@voltro/cms 0.85.0 → 0.87.0

package/dist/outputActivation.js

@@ -0,0 +1,234 @@
+import { normalizeHost as e } from "./domainHost.js";
+import { Schema as t } from "effect";
+import { createHash as n, createHmac as r, timingSafeEqual as i } from "node:crypto";
+import { canonicalJson as a } from "@voltro/runtime";
+//#region src/outputActivation.ts
+var o = class extends t.TaggedError()("OutputActivationUnavailable", { reason: t.Literals([
+	"input",
+	"integrity",
+	"state",
+	"changed",
+	"generation",
+	"regions",
+	"denied",
+	"expired"
+]) }) {}, s = (e) => n("sha256").update(a(e)).digest("hex"), c = (e) => {
+	throw new o({ reason: e });
+}, l = c, u = (e) => typeof e == "string" && /^[a-f0-9]{64}$/.test(e), d = (e) => typeof e == "string" && /^[A-Za-z0-9_-]{1,64}$/.test(e), f = (e, t) => {
+	if (!e || typeof e != "object" || Array.isArray(e) || ![Object.prototype, null].includes(Object.getPrototypeOf(e)) || Object.getOwnPropertySymbols(e).length > 0) return l("input");
+	let n = Object.getOwnPropertyDescriptors(e);
+	return Object.keys(n).sort().join(",") !== [...t].sort().join(",") || Object.values(n).some((e) => !e.enumerable || !("value" in e)) ? l("input") : e;
+}, p = (e, t) => !Array.isArray(e) || e.length < 1 || e.length > t || Object.getOwnPropertySymbols(e).length > 0 || Object.keys(e).length !== e.length ? l("input") : Array.from({ length: e.length }, (t, n) => {
+	let r = Object.getOwnPropertyDescriptor(e, String(n));
+	return r === void 0 || !r.enumerable || !("value" in r) ? l("input") : r.value;
+}), m = (e) => {
+	let t = f(e, [
+		"tenantId",
+		"site",
+		"environment"
+	]);
+	return Object.values(t).every(d) ? {
+		tenantId: String(t.tenantId),
+		site: String(t.site),
+		environment: String(t.environment)
+	} : l("input");
+}, h = (e) => s({
+	contractVersion: e.contractVersion,
+	bindingsDigest: e.bindingsDigest,
+	schemaDigest: e.schemaDigest,
+	cacheKeyDigest: e.cacheKeyDigest
+}), g = (e) => {
+	let t = f(e, [
+		"publicationGeneration",
+		"releaseId",
+		"deploymentId",
+		"renderPolicyDigest",
+		"contractDigest"
+	]);
+	return typeof t.publicationGeneration != "string" || !/^\d{20}$/.test(t.publicationGeneration) || !(t.releaseId === null || d(t.releaseId)) || !d(t.deploymentId) || !u(t.renderPolicyDigest) || !u(t.contractDigest) ? l("input") : { ...t };
+}, _ = (e) => {
+	let t = f(e, [
+		"deploymentId",
+		"inputsId",
+		"executionId",
+		"contractVersion",
+		"bindingsDigest",
+		"schemaDigest",
+		"cacheKeyDigest"
+	]);
+	return !d(t.deploymentId) || ![
+		"inputsId",
+		"executionId",
+		"bindingsDigest",
+		"schemaDigest",
+		"cacheKeyDigest"
+	].every((e) => u(t[e])) || !Number.isSafeInteger(t.contractVersion) || Number(t.contractVersion) < 1 ? l("input") : { ...t };
+}, v = (t) => {
+	let n = f(t, [
+		"version",
+		"scope",
+		"snapshot",
+		"app",
+		"renderPolicyDigest",
+		"paths",
+		"artifacts",
+		"cacheNamespace",
+		"regions"
+	]);
+	if (n.version !== 2 || !u(n.renderPolicyDigest) || !u(n.cacheNamespace)) return l("input");
+	let r = m(n.scope), i = f(n.snapshot, [
+		"id",
+		"digest",
+		"releaseId",
+		"publicationGeneration"
+	]);
+	if (!d(i.id) || !u(i.digest) || !d(i.releaseId) || typeof i.publicationGeneration != "string" || !/^\d{20}$/.test(i.publicationGeneration)) return l("input");
+	let a = _(n.app), o = "", s = p(n.paths, 256).map((t) => {
+		let n = f(t, [
+			"host",
+			"setId",
+			"count"
+		]);
+		return typeof n.host != "string" || n.host <= o || n.host.length > 253 || e(n.host) !== n.host || !u(n.setId) || !Number.isSafeInteger(n.count) || Number(n.count) < 0 || Number(n.count) > 1e5 ? l("input") : (o = n.host, {
+			host: n.host,
+			setId: n.setId,
+			count: Number(n.count)
+		});
+	}), c = p(n.artifacts, 256).map((e, t) => {
+		let n = f(e, [
+			"host",
+			"documents",
+			"assets",
+			"redirects",
+			"sitemap",
+			"robots",
+			"deny"
+		]);
+		return n.host !== s[t]?.host || ![
+			"documents",
+			"assets",
+			"redirects",
+			"sitemap",
+			"robots",
+			"deny"
+		].every((e) => u(n[e])) ? l("input") : { ...n };
+	});
+	if (c.length !== s.length) return l("input");
+	let h = f(n.regions, ["required", "quorum"]), g = p(h.required, 64);
+	return g.some((e, t, n) => !d(e) || t > 0 && String(n[t - 1]) >= String(e)) || !Number.isSafeInteger(h.quorum) || Number(h.quorum) < 1 || Number(h.quorum) > g.length ? l("input") : {
+		version: 2,
+		scope: r,
+		snapshot: { ...i },
+		app: a,
+		renderPolicyDigest: n.renderPolicyDigest,
+		paths: s,
+		artifacts: c,
+		cacheNamespace: n.cacheNamespace,
+		regions: {
+			required: g,
+			quorum: Number(h.quorum)
+		}
+	};
+}, y = (e) => {
+	let t = v(e);
+	return {
+		id: s(t),
+		manifest: t
+	};
+}, b = (e) => {
+	let t = f(e, ["id", "manifest"]), n = y(t.manifest);
+	return t.id === n.id ? n : l("integrity");
+}, x = (e, t, n) => !d(n.id) || !(n.material instanceof Uint8Array) || n.material.byteLength < 32 ? l("input") : r("sha256", n.material).update(a({
+	purpose: e,
+	body: t,
+	keyId: n.id
+})).digest("hex"), S = (e, t, n, r, a) => {
+	if (a.length === 0 || new Set(a.map((e) => e.id)).size !== a.length) return l("input");
+	let o = a.find((e) => e.id === r);
+	if (o === void 0 || !u(n) || !i(Buffer.from(x(e, t, o), "hex"), Buffer.from(n, "hex"))) return l("integrity");
+}, C = (e, t) => {
+	let n = {
+		version: 1,
+		targetId: e.targetId,
+		expectedGeneration: e.expectedGeneration,
+		mode: e.mode,
+		expiresAt: e.expiresAt,
+		scope: m(e.scope),
+		observation: g(e.observation)
+	};
+	return !u(n.targetId) || !Number.isSafeInteger(n.expectedGeneration) || n.expectedGeneration < 0 || n.expectedGeneration >= 2 ** 53 - 1 || !["forward", "rollback"].includes(n.mode) || !Number.isSafeInteger(n.expiresAt) || n.expiresAt <= 0 || n.expiresAt > 864e13 ? l("input") : {
+		...n,
+		id: s(n),
+		keyId: t.id,
+		signature: x("voltro.cms.output-activation-probe/v1", n, t)
+	};
+}, w = (e, t, n) => {
+	let r = f(e, [
+		"version",
+		"id",
+		"targetId",
+		"scope",
+		"expectedGeneration",
+		"mode",
+		"observation",
+		"expiresAt",
+		"keyId",
+		"signature"
+	]);
+	if (r.version !== 1 || !u(r.id) || !u(r.targetId) || !d(r.keyId) || !Number.isSafeInteger(r.expectedGeneration) || Number(r.expectedGeneration) < 0 || Number(r.expectedGeneration) >= 2 ** 53 - 1 || !["forward", "rollback"].includes(String(r.mode)) || !Number.isSafeInteger(r.expiresAt) || !Number.isSafeInteger(n)) return l("input");
+	let i = {
+		version: 1,
+		targetId: r.targetId,
+		scope: m(r.scope),
+		expectedGeneration: Number(r.expectedGeneration),
+		mode: r.mode,
+		observation: g(r.observation),
+		expiresAt: Number(r.expiresAt)
+	};
+	return s(i) === r.id ? (S("voltro.cms.output-activation-probe/v1", i, r.signature, r.keyId, t), i.expiresAt <= n ? l("expired") : {
+		...i,
+		id: r.id,
+		keyId: r.keyId,
+		signature: String(r.signature)
+	}) : l("integrity");
+}, T = (e, t, n, r) => {
+	if (!d(t) || !u(r)) return l("input");
+	let i = {
+		version: 1,
+		probeId: e.id,
+		targetId: e.targetId,
+		generation: e.expectedGeneration + 1,
+		region: t,
+		outputId: r
+	};
+	return {
+		...i,
+		keyId: n.id,
+		signature: x("voltro.cms.output-region-receipt/v1", i, n)
+	};
+}, E = (e, t, n, r) => {
+	if (!Array.isArray(n) || n.length > e.manifest.regions.required.length) return l("regions");
+	let i = /* @__PURE__ */ new Set(), a = n.map((n) => {
+		let a = f(n, [
+			"version",
+			"probeId",
+			"targetId",
+			"generation",
+			"region",
+			"outputId",
+			"keyId",
+			"signature"
+		]);
+		return a.version !== 1 || a.probeId !== t.id || a.targetId !== e.id || a.generation !== t.expectedGeneration + 1 || typeof a.region != "string" || !e.manifest.regions.required.includes(a.region) || i.has(a.region) || !u(a.outputId) ? l("regions") : (i.add(a.region), S("voltro.cms.output-region-receipt/v1", {
+			version: 1,
+			probeId: a.probeId,
+			targetId: a.targetId,
+			generation: a.generation,
+			region: a.region,
+			outputId: a.outputId
+		}, a.signature, a.keyId, r[a.region] ?? []), { ...a });
+	});
+	return i.size < e.manifest.regions.quorum ? l("regions") : a.sort((e, t) => e.region < t.region ? -1 : +(e.region > t.region));
+};
+//#endregion
+export { o as OutputActivationUnavailable, _ as copyOutputActivationApp, v as copyOutputActivationManifest, g as copyOutputActivationObservation, m as copyOutputActivationScope, b as copyOutputActivationSet, y as createOutputActivationSet, C as makeOutputActivationProbe, T as makeOutputRegionReceipt, h as outputActivationContractDigest, c as outputActivationFail, s as outputActivationHash, w as verifyOutputActivationProbe, E as verifyOutputRegionReceipts };

package/dist/outputActivationOrigin.js

@@ -0,0 +1,51 @@
+import { copyOutputActivationManifest as e, outputActivationFail as t, outputActivationHash as n } from "./outputActivation.js";
+import { copySnapshotResource as r } from "./buildSnapshot.js";
+//#region src/outputActivationOrigin.ts
+var i = (e) => !e || typeof e != "object" || Array.isArray(e) ? t("input") : e, a = (a) => {
+	if (!/^[A-Za-z0-9_-]{1,64}$/.test(a.activationId) || !Number.isSafeInteger(a.generation) || a.generation < 1) return t("input");
+	let o = i(r({
+		key: "stored-output-origin",
+		value: { manifest: a.manifest }
+	}).value.manifest);
+	if (typeof a.setId != "string" || !/^[a-f0-9]{64}$/.test(a.setId) || n(o) !== a.setId) return t("integrity");
+	if (o.version === 1) {
+		let r = i(o.artifacts), s = o.paths;
+		if (Object.keys(r).sort().join(",") !== "assets,deny,documents,redirects,robots,sitemap" || !Array.isArray(s)) return t("input");
+		let c = e({
+			...o,
+			version: 2,
+			artifacts: s.map((e) => ({
+				...r,
+				host: i(e).host
+			}))
+		});
+		return {
+			scope: c.scope,
+			sourceDigest: n({
+				version: 1,
+				scope: c.scope,
+				activationId: a.activationId,
+				generation: a.generation,
+				setId: a.setId,
+				documentArtifactId: r.documents
+			})
+		};
+	}
+	let s = e(o);
+	return {
+		scope: s.scope,
+		sourceDigest: n({
+			version: 2,
+			scope: s.scope,
+			activationId: a.activationId,
+			generation: a.generation,
+			setId: a.setId,
+			documentArtifacts: s.artifacts.map((e) => ({
+				host: e.host,
+				artifactId: e.documents
+			}))
+		})
+	};
+};
+//#endregion
+export { a as copyStoredOutputActivationOrigin };

package/dist/outputActivationStore.js

@@ -0,0 +1,411 @@
+import { copyOutputActivationManifest as e, copyOutputActivationObservation as t, copyOutputActivationScope as n, copyOutputActivationSet as r, makeOutputActivationProbe as i, outputActivationContractDigest as a, outputActivationFail as o, outputActivationHash as s, verifyOutputActivationProbe as c, verifyOutputRegionReceipts as l } from "./outputActivation.js";
+import { copyObservedRoutes as u } from "./routeHistoryStorage.js";
+import { copySnapshotResource as d } from "./buildSnapshot.js";
+import { staticPathUrl as f } from "./staticPathSet.js";
+import { copyStoredOutputActivationOrigin as p } from "./outputActivationOrigin.js";
+import { iterateRouteHistory as m, readRouteHistoryPage as h, replaceRouteHistory as g, routeHistoryTables as _ } from "./routeHistoryStore.js";
+import { and as v, eq as y, generateId as b, gt as x, id as S, integer as C, json as w, table as T, text as E, timestamp as D } from "@voltro/database";
+import { tenant as O } from "@voltro/plugin-multitenancy/mixin";
+import { canonicalJson as k } from "@voltro/runtime";
+//#region src/outputActivationStore.ts
+var A = "_voltro_cms_output_heads", j = "_voltro_cms_output_activations", M = "_voltro_cms_output_denies", N = T(A, {
+	id: S({ prefix: "couth" }),
+	site: E().maxLength(64),
+	environment: E().maxLength(64),
+	generation: C(),
+	safetyGeneration: C(),
+	activeMarkerId: E().maxLength(64).nullable()
+}).with(O()).unique("cms_output_head_scope", [
+	"tenantId",
+	"site",
+	"environment"
+]), P = T(j, {
+	id: S({ prefix: "couta" }),
+	site: E().maxLength(64),
+	environment: E().maxLength(64),
+	generation: C(),
+	setId: E().maxLength(64),
+	manifest: w(),
+	probe: w(),
+	receipts: w(),
+	activatedAt: D()
+}).with(O()).unique("cms_output_activation_generation", [
+	"tenantId",
+	"site",
+	"environment",
+	"generation"
+]), F = T(M, {
+	id: S({ prefix: "coutd" }),
+	site: E().maxLength(64),
+	environment: E().maxLength(64),
+	keyDigest: E().maxLength(64),
+	target: w(),
+	reason: E().oneOf([
+		"security",
+		"rights",
+		"takedown"
+	])
+}).with(O()).unique("cms_output_safety_deny", [
+	"tenantId",
+	"site",
+	"environment",
+	"keyDigest"
+]), I = Object.freeze([
+	N,
+	P,
+	F,
+	..._
+]), L = (e) => v(y("tenantId", e.tenantId), y("site", e.site), y("environment", e.environment)), R = (e, t) => {
+	let n = b({
+		kind: "typeid",
+		prefix: e
+	}, t);
+	return n === null ? o("state") : n;
+}, z = (e) => typeof e.id != "string" || !Number.isSafeInteger(e.generation) || Number(e.generation) < 0 || !Number.isSafeInteger(e.safetyGeneration) || Number(e.safetyGeneration) < 0 || e.activeMarkerId !== null && typeof e.activeMarkerId != "string" || e.generation === 0 != (e.activeMarkerId === null) ? o("state") : {
+	id: e.id,
+	generation: Number(e.generation),
+	safetyGeneration: Number(e.safetyGeneration),
+	activeMarkerId: e.activeMarkerId
+}, B = async (e, t, n, r = "update") => {
+	n && await e.insertIgnore(A, {
+		id: R("couth", A),
+		...t,
+		generation: 0,
+		safetyGeneration: 0,
+		activeMarkerId: null
+	}, { conflictColumns: [
+		"tenantId",
+		"site",
+		"environment"
+	] });
+	let [i] = await e.query({
+		table: A,
+		predicate: L(t),
+		lock: r,
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: void 0
+	});
+	return i === void 0 ? null : z(i);
+}, V = async (e, t) => {
+	let r = n(t), i = await B(e, r, !0);
+	if (i === null) return o("state");
+	let [a] = await e.query({
+		table: j,
+		predicate: i.generation === 0 ? L(r) : v(L(r), x("generation", i.generation)),
+		lock: "update",
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: ["id"]
+	});
+	if (a !== void 0) return o("state");
+	if (i.activeMarkerId === null) return {
+		generation: 0,
+		activationId: null,
+		sourceDigest: null
+	};
+	let [s] = await e.query({
+		table: j,
+		predicate: v(L(r), y("id", i.activeMarkerId)),
+		lock: "update",
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: void 0
+	});
+	if (s === void 0 || s.generation !== i.generation) return o("state");
+	let c = p({
+		setId: s.setId,
+		manifest: s.manifest,
+		activationId: i.activeMarkerId,
+		generation: i.generation
+	});
+	return W(c.scope, r) ? {
+		generation: i.generation,
+		activationId: i.activeMarkerId,
+		sourceDigest: c.sourceDigest
+	} : o("state");
+}, H = (e, t, n, r) => {
+	let i = p({
+		setId: r.id,
+		manifest: r.manifest,
+		activationId: t,
+		generation: n
+	});
+	return W(i.scope, e) ? i.sourceDigest : o("state");
+}, U = async (e, t, n) => {
+	let r = await n(e, t);
+	if (typeof r != "object" || !r || Array.isArray(r) || ![Object.prototype, null].includes(Object.getPrototypeOf(r)) || Object.getOwnPropertySymbols(r).length > 0) return o("input");
+	let i = Object.getOwnPropertyDescriptors(r);
+	if (Object.keys(i).sort().join(",") !== "documentArtifacts,routes" || Object.values(i).some((e) => !e.enumerable || !("value" in e))) return o("integrity");
+	let a = d({
+		key: "activation-documents",
+		value: { artifacts: i.documentArtifacts.value }
+	}).value.artifacts;
+	if (k(a) !== k(e.manifest.artifacts.map((e) => ({
+		host: e.host,
+		artifactId: e.documents
+	})))) return o("integrity");
+	let s = u(i.routes.value), c = /* @__PURE__ */ new Map();
+	for (let t of s) {
+		let n = new URL(t.url).hostname;
+		if (!e.manifest.paths.some((e) => e.host === n)) return o("integrity");
+		c.set(n, (c.get(n) ?? 0) + 1);
+	}
+	return e.manifest.paths.some((e) => (c.get(e.host) ?? 0) !== e.count) ? o("integrity") : s;
+}, W = (e, t) => k(e) === k(t), G = async (e, n, r, i) => {
+	let s = t(await i(e, n, r));
+	return r === "forward" && (s.publicationGeneration !== n.manifest.snapshot.publicationGeneration || s.releaseId !== n.manifest.snapshot.releaseId || s.deploymentId !== n.manifest.app.deploymentId || s.renderPolicyDigest !== n.manifest.renderPolicyDigest || s.contractDigest !== a(n.manifest.app)) ? o("changed") : s;
+}, K = async (t, n) => {
+	let [r] = await t.query({
+		table: j,
+		predicate: v(L(n.manifest.scope), y("setId", n.id)),
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: void 0
+	});
+	if (r === void 0 || k(e(r.manifest)) !== k(n.manifest)) return o("state");
+}, q = async (e, t, i) => {
+	let a = n(t), s = await B(e, a, !1);
+	if (s === null || s.generation === 0) return {
+		revision: 0,
+		historyCount: 0
+	};
+	let u = 0, d;
+	for (; u < s.generation;) {
+		let t = await e.query({
+			table: j,
+			predicate: v(L(a), x("generation", u)),
+			lock: "update",
+			order: [{
+				column: "generation",
+				direction: "asc"
+			}],
+			take: 100,
+			skip: void 0,
+			projection: void 0
+		});
+		if (t.length === 0) return o("state");
+		for (let n of t) {
+			if (n.generation !== u + 1 || u >= s.generation || typeof n.id != "string") return o("state");
+			let t = r({
+				id: n.setId,
+				manifest: n.manifest
+			}), f = n.activatedAt instanceof Date ? n.activatedAt.getTime() : new Date(String(n.activatedAt)).getTime(), p = c(n.probe, i.keys, f);
+			if (!W(t.manifest.scope, a) || !W(p.scope, a) || p.targetId !== t.id || p.expectedGeneration !== u) return o("integrity");
+			let m = l(t, p, n.receipts, i.regionKeys), _ = await G(e, t, "rollback", i.admit), v = await U(t, m[0], i.readRoutes);
+			if (k(await G(e, t, "rollback", i.admit)) !== k(_)) return o("changed");
+			if (d ??= await h(e, a), d.revision !== 0 && d.revision !== s.generation) return o("state");
+			u++;
+			let y = H(a, n.id, u, t);
+			if (d.revision === 0 && await g(e, a, {
+				expectedRevision: u - 1,
+				sourceDigest: y,
+				routes: v
+			}), u === s.generation && (n.id !== s.activeMarkerId || d.revision !== 0 && d.sourceDigest !== y)) return o("state");
+		}
+	}
+	let f = await h(e, a);
+	for await (let t of m(e, a, f.revision));
+	return {
+		revision: f.revision,
+		historyCount: f.historyCount
+	};
+}, J = async (e, t, n) => {
+	let a = r(t), s = await B(e, a.manifest.scope, !0);
+	if (s === null || s.generation !== n.expectedGeneration || s.generation >= 2147483647) return o("generation");
+	if (!Number.isSafeInteger(n.now) || n.now < 0 || !Number.isSafeInteger(n.ttlMs) || n.ttlMs < 1 || n.ttlMs > 3e4) return o("input");
+	n.mode === "rollback" && await K(e, a);
+	let c = await G(e, a, n.mode, n.admit);
+	return i({
+		targetId: a.id,
+		scope: a.manifest.scope,
+		expectedGeneration: s.generation,
+		mode: n.mode,
+		observation: c,
+		expiresAt: n.now + n.ttlMs
+	}, n.key);
+}, Y = async (e, t, n) => {
+	let i = r(t), a = c(n.probe, n.keys, n.now);
+	if (a.targetId !== i.id || !W(a.scope, i.manifest.scope)) return o("integrity");
+	let s = await B(e, i.manifest.scope, !1);
+	if (s === null || s.generation !== a.expectedGeneration) return o("generation");
+	a.mode === "rollback" && await K(e, i);
+	let u = await G(e, i, a.mode, n.admit);
+	if (k(u) !== k(a.observation)) return o("changed");
+	let d = l(i, a, n.receipts, n.regionKeys), f = await U(i, d[0], n.readRoutes);
+	if (k(await G(e, i, a.mode, n.admit)) !== k(u)) return o("changed");
+	let m = await h(e, i.manifest.scope);
+	if (m.revision !== s.generation) return o("state");
+	if (s.activeMarkerId !== null) {
+		let [t] = await e.query({
+			table: j,
+			predicate: v(L(i.manifest.scope), y("id", s.activeMarkerId)),
+			lock: "update",
+			order: [],
+			take: 1,
+			skip: void 0,
+			projection: void 0
+		});
+		if (t === void 0 || t.generation !== s.generation) return o("state");
+		let n = p({
+			setId: t.setId,
+			manifest: t.manifest,
+			activationId: s.activeMarkerId,
+			generation: s.generation
+		});
+		if (!W(n.scope, i.manifest.scope) || m.sourceDigest !== n.sourceDigest) return o("state");
+	}
+	let _ = {
+		id: R("couta", j),
+		generation: s.generation + 1,
+		set: i,
+		probe: a,
+		receipts: d,
+		activatedAt: n.now
+	};
+	return await e.updateMany("_voltro_cms_output_heads", {
+		generation: _.generation,
+		activeMarkerId: _.id
+	}, { where: v(L(i.manifest.scope), y("id", s.id), y("generation", s.generation)) }) === 1 ? (await e.insert(j, {
+		id: _.id,
+		...i.manifest.scope,
+		generation: _.generation,
+		setId: i.id,
+		manifest: i.manifest,
+		probe: a,
+		receipts: d,
+		activatedAt: new Date(n.now)
+	}), await g(e, i.manifest.scope, {
+		expectedRevision: m.revision,
+		sourceDigest: H(i.manifest.scope, _.id, _.generation, i),
+		routes: f
+	}), _) : o("generation");
+}, X = (e) => {
+	if (!e || typeof e != "object") return o("input");
+	if (e.kind === "asset" && Object.keys(e).sort().join(",") === "digest,kind" && /^[a-f0-9]{64}$/.test(e.digest)) return { ...e };
+	if (e.kind === "url" && Object.keys(e).sort().join(",") === "kind,url") try {
+		let t = new URL(e.url);
+		if (t.protocol === "https:" && f(t.hostname, t.pathname) === e.url) return { ...e };
+	} catch {
+		return o("input");
+	}
+	return o("input");
+}, Z = async (e, t, r = {}) => {
+	let i = n(t), { expectedGeneration: a, after: c, take: l = 500 } = r;
+	if (!Number.isSafeInteger(l) || l < 1 || l > 1e3 || a !== void 0 && (!Number.isSafeInteger(a) || a < 0 || a > 2147483647) || c !== void 0 && (a === void 0 || typeof c != "string" || !/^[a-f0-9]{64}$/.test(c))) return o("input");
+	let u = (await B(e, i, !1))?.safetyGeneration ?? 0;
+	if (u > 2147483647) return o("state");
+	if (a !== void 0 && a !== u) return o("generation");
+	let d = await e.query({
+		table: M,
+		predicate: v(L(i), ...c === void 0 ? [] : [x("keyDigest", c)]),
+		lock: "update",
+		order: [{
+			column: "keyDigest",
+			direction: "asc"
+		}],
+		take: l + 1,
+		skip: void 0,
+		projection: [
+			"keyDigest",
+			"target",
+			"reason"
+		]
+	});
+	if (d.length > l + 1 || d.length > u || c === void 0 && d.length <= l && d.length !== u) return o("state");
+	let f = c ?? "", p = d.map((e) => {
+		let t = X(e.target), n = e.keyDigest, r = e.reason;
+		return typeof n != "string" || !/^[a-f0-9]{64}$/.test(n) || n <= f || s(t) !== n ? o("integrity") : r !== "security" && r !== "rights" && r !== "takedown" ? o("state") : (f = n, {
+			keyDigest: n,
+			target: t,
+			reason: r
+		});
+	});
+	return {
+		generation: u,
+		entries: p.slice(0, l),
+		next: p.length > l ? p[l - 1].keyDigest : null
+	};
+}, Q = async (e, t, r, i) => {
+	let a = n(t), c = X(r);
+	if (![
+		"security",
+		"rights",
+		"takedown"
+	].includes(i)) return o("input");
+	let l = await B(e, a, !0);
+	if (l === null || l.safetyGeneration >= 2147483647) return o("state");
+	let u = s(c), [d] = await e.query({
+		table: M,
+		predicate: v(L(a), y("keyDigest", u)),
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: void 0
+	});
+	if (d !== void 0) return k(d.target) === k(c) ? l.safetyGeneration : o("integrity");
+	await e.insert(M, {
+		id: R("coutd", M),
+		...a,
+		keyDigest: u,
+		target: c,
+		reason: i
+	});
+	let f = l.safetyGeneration + 1;
+	return await e.update(A, l.id, { safetyGeneration: f }), f;
+}, $ = async (e, t, n, i) => {
+	if (n.activeMarkerId === null) return o("state");
+	let [a] = await e.query({
+		table: j,
+		predicate: v(L(t), y("id", n.activeMarkerId)),
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: void 0
+	});
+	if (a === void 0 || a.generation !== n.generation) return o("state");
+	let s = a.activatedAt instanceof Date ? a.activatedAt.getTime() : typeof a.activatedAt == "string" ? Date.parse(a.activatedAt) : NaN;
+	if (!Number.isSafeInteger(s)) return o("state");
+	let u = r({
+		id: a.setId,
+		manifest: a.manifest
+	});
+	if (!W(t, u.manifest.scope)) return o("integrity");
+	let d = c(a.probe, i.keys, s);
+	if (d.targetId !== u.id || d.expectedGeneration + 1 !== n.generation || !W(d.scope, t)) return o("integrity");
+	let f = l(u, d, a.receipts, i.regionKeys);
+	return {
+		id: n.activeMarkerId,
+		generation: n.generation,
+		set: u,
+		probe: d,
+		receipts: f,
+		activatedAt: s
+	};
+}, ee = async (e, t, r) => {
+	let i = n(t), a = await B(e, i, !1, r.lock ?? "update");
+	return a === null || a.activeMarkerId === null ? null : $(e, i, a, r);
+}, te = async (e, t, r, i) => {
+	let a = n(t), c = X(r), l = await B(e, a, !1, i.lock ?? "update");
+	if (l === null || l.activeMarkerId === null) return null;
+	let [u] = await e.query({
+		table: M,
+		predicate: v(L(a), y("keyDigest", s(c))),
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: void 0
+	});
+	if (u !== void 0) return o("denied");
+	let d = await $(e, a, l, i), f = d.receipts.find((e) => e.region === i.region);
+	return f === void 0 ? o("regions") : (await i.admit(e, d.set, c, f), {
+		marker: d,
+		safetyGeneration: l.safetyGeneration
+	});
+};
+//#endregion
+export { j as OUTPUT_ACTIVATIONS, A as OUTPUT_ACTIVATION_HEADS, M as OUTPUT_SAFETY_DENIES, Y as activateOutputSet, Q as denyOutputTarget, q as initializeOutputRouteHistory, V as lockOutputRouteHistoryCapture, N as outputActivationHeadsTable, I as outputActivationTables, P as outputActivationsTable, F as outputSafetyDeniesTable, J as probeOutputActivation, te as readActiveOutput, ee as readOutputActivationMarker, Z as readOutputSafetyPage };