emdash 1.0.1 → 1.1.0

package/dist/init-lock-4eRRB4Le.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-lock-4eRRB4Le.mjs","names":[],"sources":["../src/utils/init-lock.ts"],"sourcesContent":["/**\n * Reclaimable initialization lock for isolate-lifetime singletons.\n *\n * Guards \"first request initializes, everyone else waits\" sections\n * (runtime creation, database init) against a workerd failure mode: if the\n * request that owns the initialization is cancelled mid-await (client\n * disconnect, context teardown), its continuation — including any `finally`\n * that would release the lock — never runs. A plain boolean or shared\n * promise then stays stuck forever and every subsequent request in the\n * isolate hangs until the platform kills it (observed as 524s at the\n * 100-second wall limit, with the isolate poisoned until eviction).\n *\n * This lock instead records *when* the owner started. Waiters poll — we\n * deliberately never await a promise created by another request, which\n * workerd flags — and if the owner has held the lock past `deadlineMs`,\n * the next waiter assumes the owner is dead, reclaims the lock, and runs\n * the initialization itself. Waiters also give up after `maxWaitMs` so a\n * request degrades to an error response rather than hanging.\n */\n\nexport interface InitLock {\n\t/** Epoch ms when the current owner claimed the lock, or null when free. */\n\townerStartedAt: number | null;\n\t/**\n\t * Monotonic claim counter identifying the current owner. Release is\n\t * gated on it: a slow owner that finishes after a waiter has reclaimed\n\t * the lock must not clear the reclaimer's claim — that would let yet\n\t * another caller claim the lock and start a third concurrent init.\n\t */\n\tgeneration: number;\n}\n\nexport function createInitLock(): InitLock {\n\treturn { ownerStartedAt: null, generation: 0 };\n}\n\nexport interface InitLockOptions {\n\t/**\n\t * Reclaim the lock if the owner has held it longer than this. Must be\n\t * comfortably above the slowest legitimate init (cold migrations on a\n\t * contended D1, including the concurrent-migrator wait) — a too-short\n\t * deadline risks two concurrent inits, a too-long one delays recovery\n\t * of a poisoned isolate. Nested locks must compose: an outer lock's\n\t * deadline must exceed the deadline of any lock its init acquires.\n\t */\n\tdeadlineMs?: number;\n\t/** Waiter poll interval. */\n\tpollMs?: number;\n\t/**\n\t * Give up waiting after this long and throw instead of hanging.\n\t * Defaults to `deadlineMs` plus headroom so a waiter always survives\n\t * long enough to reclaim a dead owner before giving up.\n\t */\n\tmaxWaitMs?: number;\n\t/**\n\t * Called with the in-flight init promise (errors pre-swallowed) so the\n\t * caller can hand it to the host's lifetime extender (waitUntil via\n\t * `after()`). If the owning request is cancelled mid-init, the anchored\n\t * promise keeps the context alive: init completes, populates the cache,\n\t * and the `finally` below releases the lock — preventing the poisoning\n\t * instead of merely recovering from it via reclaim.\n\t */\n\tanchor?: (promise: Promise<void>) => void;\n}\n\nconst DEFAULT_DEADLINE_MS = 15_000;\nconst DEFAULT_POLL_MS = 50;\nconst MAX_WAIT_HEADROOM_MS = 15_000;\n\nfunction sleep(ms: number): Promise<void> {\n\treturn new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * Return the cached value if present, otherwise initialize it under the\n * lock. `init` is responsible for storing the value so that `getCached`\n * returns it on subsequent calls — waiters re-check `getCached` after the\n * owner finishes rather than sharing the owner's promise.\n *\n * `init` receives an `isCurrentClaim` predicate and must gate its cache\n * publication on it: a slow init that was reclaimed past the deadline\n * must not overwrite the value published by the reclaimer (for the\n * runtime singleton that would orphan the reclaimer's active cron\n * scheduler). A losing init should also tear down any side resources it\n * started, since its result will never be published.\n */\nexport async function initWithLock<T>(\n\tlock: InitLock,\n\tgetCached: () => T | null | undefined,\n\tinit: (isCurrentClaim: () => boolean) => Promise<T>,\n\toptions?: InitLockOptions,\n): Promise<T> {\n\tconst deadlineMs = options?.deadlineMs ?? DEFAULT_DEADLINE_MS;\n\tconst pollMs = options?.pollMs ?? DEFAULT_POLL_MS;\n\tconst maxWaitMs = options?.maxWaitMs ?? deadlineMs + MAX_WAIT_HEADROOM_MS;\n\t// Date.now() is deliberate and only works because every loop iteration\n\t// awaits: in workerd the clock only advances across I/O, so a sync spin\n\t// would never observe the deadline. Don't \"optimize\" away the sleep.\n\tconst waitStart = Date.now();\n\n\tfor (;;) {\n\t\tconst cached = getCached();\n\t\tif (cached !== null && cached !== undefined) {\n\t\t\treturn cached;\n\t\t}\n\n\t\tconst ownerStartedAt = lock.ownerStartedAt;\n\t\tif (ownerStartedAt === null || Date.now() - ownerStartedAt > deadlineMs) {\n\t\t\t// Free, or the owner has been gone past the deadline — claim it.\n\t\t\t// Synchronous between awaits, so two waiters can't both claim.\n\t\t\tlock.generation += 1;\n\t\t\tconst claim = lock.generation;\n\t\t\tlock.ownerStartedAt = Date.now();\n\t\t\ttry {\n\t\t\t\t// Promise.resolve().then(...) so a synchronous throw from\n\t\t\t\t// init still becomes a rejection after the anchor attaches.\n\t\t\t\tconst isCurrentClaim = () => lock.generation === claim;\n\t\t\t\tconst initPromise = Promise.resolve().then(() => init(isCurrentClaim));\n\t\t\t\toptions?.anchor?.(\n\t\t\t\t\tinitPromise.then(\n\t\t\t\t\t\t() => undefined,\n\t\t\t\t\t\t() => undefined,\n\t\t\t\t\t),\n\t\t\t\t);\n\t\t\t\treturn await initPromise;\n\t\t\t} finally {\n\t\t\t\t// If this request dies mid-init unanchored this never runs;\n\t\t\t\t// the next waiter reclaims after deadlineMs instead. Release\n\t\t\t\t// only while still the current owner: a reclaimer may have\n\t\t\t\t// taken the lock while this (slow) init was running, and\n\t\t\t\t// clearing its claim would admit a third concurrent init.\n\t\t\t\tif (lock.generation === claim) {\n\t\t\t\t\tlock.ownerStartedAt = null;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (Date.now() - waitStart > maxWaitMs) {\n\t\t\tthrow new Error(`initWithLock: timed out after ${maxWaitMs}ms waiting for initialization`);\n\t\t}\n\t\tawait sleep(pollMs);\n\t}\n}\n"],"mappings":";AAgCA,SAAgB,iBAA2B;AAC1C,QAAO;EAAE,gBAAgB;EAAM,YAAY;EAAG;;AAgC/C,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;AAE7B,SAAS,MAAM,IAA2B;AACzC,QAAO,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;;;;;;;;;;;;;;;AAgBzD,eAAsB,aACrB,MACA,WACA,MACA,SACa;CACb,MAAM,aAAa,SAAS,cAAc;CAC1C,MAAM,SAAS,SAAS,UAAU;CAClC,MAAM,YAAY,SAAS,aAAa,aAAa;CAIrD,MAAM,YAAY,KAAK,KAAK;AAE5B,UAAS;EACR,MAAM,SAAS,WAAW;AAC1B,MAAI,WAAW,QAAQ,WAAW,OACjC,QAAO;EAGR,MAAM,iBAAiB,KAAK;AAC5B,MAAI,mBAAmB,QAAQ,KAAK,KAAK,GAAG,iBAAiB,YAAY;AAGxE,QAAK,cAAc;GACnB,MAAM,QAAQ,KAAK;AACnB,QAAK,iBAAiB,KAAK,KAAK;AAChC,OAAI;IAGH,MAAM,uBAAuB,KAAK,eAAe;IACjD,MAAM,cAAc,QAAQ,SAAS,CAAC,WAAW,KAAK,eAAe,CAAC;AACtE,aAAS,SACR,YAAY,WACL,cACA,OACN,CACD;AACD,WAAO,MAAM;aACJ;AAMT,QAAI,KAAK,eAAe,MACvB,MAAK,iBAAiB;;;AAKzB,MAAI,KAAK,KAAK,GAAG,YAAY,UAC5B,OAAM,IAAI,MAAM,iCAAiC,UAAU,+BAA+B;AAE3F,QAAM,MAAM,OAAO"}

package/dist/install-finalization-DeGRbaVa.mjs

@@ -1,58 +0,0 @@
-//#region src/plugins/install-finalization.ts
-async function finalizePluginInstall(options) {
-	try {
-		await options.syncRuntime();
-		await options.runLifecycle();
-	} catch (installError) {
-		const failures = [installError];
-		try {
-			const rollback = await options.rollback();
-			if (!rollback.success) failures.push(new Error(rollback.error.message));
-		} catch (rollbackError) {
-			failures.push(rollbackError);
-		}
-		try {
-			await options.syncRuntime();
-		} catch (syncError) {
-			failures.push(syncError);
-		}
-		if (failures.length > 1) {
-			const rollbackError = new Error(`Plugin ${options.pluginId} installation failed and rollback did not complete`, { cause: installError });
-			Object.defineProperty(rollbackError, "errors", { value: failures });
-			throw rollbackError;
-		}
-		throw installError;
-	}
-}
-async function finalizePluginUpdate(options) {
-	try {
-		await options.syncRuntime();
-		await options.runLifecycle();
-	} catch (updateError) {
-		const failures = [updateError];
-		let rollbackSucceeded = false;
-		try {
-			const rollback = await options.rollback();
-			rollbackSucceeded = rollback.success;
-			if (!rollback.success) failures.push(new Error(rollback.error.message));
-		} catch (rollbackError) {
-			failures.push(rollbackError);
-		}
-		try {
-			await options.syncRuntime();
-			if (rollbackSucceeded) await options.runRollbackLifecycle();
-		} catch (syncError) {
-			failures.push(syncError);
-		}
-		if (failures.length > 1) {
-			const rollbackError = new Error(`Plugin ${options.pluginId} update failed and rollback did not complete`, { cause: updateError });
-			Object.defineProperty(rollbackError, "errors", { value: failures });
-			throw rollbackError;
-		}
-		throw updateError;
-	}
-}
-
-//#endregion
-export { finalizePluginUpdate as n, finalizePluginInstall as t };
-//# sourceMappingURL=install-finalization-DeGRbaVa.mjs.map

package/dist/install-finalization-DeGRbaVa.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"install-finalization-DeGRbaVa.mjs","names":[],"sources":["../src/plugins/install-finalization.ts"],"sourcesContent":["import type { ApiResult } from \"../api/types.js\";\n\nexport interface PluginInstallFinalizationOptions {\n\tpluginId: string;\n\tsyncRuntime(): Promise<void>;\n\trunLifecycle(): Promise<void>;\n\trollback(): Promise<ApiResult<unknown>>;\n}\n\nexport interface PluginUpdateFinalizationOptions extends PluginInstallFinalizationOptions {\n\trunRollbackLifecycle(): Promise<void>;\n}\n\nexport async function finalizePluginInstall(\n\toptions: PluginInstallFinalizationOptions,\n): Promise<void> {\n\ttry {\n\t\tawait options.syncRuntime();\n\t\tawait options.runLifecycle();\n\t} catch (installError) {\n\t\tconst failures: unknown[] = [installError];\n\t\ttry {\n\t\t\tconst rollback = await options.rollback();\n\t\t\tif (!rollback.success) failures.push(new Error(rollback.error.message));\n\t\t} catch (rollbackError) {\n\t\t\tfailures.push(rollbackError);\n\t\t}\n\t\ttry {\n\t\t\tawait options.syncRuntime();\n\t\t} catch (syncError) {\n\t\t\tfailures.push(syncError);\n\t\t}\n\t\tif (failures.length > 1) {\n\t\t\tconst rollbackError = new Error(\n\t\t\t\t`Plugin ${options.pluginId} installation failed and rollback did not complete`,\n\t\t\t\t{ cause: installError },\n\t\t\t);\n\t\t\tObject.defineProperty(rollbackError, \"errors\", { value: failures });\n\t\t\tthrow rollbackError;\n\t\t}\n\t\tthrow installError;\n\t}\n}\n\nexport async function finalizePluginUpdate(\n\toptions: PluginUpdateFinalizationOptions,\n): Promise<void> {\n\ttry {\n\t\tawait options.syncRuntime();\n\t\tawait options.runLifecycle();\n\t} catch (updateError) {\n\t\tconst failures: unknown[] = [updateError];\n\t\tlet rollbackSucceeded = false;\n\t\ttry {\n\t\t\tconst rollback = await options.rollback();\n\t\t\trollbackSucceeded = rollback.success;\n\t\t\tif (!rollback.success) failures.push(new Error(rollback.error.message));\n\t\t} catch (rollbackError) {\n\t\t\tfailures.push(rollbackError);\n\t\t}\n\t\ttry {\n\t\t\tawait options.syncRuntime();\n\t\t\tif (rollbackSucceeded) await options.runRollbackLifecycle();\n\t\t} catch (syncError) {\n\t\t\tfailures.push(syncError);\n\t\t}\n\t\tif (failures.length > 1) {\n\t\t\tconst rollbackError = new Error(\n\t\t\t\t`Plugin ${options.pluginId} update failed and rollback did not complete`,\n\t\t\t\t{ cause: updateError },\n\t\t\t);\n\t\t\tObject.defineProperty(rollbackError, \"errors\", { value: failures });\n\t\t\tthrow rollbackError;\n\t\t}\n\t\tthrow updateError;\n\t}\n}\n"],"mappings":";AAaA,eAAsB,sBACrB,SACgB;AAChB,KAAI;AACH,QAAM,QAAQ,aAAa;AAC3B,QAAM,QAAQ,cAAc;UACpB,cAAc;EACtB,MAAM,WAAsB,CAAC,aAAa;AAC1C,MAAI;GACH,MAAM,WAAW,MAAM,QAAQ,UAAU;AACzC,OAAI,CAAC,SAAS,QAAS,UAAS,KAAK,IAAI,MAAM,SAAS,MAAM,QAAQ,CAAC;WAC/D,eAAe;AACvB,YAAS,KAAK,cAAc;;AAE7B,MAAI;AACH,SAAM,QAAQ,aAAa;WACnB,WAAW;AACnB,YAAS,KAAK,UAAU;;AAEzB,MAAI,SAAS,SAAS,GAAG;GACxB,MAAM,gBAAgB,IAAI,MACzB,UAAU,QAAQ,SAAS,qDAC3B,EAAE,OAAO,cAAc,CACvB;AACD,UAAO,eAAe,eAAe,UAAU,EAAE,OAAO,UAAU,CAAC;AACnE,SAAM;;AAEP,QAAM;;;AAIR,eAAsB,qBACrB,SACgB;AAChB,KAAI;AACH,QAAM,QAAQ,aAAa;AAC3B,QAAM,QAAQ,cAAc;UACpB,aAAa;EACrB,MAAM,WAAsB,CAAC,YAAY;EACzC,IAAI,oBAAoB;AACxB,MAAI;GACH,MAAM,WAAW,MAAM,QAAQ,UAAU;AACzC,uBAAoB,SAAS;AAC7B,OAAI,CAAC,SAAS,QAAS,UAAS,KAAK,IAAI,MAAM,SAAS,MAAM,QAAQ,CAAC;WAC/D,eAAe;AACvB,YAAS,KAAK,cAAc;;AAE7B,MAAI;AACH,SAAM,QAAQ,aAAa;AAC3B,OAAI,kBAAmB,OAAM,QAAQ,sBAAsB;WACnD,WAAW;AACnB,YAAS,KAAK,UAAU;;AAEzB,MAAI,SAAS,SAAS,GAAG;GACxB,MAAM,gBAAgB,IAAI,MACzB,UAAU,QAAQ,SAAS,+CAC3B,EAAE,OAAO,aAAa,CACtB;AACD,UAAO,eAAe,eAAe,UAAU,EAAE,OAAO,UAAU,CAAC;AACnE,SAAM;;AAEP,QAAM"}

package/dist/keys-DWwMxdZh.mjs

@@ -1,61 +0,0 @@
-import { t as TransferError } from "./errors-CjXd1LgH.mjs";
-import { r as isPackagePath } from "./paths-DkS74lBM.mjs";
-
-//#region src/transfer/staging/keys.ts
-/**
-* Storage layout for staged packages.
-*
-* ```
-* transfers/imports/<operationId>-<secret>/<package path>
-* transfers/exports/<operationId>-<secret>/<package path>
-* transfers/<kind>/<operationId>-<secret>/_plan.json
-* ```
-*
-* `secret` is the operation's 128-bit `staging_secret`, so a staged object's
-* key cannot be guessed from an operation id. The public media route must
-* refuse every key under `transfers/` ({@link isTransferStorageKey}).
-*/
-const TRANSFER_STORAGE_PREFIX = "transfers/";
-/** Staged files that are not part of the package itself. */
-const STAGING_AUX_FILES = Object.freeze({ plan: "_plan.json" });
-const OPERATION_ID_PATTERN = /^[0-9A-HJKMNP-TV-Z]{26}$/;
-const SECRET_PATTERN = /^[0-9a-f]{32}$/;
-function stagingPrefix(kind, operationId, stagingSecret) {
-	if (!OPERATION_ID_PATTERN.test(operationId) || !SECRET_PATTERN.test(stagingSecret)) throw new TransferError("TRANSFER_STORAGE_ERROR", "Invalid staging location");
-	return `${TRANSFER_STORAGE_PREFIX}${kind}s/${operationId}-${stagingSecret}/`;
-}
-/** Storage key of a package file under `prefix`. Rejects anything but a package path. */
-function stagingKey(prefix, path) {
-	if (!isPackagePath(path)) throw new TransferError("TRANSFER_PATH_INVALID", "Invalid package path", { detail: { path } });
-	return `${prefix}${path}`;
-}
-function stagingAuxKey(prefix, file) {
-	return `${prefix}${STAGING_AUX_FILES[file]}`;
-}
-/**
-* Normalize a storage key for prefix guards, or return null when the key is
-* not a plain relative key: a leading `/` or `\`, any backslash, an empty
-* segment, or a `.`/`..` segment. The result is lowercased because some
-* storage backends treat keys case-insensitively. Guards must refuse keys
-* this returns null for.
-*/
-function normalizeStorageKeyForGuard(key) {
-	if (key.length === 0 || key.includes("\\")) return null;
-	const segments = key.split("/");
-	for (const segment of segments) if (segment === "" || segment === "." || segment === "..") return null;
-	return key.toLowerCase();
-}
-/** Prefixes the public media route must never serve. */
-const PRIVATE_STORAGE_PREFIXES = Object.freeze(["backups/", TRANSFER_STORAGE_PREFIX]);
-/**
-* Whether a public route must refuse `key`: it is not a plain relative key
-* or it falls under one of `prefixes`.
-*/
-function isRefusedStorageKey(key, prefixes = PRIVATE_STORAGE_PREFIXES) {
-	const normalized = normalizeStorageKeyForGuard(key);
-	return normalized === null || prefixes.some((prefix) => normalized.startsWith(prefix));
-}
-
-//#endregion
-export { stagingPrefix as i, stagingAuxKey as n, stagingKey as r, isRefusedStorageKey as t };
-//# sourceMappingURL=keys-DWwMxdZh.mjs.map

package/dist/keys-DWwMxdZh.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys-DWwMxdZh.mjs","names":[],"sources":["../src/transfer/staging/keys.ts"],"sourcesContent":["/**\n * Storage layout for staged packages.\n *\n * ```\n * transfers/imports/<operationId>-<secret>/<package path>\n * transfers/exports/<operationId>-<secret>/<package path>\n * transfers/<kind>/<operationId>-<secret>/_plan.json\n * ```\n *\n * `secret` is the operation's 128-bit `staging_secret`, so a staged object's\n * key cannot be guessed from an operation id. The public media route must\n * refuse every key under `transfers/` ({@link isTransferStorageKey}).\n */\n\nimport { TransferError } from \"../errors.js\";\nimport { isPackagePath } from \"../format/paths.js\";\nimport type { TransferOperationKind } from \"../ops/states.js\";\n\nexport const TRANSFER_STORAGE_PREFIX = \"transfers/\";\n\n/** Staged files that are not part of the package itself. */\nexport const STAGING_AUX_FILES = Object.freeze({\n\tplan: \"_plan.json\",\n});\n\nexport type StagingAuxFile = keyof typeof STAGING_AUX_FILES;\n\nconst OPERATION_ID_PATTERN = /^[0-9A-HJKMNP-TV-Z]{26}$/;\nconst SECRET_PATTERN = /^[0-9a-f]{32}$/;\n\nexport function stagingPrefix(\n\tkind: TransferOperationKind,\n\toperationId: string,\n\tstagingSecret: string,\n): string {\n\tif (!OPERATION_ID_PATTERN.test(operationId) || !SECRET_PATTERN.test(stagingSecret)) {\n\t\tthrow new TransferError(\"TRANSFER_STORAGE_ERROR\", \"Invalid staging location\");\n\t}\n\treturn `${TRANSFER_STORAGE_PREFIX}${kind}s/${operationId}-${stagingSecret}/`;\n}\n\n/** Storage key of a package file under `prefix`. Rejects anything but a package path. */\nexport function stagingKey(prefix: string, path: string): string {\n\tif (!isPackagePath(path)) {\n\t\tthrow new TransferError(\"TRANSFER_PATH_INVALID\", \"Invalid package path\", { detail: { path } });\n\t}\n\treturn `${prefix}${path}`;\n}\n\nexport function stagingAuxKey(prefix: string, file: StagingAuxFile): string {\n\treturn `${prefix}${STAGING_AUX_FILES[file]}`;\n}\n\n/**\n * Normalize a storage key for prefix guards, or return null when the key is\n * not a plain relative key: a leading `/` or `\\`, any backslash, an empty\n * segment, or a `.`/`..` segment. The result is lowercased because some\n * storage backends treat keys case-insensitively. Guards must refuse keys\n * this returns null for.\n */\nexport function normalizeStorageKeyForGuard(key: string): string | null {\n\tif (key.length === 0 || key.includes(\"\\\\\")) return null;\n\tconst segments = key.split(\"/\");\n\tfor (const segment of segments) {\n\t\tif (segment === \"\" || segment === \".\" || segment === \"..\") return null;\n\t}\n\treturn key.toLowerCase();\n}\n\n/** Prefixes the public media route must never serve. */\nexport const PRIVATE_STORAGE_PREFIXES: readonly string[] = Object.freeze([\n\t\"backups/\",\n\tTRANSFER_STORAGE_PREFIX,\n]);\n\n/**\n * Whether a public route must refuse `key`: it is not a plain relative key\n * or it falls under one of `prefixes`.\n */\nexport function isRefusedStorageKey(\n\tkey: string,\n\tprefixes: readonly string[] = PRIVATE_STORAGE_PREFIXES,\n): boolean {\n\tconst normalized = normalizeStorageKeyForGuard(key);\n\treturn normalized === null || prefixes.some((prefix) => normalized.startsWith(prefix));\n}\n\n/**\n * Whether a storage key is (or may resolve to) transfer staging. Also true\n * for keys {@link normalizeStorageKeyForGuard} rejects.\n */\nexport function isTransferStorageKey(key: string): boolean {\n\treturn isRefusedStorageKey(key, [TRANSFER_STORAGE_PREFIX]);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,MAAa,0BAA0B;;AAGvC,MAAa,oBAAoB,OAAO,OAAO,EAC9C,MAAM,cACN,CAAC;AAIF,MAAM,uBAAuB;AAC7B,MAAM,iBAAiB;AAEvB,SAAgB,cACf,MACA,aACA,eACS;AACT,KAAI,CAAC,qBAAqB,KAAK,YAAY,IAAI,CAAC,eAAe,KAAK,cAAc,CACjF,OAAM,IAAI,cAAc,0BAA0B,2BAA2B;AAE9E,QAAO,GAAG,0BAA0B,KAAK,IAAI,YAAY,GAAG,cAAc;;;AAI3E,SAAgB,WAAW,QAAgB,MAAsB;AAChE,KAAI,CAAC,cAAc,KAAK,CACvB,OAAM,IAAI,cAAc,yBAAyB,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAE/F,QAAO,GAAG,SAAS;;AAGpB,SAAgB,cAAc,QAAgB,MAA8B;AAC3E,QAAO,GAAG,SAAS,kBAAkB;;;;;;;;;AAUtC,SAAgB,4BAA4B,KAA4B;AACvE,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,KAAK,CAAE,QAAO;CACnD,MAAM,WAAW,IAAI,MAAM,IAAI;AAC/B,MAAK,MAAM,WAAW,SACrB,KAAI,YAAY,MAAM,YAAY,OAAO,YAAY,KAAM,QAAO;AAEnE,QAAO,IAAI,aAAa;;;AAIzB,MAAa,2BAA8C,OAAO,OAAO,CACxE,YACA,wBACA,CAAC;;;;;AAMF,SAAgB,oBACf,KACA,WAA8B,0BACpB;CACV,MAAM,aAAa,4BAA4B,IAAI;AACnD,QAAO,eAAe,QAAQ,SAAS,MAAM,WAAW,WAAW,WAAW,OAAO,CAAC"}