EAAE,OAA0B;IACrC,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,KAAK,mDAAmD,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uDAAuD,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qDAAqD,kBAAkB,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACnH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uDAAuD,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1G,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,WAAW,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,wBAAwB,CAAC;SAC9D,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;SACzB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,+BAA+B,CAAC;IAC/C,MAAM,QAAQ,GAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC;IACnF,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QACxG,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,kBAAkB,CAAC;QAC5D,kBAAkB,EAAE;YAClB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,EAAE,6BAA6B,EAAE,yBAAyB,CAAC,CAAC;SAC7G;QACD,QAAQ;KACT,CAAC;AACJ,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,gFAAgF,CAAC;AAE9G;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAiC,EAAE,OAA0B;IAChG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACjE,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,wBAAwB,CAAC;SACrE,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO;QACL,UAAU,EAAE,yBAAyB;QACrC,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;YAC1F;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,MAAM,CAAC,kCAAkC,CAAC;gBACnD,WAAW,EAAE,+BAA+B;aAC7C;YACD,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;SACnH;QACD,iBAAiB,EAAE,+BAA+B;QAClD,kBAAkB,EAAE,CAAC,GAAG,gCAAgC,EAAE,6BAA6B,EAAE,yBAAyB,CAAC;QACnH,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAiC;IACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,CAAC,IAAI,sDAAsD,CAAC,CAAC;QAC5I,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;QACnG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,KAAK,uCAAuC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC"}
+{"version":3,"file":"store-entry.js","sourceRoot":"","sources":["../src/store-entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAqD,MAAM,yBAAyB,CAAC;AAEjJ,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,+BAA+B,EAC/B,gCAAgC,EAChC,6BAA6B,EAC7B,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAgBpC,oGAAoG;AACpG,MAAM,WAAW,GAAG,gDAAgD,CAAC;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAE/D,4FAA4F;AAC5F,MAAM,oBAAoB,GAAG,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;AAE5E,wGAAwG;AACxG,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAoB,CAAC;AAE1G,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAEhE,8FAA8F;AAC9F,SAAS,iBAAiB,CAAC,SAAiB,EAAE,UAAkB;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,wBAAwB,CAAC,CAAC;IAC3G,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,mCAAmC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,OAA0B;IACpD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC;QACpC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,QAAQ,EAAE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO;QACL,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,kBAAkB,EAAE;QAChG,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC;QAC3C,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAG5B,MAAS,EAAE,OAA0B;IACrC,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,KAAK,mDAAmD,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uDAAuD,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qDAAqD,kBAAkB,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACnH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,uDAAuD,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1G,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,WAAW,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,wBAAwB,CAAC;SAC9D,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;SACzB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,+BAA+B,CAAC;IAC/C,MAAM,QAAQ,GAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC;IACnF,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QACxG,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,kBAAkB,CAAC;QAC5D,kBAAkB,EAAE;YAClB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,EAAE,6BAA6B,EAAE,yBAAyB,CAAC,CAAC;SAC7G;QACD,QAAQ;KACT,CAAC;AACJ,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAiC,EAAE,OAA0B;IAChG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,wBAAwB,CAAC;SACrE,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO;QACL,UAAU,EAAE,yBAAyB;QACrC,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;YAC1F;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,MAAM,CAAC,kCAAkC,CAAC;gBACnD,WAAW,EAAE,+BAA+B;aAC7C;YACD,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,eAAe;aAC9G,CAAC,CAAC;SACJ;QACD,iBAAiB,EAAE,+BAA+B;QAClD,kBAAkB,EAAE,CAAC,GAAG,gCAAgC,EAAE,6BAA6B,EAAE,yBAAyB,CAAC;QACnH,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAiC;IACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,uDAAuD,MAAM,CAAC,IAAI,gGAAgG,CACnK,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,KAAK,uCAAuC,CAAC,CAAC;IACzG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,KAAK,0BAA0B,CAAC,CAAC;IAC7G,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/control-plane-api",
-  "version": "0.150.0",
+  "version": "0.152.0",
   "description": "HTTP surface over HostAdmin — the audited control-plane transport (control-plane.md §4.5)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -27,10 +27,10 @@
   ],
   "dependencies": {
     "hono": "^4.13.13",
-    "@substrat-run/control-plane-client": "^0.3.1",
-    "@substrat-run/contracts": "^0.150.0",
+    "@substrat-run/contracts": "^0.152.0",
+    "@substrat-run/control-plane-client": "^0.3.3",
     "@substrat-run/psl": "^0.2.5",
-    "@substrat-run/kernel": "^0.150.0"
+    "@substrat-run/kernel": "^0.152.0"
   },
   "devDependencies": {
     "@hono/node-server": "^1.13.0",
@@ -42,9 +42,9 @@
     "miniflare": "^4.20260310.0",
     "tsx": "^4.19.0",
     "typescript": "^7.0.0",
-    "vitest": "^5.0.3",
-    "@substrat-run/vertical-host": "^0.150.0",
-    "@substrat-run/adapter-sqlite": "^0.150.0"
+    "vitest": "^5.0.5",
+    "@substrat-run/adapter-sqlite": "^0.152.0",
+    "@substrat-run/vertical-host": "^0.152.0"
   },
   "publishConfig": {
     "access": "public"