@substrat-run/kernel 0.159.0 → 0.161.0

package/dist/connection-landings.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection-landings.js","sourceRoot":"","sources":["../src/connection-landings.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmFjC;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAKH,IAAI;IACJ,KAAK;IACL,KAAK;IACL,WAAW;IAPb,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,IAAI,GAAG,IAAI,GAAG,EAA+C,CAAC;IAE/E,YACmB,IAAe,EACf,KAAsB,EACtB,KAAoC,EACpC,WAAmB;oBAHnB,IAAI;qBACJ,KAAK;qBACL,KAAK;2BACL,WAAW;IAC3B,CAAC;IAEJ,mGAAmG;IACnG,KAAK,CAAC,KAAK,CAAC,UAAsB;QAChC,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,QAAmE,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAChD,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,+CAA+C,CAAC,CAAC,SAAS,IAAI,QAAQ,oBAAoB,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC/I,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACjG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE;wBAClD,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE;wBAChD,SAAS,EAAE,IAAI,CAAC,KAAK;qBACtB,CAAC,CAAC;oBACH,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;gBACD,QAAQ,KAAK,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBAC5D,IAAI,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,SAAS;gBACtI,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC3F,MAAM,WAAW,GAAG,IAAI,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG;oBACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,OAAO;oBACP,WAAW;oBACX,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,GAAG,cAAc;iBAClB,CAAC;gBACF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE;oBACvC,GAAG,cAAc;oBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,OAAO;oBACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC,CAAC;gBACH,2FAA2F;gBAC3F,sDAAsD;gBACtD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yGAAyG;IACjG,SAAS,CAAC,QAAkB,EAAE,QAAgB;QACpD,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,QAAQ,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;gBAClB,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAChF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,CAC7E,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,IAAI,CAAC,KAAK,EACV,MAAM,EACN,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EACrD,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAC5C,IAAI,CAAC,WAAW,CACjB,CAAC;gBACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0EAA0E;IAClE,QAAQ,CAAC,QAAkB,EAAE,OAAgB;QACnD,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,OAAO,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAClB,OAAkD,EAClD,SAAiB,EACjB,UAAkB,EAClB,OAAgC;IAEhC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACvF,MAAM,IAAI,GAAG,OAA4C,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;AAClH,CAAC"}
+{"version":3,"file":"connection-landings.js","sourceRoot":"","sources":["../src/connection-landings.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmFjC;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAKH,IAAI;IACJ,KAAK;IACL,KAAK;IACL,WAAW;IAMX,UAAU;IAbZ,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,IAAI,GAAG,IAAI,GAAG,EAA+C,CAAC;IAE/E,YACmB,IAAe,EACf,KAAsB,EACtB,KAAoC,EACpC,WAAmB;IACpC;;;;OAIG;IACc,UAAqD;oBATrD,IAAI;qBACJ,KAAK;qBACL,KAAK;2BACL,WAAW;0BAMX,UAAU;IAC1B,CAAC;IAEJ,mGAAmG;IACnG,KAAK,CAAC,KAAK,CAAC,UAAsB;QAChC,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,QAAmE,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAChD,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,+CAA+C,CAAC,CAAC,SAAS,IAAI,QAAQ,oBAAoB,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC/I,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACjG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE;wBAClD,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE;wBAChD,SAAS,EAAE,IAAI,CAAC,KAAK;qBACtB,CAAC,CAAC;oBACH,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;gBACD,QAAQ,KAAK,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBAC5D,IAAI,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,SAAS;gBACtI,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC3F,MAAM,WAAW,GAAG,IAAI,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG;oBACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,OAAO;oBACP,WAAW;oBACX,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,GAAG,cAAc;iBAClB,CAAC;gBACF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE;oBACvC,GAAG,cAAc;oBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,OAAO;oBACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC,CAAC;gBACH,2FAA2F;gBAC3F,sDAAsD;gBACtD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yGAAyG;IACjG,SAAS,CAAC,QAAkB,EAAE,QAAgB;QACpD,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,QAAQ,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;gBAClB,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,CAC7E,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,cAAc,CAClC,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,IAAI,CAAC,KAAK,EACV,MAAM,EACN,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EACrD,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAC5C,IAAI,CAAC,WAAW,CACjB,CAAC;gBACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0EAA0E;IAClE,QAAQ,CAAC,QAAkB,EAAE,OAAgB;QACnD,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,OAAO,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAClB,OAAkD,EAClD,SAAiB,EACjB,UAAkB,EAClB,OAAgC;IAEhC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACvF,MAAM,IAAI,GAAG,OAA4C,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;AAClH,CAAC"}

package/dist/deadline-fetch.d.ts

@@ -0,0 +1,34 @@
+import type { ExtractionTimers } from './attachment-extractor.js';
+import type { FetchLike } from './scope-host.js';
+/**
+ * How long a streamed response body may go without a byte before it errors. 30 s, the default
+ * `timeoutMs` of a connector call: a provider that has been silent for as long as a whole call
+ * may take has stalled, and a slower link than that is still delivering within it. The window
+ * runs only while the stream waits on the provider: a consumer that is slow to take the next
+ * chunk (a store writing the last one) does not spend it.
+ */
+export declare const STREAM_IDLE_TIMEOUT_MS = 30000;
+/**
+ * The most a streamed body may take from its first read to its end, however steadily it flows:
+ * 10 minutes. Finite because a hosted run lives under the platform's wall limits and a trickle
+ * that never stops would otherwise hold a connection (and a run) for ever; generous because the
+ * idle window, not this, is what cuts a stalled transfer. At the 10 minutes a steady 1 MB/s
+ * link still moves about 600 MB.
+ */
+export declare const STREAM_MAX_DURATION_MS: number;
+export interface DeadlineOptions {
+    /** The idle window of a streamed body. Default {@link STREAM_IDLE_TIMEOUT_MS}. */
+    idleMs?: number;
+    /** The absolute cap on a streamed body's duration. Default {@link STREAM_MAX_DURATION_MS}. */
+    maxStreamMs?: number;
+    /** The timers every bound runs on: the runtime's by default, a test's on a clock it moves itself. */
+    timers?: ExtractionTimers;
+}
+/**
+ * `fetchImpl`, with `timeoutMs` on the call and an idle window plus an absolute cap on a streamed
+ * body (see the module header). The signal it hands the runtime is its own; a `signal` in `init`
+ * aborts it, so wrapping a `fetch` that is itself wrapped (a connector's timeout around a host's)
+ * lets the outer bound reach the runtime.
+ */
+export declare function deadlineFetch(fetchImpl: FetchLike, timeoutMs: number, options?: DeadlineOptions): FetchLike;
+//# sourceMappingURL=deadline-fetch.d.ts.map

package/dist/deadline-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadline-fetch.d.ts","sourceRoot":"","sources":["../src/deadline-fetch.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAqB,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,QAAc,CAAC;AA4BlD,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAgBD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,SAAS,CAmF/G"}

package/dist/deadline-fetch.js

@@ -0,0 +1,231 @@
+/**
+ * How long a streamed response body may go without a byte before it errors. 30 s, the default
+ * `timeoutMs` of a connector call: a provider that has been silent for as long as a whole call
+ * may take has stalled, and a slower link than that is still delivering within it. The window
+ * runs only while the stream waits on the provider: a consumer that is slow to take the next
+ * chunk (a store writing the last one) does not spend it.
+ */
+export const STREAM_IDLE_TIMEOUT_MS = 30_000;
+/**
+ * The most a streamed body may take from its first read to its end, however steadily it flows:
+ * 10 minutes. Finite because a hosted run lives under the platform's wall limits and a trickle
+ * that never stops would otherwise hold a connection (and a run) for ever; generous because the
+ * idle window, not this, is what cuts a stalled transfer. At the 10 minutes a steady 1 MB/s
+ * link still moves about 600 MB.
+ */
+export const STREAM_MAX_DURATION_MS = 10 * 60_000;
+/**
+ * How many empty chunks in a row a stream may deliver before it is treated as making no progress.
+ * Generous: a real source sends a few at most. It is a count, not a time, because a source that
+ * answers only with empty chunks answers in microtasks and no timer would ever get to run.
+ */
+const MAX_CONSECUTIVE_EMPTY_READS = 1_000;
+/** The runtime's timers, called bare — workerd throws `Illegal invocation` on `obj.setTimeout(…)`. */
+const RUNTIME_TIMERS = {
+    setTimeout: (fn, ms) => setTimeout(fn, ms),
+    clearTimeout: (handle) => clearTimeout(handle),
+};
+/** The error every bound ends in. Neutral: it names neither the provider nor the URL. */
+const timeoutError = (message) => new DOMException(message, 'TimeoutError');
+/** The three reads that buffer the whole body; the call's total deadline covers them. */
+const BUFFERED_READS = new Set(['text', 'json', 'arrayBuffer']);
+/**
+ * `fetchImpl`, with `timeoutMs` on the call and an idle window plus an absolute cap on a streamed
+ * body (see the module header). The signal it hands the runtime is its own; a `signal` in `init`
+ * aborts it, so wrapping a `fetch` that is itself wrapped (a connector's timeout around a host's)
+ * lets the outer bound reach the runtime.
+ */
+export function deadlineFetch(fetchImpl, timeoutMs, options = {}) {
+    const idleMs = options.idleMs ?? STREAM_IDLE_TIMEOUT_MS;
+    const maxStreamMs = options.maxStreamMs ?? STREAM_MAX_DURATION_MS;
+    const timers = options.timers ?? RUNTIME_TIMERS;
+    return async (input, init) => {
+        const controller = new AbortController();
+        let timedOut;
+        const upstream = init?.signal;
+        // The caller's own abort ends the call: its deadline is released, so it cannot fire later and
+        // pass a cancel off as a timeout.
+        const onUpstreamAbort = () => {
+            releaseTotal();
+            controller.abort(upstream?.reason);
+        };
+        if (upstream?.aborted)
+            controller.abort(upstream.reason);
+        else
+            upstream?.addEventListener?.('abort', onUpstreamAbort, { once: true });
+        const total = timers.setTimeout(() => {
+            timedOut ??= timeoutError('The operation was aborted due to timeout');
+            controller.abort(timedOut);
+            finish();
+        }, timeoutMs);
+        // Not held against the process: `AbortSignal.timeout`'s timer was not either.
+        unref(total);
+        const releaseTotal = () => timers.clearTimeout(total);
+        /** The call is over: its deadline and its hold on the caller's signal go. Idempotent. */
+        function finish() {
+            releaseTotal();
+            upstream?.removeEventListener?.('abort', onUpstreamAbort);
+        }
+        /**
+         * What a failed read reports. A runtime may fail a read the call's deadline aborted with a
+         * generic abort rather than the reason; that one is the deadline's `TimeoutError`. Any other
+         * failure (a caller's cancel, a network error) keeps its own class.
+         */
+        const reported = (err) => timedOut && err?.name === 'AbortError' ? timedOut : err;
+        let res;
+        try {
+            res = await fetchImpl(input, { ...init, signal: controller.signal });
+        }
+        catch (err) {
+            finish();
+            throw reported(err);
+        }
+        // A response that has no body at all (`null`, as on a web `Response`) has nothing to bound.
+        // A stand-in with no `body` field (`undefined`) may still be read buffered, so it keeps the deadline.
+        if (res.body === null)
+            finish();
+        let guarded;
+        return new Proxy(res, {
+            get(target, prop) {
+                const value = Reflect.get(target, prop, target);
+                if (prop === 'body') {
+                    if (!value)
+                        return value;
+                    // Looking at the body takes nothing: the native stream stays unlocked and the call's
+                    // deadline stays armed until the first read of the stream handed out here.
+                    guarded ??= guardedBody(value, {
+                        idleMs,
+                        maxStreamMs,
+                        timers,
+                        releaseTotal,
+                        finish,
+                        abortCall: (reason) => controller.abort(reason),
+                        reported,
+                    });
+                    return guarded;
+                }
+                if (typeof value !== 'function')
+                    return value;
+                // Called on the response itself, never the proxy: a native method refuses any other receiver.
+                if (BUFFERED_READS.has(prop)) {
+                    return async (...args) => {
+                        try {
+                            return await value.apply(target, args);
+                        }
+                        catch (err) {
+                            // A runtime may fail a read the call's deadline aborted with a generic abort.
+                            throw reported(err);
+                        }
+                        finally {
+                            finish();
+                        }
+                    };
+                }
+                return value.bind(target);
+            },
+        });
+    };
+}
+/** A timer that does not hold a Node process open, where the runtime lets it say so. */
+function unref(handle) {
+    handle?.unref?.();
+}
+/**
+ * `body`, passed through chunk by chunk. The native reader is taken on the FIRST pull, not here,
+ * so a stream that is only looked at, or taken and never read, leaves the native body unlocked
+ * and the call's deadline in force. From the first read: the stream errors when the provider is
+ * silent for `idleMs` (empty chunks are not bytes and do not reset the window) or when `maxStreamMs`
+ * has passed in all. Pull-driven with no queue of its own, so the idle window runs only while a
+ * read waits on the provider. Whichever bound ends it cancels the source reader, aborts the call
+ * (which releases the connection) and errors the stream: nothing is left reading, nothing buffered.
+ *
+ * The bounds are TIMERS that end the stream, never promises raced against each read: a promise
+ * that outlives a read keeps a reaction for every race it was in, and through it the chunk the
+ * race resolved with. Nothing long-lived here holds a chunk once it has been delivered.
+ */
+function guardedBody(body, o) {
+    let reader;
+    let ctl;
+    let capHandle;
+    let over = false;
+    /** End the stream with `err`, once: error it, let go of the call, cancel the source. */
+    const stop = async (err) => {
+        if (over)
+            return;
+        over = true;
+        o.timers.clearTimeout(capHandle);
+        try {
+            ctl?.error(err);
+        }
+        catch {
+            // already closed or errored
+        }
+        o.abortCall(err);
+        o.finish();
+        await reader?.cancel(err).catch(() => { });
+        try {
+            reader?.releaseLock();
+        }
+        catch {
+            // a read the cancel has not yet settled: the lock goes with the stream
+        }
+    };
+    /** The first read: the call's deadline hands over to the idle window and the absolute cap. */
+    const begin = () => {
+        o.releaseTotal();
+        capHandle = o.timers.setTimeout(() => void stop(timeoutError('The transfer exceeded its maximum duration')), o.maxStreamMs);
+        unref(capHandle);
+        return body.getReader();
+    };
+    return new ReadableStream({
+        start(controller) {
+            ctl = controller;
+        },
+        async pull(controller) {
+            if (over)
+                return;
+            let idle;
+            let empties = 0;
+            try {
+                reader ??= begin();
+                idle = o.timers.setTimeout(() => void stop(timeoutError(`The response body stalled: no bytes for ${o.idleMs} ms`)), o.idleMs);
+                unref(idle);
+                for (;;) {
+                    const { done, value } = await reader.read();
+                    // A bound (or the consumer) ended the stream while this read waited: it has answered.
+                    if (over)
+                        return;
+                    if (done) {
+                        over = true;
+                        o.timers.clearTimeout(capHandle);
+                        o.finish();
+                        controller.close();
+                        return;
+                    }
+                    if (!value)
+                        throw new Error('the byte stream yielded a read with neither a chunk nor its end');
+                    // An empty chunk carries nothing: it is read past under the same window, not counted as progress.
+                    // A source that answers only with empty chunks, all in microtasks, would never let a timer
+                    // run, so the run of them is itself bounded.
+                    if (value.byteLength === 0) {
+                        if (++empties > MAX_CONSECUTIVE_EMPTY_READS) {
+                            throw timeoutError('The response body made no progress');
+                        }
+                        continue;
+                    }
+                    controller.enqueue(value);
+                    return;
+                }
+            }
+            catch (err) {
+                // A runtime may end a read the call's deadline aborted with a generic abort.
+                await stop(o.reported(err));
+            }
+            finally {
+                o.timers.clearTimeout(idle);
+            }
+        },
+        cancel: (reason) => stop(reason),
+    }, { highWaterMark: 0 });
+}
+//# sourceMappingURL=deadline-fetch.js.map

package/dist/deadline-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadline-fetch.js","sourceRoot":"","sources":["../src/deadline-fetch.ts"],"names":[],"mappings":"AA0BA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAElD;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAe1C,sGAAsG;AACtG,MAAM,cAAc,GAAqB;IACvC,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;CAC/C,CAAC;AAmBF,yFAAyF;AACzF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAS,EAAE,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAE3F,yFAAyF;AACzF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAc,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAAoB,EAAE,SAAiB,EAAE,OAAO,GAAoB,EAAE;IAClG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,sBAAsB,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,sBAAsB,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;IAChD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,QAA2B,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,EAAE,MAAqC,CAAC;QAC7D,8FAA8F;QAC9F,kCAAkC;QAClC,MAAM,eAAe,GAAG,GAAS,EAAE;YACjC,YAAY,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,IAAI,QAAQ,EAAE,OAAO;YAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;;YACpD,QAAQ,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;YACnC,QAAQ,KAAK,YAAY,CAAC,0CAA0C,CAAC,CAAC;YACtE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3B,MAAM,EAAE,CAAC;QACX,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,8EAA8E;QAC9E,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,YAAY,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5D,yFAAyF;QACzF,SAAS,MAAM;YACb,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5D,CAAC;QACD;;;;WAIG;QACH,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAW,EAAE,CACzC,QAAQ,IAAK,GAAiC,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;QACzF,IAAI,GAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC;YACT,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,4FAA4F;QAC5F,sGAAsG;QACtG,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC;QAChC,IAAI,OAA+B,CAAC;QACpC,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE;YACpB,GAAG,CAAC,MAAM,EAAE,IAAI;gBACd,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAY,CAAC;gBAC3D,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,IAAI,CAAC,KAAK;wBAAE,OAAO,KAAK,CAAC;oBACzB,qFAAqF;oBACrF,2EAA2E;oBAC3E,OAAO,KAAK,WAAW,CAAC,KAAmB,EAAE;wBAC3C,MAAM;wBACN,WAAW;wBACX,MAAM;wBACN,YAAY;wBACZ,MAAM;wBACN,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;wBAC/C,QAAQ;qBACT,CAAC,CAAC;oBACH,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,IAAI,OAAO,KAAK,KAAK,UAAU;oBAAE,OAAO,KAAK,CAAC;gBAC9C,8FAA8F;gBAC9F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,OAAO,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;wBAClC,IAAI,CAAC;4BACH,OAAO,MAAO,KAAsC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;wBAC3E,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,8EAA8E;4BAC9E,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;wBACtB,CAAC;gCAAS,CAAC;4BACT,MAAM,EAAE,CAAC;wBACX,CAAC;oBACH,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAQ,KAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAeD,wFAAwF;AACxF,SAAS,KAAK,CAAC,MAAe;IAC3B,MAAwC,EAAE,KAAK,EAAE,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,WAAW,CAAC,IAAgB,EAAE,CAAe;IACpD,IAAI,MAAoC,CAAC;IACzC,IAAI,GAAiD,CAAC;IACtD,IAAI,SAAkB,CAAC;IACvB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,wFAAwF;IACxF,MAAM,IAAI,GAAG,KAAK,EAAE,GAAY,EAAiB,EAAE;QACjD,IAAI,IAAI;YAAE,OAAO;QACjB,IAAI,GAAG,IAAI,CAAC;QACZ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC,CAAC;IACF,8FAA8F;IAC9F,MAAM,KAAK,GAAG,GAAqB,EAAE;QACnC,CAAC,CAAC,YAAY,EAAE,CAAC;QACjB,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,CAC7B,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,4CAA4C,CAAC,CAAC,EAC3E,CAAC,CAAC,WAAW,CACd,CAAC;QACF,KAAK,CAAC,SAAS,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC,CAAC;IACF,OAAO,IAAI,cAAc,CACvB;QACE,KAAK,CAAC,UAAU;YACd,GAAG,GAAG,UAAU,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,IAAa,CAAC;YAClB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,CACxB,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,2CAA2C,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EACvF,CAAC,CAAC,MAAM,CACT,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,CAAC;gBACZ,SAAS,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,sFAAsF;oBACtF,IAAI,IAAI;wBAAE,OAAO;oBACjB,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,GAAG,IAAI,CAAC;wBACZ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;wBACjC,CAAC,CAAC,MAAM,EAAE,CAAC;wBACX,UAAU,CAAC,KAAK,EAAE,CAAC;wBACnB,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;oBAC/F,kGAAkG;oBAClG,2FAA2F;oBAC3F,6CAA6C;oBAC7C,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;wBAC3B,IAAI,EAAE,OAAO,GAAG,2BAA2B,EAAE,CAAC;4BAC5C,MAAM,YAAY,CAAC,oCAAoC,CAAC,CAAC;wBAC3D,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC1B,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,6EAA6E;gBAC7E,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC;oBAAS,CAAC;gBACT,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;KACjC,EACD,EAAE,aAAa,EAAE,CAAC,EAAE,CACrB,CAAC;AACJ,CAAC"}

package/dist/deployment-wire-auth.d.ts

@@ -0,0 +1,125 @@
+/**
+ * The capability record (RFC wire-signing §7, Q8), as statements both adapters run against their
+ * directory: one row per deployment, the script an upload went to (a version's archive script or a
+ * vertical's serving script), holding what that upload gave it. Every upload of the script replaces
+ * its row, so the row is the last upload's: the one the running script was built from. Written once
+ * so the two adapters cannot keep different records of the same fleet.
+ *
+ * The uploader writes it from what it built and injected; a vertical never declares it, since a
+ * claim a version makes about itself proves nothing. The readiness report (follow-on 4) reads it.
+ * A vertical's rows go with the vertical (`forgetVerticalWireAuth`), so none outlives what it
+ * describes.
+ */
+import { type DeploymentWireAuth, type TenantId } from '@substrat-run/contracts';
+import type { SwitchSql } from './system-switch.js';
+export type { DeploymentWireAuthInput } from '@substrat-run/contracts';
+/** Interpolated into both adapters' directory DDL, so the two spell one table. */
+export declare const DEPLOYMENT_WIRE_AUTH_DDL = "\n  CREATE TABLE IF NOT EXISTS vertical_wire_auth (\n    deployment_ref TEXT PRIMARY KEY,\n    vertical_slug  TEXT NOT NULL,\n    version_id     TEXT,\n    record         TEXT NOT NULL,\n    recorded_at    TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS vertical_wire_auth_slug ON vertical_wire_auth (vertical_slug);\n";
+/**
+ * Whose records a read may return: the verticals one tenant owns now (`verticals.owner_tenant`), or
+ * the whole fleet, said in so many words. There is no default, so a reader that forgets to confine
+ * itself is refused rather than handed every tenant's deployments: a record names scripts, versions
+ * and key ids, and a tenant reads only its own. A record of a platform-owned vertical (no owning
+ * tenant) is reached only by the fleet.
+ *
+ * A tenant reach follows the vertical's current owner: it is resolved at read time, so whoever owns
+ * the slug then reads every record the table holds for it, and a tenant that no longer owns it reads
+ * none. Apart from a whole-directory restore (`restoreDirectory`), which replaces the owners and the
+ * records together from one dump, no host path moves the owner of a registered vertical today: an
+ * owner changes by deleting the vertical, which removes its records, and registering the slug again.
+ * A record is written only beside its vertical's registration (`writeDeploymentWireAuth`), so a new
+ * registrant of a slug reads only what was recorded since it registered. Key ids are not secrets.
+ */
+export type DeploymentWireAuthReach = {
+    readonly tenantId: TenantId;
+} | {
+    readonly fleet: true;
+};
+/**
+ * Which records a read returns, one page of them: the keyset convention by script name, `cursor` the
+ * last name of the page before. A version's script keeps its record for as long as its vertical
+ * exists, so a read is always a page: `limit` is required, at most `LIST_PAGE_MAX`.
+ */
+export interface DeploymentWireAuthFilter {
+    readonly reach: DeploymentWireAuthReach;
+    readonly verticalSlug?: string;
+    readonly limit: number;
+    readonly cursor?: string;
+    readonly order?: 'asc' | 'desc';
+}
+/** The longest `verticalSlug` or `cursor` a read takes. A script name is far shorter. */
+export declare const WIRE_AUTH_FILTER_TEXT_MAX = 256;
+/**
+ * The filter a read is allowed to run, or a `validation_failed` refusal: only the filter's own keys;
+ * a reach that is exactly one tenant (a tenant id) or exactly the fleet; a limit from 1 to
+ * `LIST_PAGE_MAX`; a vertical and a cursor of 1 to `WIRE_AUTH_FILTER_TEXT_MAX` characters; an order
+ * of `asc` or `desc`. Both adapters judge it before the read, and the Cloudflare host before the call
+ * into the directory's object, so the refusal keeps its code across the RPC.
+ *
+ * Answers a NEW object built from the judged fields alone, never the caller's, so nothing else crosses
+ * the RPC or reaches the access log. `reach` is its first key: the log keeps a read's params cut to a
+ * bounded length, and nothing after the reach can push it out of what is kept.
+ */
+export declare function assertWireAuthFilter(filter: unknown): DeploymentWireAuthFilter;
+/** The access-log target of a read: the tenant a tenant reach names, none for the fleet. */
+export declare function wireAuthAccessTarget(filter: DeploymentWireAuthFilter): {
+    tenantId: TenantId | null;
+};
+/**
+ * Record an upload's capability for its script, replacing the script's earlier record, and answer
+ * whether it did. Takes the row the adapter parsed (`deploymentWireAuth`) before it reached here: on
+ * Cloudflare that parse runs before the call into the directory's object, so a refusal keeps its code
+ * across the RPC.
+ *
+ * Writes nothing, and answers `false`, for a vertical the registry does not hold: a record exists only
+ * beside its vertical's registration, so no later registrant of a slug can read a record of an upload
+ * made before it held it. Every upload records after its vertical is registered (a push registers,
+ * then publishes, then records; a serve runs for a registered vertical), so this refuses only a write
+ * that raced the vertical's delete. Judged in the caller's transaction, beside the write it guards; the
+ * adapter turns `false` into `not_found`.
+ */
+export declare function writeDeploymentWireAuth(db: SwitchSql, row: DeploymentWireAuth): boolean;
+/**
+ * One page of the stored records the filter reaches, by script name. The filter is judged here too
+ * (`assertWireAuthFilter`), so no caller reaches the table unconfined or unbounded. A row that does
+ * not parse throws: it is a corrupt directory, not a fact.
+ */
+export declare function deploymentWireAuthOf(db: SwitchSql, input: DeploymentWireAuthFilter): DeploymentWireAuth[];
+/**
+ * One pass of the fleet walk (RFC wire-signing follow-on 4), as its `walkWireAuth` admin row: whether
+ * it applied or only reported, the cursor it started from and the one it ended at, how many scripts it
+ * walked, and by name the scripts it updated, held, released and failed on. Script names and reasons
+ * only, never a key or a binding's value.
+ */
+export interface WireWalkAudit {
+    readonly apply: boolean;
+    /** A confirming pass, which read every recorded script rather than trusting its record. */
+    readonly confirm: boolean;
+    readonly from: string | null;
+    /** Where the next pass starts; `null` at the end of the fleet, or when the pass ended in an error. */
+    readonly next: string | null;
+    /** Scripts walked, counted to where the pass ended, an error included. */
+    readonly walked: number;
+    readonly updated: readonly string[];
+    readonly held: readonly string[];
+    readonly released: readonly string[];
+    readonly skipped: readonly {
+        readonly deploymentRef: string;
+        readonly reason: string;
+    }[];
+    readonly failed: readonly {
+        readonly deploymentRef: string;
+        readonly reason: string;
+    }[];
+    /** Set when the pass ended in an error: the fixed text a person reads, never an upstream message. */
+    readonly error?: string;
+    /**
+     * Set when the pass was refused before it walked anything, because the settings it would give are
+     * refused (the rollout setting does not parse, or the lists do not load): the setting and the
+     * problem, never a key.
+     */
+    readonly refused?: string;
+}
+/** Forget a vertical's records, with the vertical. */
+export declare function forgetVerticalWireAuth(db: SwitchSql, verticalSlug: string): void;
+//# sourceMappingURL=deployment-wire-auth.d.ts.map

package/dist/deployment-wire-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-wire-auth.d.ts","sourceRoot":"","sources":["../src/deployment-wire-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA8D,KAAK,kBAAkB,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC7I,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEvE,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,qUASpC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,CAAC;AAEjG;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACjC;AAID,yFAAyF;AACzF,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAS7C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,wBAAwB,CA0C9E;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,wBAAwB,GAAG;IAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,CAEpG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAiBvF;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,GAAG,kBAAkB,EAAE,CAiCzG;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzF,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACxF,qGAAqG;IACrG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,sDAAsD;AACtD,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAEhF"}

package/dist/deployment-wire-auth.js

@@ -0,0 +1,161 @@
+/**
+ * The capability record (RFC wire-signing §7, Q8), as statements both adapters run against their
+ * directory: one row per deployment, the script an upload went to (a version's archive script or a
+ * vertical's serving script), holding what that upload gave it. Every upload of the script replaces
+ * its row, so the row is the last upload's: the one the running script was built from. Written once
+ * so the two adapters cannot keep different records of the same fleet.
+ *
+ * The uploader writes it from what it built and injected; a vertical never declares it, since a
+ * claim a version makes about itself proves nothing. The readiness report (follow-on 4) reads it.
+ * A vertical's rows go with the vertical (`forgetVerticalWireAuth`), so none outlives what it
+ * describes.
+ */
+import { deploymentWireAuth, LIST_PAGE_MAX, substratError, tenantId } from '@substrat-run/contracts';
+/** Interpolated into both adapters' directory DDL, so the two spell one table. */
+export const DEPLOYMENT_WIRE_AUTH_DDL = `
+  CREATE TABLE IF NOT EXISTS vertical_wire_auth (
+    deployment_ref TEXT PRIMARY KEY,
+    vertical_slug  TEXT NOT NULL,
+    version_id     TEXT,
+    record         TEXT NOT NULL,
+    recorded_at    TEXT NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS vertical_wire_auth_slug ON vertical_wire_auth (vertical_slug);
+`;
+const refused = (message) => substratError('validation_failed', message);
+/** The longest `verticalSlug` or `cursor` a read takes. A script name is far shorter. */
+export const WIRE_AUTH_FILTER_TEXT_MAX = 256;
+const FILTER_KEYS = new Set(['reach', 'verticalSlug', 'limit', 'cursor', 'order']);
+/** The longest caller-supplied key name a refusal echoes, so its text stays bounded. */
+const ECHOED_KEY_MAX = 64;
+const echoedKey = (key) => (key.length > ECHOED_KEY_MAX ? `${key.slice(0, ECHOED_KEY_MAX)}…` : key);
+const REACH_REFUSAL = 'a capability-record read names its reach: one tenant ({ tenantId }) or the fleet ({ fleet: true }), exactly one';
+/**
+ * The filter a read is allowed to run, or a `validation_failed` refusal: only the filter's own keys;
+ * a reach that is exactly one tenant (a tenant id) or exactly the fleet; a limit from 1 to
+ * `LIST_PAGE_MAX`; a vertical and a cursor of 1 to `WIRE_AUTH_FILTER_TEXT_MAX` characters; an order
+ * of `asc` or `desc`. Both adapters judge it before the read, and the Cloudflare host before the call
+ * into the directory's object, so the refusal keeps its code across the RPC.
+ *
+ * Answers a NEW object built from the judged fields alone, never the caller's, so nothing else crosses
+ * the RPC or reaches the access log. `reach` is its first key: the log keeps a read's params cut to a
+ * bounded length, and nothing after the reach can push it out of what is kept.
+ */
+export function assertWireAuthFilter(filter) {
+    if (typeof filter !== 'object' || filter === null || Array.isArray(filter)) {
+        throw refused('a capability-record read needs a filter naming its reach and its limit');
+    }
+    // Own properties only: a field inherited from a prototype, a polluted one included, is not the caller's.
+    const own = (o, key) => (Object.hasOwn(o, key) ? o[key] : undefined);
+    const extra = Object.keys(filter).filter((key) => !FILTER_KEYS.has(key));
+    if (extra.length > 0) {
+        throw refused(`a capability-record read takes reach, verticalSlug, limit, cursor and order; not ${extra.slice(0, 3).map(echoedKey).join(', ')}`);
+    }
+    const r = own(filter, 'reach');
+    if (typeof r !== 'object' || r === null || Array.isArray(r))
+        throw refused(REACH_REFUSAL);
+    const keys = Object.keys(r);
+    if (keys.length !== 1)
+        throw refused(REACH_REFUSAL);
+    const value = own(r, keys[0]);
+    let reach;
+    if (keys[0] === 'fleet' && value === true)
+        reach = { fleet: true };
+    else if (keys[0] === 'tenantId' && tenantId.safeParse(value).success)
+        reach = { tenantId: tenantId.parse(value) };
+    else
+        throw refused(REACH_REFUSAL);
+    const limit = own(filter, 'limit');
+    if (typeof limit !== 'number' || !Number.isInteger(limit) || limit < 1 || limit > LIST_PAGE_MAX) {
+        throw refused(`limit must be an integer from 1 to ${LIST_PAGE_MAX}, got ${typeof limit === 'number' ? String(limit) : typeof limit}`);
+    }
+    const text = (name) => {
+        const v = own(filter, name);
+        if (v === undefined)
+            return undefined;
+        if (typeof v !== 'string' || v.length === 0 || v.length > WIRE_AUTH_FILTER_TEXT_MAX) {
+            throw refused(`${name} must be a string of 1 to ${WIRE_AUTH_FILTER_TEXT_MAX} characters`);
+        }
+        return v;
+    };
+    const verticalSlug = text('verticalSlug');
+    const cursor = text('cursor');
+    const order = own(filter, 'order');
+    if (order !== undefined && order !== 'asc' && order !== 'desc')
+        throw refused('order must be asc or desc');
+    return {
+        reach,
+        ...(verticalSlug !== undefined ? { verticalSlug } : {}),
+        limit,
+        ...(cursor !== undefined ? { cursor } : {}),
+        ...(order !== undefined ? { order } : {}),
+    };
+}
+/** The access-log target of a read: the tenant a tenant reach names, none for the fleet. */
+export function wireAuthAccessTarget(filter) {
+    return { tenantId: 'tenantId' in filter.reach ? filter.reach.tenantId : null };
+}
+/**
+ * Record an upload's capability for its script, replacing the script's earlier record, and answer
+ * whether it did. Takes the row the adapter parsed (`deploymentWireAuth`) before it reached here: on
+ * Cloudflare that parse runs before the call into the directory's object, so a refusal keeps its code
+ * across the RPC.
+ *
+ * Writes nothing, and answers `false`, for a vertical the registry does not hold: a record exists only
+ * beside its vertical's registration, so no later registrant of a slug can read a record of an upload
+ * made before it held it. Every upload records after its vertical is registered (a push registers,
+ * then publishes, then records; a serve runs for a registered vertical), so this refuses only a write
+ * that raced the vertical's delete. Judged in the caller's transaction, beside the write it guards; the
+ * adapter turns `false` into `not_found`.
+ */
+export function writeDeploymentWireAuth(db, row) {
+    if (db.all('SELECT 1 FROM verticals WHERE slug = ?', row.verticalSlug).length === 0)
+        return false;
+    db.run(`INSERT INTO vertical_wire_auth (deployment_ref, vertical_slug, version_id, record, recorded_at)
+       VALUES (?, ?, ?, ?, ?)
+     ON CONFLICT (deployment_ref) DO UPDATE SET
+       vertical_slug = excluded.vertical_slug,
+       version_id = excluded.version_id,
+       record = excluded.record,
+       recorded_at = excluded.recorded_at`, row.deploymentRef, row.verticalSlug, row.versionId, JSON.stringify(row.record), row.recordedAt);
+    return true;
+}
+/**
+ * One page of the stored records the filter reaches, by script name. The filter is judged here too
+ * (`assertWireAuthFilter`), so no caller reaches the table unconfined or unbounded. A row that does
+ * not parse throws: it is a corrupt directory, not a fact.
+ */
+export function deploymentWireAuthOf(db, input) {
+    const filter = assertWireAuthFilter(input);
+    const desc = filter.order === 'desc';
+    const where = [];
+    const params = [];
+    if ('tenantId' in filter.reach) {
+        where.push('vertical_slug IN (SELECT slug FROM verticals WHERE owner_tenant = ?)');
+        params.push(filter.reach.tenantId);
+    }
+    if (filter.verticalSlug !== undefined) {
+        where.push('vertical_slug = ?');
+        params.push(filter.verticalSlug);
+    }
+    if (filter.cursor) {
+        where.push(desc ? 'deployment_ref < ?' : 'deployment_ref > ?');
+        params.push(filter.cursor);
+    }
+    params.push(filter.limit);
+    const rows = db.all('SELECT deployment_ref, vertical_slug, version_id, record, recorded_at FROM vertical_wire_auth' +
+        (where.length ? ` WHERE ${where.join(' AND ')}` : '') +
+        ` ORDER BY deployment_ref ${desc ? 'DESC' : 'ASC'} LIMIT ?`, ...params);
+    return rows.map((r) => deploymentWireAuth.parse({
+        deploymentRef: r['deployment_ref'],
+        verticalSlug: r['vertical_slug'],
+        versionId: r['version_id'],
+        record: JSON.parse(String(r['record'])),
+        recordedAt: r['recorded_at'],
+    }));
+}
+/** Forget a vertical's records, with the vertical. */
+export function forgetVerticalWireAuth(db, verticalSlug) {
+    db.run('DELETE FROM vertical_wire_auth WHERE vertical_slug = ?', verticalSlug);
+}
+//# sourceMappingURL=deployment-wire-auth.js.map

package/dist/deployment-wire-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-wire-auth.js","sourceRoot":"","sources":["../src/deployment-wire-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAA0C,MAAM,yBAAyB,CAAC;AAK7I,kFAAkF;AAClF,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;CASvC,CAAC;AAgCF,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,aAAa,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;AAEjF,yFAAyF;AACzF,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAE7C,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAExG,wFAAwF;AACxF,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACpH,MAAM,aAAa,GAAG,iHAAiH,CAAC;AAExI;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,OAAO,CAAC,wEAAwE,CAAC,CAAC;IAC1F,CAAC;IACD,yGAAyG;IACzG,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3H,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,CAAC,oFAAoF,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnJ,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC/B,IAAI,KAA8B,CAAC;IACnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI;QAAE,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO;QAAE,KAAK,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;;QAC7G,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;QAChG,MAAM,OAAO,CAAC,sCAAsC,aAAa,SAAS,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAA+B,EAAsB,EAAE;QACnE,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;YACpF,MAAM,OAAO,CAAC,GAAG,IAAI,6BAA6B,yBAAyB,aAAa,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC3G,OAAO;QACL,KAAK;QACL,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK;QACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB,CAAC,MAAgC;IACnE,OAAO,EAAE,QAAQ,EAAE,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAa,EAAE,GAAuB;IAC5E,IAAI,EAAE,CAAC,GAAG,CAAC,wCAAwC,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,EAAE,CAAC,GAAG,CACJ;;;;;;0CAMsC,EACtC,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,SAAS,EACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAC1B,GAAG,CAAC,UAAU,CACf,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAa,EAAE,KAA+B;IACjF,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC;IACrC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,IAAI,UAAU,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,+FAA+F;QAC7F,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,4BAA4B,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,EAC7D,GAAG,MAAM,CACV,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,kBAAkB,CAAC,KAAK,CAAC;QACvB,aAAa,EAAE,CAAC,CAAC,gBAAgB,CAAC;QAClC,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC;QAChC,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,UAAU,EAAE,CAAC,CAAC,aAAa,CAAC;KAC7B,CAAC,CACH,CAAC;AACJ,CAAC;AAgCD,sDAAsD;AACtD,MAAM,UAAU,sBAAsB,CAAC,EAAa,EAAE,YAAoB;IACxE,EAAE,CAAC,GAAG,CAAC,wDAAwD,EAAE,YAAY,CAAC,CAAC;AACjF,CAAC"}