actly 1.1.0 → 1.2.0

package/dist/utils/key.js

@@ -0,0 +1,75 @@
+/**
+ * Key sanitisation — the first line of defence against:
+ *
+ *  - **Prototype pollution**: `__proto__`, `constructor`, `prototype` as keys
+ *    bypass namespace isolation in plain-object store adapters.
+ *  - **Control-char injection**: `\x00`–`\x1f`, `\x7f` break some store
+ *    backends (Redis Lua, HTTP header logs, JSON-LD contexts).
+ *  - **CRLF injection**: `\r\n` in keys can break naive log/HTTP serializers.
+ *  - **Memory exhaustion**: unbounded key length lets a caller store a 10MB
+ *    string as a key, bloating the store and blocking iteration.
+ *  - **Namespace collision**: user keys starting with `dedupe:`, `cache:`,
+ *    or `__inflight:` would clobber internal slots.
+ *
+ * # Why a dedicated module?
+ *
+ * Key validation is security-sensitive. Centralising it here means every
+ * call site (`act()`, `invalidate()`, `withStore().invalidate()`) applies
+ * the same rules. Local inlining risks drift.
+ */
+import { LIMITS } from './limits.js';
+const RESERVED_PREFIXES = ['dedupe:', 'cache:', '__inflight:', '__tenant:', 'tenant:'];
+/**
+ * Strings that, if used as Map keys, are safe — but if used as plain-object
+ * keys (e.g. a naive store adapter) enable prototype pollution. Reject them
+ * regardless of store type: the contract is "your key is safe everywhere".
+ */
+const FORBIDDEN_LITERALS = new Set(['__proto__', 'constructor', 'prototype']);
+/**
+ * Reject any character in the C0 control range, DEL (0x7f), or CRLF.
+ * Allow TAB (0x09) and LF (0x0a) since some callers embed newlines in
+ * structured keys legitimately — but CR is always forbidden.
+ */
+const UNSAFE_CHAR = /[\x00-\x08\x0b\x0c\x0d\x0e-\x1f\x7f]/;
+/**
+ * Validate a user-supplied key. Throws synchronously on invalid input.
+ *
+ * Programmer errors throw — they must not be swallowed into an `ActFailure`
+ * because the caller's code is broken.
+ *
+ * @returns the same `key` (for chaining); never transforms it.
+ */
+export function sanitizeKey(key) {
+    if (typeof key !== 'string') {
+        throw new TypeError(`Actly: key must be a string, got ${typeName(key)}`);
+    }
+    if (key.length === 0) {
+        throw new RangeError("Actly: key must be non-empty. An empty key collapses every caller " +
+            "onto the same dedupe/cache slot — almost certainly a bug.");
+    }
+    if (key.length > LIMITS.MAX_KEY_LENGTH) {
+        throw new RangeError(`Actly: key length ${key.length} exceeds limit ${LIMITS.MAX_KEY_LENGTH}. ` +
+            `Long keys bloat stores and slow iteration. Hash externally if you need longer keys.`);
+    }
+    if (FORBIDDEN_LITERALS.has(key)) {
+        throw new RangeError(`Actly: key ${JSON.stringify(key)} is forbidden (prototype-pollution vector). ` +
+            `Pick a different key.`);
+    }
+    if (UNSAFE_CHAR.test(key)) {
+        throw new RangeError(`Actly: key contains control characters or CRLF, which break store backends ` +
+            `and log serializers. Got ${JSON.stringify(key)}.`);
+    }
+    for (const prefix of RESERVED_PREFIXES) {
+        if (key.startsWith(prefix)) {
+            throw new RangeError(`Actly: key must not start with reserved prefix "${prefix}" ` +
+                `(got ${JSON.stringify(key)}). These namespaces are used internally.`);
+        }
+    }
+    return key;
+}
+function typeName(v) {
+    if (v === null)
+        return 'null';
+    return typeof v;
+}
+//# sourceMappingURL=key.js.map

package/dist/utils/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../src/utils/key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAU,CAAA;AAE/F;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;AAE7E;;;;GAIG;AACH,MAAM,WAAW,GAAG,sCAAsC,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,oCAAoC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,UAAU,CAClB,oEAAoE;YACpE,2DAA2D,CAC5D,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAClB,qBAAqB,GAAG,CAAC,MAAM,kBAAkB,MAAM,CAAC,cAAc,IAAI;YAC1E,qFAAqF,CACtF,CAAA;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAClB,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,8CAA8C;YAC/E,uBAAuB,CACxB,CAAA;IACH,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAClB,6EAA6E;YAC7E,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CACnD,CAAA;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,mDAAmD,MAAM,IAAI;gBAC7D,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0CAA0C,CACtE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IAC7B,OAAO,OAAO,CAAC,CAAA;AACjB,CAAC"}

package/dist/utils/limits.cjs

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * Centralised numeric limits for all actly inputs.
+ *
+ * # Why central?
+ *
+ * Every numeric input that flows into actly (retry.attempts, timeout.ms,
+ * cache.ttl, etc.) must be bounded to prevent:
+ *  - memory exhaustion (e.g. `cache: { ttl: 1e15 }` → 31 700-year TTL)
+ *  - CPU exhaustion (e.g. `retry: { attempts: 1e9 }`)
+ *  - timer overflow (e.g. `setTimeout(fn, 1e16)` wraps to 1ms on some engines)
+ *
+ * The values are deliberately generous: they prevent pathological abuse,
+ * not legitimate use. If you need to exceed one of these limits, you almost
+ * certainly have a bug.
+ *
+ * These limits are constants — they are not runtime-configurable. If you
+ * need different limits, fork the source or wrap `act()` with your own
+ * validation layer.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LIMITS = void 0;
+exports.LIMITS = Object.freeze({
+    /** Maximum key length in characters. Prevents multi-MB keys bloating stores. */
+    MAX_KEY_LENGTH: 1024,
+    /** Hard ceiling on `retry.attempts`. 100 attempts ≈ 100 fn invocations. */
+    MAX_RETRY_ATTEMPTS: 100,
+    /** Maximum per-attempt / total timeout in ms. ~27 hours. */
+    MAX_TIMEOUT_MS: 100_000_000,
+    /** Maximum cache TTL in ms. ~24 hours. */
+    MAX_CACHE_TTL: 86_400_000,
+    /** Maximum delay between retries in ms. ~5 minutes. */
+    MAX_RETRY_DELAY_MS: 300_000,
+    /** Maximum dedupe inflightTtl in ms. ~24 hours. */
+    MAX_INFLIGHT_TTL: 86_400_000,
+    /** Default bound for InMemoryStore when used as the module-level default. */
+    DEFAULT_STORE_MAX_SIZE: 10_000,
+    /** Background sweep interval for the default store. */
+    DEFAULT_STORE_CLEANUP_INTERVAL_MS: 60_000,
+});

package/dist/utils/limits.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Centralised numeric limits for all actly inputs.
+ *
+ * # Why central?
+ *
+ * Every numeric input that flows into actly (retry.attempts, timeout.ms,
+ * cache.ttl, etc.) must be bounded to prevent:
+ *  - memory exhaustion (e.g. `cache: { ttl: 1e15 }` → 31 700-year TTL)
+ *  - CPU exhaustion (e.g. `retry: { attempts: 1e9 }`)
+ *  - timer overflow (e.g. `setTimeout(fn, 1e16)` wraps to 1ms on some engines)
+ *
+ * The values are deliberately generous: they prevent pathological abuse,
+ * not legitimate use. If you need to exceed one of these limits, you almost
+ * certainly have a bug.
+ *
+ * These limits are constants — they are not runtime-configurable. If you
+ * need different limits, fork the source or wrap `act()` with your own
+ * validation layer.
+ */
+export declare const LIMITS: Readonly<{
+    /** Maximum key length in characters. Prevents multi-MB keys bloating stores. */
+    MAX_KEY_LENGTH: 1024;
+    /** Hard ceiling on `retry.attempts`. 100 attempts ≈ 100 fn invocations. */
+    MAX_RETRY_ATTEMPTS: 100;
+    /** Maximum per-attempt / total timeout in ms. ~27 hours. */
+    MAX_TIMEOUT_MS: 100000000;
+    /** Maximum cache TTL in ms. ~24 hours. */
+    MAX_CACHE_TTL: 86400000;
+    /** Maximum delay between retries in ms. ~5 minutes. */
+    MAX_RETRY_DELAY_MS: 300000;
+    /** Maximum dedupe inflightTtl in ms. ~24 hours. */
+    MAX_INFLIGHT_TTL: 86400000;
+    /** Default bound for InMemoryStore when used as the module-level default. */
+    DEFAULT_STORE_MAX_SIZE: 10000;
+    /** Background sweep interval for the default store. */
+    DEFAULT_STORE_CLEANUP_INTERVAL_MS: 60000;
+}>;
+export type Limits = typeof LIMITS;
+//# sourceMappingURL=limits.d.ts.map

package/dist/utils/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/utils/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,MAAM;IACjB,gFAAgF;;IAGhF,2EAA2E;;IAG3E,4DAA4D;;IAG5D,0CAA0C;;IAG1C,uDAAuD;;IAGvD,mDAAmD;;IAGnD,6EAA6E;;IAG7E,uDAAuD;;EAEvD,CAAA;AAEF,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAA"}

package/dist/utils/limits.js

@@ -0,0 +1,38 @@
+/**
+ * Centralised numeric limits for all actly inputs.
+ *
+ * # Why central?
+ *
+ * Every numeric input that flows into actly (retry.attempts, timeout.ms,
+ * cache.ttl, etc.) must be bounded to prevent:
+ *  - memory exhaustion (e.g. `cache: { ttl: 1e15 }` → 31 700-year TTL)
+ *  - CPU exhaustion (e.g. `retry: { attempts: 1e9 }`)
+ *  - timer overflow (e.g. `setTimeout(fn, 1e16)` wraps to 1ms on some engines)
+ *
+ * The values are deliberately generous: they prevent pathological abuse,
+ * not legitimate use. If you need to exceed one of these limits, you almost
+ * certainly have a bug.
+ *
+ * These limits are constants — they are not runtime-configurable. If you
+ * need different limits, fork the source or wrap `act()` with your own
+ * validation layer.
+ */
+export const LIMITS = Object.freeze({
+    /** Maximum key length in characters. Prevents multi-MB keys bloating stores. */
+    MAX_KEY_LENGTH: 1024,
+    /** Hard ceiling on `retry.attempts`. 100 attempts ≈ 100 fn invocations. */
+    MAX_RETRY_ATTEMPTS: 100,
+    /** Maximum per-attempt / total timeout in ms. ~27 hours. */
+    MAX_TIMEOUT_MS: 100_000_000,
+    /** Maximum cache TTL in ms. ~24 hours. */
+    MAX_CACHE_TTL: 86_400_000,
+    /** Maximum delay between retries in ms. ~5 minutes. */
+    MAX_RETRY_DELAY_MS: 300_000,
+    /** Maximum dedupe inflightTtl in ms. ~24 hours. */
+    MAX_INFLIGHT_TTL: 86_400_000,
+    /** Default bound for InMemoryStore when used as the module-level default. */
+    DEFAULT_STORE_MAX_SIZE: 10_000,
+    /** Background sweep interval for the default store. */
+    DEFAULT_STORE_CLEANUP_INTERVAL_MS: 60_000,
+});
+//# sourceMappingURL=limits.js.map

package/dist/utils/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/utils/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,gFAAgF;IAChF,cAAc,EAAE,IAAI;IAEpB,2EAA2E;IAC3E,kBAAkB,EAAE,GAAG;IAEvB,4DAA4D;IAC5D,cAAc,EAAE,WAAW;IAE3B,0CAA0C;IAC1C,aAAa,EAAE,UAAU;IAEzB,uDAAuD;IACvD,kBAAkB,EAAE,OAAO;IAE3B,mDAAmD;IACnD,gBAAgB,EAAE,UAAU;IAE5B,6EAA6E;IAC7E,sBAAsB,EAAE,MAAM;IAE9B,uDAAuD;IACvD,iCAAiC,EAAE,MAAM;CAC1C,CAAC,CAAA"}

package/dist/utils/sanitize.cjs

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeErrorMessage = sanitizeErrorMessage;
+exports.sanitizeError = sanitizeError;
+const FORBIDDEN_CHARS = /[\x00-\x1f\x7f]/g;
+const HTML_ENTITIES = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#x27;' };
+function sanitizeErrorMessage(msg) {
+    let str;
+    if (msg instanceof Error) {
+        str = msg.message;
+    }
+    else if (typeof msg === 'string') {
+        str = msg;
+    }
+    else {
+        str = String(msg ?? '');
+    }
+    str = str.replace(/[&<>"']/g, (c) => HTML_ENTITIES[c]);
+    str = str.replace(FORBIDDEN_CHARS, '');
+    return str;
+}
+function sanitizeError(err) {
+    if (err instanceof Error) {
+        const sanitized = new Error(sanitizeErrorMessage(err.message));
+        sanitized.name = err.name;
+        return sanitized;
+    }
+    return sanitizeErrorMessage(err);
+}

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,3 @@
+export declare function sanitizeErrorMessage(msg: unknown): string;
+export declare function sanitizeError(err: unknown): unknown;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAGA,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAYzD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOnD"}

package/dist/utils/sanitize.js

@@ -0,0 +1,26 @@
+const FORBIDDEN_CHARS = /[\x00-\x1f\x7f]/g;
+const HTML_ENTITIES = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#x27;' };
+export function sanitizeErrorMessage(msg) {
+    let str;
+    if (msg instanceof Error) {
+        str = msg.message;
+    }
+    else if (typeof msg === 'string') {
+        str = msg;
+    }
+    else {
+        str = String(msg ?? '');
+    }
+    str = str.replace(/[&<>"']/g, (c) => HTML_ENTITIES[c]);
+    str = str.replace(FORBIDDEN_CHARS, '');
+    return str;
+}
+export function sanitizeError(err) {
+    if (err instanceof Error) {
+        const sanitized = new Error(sanitizeErrorMessage(err.message));
+        sanitized.name = err.name;
+        return sanitized;
+    }
+    return sanitizeErrorMessage(err);
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/utils/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,kBAAkB,CAAA;AAC1C,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AAE9F,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,GAAW,CAAA;IACf,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAA;IACnB,CAAC;SAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,GAAG,GAAG,GAAG,CAAA;IACX,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IACzB,CAAC;IACD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAA+B,CAAC,CAAC,CAAA;IACpF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QAC9D,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;QACzB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAA;AAClC,CAAC"}

package/dist/utils/validate.cjs

@@ -0,0 +1,153 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertKey = assertKey;
+exports.assertRetryOptions = assertRetryOptions;
+exports.assertTimeoutOptions = assertTimeoutOptions;
+exports.assertCacheOptions = assertCacheOptions;
+exports.assertDedupeOptions = assertDedupeOptions;
+exports.assertOptions = assertOptions;
+exports.assertAuditOptions = assertAuditOptions;
+exports.assertCircuitBreakerOptions = assertCircuitBreakerOptions;
+exports.assertBulkheadOptions = assertBulkheadOptions;
+exports.assertRateLimitOptions = assertRateLimitOptions;
+exports.assertHedgeOptions = assertHedgeOptions;
+const limits_js_1 = require("./limits.js");
+const key_js_1 = require("./key.js");
+/**
+ * Validate user-facing option shapes. Throws `RangeError` / `TypeError` on
+ * invalid input — these are programmer errors, not runtime failures, so
+ * throwing (rather than returning an `ActFailure`) is the right call.
+ *
+ * Called once at the top of `act()` so policies can assume well-formed input.
+ *
+ * # Caps
+ *
+ * Every numeric input is bounded by {@link LIMITS}. This prevents memory
+ * exhaustion (huge TTLs), CPU exhaustion (huge retry counts), and timer
+ * overflow (huge delays). See `limits.ts` for rationale.
+ */
+function assertKey(key) {
+    // Delegated to the dedicated sanitiser — keeps key rules in one place
+    // for security centralisation. See `key.ts` for the full rule set.
+    (0, key_js_1.sanitizeKey)(key);
+}
+function assertRetryOptions(opts) {
+    if (!Number.isInteger(opts.attempts) || opts.attempts < 1) {
+        throw new RangeError(`Actly: retry.attempts must be a positive integer, got ${opts.attempts}`);
+    }
+    if (opts.attempts > limits_js_1.LIMITS.MAX_RETRY_ATTEMPTS) {
+        throw new RangeError(`Actly: retry.attempts ${opts.attempts} exceeds limit ${limits_js_1.LIMITS.MAX_RETRY_ATTEMPTS}. ` +
+            `If you genuinely need more, use an outer supervisor.`);
+    }
+    if (opts.delayMs !== undefined) {
+        assertNonNegativeFinite('retry.delayMs', opts.delayMs, limits_js_1.LIMITS.MAX_RETRY_DELAY_MS);
+    }
+    if (opts.maxDelay !== undefined) {
+        assertNonNegativeFinite('retry.maxDelay', opts.maxDelay, limits_js_1.LIMITS.MAX_RETRY_DELAY_MS);
+    }
+    if (opts.backoff !== undefined && !BACKOFF_MODES.has(opts.backoff)) {
+        throw new RangeError(`Actly: retry.backoff must be one of ${[...BACKOFF_MODES].map((m) => JSON.stringify(m)).join(' | ')}, ` +
+            `got ${JSON.stringify(opts.backoff)}`);
+    }
+    if (opts.jitter !== undefined && !JITTER_MODES.has(opts.jitter)) {
+        throw new RangeError(`Actly: retry.jitter must be one of ${[...JITTER_MODES].map((m) => JSON.stringify(m)).join(' | ')}, ` +
+            `got ${JSON.stringify(opts.jitter)}`);
+    }
+    if (opts.shouldRetry !== undefined && typeof opts.shouldRetry !== 'function') {
+        throw new TypeError(`Actly: retry.shouldRetry must be a function, got ${typeof opts.shouldRetry}`);
+    }
+}
+function assertTimeoutOptions(opts, field) {
+    if (typeof opts.ms !== 'number' || !Number.isFinite(opts.ms) || opts.ms <= 0) {
+        throw new RangeError(`Actly: ${field}.ms must be a positive finite number, got ${opts.ms}`);
+    }
+    if (opts.ms > limits_js_1.LIMITS.MAX_TIMEOUT_MS) {
+        throw new RangeError(`Actly: ${field}.ms ${opts.ms} exceeds limit ${limits_js_1.LIMITS.MAX_TIMEOUT_MS}.`);
+    }
+}
+function assertCacheOptions(opts) {
+    if (typeof opts.ttl !== 'number' || !Number.isFinite(opts.ttl) || opts.ttl <= 0) {
+        throw new RangeError(`Actly: cache.ttl must be a positive finite number, got ${opts.ttl}`);
+    }
+    if (opts.ttl > limits_js_1.LIMITS.MAX_CACHE_TTL) {
+        throw new RangeError(`Actly: cache.ttl ${opts.ttl} exceeds limit ${limits_js_1.LIMITS.MAX_CACHE_TTL} (~24h).`);
+    }
+}
+function assertDedupeOptions(opts) {
+    if (opts.inflightTtl !== undefined) {
+        assertNonNegativeFinite('dedupe.inflightTtl', opts.inflightTtl, limits_js_1.LIMITS.MAX_INFLIGHT_TTL);
+    }
+}
+function assertOptions(options) {
+    if (options.retry)
+        assertRetryOptions(options.retry);
+    if (options.timeout)
+        assertTimeoutOptions(options.timeout, 'timeout');
+    if (options.totalTimeout)
+        assertTimeoutOptions(options.totalTimeout, 'totalTimeout');
+    if (options.cache)
+        assertCacheOptions(options.cache);
+    if (options.dedupe && typeof options.dedupe !== 'boolean') {
+        assertDedupeOptions(options.dedupe);
+    }
+    if (options.signal !== undefined && !(options.signal instanceof AbortSignal)) {
+        throw new TypeError(`Actly: signal must be an AbortSignal, got ${options.signal === null ? 'null' : typeof options.signal}`);
+    }
+    if (options.circuitBreaker)
+        assertCircuitBreakerOptions(options.circuitBreaker);
+    if (options.bulkhead)
+        assertBulkheadOptions(options.bulkhead);
+    if (options.rateLimit)
+        assertRateLimitOptions(options.rateLimit);
+    if (options.hedge)
+        assertHedgeOptions(options.hedge);
+    if (options.audit)
+        assertAuditOptions(options.audit);
+}
+function assertAuditOptions(opts) {
+    if (typeof opts.log !== 'function') {
+        throw new TypeError(`Actly: audit.log must be a function, got ${opts.log === null ? 'null' : typeof opts.log}`);
+    }
+}
+function assertCircuitBreakerOptions(opts) {
+    if (!Number.isInteger(opts.threshold) || opts.threshold < 1) {
+        throw new RangeError(`Actly: circuitBreaker.threshold must be a positive integer, got ${opts.threshold}`);
+    }
+    if (typeof opts.cooldownMs !== 'number' || !Number.isFinite(opts.cooldownMs) || opts.cooldownMs <= 0) {
+        throw new RangeError(`Actly: circuitBreaker.cooldownMs must be a positive finite number, got ${opts.cooldownMs}`);
+    }
+    if (opts.resetTimeoutMs !== undefined) {
+        assertNonNegativeFinite('circuitBreaker.resetTimeoutMs', opts.resetTimeoutMs, Number.POSITIVE_INFINITY);
+    }
+}
+function assertBulkheadOptions(opts) {
+    if (!Number.isInteger(opts.maxConcurrent) || opts.maxConcurrent < 1) {
+        throw new RangeError(`Actly: bulkhead.maxConcurrent must be a positive integer, got ${opts.maxConcurrent}`);
+    }
+    if (opts.queueTimeoutMs !== undefined) {
+        assertNonNegativeFinite('bulkhead.queueTimeoutMs', opts.queueTimeoutMs, Number.POSITIVE_INFINITY);
+    }
+}
+function assertRateLimitOptions(opts) {
+    if (!Number.isInteger(opts.maxCalls) || opts.maxCalls < 1) {
+        throw new RangeError(`Actly: rateLimit.maxCalls must be a positive integer, got ${opts.maxCalls}`);
+    }
+    if (typeof opts.windowMs !== 'number' || !Number.isFinite(opts.windowMs) || opts.windowMs <= 0) {
+        throw new RangeError(`Actly: rateLimit.windowMs must be a positive finite number, got ${opts.windowMs}`);
+    }
+}
+function assertHedgeOptions(opts) {
+    if (typeof opts.delayMs !== 'number' || !Number.isFinite(opts.delayMs) || opts.delayMs <= 0) {
+        throw new RangeError(`Actly: hedge.delayMs must be a positive finite number, got ${opts.delayMs}`);
+    }
+}
+function assertNonNegativeFinite(field, value, max) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+        throw new RangeError(`Actly: ${field} must be a non-negative finite number, got ${value}`);
+    }
+    if (value > max) {
+        throw new RangeError(`Actly: ${field} ${value} exceeds limit ${max}.`);
+    }
+}
+const BACKOFF_MODES = new Set(['none', 'linear', 'exponential']);
+const JITTER_MODES = new Set(['none', 'full', 'equal', 'decorrelated']);

package/dist/utils/validate.d.ts

@@ -0,0 +1,26 @@
+import type { ActOptions, CacheOptions, DedupeOptions, RetryOptions, TimeoutOptions } from '../types/index.js';
+/**
+ * Validate user-facing option shapes. Throws `RangeError` / `TypeError` on
+ * invalid input — these are programmer errors, not runtime failures, so
+ * throwing (rather than returning an `ActFailure`) is the right call.
+ *
+ * Called once at the top of `act()` so policies can assume well-formed input.
+ *
+ * # Caps
+ *
+ * Every numeric input is bounded by {@link LIMITS}. This prevents memory
+ * exhaustion (huge TTLs), CPU exhaustion (huge retry counts), and timer
+ * overflow (huge delays). See `limits.ts` for rationale.
+ */
+export declare function assertKey(key: string): void;
+export declare function assertRetryOptions(opts: RetryOptions): void;
+export declare function assertTimeoutOptions(opts: TimeoutOptions, field: string): void;
+export declare function assertCacheOptions(opts: CacheOptions): void;
+export declare function assertDedupeOptions(opts: DedupeOptions): void;
+export declare function assertOptions(options: ActOptions): void;
+export declare function assertAuditOptions(opts: import('../types/index.js').AuditOptions): void;
+export declare function assertCircuitBreakerOptions(opts: import('../types/index.js').CircuitBreakerOptions): void;
+export declare function assertBulkheadOptions(opts: import('../types/index.js').BulkheadOptions): void;
+export declare function assertRateLimitOptions(opts: import('../types/index.js').RateLimitOptions): void;
+export declare function assertHedgeOptions(opts: import('../types/index.js').HedgeOptions): void;
+//# sourceMappingURL=validate.d.ts.map

package/dist/utils/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/utils/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACf,MAAM,mBAAmB,CAAA;AAI1B;;;;;;;;;;;;GAYG;AAEH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3C;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAmC3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAW9E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAW3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAI7D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAkBvD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,YAAY,GAAG,IAAI,CAMvF;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,GAAG,IAAI,CAczG;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,eAAe,GAAG,IAAI,CAS7F;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,gBAAgB,GAAG,IAAI,CAW/F;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,YAAY,GAAG,IAAI,CAMvF"}

package/dist/utils/validate.js

@@ -0,0 +1,141 @@
+import { LIMITS } from './limits.js';
+import { sanitizeKey } from './key.js';
+/**
+ * Validate user-facing option shapes. Throws `RangeError` / `TypeError` on
+ * invalid input — these are programmer errors, not runtime failures, so
+ * throwing (rather than returning an `ActFailure`) is the right call.
+ *
+ * Called once at the top of `act()` so policies can assume well-formed input.
+ *
+ * # Caps
+ *
+ * Every numeric input is bounded by {@link LIMITS}. This prevents memory
+ * exhaustion (huge TTLs), CPU exhaustion (huge retry counts), and timer
+ * overflow (huge delays). See `limits.ts` for rationale.
+ */
+export function assertKey(key) {
+    // Delegated to the dedicated sanitiser — keeps key rules in one place
+    // for security centralisation. See `key.ts` for the full rule set.
+    sanitizeKey(key);
+}
+export function assertRetryOptions(opts) {
+    if (!Number.isInteger(opts.attempts) || opts.attempts < 1) {
+        throw new RangeError(`Actly: retry.attempts must be a positive integer, got ${opts.attempts}`);
+    }
+    if (opts.attempts > LIMITS.MAX_RETRY_ATTEMPTS) {
+        throw new RangeError(`Actly: retry.attempts ${opts.attempts} exceeds limit ${LIMITS.MAX_RETRY_ATTEMPTS}. ` +
+            `If you genuinely need more, use an outer supervisor.`);
+    }
+    if (opts.delayMs !== undefined) {
+        assertNonNegativeFinite('retry.delayMs', opts.delayMs, LIMITS.MAX_RETRY_DELAY_MS);
+    }
+    if (opts.maxDelay !== undefined) {
+        assertNonNegativeFinite('retry.maxDelay', opts.maxDelay, LIMITS.MAX_RETRY_DELAY_MS);
+    }
+    if (opts.backoff !== undefined && !BACKOFF_MODES.has(opts.backoff)) {
+        throw new RangeError(`Actly: retry.backoff must be one of ${[...BACKOFF_MODES].map((m) => JSON.stringify(m)).join(' | ')}, ` +
+            `got ${JSON.stringify(opts.backoff)}`);
+    }
+    if (opts.jitter !== undefined && !JITTER_MODES.has(opts.jitter)) {
+        throw new RangeError(`Actly: retry.jitter must be one of ${[...JITTER_MODES].map((m) => JSON.stringify(m)).join(' | ')}, ` +
+            `got ${JSON.stringify(opts.jitter)}`);
+    }
+    if (opts.shouldRetry !== undefined && typeof opts.shouldRetry !== 'function') {
+        throw new TypeError(`Actly: retry.shouldRetry must be a function, got ${typeof opts.shouldRetry}`);
+    }
+}
+export function assertTimeoutOptions(opts, field) {
+    if (typeof opts.ms !== 'number' || !Number.isFinite(opts.ms) || opts.ms <= 0) {
+        throw new RangeError(`Actly: ${field}.ms must be a positive finite number, got ${opts.ms}`);
+    }
+    if (opts.ms > LIMITS.MAX_TIMEOUT_MS) {
+        throw new RangeError(`Actly: ${field}.ms ${opts.ms} exceeds limit ${LIMITS.MAX_TIMEOUT_MS}.`);
+    }
+}
+export function assertCacheOptions(opts) {
+    if (typeof opts.ttl !== 'number' || !Number.isFinite(opts.ttl) || opts.ttl <= 0) {
+        throw new RangeError(`Actly: cache.ttl must be a positive finite number, got ${opts.ttl}`);
+    }
+    if (opts.ttl > LIMITS.MAX_CACHE_TTL) {
+        throw new RangeError(`Actly: cache.ttl ${opts.ttl} exceeds limit ${LIMITS.MAX_CACHE_TTL} (~24h).`);
+    }
+}
+export function assertDedupeOptions(opts) {
+    if (opts.inflightTtl !== undefined) {
+        assertNonNegativeFinite('dedupe.inflightTtl', opts.inflightTtl, LIMITS.MAX_INFLIGHT_TTL);
+    }
+}
+export function assertOptions(options) {
+    if (options.retry)
+        assertRetryOptions(options.retry);
+    if (options.timeout)
+        assertTimeoutOptions(options.timeout, 'timeout');
+    if (options.totalTimeout)
+        assertTimeoutOptions(options.totalTimeout, 'totalTimeout');
+    if (options.cache)
+        assertCacheOptions(options.cache);
+    if (options.dedupe && typeof options.dedupe !== 'boolean') {
+        assertDedupeOptions(options.dedupe);
+    }
+    if (options.signal !== undefined && !(options.signal instanceof AbortSignal)) {
+        throw new TypeError(`Actly: signal must be an AbortSignal, got ${options.signal === null ? 'null' : typeof options.signal}`);
+    }
+    if (options.circuitBreaker)
+        assertCircuitBreakerOptions(options.circuitBreaker);
+    if (options.bulkhead)
+        assertBulkheadOptions(options.bulkhead);
+    if (options.rateLimit)
+        assertRateLimitOptions(options.rateLimit);
+    if (options.hedge)
+        assertHedgeOptions(options.hedge);
+    if (options.audit)
+        assertAuditOptions(options.audit);
+}
+export function assertAuditOptions(opts) {
+    if (typeof opts.log !== 'function') {
+        throw new TypeError(`Actly: audit.log must be a function, got ${opts.log === null ? 'null' : typeof opts.log}`);
+    }
+}
+export function assertCircuitBreakerOptions(opts) {
+    if (!Number.isInteger(opts.threshold) || opts.threshold < 1) {
+        throw new RangeError(`Actly: circuitBreaker.threshold must be a positive integer, got ${opts.threshold}`);
+    }
+    if (typeof opts.cooldownMs !== 'number' || !Number.isFinite(opts.cooldownMs) || opts.cooldownMs <= 0) {
+        throw new RangeError(`Actly: circuitBreaker.cooldownMs must be a positive finite number, got ${opts.cooldownMs}`);
+    }
+    if (opts.resetTimeoutMs !== undefined) {
+        assertNonNegativeFinite('circuitBreaker.resetTimeoutMs', opts.resetTimeoutMs, Number.POSITIVE_INFINITY);
+    }
+}
+export function assertBulkheadOptions(opts) {
+    if (!Number.isInteger(opts.maxConcurrent) || opts.maxConcurrent < 1) {
+        throw new RangeError(`Actly: bulkhead.maxConcurrent must be a positive integer, got ${opts.maxConcurrent}`);
+    }
+    if (opts.queueTimeoutMs !== undefined) {
+        assertNonNegativeFinite('bulkhead.queueTimeoutMs', opts.queueTimeoutMs, Number.POSITIVE_INFINITY);
+    }
+}
+export function assertRateLimitOptions(opts) {
+    if (!Number.isInteger(opts.maxCalls) || opts.maxCalls < 1) {
+        throw new RangeError(`Actly: rateLimit.maxCalls must be a positive integer, got ${opts.maxCalls}`);
+    }
+    if (typeof opts.windowMs !== 'number' || !Number.isFinite(opts.windowMs) || opts.windowMs <= 0) {
+        throw new RangeError(`Actly: rateLimit.windowMs must be a positive finite number, got ${opts.windowMs}`);
+    }
+}
+export function assertHedgeOptions(opts) {
+    if (typeof opts.delayMs !== 'number' || !Number.isFinite(opts.delayMs) || opts.delayMs <= 0) {
+        throw new RangeError(`Actly: hedge.delayMs must be a positive finite number, got ${opts.delayMs}`);
+    }
+}
+function assertNonNegativeFinite(field, value, max) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+        throw new RangeError(`Actly: ${field} must be a non-negative finite number, got ${value}`);
+    }
+    if (value > max) {
+        throw new RangeError(`Actly: ${field} ${value} exceeds limit ${max}.`);
+    }
+}
+const BACKOFF_MODES = new Set(['none', 'linear', 'exponential']);
+const JITTER_MODES = new Set(['none', 'full', 'equal', 'decorrelated']);
+//# sourceMappingURL=validate.js.map

package/dist/utils/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/utils/validate.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC;;;;;;;;;;;;GAYG;AAEH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,sEAAsE;IACtE,mEAAmE;IACnE,WAAW,CAAC,GAAG,CAAC,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAClB,yDAAyD,IAAI,CAAC,QAAQ,EAAE,CACzE,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAClB,yBAAyB,IAAI,CAAC,QAAQ,kBAAkB,MAAM,CAAC,kBAAkB,IAAI;YACrF,sDAAsD,CACvD,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,uBAAuB,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,uBAAuB,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAClB,uCAAuC,CAAC,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YACvG,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACtC,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAClB,sCAAsC,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YACrG,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACrC,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CACjB,oDAAoD,OAAO,IAAI,CAAC,WAAW,EAAE,CAC9E,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAoB,EAAE,KAAa;IACtE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,UAAU,CAClB,UAAU,KAAK,6CAA6C,IAAI,CAAC,EAAE,EAAE,CACtE,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAClB,UAAU,KAAK,OAAO,IAAI,CAAC,EAAE,kBAAkB,MAAM,CAAC,cAAc,GAAG,CACxE,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,UAAU,CAClB,0DAA0D,IAAI,CAAC,GAAG,EAAE,CACrE,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAClB,oBAAoB,IAAI,CAAC,GAAG,kBAAkB,MAAM,CAAC,aAAa,UAAU,CAC7E,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAmB;IACrD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,uBAAuB,CAAC,oBAAoB,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAmB;IAC/C,IAAI,OAAO,CAAC,KAAK;QAAW,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,OAAO,CAAC,OAAO;QAAS,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC5E,IAAI,OAAO,CAAC,YAAY;QAAI,oBAAoB,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IACtF,IAAI,OAAO,CAAC,KAAK;QAAW,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1D,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CACjB,6CAA6C,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,CACxG,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,cAAc;QAAE,2BAA2B,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC/E,IAAI,OAAO,CAAC,QAAQ;QAAQ,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnE,IAAI,OAAO,CAAC,SAAS;QAAO,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACrE,IAAI,OAAO,CAAC,KAAK;QAAW,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,OAAO,CAAC,KAAK;QAAW,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAA8C;IAC/E,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CACjB,4CAA4C,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAC3F,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAuD;IACjG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,UAAU,CAClB,mEAAmE,IAAI,CAAC,SAAS,EAAE,CACpF,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,UAAU,CAClB,0EAA0E,IAAI,CAAC,UAAU,EAAE,CAC5F,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,uBAAuB,CAAC,+BAA+B,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IACzG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAiD;IACrF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,UAAU,CAClB,iEAAiE,IAAI,CAAC,aAAa,EAAE,CACtF,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,uBAAuB,CAAC,yBAAyB,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IACnG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAkD;IACvF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAClB,6DAA6D,IAAI,CAAC,QAAQ,EAAE,CAC7E,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,UAAU,CAClB,mEAAmE,IAAI,CAAC,QAAQ,EAAE,CACnF,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAA8C;IAC/E,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,UAAU,CAClB,8DAA8D,IAAI,CAAC,OAAO,EAAE,CAC7E,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,UAAU,CAClB,UAAU,KAAK,8CAA8C,KAAK,EAAE,CACrE,CAAA;IACH,CAAC;IACD,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAClB,UAAU,KAAK,IAAI,KAAK,kBAAkB,GAAG,GAAG,CACjD,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC,CAAA;AACzE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAU,CAAC,CAAA"}