@substrat-run/control-plane-api 0.160.0 → 0.161.0

package/dist/wire-walk.js

@@ -0,0 +1,339 @@
+/**
+ * The fleet walk (RFC wire-signing follow-on 4): bring every deployed script's key lists, audience
+ * and state to what the control plane gives now, so that a key listed, rotated, dropped or withdrawn
+ * reaches every script, not only the ones an upload happens to reach. A vertical's serving script is
+ * uploaded again at each promote, but a version's own script (its archive script, which a preview is
+ * routed to) is uploaded once, at its push, and nothing else ever rewrites it.
+ *
+ * A person runs it, a pass at a time, and it reports before it changes anything:
+ *
+ * - **Dry run by default.** Without `apply` a pass only reads: the settings write is unreachable, no
+ *   operational failure is filed and no hold is released.
+ * - **Bounded and resumable.** A pass walks at most `limit` scripts in a fixed order (verticals by
+ *   slug; each one's serving script, then its versions' scripts by id) and answers the cursor the next
+ *   pass starts from, `null` when the fleet is done. A vertical deleted since it was listed, or named by
+ *   a saved cursor, is passed over.
+ * - **Only scripts it can attribute.** The inventory is the registry's: a vertical's serving script and
+ *   each of its versions' scripts. A script the registry does not name is never touched, nor is one
+ *   whose name is the platform's own.
+ * - **No call it does not need.** A script whose record already says it was given what the settings give
+ *   now is not read. A script with no record, which the settings give nothing, is not read either: in an
+ *   environment where the rollout was never set, a pass makes no call to the runtime at all. A
+ *   **confirming** pass (`confirm`) reads every recorded script instead, trusting no record; a held
+ *   script, and one with no record that nothing is given or that is skipped, it leaves unread as well.
+ * - **Only a script that verifies is given lists by it.** A script with no record is read back first, on
+ *   every pass that reaches it (no verdict is kept between passes: pushing it again gives it a record);
+ *   one that runs without the platform's entry is skipped (`no-entry`), never recorded as verifying.
+ * - **One script's failure is that script's.** It is reported, recorded as an operational failure by
+ *   reason, and the pass goes on.
+ * - **A script it cannot vouch for is held.** When the read after an update differs, or the serve moved
+ *   under it, the script's record is marked held, with the binding names that differed, and later passes
+ *   leave it alone until a person names it in `release`, or an upload of it writes a fresh record.
+ *
+ * Each script it changes writes its capability record and that record's admin row in one directory
+ * transaction (`recordWireAuth`), and each pass writes one `walkWireAuth` row. The settings write is
+ * `wire-settings.ts`. Do not run the walk while a push or promote of the same vertical is in flight,
+ * and end with a confirming pass.
+ */
+import { errorCodeOf, instant, LIST_PAGE_MAX, PLATFORM_SCRIPT_NAMES, storedDeployManifest, verticalSlug as verticalSlugSchema, WALK_HOLD_BINDINGS_MAX, } from '@substrat-run/contracts';
+import { PLATFORM_ENTRY_MODULE } from './platform-entry.js';
+import { applyWireSettings, CONCURRENT_RETRIES } from './wire-settings.js';
+import { wireEntryOf, wireUploadGiven } from './wire-upload.js';
+/** A pass walks this many scripts when it names no limit. */
+export const WIRE_WALK_LIMIT_DEFAULT = 25;
+/** A pass walks at most this many scripts. */
+export const WIRE_WALK_LIMIT_MAX = 50;
+/** A pass releases at most this many held scripts. */
+export const WIRE_WALK_RELEASE_MAX = 50;
+const PAGE = 50;
+const GONE = Symbol('gone');
+/** The cursor's position inside a vertical just after its serving script: nothing after the `|`. */
+const AFTER_SERVING = '';
+/**
+ * A cursor as a pass answers it, or `null` for one that is not one. Opaque to a caller. A slug never
+ * holds a `|`, so the first one ends it, and everything after it is the position.
+ */
+export function parseWireWalkCursor(text) {
+    const at = text.indexOf('|');
+    if (at <= 0)
+        return null;
+    const vertical = text.slice(0, at);
+    if (!verticalSlugSchema.safeParse(vertical).success)
+        return null;
+    return { vertical, after: text.slice(at + 1) };
+}
+const cursorText = (vertical, after) => `${vertical}|${after}`;
+/** The registry's scripts in walk order, from `from` on: each vertical's serving script, then its versions' scripts. */
+async function* inventory(admin, actor, from) {
+    /** A directory read of one vertical, or `gone` when the vertical no longer exists (deleted since it was listed, or named by a saved cursor). */
+    const ofVertical = async (read) => {
+        try {
+            return await read();
+        }
+        catch (error) {
+            if (errorCodeOf(error) === 'not_found')
+                return GONE;
+            throw error;
+        }
+    };
+    async function* scriptsOf(vertical, after) {
+        const serving = await ofVertical(() => admin.verticalServing(actor, vertical));
+        if (serving === GONE)
+            return;
+        const servingRef = serving && !PLATFORM_SCRIPT_NAMES.has(serving.ref) ? serving.ref : null;
+        if (after === null && servingRef !== null) {
+            yield { vertical, deploymentRef: servingRef, versionId: serving.versionId, kind: 'serving', cursor: cursorText(vertical, AFTER_SERVING) };
+        }
+        let cursor = after !== null && after !== AFTER_SERVING ? after : undefined;
+        for (;;) {
+            const versions = await ofVertical(() => admin.listVersions(actor, vertical, { limit: PAGE, ...(cursor ? { cursor } : {}) }));
+            if (versions === GONE)
+                return;
+            for (const v of versions) {
+                const ref = v.deploymentRef;
+                if (ref === null || ref === servingRef || PLATFORM_SCRIPT_NAMES.has(ref))
+                    continue;
+                yield { vertical, deploymentRef: ref, versionId: v.id, kind: 'version', cursor: cursorText(vertical, v.id) };
+            }
+            if (versions.length < PAGE)
+                return;
+            cursor = versions.at(-1).id;
+        }
+    }
+    let slugCursor;
+    if (from) {
+        yield* scriptsOf(from.vertical, from.after);
+        slugCursor = from.vertical;
+    }
+    for (;;) {
+        const verticals = await admin.listVerticals(actor, { limit: PAGE, ...(slugCursor ? { cursor: slugCursor } : {}) });
+        for (const v of verticals)
+            yield* scriptsOf(v.slug, null);
+        if (verticals.length < PAGE)
+            return;
+        slugCursor = verticals.at(-1).slug;
+    }
+}
+/** Whether a record already holds what a given record says, in what a script carries: the state, the audience and the key ids. */
+function carriesAlready(stored, given) {
+    const same = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);
+    return (stored.state === given.state &&
+        stored.audience === given.audience &&
+        same(stored.routerKids, given.routerKids) &&
+        same(stored.platformKids, given.platformKids));
+}
+/** Run one pass. Never throws for one script's failure; throws only for a directory read that fails. */
+export async function runWireWalk(deps, input) {
+    const { admin, actor, settings, api } = deps;
+    const now = deps.now ?? (() => new Date());
+    const release = new Set(input.apply ? input.release : []);
+    const recordsBy = async (vertical) => {
+        const held = new Map();
+        let cursor;
+        for (;;) {
+            const page = await admin.listWireAuth(actor, { reach: { fleet: true }, verticalSlug: vertical, limit: LIST_PAGE_MAX, ...(cursor ? { cursor } : {}) });
+            for (const r of page)
+                held.set(r.deploymentRef, r);
+            if (page.length < LIST_PAGE_MAX)
+                return held;
+            cursor = page.at(-1).deploymentRef;
+        }
+    };
+    const records = new Map();
+    const recordsOf = async (vertical) => {
+        let held = records.get(vertical);
+        if (held)
+            return held;
+        held = await recordsBy(vertical);
+        records.clear(); // one vertical at a time: the walk moves through them in order
+        records.set(vertical, held);
+        return held;
+    };
+    const record = (script, rec, versionId = script.versionId) => admin.recordWireAuth(actor, { deploymentRef: script.deploymentRef, verticalSlug: script.vertical, versionId, record: rec, recordedAt: now().toISOString() });
+    /**
+     * Whether the script carries the platform's entry, which holds the verifier, read back from the
+     * script itself: its modules must hold the entry module, and its own bundle must be one the entry
+     * wraps. `no-manifest` when it cannot be told; `no-entry` when the script runs without one.
+     */
+    const entryOf = async (script) => {
+        if (!deps.fetchModules || script.versionId === null)
+            return 'no-manifest';
+        const manifestJson = await admin.versionManifest(actor, script.vertical, script.versionId);
+        if (!manifestJson)
+            return 'no-manifest';
+        const manifest = storedDeployManifest.parse(JSON.parse(manifestJson));
+        const modules = await deps.fetchModules(script.deploymentRef);
+        if (!modules.some((m) => m.name === PLATFORM_ENTRY_MODULE))
+            return 'no-entry';
+        const entry = wireEntryOf({ entry: manifest.entry, modules });
+        return entry.envelope === null ? 'no-entry' : entry;
+    };
+    const walkOne = async (script) => {
+        const stored = (await recordsOf(script.vertical)).get(script.deploymentRef);
+        const wasHeld = stored?.record.walkHold !== undefined;
+        const base = { deploymentRef: script.deploymentRef, vertical: script.vertical, versionId: script.versionId, kind: script.kind };
+        if (wasHeld && !release.has(script.deploymentRef))
+            return { ...base, action: 'held' };
+        /** A failure: reported, and recorded as an operational failure when the pass applies (a dry run attempts nothing). */
+        const failed = (reason, message, extra = {}) => {
+            if (input.apply) {
+                deps.fail({ vertical: script.vertical, version: script.versionId, stage: reason, message: `the wire walk did not bring '${script.deploymentRef}' current: ${message}` });
+            }
+            return { ...base, action: 'failed', reason, ...extra };
+        };
+        /**
+         * Mark the script held: a script the walk wrote and could not confirm is never left without one.
+         * It holds the record as it stands now, read again (an upload's record written during the pass
+         * included, which the hold keeps and marks), or, with none, a record that claims no lists
+         * (`unverified`). It keeps the first `WALK_HOLD_BINDINGS_MAX` binding names and counts the rest.
+         * A write that fails is tried once more; answers whether the hold was written, and the failure the
+         * walk reports says so when it was not.
+         */
+        const hold = async (entry, reason, bindings) => {
+            const once = async () => {
+                const latest = (await recordsBy(script.vertical)).get(script.deploymentRef);
+                const known = latest
+                    ? (({ walkHold: _previous, ...rest }) => rest)(latest.record)
+                    : { ...entry, state: 'legacy-only', audience: null, routerKids: [], platformKids: [], withheld: 'unverified' };
+                const kept = bindings.slice(0, WALK_HOLD_BINDINGS_MAX);
+                const more = bindings.length - kept.length;
+                const walkHold = { reason, bindings: [...kept], ...(more > 0 ? { more } : {}), at: instant.parse(now().toISOString()) };
+                // Under the version the record it marks names: an upload's record keeps its upload's version.
+                await record(script, { ...known, walkHold }, latest ? latest.versionId : script.versionId);
+            };
+            for (let attempt = 0; attempt < 2; attempt++) {
+                try {
+                    await once();
+                    return true;
+                }
+                catch {
+                    // Tried once more, then reported.
+                }
+            }
+            return false;
+        };
+        /** Binding names for a person to read: the first `WALK_HOLD_BINDINGS_MAX`, and how many more. */
+        const named = (bindings) => bindings.length > WALK_HOLD_BINDINGS_MAX
+            ? `${bindings.slice(0, WALK_HOLD_BINDINGS_MAX).join(', ')} and ${bindings.length - WALK_HOLD_BINDINGS_MAX} more`
+            : bindings.join(', ');
+        const holdNote = (held) => (held ? 'held until a person looks' : 'and the hold itself could not be written: look at it now');
+        try {
+            let entry = stored ? { envelope: stored.record.envelope, entrySkipped: stored.record.entrySkipped } : null;
+            if (!entry) {
+                // No record: an upload from before records existed, or one whose record was not written. The
+                // settings decide whether it needs reading at all; whether it carries the entry needs its bundle.
+                const probe = await wireUploadGiven(settings, { vertical: script.vertical, deploymentRef: script.deploymentRef, entry: { envelope: 1, entrySkipped: null } });
+                if (probe.bindings.length === 0)
+                    return { ...base, action: 'unrecorded' };
+                const read = await entryOf(script);
+                if (read === 'no-manifest')
+                    return failed('entry-unknown', 'no record, and no stored manifest to read its entry from: upload it again');
+                // It runs without the platform's entry, so nothing in it verifies: it is not given lists, nor
+                // recorded as verifying. Pushing it again wraps it.
+                if (read === 'no-entry')
+                    return { ...base, action: 'skipped', reason: 'no-entry' };
+                entry = read;
+            }
+            const given = await wireUploadGiven(settings, { vertical: script.vertical, deploymentRef: script.deploymentRef, entry });
+            // Refused settings give nothing, and nothing is not a withdrawal to write: the route refuses such a
+            // pass before it starts, and a script never acts on one here either.
+            // The route refuses a pass under refused settings before it starts, so what is refused here is
+            // this script alone (its name is not one the lists can be given as an audience).
+            if (given.refusal !== null)
+                return failed('settings-refused', `the lists are refused for this script (${given.refusal}): nothing was written`);
+            if (!input.confirm && stored && !stored.record.walkHold && carriesAlready(stored.record, given.record))
+                return { ...base, action: 'current' };
+            let outcome;
+            try {
+                outcome = await applyWireSettings(api, script.deploymentRef, given.bindings.map((b) => ({ name: b.name, text: b.text })), {
+                    apply: input.apply,
+                    ...(script.kind === 'serving' && script.versionId !== null
+                        ? {
+                            servedVersion: script.versionId,
+                            servedVersionAfter: async () => (await admin.verticalServing(actor, script.vertical))?.versionId ?? null,
+                        }
+                        : {}),
+                });
+            }
+            catch (error) {
+                // The settings API's own messages name the script and a status, never a value.
+                return failed('settings', error instanceof Error ? error.message : 'the settings call failed');
+            }
+            switch (outcome.outcome) {
+                case 'would-change':
+                    return { ...base, action: 'would-change', changes: outcome.changes };
+                case 'unchanged':
+                case 'updated': {
+                    if (input.apply) {
+                        try {
+                            await record(script, given.record);
+                        }
+                        catch {
+                            return failed('record', 'its settings are current, but its record was not written');
+                        }
+                    }
+                    return outcome.outcome === 'updated' ? { ...base, action: 'updated', changes: outcome.changes } : { ...base, action: 'unchanged' };
+                }
+                case 'concurrent-change':
+                    return failed('concurrent-change', `its bindings changed between reads ${CONCURRENT_RETRIES} times; nothing was written`);
+                case 'serve-in-flight': {
+                    if (!outcome.written)
+                        return failed('serve-in-flight', 'it does not run the version the directory says it serves; nothing was written: promote again, then walk');
+                    const held = await hold(entry, 'serve-in-flight', []);
+                    return failed('serve-in-flight', `the served version moved while it was updated, ${holdNote(held)}; ${held ? 'promote again, then release it' : 'promote again'}`, held ? { held: true } : {});
+                }
+                case 'verify': {
+                    const held = await hold(entry, 'verify', outcome.bindings);
+                    return failed('verify', `after its update, these bindings read differently: ${named(outcome.bindings)}; ${holdNote(held)}`, {
+                        bindings: outcome.bindings.slice(0, WALK_HOLD_BINDINGS_MAX),
+                        ...(outcome.bindings.length > WALK_HOLD_BINDINGS_MAX ? { more: outcome.bindings.length - WALK_HOLD_BINDINGS_MAX } : {}),
+                        ...(held ? { held: true } : {}),
+                    });
+                }
+            }
+        }
+        catch {
+            // A read for this one script (its stored manifest, its modules) failed. Its text is not echoed:
+            // nothing here vouches that it carries no value.
+            return failed('entry-unknown', 'its stored manifest or its modules could not be read');
+        }
+    };
+    /**
+     * One script, and whether a person's release of it took: only a script that was held and came out
+     * current (its fresh record, with no hold, written) is `released`; one that failed again stays held.
+     */
+    const walkReleasing = async (script) => {
+        const result = await walkOne(script);
+        const wasHeld = (await recordsOf(script.vertical)).get(script.deploymentRef)?.record.walkHold !== undefined;
+        const current = result.action === 'updated' || result.action === 'unchanged';
+        return wasHeld && release.has(script.deploymentRef) && current ? { ...result, released: true } : result;
+    };
+    const scripts = input.sink ?? [];
+    let next = null;
+    const fleet = inventory(admin, actor, input.cursor);
+    try {
+        let step = await fleet.next();
+        while (!step.done) {
+            const script = step.value;
+            scripts.push(await walkReleasing(script));
+            if (scripts.length >= input.limit) {
+                // Looked one ahead, so the pass that ends on the fleet's last script answers `null`. A look
+                // that fails does not undo a pass that is done: the next one starts after its last script.
+                try {
+                    step = await fleet.next();
+                    next = step.done ? null : script.cursor;
+                }
+                catch {
+                    next = script.cursor;
+                }
+                break;
+            }
+            step = await fleet.next();
+        }
+    }
+    finally {
+        await fleet.return(undefined).catch(() => undefined);
+    }
+    return { apply: input.apply, from: input.cursor ? cursorText(input.cursor.vertical, input.cursor.after) : null, next, scripts };
+}
+//# sourceMappingURL=wire-walk.js.map

package/dist/wire-walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-walk.js","sourceRoot":"","sources":["../src/wire-walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EACL,WAAW,EACX,OAAO,EACP,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,IAAI,kBAAkB,EAClC,sBAAsB,GAIvB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAkD,MAAM,oBAAoB,CAAC;AAC3H,OAAO,EAAE,WAAW,EAAE,eAAe,EAA2C,MAAM,kBAAkB,CAAC;AAEzG,6DAA6D;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,8CAA8C;AAC9C,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,sDAAsD;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC,MAAM,IAAI,GAAG,EAAE,CAAC;AAChB,MAAM,IAAI,GAAkB,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3C,oGAAoG;AACpG,MAAM,aAAa,GAAG,EAAE,CAAC;AAWzB;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;AAyE/E,wHAAwH;AACxH,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,KAAgB,EAAE,KAAsB,EAAE,IAA2B;IAC7F,gJAAgJ;IAChJ,MAAM,UAAU,GAAG,KAAK,EAAK,IAAsB,EAA4B,EAAE;QAC/E,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,QAAgB,EAAE,KAAoB;QAC9D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/E,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC7B,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3F,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,OAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7I,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7H,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO;YAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;gBAC5B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,UAAU,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACnF,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/G,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI;gBAAE,OAAO;YACnC,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,IAAI,UAA8B,CAAC;IACnC,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC7B,CAAC;IACD,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACnH,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO;QACpC,UAAU,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;IACtC,CAAC;AACH,CAAC;AAED,kIAAkI;AAClI,SAAS,cAAc,CAAC,MAAsB,EAAE,KAAqB;IACnE,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAE,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,OAAO,CACL,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC5B,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAkB,EAClB,KAYC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;QACnD,IAAI,MAA0B,CAAC;QAC/B,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAa,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvJ,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;gBAAE,OAAO,IAAI,CAAC;YAC7C,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,aAAa,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IACnE,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;QAC3C,IAAI,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,+DAA+D;QAChF,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,MAAuB,EAAE,GAAmB,EAAE,SAAS,GAAkB,MAAM,CAAC,SAAS,EAAE,EAAE,CAC3G,KAAK,CAAC,cAAe,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAEhK;;;;OAIG;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,MAAuB,EAAmD,EAAE;QACjG,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3F,IAAI,CAAC,YAAY;YAAE,OAAO,aAAa,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;YAAE,OAAO,UAAU,CAAC;QAC9E,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,MAAuB,EAA2B,EAAE;QACzE,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC;QACtD,MAAM,IAAI,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAChI,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACtF,sHAAsH;QACtH,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,KAAK,GAA4B,EAAE,EAAkB,EAAE;YACtG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gCAAgC,MAAM,CAAC,aAAa,cAAc,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3K,CAAC;YACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACzD,CAAC,CAAC;QACF;;;;;;;WAOG;QACH,MAAM,IAAI,GAAG,KAAK,EAAE,KAAgB,EAAE,MAAoC,EAAE,QAA2B,EAAoB,EAAE;YAC3H,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;gBACtB,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC5E,MAAM,KAAK,GAAmB,MAAM;oBAClC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC7D,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;gBACjH,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3C,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACxH,8FAA8F;gBAC9F,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7F,CAAC,CAAC;YACF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,IAAI,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,kCAAkC;gBACpC,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,iGAAiG;QACjG,MAAM,KAAK,GAAG,CAAC,QAA2B,EAAE,EAAE,CAC5C,QAAQ,CAAC,MAAM,GAAG,sBAAsB;YACtC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,QAAQ,CAAC,MAAM,GAAG,sBAAsB,OAAO;YAChH,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,0DAA0D,CAAC,CAAC;QAEtI,IAAI,CAAC;YACH,IAAI,KAAK,GAAqB,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7H,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,6FAA6F;gBAC7F,kGAAkG;gBAClG,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC9J,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;gBAC1E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,IAAI,KAAK,aAAa;oBAAE,OAAO,MAAM,CAAC,eAAe,EAAE,2EAA2E,CAAC,CAAC;gBACxI,8FAA8F;gBAC9F,oDAAoD;gBACpD,IAAI,IAAI,KAAK,UAAU;oBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBACnF,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACzH,oGAAoG;YACpG,qEAAqE;YACrE,+FAA+F;YAC/F,iFAAiF;YACjF,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;YAC/I,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAE9I,IAAI,OAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,iBAAiB,CAC/B,GAAG,EACH,MAAM,CAAC,aAAa,EACpB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC3D;oBACE,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;wBACxD,CAAC,CAAC;4BACE,aAAa,EAAE,MAAM,CAAC,SAAS;4BAC/B,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI;yBACzG;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,+EAA+E;gBAC/E,OAAO,MAAM,CAAC,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;YACjG,CAAC;YACD,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,KAAK,cAAc;oBACjB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;gBACvE,KAAK,WAAW,CAAC;gBACjB,KAAK,SAAS,EAAE,CAAC;oBACf,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;wBAChB,IAAI,CAAC;4BACH,MAAM,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBACrC,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO,MAAM,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAC;wBACtF,CAAC;oBACH,CAAC;oBACD,OAAO,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;gBACrI,CAAC;gBACD,KAAK,mBAAmB;oBACtB,OAAO,MAAM,CAAC,mBAAmB,EAAE,sCAAsC,kBAAkB,6BAA6B,CAAC,CAAC;gBAC5H,KAAK,iBAAiB,EAAE,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,OAAO;wBAAE,OAAO,MAAM,CAAC,iBAAiB,EAAE,yGAAyG,CAAC,CAAC;oBAClK,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;oBACtD,OAAO,MAAM,CACX,iBAAiB,EACjB,kDAAkD,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,eAAe,EAAE,EAChI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3B,CAAC;gBACJ,CAAC;gBACD,KAAK,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC3D,OAAO,MAAM,CACX,QAAQ,EACR,sDAAsD,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,EAClG;wBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;wBAC3D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvH,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gGAAgG;YAChG,iDAAiD;YACjD,OAAO,MAAM,CAAC,eAAe,EAAE,sDAAsD,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,aAAa,GAAG,KAAK,EAAE,MAAuB,EAA2B,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;QAC7E,OAAO,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1G,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,IAAI,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAClC,4FAA4F;gBAC5F,2FAA2F;gBAC3F,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;oBAC1B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;gBACvB,CAAC;gBACD,MAAM;YACR,CAAC;YACD,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClI,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/control-plane-api",
-  "version": "0.160.0",
+  "version": "0.161.0",
   "description": "HTTP surface over HostAdmin — the audited control-plane transport (control-plane.md §4.5)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -27,10 +27,10 @@
   ],
   "dependencies": {
     "hono": "^4.13.13",
-    "@substrat-run/contracts": "^0.160.0",
-    "@substrat-run/control-plane-client": "^0.3.11",
-    "@substrat-run/psl": "^0.2.5",
-    "@substrat-run/kernel": "^0.160.0"
+    "@substrat-run/contracts": "^0.161.0",
+    "@substrat-run/control-plane-client": "^0.3.12",
+    "@substrat-run/kernel": "^0.161.0",
+    "@substrat-run/psl": "^0.2.5"
   },
   "devDependencies": {
     "@hono/node-server": "^1.13.0",
@@ -43,10 +43,10 @@
     "tsx": "^4.19.0",
     "typescript": "^7.0.0",
     "vitest": "^5.0.5",
-    "@substrat-run/adapter-sqlite": "^0.160.0",
-    "@substrat-run/connector-fortnox": "^0.4.62",
-    "@substrat-run/vertical-host": "^0.160.0",
-    "@substrat-run/connector-planima": "^0.2.57"
+    "@substrat-run/adapter-sqlite": "^0.161.0",
+    "@substrat-run/connector-planima": "^0.2.58",
+    "@substrat-run/connector-fortnox": "^0.4.63",
+    "@substrat-run/vertical-host": "^0.161.0"
   },
   "publishConfig": {
     "access": "public"