@superbee/core 0.2.0-pre.2 → 0.2.0-pre.21

package/dist/hosted-client/journal.js

@@ -0,0 +1,464 @@
+/**
+ * The hosted client's durable intent store: a {@link HostedIntentStore} over a private
+ * `FileJournaledBackend` directory, so a process that exits with a write `unknown` finds it again
+ * (`heldWrites`) and settles it (`settleWrite`) after a restart. Node only; reached through
+ * `@superbee/core/hosted-client/node`.
+ *
+ * The directory holds the backend's own log and snapshot, in its supported on-disk format. Each
+ * held document write is one meta row, `hosted-client.write.<requestId>`, each held blob write
+ * one row of the backend's own blob intent family (`blobs`), and a marker row,
+ * `hosted-client.journal = { schemaVersion: 1 }`, names the directory as this store. The store's
+ * document, reserved-file and blob-file families stay empty: open refuses a directory holding any
+ * of them, or a checkout's blob-sync state, so a CLI checkout store is never adopted.
+ */
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { FILE_JOURNAL_LOG, FILE_JOURNAL_SNAPSHOT, FileJournaledBackend, } from "../file-journaled-backend.js";
+import { captureJournalValue, JournalGuardConflict } from "../journaled-backend.js";
+import { decodePreparedBlobIntent } from "../blob-journal.js";
+/** The marker row's key. */
+export const HOSTED_CLIENT_JOURNAL_MARKER = "hosted-client.journal";
+/** The schema this version of the client writes and reads. */
+export const HOSTED_CLIENT_JOURNAL_SCHEMA_VERSION = 1;
+/** The prefix of every held document write's meta row; the request identity follows it. */
+export const HOSTED_CLIENT_WRITE_PREFIX = "hosted-client.write.";
+/** How many times `delete` reads a row again after a concurrent put to it, before refusing. */
+const DELETE_ATTEMPTS = 8;
+/** The CLI's blob-sync map: a store holding it is a checkout store. */
+const CHECKOUT_BLOB_SYNC_KEY = "hosted.blob-sync.v1";
+/**
+ * The log is compacted into the snapshot once it is larger than the greater of this floor and
+ * twice the last snapshot, checked after every mutation. Settled writes leave the live state, so
+ * a steady stream of writes keeps the log under about this floor plus one record, and the work
+ * stays linear when unsettled writes hold the snapshot large.
+ */
+export const HOSTED_CLIENT_JOURNAL_COMPACT_FLOOR_BYTES = 1024 * 1024;
+/** Open refused the directory; nothing in it was changed. */
+export class HostedClientJournalError extends Error {
+    name = "HostedClientJournalError";
+    code;
+    directory;
+    /** With `JOURNAL_SCHEMA_UNSUPPORTED`: the marker's `schemaVersion`, as found. */
+    schemaVersion;
+    constructor(code, directory, message, options = {}) {
+        super(message);
+        this.code = code;
+        this.directory = directory;
+        if ("schemaVersion" in options)
+            this.schemaVersion = options.schemaVersion;
+    }
+}
+/** True when `error` is a {@link HostedClientJournalError}, with `code` when one is named. */
+export function isHostedClientJournalError(error, code) {
+    return error instanceof HostedClientJournalError && (code === undefined || error.code === code);
+}
+/**
+ * Open (or create) the hosted client's durable intent store in `directory`.
+ *
+ * Refusals change no file in an existing directory:
+ * - {@link HostedClientJournalError} — the directory is not private (a symbolic link, another
+ *   owner, group or other permission bits), holds files but no store, is not this client's
+ *   store, or names a newer schema;
+ * - `FilesystemMutationLockError` — another process holds the directory past `lock.waitMs`;
+ * - `FileJournalCorruptError` / `FileJournalFormatError` — the log or snapshot is damaged or in a
+ *   newer format. Nothing is repaired: moving the directory aside loses the writes it holds.
+ *
+ * The directory may hold only the backend's store files, each a regular file of its own. The
+ * decision is made on a read-only open, which changes nothing, and the directory, its listing,
+ * its files and its contents are checked again under the writable open's lock before the marker
+ * is written. Another process of the same user modifying the directory while it opens is out of
+ * scope: between the read-only decision and the writable lock, such a change can make the
+ * writable open truncate a torn or foreign log tail, remove a leftover snapshot temp, or create
+ * an empty log, and a foreign log truncated to nothing that way is adopted as an empty journal.
+ */
+export function openHostedClientJournal(options) {
+    return openHostedClientJournalWith(options);
+}
+/**
+ * The only entries a journal's directory may hold: the files a `FileJournaledBackend` keeps.
+ * Nothing else is tolerated, not even an operating system's own files such as `.DS_Store`: the
+ * directory is the journal's alone, and a refusal is safer than adopting a directory in use.
+ */
+const STORE_FILES = new Set([FILE_JOURNAL_LOG, FILE_JOURNAL_SNAPSHOT, "store.snapshot.tmp"]);
+/** The backend's record frame magic, the first bytes of every record in its (supported) on-disk format. */
+const RECORD_MAGIC = Buffer.from("SBJR", "latin1");
+/**
+ * The longest torn first record a journal's own log can begin with: the marker record, the first
+ * a new journal writes, is a few hundred bytes, so its torn remains fit in one page.
+ */
+const TORN_FIRST_RECORD_BYTES = 4096;
+/** @internal {@link openHostedClientJournal} with its test seam. Not in the package's exports. */
+export async function openHostedClientJournalWith(options, seam = {}) {
+    if (!options || typeof options.directory !== "string" || options.directory.trim() === "")
+        throw new TypeError("a hosted client journal names its directory");
+    const waitMs = options.lock?.waitMs;
+    if (waitMs !== undefined && !(typeof waitMs === "number" && Number.isFinite(waitMs) && waitMs >= 0))
+        throw new TypeError("lock.waitMs is a finite number of milliseconds, 0 or more");
+    const directory = path.resolve(options.directory);
+    const open = seam.openBackend ?? ((backendOptions) => FileJournaledBackend.open(backendOptions));
+    const backendOptions = (readOnly) => ({
+        directory,
+        // Never compact before the store is adopted: a refused store keeps its files as they were.
+        compactAfterBytes: Number.POSITIVE_INFINITY,
+        lock: { ...(waitMs !== undefined ? { waitMs } : {}), ...(seam.lockRoot !== undefined ? { lockRoot: seam.lockRoot } : {}) },
+        ...(readOnly ? { readOnly } : {}),
+    });
+    let identity = await privateDirectory(directory, { mayBeAbsent: true });
+    let created = false;
+    if (!identity) {
+        await seam.window?.("before-create");
+        // Create it here rather than in the backend, so a directory that appears in the meantime is
+        // found (EEXIST) and checked as an existing one instead of having a log created inside it.
+        await fs.mkdir(path.dirname(directory), { recursive: true, mode: 0o700 });
+        try {
+            await fs.mkdir(directory, { mode: 0o700 });
+            await syncDirectory(path.dirname(directory));
+            created = true;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        identity = await privateDirectory(directory, { mayBeAbsent: false });
+    }
+    if (!created) {
+        await assertStoreFilesOnly(directory);
+        // Decide on a read-only open first, which changes no file.
+        const inspected = await open(backendOptions(true));
+        try {
+            await assertLogIsJournals(directory, inspected);
+            await inspect(inspected, directory);
+        }
+        finally {
+            await inspected.close();
+        }
+    }
+    await seam.window?.("before-writable-open");
+    const backend = await open(backendOptions(false));
+    try {
+        // The lock is held from here: the directory must still be the private, journal-only one checked above.
+        const held = await privateDirectory(directory, { mayBeAbsent: false });
+        if (held.ino !== identity.ino || held.dev !== identity.dev) {
+            throw new HostedClientJournalError("JOURNAL_DIRECTORY_NOT_PRIVATE", directory, `'${directory}' was replaced while the journal opened`);
+        }
+        await assertStoreFilesOnly(directory);
+        if ((await inspect(backend, directory)) === "empty") {
+            await backend.writeMeta(HOSTED_CLIENT_JOURNAL_MARKER, { schemaVersion: HOSTED_CLIENT_JOURNAL_SCHEMA_VERSION }, { expected: { present: false }, requireEmptyJournal: true });
+        }
+        const journal = new FileHostedClientJournal(backend, await fileSize(path.join(directory, FILE_JOURNAL_SNAPSHOT)));
+        await journal.compactIfDue();
+        return journal;
+    }
+    catch (error) {
+        await backend.close().catch(() => { });
+        throw error;
+    }
+}
+/** Make a directory entry durable; Windows cannot flush a directory handle, and journals its own metadata. */
+async function syncDirectory(directory) {
+    if (process.platform === "win32")
+        return;
+    const handle = await fs.open(directory, "r");
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * The directory holds only store files, a leftover snapshot temp only beside a log, and each
+ * store file is this directory's own: a regular file (not a symbolic link or a directory) with
+ * one link, owned on POSIX by this user. The lock is keyed by directory, so a store file linked
+ * into another directory would let two journals append to one log at once.
+ */
+async function assertStoreFilesOnly(directory) {
+    const names = await fs.readdir(directory);
+    const stray = names.filter((name) => !STORE_FILES.has(name));
+    if (stray.length > 0 || (names.includes("store.snapshot.tmp") && !names.includes(FILE_JOURNAL_LOG))) {
+        throw new HostedClientJournalError("JOURNAL_NOT_HOSTED_CLIENT", directory, `'${directory}' holds files that are not a journal's (${stray.length > 0 ? stray.join(", ") : "a snapshot temp with no log"}); a hosted client journal is an empty or journal-only directory`);
+    }
+    for (const name of names) {
+        let stat;
+        try {
+            stat = await fs.lstat(path.join(directory, name));
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                continue;
+            throw error;
+        }
+        const why = stat.isSymbolicLink()
+            ? "is a symbolic link"
+            : !stat.isFile()
+                ? "is not a regular file"
+                : stat.nlink !== 1
+                    ? `has ${stat.nlink} links`
+                    : process.platform !== "win32" && typeof process.getuid === "function" && stat.uid !== process.getuid()
+                        ? `is owned by uid ${stat.uid}`
+                        : undefined;
+        if (why)
+            throw new HostedClientJournalError("JOURNAL_NOT_HOSTED_CLIENT", directory, `'${path.join(directory, name)}' ${why}; a hosted client journal's files are its own`);
+    }
+}
+/**
+ * A log that holds no whole record and has no snapshot beside it must be what a journal's own
+ * crash leaves: nothing, zeros (an extension whose data never landed), or the torn start of its
+ * first record, which begins with the record magic and fits in a page. Any other bytes are a
+ * foreign file named `store.log`, which the writable open would truncate.
+ */
+async function assertLogIsJournals(directory, backend) {
+    if (backend.transaction > 0 || (await fileSize(path.join(directory, FILE_JOURNAL_SNAPSHOT))) > 0)
+        return;
+    let head;
+    try {
+        const handle = await fs.open(path.join(directory, FILE_JOURNAL_LOG), "r");
+        try {
+            const buffer = Buffer.alloc(TORN_FIRST_RECORD_BYTES + 1);
+            const { bytesRead } = await handle.read(buffer, 0, buffer.byteLength, 0);
+            head = buffer.subarray(0, bytesRead);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return;
+        throw error;
+    }
+    if (head.byteLength === 0)
+        return;
+    const prefix = Math.min(head.byteLength, RECORD_MAGIC.byteLength);
+    const journals = head.byteLength <= TORN_FIRST_RECORD_BYTES && (head.every((byte) => byte === 0) || head.subarray(0, prefix).equals(RECORD_MAGIC.subarray(0, prefix)));
+    if (!journals)
+        throw new HostedClientJournalError("JOURNAL_NOT_HOSTED_CLIENT", directory, `'${directory}' holds a store.log that is not a journal's log`);
+}
+/**
+ * The directory's identity when it is a real directory private to this user, or undefined when
+ * it is absent and may be (the backend then creates it 0700). Windows has no POSIX mode bits or
+ * uids; its ACLs are the distribution's to check.
+ */
+async function privateDirectory(directory, options) {
+    let stat;
+    try {
+        stat = await fs.lstat(directory);
+    }
+    catch (error) {
+        if (error.code === "ENOENT" && options.mayBeAbsent)
+            return undefined;
+        throw error;
+    }
+    const refuse = (why) => new HostedClientJournalError("JOURNAL_DIRECTORY_NOT_PRIVATE", directory, `'${directory}' ${why}; a hosted client journal is a real directory of mode 0700 owned by this user`);
+    if (stat.isSymbolicLink())
+        throw refuse("is a symbolic link");
+    if (!stat.isDirectory())
+        throw refuse("is not a directory");
+    if (process.platform !== "win32") {
+        if (typeof process.getuid === "function" && stat.uid !== process.getuid())
+            throw refuse(`is owned by uid ${stat.uid}`);
+        if ((stat.mode & 0o077) !== 0)
+            throw refuse(`grants its group or others access (mode ${(stat.mode & 0o777).toString(8)})`);
+    }
+    return { dev: stat.dev, ino: stat.ino };
+}
+/**
+ * Whether the open store is this client's: `marked` (a marker of a known schema, none of a
+ * checkout's state) or `empty` (nothing at all, to be marked). Anything else is refused.
+ *
+ * The caller marks an empty store with `writeMeta(expected: absent, requireEmptyJournal)`. That
+ * write re-checks only the marker and the intents family; what makes the whole empty check hold
+ * is the directory's exclusive lock, held from this check through that write, with no other
+ * caller of the backend in between. A crash between the two leaves either nothing or a torn
+ * marker record, which open truncates, so the next open finds the store empty and marks it.
+ */
+async function inspect(backend, directory) {
+    const meta = await backend.listMeta();
+    const foreign = (await backend.list()).length > 0 ||
+        (await backend.listBlobs()).length > 0 ||
+        (await backend.readReserved("", "index.md")) !== null ||
+        (await backend.readReserved("", "log.md")) !== null ||
+        (await backend.listIntents()).length > 0 ||
+        meta.some((row) => row.key === CHECKOUT_BLOB_SYNC_KEY);
+    if (foreign)
+        throw new HostedClientJournalError("JOURNAL_NOT_HOSTED_CLIENT", directory, `'${directory}' holds documents or a checkout's state; it is not a hosted client journal`);
+    const marker = meta.find((row) => row.key === HOSTED_CLIENT_JOURNAL_MARKER);
+    if (marker) {
+        const schemaVersion = typeof marker.value === "object" && marker.value !== null ? marker.value.schemaVersion : undefined;
+        if (schemaVersion !== HOSTED_CLIENT_JOURNAL_SCHEMA_VERSION) {
+            throw new HostedClientJournalError("JOURNAL_SCHEMA_UNSUPPORTED", directory, `'${directory}' is a hosted client journal of schema ${String(schemaVersion)}; this version reads schema ${HOSTED_CLIENT_JOURNAL_SCHEMA_VERSION}`, { schemaVersion });
+        }
+        return "marked";
+    }
+    if (meta.length > 0 || (await backend.listBlobIntents()).length > 0) {
+        throw new HostedClientJournalError("JOURNAL_NOT_HOSTED_CLIENT", directory, `'${directory}' holds a store with no hosted client journal marker`);
+    }
+    return "empty";
+}
+async function fileSize(file) {
+    try {
+        return (await fs.stat(file)).size;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return 0;
+        throw error;
+    }
+}
+function keyOf(requestId) {
+    if (typeof requestId !== "string" || requestId === "")
+        throw new TypeError("a held write names its request identity");
+    return `${HOSTED_CLIENT_WRITE_PREFIX}${requestId}`;
+}
+/** A blob mutation's metadata may never write this journal's own rows or a checkout's state. */
+function assertClientBlobMeta(options) {
+    const keys = [...(options?.meta ?? []).map((row) => row?.key), ...(options?.removeMeta ?? [])];
+    if (keys.some((key) => typeof key === "string" && (key.startsWith("hosted-client.") || key === CHECKOUT_BLOB_SYNC_KEY))) {
+        throw new TypeError("a blob write's metadata may not name the hosted client journal's own rows or a checkout's blob-sync state");
+    }
+}
+class FileHostedClientJournal {
+    directory;
+    blobs;
+    #backend;
+    #snapshotBytes;
+    #compacting = null;
+    constructor(backend, snapshotBytes) {
+        this.#backend = backend;
+        this.directory = backend.directory;
+        this.#snapshotBytes = snapshotBytes;
+        this.blobs = this.#blobFacade();
+    }
+    /**
+     * The backend's blob verbs, with compaction after each mutation. A blob intent carries its
+     * bytes in every record of its life, so removing one that does (a retire or a forget of a
+     * create or replace) leaves those bytes dead in the snapshot and log: compact then whenever
+     * either is past the floor, rather than waiting for the log to outgrow twice the snapshot.
+     */
+    #blobFacade() {
+        const backend = this.#backend;
+        const carriesBytes = async (requestIds) => {
+            for (const id of requestIds) {
+                const row = typeof id === "string" ? await backend.readBlobIntent(id).catch(() => undefined) : undefined;
+                if (row && decodePreparedBlobIntent(row.prepared).bytesBase64 !== undefined)
+                    return true;
+            }
+            return false;
+        };
+        return Object.freeze({
+            readBlobWithJournal: (key, options) => backend.readBlobWithJournal(key, options),
+            listBlobIntents: (state) => backend.listBlobIntents(state),
+            readBlobIntent: (requestId) => backend.readBlobIntent(requestId),
+            writeBlobMeta: async (key, changes, options) => {
+                assertClientBlobMeta(changes);
+                await backend.writeBlobMeta(key, changes, options);
+                await this.compactIfDue();
+            },
+            admitPreparedBlob: async (prepared, options) => {
+                assertClientBlobMeta(options);
+                const row = await backend.admitPreparedBlob(prepared, options);
+                await this.compactIfDue();
+                return row;
+            },
+            updateBlobIntent: async (requestId, expectedState, patch, options) => {
+                assertClientBlobMeta(options);
+                const row = await backend.updateBlobIntent(requestId, expectedState, patch, options);
+                await this.compactIfDue();
+                return row;
+            },
+            retireBlobIntents: async (key, requestIds, options) => {
+                assertClientBlobMeta(options);
+                const reclaim = await carriesBytes(requestIds);
+                await backend.retireBlobIntents(key, requestIds, options);
+                await this.compactIfDue(reclaim);
+            },
+            forgetBlobIntent: async (requestId, options) => {
+                assertClientBlobMeta(options);
+                const reclaim = await carriesBytes([requestId]);
+                await backend.forgetBlobIntent(requestId, options);
+                await this.compactIfDue(reclaim);
+            },
+        });
+    }
+    async put(intent) {
+        if (typeof intent !== "object" || intent === null)
+            throw new TypeError("a held write is a record");
+        const key = keyOf(intent.requestId);
+        let record;
+        try {
+            // Only plain data is held, so the row can later be removed compare-and-swap against itself.
+            record = captureJournalValue({ ...intent });
+        }
+        catch (cause) {
+            throw new TypeError("a held write holds only strings, numbers, booleans, null and plain records", { cause });
+        }
+        await this.#backend.writeMeta(key, record);
+        await this.compactIfDue();
+    }
+    async get(requestId) {
+        const value = await this.#backend.readMeta(keyOf(requestId));
+        return value === undefined ? undefined : Object.freeze(value);
+    }
+    async delete(requestId) {
+        const key = keyOf(requestId);
+        // Compare-and-swap against the row as read. A put to this key landing in between is read
+        // again, a bounded number of times; any other refusal is the caller's.
+        for (let attempt = 1;; attempt++) {
+            const current = await this.#backend.readMeta(key);
+            if (current === undefined)
+                return;
+            try {
+                await this.#backend.removeMeta(key, { expected: { present: true, value: current } });
+                break;
+            }
+            catch (error) {
+                if (!(error instanceof JournalGuardConflict) || error.target !== key || attempt >= DELETE_ATTEMPTS)
+                    throw error;
+            }
+        }
+        await this.compactIfDue();
+    }
+    async *list() {
+        const rows = await this.#backend.listMeta(HOSTED_CLIENT_WRITE_PREFIX);
+        const intents = rows.map((row) => row.value);
+        intents.sort((a, b) => (a.createdAt < b.createdAt ? -1 : a.createdAt > b.createdAt ? 1 : a.requestId < b.requestId ? -1 : a.requestId > b.requestId ? 1 : 0));
+        for (const intent of intents)
+            yield Object.freeze(intent);
+    }
+    close() {
+        return this.#backend.close();
+    }
+    /**
+     * Compact when the log has outgrown the live state (see
+     * {@link HOSTED_CLIENT_JOURNAL_COMPACT_FLOOR_BYTES}), or, with `reclaim` (a removal that freed
+     * blob bytes), when the log or the snapshot is past the floor. The mutation before it is already durable,
+     * so a failed compaction only leaves the log longer: it is not the caller's failure, and the
+     * next mutation tries again.
+     */
+    async compactIfDue(reclaim = false) {
+        if (this.#compacting && !reclaim)
+            return;
+        // A reclaim must not be lost to a compaction that began before its removal committed.
+        while (this.#compacting)
+            await this.#compacting;
+        this.#compacting = (async () => {
+            try {
+                const logBytes = await fileSize(path.join(this.directory, FILE_JOURNAL_LOG));
+                const floor = HOSTED_CLIENT_JOURNAL_COMPACT_FLOOR_BYTES;
+                const due = logBytes > Math.max(floor, 2 * this.#snapshotBytes) || (reclaim && (logBytes > floor || this.#snapshotBytes > floor));
+                if (!due)
+                    return;
+                await this.#backend.compact();
+                this.#snapshotBytes = await fileSize(path.join(this.directory, FILE_JOURNAL_SNAPSHOT));
+            }
+            catch {
+                // Durable already; see above.
+            }
+            finally {
+                this.#compacting = null;
+            }
+        })();
+        await this.#compacting;
+    }
+}
+//# sourceMappingURL=journal.js.map

package/dist/hosted-client/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/hosted-client/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAA8D,MAAM,oBAAoB,CAAC;AAE1H,4BAA4B;AAC5B,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AACpE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AACtD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AACjE,+FAA+F;AAC/F,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,IAAI,GAAG,IAAI,CAAC;AAUrE,6DAA6D;AAC7D,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC/B,IAAI,GAAG,0BAA0B,CAAC;IAC3C,IAAI,CAA6B;IACjC,SAAS,CAAS;IAC3B,iFAAiF;IACxE,aAAa,CAAW;IACjC,YAAY,IAAgC,EAAE,SAAiB,EAAE,OAAe,EAAE,UAAuC,EAAE;QACzH,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,eAAe,IAAI,OAAO;YAAE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC7E,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,UAAU,0BAA0B,CAAC,KAAc,EAAE,IAAiC;IAC1F,OAAO,KAAK,YAAY,wBAAwB,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClG,CAAC;AAuCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAmC;IACzE,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAUD;;;;GAIG;AACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAC7F,2GAA2G;AAC3G,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnD;;;GAGG;AACH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAmC,EAAE,OAAwB,EAAE;IAC/G,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IAC7J,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACtL,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACjG,MAAM,cAAc,GAAG,CAAC,QAAiB,EAA+B,EAAE,CAAC,CAAC;QAC1E,SAAS;QACT,2FAA2F;QAC3F,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC1H,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC;QACrC,4FAA4F;QAC5F,2FAA2F;QAC3F,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,2DAA2D;QAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChD,MAAM,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,uGAAuG;QACvG,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,IAAK,CAAC,GAAG,KAAK,QAAS,CAAC,GAAG,IAAI,IAAK,CAAC,GAAG,KAAK,QAAS,CAAC,GAAG,EAAE,CAAC;YAC/D,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,EAAE,SAAS,EAAE,IAAI,SAAS,yCAAyC,CAAC,CAAC;QACzI,CAAC;QACD,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YACpD,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,EAAE,EAAE,aAAa,EAAE,oCAAoC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9K,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClH,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IACnD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,EAAE,SAAS,EAAE,IAAI,SAAS,2CAA2C,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,6BAA6B,kEAAkE,CAAC,CAAC;IAC5Q,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE;YAC/B,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;gBACd,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;oBAChB,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;wBACrG,CAAC,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE;wBAC/B,CAAC,CAAC,SAAS,CAAC;QACpB,IAAI,GAAG;YAAE,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,+CAA+C,CAAC,CAAC;IAC7K,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,OAA6B;IACjF,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO;IACzG,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACzE,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,uBAAuB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvK,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,EAAE,SAAS,EAAE,IAAI,SAAS,iDAAiD,CAAC,CAAC;AAC5J,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAiC;IAClF,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAChG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,wBAAwB,CAAC,+BAA+B,EAAE,SAAS,EAAE,IAAI,SAAS,KAAK,GAAG,+EAA+E,CAAC,CAAC;IAC/M,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,MAAM,MAAM,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvH,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,2CAA2C,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,OAAO,CAAC,OAA6B,EAAE,SAAiB;IACrE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IACtC,MAAM,OAAO,GACX,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,KAAK,IAAI;QACrD,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI;QACnD,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,EAAE,SAAS,EAAE,IAAI,SAAS,4EAA4E,CAAC,CAAC;IACnL,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAC5E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,aAAa,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,MAAM,CAAC,KAAqC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1J,IAAI,aAAa,KAAK,oCAAoC,EAAE,CAAC;YAC3D,MAAM,IAAI,wBAAwB,CAAC,4BAA4B,EAAE,SAAS,EAAE,IAAI,SAAS,0CAA0C,MAAM,CAAC,aAAa,CAAC,+BAA+B,oCAAoC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QACpP,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,EAAE,SAAS,EAAE,IAAI,SAAS,sDAAsD,CAAC,CAAC;IAClJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,SAAkB;IAC/B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACtH,OAAO,GAAG,0BAA0B,GAAG,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,gGAAgG;AAChG,SAAS,oBAAoB,CAAC,OAAwD;IACpF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,GAAG,KAAK,sBAAsB,CAAC,CAAC,EAAE,CAAC;QACxH,MAAM,IAAI,SAAS,CAAC,2GAA2G,CAAC,CAAC;IACnI,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB;IAClB,SAAS,CAAS;IAClB,KAAK,CAAuB;IAC5B,QAAQ,CAAuB;IACxC,cAAc,CAAS;IACvB,WAAW,GAAyB,IAAI,CAAC;IAEzC,YAAY,OAA6B,EAAE,aAAqB;QAC9D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,WAAW;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,MAAM,YAAY,GAAG,KAAK,EAAE,UAA6B,EAAoB,EAAE;YAC7E,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzG,IAAI,GAAG,IAAI,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,WAAW,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;YAC3F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,mBAAmB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC;YAChF,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;YAC1D,cAAc,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC;YAChE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5B,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;gBAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1B,OAAO,GAAG,CAAC;YACb,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACnE,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACrF,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1B,OAAO,GAAG,CAAC;YACb,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;gBACpD,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;gBAC7C,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;gBAChD,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,CAAC;SAC6B,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAyB;QACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,4FAA4F;YAC5F,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,4EAA4E,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAoB,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,yFAAyF;QACzF,uEAAuE;QACvE,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrF,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,oBAAoB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,IAAI,eAAe;oBAAE,MAAM,KAAK,CAAC;YAClH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,CAAC,IAAI;QACT,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAoB,0BAA0B,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9J,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG,KAAK;QAChC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO;YAAE,OAAO;QACzC,sFAAsF;QACtF,OAAO,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAC7E,MAAM,KAAK,GAAG,yCAAyC,CAAC;gBACxD,MAAM,GAAG,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,GAAG,KAAK,IAAI,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC;gBAClI,IAAI,CAAC,GAAG;oBAAE,OAAO;gBACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACzF,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;CACF"}

package/dist/hosted-client/node.d.ts

@@ -0,0 +1,74 @@
+/**
+ * `@superbee/core/hosted-client/node`: the hosted client's Node-only half, a supported public API
+ * under core's normal versioning. It holds the durable intent store (`openHostedClientJournal`,
+ * in `journal.ts`), and it downloads a hosted bundle's portable export
+ * (`<prefix>/export`) and verifies it with `@superbee/core/portable-export`, whose digests and
+ * file placement need Node, so it is kept off the browser-safe `@superbee/core/hosted-client`.
+ *
+ * The result is a verified export or a typed failure, never files: a stopped, tampered or
+ * oversized export is refused before anything is returned, and placing the verified entries is
+ * the caller's (`materializeExport`, or its own staging).
+ */
+import { type VerifiedExport } from "../portable-export.js";
+import type { HostedClient } from "./client.js";
+export { ExportArchiveError, MAX_EXPORT_BYTES, type VerifiedExport } from "../portable-export.js";
+export { HOSTED_CLIENT_JOURNAL_COMPACT_FLOOR_BYTES, HOSTED_CLIENT_JOURNAL_SCHEMA_VERSION, HostedClientJournalError, isHostedClientJournalError, openHostedClientJournal, type HostedClientJournal, type HostedClientJournalOptions, type HostedClientJournalProblem, } from "./journal.js";
+export { FileJournalCorruptError, FileJournalFormatError, FileJournalUnavailableError } from "../file-journaled-backend.js";
+export { FilesystemMutationLockError } from "../filesystem-lock.js";
+/**
+ * The host's export window: an export (or one page of a paged one) is answered within 60 s. A
+ * client that downloads exports should be created with at least this `deadlineMs`; the default
+ * 15 s read deadline would cut a large bundle.
+ */
+export declare const EXPORT_WINDOW_MS = 60000;
+/**
+ * Why a download was refused, apart from the host's refusals and the verifier's:
+ * `stopped` — the answer's body failed part way (the network, or the carrier's idle deadline), so
+ * the same request may succeed; `too_large` — the answer ran past what an export carries
+ * ({@link MAX_EXPORT_BYTES} in all); `source_changed` — the bundle kept changing between the pages
+ * of a paged export, every attempt.
+ */
+export type HostedExportProblem = "stopped" | "too_large" | "source_changed";
+export declare class HostedExportError extends Error {
+    readonly name = "HostedExportError";
+    readonly problem: HostedExportProblem;
+    readonly bundleId: string;
+    /** With `too_large`: the bound the answer ran past, in bytes. */
+    readonly maximum?: number;
+    constructor(problem: HostedExportProblem, bundleId: string, message: string, options?: {
+        cause?: unknown;
+        maximum?: number;
+    });
+}
+/** True when `error` is a {@link HostedExportError}, with `problem` when one is named. */
+export declare function isHostedExportError(error: unknown, problem?: HostedExportProblem): error is HostedExportError;
+export interface DownloadExportOptions {
+    /** Aborting it stops the download; it is thrown as the signal's reason. The client's own signal applies too. */
+    readonly signal?: AbortSignal;
+}
+/** What a download needs of a client: its carrier, its sync prefix and its signal. A `within` client qualifies the bundle. */
+export type HostedExportClient = Pick<HostedClient, "carrier" | "prefix" | "signal">;
+/**
+ * The verified portable export of `bundleId` at its latest confirmed revision: every document,
+ * reserved file and blob, byte for byte, read whole and checked against the host's digest
+ * manifests before it is returned.
+ *
+ * A host that pages the export answers it a page at a time; each page is verified as it arrives,
+ * checked against the pages before it, and the pages are joined (`ExportPageChain`). A host from
+ * before paging refuses the paged request as `invalid_input`, and the whole bundle is then read as
+ * one archive. A bundle that changes between pages (`concurrent_change`) is read again from its
+ * first page, up to three attempts. A page the host was too busy for (`backend_unavailable`, its
+ * one export slot) or stopped part way is asked for once more.
+ *
+ * Failures are typed:
+ * - `HostedCarrierError` — transport (the request may not have been answered);
+ * - `HostedRouteNotServed` — a host from before the export route;
+ * - `RemoteError` — the host's refusal, with its code and status (`bundle_not_found`,
+ *   `result_too_large`, `validation_failed`, `unauthenticated` and so on);
+ * - `ExportArchiveError` — the verifier refused the archive (`incomplete` when the host stopped it);
+ * - {@link HostedExportError} — the answer stopped part way, ran past {@link MAX_EXPORT_BYTES}, or
+ *   the bundle kept changing;
+ * - the signal's reason, once `options.signal` or the client's signal aborts.
+ */
+export declare function downloadExport(client: HostedExportClient, bundleId: string, options?: DownloadExportOptions): Promise<VerifiedExport>;
+//# sourceMappingURL=node.d.ts.map

package/dist/hosted-client/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/hosted-client/node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EACL,yCAAyC,EACzC,oCAAoC,EACpC,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,GAChC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC5H,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAS,CAAC;AASvC;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAE7E,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,SAAkB,IAAI,uBAAuB;IAC7C,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBACd,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO;CAMjI;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,KAAK,IAAI,iBAAiB,CAE7G;AAED,MAAM,WAAW,qBAAqB;IACpC,gHAAgH;IAChH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,8HAA8H;AAC9H,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,CA4C/I"}