@substrat-run/kernel 0.148.0 → 0.149.0

package/dist/store-driver-releases.js

@@ -0,0 +1,581 @@
+/**
+ * A store driver's releases, its rollouts and the holds that serialize them (D-63, #2300), shared by
+ * both adapters' directories.
+ *
+ * - `store_driver_releases`: a release's bytes were stored (the bytes themselves live outside the
+ *   directory, keyed by driver and sha256). Insert-only: who uploaded a release, and from which
+ *   commit, is never rewritten.
+ * - `store_driver_rollouts`: one row per attempt to move every script of the driver to a release, in
+ *   `seq` order. A row is `rolling` until its holder ends it `good`, `failed` or `diverged`.
+ * - `store_driver_current`: the release the last `good` rollout moved every script to.
+ * - `store_driver_rollout_walks`: the walk ledger of a rollout paged over several requests (#2312).
+ *   Each row is one declaration (vertical, binding, and the version that first declared it) an
+ *   earlier request of the same attempt walked; the next request walks only what is not in it.
+ *
+ * "The immediately previous good release" (D-63) is recorded, never derived from an ordering:
+ * each rollout row names `previous_good_sha256`, the release a rollback from it returns to. A
+ * rollout of T from current F records F; a rollback goes to the current row's previous good X, and
+ * records X's own previous good, so after r1 → r2 → r3 one rollback reaches r2 and the next r1.
+ *
+ * A hold is a lease: `exclusive` for a rollout or a rollback, `shared` for a push or serve that
+ * rebuilds a script at the release it runs, which a rollout must not interleave with (a rebuild
+ * that read the old release and uploaded after the rollout moved the script would revert it).
+ * A begin or finish is refused unless the caller still holds the driver exclusively, so a holder
+ * whose lease lapsed cannot write over the next one; its `rolling` row reads as `diverged` to the
+ * next rollout, which converges every script again.
+ *
+ * - `store_driver_rebuilds` (#2309): the platform's walk that rebuilds every script of the driver
+ *   at the release it runs, after what the platform builds a script from changed (a key list, the
+ *   entry, its verifier). One row per driver: the `fingerprint` of what the platform builds from
+ *   that the walk converges on, the last vertical it walked (`cursor`, in slug order), the
+ *   verticals it could not rebuild, and whether it is `done`. A new fingerprint starts the walk
+ *   again. The row carries its own lease, so two passes never walk one driver at once.
+ */
+import { substratError } from '@substrat-run/contracts';
+import { driverDeclarationsOf } from './vertical-scope-stores.js';
+/** Interpolated into both adapters' directory DDL, so `lint:spine-ddl` sees one spelling on each side. */
+export const STORE_DRIVER_RELEASES_DDL = `
+  CREATE TABLE IF NOT EXISTS store_driver_releases (
+    driver        TEXT NOT NULL,
+    sha256        TEXT NOT NULL,
+    source_commit TEXT NOT NULL,
+    uploaded_by   TEXT NOT NULL,
+    uploaded_at   TEXT NOT NULL,
+    PRIMARY KEY (driver, sha256)
+  );
+  CREATE TABLE IF NOT EXISTS store_driver_rollouts (
+    driver               TEXT NOT NULL,
+    seq                  INTEGER NOT NULL,
+    sha256               TEXT NOT NULL,
+    action               TEXT NOT NULL,
+    from_sha256          TEXT,
+    previous_good_sha256 TEXT,
+    state                TEXT NOT NULL,
+    actor                TEXT NOT NULL,
+    -- The hold the rollout runs under: a rolling row whose holder holds nothing has stopped.
+    holder               TEXT NOT NULL,
+    started_at           TEXT NOT NULL,
+    ended_at             TEXT,
+    detail               TEXT,
+    PRIMARY KEY (driver, seq)
+  );
+  CREATE TABLE IF NOT EXISTS store_driver_current (
+    driver TEXT PRIMARY KEY,
+    sha256 TEXT NOT NULL,
+    seq    INTEGER NOT NULL
+  );
+  -- One declaration an attempt walked (#2312). The attempt is the seq of its first row; a row
+  -- continues it while the rows before it are paused at the same release and action.
+  CREATE TABLE IF NOT EXISTS store_driver_rollout_walks (
+    driver           TEXT NOT NULL,
+    attempt          INTEGER NOT NULL,
+    vertical_slug    TEXT NOT NULL,
+    binding          TEXT NOT NULL,
+    first_version_id TEXT NOT NULL,
+    PRIMARY KEY (driver, attempt, vertical_slug, binding, first_version_id)
+  );
+  CREATE TABLE IF NOT EXISTS store_driver_holds (
+    driver     TEXT NOT NULL,
+    holder     TEXT NOT NULL,
+    mode       TEXT NOT NULL,
+    expires_at INTEGER NOT NULL,
+    PRIMARY KEY (driver, holder)
+  );
+  CREATE TABLE IF NOT EXISTS store_driver_rebuilds (
+    driver           TEXT PRIMARY KEY,
+    fingerprint      TEXT NOT NULL,
+    -- When this fingerprint was first walked towards: a restart keeps it, a new fingerprint resets it.
+    fingerprint_since TEXT NOT NULL,
+    cursor           TEXT,
+    failures         TEXT NOT NULL,
+    state            TEXT NOT NULL,
+    holder           TEXT,
+    lease_expires_at INTEGER NOT NULL,
+    -- When this walk began from its first script: a restart or a new fingerprint sets it, a pass
+    -- that continues the walk keeps it.
+    started_at       TEXT NOT NULL,
+    -- The person who attested, when this walk began, that no control-plane deploy was rolling out.
+    attested_by      TEXT,
+    -- When a walk towards this fingerprint last proved every script current; kept across a
+    -- restart at the same fingerprint, cleared by a new one.
+    verified_at      TEXT,
+    updated_at       TEXT NOT NULL,
+    finished_at      TEXT
+  );
+`;
+/**
+ * The directory's names from before a store's code was called a driver (K-53's rename): the four
+ * release tables were `store_kind_*`, and they and `vertical_scope_stores` keyed by a `kind`
+ * column. The values are the same ids, so only names move.
+ */
+const LEGACY_STORE_DRIVER_TABLES = new Map([
+    ['store_kind_releases', 'store_driver_releases'],
+    ['store_kind_rollouts', 'store_driver_rollouts'],
+    ['store_kind_current', 'store_driver_current'],
+    ['store_kind_holds', 'store_driver_holds'],
+]);
+const DRIVER_KEYED_TABLES = [...LEGACY_STORE_DRIVER_TABLES.values(), 'vertical_scope_stores'];
+/**
+ * The statements that move a directory built before the rename onto its names, to run before
+ * the directory's DDL on every start: that DDL is all `IF NOT EXISTS`, so it would leave an old
+ * table as it is and create an empty one beside it. Renames keep every row, a release uploaded
+ * before its pin included. Empty once moved, so a later start does nothing.
+ *
+ * A directory can hold both names: code from before the rename, run again after it (a rollback),
+ * creates the old tables empty beside the moved ones, and writes to them while it runs. Then the
+ * name that holds no rows is dropped, and the one that holds them ends under the new name. When
+ * both hold rows, both are left where they are: nothing is merged, and nothing with rows is
+ * dropped.
+ *
+ * `tables` is every table the directory holds; `columnsOf` answers a table's columns, and
+ * `hasRows` whether it holds any.
+ */
+export function legacyStoreDriverRenames(tables, columnsOf, hasRows) {
+    const held = new Set(tables.map((t) => t.toLowerCase()));
+    const statements = [];
+    const renamed = new Set();
+    for (const [from, to] of LEGACY_STORE_DRIVER_TABLES) {
+        if (!held.has(from))
+            continue;
+        if (held.has(to)) {
+            if (!hasRows(from)) {
+                statements.push(`DROP TABLE ${from}`);
+                continue;
+            }
+            if (hasRows(to))
+                continue;
+            statements.push(`DROP TABLE ${to}`);
+        }
+        statements.push(`ALTER TABLE ${from} RENAME TO ${to}`);
+        renamed.add(to);
+    }
+    for (const table of DRIVER_KEYED_TABLES) {
+        const columns = renamed.has(table) ? ['kind'] : held.has(table) ? (columnsOf(table) ?? []) : [];
+        const lowered = columns.map((c) => c.toLowerCase());
+        if (lowered.includes('kind') && !lowered.includes('driver')) {
+            statements.push(`ALTER TABLE ${table} RENAME COLUMN kind TO driver`);
+        }
+    }
+    return statements;
+}
+/** What to do about a table that holds rows under both names (see {@link legacyStoreDriverRenames}). */
+const BOTH_NAMES_REMEDY = 'Restore a directory dump taken before the pre-rename code ran again (a restore replaces every table), ' +
+    'or export the store_kind_* rows, carry over any that are still wanted, and drop the store_kind_* tables by hand.';
+/**
+ * The tables that hold rows under both names, which {@link legacyStoreDriverRenames} leaves
+ * alone, as one line a start logs: until one is cleared, a directory dump carries both and a
+ * restore of it is refused. Undefined when there are none. Reachable only after a rollback to
+ * pre-rename code that wrote a release, rollout or hold, which no registered driver allowed yet.
+ */
+export function legacyStoreDriverConflict(tables, hasRows) {
+    const held = new Set(tables.map((t) => t.toLowerCase()));
+    const both = [...LEGACY_STORE_DRIVER_TABLES].filter(([from, to]) => held.has(from) && held.has(to) && hasRows(from) && hasRows(to));
+    if (both.length === 0)
+        return undefined;
+    return (`substrat: the directory holds rows under both ${both.map(([from, to]) => `${from} and ${to}`).join(', ')}: ` +
+        `code from before the store driver rename (K-53) ran again and wrote them. Both are kept, and a directory ` +
+        `dump of it is refused at restore until one is cleared. ${BOTH_NAMES_REMEDY}`);
+}
+/**
+ * A directory dump's tables with the pre-rename names mapped onto this code's (see
+ * {@link legacyStoreDriverRenames}), so a copy taken before the rename restores: the dump's rows
+ * go in by name, and a restore refuses a table it does not build. A dump that carries a table
+ * under both names keeps the one that holds rows, the way a start does; one where both hold rows
+ * is refused, since loading both would merge two histories.
+ */
+export function mapLegacyStoreDriverDump(tables) {
+    const byName = new Map(tables.map((t) => [t.name.toLowerCase(), t]));
+    const dropped = new Set();
+    for (const [from, to] of LEGACY_STORE_DRIVER_TABLES) {
+        const legacy = byName.get(from);
+        const current = byName.get(to);
+        if (!legacy || !current)
+            continue;
+        if (legacy.rows.length === 0)
+            dropped.add(legacy);
+        else if (current.rows.length === 0)
+            dropped.add(current);
+        else {
+            throw substratError('validation_failed', `restore refused: the dump carries rows in both ${legacy.name} and ${current.name}, the same table ` +
+                `before and after the store driver rename (K-53). Nothing was changed. ${BOTH_NAMES_REMEDY}`);
+        }
+    }
+    return tables.filter((t) => !dropped.has(t)).map((t) => {
+        const name = LEGACY_STORE_DRIVER_TABLES.get(t.name.toLowerCase()) ?? t.name;
+        if (!DRIVER_KEYED_TABLES.includes(name.toLowerCase()))
+            return t;
+        const columns = t.columns.map((c) => c.toLowerCase());
+        const keepsKind = columns.includes('kind') && !columns.includes('driver');
+        return { ...t, name, columns: keepsKind ? t.columns.map((c) => (c.toLowerCase() === 'kind' ? 'driver' : c)) : t.columns };
+    });
+}
+const rolloutOf = (r) => ({
+    driver: r.driver,
+    seq: Number(r.seq),
+    sha256: r.sha256,
+    action: r.action,
+    fromSha256: r.from_sha256,
+    previousGoodSha256: r.previous_good_sha256,
+    state: r.state,
+    actor: r.actor,
+    startedAt: r.started_at,
+    endedAt: r.ended_at,
+    detail: r.detail,
+});
+const ROLLOUT_COLUMNS = 'driver, seq, sha256, action, from_sha256, previous_good_sha256, state, actor, started_at, ended_at, detail';
+function rolloutAt(db, driver, seq) {
+    const [row] = db.all(`SELECT ${ROLLOUT_COLUMNS} FROM store_driver_rollouts WHERE driver = ? AND seq = ?`, driver, seq);
+    return row ? rolloutOf(row) : undefined;
+}
+/** A stored release, or undefined. */
+export function storeDriverReleaseIn(db, driver, sha256) {
+    const [row] = db.all('SELECT driver, sha256, source_commit, uploaded_by, uploaded_at FROM store_driver_releases WHERE driver = ? AND sha256 = ?', driver, sha256);
+    return row
+        ? { driver: row.driver, sha256: row.sha256, sourceCommit: row.source_commit, uploadedBy: row.uploaded_by, uploadedAt: row.uploaded_at }
+        : undefined;
+}
+/**
+ * Record that a release's bytes are stored. The same sha256 again is the same release, and the
+ * row already written is returned as it stands (`created: false`). The same sha256 from another
+ * commit is refused (`conflict`): one bundle has one source the reviewer reads.
+ */
+export function recordStoreDriverReleaseIn(db, input) {
+    const held = storeDriverReleaseIn(db, input.driver, input.sha256);
+    if (held) {
+        if (held.sourceCommit !== input.sourceCommit) {
+            throw substratError('conflict', `release ${input.sha256} of '${input.driver}' is stored as built from ${held.sourceCommit}, not ${input.sourceCommit}`);
+        }
+        return { record: held, created: false };
+    }
+    db.run('INSERT INTO store_driver_releases (driver, sha256, source_commit, uploaded_by, uploaded_at) VALUES (?, ?, ?, ?, ?)', input.driver, input.sha256, input.sourceCommit, input.actor, input.at);
+    return { record: storeDriverReleaseIn(db, input.driver, input.sha256), created: true };
+}
+/**
+ * The driver's current release, every rollout, and where a rollback goes now.
+ *
+ * With `nowMs`, a `rolling` row whose holder no longer holds the driver exclusively is reported as
+ * `diverged` (read-time only, nothing is written): its holder stopped, and its scripts may be on
+ * either release. The next rollout's begin writes that state.
+ *
+ * `rollbackTarget` is, in order:
+ * - the target of a rollback that is the newest attempt since the current release, a `failed` one
+ *   aside, and ended `paused` or `diverged` (`unfinishedRollback`): posting the rollback again
+ *   continues it, and never turns it around onto the release it is leaving. A `failed` request
+ *   changes nothing here: it moved nothing, or returned what its attempt moved, or (a later page's
+ *   canary) moved nothing in its own request while earlier pages' verticals stay on the new
+ *   release; those pages' `paused` rows are still since the current release, so the fleet still
+ *   reads as mixed below. No rollout may begin while a
+ *   rollback to an earlier release is unfinished, `paused` or `diverged` (`beginStoreDriverRolloutIn`):
+ *   it is finished first, by posting it again. A rollback onto the current release (undoing a
+ *   diverged rollout) does not block a rollout. A rollback to an earlier release cannot meet the
+ *   schema rule (the route refuses one below the current schema), but one onto the current release
+ *   can, and then it never finishes, so going forward must stay open;
+ * - the current release itself, when a rollout since it ended `diverged` or `paused` on ANOTHER
+ *   release: the fleet may be mixed, and undoing that rollout means converging every script back
+ *   on the release it was healthy on, never going past it. A row that moves scripts to the current
+ *   release itself (a re-post of it, paged over several requests, or a rollback onto it) leaves
+ *   every script on the current release whatever it ended, so it never makes the fleet mixed:
+ *   otherwise re-posting the current release past one request's walk would turn the rollback
+ *   onto the release being escaped (#2312);
+ * - otherwise the immediately previous good release.
+ * An unfinished attempt never changes what "previous good" means.
+ */
+export function storeDriverStateIn(db, driver, nowMs) {
+    const live = nowMs === undefined
+        ? undefined
+        : new Set(db.all("SELECT holder FROM store_driver_holds WHERE driver = ? AND mode = 'exclusive' AND expires_at > ?", driver, nowMs).map((h) => h.holder));
+    const rows = db.all(`SELECT ${ROLLOUT_COLUMNS}, holder FROM store_driver_rollouts WHERE driver = ? ORDER BY seq`, driver);
+    const rollouts = rows.map((r) => live && r.state === 'rolling' && !(r.holder && live.has(r.holder))
+        ? rolloutOf({ ...r, state: 'diverged', detail: 'its holder no longer holds the driver; the rollout stopped before it ended' })
+        : rolloutOf(r));
+    const [current] = db.all('SELECT sha256, seq FROM store_driver_current WHERE driver = ?', driver);
+    if (!current)
+        return { current: null, rollouts, rollbackTarget: null, unfinishedRollback: null };
+    const seq = Number(current.seq);
+    const row = rollouts.find((r) => r.seq === seq);
+    const previousGoodSha256 = row?.previousGoodSha256 ?? null;
+    const since = rollouts.filter((r) => r.seq > seq);
+    // A failed request never decides what comes next (see above).
+    const newest = since.filter((r) => r.state !== 'failed').at(-1);
+    const unfinishedRollback = newest?.action === 'rollback' && (newest.state === 'paused' || newest.state === 'diverged') ? newest.sha256 : null;
+    const mixed = since.some((r) => (r.state === 'diverged' || r.state === 'paused') && r.sha256 !== current.sha256);
+    return {
+        current: { sha256: current.sha256, seq, previousGoodSha256 },
+        rollouts,
+        rollbackTarget: unfinishedRollback ?? (mixed ? current.sha256 : previousGoodSha256),
+        unfinishedRollback,
+    };
+}
+/**
+ * Take, or renew, a hold on a driver. Answers false when another holder's live hold excludes it: an
+ * exclusive one for any request, or any one for an exclusive request. A lapsed hold is dropped
+ * first. Asking in the other mode than the one held is refused.
+ *
+ * `renew` only extends a hold the holder still holds: a holder whose lease lapsed gets false, even
+ * when nobody took the driver since, because a lapsed holder cannot know what happened meanwhile.
+ * With `rolloutSeq` it also answers false unless that rollout is still `rolling`, so a rollout
+ * whose row another holder ended stops instead of moving scripts the state no longer describes.
+ */
+export function holdStoreDriverIn(db, input) {
+    if (!(input.ttlMs > 0))
+        throw substratError('validation_failed', 'a store-driver hold needs a positive lifetime');
+    db.run('DELETE FROM store_driver_holds WHERE driver = ? AND expires_at <= ?', input.driver, input.nowMs);
+    const live = db.all('SELECT holder, mode FROM store_driver_holds WHERE driver = ?', input.driver);
+    const own = live.find((h) => h.holder === input.holder);
+    if (own && own.mode !== input.mode) {
+        throw substratError('conflict', `holder ${input.holder} holds '${input.driver}' ${own.mode}, not ${input.mode}`);
+    }
+    if ((input.renew || input.rolloutSeq !== undefined) && !own)
+        return false;
+    if (input.rolloutSeq !== undefined && rolloutAt(db, input.driver, input.rolloutSeq)?.state !== 'rolling')
+        return false;
+    const others = live.filter((h) => h.holder !== input.holder);
+    if (input.mode === 'exclusive' ? others.length > 0 : others.some((h) => h.mode === 'exclusive'))
+        return false;
+    db.run(`INSERT INTO store_driver_holds (driver, holder, mode, expires_at) VALUES (?, ?, ?, ?)
+     ON CONFLICT (driver, holder) DO UPDATE SET expires_at = excluded.expires_at`, input.driver, input.holder, input.mode, input.nowMs + input.ttlMs);
+    return true;
+}
+/** Drop a hold. Dropping one already gone is not an error. */
+export function releaseStoreDriverHoldIn(db, input) {
+    db.run('DELETE FROM store_driver_holds WHERE driver = ? AND holder = ?', input.driver, input.holder);
+}
+function assertExclusive(db, driver, holder, nowMs) {
+    const [row] = db.all("SELECT 1 AS held FROM store_driver_holds WHERE driver = ? AND holder = ? AND mode = 'exclusive' AND expires_at > ?", driver, holder, nowMs);
+    if (!row)
+        throw substratError('conflict', `'${driver}' is not held exclusively by ${holder}`);
+}
+/**
+ * Begin a rollout or a rollback of a stored release, as the exclusive holder. A rollout left
+ * `rolling` by an earlier holder ends `diverged` here: its scripts may be on either release, and
+ * this rollout reaches all of them. A rollback must name the current release's previous good one.
+ */
+export function beginStoreDriverRolloutIn(db, input) {
+    assertExclusive(db, input.driver, input.holder, input.nowMs);
+    if (!storeDriverReleaseIn(db, input.driver, input.sha256)) {
+        throw substratError('not_found', `release ${input.sha256} of '${input.driver}' is not stored`);
+    }
+    db.run(`UPDATE store_driver_rollouts SET state = 'diverged', ended_at = ?, detail = 'its holder stopped before the rollout ended'
+     WHERE driver = ? AND state = 'rolling'`, input.at, input.driver);
+    const { current, rollbackTarget, unfinishedRollback } = storeDriverStateIn(db, input.driver, input.nowMs);
+    // A rollback under way to an earlier release blocks every rollout until it ends good. One onto
+    // the current release (undoing a diverged rollout) does not: if a script refuses to go below its
+    // schema, that rollback can never finish, and going forward is the way out.
+    if (input.action === 'rollout' && unfinishedRollback && unfinishedRollback !== current?.sha256) {
+        throw substratError('conflict', `a rollback of '${input.driver}' to ${unfinishedRollback} is part way through; post the rollback again to finish it before any rollout`);
+    }
+    let previousGood;
+    if (input.action === 'rollback') {
+        if (!current || !rollbackTarget)
+            throw substratError('conflict', `'${input.driver}' has no previous good release to roll back to`);
+        if (rollbackTarget !== input.sha256) {
+            throw substratError('conflict', `a rollback of '${input.driver}' returns to ${rollbackTarget}, not ${input.sha256}`);
+        }
+        if (input.sha256 === current.sha256) {
+            // Undoing a diverged rollout: back onto the current release, whose previous good stays.
+            previousGood = current.previousGoodSha256;
+        }
+        else {
+            const [made] = db.all(`SELECT previous_good_sha256 FROM store_driver_rollouts
+         WHERE driver = ? AND sha256 = ? AND state = 'good' ORDER BY seq DESC LIMIT 1`, input.driver, input.sha256);
+            previousGood = made?.previous_good_sha256 ?? null;
+        }
+    }
+    else {
+        // Rolling out the current release again (a resume) keeps where a rollback from it returns to.
+        previousGood = current ? (current.sha256 === input.sha256 ? current.previousGoodSha256 : current.sha256) : null;
+    }
+    const next = Number(db.all('SELECT COALESCE(MAX(seq), 0) + 1 AS next FROM store_driver_rollouts WHERE driver = ?', input.driver)[0].next);
+    db.run(`INSERT INTO store_driver_rollouts (${ROLLOUT_COLUMNS}, holder) VALUES (?, ?, ?, ?, ?, ?, 'rolling', ?, ?, NULL, NULL, ?)`, input.driver, next, input.sha256, input.action, current?.sha256 ?? null, previousGood, input.actor, input.at, input.holder);
+    return rolloutAt(db, input.driver, next);
+}
+/**
+ * End a rollout the caller began, as the exclusive holder. A good one makes its release current.
+ *
+ * `walked` is what this request walked, and only a `paused` end takes it (#2312): it joins the
+ * attempt's ledger in the transaction that writes the state, so a request that stops before its
+ * end leaves no ledger rows, and the next attempt walks those verticals again rather than skip
+ * them. What keeps a dead ledger unread is the attempt key (`attemptOf`); the deletes here keep the
+ * table to the one attempt a driver can continue: any end drops every other attempt's rows, and any
+ * end but `paused` this attempt's too.
+ */
+export function finishStoreDriverRolloutIn(db, input) {
+    assertExclusive(db, input.driver, input.holder, input.nowMs);
+    const row = rolloutAt(db, input.driver, input.seq);
+    if (!row)
+        throw substratError('not_found', `'${input.driver}' has no rollout ${input.seq}`);
+    if (row.state !== 'rolling')
+        throw substratError('conflict', `rollout ${input.seq} of '${input.driver}' already ended ${row.state}`);
+    if (input.walked && input.state !== 'paused') {
+        throw substratError('validation_failed', `only a paused rollout records what it walked; ${input.seq} of '${input.driver}' ends ${input.state}`);
+    }
+    db.run('UPDATE store_driver_rollouts SET state = ?, ended_at = ?, detail = ? WHERE driver = ? AND seq = ?', input.state, input.at, input.detail, input.driver, input.seq);
+    const attempt = attemptOf(db, input.driver, input.seq, row.sha256, row.action);
+    db.run(`DELETE FROM store_driver_rollout_walks WHERE driver = ?${input.state === 'paused' ? ' AND attempt <> ?' : ''}`, ...(input.state === 'paused' ? [input.driver, attempt] : [input.driver]));
+    if (input.state === 'paused') {
+        for (const target of input.walked ?? []) {
+            for (const store of target.stores) {
+                db.run(`INSERT OR IGNORE INTO store_driver_rollout_walks (driver, attempt, vertical_slug, binding, first_version_id) VALUES (?, ?, ?, ?, ?)`, input.driver, attempt, target.vertical, store.binding, store.firstVersionId);
+            }
+        }
+    }
+    if (input.state === 'good') {
+        db.run(`INSERT INTO store_driver_current (driver, sha256, seq) VALUES (?, ?, ?)
+       ON CONFLICT (driver) DO UPDATE SET sha256 = excluded.sha256, seq = excluded.seq`, input.driver, row.sha256, input.seq);
+    }
+    return rolloutAt(db, input.driver, input.seq);
+}
+const rebuildRowOf = (db, driver) => db.all('SELECT driver, fingerprint, fingerprint_since, cursor, failures, state, holder, lease_expires_at, started_at, attested_by, verified_at, updated_at, finished_at FROM store_driver_rebuilds WHERE driver = ?', driver)[0];
+const rebuildOf = (r) => ({
+    driver: r.driver,
+    fingerprint: r.fingerprint,
+    fingerprintSince: r.fingerprint_since,
+    cursor: r.cursor,
+    failures: JSON.parse(r.failures),
+    state: r.state,
+    startedAt: r.started_at,
+    attestedBy: r.attested_by,
+    verifiedAt: r.verified_at,
+    updatedAt: r.updated_at,
+    finishedAt: r.finished_at,
+});
+/** The driver's fleet rebuild, or undefined before its first. */
+export function storeDriverRebuildIn(db, driver) {
+    const row = rebuildRowOf(db, driver);
+    return row ? rebuildOf(row) : undefined;
+}
+/**
+ * Take the lease on a driver's fleet rebuild, towards `fingerprint`, for `ttlMs`. Answers the
+ * rebuild as it stands, or null while another holder's lease is live. A rebuild towards another
+ * fingerprint (or none yet) starts over: no vertical is walked and none has failed, because every
+ * script may have been built from something else than what the platform builds from now. With
+ * `restart`, a rebuild already `done` at this fingerprint starts over too (a re-verification: a
+ * script uploaded since by a control plane still building from older inputs is found and rebuilt).
+ * With `attestedBy` (a person attesting no control-plane deploy is rolling out), the rebuild starts
+ * over and the new walk carries the attestation, unless a walk this attestation (any person's, at
+ * this fingerprint) already started is under way: that walk is continued, so repeating an attested
+ * run finishes a fleet larger than one run. Any other start clears it.
+ */
+export function claimStoreDriverRebuildIn(db, input) {
+    if (!(input.ttlMs > 0))
+        throw substratError('validation_failed', 'a store-driver rebuild lease needs a positive lifetime');
+    const row = rebuildRowOf(db, input.driver);
+    if (row && row.holder !== null && row.holder !== input.holder && Number(row.lease_expires_at) > input.nowMs)
+        return null;
+    const lease = input.nowMs + input.ttlMs;
+    // An attested walk under way at these lists is the attestation's own: continued, never restarted.
+    const attestedUnderway = row?.fingerprint === input.fingerprint && row.state === 'running' && row.attested_by !== null;
+    if (!row ||
+        row.fingerprint !== input.fingerprint ||
+        (input.restart && row.state === 'done') ||
+        (input.attestedBy !== undefined && !attestedUnderway)) {
+        db.run(`INSERT INTO store_driver_rebuilds (driver, fingerprint, fingerprint_since, cursor, failures, state, holder, lease_expires_at, started_at, attested_by, verified_at, updated_at, finished_at)
+       VALUES (?, ?, ?, NULL, '[]', 'running', ?, ?, ?, ?, NULL, ?, NULL)
+       ON CONFLICT (driver) DO UPDATE SET fingerprint = excluded.fingerprint, cursor = NULL, failures = '[]', state = 'running',
+         fingerprint_since = CASE WHEN store_driver_rebuilds.fingerprint = excluded.fingerprint
+           THEN store_driver_rebuilds.fingerprint_since ELSE excluded.fingerprint_since END,
+         verified_at = CASE WHEN store_driver_rebuilds.fingerprint = excluded.fingerprint
+           THEN store_driver_rebuilds.verified_at ELSE NULL END,
+         holder = excluded.holder, lease_expires_at = excluded.lease_expires_at, started_at = excluded.started_at,
+         attested_by = excluded.attested_by, updated_at = excluded.updated_at, finished_at = NULL`, input.driver, input.fingerprint, input.at, input.holder, lease, input.at, input.attestedBy ?? null, input.at);
+    }
+    else {
+        db.run('UPDATE store_driver_rebuilds SET holder = ?, lease_expires_at = ? WHERE driver = ?', input.holder, lease, input.driver);
+    }
+    return rebuildOf(rebuildRowOf(db, input.driver));
+}
+/**
+ * Record how far the lease holder's walk got, renewing the lease for `ttlMs`, or with `release`
+ * dropping it. `done` ends the rebuild; it needs no failure left. Refused (`conflict`) unless the
+ * caller is still the row's holder, towards `fingerprint`: once another pass claimed the row (a
+ * lapsed lease) or restarted it (a new fingerprint), the old holder writes nothing. A holder whose
+ * lease lapsed while nobody claimed the row still records what it did, which is then true. With
+ * `verified` (only with `done`), the walk proved every script current, and `verifiedAt` is set.
+ */
+export function advanceStoreDriverRebuildIn(db, input) {
+    const row = rebuildRowOf(db, input.driver);
+    if (!row || row.holder !== input.holder || row.fingerprint !== input.fingerprint) {
+        throw substratError('conflict', `the rebuild of '${input.driver}' is not held by ${input.holder}`);
+    }
+    if (input.done && input.failures.length > 0) {
+        throw substratError('validation_failed', `the rebuild of '${input.driver}' is not done while a vertical failed`);
+    }
+    if (input.verified && !input.done) {
+        throw substratError('validation_failed', `the rebuild of '${input.driver}' proves nothing before it is done`);
+    }
+    db.run(`UPDATE store_driver_rebuilds SET cursor = ?, failures = ?, state = ?, holder = ?, lease_expires_at = ?, updated_at = ?, finished_at = ?,
+       verified_at = COALESCE(?, verified_at)
+     WHERE driver = ?`, input.cursor, JSON.stringify(input.failures), input.done ? 'done' : 'running', input.release ? null : input.holder, input.release ? 0 : input.nowMs + input.ttlMs, input.at, input.done ? input.at : null, input.verified ? input.at : null, input.driver);
+    return rebuildOf(rebuildRowOf(db, input.driver));
+}
+/**
+ * The attempt the rollout at `seq` belongs to: the seq of the first row of the run of `paused`
+ * rows of the same release and action just before it, or `seq` itself. Any other row between
+ * (good, failed, diverged, a rolling one left by a holder that stopped, another release) ends the
+ * run, so its ledger is never read: what it walked may since have been moved elsewhere.
+ */
+function attemptOf(db, driver, seq, sha256, action) {
+    const before = db.all('SELECT seq, sha256, action, state FROM store_driver_rollouts WHERE driver = ? AND seq < ? ORDER BY seq DESC', driver, seq);
+    let attempt = seq;
+    for (const row of before) {
+        if (row.state !== 'paused' || row.sha256 !== sha256 || row.action !== action)
+            break;
+        attempt = Number(row.seq);
+    }
+    return attempt;
+}
+/** Rows in (vertical, binding) order, grouped by vertical. */
+function targetsOf(rows) {
+    const byVertical = new Map();
+    for (const r of rows) {
+        const stores = byVertical.get(r.vertical_slug) ?? [];
+        stores.push({ binding: r.binding, firstVersionId: r.first_version_id });
+        byVertical.set(r.vertical_slug, stores);
+    }
+    return [...byVertical].map(([vertical, stores]) => ({ vertical, stores }));
+}
+const assertLimit = (limit) => {
+    if (!(Number.isInteger(limit) && limit > 0))
+        throw substratError('validation_failed', 'a rollout page needs a positive limit');
+};
+/** A declaration the attempt walked: the ledger row of the same vertical, binding and first version. */
+const WALKED = `EXISTS (SELECT 1 FROM store_driver_rollout_walks AS w
+  WHERE w.driver = s.driver AND w.attempt = ? AND w.vertical_slug = s.vertical_slug
+    AND w.binding = s.binding AND w.first_version_id = s.first_version_id)`;
+/**
+ * What the next request of a rollout of `sha256` (or a rollback to it) walks (#2312): the first
+ * `limit` verticals, in (vertical, binding) order, with a declaration of the driver that the attempt
+ * it would continue has not walked, and how many verticals are pending in all. Asked before the
+ * request's row begins, as the exclusive holder will begin it: a request that continues no attempt
+ * walks every declaration. `walked` counts the verticals the continued attempt walked that still
+ * declare the driver. `unreadable` is `driverDeclarationsOf`'s: a caller that must reach every script
+ * refuses while it is not empty.
+ */
+export function storeDriverRolloutPendingIn(db, input) {
+    assertLimit(input.limit);
+    // Indexes every vertical not indexed yet, and names the ones that cannot say what they declare.
+    const { unreadable } = driverDeclarationsOf(db, input.driver);
+    const next = Number(db.all('SELECT COALESCE(MAX(seq), 0) + 1 AS next FROM store_driver_rollouts WHERE driver = ?', input.driver)[0].next);
+    const attempt = attemptOf(db, input.driver, next, input.sha256, input.action);
+    const rows = db.all(`SELECT s.vertical_slug, s.binding, s.first_version_id, ${WALKED} AS walked
+       FROM vertical_scope_stores AS s WHERE s.driver = ? ORDER BY s.vertical_slug, s.binding`, attempt, input.driver);
+    const pending = targetsOf(rows.filter((r) => !r.walked));
+    const walked = new Set(rows.filter((r) => r.walked).map((r) => r.vertical_slug)).size;
+    return { verticals: pending.slice(0, input.limit), pending: pending.length, walked, unreadable };
+}
+/**
+ * What the attempt of the rollout at `seq` walked in its EARLIER requests and still declares the
+ * driver, in (vertical, binding) order: the verticals a failure part way returns, besides the ones
+ * its own request reached (#2312). At most `limit`, and `walked` counts them all.
+ */
+export function storeDriverRolloutWalkedIn(db, input) {
+    assertLimit(input.limit);
+    const row = rolloutAt(db, input.driver, input.seq);
+    if (!row)
+        throw substratError('not_found', `'${input.driver}' has no rollout ${input.seq}`);
+    const attempt = attemptOf(db, input.driver, input.seq, row.sha256, row.action);
+    const walked = targetsOf(db.all(`SELECT s.vertical_slug, s.binding, s.first_version_id FROM vertical_scope_stores AS s
+      WHERE s.driver = ? AND ${WALKED} ORDER BY s.vertical_slug, s.binding`, input.driver, attempt));
+    return { verticals: walked.slice(0, input.limit), walked: walked.length };
+}
+//# sourceMappingURL=store-driver-releases.js.map

package/dist/store-driver-releases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-driver-releases.js","sourceRoot":"","sources":["../src/store-driver-releases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,0GAA0G;AAC1G,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoExC,CAAC;AAEF;;;;GAIG;AACH,MAAM,0BAA0B,GAAgC,IAAI,GAAG,CAAC;IACtE,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;IAChD,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;IAChD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;CAC3C,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,CAAC,GAAG,0BAA0B,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAE9F;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyB,EACzB,SAA2D,EAC3D,OAAmC;IAEnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,0BAA0B,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC1B,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,eAAe,IAAI,cAAc,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,UAAU,CAAC,IAAI,CAAC,eAAe,KAAK,+BAA+B,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,wGAAwG;AACxG,MAAM,iBAAiB,GACrB,wGAAwG;IACxG,kHAAkH,CAAC;AAErH;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB,EAAE,OAAmC;IACtG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,GAAG,0BAA0B,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC,CAC/E,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,CACL,iDAAiD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC7G,2GAA2G;QAC3G,0DAA0D,iBAAiB,EAAE,CAC9E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAEtC,MAAoB;IACpB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAK,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,0BAA0B,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,SAAS;QAClC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;aAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aACpD,CAAC;YACJ,MAAM,aAAa,CACjB,mBAAmB,EACnB,kDAAkD,MAAM,CAAC,IAAI,QAAQ,OAAO,CAAC,IAAI,mBAAmB;gBAClG,yEAAyE,iBAAiB,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAC5E,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5H,CAAC,CAAC,CAAC;AACL,CAAC;AA6DD,MAAM,SAAS,GAAG,CAAC,CAAa,EAA4B,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,UAAU,EAAE,CAAC,CAAC,WAAW;IACzB,kBAAkB,EAAE,CAAC,CAAC,oBAAoB;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,OAAO,EAAE,CAAC,CAAC,QAAQ;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM;CACjB,CAAC,CAAC;AAEH,MAAM,eAAe,GACnB,4GAA4G,CAAC;AAE/G,SAAS,SAAS,CAAC,EAAa,EAAE,MAAc,EAAE,GAAW;IAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,eAAe,0DAA0D,EAAE,MAAM,EAAE,GAAG,CAA4B,CAAC;IAClJ,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,MAAc,EAAE,MAAc;IAChF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAClB,2HAA2H,EAC3H,MAAM,EAAE,MAAM,CAC0F,CAAC;IAC3G,OAAO,GAAG;QACR,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;QACvI,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,EAAa,EACb,KAA0F;IAE1F,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,aAAa,CACjB,UAAU,EACV,WAAW,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,6BAA6B,IAAI,CAAC,YAAY,SAAS,KAAK,CAAC,YAAY,EAAE,CACvH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,EAAE,CAAC,GAAG,CACJ,oHAAoH,EACpH,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CACtE,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAa,EAAE,MAAc,EAAE,KAAc;IAC9E,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,GAAG,CAAE,EAAE,CAAC,GAAG,CAAC,kGAAkG,EAAE,MAAM,EAAE,KAAK,CAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtL,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,eAAe,mEAAmE,EAAE,MAAM,CAA0D,CAAC;IACnL,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;QAC9H,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACjB,CAAC;IACF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,+DAA+D,EAAE,MAAM,CAAsC,CAAC;IACvI,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACjG,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,GAAG,EAAE,kBAAkB,IAAI,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAClD,8DAA8D;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,kBAAkB,GAAG,MAAM,EAAE,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9I,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjH,OAAO;QACL,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE;QAC5D,QAAQ;QACR,cAAc,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACnF,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAa,EACb,KAAwI;IAExI,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;IAClH,EAAE,CAAC,GAAG,CAAC,qEAAqE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,8DAA8D,EAAE,KAAK,CAAC,MAAM,CAAoD,CAAC;IACrJ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,aAAa,CAAC,UAAU,EAAE,UAAU,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9G,EAAE,CAAC,GAAG,CACJ;iFAC6E,EAC7E,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAClE,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AACD,8DAA8D;AAC9D,MAAM,UAAU,wBAAwB,CAAC,EAAa,EAAE,KAAyC;IAC/F,EAAE,CAAC,GAAG,CAAC,gEAAgE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,eAAe,CAAC,EAAa,EAAE,MAAc,EAAE,MAAc,EAAE,KAAa;IACnF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAClB,oHAAoH,EACpH,MAAM,EAAE,MAAM,EAAE,KAAK,CACtB,CAAC;IACF,IAAI,CAAC,GAAG;QAAE,MAAM,aAAa,CAAC,UAAU,EAAE,IAAI,MAAM,gCAAgC,MAAM,EAAE,CAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAa,EACb,KAAqI;IAErI,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,aAAa,CAAC,WAAW,EAAE,WAAW,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;IACjG,CAAC;IACD,EAAE,CAAC,GAAG,CACJ;4CACwC,EACxC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CACvB,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1G,+FAA+F;IAC/F,iGAAiG;IACjG,4EAA4E;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,kBAAkB,IAAI,kBAAkB,KAAK,OAAO,EAAE,MAAM,EAAE,CAAC;QAC/F,MAAM,aAAa,CACjB,UAAU,EACV,kBAAkB,KAAK,CAAC,MAAM,QAAQ,kBAAkB,+EAA+E,CACxI,CAAC;IACJ,CAAC;IACD,IAAI,YAA2B,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc;YAAE,MAAM,aAAa,CAAC,UAAU,EAAE,IAAI,KAAK,CAAC,MAAM,gDAAgD,CAAC,CAAC;QACnI,IAAI,cAAc,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,aAAa,CAAC,UAAU,EAAE,kBAAkB,KAAK,CAAC,MAAM,gBAAgB,cAAc,SAAS,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACpC,wFAAwF;YACxF,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CACnB;sFAC8E,EAC9E,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CACkB,CAAC;YAC/C,YAAY,GAAG,IAAI,EAAE,oBAAoB,IAAI,IAAI,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8FAA8F;QAC9F,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAE,EAAE,CAAC,GAAG,CAAC,sFAAsF,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC;IAChK,EAAE,CAAC,GAAG,CACJ,sCAAsC,eAAe,qEAAqE,EAC1H,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAC3H,CAAC;IACF,OAAO,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,EAAa,EACb,KASC;IAED,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,MAAM,aAAa,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,MAAM,oBAAoB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,aAAa,CAAC,UAAU,EAAE,WAAW,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACrI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,aAAa,CAAC,mBAAmB,EAAE,iDAAiD,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,MAAM,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAClJ,CAAC;IACD,EAAE,CAAC,GAAG,CACJ,mGAAmG,EACnG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAC7D,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/E,EAAE,CAAC,GAAG,CACJ,0DAA0D,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,EAC/G,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CACzE,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,EAAE,CAAC,GAAG,CACJ,qIAAqI,EACrI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,EAAE,CAAC,GAAG,CACJ;uFACiF,EACjF,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAE,CAAC;AACjD,CAAC;AA+CD,MAAM,YAAY,GAAG,CAAC,EAAa,EAAE,MAAc,EAA0B,EAAE,CAC5E,EAAE,CAAC,GAAG,CACL,6MAA6M,EAC7M,MAAM,CACqB,CAAC,CAAC,CAAC,CAAC;AAEnC,MAAM,SAAS,GAAG,CAAC,CAAa,EAA4B,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,gBAAgB,EAAE,CAAC,CAAC,iBAAiB;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAgC;IAC/D,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,UAAU,EAAE,CAAC,CAAC,WAAW;IACzB,UAAU,EAAE,CAAC,CAAC,WAAW;IACzB,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,UAAU,EAAE,CAAC,CAAC,WAAW;CAC1B,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,MAAc;IAChE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAa,EACb,KAAgJ;IAEhJ,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,wDAAwD,CAAC,CAAC;IAC3H,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACzH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IACxC,kGAAkG;IAClG,MAAM,gBAAgB,GAAG,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC;IACvH,IACE,CAAC,GAAG;QACJ,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACrC,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC;QACvC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,EACrD,CAAC;QACD,EAAE,CAAC,GAAG,CACJ;;;;;;;;kGAQ4F,EAC5F,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,KAAK,CAAC,EAAE,CAC7G,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,oFAAoF,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClI,CAAC;IACD,OAAO,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,EAAa,EACb,KAYC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACjF,MAAM,aAAa,CAAC,UAAU,EAAE,mBAAmB,KAAK,CAAC,MAAM,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,aAAa,CAAC,mBAAmB,EAAE,mBAAmB,KAAK,CAAC,MAAM,uCAAuC,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,aAAa,CAAC,mBAAmB,EAAE,mBAAmB,KAAK,CAAC,MAAM,oCAAoC,CAAC,CAAC;IAChH,CAAC;IACD,EAAE,CAAC,GAAG,CACJ;;sBAEkB,EAClB,KAAK,CAAC,MAAM,EACZ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EACnC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,EAC7C,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAC5B,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAChC,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAE,CAAC,CAAC;AACpD,CAAC;AAYD;;;;;GAKG;AACH,SAAS,SAAS,CAAC,EAAa,EAAE,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,MAAgC;IAC7G,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CACnB,6GAA6G,EAC7G,MAAM,EAAE,GAAG,CAC2F,CAAC;IACzG,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM;QACpF,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD,8DAA8D;AAC9D,SAAS,SAAS,CAAC,IAA+B;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyD,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE;IACpC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;AACjI,CAAC,CAAC;AAEF,wGAAwG;AACxG,MAAM,MAAM,GAAG;;2EAE4D,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,EAAa,EACb,KAA0F;IAE1F,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,gGAAgG;IAChG,MAAM,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAE,EAAE,CAAC,GAAG,CAAC,sFAAsF,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC;IAChK,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,0DAA0D,MAAM;8FAC0B,EAC1F,OAAO,EAAE,KAAK,CAAC,MAAM,CACgC,CAAC;IACxD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,EAAa,EACb,KAAqD;IAErD,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,MAAM,aAAa,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,MAAM,oBAAoB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,GAAG,CAC7B;+BAC2B,MAAM,sCAAsC,EACvE,KAAK,CAAC,MAAM,EAAE,OAAO,CACS,CAAC,CAAC;IAClC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC5E,CAAC"}

package/dist/table-ownership.d.ts

@@ -1,4 +1,4 @@
-import type { ScopedSql } from './scope-host.js';
+import type { ScopedSql, SqlMigration } from './scope-host.js';
 /**
  * The spine table the ownership lives in — a scope table, so it travels with the scope's data.
  * The name is spelled out rather than interpolated: `lint:spine-ddl` reads this text as written.
@@ -60,7 +60,10 @@ export interface TableStep {
  * afterwards (`recordOwnershipSteps`), so the journal's `rows_changed` counts the migration's
  * own writes and none of the kernel's bookkeeping.
  */
-export declare function runMigrationStatements(sql: ScopedSql, migrationSql: string, exec: (statement: string) => void): TableStep[];
+export declare function runMigrationStatements(sql: ScopedSql, migration: SqlMigration, exec: (statement: string) => void, step: {
+    readonly key: string;
+    readonly authored: boolean;
+}): TableStep[];
 /** Apply each recorded step to the ledger, in statement order, through `applyTableChange`. */
 export declare function recordOwnershipSteps(sql: ScopedSql, moduleId: string, steps: readonly TableStep[], at: string): void;
 /**