emdash 0.39.1 → 0.40.0

package/dist/stage-DgrBz_du.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage-DgrBz_du.mjs","names":[],"sources":["../src/transfer/ops/operations.ts","../src/transfer/staging/stage.ts"],"sourcesContent":["/**\n * Transfer operation rows: creation, lease claims, and lease-fenced state\n * writes.\n *\n * Every step of a running operation happens under a lease: `claim` is one\n * `UPDATE … WHERE lease is free … RETURNING` statement that installs a fresh\n * ULID lease token, and every later write is fenced on that token and on the\n * lease still being live. A caller that loses its lease (expiry, another\n * caller took over) gets `TRANSFER_LEASE_LOST` and must stop without writing.\n */\n\nimport { sql, type Kysely, type Selectable, type UpdateObject } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database, TransferOperationTable } from \"../../database/types.js\";\nimport {\n\tTransferError,\n\ttransferErrorDetailSchema,\n\ttype TransferErrorCode,\n\ttype TransferErrorDetail,\n} from \"../errors.js\";\nimport { bumpRunningExportWriteEpochs } from \"../fence.js\";\nimport { isSha256Digest, type Sha256Digest } from \"../format/digest.js\";\nimport { TRANSFER_LIMITS } from \"../format/limits.js\";\nimport { siteImportReceiptSchema, type SiteImportReceipt } from \"../format/receipt.js\";\nimport {\n\tEXECUTING_IMPORT_STATES,\n\tisTransferOperationKind,\n\tisTransferOperationState,\n\tPRE_EXECUTION_IMPORT_STATES,\n\tTERMINAL_IMPORT_STATES,\n\tTRANSFER_RUNTIME_GENERATION,\n\ttransferCursorSchema,\n\ttransferProgressSchema,\n\ttype TransferCursor,\n\ttype TransferOperationKind,\n\ttype TransferOperationState,\n\ttype TransferProgress,\n} from \"./states.js\";\nimport {\n\ttimestampIsDue,\n\ttimestampIsLive,\n\ttimestampIsOlderThan,\n\ttimestampNow,\n\ttimestampOffset,\n} from \"./time.js\";\n\ntype OperationRow = Selectable<TransferOperationTable>;\ntype OperationUpdate = UpdateObject<Database, \"_emdash_transfer_operations\">;\n\nexport interface TransferOperation {\n\tid: string;\n\tkind: TransferOperationKind;\n\tstate: TransferOperationState;\n\tstage: string | null;\n\tcursor: TransferCursor | null;\n\tprogress: TransferProgress | null;\n\toptions: unknown;\n\tidempotencyKey: string | null;\n\tpackageDigest: Sha256Digest | null;\n\tplanDigest: Sha256Digest | null;\n\toriginSiteId: string | null;\n\t/**\n\t * 128-bit hex secret in the operation's staging prefix. Internal only:\n\t * serialize operations for clients with {@link toPublicOperation}.\n\t */\n\tstagingSecret: string;\n\treceipt: SiteImportReceipt | null;\n\terrorCode: string | null;\n\terrorDetail: TransferErrorDetail | null;\n\twriteEpoch: number;\n\tattemptCount: number;\n\tleaseToken: string | null;\n\tleaseExpiresAt: string | null;\n\truntimeGeneration: number;\n\tcancelRequestedAt: string | null;\n\tmutationStartedAt: string | null;\n\tcreatedBy: string;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\tcompletedAt: string | null;\n\texpiresAt: string | null;\n\tstagingCollectedAt: string | null;\n}\n\n/**\n * An operation as it may be shown to API clients: without the staging secret\n * and lease token.\n */\nexport type PublicTransferOperation = Omit<TransferOperation, \"stagingSecret\" | \"leaseToken\">;\n\nexport function toPublicOperation(operation: TransferOperation): PublicTransferOperation {\n\tconst { stagingSecret: _secret, leaseToken: _lease, ...rest } = operation;\n\treturn rest;\n}\n\nexport interface CreateTransferOperationInput {\n\tkind: TransferOperationKind;\n\tcreatedBy: string;\n\tidempotencyKey?: string;\n\t/** For imports, the digest of the manifest the operation was created with. */\n\tpackageDigest?: Sha256Digest;\n\toriginSiteId?: string;\n\toptions?: unknown;\n\t/** Seconds until the operation expires if it does not finish. */\n\tttlSeconds?: number;\n}\n\nexport type ClaimResult =\n\t| { outcome: \"claimed\"; operation: TransferOperation; leaseToken: string }\n\t| { outcome: \"lease_active\"; operation: TransferOperation }\n\t| { outcome: \"invalid_state\"; operation: TransferOperation };\n\nexport interface OperationPatch {\n\tstate?: TransferOperationState;\n\tstage?: string | null;\n\tcursor?: TransferCursor | null;\n\tprogress?: TransferProgress | null;\n\tpackageDigest?: Sha256Digest;\n\tplanDigest?: Sha256Digest | null;\n\toriginSiteId?: string;\n\t/** Record that the importer is about to write to the target (idempotent). */\n\tmarkMutationStarted?: true;\n\t/** Reset `expires_at` to now + this many seconds. */\n\tttlSeconds?: number;\n\t/**\n\t * Record the retryable failure of the last step on a non-terminal\n\t * operation in `error_code`/`error_detail`, or clear it with null.\n\t */\n\tretryError?: { code: TransferErrorCode; detail?: TransferErrorDetail } | null;\n}\n\nconst MAX_IDEMPOTENCY_KEY_LENGTH = 255;\n\nfunction parseJson(value: string | null): unknown {\n\tif (value === null) return null;\n\treturn JSON.parse(value);\n}\n\nfunction toOperation(row: OperationRow): TransferOperation {\n\tconst { kind, state } = row;\n\tif (!isTransferOperationKind(kind) || !isTransferOperationState(state)) {\n\t\tthrow new TransferError(\"TRANSFER_INVALID_STATE\", \"Unknown transfer operation kind or state\");\n\t}\n\tconst cursor = parseJson(row.cursor);\n\tconst progress = parseJson(row.progress);\n\tconst receipt = parseJson(row.receipt);\n\tconst errorDetail = parseJson(row.error_detail);\n\treturn {\n\t\tid: row.id,\n\t\tkind,\n\t\tstate,\n\t\tstage: row.stage,\n\t\tcursor: cursor === null ? null : transferCursorSchema.parse(cursor),\n\t\tprogress: progress === null ? null : transferProgressSchema.parse(progress),\n\t\toptions: parseJson(row.options),\n\t\tidempotencyKey: row.idempotency_key,\n\t\tpackageDigest: isSha256Digest(row.package_digest) ? row.package_digest : null,\n\t\tplanDigest: isSha256Digest(row.plan_digest) ? row.plan_digest : null,\n\t\toriginSiteId: row.origin_site_id,\n\t\tstagingSecret: row.staging_secret,\n\t\treceipt: receipt === null ? null : siteImportReceiptSchema.parse(receipt),\n\t\terrorCode: row.error_code,\n\t\terrorDetail: errorDetail === null ? null : transferErrorDetailSchema.parse(errorDetail),\n\t\twriteEpoch: Number(row.write_epoch),\n\t\tattemptCount: Number(row.attempt_count),\n\t\tleaseToken: row.lease_token,\n\t\tleaseExpiresAt: row.lease_expires_at,\n\t\truntimeGeneration: Number(row.runtime_generation),\n\t\tcancelRequestedAt: row.cancel_requested_at,\n\t\tmutationStartedAt: row.mutation_started_at,\n\t\tcreatedBy: row.created_by,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\tcompletedAt: row.completed_at,\n\t\texpiresAt: row.expires_at,\n\t\tstagingCollectedAt: row.staging_collected_at,\n\t};\n}\n\nexport function createStagingSecret(): string {\n\tconst bytes = new Uint8Array(16);\n\tcrypto.getRandomValues(bytes);\n\treturn Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class TransferOperationRepository {\n\tconstructor(private readonly db: Kysely<Database>) {}\n\n\tasync get(id: string): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toOperation(row) : null;\n\t}\n\n\tasync require(id: string): Promise<TransferOperation> {\n\t\tconst operation = await this.get(id);\n\t\tif (!operation) {\n\t\t\tthrow new TransferError(\"TRANSFER_OPERATION_NOT_FOUND\", \"Transfer operation not found\");\n\t\t}\n\t\treturn operation;\n\t}\n\n\t/**\n\t * Create an operation, or return the existing one for the same\n\t * `(createdBy, kind, idempotencyKey)`. Throws\n\t * `TRANSFER_IDEMPOTENCY_CONFLICT` when that key was used with a different\n\t * package digest, and `TRANSFER_IMPORT_IN_PROGRESS` when another import\n\t * already occupies the target.\n\t */\n\tasync create(\n\t\tinput: CreateTransferOperationInput,\n\t): Promise<{ operation: TransferOperation; created: boolean }> {\n\t\tif (\n\t\t\tinput.idempotencyKey !== undefined &&\n\t\t\t(input.idempotencyKey.length === 0 ||\n\t\t\t\tinput.idempotencyKey.length > MAX_IDEMPOTENCY_KEY_LENGTH)\n\t\t) {\n\t\t\tthrow new TransferError(\"TRANSFER_IDEMPOTENCY_CONFLICT\", \"Invalid idempotency key\");\n\t\t}\n\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst existing = await this.findByIdempotencyKey(input);\n\t\t\tif (existing) return { operation: existing, created: false };\n\t\t}\n\n\t\tconst id = ulid();\n\t\tconst inserted = await this.db\n\t\t\t.insertInto(\"_emdash_transfer_operations\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tkind: input.kind,\n\t\t\t\tstate: input.kind === \"export\" ? \"pending\" : \"uploading\",\n\t\t\t\tidempotency_key: input.idempotencyKey ?? null,\n\t\t\t\tpackage_digest: input.packageDigest ?? null,\n\t\t\t\torigin_site_id: input.originSiteId ?? null,\n\t\t\t\toptions: input.options === undefined ? null : JSON.stringify(input.options),\n\t\t\t\tstaging_secret: createStagingSecret(),\n\t\t\t\truntime_generation: TRANSFER_RUNTIME_GENERATION,\n\t\t\t\tcreated_by: input.createdBy,\n\t\t\t\texpires_at: timestampOffset(this.db, input.ttlSeconds ?? defaultTtl(input.kind)),\n\t\t\t\tstage: null,\n\t\t\t\tcursor: null,\n\t\t\t\tprogress: null,\n\t\t\t\tplan_digest: null,\n\t\t\t\treceipt: null,\n\t\t\t\terror_code: null,\n\t\t\t\terror_detail: null,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t\tcancel_requested_at: null,\n\t\t\t\tmutation_started_at: null,\n\t\t\t\tcompleted_at: null,\n\t\t\t\tstaging_collected_at: null,\n\t\t\t})\n\t\t\t.onConflict((conflict) => conflict.doNothing())\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (inserted) return { operation: toOperation(inserted), created: true };\n\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst existing = await this.findByIdempotencyKey(input);\n\t\t\tif (existing) return { operation: existing, created: false };\n\t\t}\n\t\tthrow new TransferError(\n\t\t\t\"TRANSFER_IMPORT_IN_PROGRESS\",\n\t\t\t\"Another import is already in progress on this site\",\n\t\t);\n\t}\n\n\tprivate async findByIdempotencyKey(\n\t\tinput: CreateTransferOperationInput,\n\t): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"created_by\", \"=\", input.createdBy)\n\t\t\t.where(\"kind\", \"=\", input.kind)\n\t\t\t.where(\"idempotency_key\", \"=\", input.idempotencyKey ?? \"\")\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return null;\n\t\tif (\n\t\t\tinput.packageDigest !== undefined &&\n\t\t\trow.package_digest !== null &&\n\t\t\trow.package_digest !== input.packageDigest\n\t\t) {\n\t\t\tthrow new TransferError(\n\t\t\t\t\"TRANSFER_IDEMPOTENCY_CONFLICT\",\n\t\t\t\t\"Idempotency key was already used for a different package\",\n\t\t\t);\n\t\t}\n\t\treturn toOperation(row);\n\t}\n\n\t/** The import that currently occupies the target, if any. */\n\tasync findOccupyingImport(): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES, ...EXECUTING_IMPORT_STATES]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"state\", \"in\", [\"failed\", \"cancelled\"]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is not\", null),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toOperation(row) : null;\n\t}\n\n\t/**\n\t * Take the operation's lease if it is in one of `states` and no live lease\n\t * exists. Throws `TRANSFER_OPERATION_NOT_FOUND`, or\n\t * `TRANSFER_RUNTIME_MISMATCH` when the row was written by an incompatible\n\t * runtime generation.\n\t */\n\tasync claim(\n\t\tid: string,\n\t\tstates: readonly TransferOperationState[],\n\t\toptions: { leaseSeconds?: number } = {},\n\t): Promise<ClaimResult> {\n\t\tconst leaseToken = ulid();\n\t\tconst now = timestampNow(this.db);\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({\n\t\t\t\tlease_token: leaseToken,\n\t\t\t\tlease_expires_at: timestampOffset(\n\t\t\t\t\tthis.db,\n\t\t\t\t\toptions.leaseSeconds ?? TRANSFER_LIMITS.leaseSeconds,\n\t\t\t\t),\n\t\t\t\tattempt_count: sql<number>`attempt_count + 1`,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"state\", \"in\", [...states])\n\t\t\t.where(\"runtime_generation\", \"=\", TRANSFER_RUNTIME_GENERATION)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (row) return { outcome: \"claimed\", operation: toOperation(row), leaseToken };\n\n\t\tconst current = await this.require(id);\n\t\tif (current.runtimeGeneration !== TRANSFER_RUNTIME_GENERATION) {\n\t\t\tthrow new TransferError(\n\t\t\t\t\"TRANSFER_RUNTIME_MISMATCH\",\n\t\t\t\t\"Transfer operation was created by an incompatible EmDash version\",\n\t\t\t);\n\t\t}\n\t\tif (!states.includes(current.state)) return { outcome: \"invalid_state\", operation: current };\n\t\treturn { outcome: \"lease_active\", operation: current };\n\t}\n\n\t/**\n\t * Write state under the lease and extend it. Throws `TRANSFER_LEASE_LOST`\n\t * when the lease is gone.\n\t */\n\tasync advance(id: string, leaseToken: string, patch: OperationPatch): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tlease_expires_at: timestampOffset(this.db, TRANSFER_LIMITS.leaseSeconds),\n\t\t});\n\t}\n\n\t/** Write state and give up the lease so the next step can claim it. */\n\tasync release(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tpatch: OperationPatch = {},\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/**\n\t * Write `patch`, move to `state`, and give up the lease; when a cancel was\n\t * requested while the lease was held, move to `cancelled` instead. One\n\t * statement decides, so a cancel racing the release is never lost.\n\t */\n\tasync releaseUnlessCancelled(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tstate: TransferOperationState,\n\t\tpatch: Omit<OperationPatch, \"state\"> = {},\n\t): Promise<TransferOperation> {\n\t\tconst now = timestampNow(this.db);\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tstate: sql<string>`CASE WHEN cancel_requested_at IS NULL THEN ${state} ELSE 'cancelled' END`,\n\t\t\tcompleted_at: sql<\n\t\t\t\tstring | null\n\t\t\t>`CASE WHEN cancel_requested_at IS NULL THEN completed_at ELSE ${now} END`,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\tasync complete(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tresult: { receipt?: SiteImportReceipt; ttlSeconds?: number; progress?: TransferProgress } = {},\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"complete\",\n\t\t\treceipt: result.receipt === undefined ? undefined : JSON.stringify(result.receipt),\n\t\t\tprogress: result.progress === undefined ? undefined : JSON.stringify(result.progress),\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\texpires_at:\n\t\t\t\tresult.ttlSeconds === undefined ? undefined : timestampOffset(this.db, result.ttlSeconds),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\tasync fail(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\terror: { code: TransferErrorCode; detail?: TransferErrorDetail },\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"failed\",\n\t\t\terror_code: error.code,\n\t\t\terror_detail: error.detail === undefined ? null : JSON.stringify(error.detail),\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/** Finish a cancellation the lease holder observed via `cancelRequestedAt`. */\n\tasync finishCancelled(id: string, leaseToken: string): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"cancelled\",\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/**\n\t * Cancel an import. Without a live lease the operation becomes `cancelled`\n\t * immediately; otherwise `cancel_requested_at` is set and the lease holder\n\t * stops after its current batch. Returns the updated operation.\n\t */\n\tasync requestCancel(id: string): Promise<TransferOperation> {\n\t\tconst cancellable = [...PRE_EXECUTION_IMPORT_STATES, ...EXECUTING_IMPORT_STATES];\n\t\tconst now = timestampNow(this.db);\n\t\tconst immediate = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({\n\t\t\t\tstate: \"cancelled\",\n\t\t\t\tcancel_requested_at: now,\n\t\t\t\tcompleted_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", cancellable)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (immediate) return toOperation(immediate);\n\n\t\tconst flagged = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ cancel_requested_at: now, updated_at: now })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", cancellable)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (flagged) return toOperation(flagged);\n\n\t\tawait this.require(id);\n\t\tthrow new TransferError(\"TRANSFER_INVALID_STATE\", \"Transfer operation cannot be cancelled\");\n\t}\n\n\t/**\n\t * Mark a failed or cancelled import abandoned. Lifts the write fence; never\n\t * deletes imported data.\n\t */\n\tasync abandon(id: string): Promise<TransferOperation> {\n\t\tconst now = timestampNow(this.db);\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ state: \"abandoned\", updated_at: now })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", [\"failed\", \"cancelled\"])\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (row) return toOperation(row);\n\t\tawait this.require(id);\n\t\tthrow new TransferError(\n\t\t\t\"TRANSFER_INVALID_STATE\",\n\t\t\t\"Only a failed or cancelled import can be abandoned\",\n\t\t);\n\t}\n\n\t/**\n\t * Move operations past their `expires_at` to `expired` (pre-execution\n\t * imports and every non-expired export) when no live lease holds them.\n\t * Returns the expired operations so their staging can be collected.\n\t */\n\tasync expireDue(\n\t\tlimit = 50,\n\t): Promise<Array<Pick<TransferOperation, \"id\" | \"kind\" | \"stagingSecret\">>> {\n\t\tconst candidates = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"expires_at\", \"is not\", null)\n\t\t\t.where(timestampIsDue(this.db, \"expires_at\"))\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is\", null),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"export\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"running\", \"complete\", \"failed\"]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.orderBy(\"expires_at\")\n\t\t\t.limit(limit)\n\t\t\t.execute();\n\t\tif (candidates.length === 0) return [];\n\t\tconst now = timestampNow(this.db);\n\t\tconst rows = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ state: \"expired\", updated_at: now, lease_token: null, lease_expires_at: null })\n\t\t\t.where(\n\t\t\t\t\"id\",\n\t\t\t\t\"in\",\n\t\t\t\tcandidates.map((candidate) => candidate.id),\n\t\t\t)\n\t\t\t.where(timestampIsDue(this.db, \"expires_at\"))\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is\", null),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"export\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"running\", \"complete\", \"failed\"]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returning([\"id\", \"kind\", \"staging_secret\"])\n\t\t\t.execute();\n\t\treturn rows.flatMap((row) =>\n\t\t\tisTransferOperationKind(row.kind)\n\t\t\t\t? [{ id: row.id, kind: row.kind, stagingSecret: row.staging_secret }]\n\t\t\t\t: [],\n\t\t);\n\t}\n\n\t/**\n\t * Operations whose staging area can be collected and has not been yet:\n\t * imports in a terminal state, and exports that failed or expired\n\t * (complete exports stay downloadable until they expire). Oldest first.\n\t * A collector deletes staged objects with `TransferStage.deleteSome` until\n\t * it returns 0, deletes child rows with {@link deleteChildRows} until it\n\t * returns 0, then calls {@link markCollected}; a crash anywhere in between\n\t * leaves the operation listed here, so collection resumes.\n\t *\n\t * `importRetentionSeconds` keeps a finished import's staging for that long\n\t * after its last state change; expired imports are listed at once.\n\t */\n\tasync listUncollected(\n\t\tlimit = 20,\n\t\toptions: { importRetentionSeconds?: number } = {},\n\t): Promise<Array<Pick<TransferOperation, \"id\" | \"kind\" | \"state\" | \"stagingSecret\">>> {\n\t\tconst retention = options.importRetentionSeconds ?? 0;\n\t\tconst retainedStates = TERMINAL_IMPORT_STATES.filter((state) => state !== \"expired\");\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.select([\"id\", \"kind\", \"state\", \"staging_secret\"])\n\t\t\t.where(\"staging_collected_at\", \"is\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([eb(\"kind\", \"=\", \"import\"), eb(\"state\", \"=\", \"expired\")]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", retainedStates),\n\t\t\t\t\t\ttimestampIsOlderThan(this.db, \"updated_at\", retention),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([eb(\"kind\", \"=\", \"export\"), eb(\"state\", \"in\", [\"failed\", \"expired\"])]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.orderBy(\"updated_at\")\n\t\t\t.orderBy(\"id\")\n\t\t\t.limit(Math.min(Math.max(limit, 1), 100))\n\t\t\t.execute();\n\t\treturn rows.flatMap((row) =>\n\t\t\tisTransferOperationKind(row.kind) && isTransferOperationState(row.state)\n\t\t\t\t? [{ id: row.id, kind: row.kind, state: row.state, stagingSecret: row.staging_secret }]\n\t\t\t\t: [],\n\t\t);\n\t}\n\n\t/** Record that an operation's staging area and child rows are gone. */\n\tasync markCollected(id: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ staging_collected_at: timestampNow(this.db) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"staging_collected_at\", \"is\", null)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Delete up to `limit` child rows of each child table of an operation\n\t * (staged files, package index, media blobs), one bounded statement per\n\t * table. Returns the number deleted; call until it returns 0. Always drain\n\t * children this way before deleting an operation row: an `ON DELETE\n\t * CASCADE` over millions of child rows in one statement exceeds D1's\n\t * limits.\n\t */\n\tasync deleteChildRows(operationId: string, limit = 500): Promise<number> {\n\t\tconst bounded = Math.min(Math.max(Math.trunc(limit), 1), 5000);\n\t\tconst staged = await sql`\n\t\t\tDELETE FROM _emdash_transfer_staged_files\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND path IN (\n\t\t\t\t\tSELECT path FROM _emdash_transfer_staged_files\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\tconst indexed = await sql`\n\t\t\tDELETE FROM _emdash_transfer_package_index\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND (kind, id) IN (\n\t\t\t\t\tSELECT kind, id FROM _emdash_transfer_package_index\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\tconst blobs = await sql`\n\t\t\tDELETE FROM _emdash_transfer_media_blobs\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND media_id IN (\n\t\t\t\t\tSELECT media_id FROM _emdash_transfer_media_blobs\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\treturn [staged, indexed, blobs].reduce(\n\t\t\t(sum, result) => sum + Number(result.numAffectedRows ?? 0n),\n\t\t\t0,\n\t\t);\n\t}\n\n\t/**\n\t * Delete a collected operation row once it has no child rows left.\n\t * Returns false, deleting nothing, otherwise. Identity-map rows are kept.\n\t */\n\tasync deleteIfChildless(id: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_transfer_operations\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"staging_collected_at\", \"is not\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.and([\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_staged_files\")\n\t\t\t\t\t\t\t\t.select(\"path\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_staged_files.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_package_index\")\n\t\t\t\t\t\t\t\t.select(\"kind\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_package_index.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_media_blobs\")\n\t\t\t\t\t\t\t\t.select(\"media_id\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_media_blobs.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows ?? 0n) > 0;\n\t}\n\n\t/**\n\t * Bump `write_epoch` on every running export. Fenced write paths call this\n\t * so an export's consistency fence notices writes to tables that have no\n\t * `updated_at`. Returns the number of exports touched.\n\t */\n\tasync recordWriteForRunningExports(): Promise<number> {\n\t\treturn bumpRunningExportWriteEpochs(this.db);\n\t}\n\n\t/** Operations newest first, `{ items, nextCursor }` over `(created_at, id)`. */\n\tasync list(\n\t\toptions: {\n\t\t\tkind?: TransferOperationKind;\n\t\t\tcreatedBy?: string;\n\t\t\tlimit?: number;\n\t\t\tcursor?: { createdAt: string; id: string };\n\t\t} = {},\n\t): Promise<{ items: PublicTransferOperation[]; next?: { createdAt: string; id: string } }> {\n\t\tconst limit = Math.min(Math.max(options.limit ?? 50, 1), 100);\n\t\tlet query = this.db.selectFrom(\"_emdash_transfer_operations\").selectAll();\n\t\tif (options.kind) query = query.where(\"kind\", \"=\", options.kind);\n\t\tif (options.createdBy) query = query.where(\"created_by\", \"=\", options.createdBy);\n\t\tconst cursor = options.cursor;\n\t\tif (cursor) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", cursor.createdAt),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", cursor.createdAt), eb(\"id\", \"<\", cursor.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\t\tconst rows = await query\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1)\n\t\t\t.execute();\n\t\tconst items = rows.slice(0, limit).map((row) => toPublicOperation(toOperation(row)));\n\t\tconst last = items.at(-1);\n\t\treturn rows.length > limit && last\n\t\t\t? { items, next: { createdAt: last.createdAt, id: last.id } }\n\t\t\t: { items };\n\t}\n\n\tprivate patchValues(patch: OperationPatch): OperationUpdate {\n\t\tconst values: OperationUpdate = {};\n\t\tif (patch.state !== undefined) values.state = patch.state;\n\t\tif (patch.stage !== undefined) values.stage = patch.stage;\n\t\tif (patch.cursor !== undefined) {\n\t\t\tvalues.cursor =\n\t\t\t\tpatch.cursor === null ? null : JSON.stringify(transferCursorSchema.parse(patch.cursor));\n\t\t}\n\t\tif (patch.progress !== undefined) {\n\t\t\tvalues.progress =\n\t\t\t\tpatch.progress === null\n\t\t\t\t\t? null\n\t\t\t\t\t: JSON.stringify(transferProgressSchema.parse(patch.progress));\n\t\t}\n\t\tif (patch.packageDigest !== undefined) values.package_digest = patch.packageDigest;\n\t\tif (patch.planDigest !== undefined) values.plan_digest = patch.planDigest;\n\t\tif (patch.originSiteId !== undefined) values.origin_site_id = patch.originSiteId;\n\t\tif (patch.markMutationStarted) {\n\t\t\tvalues.mutation_started_at = sql<string>`COALESCE(mutation_started_at, ${timestampNow(this.db)})`;\n\t\t}\n\t\tif (patch.ttlSeconds !== undefined)\n\t\t\tvalues.expires_at = timestampOffset(this.db, patch.ttlSeconds);\n\t\tif (patch.retryError !== undefined) {\n\t\t\tvalues.error_code = patch.retryError?.code ?? null;\n\t\t\tvalues.error_detail =\n\t\t\t\tpatch.retryError?.detail === undefined ? null : JSON.stringify(patch.retryError.detail);\n\t\t}\n\t\treturn values;\n\t}\n\n\tprivate async fencedUpdate(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tvalues: OperationUpdate,\n\t): Promise<TransferOperation> {\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ ...values, updated_at: timestampNow(this.db) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t\t.where(timestampIsLive(this.db, \"lease_expires_at\"))\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (!row) {\n\t\t\tthrow new TransferError(\"TRANSFER_LEASE_LOST\", \"Transfer operation lease was lost\");\n\t\t}\n\t\treturn toOperation(row);\n\t}\n}\n\nfunction defaultTtl(kind: TransferOperationKind): number {\n\treturn kind === \"export\"\n\t\t? TRANSFER_LIMITS.exportTtlSeconds\n\t\t: TRANSFER_LIMITS.pendingImportTtlSeconds;\n}\n","/**\n * Byte-level access to one operation's staging area.\n */\n\nimport type { DownloadResult, Storage } from \"../../storage/types.js\";\nimport { TransferError, isTransferError } from \"../errors.js\";\nimport { createHashingStream, createSha256 } from \"../format/digest.js\";\nimport { stagingAuxKey, stagingKey, type StagingAuxFile } from \"./keys.js\";\n\ntype FixedLengthStreamConstructor = new (\n\texpectedLength: number | bigint,\n) => TransformStream<ArrayBufferView | ArrayBuffer, Uint8Array>;\n\ndeclare const FixedLengthStream: FixedLengthStreamConstructor | undefined;\n\nexport interface ExpectedFile {\n\tbytes: number;\n\t/** Lowercase hex SHA-256. */\n\tsha256: string;\n}\n\nexport interface PutVerifiedOptions {\n\tcontentType?: string;\n\t/**\n\t * Called before deleting the object after a failed upload; return true to\n\t * keep it (the path was already verified by another upload).\n\t */\n\tkeepExistingOnFailure?: () => Promise<boolean>;\n}\n\nconst PACKAGE_CONTENT_TYPE = \"application/octet-stream\";\n\nfunction oversizeError(): TransferError {\n\treturn new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File is larger than declared\");\n}\n\nfunction toStream(body: ReadableStream<Uint8Array> | Uint8Array): ReadableStream<Uint8Array> {\n\tif (body instanceof Uint8Array) {\n\t\treturn new ReadableStream<Uint8Array>({\n\t\t\tstart(controller) {\n\t\t\t\tif (body.byteLength > 0) controller.enqueue(body);\n\t\t\t\tcontroller.close();\n\t\t\t},\n\t\t});\n\t}\n\treturn body;\n}\n\n/**\n * Stream `body` into `key`, hashing and counting as it goes. The object is\n * kept only if exactly `expected.bytes` bytes with digest `expected.sha256`\n * were written; otherwise it is deleted and `TRANSFER_FILE_SIZE_MISMATCH` or\n * `TRANSFER_FILE_DIGEST_MISMATCH` is thrown. Where the runtime provides\n * `FixedLengthStream` (workerd), the upload is wrapped in one so R2 receives\n * a known length.\n *\n * Callers staging a package file must check its staged-files row first and\n * refuse the upload when it is already `verified` and its object still\n * matches, and must pass `keepExistingOnFailure` returning true once the row\n * is verified: a failed retry or concurrent upload of the same path must not\n * delete the object a successful upload stored. A failing upload that\n * already overwrote the object can still leave bad bytes behind a verified\n * row, so readers verify sizes and digests again when they read staged\n * files, and a later upload of that path replaces the bad object.\n */\nexport async function putVerified(\n\tstorage: Storage,\n\tkey: string,\n\tbody: ReadableStream<Uint8Array> | Uint8Array,\n\texpected: ExpectedFile,\n\toptions: PutVerifiedOptions = {},\n): Promise<void> {\n\tconst discard = async () => {\n\t\tif (options.keepExistingOnFailure && (await options.keepExistingOnFailure())) return;\n\t\tawait storage.delete(key).catch(() => undefined);\n\t};\n\tif (!Number.isSafeInteger(expected.bytes) || expected.bytes < 0) {\n\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"Invalid declared size\");\n\t}\n\tconst hasher = await createSha256();\n\tconst hashing = createHashingStream(hasher, {\n\t\tmaxBytes: expected.bytes,\n\t\tonLimitExceeded: oversizeError,\n\t});\n\tlet stream = toStream(body).pipeThrough(hashing.stream);\n\tif (typeof FixedLengthStream !== \"undefined\") {\n\t\tstream = stream.pipeThrough(new FixedLengthStream(expected.bytes));\n\t}\n\n\ttry {\n\t\tawait storage.upload({\n\t\t\tkey,\n\t\t\tbody: stream,\n\t\t\tcontentType: options.contentType ?? PACKAGE_CONTENT_TYPE,\n\t\t});\n\t} catch (error) {\n\t\tawait discard();\n\t\tif (isTransferError(error)) throw error;\n\t\tconst cause = findTransferError(error);\n\t\tif (cause) throw cause;\n\t\tif (hashing.bytes() !== expected.bytes) {\n\t\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File size does not match\", {\n\t\t\t\tcause: error,\n\t\t\t});\n\t\t}\n\t\tthrow new TransferError(\"TRANSFER_STORAGE_ERROR\", \"Failed to store file\", { cause: error });\n\t}\n\n\tconst digest = await hasher.digest();\n\tif (hashing.bytes() !== expected.bytes) {\n\t\tawait discard();\n\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File size does not match\", {\n\t\t\tdetail: { expected: expected.bytes, actual: hashing.bytes() },\n\t\t});\n\t}\n\tif (digest !== expected.sha256) {\n\t\tawait discard();\n\t\tthrow new TransferError(\"TRANSFER_FILE_DIGEST_MISMATCH\", \"File digest does not match\");\n\t}\n}\n\nfunction findTransferError(error: unknown): TransferError | null {\n\tlet current: unknown = error;\n\tfor (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n\t\tif (current instanceof TransferError) return current;\n\t\tcurrent = current.cause;\n\t}\n\treturn null;\n}\n\n/** Read a whole stream, failing once it exceeds `maxBytes`. */\nexport async function readStreamBytes(\n\tstream: ReadableStream<Uint8Array>,\n\tmaxBytes: number,\n): Promise<Uint8Array> {\n\tconst reader = stream.getReader();\n\tconst parts: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tthrow new TransferError(\"TRANSFER_LIMIT_EXCEEDED\", \"File exceeds its size limit\", {\n\t\t\t\t\tdetail: { limit: maxBytes },\n\t\t\t\t});\n\t\t\t}\n\t\t\tparts.push(value);\n\t\t}\n\t} catch (error) {\n\t\tawait reader.cancel().catch(() => undefined);\n\t\tthrow error;\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const part of parts) {\n\t\tbytes.set(part, offset);\n\t\toffset += part.byteLength;\n\t}\n\treturn bytes;\n}\n\n/** One operation's staging area in `storage` under `prefix` (see keys.ts). */\nexport class TransferStage {\n\tconstructor(\n\t\treadonly storage: Storage,\n\t\treadonly prefix: string,\n\t) {}\n\n\tkeyFor(path: string): string {\n\t\treturn stagingKey(this.prefix, path);\n\t}\n\n\tasync putVerified(\n\t\tpath: string,\n\t\tbody: ReadableStream<Uint8Array> | Uint8Array,\n\t\tbytes: number,\n\t\tsha256: string,\n\t\toptions: PutVerifiedOptions = {},\n\t): Promise<void> {\n\t\tawait putVerified(this.storage, this.keyFor(path), body, { bytes, sha256 }, options);\n\t}\n\n\tasync exists(path: string): Promise<boolean> {\n\t\treturn this.storage.exists(this.keyFor(path));\n\t}\n\n\tasync open(path: string): Promise<DownloadResult> {\n\t\ttry {\n\t\t\treturn await this.storage.download(this.keyFor(path));\n\t\t} catch (error) {\n\t\t\tthrow new TransferError(\"TRANSFER_FILE_MISSING\", \"Staged file is missing\", {\n\t\t\t\tdetail: { path },\n\t\t\t\tcause: error,\n\t\t\t});\n\t\t}\n\t}\n\n\tasync readBytes(path: string, maxBytes: number): Promise<Uint8Array> {\n\t\tconst file = await this.open(path);\n\t\treturn readStreamBytes(file.body, maxBytes);\n\t}\n\n\tasync putAux(file: StagingAuxFile, content: string): Promise<void> {\n\t\tawait this.storage.upload({\n\t\t\tkey: stagingAuxKey(this.prefix, file),\n\t\t\tbody: new TextEncoder().encode(content),\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\t}\n\n\tasync readAux(file: StagingAuxFile, maxBytes: number): Promise<string | null> {\n\t\tconst key = stagingAuxKey(this.prefix, file);\n\t\tif (!(await this.storage.exists(key))) return null;\n\t\tconst download = await this.storage.download(key);\n\t\treturn new TextDecoder().decode(await readStreamBytes(download.body, maxBytes));\n\t}\n\n\t/**\n\t * Delete up to `limit` staged objects. Returns the number deleted; call\n\t * again until it returns 0.\n\t */\n\tasync deleteSome(limit = 100): Promise<number> {\n\t\tconst listing = await this.storage.list({ prefix: this.prefix, limit });\n\t\tfor (const file of listing.files) await this.storage.delete(file.key);\n\t\treturn listing.files.length;\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2FA,SAAgB,kBAAkB,WAAuD;CACxF,MAAM,EAAE,eAAe,SAAS,YAAY,QAAQ,GAAG,SAAS;AAChE,QAAO;;AAuCR,MAAM,6BAA6B;AAEnC,SAAS,UAAU,OAA+B;AACjD,KAAI,UAAU,KAAM,QAAO;AAC3B,QAAO,KAAK,MAAM,MAAM;;AAGzB,SAAS,YAAY,KAAsC;CAC1D,MAAM,EAAE,MAAM,UAAU;AACxB,KAAI,CAAC,wBAAwB,KAAK,IAAI,CAAC,yBAAyB,MAAM,CACrE,OAAM,IAAI,cAAc,0BAA0B,2CAA2C;CAE9F,MAAM,SAAS,UAAU,IAAI,OAAO;CACpC,MAAM,WAAW,UAAU,IAAI,SAAS;CACxC,MAAM,UAAU,UAAU,IAAI,QAAQ;CACtC,MAAM,cAAc,UAAU,IAAI,aAAa;AAC/C,QAAO;EACN,IAAI,IAAI;EACR;EACA;EACA,OAAO,IAAI;EACX,QAAQ,WAAW,OAAO,OAAO,qBAAqB,MAAM,OAAO;EACnE,UAAU,aAAa,OAAO,OAAO,uBAAuB,MAAM,SAAS;EAC3E,SAAS,UAAU,IAAI,QAAQ;EAC/B,gBAAgB,IAAI;EACpB,eAAe,eAAe,IAAI,eAAe,GAAG,IAAI,iBAAiB;EACzE,YAAY,eAAe,IAAI,YAAY,GAAG,IAAI,cAAc;EAChE,cAAc,IAAI;EAClB,eAAe,IAAI;EACnB,SAAS,YAAY,OAAO,OAAO,wBAAwB,MAAM,QAAQ;EACzE,WAAW,IAAI;EACf,aAAa,gBAAgB,OAAO,OAAO,0BAA0B,MAAM,YAAY;EACvF,YAAY,OAAO,IAAI,YAAY;EACnC,cAAc,OAAO,IAAI,cAAc;EACvC,YAAY,IAAI;EAChB,gBAAgB,IAAI;EACpB,mBAAmB,OAAO,IAAI,mBAAmB;EACjD,mBAAmB,IAAI;EACvB,mBAAmB,IAAI;EACvB,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,WAAW,IAAI;EACf,oBAAoB,IAAI;EACxB;;AAGF,SAAgB,sBAA8B;CAC7C,MAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;AAGhF,IAAa,8BAAb,MAAyC;CACxC,YAAY,AAAiB,IAAsB;EAAtB;;CAE7B,MAAM,IAAI,IAA+C;EACxD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;CAGjC,MAAM,QAAQ,IAAwC;EACrD,MAAM,YAAY,MAAM,KAAK,IAAI,GAAG;AACpC,MAAI,CAAC,UACJ,OAAM,IAAI,cAAc,gCAAgC,+BAA+B;AAExF,SAAO;;;;;;;;;CAUR,MAAM,OACL,OAC8D;AAC9D,MACC,MAAM,mBAAmB,WACxB,MAAM,eAAe,WAAW,KAChC,MAAM,eAAe,SAAS,4BAE/B,OAAM,IAAI,cAAc,iCAAiC,0BAA0B;AAGpF,MAAI,MAAM,mBAAmB,QAAW;GACvC,MAAM,WAAW,MAAM,KAAK,qBAAqB,MAAM;AACvD,OAAI,SAAU,QAAO;IAAE,WAAW;IAAU,SAAS;IAAO;;EAG7D,MAAM,KAAK,MAAM;EACjB,MAAM,WAAW,MAAM,KAAK,GAC1B,WAAW,8BAA8B,CACzC,OAAO;GACP;GACA,MAAM,MAAM;GACZ,OAAO,MAAM,SAAS,WAAW,YAAY;GAC7C,iBAAiB,MAAM,kBAAkB;GACzC,gBAAgB,MAAM,iBAAiB;GACvC,gBAAgB,MAAM,gBAAgB;GACtC,SAAS,MAAM,YAAY,SAAY,OAAO,KAAK,UAAU,MAAM,QAAQ;GAC3E,gBAAgB,qBAAqB;GACrC,oBAAoB;GACpB,YAAY,MAAM;GAClB,YAAY,gBAAgB,KAAK,IAAI,MAAM,cAAc,WAAW,MAAM,KAAK,CAAC;GAChF,OAAO;GACP,QAAQ;GACR,UAAU;GACV,aAAa;GACb,SAAS;GACT,YAAY;GACZ,cAAc;GACd,aAAa;GACb,kBAAkB;GAClB,qBAAqB;GACrB,qBAAqB;GACrB,cAAc;GACd,sBAAsB;GACtB,CAAC,CACD,YAAY,aAAa,SAAS,WAAW,CAAC,CAC9C,cAAc,CACd,kBAAkB;AACpB,MAAI,SAAU,QAAO;GAAE,WAAW,YAAY,SAAS;GAAE,SAAS;GAAM;AAExE,MAAI,MAAM,mBAAmB,QAAW;GACvC,MAAM,WAAW,MAAM,KAAK,qBAAqB,MAAM;AACvD,OAAI,SAAU,QAAO;IAAE,WAAW;IAAU,SAAS;IAAO;;AAE7D,QAAM,IAAI,cACT,+BACA,qDACA;;CAGF,MAAc,qBACb,OACoC;EACpC,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,cAAc,KAAK,MAAM,UAAU,CACzC,MAAM,QAAQ,KAAK,MAAM,KAAK,CAC9B,MAAM,mBAAmB,KAAK,MAAM,kBAAkB,GAAG,CACzD,kBAAkB;AACpB,MAAI,CAAC,IAAK,QAAO;AACjB,MACC,MAAM,kBAAkB,UACxB,IAAI,mBAAmB,QACvB,IAAI,mBAAmB,MAAM,cAE7B,OAAM,IAAI,cACT,iCACA,2DACA;AAEF,SAAO,YAAY,IAAI;;;CAIxB,MAAM,sBAAyD;EAC9D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,QAAQ,KAAK,SAAS,CAC5B,OAAO,OACP,GAAG,GAAG,CACL,GAAG,SAAS,MAAM,CAAC,GAAG,6BAA6B,GAAG,wBAAwB,CAAC,EAC/E,GAAG,IAAI,CACN,GAAG,SAAS,MAAM,CAAC,UAAU,YAAY,CAAC,EAC1C,GAAG,uBAAuB,UAAU,KAAK,CACzC,CAAC,CACF,CAAC,CACF,CACA,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;;;;;;;CASjC,MAAM,MACL,IACA,QACA,UAAqC,EAAE,EAChB;EACvB,MAAM,aAAa,MAAM;EACzB,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GACJ,aAAa;GACb,kBAAkB,gBACjB,KAAK,IACL,QAAQ,gBAAgB,gBAAgB,aACxC;GACD,eAAe,GAAW;GAC1B,YAAY;GACZ,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,SAAS,MAAM,CAAC,GAAG,OAAO,CAAC,CACjC,MAAM,sBAAsB,KAAK,4BAA4B,CAC7D,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,IAAK,QAAO;GAAE,SAAS;GAAW,WAAW,YAAY,IAAI;GAAE;GAAY;EAE/E,MAAM,UAAU,MAAM,KAAK,QAAQ,GAAG;AACtC,MAAI,QAAQ,sBAAsB,4BACjC,OAAM,IAAI,cACT,6BACA,mEACA;AAEF,MAAI,CAAC,OAAO,SAAS,QAAQ,MAAM,CAAE,QAAO;GAAE,SAAS;GAAiB,WAAW;GAAS;AAC5F,SAAO;GAAE,SAAS;GAAgB,WAAW;GAAS;;;;;;CAOvD,MAAM,QAAQ,IAAY,YAAoB,OAAmD;AAChG,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,kBAAkB,gBAAgB,KAAK,IAAI,gBAAgB,aAAa;GACxE,CAAC;;;CAIH,MAAM,QACL,IACA,YACA,QAAwB,EAAE,EACG;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,aAAa;GACb,kBAAkB;GAClB,CAAC;;;;;;;CAQH,MAAM,uBACL,IACA,YACA,OACA,QAAuC,EAAE,EACZ;EAC7B,MAAM,MAAM,aAAa,KAAK,GAAG;AACjC,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,OAAO,GAAW,8CAA8C,MAAM;GACtE,cAAc,GAEb,gEAAgE,IAAI;GACrE,aAAa;GACb,kBAAkB;GAClB,CAAC;;CAGH,MAAM,SACL,IACA,YACA,SAA4F,EAAE,EACjE;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,SAAS,OAAO,YAAY,SAAY,SAAY,KAAK,UAAU,OAAO,QAAQ;GAClF,UAAU,OAAO,aAAa,SAAY,SAAY,KAAK,UAAU,OAAO,SAAS;GACrF,cAAc,aAAa,KAAK,GAAG;GACnC,YACC,OAAO,eAAe,SAAY,SAAY,gBAAgB,KAAK,IAAI,OAAO,WAAW;GAC1F,aAAa;GACb,kBAAkB;GAClB,CAAC;;CAGH,MAAM,KACL,IACA,YACA,OAC6B;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,YAAY,MAAM;GAClB,cAAc,MAAM,WAAW,SAAY,OAAO,KAAK,UAAU,MAAM,OAAO;GAC9E,cAAc,aAAa,KAAK,GAAG;GACnC,aAAa;GACb,kBAAkB;GAClB,CAAC;;;CAIH,MAAM,gBAAgB,IAAY,YAAgD;AACjF,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,cAAc,aAAa,KAAK,GAAG;GACnC,aAAa;GACb,kBAAkB;GAClB,CAAC;;;;;;;CAQH,MAAM,cAAc,IAAwC;EAC3D,MAAM,cAAc,CAAC,GAAG,6BAA6B,GAAG,wBAAwB;EAChF,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,YAAY,MAAM,KAAK,GAC3B,YAAY,8BAA8B,CAC1C,IAAI;GACJ,OAAO;GACP,qBAAqB;GACrB,cAAc;GACd,YAAY;GACZ,aAAa;GACb,kBAAkB;GAClB,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,YAAY,CACjC,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,UAAW,QAAO,YAAY,UAAU;EAE5C,MAAM,UAAU,MAAM,KAAK,GACzB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,qBAAqB;GAAK,YAAY;GAAK,CAAC,CAClD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,YAAY,CACjC,cAAc,CACd,kBAAkB;AACpB,MAAI,QAAS,QAAO,YAAY,QAAQ;AAExC,QAAM,KAAK,QAAQ,GAAG;AACtB,QAAM,IAAI,cAAc,0BAA0B,yCAAyC;;;;;;CAO5F,MAAM,QAAQ,IAAwC;EACrD,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,OAAO;GAAa,YAAY;GAAK,CAAC,CAC5C,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,CAAC,UAAU,YAAY,CAAC,CAC7C,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,IAAK,QAAO,YAAY,IAAI;AAChC,QAAM,KAAK,QAAQ,GAAG;AACtB,QAAM,IAAI,cACT,0BACA,qDACA;;;;;;;CAQF,MAAM,UACL,QAAQ,IACmE;EAC3E,MAAM,aAAa,MAAM,KAAK,GAC5B,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,cAAc,UAAU,KAAK,CACnC,MAAM,eAAe,KAAK,IAAI,aAAa,CAAC,CAC5C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI;GACN,GAAG,QAAQ,KAAK,SAAS;GACzB,GAAG,SAAS,MAAM,CAAC,GAAG,4BAA4B,CAAC;GACnD,GAAG,uBAAuB,MAAM,KAAK;GACrC,CAAC,EACF,GAAG,IAAI,CACN,GAAG,QAAQ,KAAK,SAAS,EACzB,GAAG,SAAS,MAAM;GAAC;GAAW;GAAW;GAAY;GAAS,CAAC,CAC/D,CAAC,CACF,CAAC,CACF,CACA,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,QAAQ,aAAa,CACrB,MAAM,MAAM,CACZ,SAAS;AACX,MAAI,WAAW,WAAW,EAAG,QAAO,EAAE;EACtC,MAAM,MAAM,aAAa,KAAK,GAAG;AAyBjC,UAxBa,MAAM,KAAK,GACtB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,OAAO;GAAW,YAAY;GAAK,aAAa;GAAM,kBAAkB;GAAM,CAAC,CACrF,MACA,MACA,MACA,WAAW,KAAK,cAAc,UAAU,GAAG,CAC3C,CACA,MAAM,eAAe,KAAK,IAAI,aAAa,CAAC,CAC5C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI;GACN,GAAG,QAAQ,KAAK,SAAS;GACzB,GAAG,SAAS,MAAM,CAAC,GAAG,4BAA4B,CAAC;GACnD,GAAG,uBAAuB,MAAM,KAAK;GACrC,CAAC,EACF,GAAG,IAAI,CACN,GAAG,QAAQ,KAAK,SAAS,EACzB,GAAG,SAAS,MAAM;GAAC;GAAW;GAAW;GAAY;GAAS,CAAC,CAC/D,CAAC,CACF,CAAC,CACF,CACA,UAAU;GAAC;GAAM;GAAQ;GAAiB,CAAC,CAC3C,SAAS,EACC,SAAS,QACpB,wBAAwB,IAAI,KAAK,GAC9B,CAAC;GAAE,IAAI,IAAI;GAAI,MAAM,IAAI;GAAM,eAAe,IAAI;GAAgB,CAAC,GACnE,EAAE,CACL;;;;;;;;;;;;;;CAeF,MAAM,gBACL,QAAQ,IACR,UAA+C,EAAE,EACoC;EACrF,MAAM,YAAY,QAAQ,0BAA0B;EACpD,MAAM,iBAAiB,uBAAuB,QAAQ,UAAU,UAAU,UAAU;AA2BpF,UA1Ba,MAAM,KAAK,GACtB,WAAW,8BAA8B,CACzC,OAAO;GAAC;GAAM;GAAQ;GAAS;GAAiB,CAAC,CACjD,MAAM,wBAAwB,MAAM,KAAK,CACzC,OAAO,OACP,GAAG,GAAG;GACL,GAAG,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,EAAE,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC;GAChE,GAAG,IAAI;IACN,GAAG,QAAQ,KAAK,SAAS;IACzB,GAAG,SAAS,MAAM,eAAe;IACjC,qBAAqB,KAAK,IAAI,cAAc,UAAU;IACtD,CAAC;GACF,GAAG,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,EAAE,GAAG,SAAS,MAAM,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC;GAC7E,CAAC,CACF,CACA,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,QAAQ,aAAa,CACrB,QAAQ,KAAK,CACb,MAAM,KAAK,IAAI,KAAK,IAAI,OAAO,EAAE,EAAE,IAAI,CAAC,CACxC,SAAS,EACC,SAAS,QACpB,wBAAwB,IAAI,KAAK,IAAI,yBAAyB,IAAI,MAAM,GACrE,CAAC;GAAE,IAAI,IAAI;GAAI,MAAM,IAAI;GAAM,OAAO,IAAI;GAAO,eAAe,IAAI;GAAgB,CAAC,GACrF,EAAE,CACL;;;CAIF,MAAM,cAAc,IAA2B;AAC9C,QAAM,KAAK,GACT,YAAY,8BAA8B,CAC1C,IAAI,EAAE,sBAAsB,aAAa,KAAK,GAAG,EAAE,CAAC,CACpD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,wBAAwB,MAAM,KAAK,CACzC,SAAS;;;;;;;;;;CAWZ,MAAM,gBAAgB,aAAqB,QAAQ,KAAsB;EACxE,MAAM,UAAU,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,MAAM,EAAE,EAAE,EAAE,IAAK;AA4B9D,SAAO;GA3BQ,MAAM,GAAG;;0BAEA,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACF,MAAM,GAAG;;0BAED,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACJ,MAAM,GAAG;;0BAEC,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACa,CAAC,QAC9B,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB,GAAG,EAC3D,EACA;;;;;;CAOF,MAAM,kBAAkB,IAA8B;EACrD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,8BAA8B,CACzC,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,wBAAwB,UAAU,KAAK,CAC7C,OAAO,OACP,GAAG,IAAI;GACN,GAAG,IACF,GAAG,OACF,GACE,WAAW,gCAAgC,CAC3C,OAAO,OAAO,CACd,MAAM,8CAA8C,KAAK,GAAG,CAC9D,CACD;GACD,GAAG,IACF,GAAG,OACF,GACE,WAAW,iCAAiC,CAC5C,OAAO,OAAO,CACd,MAAM,+CAA+C,KAAK,GAAG,CAC/D,CACD;GACD,GAAG,IACF,GAAG,OACF,GACE,WAAW,+BAA+B,CAC1C,OAAO,WAAW,CAClB,MAAM,6CAA6C,KAAK,GAAG,CAC7D,CACD;GACD,CAAC,CACF,CACA,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,GAAG,GAAG;;;;;;;CAQ9C,MAAM,+BAAgD;AACrD,SAAO,6BAA6B,KAAK,GAAG;;;CAI7C,MAAM,KACL,UAKI,EAAE,EACoF;EAC1F,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,SAAS,IAAI,EAAE,EAAE,IAAI;EAC7D,IAAI,QAAQ,KAAK,GAAG,WAAW,8BAA8B,CAAC,WAAW;AACzE,MAAI,QAAQ,KAAM,SAAQ,MAAM,MAAM,QAAQ,KAAK,QAAQ,KAAK;AAChE,MAAI,QAAQ,UAAW,SAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ,UAAU;EAChF,MAAM,SAAS,QAAQ;AACvB,MAAI,OACH,SAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,OAAO,UAAU,EACvC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,OAAO,UAAU,EAAE,GAAG,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC,CAC3E,CAAC,CACF;EAEF,MAAM,OAAO,MAAM,MACjB,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE,CAChB,SAAS;EACX,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,kBAAkB,YAAY,IAAI,CAAC,CAAC;EACpF,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,SAAO,KAAK,SAAS,SAAS,OAC3B;GAAE;GAAO,MAAM;IAAE,WAAW,KAAK;IAAW,IAAI,KAAK;IAAI;GAAE,GAC3D,EAAE,OAAO;;CAGb,AAAQ,YAAY,OAAwC;EAC3D,MAAM,SAA0B,EAAE;AAClC,MAAI,MAAM,UAAU,OAAW,QAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,UAAU,OAAW,QAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,WAAW,OACpB,QAAO,SACN,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,qBAAqB,MAAM,MAAM,OAAO,CAAC;AAEzF,MAAI,MAAM,aAAa,OACtB,QAAO,WACN,MAAM,aAAa,OAChB,OACA,KAAK,UAAU,uBAAuB,MAAM,MAAM,SAAS,CAAC;AAEjE,MAAI,MAAM,kBAAkB,OAAW,QAAO,iBAAiB,MAAM;AACrE,MAAI,MAAM,eAAe,OAAW,QAAO,cAAc,MAAM;AAC/D,MAAI,MAAM,iBAAiB,OAAW,QAAO,iBAAiB,MAAM;AACpE,MAAI,MAAM,oBACT,QAAO,sBAAsB,GAAW,iCAAiC,aAAa,KAAK,GAAG,CAAC;AAEhG,MAAI,MAAM,eAAe,OACxB,QAAO,aAAa,gBAAgB,KAAK,IAAI,MAAM,WAAW;AAC/D,MAAI,MAAM,eAAe,QAAW;AACnC,UAAO,aAAa,MAAM,YAAY,QAAQ;AAC9C,UAAO,eACN,MAAM,YAAY,WAAW,SAAY,OAAO,KAAK,UAAU,MAAM,WAAW,OAAO;;AAEzF,SAAO;;CAGR,MAAc,aACb,IACA,YACA,QAC6B;EAC7B,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,GAAG;GAAQ,YAAY,aAAa,KAAK,GAAG;GAAE,CAAC,CACrD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,KAAK,IAAI,mBAAmB,CAAC,CACnD,cAAc,CACd,kBAAkB;AACpB,MAAI,CAAC,IACJ,OAAM,IAAI,cAAc,uBAAuB,oCAAoC;AAEpF,SAAO,YAAY,IAAI;;;AAIzB,SAAS,WAAW,MAAqC;AACxD,QAAO,SAAS,WACb,gBAAgB,mBAChB,gBAAgB;;;;;AC1yBpB,MAAM,uBAAuB;AAE7B,SAAS,gBAA+B;AACvC,QAAO,IAAI,cAAc,+BAA+B,+BAA+B;;AAGxF,SAAS,SAAS,MAA2E;AAC5F,KAAI,gBAAgB,WACnB,QAAO,IAAI,eAA2B,EACrC,MAAM,YAAY;AACjB,MAAI,KAAK,aAAa,EAAG,YAAW,QAAQ,KAAK;AACjD,aAAW,OAAO;IAEnB,CAAC;AAEH,QAAO;;;;;;;;;;;;;;;;;;;AAoBR,eAAsB,YACrB,SACA,KACA,MACA,UACA,UAA8B,EAAE,EAChB;CAChB,MAAM,UAAU,YAAY;AAC3B,MAAI,QAAQ,yBAA0B,MAAM,QAAQ,uBAAuB,CAAG;AAC9E,QAAM,QAAQ,OAAO,IAAI,CAAC,YAAY,OAAU;;AAEjD,KAAI,CAAC,OAAO,cAAc,SAAS,MAAM,IAAI,SAAS,QAAQ,EAC7D,OAAM,IAAI,cAAc,+BAA+B,wBAAwB;CAEhF,MAAM,SAAS,MAAM,cAAc;CACnC,MAAM,UAAU,oBAAoB,QAAQ;EAC3C,UAAU,SAAS;EACnB,iBAAiB;EACjB,CAAC;CACF,IAAI,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO;AACvD,KAAI,OAAO,sBAAsB,YAChC,UAAS,OAAO,YAAY,IAAI,kBAAkB,SAAS,MAAM,CAAC;AAGnE,KAAI;AACH,QAAM,QAAQ,OAAO;GACpB;GACA,MAAM;GACN,aAAa,QAAQ,eAAe;GACpC,CAAC;UACM,OAAO;AACf,QAAM,SAAS;AACf,MAAI,gBAAgB,MAAM,CAAE,OAAM;EAClC,MAAM,QAAQ,kBAAkB,MAAM;AACtC,MAAI,MAAO,OAAM;AACjB,MAAI,QAAQ,OAAO,KAAK,SAAS,MAChC,OAAM,IAAI,cAAc,+BAA+B,4BAA4B,EAClF,OAAO,OACP,CAAC;AAEH,QAAM,IAAI,cAAc,0BAA0B,wBAAwB,EAAE,OAAO,OAAO,CAAC;;CAG5F,MAAM,SAAS,MAAM,OAAO,QAAQ;AACpC,KAAI,QAAQ,OAAO,KAAK,SAAS,OAAO;AACvC,QAAM,SAAS;AACf,QAAM,IAAI,cAAc,+BAA+B,4BAA4B,EAClF,QAAQ;GAAE,UAAU,SAAS;GAAO,QAAQ,QAAQ,OAAO;GAAE,EAC7D,CAAC;;AAEH,KAAI,WAAW,SAAS,QAAQ;AAC/B,QAAM,SAAS;AACf,QAAM,IAAI,cAAc,iCAAiC,6BAA6B;;;AAIxF,SAAS,kBAAkB,OAAsC;CAChE,IAAI,UAAmB;AACvB,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AACnE,MAAI,mBAAmB,cAAe,QAAO;AAC7C,YAAU,QAAQ;;AAEnB,QAAO;;;AAIR,eAAsB,gBACrB,QACA,UACsB;CACtB,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,QAAsB,EAAE;CAC9B,IAAI,QAAQ;AACZ,KAAI;AACH,WAAS;GACR,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,OAAI,KAAM;AACV,YAAS,MAAM;AACf,OAAI,QAAQ,SACX,OAAM,IAAI,cAAc,2BAA2B,+BAA+B,EACjF,QAAQ,EAAE,OAAO,UAAU,EAC3B,CAAC;AAEH,SAAM,KAAK,MAAM;;UAEV,OAAO;AACf,QAAM,OAAO,QAAQ,CAAC,YAAY,OAAU;AAC5C,QAAM;WACG;AACT,SAAO,aAAa;;CAErB,MAAM,QAAQ,IAAI,WAAW,MAAM;CACnC,IAAI,SAAS;AACb,MAAK,MAAM,QAAQ,OAAO;AACzB,QAAM,IAAI,MAAM,OAAO;AACvB,YAAU,KAAK;;AAEhB,QAAO;;;AAIR,IAAa,gBAAb,MAA2B;CAC1B,YACC,AAAS,SACT,AAAS,QACR;EAFQ;EACA;;CAGV,OAAO,MAAsB;AAC5B,SAAO,WAAW,KAAK,QAAQ,KAAK;;CAGrC,MAAM,YACL,MACA,MACA,OACA,QACA,UAA8B,EAAE,EAChB;AAChB,QAAM,YAAY,KAAK,SAAS,KAAK,OAAO,KAAK,EAAE,MAAM;GAAE;GAAO;GAAQ,EAAE,QAAQ;;CAGrF,MAAM,OAAO,MAAgC;AAC5C,SAAO,KAAK,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC;;CAG9C,MAAM,KAAK,MAAuC;AACjD,MAAI;AACH,UAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,OAAO,KAAK,CAAC;WAC7C,OAAO;AACf,SAAM,IAAI,cAAc,yBAAyB,0BAA0B;IAC1E,QAAQ,EAAE,MAAM;IAChB,OAAO;IACP,CAAC;;;CAIJ,MAAM,UAAU,MAAc,UAAuC;AAEpE,SAAO,iBADM,MAAM,KAAK,KAAK,KAAK,EACN,MAAM,SAAS;;CAG5C,MAAM,OAAO,MAAsB,SAAgC;AAClE,QAAM,KAAK,QAAQ,OAAO;GACzB,KAAK,cAAc,KAAK,QAAQ,KAAK;GACrC,MAAM,IAAI,aAAa,CAAC,OAAO,QAAQ;GACvC,aAAa;GACb,CAAC;;CAGH,MAAM,QAAQ,MAAsB,UAA0C;EAC7E,MAAM,MAAM,cAAc,KAAK,QAAQ,KAAK;AAC5C,MAAI,CAAE,MAAM,KAAK,QAAQ,OAAO,IAAI,CAAG,QAAO;EAC9C,MAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,IAAI;AACjD,SAAO,IAAI,aAAa,CAAC,OAAO,MAAM,gBAAgB,SAAS,MAAM,SAAS,CAAC;;;;;;CAOhF,MAAM,WAAW,QAAQ,KAAsB;EAC9C,MAAM,UAAU,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ,KAAK;GAAQ;GAAO,CAAC;AACvE,OAAK,MAAM,QAAQ,QAAQ,MAAO,OAAM,KAAK,QAAQ,OAAO,KAAK,IAAI;AACrE,SAAO,QAAQ,MAAM"}

package/dist/state-DDiPySSG.mjs

@@ -0,0 +1,153 @@
+//#region src/plugins/state.ts
+const TIMEZONE_SUFFIX = /(?:z|[+-]\d{2}(?::?\d{2})?)$/i;
+const HOUR_OFFSET_SUFFIX = /\d{2}:\d{2}(?::\d{2}(?:\.\d+)?)?[+-]\d{2}$/i;
+function parseDatabaseTimestamp(value) {
+	let normalized = value.trim().replace(" ", "T");
+	if (HOUR_OFFSET_SUFFIX.test(normalized)) normalized += ":00";
+	else if (!TIMEZONE_SUFFIX.test(normalized)) normalized += "Z";
+	return new Date(normalized);
+}
+function toPluginStatus(value) {
+	if (value === "active") return "active";
+	return "inactive";
+}
+function toPluginSource(value) {
+	if (value === "marketplace") return "marketplace";
+	if (value === "registry") return "registry";
+	return "config";
+}
+/**
+* Repository for plugin state in the database
+*/
+var PluginStateRepository = class {
+	constructor(db) {
+		this.db = db;
+	}
+	/**
+	* Get state for a specific plugin
+	*/
+	async get(pluginId) {
+		const row = await this.db.selectFrom("_plugin_state").selectAll().where("plugin_id", "=", pluginId).executeTakeFirst();
+		if (!row) return null;
+		return rowToPluginState(row);
+	}
+	/**
+	* Get all plugin states
+	*/
+	async getAll() {
+		return (await this.db.selectFrom("_plugin_state").selectAll().execute()).map(rowToPluginState);
+	}
+	/**
+	* Get all marketplace-installed plugin states
+	*/
+	async getMarketplacePlugins() {
+		return (await this.db.selectFrom("_plugin_state").selectAll().where("source", "=", "marketplace").execute()).map(rowToPluginState);
+	}
+	/**
+	* Get all registry-installed plugin states.
+	*
+	* The runtime's registry sync path uses this to discover which
+	* registry plugins should be loaded into the sandbox on this worker.
+	*/
+	async getRegistryPlugins() {
+		return (await this.db.selectFrom("_plugin_state").selectAll().where("source", "=", "registry").execute()).map(rowToPluginState);
+	}
+	/**
+	* Create or update plugin state
+	*/
+	async upsert(pluginId, version, status, opts) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const existing = await this.get(pluginId);
+		if (existing) {
+			const updates = {
+				status,
+				version
+			};
+			if (status === "active" && existing.status !== "active") updates.activated_at = now;
+			else if (status === "inactive" && existing.status !== "inactive") updates.deactivated_at = now;
+			if (opts?.source) updates.source = opts.source;
+			if (opts?.marketplaceVersion !== void 0) updates.marketplace_version = opts.marketplaceVersion;
+			if (opts?.displayName !== void 0) updates.display_name = opts.displayName;
+			if (opts?.description !== void 0) updates.description = opts.description;
+			if (opts?.registryPublisherDid !== void 0) updates.registry_publisher_did = opts.registryPublisherDid;
+			if (opts?.registrySlug !== void 0) updates.registry_slug = opts.registrySlug;
+			if (opts?.mcpToolsEnabled !== void 0) updates.mcp_tools_enabled = opts.mcpToolsEnabled ? 1 : 0;
+			if (opts?.mcpToolsConsent !== void 0) updates.mcp_tools_consent = opts.mcpToolsConsent;
+			await this.db.updateTable("_plugin_state").set(updates).where("plugin_id", "=", pluginId).execute();
+		} else await this.db.insertInto("_plugin_state").values({
+			plugin_id: pluginId,
+			status,
+			version,
+			installed_at: now,
+			activated_at: status === "active" ? now : null,
+			deactivated_at: null,
+			data: null,
+			source: opts?.source ?? "config",
+			marketplace_version: opts?.marketplaceVersion ?? null,
+			display_name: opts?.displayName ?? null,
+			description: opts?.description ?? null,
+			registry_publisher_did: opts?.registryPublisherDid ?? null,
+			registry_slug: opts?.registrySlug ?? null,
+			mcp_tools_enabled: opts?.mcpToolsEnabled ? 1 : 0,
+			mcp_tools_consent: opts?.mcpToolsConsent ?? null
+		}).execute();
+		return await this.get(pluginId);
+	}
+	async restoreIfVersion(expectedVersion, state) {
+		return ((await this.db.updateTable("_plugin_state").set({
+			version: state.version,
+			status: state.status,
+			installed_at: state.installedAt.toISOString(),
+			activated_at: state.activatedAt?.toISOString() ?? null,
+			deactivated_at: state.deactivatedAt?.toISOString() ?? null,
+			source: state.source,
+			marketplace_version: state.marketplaceVersion,
+			display_name: state.displayName,
+			description: state.description,
+			registry_publisher_did: state.registryPublisherDid,
+			registry_slug: state.registrySlug,
+			mcp_tools_enabled: state.mcpToolsEnabled ? 1 : 0,
+			mcp_tools_consent: state.mcpToolsConsent
+		}).where("plugin_id", "=", state.pluginId).where("version", "=", expectedVersion).where("source", "=", state.source).executeTakeFirst()).numUpdatedRows ?? 0n) > 0n;
+	}
+	/**
+	* Enable a plugin
+	*/
+	async enable(pluginId, version) {
+		return this.upsert(pluginId, version, "active");
+	}
+	/**
+	* Disable a plugin
+	*/
+	async disable(pluginId, version) {
+		return this.upsert(pluginId, version, "inactive");
+	}
+	/**
+	* Delete plugin state
+	*/
+	async delete(pluginId) {
+		return ((await this.db.deleteFrom("_plugin_state").where("plugin_id", "=", pluginId).executeTakeFirst()).numDeletedRows ?? 0) > 0;
+	}
+};
+function rowToPluginState(row) {
+	return {
+		pluginId: row.plugin_id,
+		status: toPluginStatus(row.status),
+		version: row.version,
+		installedAt: parseDatabaseTimestamp(row.installed_at),
+		activatedAt: row.activated_at ? parseDatabaseTimestamp(row.activated_at) : null,
+		deactivatedAt: row.deactivated_at ? parseDatabaseTimestamp(row.deactivated_at) : null,
+		source: toPluginSource(row.source),
+		marketplaceVersion: row.marketplace_version ?? null,
+		displayName: row.display_name ?? null,
+		description: row.description ?? null,
+		registryPublisherDid: row.registry_publisher_did ?? null,
+		registrySlug: row.registry_slug ?? null,
+		mcpToolsEnabled: row.mcp_tools_enabled === 1,
+		mcpToolsConsent: row.mcp_tools_consent ?? null
+	};
+}
+
+//#endregion
+export { PluginStateRepository as t };
+//# sourceMappingURL=state-DDiPySSG.mjs.map

package/dist/state-DDiPySSG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-DDiPySSG.mjs","names":[],"sources":["../src/plugins/state.ts"],"sourcesContent":["/**\n * Plugin State Repository\n *\n * Database-backed storage for plugin activation state.\n * Used by the admin API to persist plugin enable/disable across restarts.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\n\nexport type PluginStatus = \"active\" | \"inactive\";\nexport type PluginSource = \"config\" | \"marketplace\" | \"registry\";\n\nconst TIMEZONE_SUFFIX = /(?:z|[+-]\\d{2}(?::?\\d{2})?)$/i;\nconst HOUR_OFFSET_SUFFIX = /\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d+)?)?[+-]\\d{2}$/i;\n\nfunction parseDatabaseTimestamp(value: string): Date {\n\tlet normalized = value.trim().replace(\" \", \"T\");\n\tif (HOUR_OFFSET_SUFFIX.test(normalized)) normalized += \":00\";\n\telse if (!TIMEZONE_SUFFIX.test(normalized)) normalized += \"Z\";\n\treturn new Date(normalized);\n}\n\nfunction toPluginStatus(value: string): PluginStatus {\n\tif (value === \"active\") return \"active\";\n\treturn \"inactive\";\n}\n\nfunction toPluginSource(value: string | undefined | null): PluginSource {\n\tif (value === \"marketplace\") return \"marketplace\";\n\tif (value === \"registry\") return \"registry\";\n\treturn \"config\";\n}\n\nexport interface PluginState {\n\tpluginId: string;\n\tstatus: PluginStatus;\n\tversion: string;\n\tinstalledAt: Date;\n\tactivatedAt: Date | null;\n\tdeactivatedAt: Date | null;\n\tsource: PluginSource;\n\tmarketplaceVersion: string | null;\n\tdisplayName: string | null;\n\tdescription: string | null;\n\t/**\n\t * Publisher DID this plugin was published under. Populated only when\n\t * `source === \"registry\"`; null otherwise.\n\t */\n\tregistryPublisherDid: string | null;\n\t/**\n\t * Slug under which the plugin was published in the publisher's repo\n\t * (the rkey of the `pm.fair.package.profile` record). Populated only\n\t * when `source === \"registry\"`; null otherwise.\n\t *\n\t * The opaque `pluginId` for registry installs is derived from\n\t * `(registryPublisherDid, registrySlug)` -- see\n\t * `packages/core/src/registry/plugin-id.ts`.\n\t */\n\tregistrySlug: string | null;\n\tmcpToolsEnabled: boolean;\n\tmcpToolsConsent: string | null;\n}\n\n/**\n * Repository for plugin state in the database\n */\nexport class PluginStateRepository {\n\tconstructor(private db: Kysely<Database>) {}\n\n\t/**\n\t * Get state for a specific plugin\n\t */\n\tasync get(pluginId: string): Promise<PluginState | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_plugin_state\")\n\t\t\t.selectAll()\n\t\t\t.where(\"plugin_id\", \"=\", pluginId)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!row) return null;\n\n\t\treturn rowToPluginState(row);\n\t}\n\n\t/**\n\t * Get all plugin states\n\t */\n\tasync getAll(): Promise<PluginState[]> {\n\t\tconst rows = await this.db.selectFrom(\"_plugin_state\").selectAll().execute();\n\t\treturn rows.map(rowToPluginState);\n\t}\n\n\t/**\n\t * Get all marketplace-installed plugin states\n\t */\n\tasync getMarketplacePlugins(): Promise<PluginState[]> {\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_plugin_state\")\n\t\t\t.selectAll()\n\t\t\t.where(\"source\", \"=\", \"marketplace\")\n\t\t\t.execute();\n\t\treturn rows.map(rowToPluginState);\n\t}\n\n\t/**\n\t * Get all registry-installed plugin states.\n\t *\n\t * The runtime's registry sync path uses this to discover which\n\t * registry plugins should be loaded into the sandbox on this worker.\n\t */\n\tasync getRegistryPlugins(): Promise<PluginState[]> {\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_plugin_state\")\n\t\t\t.selectAll()\n\t\t\t.where(\"source\", \"=\", \"registry\")\n\t\t\t.execute();\n\t\treturn rows.map(rowToPluginState);\n\t}\n\n\t/**\n\t * Create or update plugin state\n\t */\n\tasync upsert(\n\t\tpluginId: string,\n\t\tversion: string,\n\t\tstatus: PluginStatus,\n\t\topts?: {\n\t\t\tsource?: PluginSource;\n\t\t\tmarketplaceVersion?: string;\n\t\t\tdisplayName?: string;\n\t\t\tdescription?: string;\n\t\t\tregistryPublisherDid?: string;\n\t\t\tregistrySlug?: string;\n\t\t\tmcpToolsEnabled?: boolean;\n\t\t\tmcpToolsConsent?: string | null;\n\t\t},\n\t): Promise<PluginState> {\n\t\tconst now = new Date().toISOString();\n\t\tconst existing = await this.get(pluginId);\n\n\t\tif (existing) {\n\t\t\t// Update existing state\n\t\t\tconst updates: Record<string, string | number | null> = {\n\t\t\t\tstatus,\n\t\t\t\tversion,\n\t\t\t};\n\n\t\t\tif (status === \"active\" && existing.status !== \"active\") {\n\t\t\t\tupdates.activated_at = now;\n\t\t\t} else if (status === \"inactive\" && existing.status !== \"inactive\") {\n\t\t\t\tupdates.deactivated_at = now;\n\t\t\t}\n\n\t\t\tif (opts?.source) updates.source = opts.source;\n\t\t\tif (opts?.marketplaceVersion !== undefined) {\n\t\t\t\tupdates.marketplace_version = opts.marketplaceVersion;\n\t\t\t}\n\t\t\tif (opts?.displayName !== undefined) {\n\t\t\t\tupdates.display_name = opts.displayName;\n\t\t\t}\n\t\t\tif (opts?.description !== undefined) {\n\t\t\t\tupdates.description = opts.description;\n\t\t\t}\n\t\t\tif (opts?.registryPublisherDid !== undefined) {\n\t\t\t\tupdates.registry_publisher_did = opts.registryPublisherDid;\n\t\t\t}\n\t\t\tif (opts?.registrySlug !== undefined) {\n\t\t\t\tupdates.registry_slug = opts.registrySlug;\n\t\t\t}\n\t\t\tif (opts?.mcpToolsEnabled !== undefined) {\n\t\t\t\tupdates.mcp_tools_enabled = opts.mcpToolsEnabled ? 1 : 0;\n\t\t\t}\n\t\t\tif (opts?.mcpToolsConsent !== undefined) {\n\t\t\t\tupdates.mcp_tools_consent = opts.mcpToolsConsent;\n\t\t\t}\n\n\t\t\tawait this.db\n\t\t\t\t.updateTable(\"_plugin_state\")\n\t\t\t\t.set(updates)\n\t\t\t\t.where(\"plugin_id\", \"=\", pluginId)\n\t\t\t\t.execute();\n\t\t} else {\n\t\t\t// Create new state\n\t\t\tawait this.db\n\t\t\t\t.insertInto(\"_plugin_state\")\n\t\t\t\t.values({\n\t\t\t\t\tplugin_id: pluginId,\n\t\t\t\t\tstatus,\n\t\t\t\t\tversion,\n\t\t\t\t\tinstalled_at: now,\n\t\t\t\t\tactivated_at: status === \"active\" ? now : null,\n\t\t\t\t\tdeactivated_at: null,\n\t\t\t\t\tdata: null,\n\t\t\t\t\tsource: opts?.source ?? \"config\",\n\t\t\t\t\tmarketplace_version: opts?.marketplaceVersion ?? null,\n\t\t\t\t\tdisplay_name: opts?.displayName ?? null,\n\t\t\t\t\tdescription: opts?.description ?? null,\n\t\t\t\t\tregistry_publisher_did: opts?.registryPublisherDid ?? null,\n\t\t\t\t\tregistry_slug: opts?.registrySlug ?? null,\n\t\t\t\t\tmcp_tools_enabled: opts?.mcpToolsEnabled ? 1 : 0,\n\t\t\t\t\tmcp_tools_consent: opts?.mcpToolsConsent ?? null,\n\t\t\t\t})\n\t\t\t\t.execute();\n\t\t}\n\n\t\treturn (await this.get(pluginId))!;\n\t}\n\n\tasync restoreIfVersion(expectedVersion: string, state: PluginState): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.updateTable(\"_plugin_state\")\n\t\t\t.set({\n\t\t\t\tversion: state.version,\n\t\t\t\tstatus: state.status,\n\t\t\t\tinstalled_at: state.installedAt.toISOString(),\n\t\t\t\tactivated_at: state.activatedAt?.toISOString() ?? null,\n\t\t\t\tdeactivated_at: state.deactivatedAt?.toISOString() ?? null,\n\t\t\t\tsource: state.source,\n\t\t\t\tmarketplace_version: state.marketplaceVersion,\n\t\t\t\tdisplay_name: state.displayName,\n\t\t\t\tdescription: state.description,\n\t\t\t\tregistry_publisher_did: state.registryPublisherDid,\n\t\t\t\tregistry_slug: state.registrySlug,\n\t\t\t\tmcp_tools_enabled: state.mcpToolsEnabled ? 1 : 0,\n\t\t\t\tmcp_tools_consent: state.mcpToolsConsent,\n\t\t\t})\n\t\t\t.where(\"plugin_id\", \"=\", state.pluginId)\n\t\t\t.where(\"version\", \"=\", expectedVersion)\n\t\t\t.where(\"source\", \"=\", state.source)\n\t\t\t.executeTakeFirst();\n\n\t\treturn (result.numUpdatedRows ?? 0n) > 0n;\n\t}\n\n\t/**\n\t * Enable a plugin\n\t */\n\tasync enable(pluginId: string, version: string): Promise<PluginState> {\n\t\treturn this.upsert(pluginId, version, \"active\");\n\t}\n\n\t/**\n\t * Disable a plugin\n\t */\n\tasync disable(pluginId: string, version: string): Promise<PluginState> {\n\t\treturn this.upsert(pluginId, version, \"inactive\");\n\t}\n\n\t/**\n\t * Delete plugin state\n\t */\n\tasync delete(pluginId: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_plugin_state\")\n\t\t\t.where(\"plugin_id\", \"=\", pluginId)\n\t\t\t.executeTakeFirst();\n\n\t\treturn (result.numDeletedRows ?? 0) > 0;\n\t}\n}\n\n/**\n * Internal: map a `_plugin_state` row to the public `PluginState` shape.\n *\n * Kept at module scope so the three select paths (`get`, `getAll`,\n * `getMarketplacePlugins`, `getRegistryPlugins`) stay byte-identical in\n * their handling of nullable columns -- adding a new column to the table\n * means changing this function and nothing else.\n */\ninterface PluginStateRow {\n\tplugin_id: string;\n\tstatus: string;\n\tversion: string;\n\tinstalled_at: string;\n\tactivated_at: string | null;\n\tdeactivated_at: string | null;\n\tsource: string;\n\tmarketplace_version: string | null;\n\tdisplay_name: string | null;\n\tdescription: string | null;\n\tregistry_publisher_did: string | null;\n\tregistry_slug: string | null;\n\tmcp_tools_enabled: number;\n\tmcp_tools_consent: string | null;\n}\n\nfunction rowToPluginState(row: PluginStateRow): PluginState {\n\treturn {\n\t\tpluginId: row.plugin_id,\n\t\tstatus: toPluginStatus(row.status),\n\t\tversion: row.version,\n\t\tinstalledAt: parseDatabaseTimestamp(row.installed_at),\n\t\tactivatedAt: row.activated_at ? parseDatabaseTimestamp(row.activated_at) : null,\n\t\tdeactivatedAt: row.deactivated_at ? parseDatabaseTimestamp(row.deactivated_at) : null,\n\t\tsource: toPluginSource(row.source),\n\t\tmarketplaceVersion: row.marketplace_version ?? null,\n\t\tdisplayName: row.display_name ?? null,\n\t\tdescription: row.description ?? null,\n\t\tregistryPublisherDid: row.registry_publisher_did ?? null,\n\t\tregistrySlug: row.registry_slug ?? null,\n\t\tmcpToolsEnabled: row.mcp_tools_enabled === 1,\n\t\tmcpToolsConsent: row.mcp_tools_consent ?? null,\n\t};\n}\n"],"mappings":";AAcA,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAE3B,SAAS,uBAAuB,OAAqB;CACpD,IAAI,aAAa,MAAM,MAAM,CAAC,QAAQ,KAAK,IAAI;AAC/C,KAAI,mBAAmB,KAAK,WAAW,CAAE,eAAc;UAC9C,CAAC,gBAAgB,KAAK,WAAW,CAAE,eAAc;AAC1D,QAAO,IAAI,KAAK,WAAW;;AAG5B,SAAS,eAAe,OAA6B;AACpD,KAAI,UAAU,SAAU,QAAO;AAC/B,QAAO;;AAGR,SAAS,eAAe,OAAgD;AACvE,KAAI,UAAU,cAAe,QAAO;AACpC,KAAI,UAAU,WAAY,QAAO;AACjC,QAAO;;;;;AAoCR,IAAa,wBAAb,MAAmC;CAClC,YAAY,AAAQ,IAAsB;EAAtB;;;;;CAKpB,MAAM,IAAI,UAA+C;EACxD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,gBAAgB,CAC3B,WAAW,CACX,MAAM,aAAa,KAAK,SAAS,CACjC,kBAAkB;AAEpB,MAAI,CAAC,IAAK,QAAO;AAEjB,SAAO,iBAAiB,IAAI;;;;;CAM7B,MAAM,SAAiC;AAEtC,UADa,MAAM,KAAK,GAAG,WAAW,gBAAgB,CAAC,WAAW,CAAC,SAAS,EAChE,IAAI,iBAAiB;;;;;CAMlC,MAAM,wBAAgD;AAMrD,UALa,MAAM,KAAK,GACtB,WAAW,gBAAgB,CAC3B,WAAW,CACX,MAAM,UAAU,KAAK,cAAc,CACnC,SAAS,EACC,IAAI,iBAAiB;;;;;;;;CASlC,MAAM,qBAA6C;AAMlD,UALa,MAAM,KAAK,GACtB,WAAW,gBAAgB,CAC3B,WAAW,CACX,MAAM,UAAU,KAAK,WAAW,CAChC,SAAS,EACC,IAAI,iBAAiB;;;;;CAMlC,MAAM,OACL,UACA,SACA,QACA,MAUuB;EACvB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EACpC,MAAM,WAAW,MAAM,KAAK,IAAI,SAAS;AAEzC,MAAI,UAAU;GAEb,MAAM,UAAkD;IACvD;IACA;IACA;AAED,OAAI,WAAW,YAAY,SAAS,WAAW,SAC9C,SAAQ,eAAe;YACb,WAAW,cAAc,SAAS,WAAW,WACvD,SAAQ,iBAAiB;AAG1B,OAAI,MAAM,OAAQ,SAAQ,SAAS,KAAK;AACxC,OAAI,MAAM,uBAAuB,OAChC,SAAQ,sBAAsB,KAAK;AAEpC,OAAI,MAAM,gBAAgB,OACzB,SAAQ,eAAe,KAAK;AAE7B,OAAI,MAAM,gBAAgB,OACzB,SAAQ,cAAc,KAAK;AAE5B,OAAI,MAAM,yBAAyB,OAClC,SAAQ,yBAAyB,KAAK;AAEvC,OAAI,MAAM,iBAAiB,OAC1B,SAAQ,gBAAgB,KAAK;AAE9B,OAAI,MAAM,oBAAoB,OAC7B,SAAQ,oBAAoB,KAAK,kBAAkB,IAAI;AAExD,OAAI,MAAM,oBAAoB,OAC7B,SAAQ,oBAAoB,KAAK;AAGlC,SAAM,KAAK,GACT,YAAY,gBAAgB,CAC5B,IAAI,QAAQ,CACZ,MAAM,aAAa,KAAK,SAAS,CACjC,SAAS;QAGX,OAAM,KAAK,GACT,WAAW,gBAAgB,CAC3B,OAAO;GACP,WAAW;GACX;GACA;GACA,cAAc;GACd,cAAc,WAAW,WAAW,MAAM;GAC1C,gBAAgB;GAChB,MAAM;GACN,QAAQ,MAAM,UAAU;GACxB,qBAAqB,MAAM,sBAAsB;GACjD,cAAc,MAAM,eAAe;GACnC,aAAa,MAAM,eAAe;GAClC,wBAAwB,MAAM,wBAAwB;GACtD,eAAe,MAAM,gBAAgB;GACrC,mBAAmB,MAAM,kBAAkB,IAAI;GAC/C,mBAAmB,MAAM,mBAAmB;GAC5C,CAAC,CACD,SAAS;AAGZ,SAAQ,MAAM,KAAK,IAAI,SAAS;;CAGjC,MAAM,iBAAiB,iBAAyB,OAAsC;AAuBrF,WAtBe,MAAM,KAAK,GACxB,YAAY,gBAAgB,CAC5B,IAAI;GACJ,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,cAAc,MAAM,YAAY,aAAa;GAC7C,cAAc,MAAM,aAAa,aAAa,IAAI;GAClD,gBAAgB,MAAM,eAAe,aAAa,IAAI;GACtD,QAAQ,MAAM;GACd,qBAAqB,MAAM;GAC3B,cAAc,MAAM;GACpB,aAAa,MAAM;GACnB,wBAAwB,MAAM;GAC9B,eAAe,MAAM;GACrB,mBAAmB,MAAM,kBAAkB,IAAI;GAC/C,mBAAmB,MAAM;GACzB,CAAC,CACD,MAAM,aAAa,KAAK,MAAM,SAAS,CACvC,MAAM,WAAW,KAAK,gBAAgB,CACtC,MAAM,UAAU,KAAK,MAAM,OAAO,CAClC,kBAAkB,EAEL,kBAAkB,MAAM;;;;;CAMxC,MAAM,OAAO,UAAkB,SAAuC;AACrE,SAAO,KAAK,OAAO,UAAU,SAAS,SAAS;;;;;CAMhD,MAAM,QAAQ,UAAkB,SAAuC;AACtE,SAAO,KAAK,OAAO,UAAU,SAAS,WAAW;;;;;CAMlD,MAAM,OAAO,UAAoC;AAMhD,WALe,MAAM,KAAK,GACxB,WAAW,gBAAgB,CAC3B,MAAM,aAAa,KAAK,SAAS,CACjC,kBAAkB,EAEL,kBAAkB,KAAK;;;AA6BxC,SAAS,iBAAiB,KAAkC;AAC3D,QAAO;EACN,UAAU,IAAI;EACd,QAAQ,eAAe,IAAI,OAAO;EAClC,SAAS,IAAI;EACb,aAAa,uBAAuB,IAAI,aAAa;EACrD,aAAa,IAAI,eAAe,uBAAuB,IAAI,aAAa,GAAG;EAC3E,eAAe,IAAI,iBAAiB,uBAAuB,IAAI,eAAe,GAAG;EACjF,QAAQ,eAAe,IAAI,OAAO;EAClC,oBAAoB,IAAI,uBAAuB;EAC/C,aAAa,IAAI,gBAAgB;EACjC,aAAa,IAAI,eAAe;EAChC,sBAAsB,IAAI,0BAA0B;EACpD,cAAc,IAAI,iBAAiB;EACnC,iBAAiB,IAAI,sBAAsB;EAC3C,iBAAiB,IAAI,qBAAqB;EAC1C"}

package/dist/status-DZKIG4a9.mjs

@@ -0,0 +1,30 @@
+//#region src/redirects/status.ts
+/**
+* Redirect rule status codes.
+*
+* A redirect rule's `type` is either a *redirect* status (issues a `Location`
+* header) or a *terminal* status (serves the status with no target). Terminal
+* statuses let editors mark a URL as intentionally gone:
+* - `410 Gone` — permanently and intentionally deleted (Google deindexes it
+*   faster than a 404).
+* - `451 Unavailable For Legal Reasons`.
+*/
+/** Statuses that issue an HTTP redirect (require a destination). */
+const REDIRECT_STATUSES = [
+	301,
+	302,
+	307,
+	308
+];
+/** Terminal statuses that serve a status with no `Location` / no destination. */
+const TERMINAL_STATUSES = [410, 451];
+/** All values accepted as a redirect rule `type`. */
+const REDIRECT_RULE_STATUSES = [...REDIRECT_STATUSES, ...TERMINAL_STATUSES];
+/** True for terminal statuses (410/451) — served directly, with no target. */
+function isTerminalStatus(type) {
+	return TERMINAL_STATUSES.includes(type);
+}
+
+//#endregion
+export { isTerminalStatus as n, REDIRECT_RULE_STATUSES as t };
+//# sourceMappingURL=status-DZKIG4a9.mjs.map

package/dist/status-DZKIG4a9.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-DZKIG4a9.mjs","names":[],"sources":["../src/redirects/status.ts"],"sourcesContent":["/**\n * Redirect rule status codes.\n *\n * A redirect rule's `type` is either a *redirect* status (issues a `Location`\n * header) or a *terminal* status (serves the status with no target). Terminal\n * statuses let editors mark a URL as intentionally gone:\n * - `410 Gone` — permanently and intentionally deleted (Google deindexes it\n *   faster than a 404).\n * - `451 Unavailable For Legal Reasons`.\n */\n\n/** Statuses that issue an HTTP redirect (require a destination). */\nexport const REDIRECT_STATUSES = [301, 302, 307, 308] as const;\n\n/** Terminal statuses that serve a status with no `Location` / no destination. */\nexport const TERMINAL_STATUSES = [410, 451] as const;\n\n/** All values accepted as a redirect rule `type`. */\nexport const REDIRECT_RULE_STATUSES: readonly number[] = [\n\t...REDIRECT_STATUSES,\n\t...TERMINAL_STATUSES,\n];\n\n/** True for terminal statuses (410/451) — served directly, with no target. */\nexport function isTerminalStatus(type: number): boolean {\n\treturn (TERMINAL_STATUSES as readonly number[]).includes(type);\n}\n"],"mappings":";;;;;;;;;;;;AAYA,MAAa,oBAAoB;CAAC;CAAK;CAAK;CAAK;CAAI;;AAGrD,MAAa,oBAAoB,CAAC,KAAK,IAAI;;AAG3C,MAAa,yBAA4C,CACxD,GAAG,mBACH,GAAG,kBACH;;AAGD,SAAgB,iBAAiB,MAAuB;AACvD,QAAQ,kBAAwC,SAAS,KAAK"}

package/dist/storage/local.d.mts

@@ -1,4 +1,4 @@
-import { a as ListOptions, d as Storage, l as SignedUploadOptions, n as DownloadResult, o as ListResult, p as UploadResult, s as LocalStorageConfig, u as SignedUploadUrl } from "../types-D4RGIc2I.mjs";
+import { a as ListOptions, d as Storage, l as SignedUploadOptions, n as DownloadResult, o as ListResult, p as UploadResult, s as LocalStorageConfig, u as SignedUploadUrl } from "../types-DA1Te3Oy.mjs";
 
 //#region src/storage/local.d.ts
 /**

package/dist/storage/local.mjs

@@ -1,4 +1,4 @@
-import { t as EmDashStorageError } from "../types-BtuppOTV.mjs";
+import { t as EmDashStorageError } from "../types-VT4-BugW.mjs";
 import mime from "mime/lite";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";

package/dist/storage/s3.d.mts

@@ -1,4 +1,4 @@
-import { a as ListOptions, c as S3StorageConfig, d as Storage, l as SignedUploadOptions, n as DownloadResult, o as ListResult, p as UploadResult, u as SignedUploadUrl } from "../types-D4RGIc2I.mjs";
+import { a as ListOptions, c as S3StorageConfig, d as Storage, l as SignedUploadOptions, n as DownloadResult, o as ListResult, p as UploadResult, u as SignedUploadUrl } from "../types-DA1Te3Oy.mjs";
 
 //#region src/storage/s3.d.ts
 /**

package/dist/storage/s3.mjs

@@ -1,4 +1,4 @@
-import { t as EmDashStorageError } from "../types-BtuppOTV.mjs";
+import { t as EmDashStorageError } from "../types-VT4-BugW.mjs";
 import { z } from "zod";
 import { DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, ListObjectsV2Command, PutObjectCommand, S3Client } from "@aws-sdk/client-s3";
 import { getSignedUrl } from "@aws-sdk/s3-request-presigner";