@superbee/core 0.2.0-pre.6 → 0.2.0-pre.8

package/dist/hosted-transport/operations.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Hosted operations by id: the host lists the reads it runs for one bundle
+ * (`POST <sync prefix>/operations {bundleId}`) and runs one of them
+ * (`POST <sync prefix>/run {bundleId, operationId, input}`), answering the kernel's operation
+ * result. A client reaches a read the host adds with no change of its own.
+ *
+ * Everything the host says here is untrusted data. A descriptor's title and description go
+ * through {@link stripHostText}; its JSON Schemas are carried for rendering only, never compiled
+ * and never followed (`$ref`, `$id`); a result is data, never a path, URL or command. A listing
+ * is bounded: at most {@link HOSTED_READ_BOUNDS.operations} descriptors, and a descriptor that is
+ * malformed or out of bounds is dropped with a note while the rest still list.
+ */
+import { type HostedOperationRefusal } from "./read-adapter.js";
+/** True for an id in the operation grammar (`documents.history.v1`), at most 128 characters. */
+export declare function isOperationId(value: unknown): value is string;
+/** A JSON object, as parsed from an answer. */
+export type JsonObject = {
+    readonly [key: string]: unknown;
+};
+/** One operation the host runs by id, as its listing describes it. */
+export interface HostedOperation {
+    readonly operationId: string;
+    /** Host text, stripped of control and format characters, at most {@link HOSTED_READ_BOUNDS.operationTitleChars}. */
+    readonly title: string;
+    /** Host text, stripped of control and format characters, at most {@link HOSTED_READ_BOUNDS.operationDescriptionChars}. */
+    readonly description: string;
+    /** The most bytes the host answers a run of this operation with. */
+    readonly maximumOutputBytes: number;
+    /** For rendering only: never compiled, never followed. */
+    readonly inputJsonSchema: JsonObject;
+    /** For rendering only: never compiled, never followed. */
+    readonly resultJsonSchema: JsonObject;
+    /** The boolean hints the host states (`readOnlyHint`, `destructiveHint`, ...); any other value is left out. */
+    readonly annotations: Readonly<Record<string, boolean>>;
+}
+/** A decoded listing: the operations admitted, in the host's order, and a note for each one dropped. */
+export interface HostedOperationListing {
+    readonly operations: readonly HostedOperation[];
+    readonly notes: readonly string[];
+}
+/**
+ * The listing route's `200` answer (`{ operations: [descriptor, ...] }`). A body that is not an
+ * object with an `operations` array is malformed, naming `route`; fields the answer may gain are
+ * ignored. Each descriptor is admitted on its own: one that is malformed, whose id is outside the
+ * operation grammar or repeats an earlier one, whose `maximumOutputBytes` is not positive, or
+ * whose schema nests deeper than {@link HOSTED_READ_BOUNDS.operationSchemaDepth} is dropped with a note. At most
+ * {@link HOSTED_READ_BOUNDS.operations} are read.
+ */
+export declare function decodeOperationListing(body: unknown, route?: string): HostedOperationListing;
+/** True when an operation input names a bundle other than `bundleId` (an input without one names none). */
+export declare function namesOtherBundle(input: JsonObject, bundleId: string): boolean;
+/**
+ * The body a run sends: the bundle the request selects its tenant by, the operation, and the
+ * operation's input with its `bundleId` set to that same bare bundle id (the host refuses an
+ * input naming another bundle). An input that already names another bundle is refused here.
+ */
+export declare function operationRunBody(bundleId: string, operationId: string, input: JsonObject): {
+    bundleId: string;
+    operationId: string;
+    input: Record<string, unknown>;
+};
+/** A listing, or the refusal of the bundle it was asked for. */
+export type HostedOperationListingAnswer = {
+    readonly ok: true;
+    readonly listing: HostedOperationListing;
+} | {
+    readonly ok: false;
+    readonly refusal: HostedOperationRefusal;
+};
+/** A run's `200` answer: the operation's data, or its refusal (the kernel's code, message and retry advice). */
+export type HostedOperationRun = {
+    readonly ok: true;
+    readonly data: unknown;
+} | {
+    readonly ok: false;
+    readonly refusal: HostedOperationRefusal;
+};
+/**
+ * A run's `200` answer, the kernel's operation result: `{ ok: true, operationId, data }` for the
+ * operation asked for, or its refusal through {@link operationRefusal}. Anything else, including
+ * a result for another operation, or data nested deeper than `HOSTED_READ_BOUNDS.runDepth`
+ * levels (which no renderer could walk), is malformed, naming `route`. The data is not interpreted.
+ */
+export declare function decodeOperationRun(operationId: string, body: unknown, route?: string): HostedOperationRun;
+//# sourceMappingURL=operations.d.ts.map

package/dist/hosted-transport/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/hosted-transport/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAwC,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAOtG,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAED,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAE7D,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oHAAoH;IACpH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0HAA0H;IAC1H,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,0DAA0D;IAC1D,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,+GAA+G;IAC/G,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACzD;AAED,wGAAwG;AACxG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAmCD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAmB5F;AAED,2GAA2G;AAC3G,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAKpK;AAED,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAE9K,gHAAgH;AAChH,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAElJ;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAOzG"}

package/dist/hosted-transport/operations.js

@@ -0,0 +1,128 @@
+/**
+ * Hosted operations by id: the host lists the reads it runs for one bundle
+ * (`POST <sync prefix>/operations {bundleId}`) and runs one of them
+ * (`POST <sync prefix>/run {bundleId, operationId, input}`), answering the kernel's operation
+ * result. A client reaches a read the host adds with no change of its own.
+ *
+ * Everything the host says here is untrusted data. A descriptor's title and description go
+ * through {@link stripHostText}; its JSON Schemas are carried for rendering only, never compiled
+ * and never followed (`$ref`, `$id`); a result is data, never a path, URL or command. A listing
+ * is bounded: at most {@link HOSTED_READ_BOUNDS.operations} descriptors, and a descriptor that is
+ * malformed or out of bounds is dropped with a note while the rest still list.
+ */
+import { stripHostText } from "../host-text.js";
+import { malformed } from "../remote-error.js";
+import { operationRefusal, HOSTED_READ_BOUNDS } from "./read-adapter.js";
+/** The longest operation id admitted. */
+const OPERATION_ID_MAX = 128;
+const OPERATION_ID = /^[a-z][a-z0-9_-]*(\.[a-z][a-z0-9_-]*)*\.v[1-9][0-9]*$/;
+/** True for an id in the operation grammar (`documents.history.v1`), at most 128 characters. */
+export function isOperationId(value) {
+    return typeof value === "string" && value.length <= OPERATION_ID_MAX && OPERATION_ID.test(value);
+}
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** Whether `value` nests objects and arrays deeper than `limit` levels (the value itself is level 1). */
+function deeperThan(value, limit, level = 1) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    if (level > limit)
+        return true;
+    const children = Array.isArray(value) ? value : Object.values(value);
+    return children.some((child) => deeperThan(child, limit, level + 1));
+}
+/** One descriptor, admitted, or the reason it is dropped. */
+function admitDescriptor(raw) {
+    if (!isRecord(raw))
+        return "not an object";
+    const { operationId, title, description, maximumOutputBytes, inputJsonSchema, resultJsonSchema, annotations } = raw;
+    if (!isOperationId(operationId))
+        return "its id is not an operation id";
+    if (typeof title !== "string" || typeof description !== "string")
+        return "it has no title or description";
+    if (typeof maximumOutputBytes !== "number" || !Number.isSafeInteger(maximumOutputBytes) || maximumOutputBytes <= 0)
+        return "its maximumOutputBytes is not a positive integer";
+    if (!isRecord(inputJsonSchema) || !isRecord(resultJsonSchema))
+        return "its schemas are not objects";
+    if (deeperThan(inputJsonSchema, HOSTED_READ_BOUNDS.operationSchemaDepth) || deeperThan(resultJsonSchema, HOSTED_READ_BOUNDS.operationSchemaDepth))
+        return `a schema is nested deeper than ${HOSTED_READ_BOUNDS.operationSchemaDepth} levels`;
+    if (annotations !== undefined && !isRecord(annotations))
+        return "its annotations are not an object";
+    const hints = {};
+    for (const [key, value] of Object.entries(annotations ?? {}))
+        if (typeof value === "boolean")
+            hints[key] = value;
+    return Object.freeze({
+        operationId,
+        title: stripHostText(title, HOSTED_READ_BOUNDS.operationTitleChars),
+        description: stripHostText(description, HOSTED_READ_BOUNDS.operationDescriptionChars),
+        maximumOutputBytes,
+        inputJsonSchema,
+        resultJsonSchema,
+        annotations: Object.freeze(hints),
+    });
+}
+/**
+ * The listing route's `200` answer (`{ operations: [descriptor, ...] }`). A body that is not an
+ * object with an `operations` array is malformed, naming `route`; fields the answer may gain are
+ * ignored. Each descriptor is admitted on its own: one that is malformed, whose id is outside the
+ * operation grammar or repeats an earlier one, whose `maximumOutputBytes` is not positive, or
+ * whose schema nests deeper than {@link HOSTED_READ_BOUNDS.operationSchemaDepth} is dropped with a note. At most
+ * {@link HOSTED_READ_BOUNDS.operations} are read.
+ */
+export function decodeOperationListing(body, route) {
+    if (!isRecord(body) || !Array.isArray(body.operations))
+        throw malformed("operations answered a body that is not an operation listing", route);
+    const rows = body.operations;
+    const operations = [];
+    const notes = [];
+    const seen = new Set();
+    rows.slice(0, HOSTED_READ_BOUNDS.operations).forEach((raw, index) => {
+        const admitted = admitDescriptor(raw);
+        // Only an id that passed the grammar is named: anything else the host sent stays out of the note.
+        const named = isRecord(raw) && isOperationId(raw.operationId) ? ` (${raw.operationId})` : "";
+        if (typeof admitted === "string")
+            notes.push(`dropped the host's operation #${index + 1}${named}: ${admitted}`);
+        else if (seen.has(admitted.operationId))
+            notes.push(`dropped the host's operation #${index + 1}${named}: its id repeats an earlier one`);
+        else {
+            seen.add(admitted.operationId);
+            operations.push(admitted);
+        }
+    });
+    if (rows.length > HOSTED_READ_BOUNDS.operations)
+        notes.push(`dropped ${rows.length - HOSTED_READ_BOUNDS.operations} operations past the first ${HOSTED_READ_BOUNDS.operations} the host listed`);
+    return Object.freeze({ operations: Object.freeze(operations), notes: Object.freeze(notes) });
+}
+/** True when an operation input names a bundle other than `bundleId` (an input without one names none). */
+export function namesOtherBundle(input, bundleId) {
+    return input.bundleId !== undefined && input.bundleId !== bundleId;
+}
+/**
+ * The body a run sends: the bundle the request selects its tenant by, the operation, and the
+ * operation's input with its `bundleId` set to that same bare bundle id (the host refuses an
+ * input naming another bundle). An input that already names another bundle is refused here.
+ */
+export function operationRunBody(bundleId, operationId, input) {
+    if (namesOtherBundle(input, bundleId))
+        throw new RangeError("the operation input names another bundle than the one the run selects");
+    const rest = { ...input };
+    delete rest.bundleId;
+    return { bundleId, operationId, input: { bundleId, ...rest } };
+}
+/**
+ * A run's `200` answer, the kernel's operation result: `{ ok: true, operationId, data }` for the
+ * operation asked for, or its refusal through {@link operationRefusal}. Anything else, including
+ * a result for another operation, or data nested deeper than `HOSTED_READ_BOUNDS.runDepth`
+ * levels (which no renderer could walk), is malformed, naming `route`. The data is not interpreted.
+ */
+export function decodeOperationRun(operationId, body, route) {
+    const refusal = operationRefusal(body, operationId, route);
+    if (refusal)
+        return Object.freeze({ ok: false, refusal });
+    if (!isRecord(body) || body.ok !== true || body.operationId !== operationId || !("data" in body) || body.data === undefined)
+        throw malformed(`run answered an envelope that is not ${operationId}'s result`, route);
+    if (deeperThan(body.data, HOSTED_READ_BOUNDS.runDepth))
+        throw malformed(`run answered data nested deeper than ${HOSTED_READ_BOUNDS.runDepth} levels`, route);
+    return Object.freeze({ ok: true, data: body.data });
+}
+//# sourceMappingURL=operations.js.map

package/dist/hosted-transport/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../src/hosted-transport/operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAA+B,MAAM,mBAAmB,CAAC;AAEtG,yCAAyC;AACzC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,YAAY,GAAG,uDAAuD,CAAC;AAE7E,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnG,CAAC;AA4BD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,yGAAyG;AACzG,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa,EAAE,KAAK,GAAG,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,6DAA6D;AAC7D,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IAC3C,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IACpH,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;QAAE,OAAO,+BAA+B,CAAC;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,gCAAgC,CAAC;IAC1G,IAAI,OAAO,kBAAkB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,IAAI,CAAC;QAAE,OAAO,kDAAkD,CAAC;IAC9K,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,6BAA6B,CAAC;IACpG,IAAI,UAAU,CAAC,eAAe,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,oBAAoB,CAAC;QAAE,OAAO,kCAAkC,kBAAkB,CAAC,oBAAoB,SAAS,CAAC;IAC7O,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,mCAAmC,CAAC;IACpG,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAAE,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACjH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;QACnE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,kBAAkB,CAAC,yBAAyB,CAAC;QACrF,kBAAkB;QAClB,eAAe;QACf,gBAAgB;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa,EAAE,KAAc;IAClE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,SAAS,CAAC,6DAA6D,EAAE,KAAK,CAAC,CAAC;IAC9I,MAAM,IAAI,GAAG,IAAI,CAAC,UAAuB,CAAC;IAC1C,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,kGAAkG;QAClG,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,iCAAiC,KAAK,GAAG,CAAC,GAAG,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;aAC3G,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,iCAAiC,KAAK,GAAG,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;aACpI,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,UAAU,8BAA8B,kBAAkB,CAAC,UAAU,kBAAkB,CAAC,CAAC;IACjM,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,QAAgB;IAClE,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,WAAmB,EAAE,KAAiB;IACvF,IAAI,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uEAAuE,CAAC,CAAC;IACrI,MAAM,IAAI,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACrB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AACjE,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,IAAa,EAAE,KAAc;IACnF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QACzH,MAAM,SAAS,CAAC,wCAAwC,WAAW,WAAW,EAAE,KAAK,CAAC,CAAC;IACzF,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,QAAQ,CAAC;QAAE,MAAM,SAAS,CAAC,wCAAwC,kBAAkB,CAAC,QAAQ,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7J,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/hosted-transport/paged-reads.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Following the host's page cursor for heads and snapshot. The host serves both a page at a
+ * time: a request without `cursor` is the first page, and each page that is not the last names
+ * the `next` cursor. Every page is served under the one bundle revision the first page pinned
+ * and states the whole listing's `count` and `digest`; a write between pages makes the next page
+ * refuse with `409 concurrent_change` rather than mix two states, and the reader starts again.
+ *
+ * A bundle that fits in one page gets the answer it got before paging, so these helpers only
+ * stitch pages together: the assembled heads go through {@link parseHeadsAnswer} and the
+ * stitched snapshot body through {@link readSnapshotStream}, which keep deciding what a working
+ * copy may trust (the count, the terminator, the digest).
+ */
+import { type DocumentHead } from "../heads-digest.js";
+/** The refusal a page answers when the bundle moved since the first page pinned it. */
+export declare const PAGE_RESTART_CODE = "concurrent_change";
+/** How many times a heads listing starts again from the first page before the refusal stands. */
+export declare const HEADS_PAGE_ATTEMPTS = 3;
+/**
+ * The pause before each restart, by restart: about a quarter second, then about a second. A burst
+ * of writes (an organizer apply, an agent's batch) usually settles within that, where restarts
+ * back to back would spend every attempt inside the same burst.
+ */
+export declare const PAGE_RESTART_DELAYS_MS: readonly number[];
+/** The pause before restart `restart` (1-based): half the base plus up to half again, at random. */
+export declare function pageRestartDelay(restart: number, random?: () => number): number;
+/** Waits `ms`, or rejects with the signal's reason once it aborts. */
+export declare function pause(ms: number, signal: AbortSignal): Promise<void>;
+/** The longest cursor a reader passes back; the host's are far shorter. */
+export declare const MAXIMUM_CURSOR_LENGTH = 4096;
+/** True when `error` is the host's refusal of a page because the bundle moved since the first. */
+export declare function isPageRestart(error: unknown): boolean;
+/**
+ * True when a snapshot ended as truncation because a later page was refused as a restart: the
+ * documents changed while the pages streamed. The snapshot cannot start again by itself, since
+ * its header and first documents already reached the consumer; the caller that consumes it
+ * (a bootstrap or a checkout) runs again, after {@link pageRestartDelay}, a bounded number of
+ * times ({@link SNAPSHOT_RESTART_ATTEMPTS}).
+ */
+export declare function isSnapshotRestart(error: unknown): boolean;
+/** How many times a snapshot consumer runs before a restart truncation stands. */
+export declare const SNAPSHOT_RESTART_ATTEMPTS = 3;
+/**
+ * Runs `consume` (a bootstrap or a checkout over one snapshot) again when it fails with a
+ * snapshot restart, pausing before each run, at most `attempts` times in all. Any other failure,
+ * and the last restart, stand.
+ */
+export declare function retrySnapshotRestarts<T>(consume: () => Promise<T>, options: {
+    signal: AbortSignal;
+    attempts?: number;
+    sleep?: (ms: number, signal: AbortSignal) => Promise<void>;
+}): Promise<T>;
+/** One page of a paged heads answer, shape-checked; the whole listing is checked once assembled. */
+export interface HeadsPage {
+    readonly count: number;
+    readonly digest: string;
+    readonly heads: readonly DocumentHead[];
+    readonly next?: string;
+}
+export declare function decodeHeadsPage(value: unknown): HeadsPage;
+/**
+ * Collects paged heads into the one listing they page. Every page must state the first page's
+ * count and digest, rows must strictly ascend by id across pages (so no row repeats), a page that
+ * names a next cursor must carry rows, and the rows may never outnumber the count. The caller
+ * hands the assembled `{ count, digest, heads }` to the shared heads parser.
+ */
+export declare class HeadsPages {
+    #private;
+    /** Adds a page; answers the cursor of the next page, or undefined once the listing is whole. */
+    add(page: HeadsPage): string | undefined;
+    /** The assembled answer, in the unpaged answer's shape. */
+    whole(): {
+        count: number;
+        digest: string;
+        heads: DocumentHead[];
+    };
+}
+/**
+ * One snapshot body stitched from its pages, in the unpaged grammar: the first page's header,
+ * every page's document lines in order, and the last page's `end` terminator. A later page's
+ * header must state the first page's count and digest and is dropped; a `page` terminator must
+ * count the document lines its page carried and names the cursor `open` fetches next. Anything
+ * else passes through verbatim for the snapshot parser to judge, and a page that fails to open
+ * or ends early ends the stitched body without its terminator, which the parser reports as
+ * truncation. Cancelling the stitched body cancels the page being read.
+ */
+export declare function stitchSnapshotPages(first: ReadableStream<Uint8Array>, open: (cursor: string) => Promise<ReadableStream<Uint8Array>>): ReadableStream<Uint8Array>;
+//# sourceMappingURL=paged-reads.d.ts.map

package/dist/hosted-transport/paged-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paged-reads.d.ts","sourceRoot":"","sources":["../../src/hosted-transport/paged-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAItE,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA+B,CAAC;AAEpF,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,MAAoB,GAAG,MAAM,CAG5F;AAED,sEAAsE;AACtE,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAapE;AACD,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAG1C,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED,kFAAkF;AAClF,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAC3C,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAC9G,OAAO,CAAC,CAAC,CAAC,CAUZ;AAED,oGAAoG;AACpG,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAczD;AAED;;;;;GAKG;AACH,qBAAa,UAAU;;IAIrB,gGAAgG;IAChG,GAAG,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS;IAaxC,2DAA2D;IAC3D,KAAK,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,YAAY,EAAE,CAAA;KAAE;CAIlE;AAoCD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,EACjC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,GAC5D,cAAc,CAAC,UAAU,CAAC,CAkD5B"}

package/dist/hosted-transport/paged-reads.js

@@ -0,0 +1,238 @@
+/**
+ * Following the host's page cursor for heads and snapshot. The host serves both a page at a
+ * time: a request without `cursor` is the first page, and each page that is not the last names
+ * the `next` cursor. Every page is served under the one bundle revision the first page pinned
+ * and states the whole listing's `count` and `digest`; a write between pages makes the next page
+ * refuse with `409 concurrent_change` rather than mix two states, and the reader starts again.
+ *
+ * A bundle that fits in one page gets the answer it got before paging, so these helpers only
+ * stitch pages together: the assembled heads go through {@link parseHeadsAnswer} and the
+ * stitched snapshot body through {@link readSnapshotStream}, which keep deciding what a working
+ * copy may trust (the count, the terminator, the digest).
+ */
+import { isHeadsDigest } from "../heads-digest.js";
+import { malformed, RemoteError } from "../remote-error.js";
+import { SNAPSHOT_TRUNCATED } from "../remote-parsers.js";
+/** The refusal a page answers when the bundle moved since the first page pinned it. */
+export const PAGE_RESTART_CODE = "concurrent_change";
+/** How many times a heads listing starts again from the first page before the refusal stands. */
+export const HEADS_PAGE_ATTEMPTS = 3;
+/**
+ * The pause before each restart, by restart: about a quarter second, then about a second. A burst
+ * of writes (an organizer apply, an agent's batch) usually settles within that, where restarts
+ * back to back would spend every attempt inside the same burst.
+ */
+export const PAGE_RESTART_DELAYS_MS = Object.freeze([250, 1000]);
+/** The pause before restart `restart` (1-based): half the base plus up to half again, at random. */
+export function pageRestartDelay(restart, random = Math.random) {
+    const base = PAGE_RESTART_DELAYS_MS[Math.min(restart, PAGE_RESTART_DELAYS_MS.length) - 1];
+    return Math.round(base / 2 + (random() * base) / 2);
+}
+/** Waits `ms`, or rejects with the signal's reason once it aborts. */
+export function pause(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted)
+            return reject(signal.reason);
+        const timer = setTimeout(() => {
+            signal.removeEventListener("abort", aborted);
+            resolve();
+        }, ms);
+        const aborted = () => {
+            clearTimeout(timer);
+            reject(signal.reason);
+        };
+        signal.addEventListener("abort", aborted, { once: true });
+    });
+}
+/** The longest cursor a reader passes back; the host's are far shorter. */
+export const MAXIMUM_CURSOR_LENGTH = 4096;
+/** True when `error` is the host's refusal of a page because the bundle moved since the first. */
+export function isPageRestart(error) {
+    return error instanceof RemoteError && error.status === 409 && error.code === PAGE_RESTART_CODE;
+}
+/**
+ * True when a snapshot ended as truncation because a later page was refused as a restart: the
+ * documents changed while the pages streamed. The snapshot cannot start again by itself, since
+ * its header and first documents already reached the consumer; the caller that consumes it
+ * (a bootstrap or a checkout) runs again, after {@link pageRestartDelay}, a bounded number of
+ * times ({@link SNAPSHOT_RESTART_ATTEMPTS}).
+ */
+export function isSnapshotRestart(error) {
+    return error instanceof RemoteError && error.code === SNAPSHOT_TRUNCATED && isPageRestart(error.cause);
+}
+/** How many times a snapshot consumer runs before a restart truncation stands. */
+export const SNAPSHOT_RESTART_ATTEMPTS = 3;
+/**
+ * Runs `consume` (a bootstrap or a checkout over one snapshot) again when it fails with a
+ * snapshot restart, pausing before each run, at most `attempts` times in all. Any other failure,
+ * and the last restart, stand.
+ */
+export async function retrySnapshotRestarts(consume, options) {
+    const attempts = options.attempts ?? SNAPSHOT_RESTART_ATTEMPTS;
+    for (let attempt = 1;; attempt += 1) {
+        try {
+            return await consume();
+        }
+        catch (error) {
+            if (attempt >= attempts || !isSnapshotRestart(error))
+                throw error;
+            await (options.sleep ?? pause)(pageRestartDelay(attempt), options.signal);
+        }
+    }
+}
+function isCursor(value) {
+    return typeof value === "string" && value.length > 0 && value.length <= MAXIMUM_CURSOR_LENGTH;
+}
+export function decodeHeadsPage(value) {
+    const body = value;
+    if (typeof body !== "object" || body === null || Array.isArray(body))
+        throw malformed("heads page is not a JSON object");
+    if (typeof body.count !== "number" || !Number.isSafeInteger(body.count) || body.count < 0)
+        throw malformed("heads page carries no listing count");
+    if (!isHeadsDigest(body.digest))
+        throw malformed("heads page carries no well-formed digest");
+    if (!Array.isArray(body.heads))
+        throw malformed("heads page carries no heads array");
+    const heads = body.heads.map((row) => {
+        const head = row;
+        if (typeof head !== "object" || head === null || typeof head.id !== "string" || typeof head.version !== "string")
+            throw malformed("heads page carries a row that is not { id, version }");
+        return { id: head.id, version: head.version };
+    });
+    if (body.next !== undefined && !isCursor(body.next))
+        throw malformed("heads page carries a malformed next cursor");
+    return { count: body.count, digest: body.digest, heads, ...(body.next === undefined ? {} : { next: body.next }) };
+}
+/**
+ * Collects paged heads into the one listing they page. Every page must state the first page's
+ * count and digest, rows must strictly ascend by id across pages (so no row repeats), a page that
+ * names a next cursor must carry rows, and the rows may never outnumber the count. The caller
+ * hands the assembled `{ count, digest, heads }` to the shared heads parser.
+ */
+export class HeadsPages {
+    #first;
+    #rows = [];
+    /** Adds a page; answers the cursor of the next page, or undefined once the listing is whole. */
+    add(page) {
+        const first = (this.#first ??= page);
+        if (page.count !== first.count || page.digest !== first.digest)
+            throw malformed("heads pages disagree on the listing they page");
+        for (const head of page.heads) {
+            const last = this.#rows.at(-1);
+            if (last !== undefined && !(last.id < head.id))
+                throw malformed("heads pages repeat or reorder a row");
+            this.#rows.push(head);
+        }
+        if (this.#rows.length > first.count)
+            throw malformed(`heads pages carry more than the ${first.count} row(s) they announce`);
+        if (page.next !== undefined && page.heads.length === 0)
+            throw malformed("a heads page names a next page but carries no rows");
+        return page.next;
+    }
+    /** The assembled answer, in the unpaged answer's shape. */
+    whole() {
+        if (!this.#first)
+            throw malformed("no heads page arrived");
+        return { count: this.#first.count, digest: this.#first.digest, heads: [...this.#rows] };
+    }
+}
+/** Complete lines of one NDJSON body as they arrive; a partial trailing line is not yielded. */
+async function* bodyLines(body) {
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let buffered = "";
+    try {
+        for (;;) {
+            const chunk = await reader.read();
+            buffered += decoder.decode(chunk.value, { stream: !chunk.done });
+            let start = 0;
+            for (let newline = buffered.indexOf("\n"); newline !== -1; newline = buffered.indexOf("\n", start)) {
+                yield buffered.slice(start, newline);
+                start = newline + 1;
+            }
+            buffered = buffered.slice(start);
+            if (chunk.done)
+                return;
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+    }
+}
+function lineRecord(line) {
+    try {
+        const record = JSON.parse(line);
+        return typeof record === "object" && record !== null && !Array.isArray(record) ? record : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The prefix every document line the host writes begins with; any other line is parsed here. */
+const DOC_LINE = '{"kind":"doc",';
+/**
+ * One snapshot body stitched from its pages, in the unpaged grammar: the first page's header,
+ * every page's document lines in order, and the last page's `end` terminator. A later page's
+ * header must state the first page's count and digest and is dropped; a `page` terminator must
+ * count the document lines its page carried and names the cursor `open` fetches next. Anything
+ * else passes through verbatim for the snapshot parser to judge, and a page that fails to open
+ * or ends early ends the stitched body without its terminator, which the parser reports as
+ * truncation. Cancelling the stitched body cancels the page being read.
+ */
+export function stitchSnapshotPages(first, open) {
+    async function* lines() {
+        let body = first;
+        let header;
+        for (;;) {
+            let index = 0;
+            let documents = 0;
+            let next;
+            for await (const line of bodyLines(body)) {
+                if (index++ === 0 && header !== undefined) {
+                    const record = lineRecord(line);
+                    if (record?.kind !== "snapshot" || record.count !== header.count || record.digest !== header.digest)
+                        throw malformed("snapshot pages disagree on the header");
+                    continue;
+                }
+                if (line.startsWith(DOC_LINE)) {
+                    documents += 1;
+                    yield `${line}\n`;
+                    continue;
+                }
+                const record = lineRecord(line);
+                if (header === undefined && record?.kind === "snapshot")
+                    header = { count: record.count, digest: record.digest };
+                if (record?.kind === "page") {
+                    if (record.count !== documents || documents === 0 || !isCursor(record.next))
+                        throw malformed("snapshot page terminator disagrees with its page");
+                    next = record.next;
+                    break;
+                }
+                yield `${line}\n`;
+            }
+            if (next === undefined)
+                return;
+            body = await open(next);
+        }
+    }
+    const produced = lines();
+    const encoder = new TextEncoder();
+    return new ReadableStream({
+        async pull(controller) {
+            try {
+                const step = await produced.next();
+                if (step.done)
+                    controller.close();
+                else
+                    controller.enqueue(encoder.encode(step.value));
+            }
+            catch (error) {
+                controller.error(error);
+            }
+        },
+        async cancel() {
+            await produced.return(undefined);
+        },
+    });
+}
+//# sourceMappingURL=paged-reads.js.map

package/dist/hosted-transport/paged-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paged-reads.js","sourceRoot":"","sources":["../../src/hosted-transport/paged-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpF,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAuB,IAAI,CAAC,MAAM;IAClF,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAE,CAAC;IAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,KAAK,CAAC,EAAU,EAAE,MAAmB;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AACD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAG1C,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC;AAClG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzG,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAyB,EACzB,OAA+G;IAE/G,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,IAAI,QAAQ,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAClE,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAUD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,qBAAqB,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,KAAsF,CAAC;IACpG,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzH,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAClJ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,SAAS,CAAC,mCAAmC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,GAAiD,CAAC;QAC/D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAC9G,MAAM,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACnH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACpH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACrB,MAAM,CAAwB;IACrB,KAAK,GAAmB,EAAE,CAAC;IAEpC,gGAAgG;IAChG,GAAG,CAAC,IAAe;QACjB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,+CAA+C,CAAC,CAAC;QACjI,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,SAAS,CAAC,qCAAqC,CAAC,CAAC;YACvG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK;YAAE,MAAM,SAAS,CAAC,mCAAmC,KAAK,CAAC,KAAK,uBAAuB,CAAC,CAAC;QAC5H,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,oDAAoD,CAAC,CAAC;QAC9H,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,2DAA2D;IAC3D,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1F,CAAC;CACF;AAED,gGAAgG;AAChG,KAAK,SAAS,CAAC,CAAC,SAAS,CAAC,IAAgC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnG,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACrC,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC;YACtB,CAAC;YACD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO;QACzB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiC,EACjC,IAA6D;IAE7D,KAAK,SAAS,CAAC,CAAC,KAAK;QACnB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,MAAuD,CAAC;QAC5D,SAAS,CAAC;YACR,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,IAAwB,CAAC;YAC7B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAI,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;oBAChC,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;wBACjG,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAC;oBAC3D,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,SAAS,IAAI,CAAC,CAAC;oBACf,MAAM,GAAG,IAAI,IAAI,CAAC;oBAClB,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU;oBAAE,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjH,IAAI,MAAM,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC5B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;wBACzE,MAAM,SAAS,CAAC,kDAAkD,CAAC,CAAC;oBACtE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,MAAM,GAAG,IAAI,IAAI,CAAC;YACpB,CAAC;YACD,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO;YAC/B,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI;oBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;oBAC7B,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM;YACV,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}