@substrat-run/kernel 0.119.0 → 0.121.0

package/dist/system-switch-record.js

@@ -0,0 +1,227 @@
+/**
+ * The table. Interpolated into both adapters' directory DDL, so `lint:spine-ddl` sees the
+ * one spelling on each side. No CHECK on `position`: the drift gate does not compare
+ * constraints, and the writers below are the only thing that sets it.
+ */
+export const SYSTEM_SWITCHES_DDL = `
+  CREATE TABLE IF NOT EXISTS _substrat_system_switches (
+    tenant_id    TEXT NOT NULL,
+    scope_id     TEXT NOT NULL,
+    module_id    TEXT NOT NULL,
+    -- 'on' or 'off'. A row exists only for a module some switch call actually held.
+    position     TEXT NOT NULL,
+    actor        TEXT NOT NULL,
+    reason       TEXT NOT NULL,
+    -- The switch call's own id, the one its admin-log intent and outcome rows carry.
+    -- A ULID, so it is also the fleet read's chronological keyset cursor.
+    operation_id TEXT NOT NULL,
+    switched_at  TEXT NOT NULL,
+    PRIMARY KEY (tenant_id, scope_id, module_id)
+  );
+  CREATE INDEX IF NOT EXISTS _substrat_system_switches_position
+    ON _substrat_system_switches (position, operation_id);
+  CREATE INDEX IF NOT EXISTS _substrat_system_switches_operation
+    ON _substrat_system_switches (operation_id);
+`;
+/**
+ * The one-time backfill from the admin log: every switch moved before the record existed.
+ * Without it, those are exactly the switches a wipe would still lose.
+ *
+ * It reads the admin-log shape `revokeFromSystem` / `restoreToSystem` have written since
+ * #1666, two rows per call sharing `after.operationId`: an `intent` row carrying
+ * `after.moduleId` and `after.reason`, then an outcome row whose `after.phase` is
+ * `applied`, `refused` or `failed`. Only calls whose outcome is `applied` count, because a
+ * refused call moved nothing and a failed one may not have. Of those, only the LATEST per
+ * (tenant, scope, module) is taken, by the intent's ULID id. `at` is the intent's, the
+ * same instant the status read's who/why join reports. A key whose calls include no
+ * applied OFF gets no row, even when its latest applied call is an ON: a live
+ * `restoreToSystem` of a module never switched off writes none either
+ * (`recordSystemSwitchedOn`), and the backfill must not record what the live path would not.
+ *
+ * `INSERT OR IGNORE`, so a row the switch wrote itself is never overwritten by history.
+ * The adapters run it only on the construction that creates the table, so it runs once.
+ */
+export const SYSTEM_SWITCHES_BACKFILL_SQL = `
+  WITH applied AS (
+    SELECT DISTINCT action, json_extract(after, '$.operationId') AS operation_id
+      FROM _substrat_admin_log
+     WHERE action IN ('revokeFromSystem', 'restoreToSystem')
+       AND json_extract(after, '$.phase') = 'applied'
+  ),
+  intents AS (
+    SELECT i.id AS id, i.tenant_id AS tenant_id, i.scope_id AS scope_id,
+           json_extract(i.after, '$.moduleId') AS module_id,
+           CASE i.action WHEN 'revokeFromSystem' THEN 'off' ELSE 'on' END AS position,
+           i.actor AS actor,
+           json_extract(i.after, '$.reason') AS reason,
+           json_extract(i.after, '$.operationId') AS operation_id,
+           i.at AS at
+      FROM _substrat_admin_log i
+      JOIN applied a
+        ON a.action = i.action AND a.operation_id = json_extract(i.after, '$.operationId')
+     WHERE i.action IN ('revokeFromSystem', 'restoreToSystem')
+       AND i.tenant_id IS NOT NULL AND i.scope_id IS NOT NULL
+       AND json_extract(i.after, '$.phase') = 'intent'
+       AND json_extract(i.after, '$.moduleId') IS NOT NULL
+       AND json_extract(i.after, '$.reason') IS NOT NULL
+  ),
+  ranked AS (
+    SELECT *,
+           ROW_NUMBER() OVER (PARTITION BY tenant_id, scope_id, module_id ORDER BY id DESC) AS latest,
+           MAX(position = 'off') OVER (PARTITION BY tenant_id, scope_id, module_id) AS ever_off
+      FROM intents
+  )
+  INSERT OR IGNORE INTO _substrat_system_switches
+    (tenant_id, scope_id, module_id, position, actor, reason, operation_id, switched_at)
+  SELECT tenant_id, scope_id, module_id, position, actor, reason, operation_id, at
+    FROM ranked
+   WHERE latest = 1 AND ever_off = 1
+`;
+/** "Does the record table exist yet?" — asked BEFORE the DDL, so the backfill runs once. */
+export function systemSwitchesTableExists(db) {
+    return (db.all(`SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = '_substrat_system_switches'`)
+        .length > 0);
+}
+const positionOf = (v) => (v === 'on' ? 'on' : 'off');
+const COLUMNS = `r.tenant_id, r.scope_id, r.module_id, s.vertical, r.position, r.actor, r.reason,
+  r.operation_id, r.switched_at`;
+const rowOf = (r) => ({
+    tenantId: String(r.tenant_id),
+    scopeId: String(r.scope_id),
+    moduleId: String(r.module_id),
+    vertical: r.vertical == null ? null : String(r.vertical),
+    position: positionOf(r.position),
+    actor: String(r.actor),
+    reason: String(r.reason),
+    operationId: String(r.operation_id),
+    at: String(r.switched_at),
+});
+/**
+ * The fleet read (`GET /system-switches`): records, keyset-paged by `operation_id`.
+ *
+ * The key is the call that last moved the switch, so a row whose switch moves during a walk
+ * is re-keyed to a newer id and jumps to the end of the order. Ascending (the default) never
+ * skips a row for it; at worst it is seen twice, once per position. A DESCENDING walk can
+ * miss a row that moved after the walk started, so use ascending for "every switch".
+ */
+export function listSystemSwitchRecords(db, filter = {}) {
+    const where = [];
+    const params = [];
+    const eq = (col, v) => {
+        if (v !== undefined) {
+            where.push(`${col} = ?`);
+            params.push(v);
+        }
+    };
+    eq('r.position', filter.position);
+    eq('r.tenant_id', filter.tenantId);
+    eq('r.scope_id', filter.scopeId);
+    eq('r.module_id', filter.moduleId);
+    eq('s.vertical', filter.vertical);
+    const order = filter.order === 'desc' ? 'DESC' : 'ASC';
+    if (filter.cursor !== undefined) {
+        where.push(order === 'DESC' ? 'r.operation_id < ?' : 'r.operation_id > ?');
+        params.push(filter.cursor);
+    }
+    // LEFT JOIN: a record outlives nothing it needs from `scopes`, and a scope row the
+    // directory lost must not hide a switch that is still off in the scope's store.
+    let sql = `SELECT ${COLUMNS} FROM _substrat_system_switches r LEFT JOIN scopes s ON s.scope_id = r.scope_id` +
+        (where.length ? ` WHERE ${where.join(' AND ')}` : '') +
+        ` ORDER BY r.operation_id ${order}`;
+    if (filter.limit !== undefined) {
+        sql += ` LIMIT ${Math.max(0, Math.floor(filter.limit))}`;
+    }
+    return db.all(sql, ...params).map(rowOf);
+}
+/** One scope's record rows by module — what the per-scope status read joins as `recorded`. */
+export function systemSwitchRecordsOf(db, tenantId, scopeId) {
+    const rows = db.all(`SELECT module_id, position FROM _substrat_system_switches WHERE tenant_id = ? AND scope_id = ?`, tenantId, scopeId);
+    return new Map(rows.map((r) => [String(r.module_id), positionOf(r.position)]));
+}
+/**
+ * The per-scope status read's rows with the record joined on. Each module the scope
+ * reports gets its recorded position (or null). A module the record holds that the scope
+ * no longer reports at all is ADDED, as `ungranted`: that is the scope a wipe emptied, and
+ * the drift is the whole reason to show it. Sorted by module id, as the scope's rows are.
+ */
+export function withRecorded(states, recorded) {
+    const rows = states.map((s) => ({ ...s, recorded: recorded.get(s.moduleId) ?? null }));
+    const reported = new Set(states.map((s) => s.moduleId));
+    for (const [moduleId, position] of recorded) {
+        if (!reported.has(moduleId))
+            rows.push({ moduleId, schedules: 'ungranted', recorded: position });
+    }
+    return rows.sort((a, b) => (a.moduleId < b.moduleId ? -1 : a.moduleId > b.moduleId ? 1 : 0));
+}
+/** The modules a reconcile must re-assert OFF on this scope. */
+export function switchedOffModulesOf(db, tenantId, scopeId) {
+    return db
+        .all(`SELECT module_id FROM _substrat_system_switches
+        WHERE tenant_id = ? AND scope_id = ? AND position = 'off' ORDER BY module_id`, tenantId, scopeId)
+        .map((r) => String(r.module_id));
+}
+/**
+ * Overwrite one existing row's position and provenance — ON's write, and its undo. With
+ * `ifOperationId`, only while the row is still the one that operation wrote (a CAS).
+ */
+function setRecordRow(db, key, row, ifOperationId) {
+    db.run(`UPDATE _substrat_system_switches
+        SET position = ?, actor = ?, reason = ?, operation_id = ?, switched_at = ?
+      WHERE tenant_id = ? AND scope_id = ? AND module_id = ?` +
+        (ifOperationId === undefined ? '' : ' AND operation_id = ?'), row.position, row.actor, row.reason, row.operationId, row.at, key.tenantId, key.scopeId, key.moduleId, ...(ifOperationId === undefined ? [] : [ifOperationId]));
+}
+/**
+ * OFF's write, made AFTER the scope's switch held. An upsert: a repeat OFF refreshes the
+ * actor, reason and time, as the status read reports the latest reason. Never made for a
+ * call that held nothing, because a row saying `off` for a module the scope never ran
+ * would switch it off on the day it is installed (the kernel's `held` check, for the same
+ * reason).
+ */
+export function recordSystemSwitchedOff(db, row) {
+    db.run(`INSERT INTO _substrat_system_switches
+       (tenant_id, scope_id, module_id, position, actor, reason, operation_id, switched_at)
+     VALUES (?, ?, ?, 'off', ?, ?, ?, ?)
+     ON CONFLICT (tenant_id, scope_id, module_id) DO UPDATE SET
+       position = 'off', actor = excluded.actor, reason = excluded.reason,
+       operation_id = excluded.operation_id, switched_at = excluded.switched_at`, row.tenantId, row.scopeId, row.moduleId, row.actor, row.reason, row.operationId, row.at);
+}
+/**
+ * ON's write, made BEFORE the scope's switch moves, and only to a row that exists. Before,
+ * because the other order fails unsafely: a scope switched on whose record write then
+ * failed would still read `off`, and the next reconcile would switch the operator's
+ * restore back off. This order fails toward a record of `on` beside a live marker, which
+ * the marker wins. Answers the row as it was, for `restoreSystemSwitchRecord`.
+ */
+export function recordSystemSwitchedOn(db, row) {
+    const prior = db.all(`SELECT position, actor, reason, operation_id, switched_at FROM _substrat_system_switches
+      WHERE tenant_id = ? AND scope_id = ? AND module_id = ?`, row.tenantId, row.scopeId, row.moduleId)[0];
+    if (!prior)
+        return null;
+    setRecordRow(db, row, { position: 'on', actor: row.actor, reason: row.reason, operationId: row.operationId, at: row.at });
+    return {
+        position: positionOf(prior.position),
+        actor: String(prior.actor),
+        reason: String(prior.reason),
+        operationId: String(prior.operation_id),
+        at: String(prior.switched_at),
+    };
+}
+/**
+ * Put a row back as `recordSystemSwitchedOn` found it — the ON that wrote it threw, or held
+ * nothing. A compare-and-set on the ON's own `operationId`: if another switch call has
+ * written the row since (a concurrent OFF), the row is left as that call wrote it, so an
+ * ON's undo can never clobber a newer position.
+ */
+export function restoreSystemSwitchRecord(db, on, prior) {
+    if (prior)
+        setRecordRow(db, on, prior, on.operationId);
+}
+/**
+ * Forget one scope's switch records — the scope's directory row is going too (a reaped
+ * preview or fork, a reaped scope). Without this the fleet read keeps listing a switch on
+ * a scope that no longer exists. The admin log keeps the history, as it keeps the scope's.
+ */
+export function forgetSystemSwitchesOf(db, scopeId) {
+    db.run(`DELETE FROM _substrat_system_switches WHERE scope_id = ?`, scopeId);
+}
+//# sourceMappingURL=system-switch-record.js.map

package/dist/system-switch-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-switch-record.js","sourceRoot":"","sources":["../src/system-switch-record.ts"],"names":[],"mappings":"AA6BA;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;CAmBlC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC3C,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,EAAa;IACrD,OAAO,CACL,EAAE,CAAC,GAAG,CAAC,oGAAoG,CAAC;SACzG,MAAM,GAAG,CAAC,CACd,CAAC;AACJ,CAAC;AA2BD,MAAM,UAAU,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAE7E,MAAM,OAAO,GAAG;gCACgB,CAAC;AAEjC,MAAM,KAAK,GAAG,CAAC,CAA0B,EAAyB,EAAE,CAAC,CAAC;IACpE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;IACnC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAa,EAAE,MAAM,GAA6B,EAAE;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,CAAC,GAAW,EAAE,CAAqB,EAAE,EAAE;QAChD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,mFAAmF;IACnF,gFAAgF;IAChF,IAAI,GAAG,GACL,UAAU,OAAO,iFAAiF;QAClG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,4BAA4B,KAAK,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,IAAI,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CACnC,EAAa,EACb,QAAgB,EAChB,OAAe;IAEf,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,gGAAgG,EAChG,QAAQ,EACR,OAAO,CACR,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,MAA8D,EAC9D,QAAmC;IAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,QAAgB,EAAE,OAAe;IACnF,OAAO,EAAE;SACN,GAAG,CACF;qFAC+E,EAC/E,QAAQ,EACR,OAAO,CACR;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrC,CAAC;AA0BD;;;GAGG;AACH,SAAS,YAAY,CACnB,EAAa,EACb,GAA4D,EAC5D,GAAyC,EACzC,aAAsB;IAEtB,EAAE,CAAC,GAAG,CACJ;;6DAEyD;QACvD,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,EAC9D,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAa,EAAE,GAA4B;IACjF,EAAE,CAAC,GAAG,CACJ;;;;;gFAK4E,EAC5E,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,EAAE,CACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAa,EAAE,GAA4B;IAChF,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAClB;6DACyD,EACzD,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,CACb,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1H,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACvC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAa,EACb,EAAgF,EAChF,KAA8B;IAE9B,IAAI,KAAK;QAAE,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAa,EAAE,OAAe;IACnE,EAAE,CAAC,GAAG,CAAC,0DAA0D,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC"}

package/dist/ulid.d.ts

@@ -27,6 +27,12 @@ export interface UlidMint {
  */
 export declare function createUlid(): UlidMint;
 export declare function ulid(now?: number): string;
+/**
+ * The greatest ULID a millisecond can carry (#1705 PR 3): every id minted at or before `now`
+ * sorts at or below it, and every id minted after sorts above. It is what "skip to now" moves
+ * a watermark to, because a watermark is compared with `id > cursor`.
+ */
+export declare function ulidCeiling(now: number): string;
 /**
  * The epoch-millisecond timestamp a ULID carries in its first ten characters.
  *

package/dist/ulid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ulid.d.ts","sourceRoot":"","sources":["../src/ulid.ts"],"names":[],"mappings":"AA0CA,yFAAyF;AACzF,MAAM,WAAW,QAAQ;IACvB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,QAAQ,CAmFrC;AAKD,wBAAgB,IAAI,CAAC,GAAG,GAAE,MAAmB,GAAG,MAAM,CAErD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAO3C"}
+{"version":3,"file":"ulid.d.ts","sourceRoot":"","sources":["../src/ulid.ts"],"names":[],"mappings":"AAqDA,yFAAyF;AACzF,MAAM,WAAW,QAAQ;IACvB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,QAAQ,CA6ErC;AAKD,wBAAgB,IAAI,CAAC,GAAG,GAAE,MAAmB,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAO3C"}

package/dist/ulid.js

@@ -30,6 +30,16 @@ const MAX_ULID_TIME = 2 ** 48 - 1;
 /** All 26 digits, Crockford's alphabet — `I`, `L`, `O` and `U` are not in it. */
 const ULID_SHAPE = /^[0-9A-HJKMNP-TV-Z]{26}$/;
 const unencodable = (t) => `not an encodable ULID instant: ${t} (want 0..${MAX_ULID_TIME})`;
+/** The ten base32 digits of an instant 48 bits can hold. The caller has range-checked it. */
+function encodeTime(time) {
+    let ts = '';
+    let t = time;
+    for (let i = 0; i < 10; i++) {
+        ts = B32[t % 32] + ts;
+        t = Math.floor(t / 32);
+    }
+    return ts;
+}
 /**
  * A ULID mint with its OWN monotonic state — one writer's floor, not the process's.
  *
@@ -85,16 +95,10 @@ export function createUlid() {
         if (time < 0 || time > MAX_ULID_TIME)
             throw new RangeError(unencodable(time));
         lastTime = time;
-        let ts = '';
-        let t = time;
-        for (let i = 0; i < 10; i++) {
-            ts = B32[t % 32] + ts;
-            t = Math.floor(t / 32);
-        }
         let r = '';
         for (const d of lastRand)
             r += B32[d];
-        return ts + r;
+        return encodeTime(time) + r;
     });
     mint.seedFrom = (id) => {
         const time = ulidTime(id); // refuses anything that is not a ULID
@@ -129,6 +133,16 @@ const processUlid = createUlid();
 export function ulid(now = Date.now()) {
     return processUlid(now);
 }
+/**
+ * The greatest ULID a millisecond can carry (#1705 PR 3): every id minted at or before `now`
+ * sorts at or below it, and every id minted after sorts above. It is what "skip to now" moves
+ * a watermark to, because a watermark is compared with `id > cursor`.
+ */
+export function ulidCeiling(now) {
+    if (!Number.isSafeInteger(now) || now < 0 || now > MAX_ULID_TIME)
+        throw new RangeError(unencodable(now));
+    return encodeTime(now) + 'Z'.repeat(16);
+}
 /**
  * The epoch-millisecond timestamp a ULID carries in its first ten characters.
  *

package/dist/ulid.js.map

@@ -1 +1 @@
-{"version":3,"file":"ulid.js","sourceRoot":"","sources":["../src/ulid.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,gEAAgE;AAChE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,mEAAmE;AACnE,EAAE;AACF,kFAAkF;AAClF,qFAAqF;AACrF,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,EAAE;AACF,sFAAsF;AACtF,yFAAyF;AACzF,uFAAuF;AACvF,oFAAoF;AACpF,oFAAoF;AACpF,oFAAoF;AACpF,qFAAqF;AACrF,yEAAyE;AACzE,4DAA4D;AAM5D,MAAM,GAAG,GAAG,kCAAkC,CAAC;AAE/C,kFAAkF;AAClF,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAElC,iFAAiF;AACjF,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,MAAM,WAAW,GAAG,CAAC,CAAS,EAAU,EAAE,CACxC,kCAAkC,CAAC,aAAa,aAAa,GAAG,CAAC;AAuBnE;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,iFAAiF;IACjF,iEAAiE;IACjE,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAa,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzD,SAAS,WAAW;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC,2BAA2B;IACxF,CAAC;IAED,iFAAiF;IACjF,SAAS,eAAe;QACtB,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,IAAI,QAAQ,CAAC,CAAC,CAAE,GAAG,EAAE,EAAE,CAAC;gBACtB,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,wDAAwD;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,EAAU,EAAE;QACjD,+EAA+E;QAC/E,gFAAgF;QAChF,uDAAuD;QACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,IAAI,GAAG,GAAG,CAAC;QACf,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACrB,4EAA4E;YAC5E,wEAAwE;YACxE,IAAI,GAAG,QAAQ,CAAC;YAChB,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;gBACvB,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC;gBACpB,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,qEAAqE;QACrE,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,aAAa;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,QAAQ,GAAG,IAAI,CAAC;QAEhB,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChB,CAAC,CAAa,CAAC;IAEf,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAU,EAAQ,EAAE;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,sCAAsC;QACjE,IAAI,IAAI,GAAG,QAAQ;YAAE,OAAO;QAC5B,kFAAkF;QAClF,mEAAmE;QACnE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,+EAA+E;YAC/E,gFAAgF;YAChF,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,CAAC,CAAE,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;oBAC9B,KAAK,GAAG,IAAI,CAAC,CAAC,CAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;oBAChC,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,OAAO;QACrB,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACtD,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;AAEjC,MAAM,UAAU,IAAI,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC3C,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,iFAAiF;IACjF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"ulid.js","sourceRoot":"","sources":["../src/ulid.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,gEAAgE;AAChE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,mEAAmE;AACnE,EAAE;AACF,kFAAkF;AAClF,qFAAqF;AACrF,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,EAAE;AACF,sFAAsF;AACtF,yFAAyF;AACzF,uFAAuF;AACvF,oFAAoF;AACpF,oFAAoF;AACpF,oFAAoF;AACpF,qFAAqF;AACrF,yEAAyE;AACzE,4DAA4D;AAM5D,MAAM,GAAG,GAAG,kCAAkC,CAAC;AAE/C,kFAAkF;AAClF,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAElC,iFAAiF;AACjF,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,MAAM,WAAW,GAAG,CAAC,CAAS,EAAU,EAAE,CACxC,kCAAkC,CAAC,aAAa,aAAa,GAAG,CAAC;AAEnE,6FAA6F;AAC7F,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAuBD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,iFAAiF;IACjF,iEAAiE;IACjE,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAa,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzD,SAAS,WAAW;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC,2BAA2B;IACxF,CAAC;IAED,iFAAiF;IACjF,SAAS,eAAe;QACtB,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,IAAI,QAAQ,CAAC,CAAC,CAAE,GAAG,EAAE,EAAE,CAAC;gBACtB,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,wDAAwD;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,EAAU,EAAE;QACjD,+EAA+E;QAC/E,gFAAgF;QAChF,uDAAuD;QACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,IAAI,GAAG,GAAG,CAAC;QACf,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACrB,4EAA4E;YAC5E,wEAAwE;YACxE,IAAI,GAAG,QAAQ,CAAC;YAChB,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;gBACvB,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC;gBACpB,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,qEAAqE;QACrE,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,aAAa;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,QAAQ,GAAG,IAAI,CAAC;QAEhB,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAa,CAAC;IAEf,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAU,EAAQ,EAAE;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,sCAAsC;QACjE,IAAI,IAAI,GAAG,QAAQ;YAAE,OAAO;QAC5B,kFAAkF;QAClF,mEAAmE;QACnE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,+EAA+E;YAC/E,gFAAgF;YAChF,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,CAAC,CAAE,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;oBAC9B,KAAK,GAAG,IAAI,CAAC,CAAC,CAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;oBAChC,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,OAAO;QACrB,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACtD,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;AAEjC,MAAM,UAAU,IAAI,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC3C,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,aAAa;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACzG,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,iFAAiF;IACjF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/vertical-events.d.ts

@@ -23,10 +23,11 @@
  * production builds them, and one definition is what keeps the two identical.
  * `lint:spine-ddl` holds each adapter to including it.
  */
-import { type EventExport, type ModuleManifest, type ExportedBatch, type WantedEvent, type WithheldEvent } from '@substrat-run/contracts';
+import { type ImportCursorMove, type ImportCursorMoved, type ScopeId, type TenantId, type VerticalResolution, type EventExport, type ModuleManifest, type ExportedBatch, type WantedEvent, type WithheldEvent } from '@substrat-run/contracts';
 import { type OutboxEnvelopeRow } from './outbox-event.js';
 import type { ImportHandler } from './scope-host.js';
-export declare const VERTICAL_EVENTS_DDL = "\n  -- #1705: every event this scope has received from another vertical. The envelope only, and\n  -- never the payload. The producer's outbox keeps the one copy, where erasure already reaches.\n  CREATE TABLE IF NOT EXISTS _substrat_imports (\n    -- The PRODUCER's event id. A ULID the producer's host minted, so it is unique across\n    -- every source this scope imports from, and it is the dedupe key: a batch delivered\n    -- twice finds its events here and its handlers' journal rows in _substrat_deliveries.\n    event_id TEXT PRIMARY KEY,\n    source_scope_id TEXT NOT NULL,\n    source_vertical TEXT NOT NULL,\n    type TEXT NOT NULL,\n    schema_version INTEGER NOT NULL,\n    occurred_at TEXT NOT NULL,\n    entity_type TEXT NOT NULL,\n    entity_id TEXT NOT NULL,\n    -- How many vertical boundaries this event's cause chain has crossed, this one included.\n    -- An export read in THIS scope counts from here when one of its own events was caused by\n    -- an import, which is how a loop between two verticals is stopped.\n    hops INTEGER NOT NULL,\n    -- NULL: released, and handed to this scope's handlers. Otherwise the producer's reason\n    -- for NOT releasing it ('pii', 'version', 'cascade', 'undecodable'). Such a row was\n    -- named but never carried.\n    withheld TEXT,\n    imported_at TEXT NOT NULL\n  );\n  -- #1705: how far this scope has read each producer. Written in the same store as the\n  -- handlers' writes, so a restore of this scope rewinds the watermark with the data and the\n  -- producer re-delivers what the restore undid. A watermark the platform held instead would\n  -- skip it.\n  CREATE TABLE IF NOT EXISTS _substrat_import_cursors (\n    source_scope_id TEXT PRIMARY KEY,\n    source_vertical TEXT NOT NULL,\n    -- The id of the last producer row the reads walked (released or withheld). NULL is not\n    -- stored: a producer with no row here has never been read, which the absence says.\n    cursor TEXT NOT NULL,\n    updated_at TEXT NOT NULL\n  );\n  -- #1705: the export read, on the PRODUCER side. It asks for a few types after a watermark,\n  -- in id order. Without this index SQLite walks the primary key from the watermark forward and\n  -- steps over every row of every other type. A consumer that is caught up would then pay, on\n  -- every pass, for all the unexported activity since the last exported event. With it, the read\n  -- seeks each type's range and costs what it returns.\n  CREATE INDEX IF NOT EXISTS _substrat_outbox_type_id ON _substrat_outbox (type, id);\n";
+import type { SwitchSql } from './system-switch.js';
+export declare const VERTICAL_EVENTS_DDL = "\n  -- #1705: every event this scope has received from another vertical. The envelope only, and\n  -- never the payload. The producer's outbox keeps the one copy, where erasure already reaches.\n  CREATE TABLE IF NOT EXISTS _substrat_imports (\n    -- The PRODUCER's event id. A ULID the producer's host minted, so it is unique across\n    -- every source this scope imports from, and it is the dedupe key: a batch delivered\n    -- twice finds its events here and its handlers' journal rows in _substrat_deliveries.\n    event_id TEXT PRIMARY KEY,\n    source_scope_id TEXT NOT NULL,\n    source_vertical TEXT NOT NULL,\n    type TEXT NOT NULL,\n    schema_version INTEGER NOT NULL,\n    occurred_at TEXT NOT NULL,\n    entity_type TEXT NOT NULL,\n    entity_id TEXT NOT NULL,\n    -- How many vertical boundaries this event's cause chain has crossed, this one included.\n    -- An export read in THIS scope counts from here when one of its own events was caused by\n    -- an import, which is how a loop between two verticals is stopped.\n    hops INTEGER NOT NULL,\n    -- NULL: released, and handed to this scope's handlers. Otherwise the producer's reason\n    -- for NOT releasing it ('pii', 'version', 'cascade', 'undecodable'). Such a row was\n    -- named but never carried.\n    withheld TEXT,\n    imported_at TEXT NOT NULL\n  );\n  -- #1705: how far this scope has read each producer. Written in the same store as the\n  -- handlers' writes, so a restore of this scope rewinds the watermark with the data and the\n  -- producer re-delivers what the restore undid. A watermark the platform held instead would\n  -- skip it.\n  CREATE TABLE IF NOT EXISTS _substrat_import_cursors (\n    source_scope_id TEXT PRIMARY KEY,\n    source_vertical TEXT NOT NULL,\n    -- The id of the last producer row the reads walked (released or withheld). NULL is not\n    -- stored: a producer with no row here has never been read, which the absence says.\n    cursor TEXT NOT NULL,\n    updated_at TEXT NOT NULL\n  );\n  -- #1705: the export read, on the PRODUCER side. It asks for a few types after a watermark,\n  -- in id order. Without this index SQLite walks the primary key from the watermark forward and\n  -- steps over every row of every other type. A consumer that is caught up would then pay, on\n  -- every pass, for all the unexported activity since the last exported event. With it, the read\n  -- seeks each type's range and costs what it returns.\n  CREATE INDEX IF NOT EXISTS _substrat_outbox_type_id ON _substrat_outbox (type, id);\n  -- #1705 PR 3: what a REPLAY moved out of the live journal. A replay re-delivers events this\n  -- scope already took, and the live tables are also the dedupe (a row in _substrat_deliveries\n  -- means \"do not run this handler again\"). So the rows for the replayed range leave them. They\n  -- are moved here rather than dropped, because they are the record that a handler ran on an\n  -- event, when, and what it reported: evidence the spine keeps. One row per moved row, the\n  -- whole row as JSON under the replay that moved it. Nothing reads this to deliver.\n  -- ERASURE: today no erasure path touches imported copies, because only piiClass 'none' crosses\n  -- and the delivery-error rewrite (#1632) reaches only this scope's OWN outbox events. If a\n  -- consumer-side erasure of imported copies is ever added, it must reach `row` here too (a\n  -- moved delivery row's `error` is a handler's own sentence), or the history keeps what the\n  -- live tables gave up. Follow-up: #1757.\n  CREATE TABLE IF NOT EXISTS _substrat_import_replays (\n    -- The act (a ULID). The admin log's row for the replay carries the same id.\n    replay_id TEXT NOT NULL,\n    replayed_at TEXT NOT NULL,\n    source_scope_id TEXT NOT NULL,\n    -- 'journal': a _substrat_imports row. 'delivery': a _substrat_deliveries row.\n    kind TEXT NOT NULL,\n    event_id TEXT NOT NULL,\n    -- The handler's module on a 'delivery' row, and '' on a 'journal' row.\n    consumer_module TEXT NOT NULL,\n    row TEXT NOT NULL,\n    PRIMARY KEY (replay_id, kind, event_id, consumer_module)\n  );\n";
 /**
  * The producer-side read: rows of the given types after the watermark, oldest first.
  *
@@ -96,6 +97,27 @@ export declare function exportsOf(manifests: readonly {
         exports?: readonly EventExport[];
     };
 }[]): Map<string, EventExport>;
+/**
+ * The outbox's insertion mark (#1705 PR 2): the kick's "before", taken ahead of an invoke.
+ *
+ * `rowid`, not the event id. A ULID minted in the same millisecond as the newest row can sort
+ * BELOW it, so "ids above the newest id" can miss an event this invoke wrote. SQLite assigns a
+ * new row `max(rowid) + 1` while the newest row is still there. No code path deletes outbox rows
+ * inside an invoke: the only removals are a restore and a wipe, and they replace the whole table
+ * outside any invocation. So every row the invoke and its consumers add sits above the mark. If
+ * that ever stopped being true, the effect is bounded: an exported event would miss its kick and
+ * wait for the sweep, and no event would be lost or sent twice.
+ */
+export declare const OUTBOX_MARK_SQL = "SELECT COALESCE(MAX(rowid), 0) AS mark FROM _substrat_outbox";
+/**
+ * How many rows of the exported `types` were added after `mark` (#1705 PR 2). This is the
+ * count `ScopeStubOptions.onExportedEvents` reports. A seek on the rowid, so it walks only
+ * what the invoke added. Callers skip it entirely when the deployment exports nothing.
+ */
+export declare function exportedSinceQuery(types: readonly string[], mark: number): {
+    sql: string;
+    params: unknown[];
+};
 /** The consumer's watermark per producer, oldest source first. */
 export declare const IMPORT_CURSORS_SQL = "SELECT source_scope_id, source_vertical, cursor, updated_at FROM _substrat_import_cursors ORDER BY source_scope_id";
 /** One producer's watermark, for the compare-and-set a batch is applied under. */
@@ -115,6 +137,74 @@ export declare const IMPORT_CURSOR_ADVANCE_SQL = "\n  INSERT INTO _substrat_impo
  * `imported_at` forward or rewrite what was withheld and why.
  */
 export declare const IMPORT_RECORD_SQL = "\n  INSERT OR IGNORE INTO _substrat_imports\n    (event_id, source_scope_id, source_vertical, type, schema_version, occurred_at,\n     entity_type, entity_id, hops, withheld, imported_at)\n  VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n";
+/**
+ * The producer end of the edge a lever moves, resolved by the sweep's own rule (#1705 PR 3).
+ *
+ * Both ends must be their tenant's one primary instance, exactly as `sweepEdge` requires. A
+ * watermark on any other pair is one no pass reads, so a move there would report success and
+ * change nothing. `resolve` is the directory's `resolveVerticalInstance`, and it takes the
+ * CONSUMER's tenant, so a producer in another tenant is not found rather than moved.
+ */
+export declare function importCursorSourceOf(resolve: (tenantId: TenantId, vertical: string) => Promise<VerticalResolution>, consumer: {
+    tenantId: TenantId;
+    scopeId: ScopeId;
+    vertical: string | null;
+}, from: string): Promise<{
+    vertical: string;
+    scopeId: ScopeId;
+}>;
+/**
+ * Move one edge's watermark (#1705 PR 3). The adapter supplies the store (as the switches'
+ * `SwitchSql`), the transaction, the queue, the clock and the act's id. Run on the scope's own
+ * queue, so a pass delivering on the same edge can never interleave with the move. Everything the move decides is decided here, once, for
+ * both adapters.
+ *
+ * Why a bare rewind is not a replay. Three guards stand between an event and a second run of
+ * its handler, and a replay must pass each one on purpose:
+ *
+ *   1. `IMPORT_CURSOR_ADVANCE_SQL` moves the watermark forward only. The lever sets it here.
+ *   2. `_substrat_deliveries` holds a row per (event, module) that ran, and the delivery path
+ *      skips any pair it finds. Rewound but not cleared, every replayed event would come back
+ *      as a `duplicate` and nothing would run.
+ *   3. `_substrat_imports` is `INSERT OR IGNORE`. Left in place, an event first withheld for its
+ *      version would stay recorded as withheld after the consumer's upgrade released it.
+ *
+ * So a replay moves the range's rows in (2) and (3) into `_substrat_import_replays` under
+ * `replayId`, then clears them, then sets the watermark. The evidence stays, and the live tables
+ * take the events again. Two things are true between the move and the redelivery, and are
+ * stated rather than hidden: a cause walk through a moved event's id ends at `missing`, and an
+ * export read in this scope counts fewer hops for a chain through it. Both heal when the next
+ * pass redelivers. The undercount only loosens the loop bound (the hop cap bounds loops, and
+ * authorizes nothing), so a loop may run a round longer; no event crosses that exports, grants
+ * and the PII rule would not already release.
+ *
+ * Refused, with the reason a person reads:
+ * - a replay whose `after` is AHEAD of the watermark (that is a skip), or a skip whose `through`
+ *   is BEHIND it (that is a replay). The acknowledgement names one direction, and it must be
+ *   the direction that moves;
+ * - a skip past now, which would pass over events not yet written while the edge read as
+ *   caught up;
+ * - a replay on an edge that has delivered nothing yet: there is nothing to run again.
+ */
+export declare function moveImportCursor(sql: SwitchSql, input: {
+    move: ImportCursorMove;
+    source: {
+        vertical: string;
+        scopeId: string;
+    };
+    replayId: string;
+    /** Epoch ms: the rows' time, and "now" for a skip, as the watermark's ceiling. */
+    now: number;
+    /**
+     * What the code running this scope imports (`CrossVerticalRegistry.consumes()`). A move names
+     * an edge only if the consumer declares it. Otherwise a skip would plant a watermark for an
+     * edge that does not exist yet, and the backfill of a later version that adds the import would
+     * silently start from it.
+     */
+    imports: readonly {
+        from: string;
+    }[];
+}): ImportCursorMoved;
 /** The note a withheld event's dead letter carries at the consumer. Names the reason, never the content. */
 export declare function withheldNote(reason: WithheldEvent['reason'], vertical: string): string;
 /** One registered import handler: which module, from which vertical, for which (type, version). */
@@ -145,9 +235,13 @@ export declare class CrossVerticalRegistry {
     private readonly exportsByType;
     private readonly importVersion;
     private readonly registered;
+    /** `exportTypes()`, kept current by `register`: an invoke reads it, and must not rebuild a map to. */
+    private exportTypeList;
     register(manifest: Pick<ModuleManifest, 'id' | 'events'>, handlers: Record<string, Record<string, ImportHandler>> | undefined): void;
     /** type → export, over every registered module: what this deployment releases. */
     exports(): Map<string, EventExport>;
+    /** The exported type names (#1705 PR 2), for the per-invoke kick count. Empty: exports nothing. */
+    exportTypes(): readonly string[];
     /** What this deployment imports, one row per (source, type), sorted. */
     consumes(): {
         from: string;

package/dist/vertical-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vertical-events.d.ts","sourceRoot":"","sources":["../src/vertical-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,eAAO,MAAM,mBAAmB,s/EA2C/B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAUpC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,0VAU3B,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAC;IAC3B,oDAAoD;IACpD,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,0EAA0E;IAC1E,UAAU,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,MAAM,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,CA0D/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,KAAK,EAAE,SAAS,WAAW,EAAE,GAC5B;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,EAAE,WAAW,EAAE,CAAA;CAAE,CAgB7F;AAED,sGAAsG;AACtG,wBAAgB,SAAS,CACvB,SAAS,EAAE,SAAS;IAAE,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;KAAE,CAAA;CAAE,EAAE,GACrE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAI1B;AAED,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,uHACuF,CAAC;AAEvH,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,0EAA0E,CAAC;AAE5G;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,6VAQrC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,8OAK7B,CAAC;AAEF,4GAA4G;AAC5G,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQtF;AAED,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2D;IACzF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoE;IAClG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IAErD,QAAQ,CACN,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAC/C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,GAAG,SAAS,GAClE,IAAI,CAgDN;IAED,kFAAkF;IAClF,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAElC;IAED,wEAAwE;IACxE,QAAQ,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAOlE;IAED,kEAAkE;IAClE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAE1D;IAED,yGAAyG;IACzG,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAErD;CACF"}
+{"version":3,"file":"vertical-events.d.ts","sourceRoot":"","sources":["../src/vertical-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,eAAO,MAAM,mBAAmB,+hIAmE/B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAUpC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,0VAU3B,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAC;IAC3B,oDAAoD;IACpD,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,0EAA0E;IAC1E,UAAU,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,MAAM,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,CA0D/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,KAAK,EAAE,SAAS,WAAW,EAAE,GAC5B;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,EAAE,WAAW,EAAE,CAAA;CAAE,CAgB7F;AAED,sGAAsG;AACtG,wBAAgB,SAAS,CACvB,SAAS,EAAE,SAAS;IAAE,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,CAAA;KAAE,CAAA;CAAE,EAAE,GACrE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAI1B;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,iEAAiE,CAAC;AAE9F;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAM7G;AAED,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,uHACuF,CAAC;AAEvH,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,0EAA0E,CAAC;AAE5G;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,6VAQrC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,8OAK7B,CAAC;AAIF;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,EAC9E,QAAQ,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAC3E,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAwBjD;AA8DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,KAAK,EAAE;IACL,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,OAAO,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtC,GACA,iBAAiB,CAoEnB;AAED,4GAA4G;AAC5G,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQtF;AAED,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2D;IACzF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoE;IAClG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,sGAAsG;IACtG,OAAO,CAAC,cAAc,CAAgB;IAEtC,QAAQ,CACN,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAC/C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,GAAG,SAAS,GAClE,IAAI,CAiDN;IAED,kFAAkF;IAClF,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAElC;IAED,mGAAmG;IACnG,WAAW,IAAI,SAAS,MAAM,EAAE,CAE/B;IAED,wEAAwE;IACxE,QAAQ,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAOlE;IAED,kEAAkE;IAClE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAE1D;IAED,yGAAyG;IACzG,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAErD;CACF"}