@tier0/sdk-v2 0.8.0 → 0.9.1

package/dist/cjs/streams/messages.js

@@ -0,0 +1,514 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StreamMessagesClient = exports.StreamMessageError = void 0;
+const runtime_context_js_1 = require("../runtime-context.js");
+const runtime_js_1 = require("../runtime.js");
+const transport_js_1 = require("./transport.js");
+class StreamMessageError extends Error {
+    errorCode;
+    retryable = false;
+    constructor(errorCode, message) {
+        super(message);
+        this.errorCode = errorCode;
+        this.name = 'StreamMessageError';
+    }
+}
+exports.StreamMessageError = StreamMessageError;
+const encoder = new TextEncoder();
+const uuid = /^(?!00000000-0000-0000-0000-000000000000$)[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+const MAX_PAYLOAD = 60 * 1024;
+const MAX_ENVELOPE = 64 * 1024;
+const MAX_FLUSH_TIMEOUT_MS = 10_000;
+function plain(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value) &&
+        [Object.prototype, null].includes(Object.getPrototypeOf(value));
+}
+function json(value, seen = new Set()) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return true;
+    if (typeof value === 'number')
+        return Number.isFinite(value);
+    if ((!plain(value) && !Array.isArray(value)) || seen.has(value))
+        return false;
+    seen.add(value);
+    const valid = (Array.isArray(value) ? Array.from(value) : Object.values(value)).every(v => json(v, seen));
+    seen.delete(value);
+    return valid;
+}
+function fail(code, message) {
+    return new StreamMessageError(`STREAM_MESSAGE_${code}`, message);
+}
+function envelope(value, maxPayload) {
+    if (!plain(value) || Object.keys(value).some(k => !['version', 'messageId', 'correlationId', 'payload'].includes(k)) ||
+        value.version !== 'stream-messages/v1' || typeof value.messageId !== 'string' || !uuid.test(value.messageId) ||
+        (value.correlationId !== undefined && (typeof value.correlationId !== 'string' ||
+            encoder.encode(value.correlationId).length > 128 || /[\u0000\r\n]/.test(value.correlationId))) ||
+        !json(value.payload))
+        return false;
+    return encoder.encode(JSON.stringify(value.payload)).length <= maxPayload;
+}
+/** One permission-scoped session. Every connection gets a fresh key and JWT. */
+class MessageSession {
+    transport;
+    topic;
+    mode;
+    report;
+    remove;
+    handler;
+    disposed = false;
+    runtime;
+    connection;
+    subscription;
+    connecting;
+    watching;
+    abort = new AbortController();
+    reconnectTimer;
+    expiryTimer;
+    started = false;
+    connected = false;
+    attempts = 0;
+    subject = '';
+    payloadLimit = MAX_PAYLOAD;
+    expiresAt = 0;
+    brokerError;
+    disposing;
+    removeRuntimeListener;
+    constructor(transport, topic, mode, report, remove, handler) {
+        this.transport = transport;
+        this.topic = topic;
+        this.mode = mode;
+        this.report = report;
+        this.remove = remove;
+        this.handler = handler;
+        this.runtime = transport.runtime();
+        if (this.runtime)
+            this.removeRuntimeListener = (0, runtime_js_1.onAppRuntimeDispose)(this.runtime, () => { void this.dispose(); });
+    }
+    async ready() {
+        if (this.disposed)
+            throw fail('DISPOSED', 'Stream messages session disposed.');
+        if (this.connected)
+            return;
+        if (this.connecting)
+            return this.connecting;
+        if (this.started)
+            throw fail('DISCONNECTED', 'Stream messages disconnected.');
+        this.started = true;
+        try {
+            await this.connect();
+            if (this.disposed)
+                throw fail('DISPOSED', 'Stream messages session disposed.');
+        }
+        catch (error) {
+            await this.dispose();
+            throw error;
+        }
+    }
+    connect() {
+        const operation = this.open();
+        this.connecting = operation;
+        return operation.finally(() => { if (this.connecting === operation)
+            this.connecting = undefined; });
+    }
+    async open() {
+        let nc;
+        let key;
+        let watched = false;
+        try {
+            // HTTP-only Cloud Apps must not load broker libraries or require their dependencies.
+            const [{ jwtAuthenticator, wsconnect }, { createUser }] = await Promise.all([
+                Promise.resolve().then(() => __importStar(require('@nats-io/nats-core'))),
+                Promise.resolve().then(() => __importStar(require('@nats-io/nkeys'))),
+            ]);
+            if (this.disposed)
+                return;
+            const connectionKey = createUser();
+            key = connectionKey;
+            const appId = this.transport.runtime()?.appId ?? (0, runtime_context_js_1.getCurrentAppId)();
+            const request = {
+                appId, topics: [{ topic: this.topic, publish: this.mode === 'publish', subscribe: this.mode === 'subscribe' }],
+                clientPublicKey: connectionKey.getPublicKey(),
+            };
+            const { value, ok } = await this.transport.post('/openapi/v2/stream-messages/connect', request, this.abort.signal);
+            const ticket = this.ticket(value, ok);
+            if (this.disposed)
+                return;
+            const expiresAt = Date.parse(ticket.expiresAt);
+            const permission = ticket.permissions[0];
+            this.subject = (this.mode === 'publish' ? permission.publishSubject : permission.subscribeSubject);
+            this.payloadLimit = ticket.maxPayloadBytes;
+            // Disable library reconnection so it cannot buffer writes or reuse expired JWTs.
+            nc = await wsconnect({
+                servers: [ticket.url], reconnect: false, waitOnFirstConnect: false,
+                ignoreClusterUpdates: true, timeout: Math.max(1, Math.min(MAX_FLUSH_TIMEOUT_MS, expiresAt - Date.now())),
+                authenticator: jwtAuthenticator(ticket.userJwt, () => connectionKey.getSeed()),
+            });
+            if (this.disposed) {
+                await nc.close();
+                return;
+            }
+            this.connection = nc;
+            this.expiresAt = expiresAt;
+            this.brokerError = undefined;
+            watched = true;
+            this.watching = this.watch(nc, connectionKey);
+            // Renewal also bounds the initial handshake; it must not wait for its first PONG.
+            const untilExpiry = expiresAt - Date.now();
+            this.expiryTimer = setTimeout(() => {
+                if (this.connection !== nc)
+                    return;
+                this.connected = false;
+                void nc.close();
+            }, Math.max(1, Math.min(2_147_483_647, untilExpiry - Math.min(5_000, untilExpiry / 10))));
+            if (this.mode === 'subscribe') {
+                this.subscription = nc.subscribe(this.subject, { callback: (error, msg) => {
+                        if (this.disposed || this.connection !== nc || Date.now() >= expiresAt)
+                            return;
+                        if (error) {
+                            this.report(fail('SUBSCRIBE_FAILED', 'Stream subscription failed.'));
+                            return;
+                        }
+                        try {
+                            if (msg.data.length > MAX_ENVELOPE)
+                                throw fail('INVALID_ENVELOPE', 'Stream message envelope exceeds limit.');
+                            const value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(msg.data));
+                            if (!envelope(value, this.payloadLimit))
+                                throw fail('INVALID_ENVELOPE', 'Invalid Stream message envelope.');
+                            // Identity comes from the authorized physical subject; never accept identity fields in the envelope.
+                            const prefix = this.subject.slice(0, -1);
+                            if (!msg.subject.startsWith(prefix) || !/^[^.\s*>]+$/.test(msg.subject.slice(prefix.length))) {
+                                throw fail('INVALID_SUBJECT', 'Invalid Stream message subject.');
+                            }
+                            let result;
+                            try {
+                                result = this.handler(value);
+                            }
+                            catch {
+                                this.report(fail('HANDLER_FAILED', 'Stream message handler failed.'));
+                                return;
+                            }
+                            Promise.resolve(result).catch(() => {
+                                if (!this.disposed)
+                                    this.report(fail('HANDLER_FAILED', 'Stream message handler failed.'));
+                            });
+                        }
+                        catch (error) {
+                            this.report(error instanceof StreamMessageError ? error : fail('INVALID_ENVELOPE', 'Invalid Stream message envelope.'));
+                        }
+                    } });
+            }
+            await this.flush(nc, false);
+            if (this.disposed)
+                return;
+            if (nc.isClosed() || this.connection !== nc)
+                throw fail('CONNECT_FAILED', 'Stream messages connection failed.');
+            this.connected = true;
+            this.attempts = 0;
+        }
+        catch (error) {
+            if (nc)
+                await nc.close();
+            if (this.disposed)
+                return;
+            throw error instanceof StreamMessageError ? error : fail('CONNECT_FAILED', 'Stream messages connection failed.');
+        }
+        finally {
+            // Before a successful handoff, this attempt owns its key, including when
+            // the issuer or dial fails. A live connection's watcher owns later wiping.
+            if (!watched) {
+                await nc?.close();
+                key?.clear();
+            }
+        }
+    }
+    async flush(nc, publishing) {
+        const failure = () => publishing
+            ? fail('RESULT_UNKNOWN', 'Stream publish result unknown; do not automatically retry.')
+            : fail('CONNECT_FAILED', 'Stream messages connection failed.');
+        let timer;
+        let stopped;
+        try {
+            if (this.disposed || nc.isClosed() || this.expiresAt <= Date.now())
+                throw failure();
+            const deadline = new Promise((_resolve, reject) => {
+                stopped = () => reject(failure());
+                this.abort.signal.addEventListener('abort', stopped, { once: true });
+                if (this.abort.signal.aborted)
+                    stopped();
+                timer = setTimeout(stopped, Math.max(1, Math.min(MAX_FLUSH_TIMEOUT_MS, this.expiresAt - Date.now())));
+            });
+            await Promise.race([nc.flush(), deadline, nc.closed().then(() => { throw failure(); })]);
+        }
+        catch {
+            const watching = this.connection === nc ? this.watching : undefined;
+            if (this.connection === nc)
+                this.connected = false;
+            // Stop the transport and wipe its key before reporting a failed/unknown operation.
+            await nc.close();
+            await watching;
+            throw failure();
+        }
+        finally {
+            clearTimeout(timer);
+            if (stopped)
+                this.abort.signal.removeEventListener('abort', stopped);
+        }
+    }
+    ticket(value, ok) {
+        if (!ok)
+            throw fail('CONNECT_DENIED', 'Stream messages connection denied.');
+        if (!plain(value) || value.contractVersion !== 'stream-messages/v1' ||
+            typeof value.url !== 'string' || typeof value.userJwt !== 'string' || !value.userJwt ||
+            typeof value.expiresAt !== 'string' || !/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d+)?(?:Z|[+-]\d\d:\d\d)$/.test(value.expiresAt) ||
+            !(Date.parse(value.expiresAt) > Date.now()) ||
+            !Number.isSafeInteger(value.maxPayloadBytes) || value.maxPayloadBytes < 1 || value.maxPayloadBytes > MAX_PAYLOAD ||
+            !Array.isArray(value.permissions) || value.permissions.length !== 1) {
+            throw fail('CONNECT_PROTOCOL_ERROR', 'Invalid Stream messages connection response.');
+        }
+        const url = new URL(value.url);
+        if (url.protocol !== 'wss:' || url.username || url.password || url.hash || url.search) {
+            throw fail('CONNECT_PROTOCOL_ERROR', 'Stream messages requires a credential-free WSS URL.');
+        }
+        const permission = value.permissions[0];
+        if (!plain(permission) || permission.topic !== this.topic)
+            throw fail('CONNECT_PROTOCOL_ERROR', 'Invalid topic permission.');
+        // Subject layout belongs to SYS. Only check NATS syntax and requested access.
+        const validSubject = (subject, mode) => {
+            if (typeof subject !== 'string' || !subject)
+                return false;
+            if (mode === 'subscribe' && !subject.endsWith('.*'))
+                return false;
+            const parts = subject.split('.');
+            return parts.every((part, index) => !!part &&
+                (mode === 'subscribe' && index === parts.length - 1 && part === '*' || !/[\s*>]/.test(part)));
+        };
+        const publish = permission.publishSubject;
+        const subscribe = permission.subscribeSubject;
+        if ((publish !== undefined && !validSubject(publish, 'publish')) ||
+            (subscribe !== undefined && !validSubject(subscribe, 'subscribe')) ||
+            (this.mode === 'publish' ? !publish || !!subscribe : !subscribe || !!publish)) {
+            throw fail('CONNECT_PROTOCOL_ERROR', 'Invalid scoped topic subjects.');
+        }
+        return value;
+    }
+    async watch(nc, key) {
+        try {
+            for await (const status of nc.status()) {
+                if (this.disposed || this.connection !== nc)
+                    break;
+                if (status.type === 'disconnect' || status.type === 'close' || status.type === 'staleConnection')
+                    this.connected = false;
+                if (status.type === 'error' || status.type === 'slowConsumer') {
+                    this.brokerError = fail(status.type === 'error' ? 'BROKER_ERROR' : 'SLOW_CONSUMER', 'Stream messages asynchronous broker error.');
+                    this.report(this.brokerError);
+                }
+            }
+            const error = await nc.closed();
+            if (error && !this.disposed)
+                this.report(fail('CONNECTION_LOST', 'Stream messages connection lost.'));
+        }
+        catch {
+            if (!this.disposed)
+                this.report(fail('CONNECTION_LOST', 'Stream messages connection lost.'));
+        }
+        finally {
+            // Close even if the status iterator failed. A replacement must never be
+            // issued while the prior, potentially wider, authenticated socket is live.
+            await nc.close();
+            key.clear();
+            if (this.connection === nc) {
+                this.connection = undefined;
+                this.connected = false;
+                this.subscription = undefined;
+                clearTimeout(this.expiryTimer);
+                this.scheduleReconnect();
+            }
+        }
+    }
+    scheduleReconnect() {
+        if (this.disposed || this.reconnectTimer)
+            return;
+        this.reconnectTimer = setTimeout(() => {
+            this.reconnectTimer = undefined;
+            if (this.disposed)
+                return;
+            void this.connect().catch(error => {
+                this.report(error instanceof StreamMessageError ? error : fail('CONNECT_FAILED', 'Stream messages reconnection failed.'));
+                this.scheduleReconnect();
+            });
+        }, Math.min(30_000, 500 * 2 ** Math.min(this.attempts++, 6)));
+    }
+    async publish(value) {
+        // Only the very first publish may establish a connection. Subsequent disconnected writes fail.
+        if (!this.started)
+            await this.ready();
+        const nc = this.connection;
+        if (this.disposed || !this.connected || !nc || nc.isClosed())
+            throw fail('DISCONNECTED', 'Stream messages disconnected.');
+        if (!envelope(value, this.payloadLimit))
+            throw fail('INVALID_ENVELOPE', 'Invalid Stream message envelope or payload limit exceeded.');
+        const bytes = encoder.encode(JSON.stringify(value));
+        if (bytes.length > MAX_ENVELOPE)
+            throw fail('PAYLOAD_TOO_LARGE', 'Stream message envelope exceeds limit.');
+        this.brokerError = undefined;
+        try {
+            nc.publish(this.subject, bytes);
+            await this.flush(nc, true);
+            if (this.brokerError)
+                throw this.brokerError;
+            if (!this.connected || this.connection !== nc)
+                throw fail('RESULT_UNKNOWN', 'Stream publish result unknown.');
+        }
+        catch (error) {
+            throw error instanceof StreamMessageError ? error : fail('RESULT_UNKNOWN', 'Stream publish result unknown; do not automatically retry.');
+        }
+    }
+    dispose() {
+        if (this.disposing)
+            return this.disposing;
+        this.disposed = true;
+        this.connected = false;
+        this.abort.abort();
+        this.removeRuntimeListener?.();
+        clearTimeout(this.reconnectTimer);
+        clearTimeout(this.expiryTimer);
+        this.subscription?.unsubscribe();
+        this.disposing = (async () => {
+            await this.connection?.close();
+            await this.connecting?.catch(() => undefined);
+            await this.watching;
+            this.connection = undefined;
+            this.remove();
+        })();
+        return this.disposing;
+    }
+}
+class StreamMessagesClient {
+    transport;
+    sessions = new Set();
+    listeners = new Set();
+    disposed = false;
+    disposing;
+    constructor(transport = new transport_js_1.StreamTransport()) {
+        this.transport = transport;
+    }
+    onError(handler) {
+        if (this.disposed)
+            throw fail('DISPOSED', 'Stream messages client disposed.');
+        this.listeners.add(handler);
+        return () => { this.listeners.delete(handler); };
+    }
+    use(selector) {
+        if (!plain(selector) || Object.keys(selector).some(k => k !== 'topic') ||
+            typeof selector.topic !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,127}$/.test(selector.topic)) {
+            throw new TypeError('Tier0 SDK: invalid logical Stream topic.');
+        }
+        const topic = selector.topic;
+        let publisher;
+        const session = (mode, handler, onError) => {
+            if (this.disposed)
+                throw fail('DISPOSED', 'Stream messages client disposed.');
+            const report = (error) => {
+                const listeners = new Set(this.listeners);
+                if (onError)
+                    listeners.add(onError);
+                if (!listeners.size)
+                    console.error(error);
+                for (const listener of listeners) {
+                    try {
+                        listener(error);
+                    }
+                    catch {
+                        console.error(fail('ERROR_HANDLER_FAILED', 'Stream messages error handler failed.'));
+                    }
+                }
+            };
+            const value = new MessageSession(this.transport, topic, mode, report, () => this.sessions.delete(value), handler);
+            this.sessions.add(value);
+            return value;
+        };
+        return {
+            publish: async (payload, options = {}) => {
+                if (this.disposed)
+                    throw fail('DISPOSED', 'Stream messages client disposed.');
+                if (!plain(options) || Object.keys(options).some(k => !['messageId', 'correlationId'].includes(k)) ||
+                    (options.messageId !== undefined && typeof options.messageId !== 'string') ||
+                    (options.correlationId !== undefined && typeof options.correlationId !== 'string')) {
+                    throw new TypeError('Tier0 SDK: unsupported Stream publish option.');
+                }
+                const message = {
+                    version: 'stream-messages/v1', messageId: options.messageId ?? crypto.randomUUID(),
+                    ...(options.correlationId === undefined ? {} : { correlationId: options.correlationId }), payload,
+                };
+                if (!envelope(message, MAX_PAYLOAD))
+                    throw fail('INVALID_ENVELOPE', 'Invalid Stream message envelope.');
+                if (encoder.encode(JSON.stringify(message)).length > MAX_ENVELOPE)
+                    throw fail('PAYLOAD_TOO_LARGE', 'Stream message envelope exceeds limit.');
+                if (publisher?.disposed) {
+                    const previous = publisher;
+                    await previous.dispose();
+                    if (previous.runtime !== this.transport.runtime())
+                        throw fail('DISCONNECTED', 'Stream messages disconnected.');
+                    if (publisher === previous)
+                        publisher = undefined;
+                }
+                if (!publisher)
+                    publisher = session('publish');
+                await publisher.publish(message);
+                return message;
+            },
+            subscribe: async (handler, options = {}) => {
+                if (typeof handler !== 'function' || !plain(options) || Object.keys(options).some(k => k !== 'onError') ||
+                    (options.onError !== undefined && typeof options.onError !== 'function'))
+                    throw new TypeError('Tier0 SDK: invalid Stream subscription.');
+                const value = session('subscribe', handler, options.onError);
+                await value.ready();
+                return value;
+            },
+        };
+    }
+    dispose() {
+        if (this.disposing)
+            return this.disposing;
+        this.disposed = true;
+        this.disposing = Promise.all([...this.sessions].map(session => session.dispose())).then(() => {
+            this.listeners.clear();
+        });
+        return this.disposing;
+    }
+}
+exports.StreamMessagesClient = StreamMessagesClient;
+//# sourceMappingURL=messages.js.map

package/dist/cjs/streams/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/streams/messages.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,8DAAwD;AACxD,8CAAoD;AAEpD,iDAAiD;AAyBjD,MAAa,kBAAmB,SAAQ,KAAK;IAEtB;IADZ,SAAS,GAAG,KAAK,CAAC;IAC3B,YAAqB,SAAiB,EAAE,OAAe;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,cAAS,GAAT,SAAS,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAND,gDAMC;AAcD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,IAAI,GAAG,yGAAyG,CAAC;AACvH,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9B,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/B,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,OAAO,IAAI,GAAG,EAAW;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe;IACzC,OAAO,IAAI,kBAAkB,CAAC,kBAAkB,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,UAAkB;IAClD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChH,KAAK,CAAC,OAAO,KAAK,oBAAoB,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5G,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAChG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC;AAC5E,CAAC;AAED,gFAAgF;AAChF,MAAM,cAAc;IAqBR;IACA;IACA;IACA;IACA;IACA;IAzBV,QAAQ,GAAG,KAAK,CAAC;IACR,OAAO,CAAyC;IACjD,UAAU,CAAkB;IAC5B,YAAY,CAAgB;IAC5B,UAAU,CAAiB;IAC3B,QAAQ,CAAiB;IACzB,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9B,cAAc,CAAiC;IAC/C,WAAW,CAAiC;IAC5C,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,EAAE,CAAC;IACb,YAAY,GAAG,WAAW,CAAC;IAC3B,SAAS,GAAG,CAAC,CAAC;IACd,WAAW,CAAsB;IACjC,SAAS,CAAiB;IAC1B,qBAAqB,CAAc;IAE3C,YACU,SAA0B,EAC1B,KAAa,EACb,IAA6B,EAC7B,MAAiC,EACjC,MAAkB,EAClB,OAAwD;QALxD,cAAS,GAAT,SAAS,CAAiB;QAC1B,UAAK,GAAL,KAAK,CAAQ;QACb,SAAI,GAAJ,IAAI,CAAyB;QAC7B,WAAM,GAAN,MAAM,CAA2B;QACjC,WAAM,GAAN,MAAM,CAAY;QAClB,YAAO,GAAP,OAAO,CAAiD;QAEhE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,qBAAqB,GAAG,IAAA,gCAAmB,EAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACtD,CAAC;IAEO,OAAO;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,EAA8B,CAAC;QACnC,IAAI,GAAwB,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,qFAAqF;YACrF,MAAM,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;kEACnE,oBAAoB;kEAAU,gBAAgB;aACtD,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;YACnC,GAAG,GAAG,aAAa,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,IAAI,IAAA,oCAAe,GAAE,CAAC;YACnE,MAAM,OAAO,GAAsD;gBACjE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9G,eAAe,EAAE,aAAa,CAAC,YAAY,EAAE;aAC9C,CAAC;YACF,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qCAAqC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAE,CAAC;YACpG,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC;YAC3C,iFAAiF;YACjF,EAAE,GAAG,MAAM,SAAS,CAAC;gBACnB,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK;gBAClE,oBAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxG,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;aAC/E,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;YAC9C,kFAAkF;YAClF,MAAM,WAAW,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;gBACjC,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE;oBAAE,OAAO;gBACnC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,KAAK,EAAG,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;wBACxE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS;4BAAE,OAAO;wBAC/E,IAAI,KAAK,EAAE,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC,CAAC;4BAAC,OAAO;wBAAC,CAAC;wBAC5F,IAAI,CAAC;4BACH,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,YAAY;gCAAE,MAAM,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;4BAC7G,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;4BAC9F,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC;gCAAE,MAAM,IAAI,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;4BAC5G,qGAAqG;4BACrG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;4BACzC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gCAC7F,MAAM,IAAI,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;4BACnE,CAAC;4BACD,IAAI,MAA4B,CAAC;4BACjC,IAAI,CAAC;gCAAC,MAAM,GAAG,IAAI,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC;4BAAC,CAAC;4BACtC,MAAM,CAAC;gCAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC,CAAC;gCAAC,OAAO;4BAAC,CAAC;4BACxF,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gCACjC,IAAI,CAAC,IAAI,CAAC,QAAQ;oCAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC,CAAC;4BAC5F,CAAC,CAAC,CAAC;wBACL,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,IAAI,CAAC,MAAM,CAAC,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC,CAAC;wBAC1H,CAAC;oBACH,CAAC,EAAE,CAAC,CAAC;YACP,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE;gBAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;YAChH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,EAAE;gBAAE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,MAAM,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;QACnH,CAAC;gBAAS,CAAC;YACT,yEAAyE;YACzE,2EAA2E;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;gBAClB,GAAG,EAAE,KAAK,EAAE,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAkB,EAAE,UAAmB;QACzD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC;YACtF,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;QACjE,IAAI,KAAgD,CAAC;QACrD,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,MAAM,OAAO,EAAE,CAAC;YACpF,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACvD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,EAAE,CAAC;gBACzC,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACxG,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE;gBAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACnD,mFAAmF;YACnF,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,QAAQ,CAAC;YACf,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAc,EAAE,EAAW;QACxC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,oBAAoB;YAC/D,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;YACpF,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,+DAA+D,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAC7H,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3C,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAK,KAAK,CAAC,eAA0B,GAAG,CAAC,IAAK,KAAK,CAAC,eAA0B,GAAG,WAAW;YACxI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,CAAC,wBAAwB,EAAE,8CAA8C,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,IAAI,CAAC,wBAAwB,EAAE,qDAAqD,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,UAAU,GAAY,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;QAC7H,8EAA8E;QAC9E,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAE,IAA6B,EAAE,EAAE;YACvE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;gBACxC,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC;QAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC;QAC9C,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC5D,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAClE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,CAAC,wBAAwB,EAAE,gCAAgC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,KAA0B,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAkB,EAAE,GAAY;QAClD,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE;oBAAE,MAAM;gBACnD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;oBAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACzH,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC9D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;oBAClI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC,CAAC;QAC/F,CAAC;gBAAS,CAAC;YACT,wEAAwE;YACxE,2EAA2E;YAC3E,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;gBAC3B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;gBAC5B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QACjD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAChC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBAChC,IAAI,CAAC,MAAM,CAAC,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC,CAAC;gBAC1H,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAoB;QAChC,+FAA+F;QAC/F,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE;YAAE,MAAM,IAAI,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;QAC1H,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,CAAC,kBAAkB,EAAE,4DAA4D,CAAC,CAAC;QACtI,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;YAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;QAC3G,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC;YACH,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE;gBAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;QAChH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC/B,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,CAAC,QAAQ,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,MAAa,oBAAoB;IAKF;IAJrB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,QAAQ,GAAG,KAAK,CAAC;IACjB,SAAS,CAAiB;IAClC,YAA6B,YAAY,IAAI,8BAAe,EAAE;QAAjC,cAAS,GAAT,SAAS,CAAwB;IAAG,CAAC;IAElE,OAAO,CAAC,OAAkC;QACxC,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,GAAG,CAAuB,QAA2B;QACnD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC;YAClE,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,IAAI,SAAqC,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,IAA6B,EAAE,OAAwD,EAAE,OAAmC,EAAE,EAAE;YAC/I,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAE,EAAE;gBAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,OAAO;oBAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,CAAC,SAAS,CAAC,IAAI;oBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,IAAI,CAAC;wBAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,uCAAuC,CAAC,CAAC,CAAC;oBAAC,CAAC;gBAC1H,CAAC;YACH,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAClH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,OAAO;YACL,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;gBACvC,IAAI,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;gBAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC9F,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC;oBAC1E,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACvF,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,OAAO,GAA2B;oBACtC,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;oBAClF,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO;iBAClG,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;oBAAE,MAAM,IAAI,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;gBACxG,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,YAAY;oBAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;gBAC7I,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,SAAS,CAAC;oBAC3B,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACzB,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;wBAAE,MAAM,IAAI,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;oBAC/G,IAAI,SAAS,KAAK,QAAQ;wBAAE,SAAS,GAAG,SAAS,CAAC;gBACpD,CAAC;gBACD,IAAI,CAAC,SAAS;oBAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC/C,MAAM,SAAS,CAAC,OAAO,CAAC,OAAwB,CAAC,CAAC;gBAClD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;gBACzC,IAAI,OAAO,OAAO,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;oBACnG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBAC7I,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,OAAyD,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/G,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;YAC3F,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AA5ED,oDA4EC","sourcesContent":["import type { NatsConnection, Subscription } from '@nats-io/nats-core';\nimport type { KeyPair } from '@nats-io/nkeys';\nimport { getCurrentAppId } from '../runtime-context.js';\nimport { onAppRuntimeDispose } from '../runtime.js';\nimport type { StreamJSON } from './requests.js';\nimport { StreamTransport } from './transport.js';\nimport type { components } from './contract.generated.js';\n\nexport interface StreamMessage<Payload = StreamJSON> {\n  version: 'stream-messages/v1';\n  messageId: string;\n  correlationId?: string;\n  payload: Payload;\n}\nexport interface StreamMessagePublishOptions {\n  messageId?: string;\n  correlationId?: string;\n}\nexport interface StreamMessageSubscription {\n  readonly disposed: boolean;\n  dispose(): Promise<void>;\n}\nexport type StreamMessageErrorHandler = (error: StreamMessageError) => void;\nexport interface StreamMessageHandle<Payload = StreamJSON> {\n  /** Resolves after broker flush, not after receiver acknowledgement. No retry or offline queue. */\n  publish(payload: Payload, options?: StreamMessagePublishOptions): Promise<StreamMessage<Payload>>;\n  subscribe(handler: (message: StreamMessage<Payload>) => void | Promise<void>, options?: {\n    onError?: StreamMessageErrorHandler;\n  }): Promise<StreamMessageSubscription>;\n}\nexport class StreamMessageError extends Error {\n  readonly retryable = false;\n  constructor(readonly errorCode: string, message: string) {\n    super(message);\n    this.name = 'StreamMessageError';\n  }\n}\n\n// SYS omits the ungranted direction; Swagger currently marks both fields required.\ninterface Permission extends Partial<Omit<components['schemas']['StreamMessageGrantedTopic'], 'topic'>> {\n  topic: string;\n}\ninterface Ticket extends Omit<components['schemas']['StreamMessagesConnectResp'], 'contractVersion' | 'permissions'> {\n  contractVersion: 'stream-messages/v1';\n  url: string;\n  userJwt: string;\n  expiresAt: string;\n  permissions: Permission[];\n  maxPayloadBytes: number;\n}\nconst encoder = new TextEncoder();\nconst uuid = /^(?!00000000-0000-0000-0000-000000000000$)[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;\nconst MAX_PAYLOAD = 60 * 1024;\nconst MAX_ENVELOPE = 64 * 1024;\nconst MAX_FLUSH_TIMEOUT_MS = 10_000;\n\nfunction plain(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value) &&\n    [Object.prototype, null].includes(Object.getPrototypeOf(value));\n}\nfunction json(value: unknown, seen = new Set<unknown>()): boolean {\n  if (value === null || typeof value === 'string' || typeof value === 'boolean') return true;\n  if (typeof value === 'number') return Number.isFinite(value);\n  if ((!plain(value) && !Array.isArray(value)) || seen.has(value)) return false;\n  seen.add(value);\n  const valid = (Array.isArray(value) ? Array.from(value) : Object.values(value)).every(v => json(v, seen));\n  seen.delete(value);\n  return valid;\n}\nfunction fail(code: string, message: string): StreamMessageError {\n  return new StreamMessageError(`STREAM_MESSAGE_${code}`, message);\n}\nfunction envelope(value: unknown, maxPayload: number): value is StreamMessage {\n  if (!plain(value) || Object.keys(value).some(k => !['version', 'messageId', 'correlationId', 'payload'].includes(k)) ||\n      value.version !== 'stream-messages/v1' || typeof value.messageId !== 'string' || !uuid.test(value.messageId) ||\n      (value.correlationId !== undefined && (typeof value.correlationId !== 'string' ||\n        encoder.encode(value.correlationId).length > 128 || /[\\u0000\\r\\n]/.test(value.correlationId))) ||\n      !json(value.payload)) return false;\n  return encoder.encode(JSON.stringify(value.payload)).length <= maxPayload;\n}\n\n/** One permission-scoped session. Every connection gets a fresh key and JWT. */\nclass MessageSession implements StreamMessageSubscription {\n  disposed = false;\n  readonly runtime: ReturnType<StreamTransport['runtime']>;\n  private connection?: NatsConnection;\n  private subscription?: Subscription;\n  private connecting?: Promise<void>;\n  private watching?: Promise<void>;\n  private abort = new AbortController();\n  private reconnectTimer?: ReturnType<typeof setTimeout>;\n  private expiryTimer?: ReturnType<typeof setTimeout>;\n  private started = false;\n  private connected = false;\n  private attempts = 0;\n  private subject = '';\n  private payloadLimit = MAX_PAYLOAD;\n  private expiresAt = 0;\n  private brokerError?: StreamMessageError;\n  private disposing?: Promise<void>;\n  private removeRuntimeListener?: () => void;\n\n  constructor(\n    private transport: StreamTransport,\n    private topic: string,\n    private mode: 'publish' | 'subscribe',\n    private report: StreamMessageErrorHandler,\n    private remove: () => void,\n    private handler?: (value: StreamMessage) => void | Promise<void>,\n  ) {\n    this.runtime = transport.runtime();\n    if (this.runtime) this.removeRuntimeListener = onAppRuntimeDispose(this.runtime, () => { void this.dispose(); });\n  }\n\n  async ready(): Promise<void> {\n    if (this.disposed) throw fail('DISPOSED', 'Stream messages session disposed.');\n    if (this.connected) return;\n    if (this.connecting) return this.connecting;\n    if (this.started) throw fail('DISCONNECTED', 'Stream messages disconnected.');\n    this.started = true;\n    try {\n      await this.connect();\n      if (this.disposed) throw fail('DISPOSED', 'Stream messages session disposed.');\n    }\n    catch (error) { await this.dispose(); throw error; }\n  }\n\n  private connect(): Promise<void> {\n    const operation = this.open();\n    this.connecting = operation;\n    return operation.finally(() => { if (this.connecting === operation) this.connecting = undefined; });\n  }\n\n  private async open(): Promise<void> {\n    let nc: NatsConnection | undefined;\n    let key: KeyPair | undefined;\n    let watched = false;\n    try {\n      // HTTP-only Cloud Apps must not load broker libraries or require their dependencies.\n      const [{ jwtAuthenticator, wsconnect }, { createUser }] = await Promise.all([\n        import('@nats-io/nats-core'), import('@nats-io/nkeys'),\n      ]);\n      if (this.disposed) return;\n      const connectionKey = createUser();\n      key = connectionKey;\n      const appId = this.transport.runtime()?.appId ?? getCurrentAppId();\n      const request: components['schemas']['StreamMessagesConnectReq'] = {\n        appId, topics: [{ topic: this.topic, publish: this.mode === 'publish', subscribe: this.mode === 'subscribe' }],\n        clientPublicKey: connectionKey.getPublicKey(),\n      };\n      const { value, ok } = await this.transport.post('/openapi/v2/stream-messages/connect', request, this.abort.signal);\n      const ticket = this.ticket(value, ok);\n      if (this.disposed) return;\n      const expiresAt = Date.parse(ticket.expiresAt);\n      const permission = ticket.permissions[0];\n      this.subject = (this.mode === 'publish' ? permission.publishSubject : permission.subscribeSubject)!;\n      this.payloadLimit = ticket.maxPayloadBytes;\n      // Disable library reconnection so it cannot buffer writes or reuse expired JWTs.\n      nc = await wsconnect({\n        servers: [ticket.url], reconnect: false, waitOnFirstConnect: false,\n        ignoreClusterUpdates: true, timeout: Math.max(1, Math.min(MAX_FLUSH_TIMEOUT_MS, expiresAt - Date.now())),\n        authenticator: jwtAuthenticator(ticket.userJwt, () => connectionKey.getSeed()),\n      });\n      if (this.disposed) { await nc.close(); return; }\n      this.connection = nc;\n      this.expiresAt = expiresAt;\n      this.brokerError = undefined;\n      watched = true;\n      this.watching = this.watch(nc, connectionKey);\n      // Renewal also bounds the initial handshake; it must not wait for its first PONG.\n      const untilExpiry = expiresAt - Date.now();\n      this.expiryTimer = setTimeout(() => {\n        if (this.connection !== nc) return;\n        this.connected = false;\n        void nc!.close();\n      }, Math.max(1, Math.min(2_147_483_647, untilExpiry - Math.min(5_000, untilExpiry / 10))));\n      if (this.mode === 'subscribe') {\n        this.subscription = nc.subscribe(this.subject, { callback: (error, msg) => {\n          if (this.disposed || this.connection !== nc || Date.now() >= expiresAt) return;\n          if (error) { this.report(fail('SUBSCRIBE_FAILED', 'Stream subscription failed.')); return; }\n          try {\n            if (msg.data.length > MAX_ENVELOPE) throw fail('INVALID_ENVELOPE', 'Stream message envelope exceeds limit.');\n            const value: unknown = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(msg.data));\n            if (!envelope(value, this.payloadLimit)) throw fail('INVALID_ENVELOPE', 'Invalid Stream message envelope.');\n            // Identity comes from the authorized physical subject; never accept identity fields in the envelope.\n            const prefix = this.subject.slice(0, -1);\n            if (!msg.subject.startsWith(prefix) || !/^[^.\\s*>]+$/.test(msg.subject.slice(prefix.length))) {\n              throw fail('INVALID_SUBJECT', 'Invalid Stream message subject.');\n            }\n            let result: void | Promise<void>;\n            try { result = this.handler!(value); }\n            catch { this.report(fail('HANDLER_FAILED', 'Stream message handler failed.')); return; }\n            Promise.resolve(result).catch(() => {\n              if (!this.disposed) this.report(fail('HANDLER_FAILED', 'Stream message handler failed.'));\n            });\n          } catch (error) {\n            this.report(error instanceof StreamMessageError ? error : fail('INVALID_ENVELOPE', 'Invalid Stream message envelope.'));\n          }\n        } });\n      }\n      await this.flush(nc, false);\n      if (this.disposed) return;\n      if (nc.isClosed() || this.connection !== nc) throw fail('CONNECT_FAILED', 'Stream messages connection failed.');\n      this.connected = true;\n      this.attempts = 0;\n    } catch (error) {\n      if (nc) await nc.close();\n      if (this.disposed) return;\n      throw error instanceof StreamMessageError ? error : fail('CONNECT_FAILED', 'Stream messages connection failed.');\n    } finally {\n      // Before a successful handoff, this attempt owns its key, including when\n      // the issuer or dial fails. A live connection's watcher owns later wiping.\n      if (!watched) {\n        await nc?.close();\n        key?.clear();\n      }\n    }\n  }\n\n  private async flush(nc: NatsConnection, publishing: boolean): Promise<void> {\n    const failure = () => publishing\n      ? fail('RESULT_UNKNOWN', 'Stream publish result unknown; do not automatically retry.')\n      : fail('CONNECT_FAILED', 'Stream messages connection failed.');\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    let stopped: (() => void) | undefined;\n    try {\n      if (this.disposed || nc.isClosed() || this.expiresAt <= Date.now()) throw failure();\n      const deadline = new Promise<never>((_resolve, reject) => {\n        stopped = () => reject(failure());\n        this.abort.signal.addEventListener('abort', stopped, { once: true });\n        if (this.abort.signal.aborted) stopped();\n        timer = setTimeout(stopped, Math.max(1, Math.min(MAX_FLUSH_TIMEOUT_MS, this.expiresAt - Date.now())));\n      });\n      await Promise.race([nc.flush(), deadline, nc.closed().then(() => { throw failure(); })]);\n    } catch {\n      const watching = this.connection === nc ? this.watching : undefined;\n      if (this.connection === nc) this.connected = false;\n      // Stop the transport and wipe its key before reporting a failed/unknown operation.\n      await nc.close();\n      await watching;\n      throw failure();\n    } finally {\n      clearTimeout(timer);\n      if (stopped) this.abort.signal.removeEventListener('abort', stopped);\n    }\n  }\n\n  private ticket(value: unknown, ok: boolean): Ticket {\n    if (!ok) throw fail('CONNECT_DENIED', 'Stream messages connection denied.');\n    if (!plain(value) || value.contractVersion !== 'stream-messages/v1' ||\n        typeof value.url !== 'string' || typeof value.userJwt !== 'string' || !value.userJwt ||\n        typeof value.expiresAt !== 'string' || !/^\\d{4}-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d(?:\\.\\d+)?(?:Z|[+-]\\d\\d:\\d\\d)$/.test(value.expiresAt) ||\n        !(Date.parse(value.expiresAt) > Date.now()) ||\n        !Number.isSafeInteger(value.maxPayloadBytes) || (value.maxPayloadBytes as number) < 1 || (value.maxPayloadBytes as number) > MAX_PAYLOAD ||\n        !Array.isArray(value.permissions) || value.permissions.length !== 1) {\n      throw fail('CONNECT_PROTOCOL_ERROR', 'Invalid Stream messages connection response.');\n    }\n    const url = new URL(value.url);\n    if (url.protocol !== 'wss:' || url.username || url.password || url.hash || url.search) {\n      throw fail('CONNECT_PROTOCOL_ERROR', 'Stream messages requires a credential-free WSS URL.');\n    }\n    const permission: unknown = value.permissions[0];\n    if (!plain(permission) || permission.topic !== this.topic) throw fail('CONNECT_PROTOCOL_ERROR', 'Invalid topic permission.');\n    // Subject layout belongs to SYS. Only check NATS syntax and requested access.\n    const validSubject = (subject: unknown, mode: 'publish' | 'subscribe') => {\n      if (typeof subject !== 'string' || !subject) return false;\n      if (mode === 'subscribe' && !subject.endsWith('.*')) return false;\n      const parts = subject.split('.');\n      return parts.every((part, index) => !!part &&\n        (mode === 'subscribe' && index === parts.length - 1 && part === '*' || !/[\\s*>]/.test(part)));\n    };\n    const publish = permission.publishSubject;\n    const subscribe = permission.subscribeSubject;\n    if ((publish !== undefined && !validSubject(publish, 'publish')) ||\n        (subscribe !== undefined && !validSubject(subscribe, 'subscribe')) ||\n        (this.mode === 'publish' ? !publish || !!subscribe : !subscribe || !!publish)) {\n      throw fail('CONNECT_PROTOCOL_ERROR', 'Invalid scoped topic subjects.');\n    }\n    return value as unknown as Ticket;\n  }\n\n  private async watch(nc: NatsConnection, key: KeyPair): Promise<void> {\n    try {\n      for await (const status of nc.status()) {\n        if (this.disposed || this.connection !== nc) break;\n        if (status.type === 'disconnect' || status.type === 'close' || status.type === 'staleConnection') this.connected = false;\n        if (status.type === 'error' || status.type === 'slowConsumer') {\n          this.brokerError = fail(status.type === 'error' ? 'BROKER_ERROR' : 'SLOW_CONSUMER', 'Stream messages asynchronous broker error.');\n          this.report(this.brokerError);\n        }\n      }\n      const error = await nc.closed();\n      if (error && !this.disposed) this.report(fail('CONNECTION_LOST', 'Stream messages connection lost.'));\n    } catch {\n      if (!this.disposed) this.report(fail('CONNECTION_LOST', 'Stream messages connection lost.'));\n    } finally {\n      // Close even if the status iterator failed. A replacement must never be\n      // issued while the prior, potentially wider, authenticated socket is live.\n      await nc.close();\n      key.clear();\n      if (this.connection === nc) {\n        this.connection = undefined;\n        this.connected = false;\n        this.subscription = undefined;\n        clearTimeout(this.expiryTimer);\n        this.scheduleReconnect();\n      }\n    }\n  }\n\n  private scheduleReconnect(): void {\n    if (this.disposed || this.reconnectTimer) return;\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = undefined;\n      if (this.disposed) return;\n      void this.connect().catch(error => {\n        this.report(error instanceof StreamMessageError ? error : fail('CONNECT_FAILED', 'Stream messages reconnection failed.'));\n        this.scheduleReconnect();\n      });\n    }, Math.min(30_000, 500 * 2 ** Math.min(this.attempts++, 6)));\n  }\n\n  async publish(value: StreamMessage): Promise<void> {\n    // Only the very first publish may establish a connection. Subsequent disconnected writes fail.\n    if (!this.started) await this.ready();\n    const nc = this.connection;\n    if (this.disposed || !this.connected || !nc || nc.isClosed()) throw fail('DISCONNECTED', 'Stream messages disconnected.');\n    if (!envelope(value, this.payloadLimit)) throw fail('INVALID_ENVELOPE', 'Invalid Stream message envelope or payload limit exceeded.');\n    const bytes = encoder.encode(JSON.stringify(value));\n    if (bytes.length > MAX_ENVELOPE) throw fail('PAYLOAD_TOO_LARGE', 'Stream message envelope exceeds limit.');\n    this.brokerError = undefined;\n    try {\n      nc.publish(this.subject, bytes);\n      await this.flush(nc, true);\n      if (this.brokerError) throw this.brokerError;\n      if (!this.connected || this.connection !== nc) throw fail('RESULT_UNKNOWN', 'Stream publish result unknown.');\n    } catch (error) {\n      throw error instanceof StreamMessageError ? error : fail('RESULT_UNKNOWN', 'Stream publish result unknown; do not automatically retry.');\n    }\n  }\n\n  dispose(): Promise<void> {\n    if (this.disposing) return this.disposing;\n    this.disposed = true;\n    this.connected = false;\n    this.abort.abort();\n    this.removeRuntimeListener?.();\n    clearTimeout(this.reconnectTimer);\n    clearTimeout(this.expiryTimer);\n    this.subscription?.unsubscribe();\n    this.disposing = (async () => {\n      await this.connection?.close();\n      await this.connecting?.catch(() => undefined);\n      await this.watching;\n      this.connection = undefined;\n      this.remove();\n    })();\n    return this.disposing;\n  }\n}\n\nexport class StreamMessagesClient {\n  private sessions = new Set<MessageSession>();\n  private listeners = new Set<StreamMessageErrorHandler>();\n  private disposed = false;\n  private disposing?: Promise<void>;\n  constructor(private readonly transport = new StreamTransport()) {}\n\n  onError(handler: StreamMessageErrorHandler): () => void {\n    if (this.disposed) throw fail('DISPOSED', 'Stream messages client disposed.');\n    this.listeners.add(handler);\n    return () => { this.listeners.delete(handler); };\n  }\n\n  use<Payload = StreamJSON>(selector: { topic: string }): StreamMessageHandle<Payload> {\n    if (!plain(selector) || Object.keys(selector).some(k => k !== 'topic') ||\n        typeof selector.topic !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,127}$/.test(selector.topic)) {\n      throw new TypeError('Tier0 SDK: invalid logical Stream topic.');\n    }\n    const topic = selector.topic;\n    let publisher: MessageSession | undefined;\n    const session = (mode: 'publish' | 'subscribe', handler?: (value: StreamMessage) => void | Promise<void>, onError?: StreamMessageErrorHandler) => {\n      if (this.disposed) throw fail('DISPOSED', 'Stream messages client disposed.');\n      const report = (error: StreamMessageError) => {\n        const listeners = new Set(this.listeners);\n        if (onError) listeners.add(onError);\n        if (!listeners.size) console.error(error);\n        for (const listener of listeners) {\n          try { listener(error); } catch { console.error(fail('ERROR_HANDLER_FAILED', 'Stream messages error handler failed.')); }\n        }\n      };\n      const value = new MessageSession(this.transport, topic, mode, report, () => this.sessions.delete(value), handler);\n      this.sessions.add(value);\n      return value;\n    };\n    return {\n      publish: async (payload, options = {}) => {\n        if (this.disposed) throw fail('DISPOSED', 'Stream messages client disposed.');\n        if (!plain(options) || Object.keys(options).some(k => !['messageId', 'correlationId'].includes(k)) ||\n            (options.messageId !== undefined && typeof options.messageId !== 'string') ||\n            (options.correlationId !== undefined && typeof options.correlationId !== 'string')) {\n          throw new TypeError('Tier0 SDK: unsupported Stream publish option.');\n        }\n        const message: StreamMessage<Payload> = {\n          version: 'stream-messages/v1', messageId: options.messageId ?? crypto.randomUUID(),\n          ...(options.correlationId === undefined ? {} : { correlationId: options.correlationId }), payload,\n        };\n        if (!envelope(message, MAX_PAYLOAD)) throw fail('INVALID_ENVELOPE', 'Invalid Stream message envelope.');\n        if (encoder.encode(JSON.stringify(message)).length > MAX_ENVELOPE) throw fail('PAYLOAD_TOO_LARGE', 'Stream message envelope exceeds limit.');\n        if (publisher?.disposed) {\n          const previous = publisher;\n          await previous.dispose();\n          if (previous.runtime !== this.transport.runtime()) throw fail('DISCONNECTED', 'Stream messages disconnected.');\n          if (publisher === previous) publisher = undefined;\n        }\n        if (!publisher) publisher = session('publish');\n        await publisher.publish(message as StreamMessage);\n        return message;\n      },\n      subscribe: async (handler, options = {}) => {\n        if (typeof handler !== 'function' || !plain(options) || Object.keys(options).some(k => k !== 'onError') ||\n            (options.onError !== undefined && typeof options.onError !== 'function')) throw new TypeError('Tier0 SDK: invalid Stream subscription.');\n        const value = session('subscribe', handler as (value: StreamMessage) => void | Promise<void>, options.onError);\n        await value.ready();\n        return value;\n      },\n    };\n  }\n\n  dispose(): Promise<void> {\n    if (this.disposing) return this.disposing;\n    this.disposed = true;\n    this.disposing = Promise.all([...this.sessions].map(session => session.dispose())).then(() => {\n      this.listeners.clear();\n    });\n    return this.disposing;\n  }\n}\n"]}