actly 1.1.5 → 1.2.0

package/dist/utils/backoff.cjs

@@ -33,11 +33,22 @@ function computeDelay(attempt, opts) {
         delay = max;
     delay = Math.min(delay, max);
     // Step 3: jitter
+    // All jitter variants produce a delay in [0, delay].
+    // The `decorrelated` formula `base + random() * (delay - base)` assumes
+    // delay >= base, which can be violated when maxDelay caps below base.
+    // Fix: clamp the final result to [0, delay] to guarantee the cap holds.
     switch (opts.jitter ?? 'full') {
         case 'none': return delay;
         case 'full': return Math.random() * delay;
         case 'equal': return delay / 2 + Math.random() * delay / 2;
-        case 'decorrelated': return base + Math.random() * (delay - base);
+        case 'decorrelated': {
+            // If delay < base (maxDelay capped below base), decorrelated degrades
+            // to full jitter — the formula would otherwise produce values > delay.
+            const lo = Math.min(base, delay);
+            const hi = delay;
+            const result = lo + Math.random() * (hi - lo);
+            return Math.max(0, Math.min(result, delay));
+        }
         default: return delay;
     }
 }

package/dist/utils/backoff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backoff.d.ts","sourceRoot":"","sources":["../../src/utils/backoff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,CAyBxE"}
+{"version":3,"file":"backoff.d.ts","sourceRoot":"","sources":["../../src/utils/backoff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,CAoCxE"}

package/dist/utils/backoff.js

@@ -30,11 +30,22 @@ export function computeDelay(attempt, opts) {
         delay = max;
     delay = Math.min(delay, max);
     // Step 3: jitter
+    // All jitter variants produce a delay in [0, delay].
+    // The `decorrelated` formula `base + random() * (delay - base)` assumes
+    // delay >= base, which can be violated when maxDelay caps below base.
+    // Fix: clamp the final result to [0, delay] to guarantee the cap holds.
     switch (opts.jitter ?? 'full') {
         case 'none': return delay;
         case 'full': return Math.random() * delay;
         case 'equal': return delay / 2 + Math.random() * delay / 2;
-        case 'decorrelated': return base + Math.random() * (delay - base);
+        case 'decorrelated': {
+            // If delay < base (maxDelay capped below base), decorrelated degrades
+            // to full jitter — the formula would otherwise produce values > delay.
+            const lo = Math.min(base, delay);
+            const hi = delay;
+            const result = lo + Math.random() * (hi - lo);
+            return Math.max(0, Math.min(result, delay));
+        }
         default: return delay;
     }
 }

package/dist/utils/backoff.js.map

@@ -1 +1 @@
-{"version":3,"file":"backoff.js","sourceRoot":"","sources":["../../src/utils/backoff.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAkB;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC9B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAExB,kBAAkB;IAClB,IAAI,KAAa,CAAA;IACjB,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;QAC/B,KAAK,QAAQ;YAAO,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC;YAAC,MAAK;QACjD,KAAK,aAAa;YAAE,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAAC,MAAK;QAC5D,OAAO,CAAC,CAAY,KAAK,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,+DAA+D;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAA;IACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,KAAK,GAAG,GAAG,CAAA;IACxC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE5B,iBAAiB;IACjB,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAS,OAAO,KAAK,CAAA;QACjC,KAAK,MAAM,CAAC,CAAS,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAA;QACjD,KAAK,OAAO,CAAC,CAAQ,OAAO,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAA;QACjE,KAAK,cAAc,CAAC,CAAC,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;QACjE,OAAO,CAAC,CAAa,OAAO,KAAK,CAAA;IACnC,CAAC;AACH,CAAC"}
+{"version":3,"file":"backoff.js","sourceRoot":"","sources":["../../src/utils/backoff.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAkB;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC9B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAExB,kBAAkB;IAClB,IAAI,KAAa,CAAA;IACjB,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;QAC/B,KAAK,QAAQ;YAAO,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC;YAAC,MAAK;QACjD,KAAK,aAAa;YAAE,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAAC,MAAK;QAC5D,OAAO,CAAC,CAAY,KAAK,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,+DAA+D;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAA;IACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,KAAK,GAAG,GAAG,CAAA;IACxC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE5B,iBAAiB;IACjB,qDAAqD;IACrD,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAS,OAAO,KAAK,CAAA;QACjC,KAAK,MAAM,CAAC,CAAS,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAA;QACjD,KAAK,OAAO,CAAC,CAAQ,OAAO,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAA;QACjE,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAChC,MAAM,EAAE,GAAG,KAAK,CAAA;YAChB,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO,CAAC,CAAa,OAAO,KAAK,CAAA;IACnC,CAAC;AACH,CAAC"}

package/dist/utils/key.cjs

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * Key sanitisation — the first line of defence against:
+ *
+ *  - **Prototype pollution**: `__proto__`, `constructor`, `prototype` as keys
+ *    bypass namespace isolation in plain-object store adapters.
+ *  - **Control-char injection**: `\x00`–`\x1f`, `\x7f` break some store
+ *    backends (Redis Lua, HTTP header logs, JSON-LD contexts).
+ *  - **CRLF injection**: `\r\n` in keys can break naive log/HTTP serializers.
+ *  - **Memory exhaustion**: unbounded key length lets a caller store a 10MB
+ *    string as a key, bloating the store and blocking iteration.
+ *  - **Namespace collision**: user keys starting with `dedupe:`, `cache:`,
+ *    or `__inflight:` would clobber internal slots.
+ *
+ * # Why a dedicated module?
+ *
+ * Key validation is security-sensitive. Centralising it here means every
+ * call site (`act()`, `invalidate()`, `withStore().invalidate()`) applies
+ * the same rules. Local inlining risks drift.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeKey = sanitizeKey;
+const limits_js_1 = require("./limits.js");
+const RESERVED_PREFIXES = ['dedupe:', 'cache:', '__inflight:', '__tenant:', 'tenant:'];
+/**
+ * Strings that, if used as Map keys, are safe — but if used as plain-object
+ * keys (e.g. a naive store adapter) enable prototype pollution. Reject them
+ * regardless of store type: the contract is "your key is safe everywhere".
+ */
+const FORBIDDEN_LITERALS = new Set(['__proto__', 'constructor', 'prototype']);
+/**
+ * Reject any character in the C0 control range, DEL (0x7f), or CRLF.
+ * Allow TAB (0x09) and LF (0x0a) since some callers embed newlines in
+ * structured keys legitimately — but CR is always forbidden.
+ */
+const UNSAFE_CHAR = /[\x00-\x08\x0b\x0c\x0d\x0e-\x1f\x7f]/;
+/**
+ * Validate a user-supplied key. Throws synchronously on invalid input.
+ *
+ * Programmer errors throw — they must not be swallowed into an `ActFailure`
+ * because the caller's code is broken.
+ *
+ * @returns the same `key` (for chaining); never transforms it.
+ */
+function sanitizeKey(key) {
+    if (typeof key !== 'string') {
+        throw new TypeError(`Actly: key must be a string, got ${typeName(key)}`);
+    }
+    if (key.length === 0) {
+        throw new RangeError("Actly: key must be non-empty. An empty key collapses every caller " +
+            "onto the same dedupe/cache slot — almost certainly a bug.");
+    }
+    if (key.length > limits_js_1.LIMITS.MAX_KEY_LENGTH) {
+        throw new RangeError(`Actly: key length ${key.length} exceeds limit ${limits_js_1.LIMITS.MAX_KEY_LENGTH}. ` +
+            `Long keys bloat stores and slow iteration. Hash externally if you need longer keys.`);
+    }
+    if (FORBIDDEN_LITERALS.has(key)) {
+        throw new RangeError(`Actly: key ${JSON.stringify(key)} is forbidden (prototype-pollution vector). ` +
+            `Pick a different key.`);
+    }
+    if (UNSAFE_CHAR.test(key)) {
+        throw new RangeError(`Actly: key contains control characters or CRLF, which break store backends ` +
+            `and log serializers. Got ${JSON.stringify(key)}.`);
+    }
+    for (const prefix of RESERVED_PREFIXES) {
+        if (key.startsWith(prefix)) {
+            throw new RangeError(`Actly: key must not start with reserved prefix "${prefix}" ` +
+                `(got ${JSON.stringify(key)}). These namespaces are used internally.`);
+        }
+    }
+    return key;
+}
+function typeName(v) {
+    if (v === null)
+        return 'null';
+    return typeof v;
+}

package/dist/utils/key.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Key sanitisation — the first line of defence against:
+ *
+ *  - **Prototype pollution**: `__proto__`, `constructor`, `prototype` as keys
+ *    bypass namespace isolation in plain-object store adapters.
+ *  - **Control-char injection**: `\x00`–`\x1f`, `\x7f` break some store
+ *    backends (Redis Lua, HTTP header logs, JSON-LD contexts).
+ *  - **CRLF injection**: `\r\n` in keys can break naive log/HTTP serializers.
+ *  - **Memory exhaustion**: unbounded key length lets a caller store a 10MB
+ *    string as a key, bloating the store and blocking iteration.
+ *  - **Namespace collision**: user keys starting with `dedupe:`, `cache:`,
+ *    or `__inflight:` would clobber internal slots.
+ *
+ * # Why a dedicated module?
+ *
+ * Key validation is security-sensitive. Centralising it here means every
+ * call site (`act()`, `invalidate()`, `withStore().invalidate()`) applies
+ * the same rules. Local inlining risks drift.
+ */
+/**
+ * Validate a user-supplied key. Throws synchronously on invalid input.
+ *
+ * Programmer errors throw — they must not be swallowed into an `ActFailure`
+ * because the caller's code is broken.
+ *
+ * @returns the same `key` (for chaining); never transforms it.
+ */
+export declare function sanitizeKey(key: string): string;
+//# sourceMappingURL=key.d.ts.map

package/dist/utils/key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../src/utils/key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAoBH;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqC/C"}

package/dist/utils/key.js

@@ -0,0 +1,75 @@
+/**
+ * Key sanitisation — the first line of defence against:
+ *
+ *  - **Prototype pollution**: `__proto__`, `constructor`, `prototype` as keys
+ *    bypass namespace isolation in plain-object store adapters.
+ *  - **Control-char injection**: `\x00`–`\x1f`, `\x7f` break some store
+ *    backends (Redis Lua, HTTP header logs, JSON-LD contexts).
+ *  - **CRLF injection**: `\r\n` in keys can break naive log/HTTP serializers.
+ *  - **Memory exhaustion**: unbounded key length lets a caller store a 10MB
+ *    string as a key, bloating the store and blocking iteration.
+ *  - **Namespace collision**: user keys starting with `dedupe:`, `cache:`,
+ *    or `__inflight:` would clobber internal slots.
+ *
+ * # Why a dedicated module?
+ *
+ * Key validation is security-sensitive. Centralising it here means every
+ * call site (`act()`, `invalidate()`, `withStore().invalidate()`) applies
+ * the same rules. Local inlining risks drift.
+ */
+import { LIMITS } from './limits.js';
+const RESERVED_PREFIXES = ['dedupe:', 'cache:', '__inflight:', '__tenant:', 'tenant:'];
+/**
+ * Strings that, if used as Map keys, are safe — but if used as plain-object
+ * keys (e.g. a naive store adapter) enable prototype pollution. Reject them
+ * regardless of store type: the contract is "your key is safe everywhere".
+ */
+const FORBIDDEN_LITERALS = new Set(['__proto__', 'constructor', 'prototype']);
+/**
+ * Reject any character in the C0 control range, DEL (0x7f), or CRLF.
+ * Allow TAB (0x09) and LF (0x0a) since some callers embed newlines in
+ * structured keys legitimately — but CR is always forbidden.
+ */
+const UNSAFE_CHAR = /[\x00-\x08\x0b\x0c\x0d\x0e-\x1f\x7f]/;
+/**
+ * Validate a user-supplied key. Throws synchronously on invalid input.
+ *
+ * Programmer errors throw — they must not be swallowed into an `ActFailure`
+ * because the caller's code is broken.
+ *
+ * @returns the same `key` (for chaining); never transforms it.
+ */
+export function sanitizeKey(key) {
+    if (typeof key !== 'string') {
+        throw new TypeError(`Actly: key must be a string, got ${typeName(key)}`);
+    }
+    if (key.length === 0) {
+        throw new RangeError("Actly: key must be non-empty. An empty key collapses every caller " +
+            "onto the same dedupe/cache slot — almost certainly a bug.");
+    }
+    if (key.length > LIMITS.MAX_KEY_LENGTH) {
+        throw new RangeError(`Actly: key length ${key.length} exceeds limit ${LIMITS.MAX_KEY_LENGTH}. ` +
+            `Long keys bloat stores and slow iteration. Hash externally if you need longer keys.`);
+    }
+    if (FORBIDDEN_LITERALS.has(key)) {
+        throw new RangeError(`Actly: key ${JSON.stringify(key)} is forbidden (prototype-pollution vector). ` +
+            `Pick a different key.`);
+    }
+    if (UNSAFE_CHAR.test(key)) {
+        throw new RangeError(`Actly: key contains control characters or CRLF, which break store backends ` +
+            `and log serializers. Got ${JSON.stringify(key)}.`);
+    }
+    for (const prefix of RESERVED_PREFIXES) {
+        if (key.startsWith(prefix)) {
+            throw new RangeError(`Actly: key must not start with reserved prefix "${prefix}" ` +
+                `(got ${JSON.stringify(key)}). These namespaces are used internally.`);
+        }
+    }
+    return key;
+}
+function typeName(v) {
+    if (v === null)
+        return 'null';
+    return typeof v;
+}
+//# sourceMappingURL=key.js.map

package/dist/utils/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../src/utils/key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAU,CAAA;AAE/F;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAA;AAE7E;;;;GAIG;AACH,MAAM,WAAW,GAAG,sCAAsC,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,oCAAoC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,UAAU,CAClB,oEAAoE;YACpE,2DAA2D,CAC5D,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAClB,qBAAqB,GAAG,CAAC,MAAM,kBAAkB,MAAM,CAAC,cAAc,IAAI;YAC1E,qFAAqF,CACtF,CAAA;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAClB,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,8CAA8C;YAC/E,uBAAuB,CACxB,CAAA;IACH,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAClB,6EAA6E;YAC7E,4BAA4B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CACnD,CAAA;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,mDAAmD,MAAM,IAAI;gBAC7D,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0CAA0C,CACtE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IAC7B,OAAO,OAAO,CAAC,CAAA;AACjB,CAAC"}

package/dist/utils/limits.cjs

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * Centralised numeric limits for all actly inputs.
+ *
+ * # Why central?
+ *
+ * Every numeric input that flows into actly (retry.attempts, timeout.ms,
+ * cache.ttl, etc.) must be bounded to prevent:
+ *  - memory exhaustion (e.g. `cache: { ttl: 1e15 }` → 31 700-year TTL)
+ *  - CPU exhaustion (e.g. `retry: { attempts: 1e9 }`)
+ *  - timer overflow (e.g. `setTimeout(fn, 1e16)` wraps to 1ms on some engines)
+ *
+ * The values are deliberately generous: they prevent pathological abuse,
+ * not legitimate use. If you need to exceed one of these limits, you almost
+ * certainly have a bug.
+ *
+ * These limits are constants — they are not runtime-configurable. If you
+ * need different limits, fork the source or wrap `act()` with your own
+ * validation layer.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LIMITS = void 0;
+exports.LIMITS = Object.freeze({
+    /** Maximum key length in characters. Prevents multi-MB keys bloating stores. */
+    MAX_KEY_LENGTH: 1024,
+    /** Hard ceiling on `retry.attempts`. 100 attempts ≈ 100 fn invocations. */
+    MAX_RETRY_ATTEMPTS: 100,
+    /** Maximum per-attempt / total timeout in ms. ~27 hours. */
+    MAX_TIMEOUT_MS: 100_000_000,
+    /** Maximum cache TTL in ms. ~24 hours. */
+    MAX_CACHE_TTL: 86_400_000,
+    /** Maximum delay between retries in ms. ~5 minutes. */
+    MAX_RETRY_DELAY_MS: 300_000,
+    /** Maximum dedupe inflightTtl in ms. ~24 hours. */
+    MAX_INFLIGHT_TTL: 86_400_000,
+    /** Default bound for InMemoryStore when used as the module-level default. */
+    DEFAULT_STORE_MAX_SIZE: 10_000,
+    /** Background sweep interval for the default store. */
+    DEFAULT_STORE_CLEANUP_INTERVAL_MS: 60_000,
+});

package/dist/utils/limits.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Centralised numeric limits for all actly inputs.
+ *
+ * # Why central?
+ *
+ * Every numeric input that flows into actly (retry.attempts, timeout.ms,
+ * cache.ttl, etc.) must be bounded to prevent:
+ *  - memory exhaustion (e.g. `cache: { ttl: 1e15 }` → 31 700-year TTL)
+ *  - CPU exhaustion (e.g. `retry: { attempts: 1e9 }`)
+ *  - timer overflow (e.g. `setTimeout(fn, 1e16)` wraps to 1ms on some engines)
+ *
+ * The values are deliberately generous: they prevent pathological abuse,
+ * not legitimate use. If you need to exceed one of these limits, you almost
+ * certainly have a bug.
+ *
+ * These limits are constants — they are not runtime-configurable. If you
+ * need different limits, fork the source or wrap `act()` with your own
+ * validation layer.
+ */
+export declare const LIMITS: Readonly<{
+    /** Maximum key length in characters. Prevents multi-MB keys bloating stores. */
+    MAX_KEY_LENGTH: 1024;
+    /** Hard ceiling on `retry.attempts`. 100 attempts ≈ 100 fn invocations. */
+    MAX_RETRY_ATTEMPTS: 100;
+    /** Maximum per-attempt / total timeout in ms. ~27 hours. */
+    MAX_TIMEOUT_MS: 100000000;
+    /** Maximum cache TTL in ms. ~24 hours. */
+    MAX_CACHE_TTL: 86400000;
+    /** Maximum delay between retries in ms. ~5 minutes. */
+    MAX_RETRY_DELAY_MS: 300000;
+    /** Maximum dedupe inflightTtl in ms. ~24 hours. */
+    MAX_INFLIGHT_TTL: 86400000;
+    /** Default bound for InMemoryStore when used as the module-level default. */
+    DEFAULT_STORE_MAX_SIZE: 10000;
+    /** Background sweep interval for the default store. */
+    DEFAULT_STORE_CLEANUP_INTERVAL_MS: 60000;
+}>;
+export type Limits = typeof LIMITS;
+//# sourceMappingURL=limits.d.ts.map

package/dist/utils/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/utils/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,MAAM;IACjB,gFAAgF;;IAGhF,2EAA2E;;IAG3E,4DAA4D;;IAG5D,0CAA0C;;IAG1C,uDAAuD;;IAGvD,mDAAmD;;IAGnD,6EAA6E;;IAG7E,uDAAuD;;EAEvD,CAAA;AAEF,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAA"}

package/dist/utils/limits.js

@@ -0,0 +1,38 @@
+/**
+ * Centralised numeric limits for all actly inputs.
+ *
+ * # Why central?
+ *
+ * Every numeric input that flows into actly (retry.attempts, timeout.ms,
+ * cache.ttl, etc.) must be bounded to prevent:
+ *  - memory exhaustion (e.g. `cache: { ttl: 1e15 }` → 31 700-year TTL)
+ *  - CPU exhaustion (e.g. `retry: { attempts: 1e9 }`)
+ *  - timer overflow (e.g. `setTimeout(fn, 1e16)` wraps to 1ms on some engines)
+ *
+ * The values are deliberately generous: they prevent pathological abuse,
+ * not legitimate use. If you need to exceed one of these limits, you almost
+ * certainly have a bug.
+ *
+ * These limits are constants — they are not runtime-configurable. If you
+ * need different limits, fork the source or wrap `act()` with your own
+ * validation layer.
+ */
+export const LIMITS = Object.freeze({
+    /** Maximum key length in characters. Prevents multi-MB keys bloating stores. */
+    MAX_KEY_LENGTH: 1024,
+    /** Hard ceiling on `retry.attempts`. 100 attempts ≈ 100 fn invocations. */
+    MAX_RETRY_ATTEMPTS: 100,
+    /** Maximum per-attempt / total timeout in ms. ~27 hours. */
+    MAX_TIMEOUT_MS: 100_000_000,
+    /** Maximum cache TTL in ms. ~24 hours. */
+    MAX_CACHE_TTL: 86_400_000,
+    /** Maximum delay between retries in ms. ~5 minutes. */
+    MAX_RETRY_DELAY_MS: 300_000,
+    /** Maximum dedupe inflightTtl in ms. ~24 hours. */
+    MAX_INFLIGHT_TTL: 86_400_000,
+    /** Default bound for InMemoryStore when used as the module-level default. */
+    DEFAULT_STORE_MAX_SIZE: 10_000,
+    /** Background sweep interval for the default store. */
+    DEFAULT_STORE_CLEANUP_INTERVAL_MS: 60_000,
+});
+//# sourceMappingURL=limits.js.map

package/dist/utils/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/utils/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,gFAAgF;IAChF,cAAc,EAAE,IAAI;IAEpB,2EAA2E;IAC3E,kBAAkB,EAAE,GAAG;IAEvB,4DAA4D;IAC5D,cAAc,EAAE,WAAW;IAE3B,0CAA0C;IAC1C,aAAa,EAAE,UAAU;IAEzB,uDAAuD;IACvD,kBAAkB,EAAE,OAAO;IAE3B,mDAAmD;IACnD,gBAAgB,EAAE,UAAU;IAE5B,6EAA6E;IAC7E,sBAAsB,EAAE,MAAM;IAE9B,uDAAuD;IACvD,iCAAiC,EAAE,MAAM;CAC1C,CAAC,CAAA"}

package/dist/utils/sanitize.cjs

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeErrorMessage = sanitizeErrorMessage;
+exports.sanitizeError = sanitizeError;
+const FORBIDDEN_CHARS = /[\x00-\x1f\x7f]/g;
+const HTML_ENTITIES = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#x27;' };
+function sanitizeErrorMessage(msg) {
+    let str;
+    if (msg instanceof Error) {
+        str = msg.message;
+    }
+    else if (typeof msg === 'string') {
+        str = msg;
+    }
+    else {
+        str = String(msg ?? '');
+    }
+    str = str.replace(/[&<>"']/g, (c) => HTML_ENTITIES[c]);
+    str = str.replace(FORBIDDEN_CHARS, '');
+    return str;
+}
+function sanitizeError(err) {
+    if (err instanceof Error) {
+        const sanitized = new Error(sanitizeErrorMessage(err.message));
+        sanitized.name = err.name;
+        return sanitized;
+    }
+    return sanitizeErrorMessage(err);
+}

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,3 @@
+export declare function sanitizeErrorMessage(msg: unknown): string;
+export declare function sanitizeError(err: unknown): unknown;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAGA,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAYzD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOnD"}

package/dist/utils/sanitize.js

@@ -0,0 +1,26 @@
+const FORBIDDEN_CHARS = /[\x00-\x1f\x7f]/g;
+const HTML_ENTITIES = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#x27;' };
+export function sanitizeErrorMessage(msg) {
+    let str;
+    if (msg instanceof Error) {
+        str = msg.message;
+    }
+    else if (typeof msg === 'string') {
+        str = msg;
+    }
+    else {
+        str = String(msg ?? '');
+    }
+    str = str.replace(/[&<>"']/g, (c) => HTML_ENTITIES[c]);
+    str = str.replace(FORBIDDEN_CHARS, '');
+    return str;
+}
+export function sanitizeError(err) {
+    if (err instanceof Error) {
+        const sanitized = new Error(sanitizeErrorMessage(err.message));
+        sanitized.name = err.name;
+        return sanitized;
+    }
+    return sanitizeErrorMessage(err);
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/utils/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,kBAAkB,CAAA;AAC1C,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AAE9F,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,GAAW,CAAA;IACf,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAA;IACnB,CAAC;SAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,GAAG,GAAG,GAAG,CAAA;IACX,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IACzB,CAAC;IACD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAA+B,CAAC,CAAC,CAAA;IACpF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QAC9D,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;QACzB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAA;AAClC,CAAC"}

package/dist/utils/validate.cjs

@@ -6,36 +6,52 @@ exports.assertTimeoutOptions = assertTimeoutOptions;
 exports.assertCacheOptions = assertCacheOptions;
 exports.assertDedupeOptions = assertDedupeOptions;
 exports.assertOptions = assertOptions;
+exports.assertAuditOptions = assertAuditOptions;
+exports.assertCircuitBreakerOptions = assertCircuitBreakerOptions;
+exports.assertBulkheadOptions = assertBulkheadOptions;
+exports.assertRateLimitOptions = assertRateLimitOptions;
+exports.assertHedgeOptions = assertHedgeOptions;
+const limits_js_1 = require("./limits.js");
+const key_js_1 = require("./key.js");
 /**
  * Validate user-facing option shapes. Throws `RangeError` / `TypeError` on
  * invalid input — these are programmer errors, not runtime failures, so
  * throwing (rather than returning an `ActFailure`) is the right call.
  *
  * Called once at the top of `act()` so policies can assume well-formed input.
+ *
+ * # Caps
+ *
+ * Every numeric input is bounded by {@link LIMITS}. This prevents memory
+ * exhaustion (huge TTLs), CPU exhaustion (huge retry counts), and timer
+ * overflow (huge delays). See `limits.ts` for rationale.
  */
 function assertKey(key) {
-    if (typeof key !== 'string') {
-        throw new TypeError(`Actly: key must be a string, got ${typeof key}`);
-    }
-    if (key.length === 0) {
-        throw new RangeError("Actly: key must be non-empty. An empty key collapses every caller " +
-            "onto the same dedupe/cache slot — almost certainly a bug.");
-    }
-    // Reject reserved internal prefixes so user keys cannot collide with
-    // dedupe/cache namespace prefixes.
-    if (key.startsWith('dedupe:') || key.startsWith('cache:') || key.startsWith('__inflight:')) {
-        throw new RangeError(`Actly: key must not start with reserved prefix "dedupe:", "cache:", or "__inflight:" (got ${JSON.stringify(key)}).`);
-    }
+    // Delegated to the dedicated sanitiser — keeps key rules in one place
+    // for security centralisation. See `key.ts` for the full rule set.
+    (0, key_js_1.sanitizeKey)(key);
 }
 function assertRetryOptions(opts) {
     if (!Number.isInteger(opts.attempts) || opts.attempts < 1) {
         throw new RangeError(`Actly: retry.attempts must be a positive integer, got ${opts.attempts}`);
     }
+    if (opts.attempts > limits_js_1.LIMITS.MAX_RETRY_ATTEMPTS) {
+        throw new RangeError(`Actly: retry.attempts ${opts.attempts} exceeds limit ${limits_js_1.LIMITS.MAX_RETRY_ATTEMPTS}. ` +
+            `If you genuinely need more, use an outer supervisor.`);
+    }
     if (opts.delayMs !== undefined) {
-        assertNonNegativeFinite('retry.delayMs', opts.delayMs);
+        assertNonNegativeFinite('retry.delayMs', opts.delayMs, limits_js_1.LIMITS.MAX_RETRY_DELAY_MS);
     }
     if (opts.maxDelay !== undefined) {
-        assertNonNegativeFinite('retry.maxDelay', opts.maxDelay);
+        assertNonNegativeFinite('retry.maxDelay', opts.maxDelay, limits_js_1.LIMITS.MAX_RETRY_DELAY_MS);
+    }
+    if (opts.backoff !== undefined && !BACKOFF_MODES.has(opts.backoff)) {
+        throw new RangeError(`Actly: retry.backoff must be one of ${[...BACKOFF_MODES].map((m) => JSON.stringify(m)).join(' | ')}, ` +
+            `got ${JSON.stringify(opts.backoff)}`);
+    }
+    if (opts.jitter !== undefined && !JITTER_MODES.has(opts.jitter)) {
+        throw new RangeError(`Actly: retry.jitter must be one of ${[...JITTER_MODES].map((m) => JSON.stringify(m)).join(' | ')}, ` +
+            `got ${JSON.stringify(opts.jitter)}`);
     }
     if (opts.shouldRetry !== undefined && typeof opts.shouldRetry !== 'function') {
         throw new TypeError(`Actly: retry.shouldRetry must be a function, got ${typeof opts.shouldRetry}`);
@@ -45,15 +61,21 @@ function assertTimeoutOptions(opts, field) {
     if (typeof opts.ms !== 'number' || !Number.isFinite(opts.ms) || opts.ms <= 0) {
         throw new RangeError(`Actly: ${field}.ms must be a positive finite number, got ${opts.ms}`);
     }
+    if (opts.ms > limits_js_1.LIMITS.MAX_TIMEOUT_MS) {
+        throw new RangeError(`Actly: ${field}.ms ${opts.ms} exceeds limit ${limits_js_1.LIMITS.MAX_TIMEOUT_MS}.`);
+    }
 }
 function assertCacheOptions(opts) {
     if (typeof opts.ttl !== 'number' || !Number.isFinite(opts.ttl) || opts.ttl <= 0) {
         throw new RangeError(`Actly: cache.ttl must be a positive finite number, got ${opts.ttl}`);
     }
+    if (opts.ttl > limits_js_1.LIMITS.MAX_CACHE_TTL) {
+        throw new RangeError(`Actly: cache.ttl ${opts.ttl} exceeds limit ${limits_js_1.LIMITS.MAX_CACHE_TTL} (~24h).`);
+    }
 }
 function assertDedupeOptions(opts) {
     if (opts.inflightTtl !== undefined) {
-        assertNonNegativeFinite('dedupe.inflightTtl', opts.inflightTtl);
+        assertNonNegativeFinite('dedupe.inflightTtl', opts.inflightTtl, limits_js_1.LIMITS.MAX_INFLIGHT_TTL);
     }
 }
 function assertOptions(options) {
@@ -71,9 +93,61 @@ function assertOptions(options) {
     if (options.signal !== undefined && !(options.signal instanceof AbortSignal)) {
         throw new TypeError(`Actly: signal must be an AbortSignal, got ${options.signal === null ? 'null' : typeof options.signal}`);
     }
+    if (options.circuitBreaker)
+        assertCircuitBreakerOptions(options.circuitBreaker);
+    if (options.bulkhead)
+        assertBulkheadOptions(options.bulkhead);
+    if (options.rateLimit)
+        assertRateLimitOptions(options.rateLimit);
+    if (options.hedge)
+        assertHedgeOptions(options.hedge);
+    if (options.audit)
+        assertAuditOptions(options.audit);
 }
-function assertNonNegativeFinite(field, value) {
+function assertAuditOptions(opts) {
+    if (typeof opts.log !== 'function') {
+        throw new TypeError(`Actly: audit.log must be a function, got ${opts.log === null ? 'null' : typeof opts.log}`);
+    }
+}
+function assertCircuitBreakerOptions(opts) {
+    if (!Number.isInteger(opts.threshold) || opts.threshold < 1) {
+        throw new RangeError(`Actly: circuitBreaker.threshold must be a positive integer, got ${opts.threshold}`);
+    }
+    if (typeof opts.cooldownMs !== 'number' || !Number.isFinite(opts.cooldownMs) || opts.cooldownMs <= 0) {
+        throw new RangeError(`Actly: circuitBreaker.cooldownMs must be a positive finite number, got ${opts.cooldownMs}`);
+    }
+    if (opts.resetTimeoutMs !== undefined) {
+        assertNonNegativeFinite('circuitBreaker.resetTimeoutMs', opts.resetTimeoutMs, Number.POSITIVE_INFINITY);
+    }
+}
+function assertBulkheadOptions(opts) {
+    if (!Number.isInteger(opts.maxConcurrent) || opts.maxConcurrent < 1) {
+        throw new RangeError(`Actly: bulkhead.maxConcurrent must be a positive integer, got ${opts.maxConcurrent}`);
+    }
+    if (opts.queueTimeoutMs !== undefined) {
+        assertNonNegativeFinite('bulkhead.queueTimeoutMs', opts.queueTimeoutMs, Number.POSITIVE_INFINITY);
+    }
+}
+function assertRateLimitOptions(opts) {
+    if (!Number.isInteger(opts.maxCalls) || opts.maxCalls < 1) {
+        throw new RangeError(`Actly: rateLimit.maxCalls must be a positive integer, got ${opts.maxCalls}`);
+    }
+    if (typeof opts.windowMs !== 'number' || !Number.isFinite(opts.windowMs) || opts.windowMs <= 0) {
+        throw new RangeError(`Actly: rateLimit.windowMs must be a positive finite number, got ${opts.windowMs}`);
+    }
+}
+function assertHedgeOptions(opts) {
+    if (typeof opts.delayMs !== 'number' || !Number.isFinite(opts.delayMs) || opts.delayMs <= 0) {
+        throw new RangeError(`Actly: hedge.delayMs must be a positive finite number, got ${opts.delayMs}`);
+    }
+}
+function assertNonNegativeFinite(field, value, max) {
     if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
         throw new RangeError(`Actly: ${field} must be a non-negative finite number, got ${value}`);
     }
+    if (value > max) {
+        throw new RangeError(`Actly: ${field} ${value} exceeds limit ${max}.`);
+    }
 }
+const BACKOFF_MODES = new Set(['none', 'linear', 'exponential']);
+const JITTER_MODES = new Set(['none', 'full', 'equal', 'decorrelated']);

package/dist/utils/validate.d.ts

@@ -5,6 +5,12 @@ import type { ActOptions, CacheOptions, DedupeOptions, RetryOptions, TimeoutOpti
  * throwing (rather than returning an `ActFailure`) is the right call.
  *
  * Called once at the top of `act()` so policies can assume well-formed input.
+ *
+ * # Caps
+ *
+ * Every numeric input is bounded by {@link LIMITS}. This prevents memory
+ * exhaustion (huge TTLs), CPU exhaustion (huge retry counts), and timer
+ * overflow (huge delays). See `limits.ts` for rationale.
  */
 export declare function assertKey(key: string): void;
 export declare function assertRetryOptions(opts: RetryOptions): void;
@@ -12,4 +18,9 @@ export declare function assertTimeoutOptions(opts: TimeoutOptions, field: string
 export declare function assertCacheOptions(opts: CacheOptions): void;
 export declare function assertDedupeOptions(opts: DedupeOptions): void;
 export declare function assertOptions(options: ActOptions): void;
+export declare function assertAuditOptions(opts: import('../types/index.js').AuditOptions): void;
+export declare function assertCircuitBreakerOptions(opts: import('../types/index.js').CircuitBreakerOptions): void;
+export declare function assertBulkheadOptions(opts: import('../types/index.js').BulkheadOptions): void;
+export declare function assertRateLimitOptions(opts: import('../types/index.js').RateLimitOptions): void;
+export declare function assertHedgeOptions(opts: import('../types/index.js').HedgeOptions): void;
 //# sourceMappingURL=validate.d.ts.map

package/dist/utils/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/utils/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACf,MAAM,mBAAmB,CAAA;AAE1B;;;;;;GAMG;AAEH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiB3C;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAiB3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM9E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAM3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAI7D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAavD"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/utils/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACf,MAAM,mBAAmB,CAAA;AAI1B;;;;;;;;;;;;GAYG;AAEH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3C;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAmC3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAW9E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAW3D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAI7D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAkBvD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,YAAY,GAAG,IAAI,CAMvF;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,GAAG,IAAI,CAczG;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,eAAe,GAAG,IAAI,CAS7F;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,gBAAgB,GAAG,IAAI,CAW/F;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,mBAAmB,EAAE,YAAY,GAAG,IAAI,CAMvF"}