emdash 1.3.0 → 1.4.0

package/dist/{snapshot-DYsG4uOq.mjs.map → snapshot-BjaXDZQ5.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"snapshot-DYsG4uOq.mjs","names":[],"sources":["../src/api/handlers/snapshot.ts"],"sourcesContent":["/**\n * Snapshot handler — generates a portable database snapshot.\n *\n * Returns all content tables, schema definitions, and supporting data\n * needed to render content in an isolated preview database.\n *\n * Used by:\n * - DO preview database (EmDashPreviewDB.populateFromSnapshot)\n * - Future: CLI export, backup, site migration\n */\n\nimport type { Kysely } from \"kysely\";\nimport { sql } from \"kysely\";\n\nimport { listTableColumns, listTablesLike } from \"../../database/dialect-helpers.js\";\nimport type { Database } from \"../../database/types.js\";\n\n// ─�� Preview signature verification ──────────────────────────────\n\n/**\n * Verify HMAC-SHA256 preview signature using crypto.subtle.\n * Returns true if the signature is valid and not expired.\n */\nexport async function verifyPreviewSignature(\n\tsource: string,\n\texp: number,\n\tsig: string,\n\tsecret: string,\n): Promise<boolean> {\n\tif (exp < Date.now() / 1000) return false;\n\n\tconst encoder = new TextEncoder();\n\tconst key = await crypto.subtle.importKey(\n\t\t\"raw\",\n\t\tencoder.encode(secret),\n\t\t{ name: \"HMAC\", hash: \"SHA-256\" },\n\t\tfalse,\n\t\t[\"verify\"],\n\t);\n\n\tconst sigBytes = new Uint8Array(sig.length / 2);\n\tfor (let i = 0; i < sig.length; i += 2) {\n\t\tsigBytes[i / 2] = parseInt(sig.substring(i, i + 2), 16);\n\t}\n\n\treturn crypto.subtle.verify(\"HMAC\", key, sigBytes, encoder.encode(`${source}:${exp}`));\n}\n\n/**\n * Parse an X-Preview-Signature header value into its components.\n *\n * Format: \"source:exp:sig\" where source is a URL (contains colons),\n * exp is a unix timestamp, and sig is 64 hex chars.\n *\n * Parses from the right since source URLs contain colons.\n *\n * @returns Parsed components, or null if the format is invalid\n */\nexport function parsePreviewSignatureHeader(\n\theader: string,\n): { source: string; exp: number; sig: string } | null {\n\tconst lastColon = header.lastIndexOf(\":\");\n\tif (lastColon <= 0) return null;\n\n\tconst sig = header.substring(lastColon + 1);\n\tif (sig.length !== 64) return null;\n\n\tconst rest = header.substring(0, lastColon);\n\tconst secondLastColon = rest.lastIndexOf(\":\");\n\tif (secondLastColon <= 0) return null;\n\n\tconst source = rest.substring(0, secondLastColon);\n\tconst exp = parseInt(rest.substring(secondLastColon + 1), 10);\n\n\tif (isNaN(exp) || source.length === 0) return null;\n\n\treturn { source, exp, sig };\n}\n\n// ── Media URL rewriting ─────────────────────────────────────────\n\nconst MEDIA_FILE_PREFIX = \"/_emdash/api/media/file/\";\nconst MEDIA_FILE_SUFFIX = /[?#]/;\nconst EXTERNAL_OR_ROOT_URL = /^(?:[a-z][a-z0-9+.-]*:|\\/)/i;\n\n/**\n * Parse a JSON string value and inject `src` for local media objects.\n * Returns the original string if it's not a local media value.\n */\nfunction injectMediaSrc(jsonStr: string, origin: string): string {\n\ttry {\n\t\tconst obj = JSON.parse(jsonStr);\n\t\tif (typeof obj !== \"object\" || obj === null || Array.isArray(obj)) return jsonStr;\n\t\tif (injectMediaSrcInto(obj, origin)) {\n\t\t\treturn JSON.stringify(obj);\n\t\t}\n\t\treturn jsonStr;\n\t} catch {\n\t\treturn jsonStr;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/**\n * Recursively walk an object and inject `src` into local media values.\n * Returns true if any modifications were made.\n */\nfunction injectMediaSrcInto(obj: Record<string, unknown>, origin: string): boolean {\n\tlet modified = false;\n\n\t// Check if this object itself is a local media value\n\tif ((obj.provider === \"local\" || (!obj.provider && obj.id && obj.meta)) && !obj.src) {\n\t\tconst meta = isRecord(obj.meta) ? obj.meta : undefined;\n\t\tconst storageKey = meta?.storageKey ?? obj.id;\n\t\tif (typeof storageKey === \"string\" && storageKey) {\n\t\t\tobj.src = `${origin}${MEDIA_FILE_PREFIX}${storageKey}`;\n\t\t\tmodified = true;\n\t\t}\n\t}\n\n\t// Recurse into nested objects/arrays (e.g. Portable Text with image blocks)\n\tfor (const value of Object.values(obj)) {\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const item of value) {\n\t\t\t\tif (isRecord(item)) {\n\t\t\t\t\tif (injectMediaSrcInto(item, origin)) {\n\t\t\t\t\t\tmodified = true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (isRecord(value)) {\n\t\t\tif (injectMediaSrcInto(value, origin)) {\n\t\t\t\tmodified = true;\n\t\t\t}\n\t\t}\n\t}\n\n\treturn modified;\n}\n\n// ── Snapshot generation ─────────────────────────────────────────\n\n/**\n * Safe identifier pattern for snapshot table names.\n * More permissive than validateIdentifier() — allows leading underscores\n * (needed for system tables like _emdash_collections).\n */\nconst SAFE_TABLE_NAME = /^[a-z_][a-z0-9_]*$/;\n\n/** Snapshot shape consumed by the DO preview database */\nexport interface Snapshot {\n\ttables: Record<string, Record<string, unknown>[]>;\n\tschema: Record<\n\t\tstring,\n\t\t{\n\t\t\tcolumns: string[];\n\t\t\ttypes?: Record<string, string>;\n\t\t}\n\t>;\n\tgeneratedAt: string;\n}\n\n/**\n * System tables included in snapshots.\n * Content tables (ec_*) are discovered dynamically.\n */\nconst SYSTEM_TABLES = [\n\t\"_emdash_block_types\",\n\t\"_emdash_block_type_versions\",\n\t\"_emdash_collections\",\n\t\"_emdash_fields\",\n\t\"_emdash_taxonomy_defs\",\n\t\"_emdash_taxonomy_def_groups\",\n\t\"_emdash_menus\",\n\t\"_emdash_menu_items\",\n\t\"_emdash_sections\",\n\t\"_emdash_widget_areas\",\n\t\"_emdash_widgets\",\n\t\"_emdash_seo\",\n\t\"_emdash_migrations\",\n\t\"content_taxonomies\",\n\t\"taxonomies\",\n\t\"options\",\n\t\"media\",\n\t\"revisions\",\n] as const;\n\ntype SystemTable = (typeof SYSTEM_TABLES)[number];\ntype PublishedTablePolicy = \"full\" | \"content-linked\" | \"omit\";\n\n/**\n * Published snapshots are available to preview-signature callers, so every\n * system table must be classified explicitly. Adding a snapshot table without\n * choosing a policy is a type error rather than an accidental data export.\n */\nconst PUBLISHED_TABLE_POLICIES: Record<SystemTable, PublishedTablePolicy> = {\n\t_emdash_block_types: \"full\",\n\t_emdash_block_type_versions: \"full\",\n\t_emdash_collections: \"full\",\n\t_emdash_fields: \"full\",\n\t_emdash_taxonomy_defs: \"full\",\n\t_emdash_taxonomy_def_groups: \"full\",\n\t_emdash_menus: \"full\",\n\t_emdash_menu_items: \"content-linked\",\n\t_emdash_sections: \"full\",\n\t_emdash_widget_areas: \"full\",\n\t_emdash_widgets: \"full\",\n\t_emdash_seo: \"content-linked\",\n\t_emdash_migrations: \"full\",\n\tcontent_taxonomies: \"content-linked\",\n\ttaxonomies: \"content-linked\",\n\toptions: \"content-linked\",\n\tmedia: \"content-linked\",\n\trevisions: \"omit\",\n};\n\nconst SYSTEM_TABLE_SET: ReadonlySet<string> = new Set(SYSTEM_TABLES);\n\nfunction isSystemTable(tableName: string): tableName is SystemTable {\n\treturn SYSTEM_TABLE_SET.has(tableName);\n}\n\ninterface PublishedContentReferences {\n\tids: Set<string>;\n\ttranslationGroups: Set<string>;\n}\n\ninterface PublishedProjection {\n\tcontent: Map<string, PublishedContentReferences>;\n\ttaxonomyGroups: Set<string>;\n\tmediaIds: Set<string>;\n\tmediaStorageKeys: Set<string>;\n}\n\n/**\n * Table name prefixes excluded from snapshots (auth/security data).\n */\nconst EXCLUDED_PREFIXES = [\n\t\"_emdash_api_tokens\",\n\t\"_emdash_oauth_tokens\",\n\t\"_emdash_authorization_codes\",\n\t\"_emdash_device_codes\",\n\t\"_emdash_migrations_lock\",\n\t\"_emdash_transfer_\",\n\t\"_plugin_\",\n\t\"users\",\n\t\"sessions\",\n\t\"credentials\",\n\t\"challenges\",\n];\n\n/**\n * Options key prefixes safe for inclusion in snapshots.\n *\n * The options table contains plugin secrets (plugin:*), passkey challenges\n * (emdash:passkey_pending:*), and setup state that must not leak to\n * preview databases. Only site-level rendering settings are needed.\n */\nconst SAFE_OPTIONS_PREFIXES = [\"site:\"];\n\nfunction isExcluded(tableName: string): boolean {\n\treturn EXCLUDED_PREFIXES.some((prefix) => tableName.startsWith(prefix));\n}\n\ntype SnapshotColumnType = \"TEXT\" | \"INTEGER\" | \"REAL\" | \"BLOB\" | \"JSON\";\n\nfunction normalizeColumnType(type: string): SnapshotColumnType {\n\tswitch (type.toLowerCase()) {\n\t\tcase \"smallint\":\n\t\tcase \"integer\":\n\t\tcase \"bigint\":\n\t\tcase \"boolean\":\n\t\t\treturn \"INTEGER\";\n\t\tcase \"real\":\n\t\tcase \"double precision\":\n\t\tcase \"numeric\":\n\t\tcase \"decimal\":\n\t\t\treturn \"REAL\";\n\t\tcase \"blob\":\n\t\tcase \"bytea\":\n\t\t\treturn \"BLOB\";\n\t\tcase \"json\":\n\t\tcase \"jsonb\":\n\t\t\treturn \"JSON\";\n\t\tdefault:\n\t\t\treturn \"TEXT\";\n\t}\n}\n\nfunction normalizeRows(\n\trows: Record<string, unknown>[],\n\ttypes: Record<string, SnapshotColumnType>,\n): Record<string, unknown>[] {\n\tfor (const row of rows) {\n\t\tfor (const [column, type] of Object.entries(types)) {\n\t\t\tconst value = row[column];\n\t\t\tif (type === \"JSON\" && value !== null && value !== undefined && typeof value !== \"string\") {\n\t\t\t\trow[column] = JSON.stringify(value);\n\t\t\t}\n\t\t}\n\t}\n\treturn rows;\n}\n\nfunction createPublishedProjection(): PublishedProjection {\n\treturn {\n\t\tcontent: new Map(),\n\t\ttaxonomyGroups: new Set(),\n\t\tmediaIds: new Set(),\n\t\tmediaStorageKeys: new Set(),\n\t};\n}\n\nfunction readString(value: unknown): string | null {\n\treturn typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nfunction recordPublishedContent(\n\tprojection: PublishedProjection,\n\ttableName: string,\n\trows: Record<string, unknown>[],\n): void {\n\tconst references: PublishedContentReferences = {\n\t\tids: new Set(),\n\t\ttranslationGroups: new Set(),\n\t};\n\tfor (const row of rows) {\n\t\tconst id = readString(row.id);\n\t\tconst translationGroup = readString(row.translation_group);\n\t\tif (id) references.ids.add(id);\n\t\tif (translationGroup) references.translationGroups.add(translationGroup);\n\t}\n\tprojection.content.set(tableName.slice(\"ec_\".length), references);\n}\n\nfunction isPublishedContentReference(\n\tprojection: PublishedProjection,\n\tcollection: unknown,\n\treference: unknown,\n): boolean {\n\tconst collectionName = readString(collection);\n\tconst id = readString(reference);\n\tif (!collectionName || !id) return false;\n\tconst references = projection.content.get(collectionName);\n\treturn references?.ids.has(id) === true || references?.translationGroups.has(id) === true;\n}\n\nfunction collectMediaReferences(value: unknown, projection: PublishedProjection): void {\n\tif (typeof value === \"string\") {\n\t\tif (value.startsWith(MEDIA_FILE_PREFIX)) {\n\t\t\tconst storageKey = value.slice(MEDIA_FILE_PREFIX.length).split(MEDIA_FILE_SUFFIX, 1)[0];\n\t\t\tif (storageKey) projection.mediaStorageKeys.add(storageKey);\n\t\t\treturn;\n\t\t}\n\t\tconst trimmed = value.trimStart();\n\t\tif (trimmed.startsWith(\"{\") || trimmed.startsWith(\"[\")) {\n\t\t\ttry {\n\t\t\t\tcollectMediaReferences(JSON.parse(value), projection);\n\t\t\t} catch {\n\t\t\t\t// Not structured data.\n\t\t\t}\n\t\t}\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tfor (const item of value) collectMediaReferences(item, projection);\n\t\treturn;\n\t}\n\tif (!isRecord(value)) return;\n\n\tconst mediaId = readString(value.mediaId);\n\tif (mediaId) projection.mediaIds.add(mediaId);\n\n\tconst provider = readString(value.provider);\n\tconst meta = isRecord(value.meta) ? value.meta : null;\n\tconst localMediaId = readString(value.id);\n\tif ((provider === \"local\" || (!provider && meta)) && localMediaId) {\n\t\tprojection.mediaIds.add(localMediaId);\n\t}\n\tconst storageKey = readString(value.storageKey) ?? readString(meta?.storageKey);\n\tif (storageKey) projection.mediaStorageKeys.add(storageKey);\n\n\tconst asset = isRecord(value.asset) ? value.asset : null;\n\tconst assetRef = readString(asset?._ref);\n\tif (assetRef) {\n\t\tprojection.mediaIds.add(assetRef);\n\t\tprojection.mediaStorageKeys.add(assetRef);\n\t}\n\n\tfor (const child of Object.values(value)) collectMediaReferences(child, projection);\n}\n\nfunction projectTaxonomyRows(\n\trows: Record<string, unknown>[],\n\tprojection: PublishedProjection,\n): Record<string, unknown>[] {\n\tconst includedGroups = new Set(projection.taxonomyGroups);\n\tconst includedIds = new Set(projection.taxonomyGroups);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const row of rows) {\n\t\t\tconst id = readString(row.id);\n\t\t\tconst group = readString(row.translation_group);\n\t\t\tif (!id) continue;\n\t\t\tif (includedIds.has(id) || (group && includedGroups.has(group))) {\n\t\t\t\tif (!includedIds.has(id)) {\n\t\t\t\t\tincludedIds.add(id);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t\tif (group && !includedGroups.has(group)) {\n\t\t\t\t\tincludedGroups.add(group);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t\tconst parentId = readString(row.parent_id);\n\t\t\t\tif (parentId && !includedIds.has(parentId)) {\n\t\t\t\t\tincludedIds.add(parentId);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn rows.filter((row) => {\n\t\tconst id = readString(row.id);\n\t\tconst group = readString(row.translation_group);\n\t\treturn (id && includedIds.has(id)) || (group && includedGroups.has(group));\n\t});\n}\n\nfunction projectPublishedRows(\n\ttableName: SystemTable,\n\trows: Record<string, unknown>[],\n\tprojection: PublishedProjection,\n): Record<string, unknown>[] {\n\tswitch (tableName) {\n\t\tcase \"_emdash_seo\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst published = isPublishedContentReference(projection, row.collection, row.content_id);\n\t\t\t\tif (!published) return false;\n\t\t\t\tconst image = readString(row.seo_image);\n\t\t\t\tif (image) {\n\t\t\t\t\tcollectMediaReferences(image, projection);\n\t\t\t\t\tif (!EXTERNAL_OR_ROOT_URL.test(image)) {\n\t\t\t\t\t\tprojection.mediaIds.add(image);\n\t\t\t\t\t\tprojection.mediaStorageKeys.add(image);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn true;\n\t\t\t});\n\t\tcase \"content_taxonomies\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst published = isPublishedContentReference(projection, row.collection, row.entry_id);\n\t\t\t\tconst taxonomyGroup = readString(row.taxonomy_id);\n\t\t\t\tif (published && taxonomyGroup) projection.taxonomyGroups.add(taxonomyGroup);\n\t\t\t\treturn published;\n\t\t\t});\n\t\tcase \"taxonomies\":\n\t\t\treturn projectTaxonomyRows(rows, projection);\n\t\tcase \"_emdash_menu_items\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst type = readString(row.type);\n\t\t\t\tconst referenceId = readString(row.reference_id);\n\t\t\t\tif (!referenceId || type === \"custom\") return true;\n\t\t\t\tif (type === \"taxonomy\") {\n\t\t\t\t\tprojection.taxonomyGroups.add(referenceId);\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (type === \"collection\" && !row.reference_id) return true;\n\t\t\t\tconst collection =\n\t\t\t\t\treadString(row.reference_collection) ??\n\t\t\t\t\t(type === \"post\" || type === \"page\" ? `${type}s` : null);\n\t\t\t\treturn isPublishedContentReference(projection, collection, referenceId);\n\t\t\t});\n\t\tcase \"media\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst id = readString(row.id);\n\t\t\t\tconst storageKey = readString(row.storage_key);\n\t\t\t\treturn (\n\t\t\t\t\t(id !== null && projection.mediaIds.has(id)) ||\n\t\t\t\t\t(storageKey !== null && projection.mediaStorageKeys.has(storageKey))\n\t\t\t\t);\n\t\t\t});\n\t\tcase \"options\":\n\t\t\treturn rows;\n\t\tdefault:\n\t\t\treturn [];\n\t}\n}\n\nexport interface GenerateSnapshotOptions {\n\t/** Include draft and scheduled content (default: false) */\n\tincludeDrafts?: boolean;\n\t/** Include trashed content (deleted_at set). Used by backups (default: false) */\n\tincludeTrashed?: boolean;\n\t/** Origin URL for absolutizing local media URLs (e.g. \"https://mysite.com\") */\n\torigin?: string;\n\t/**\n\t * Allowlist of options-table key prefixes to include (default:\n\t * `SAFE_OPTIONS_PREFIXES`). Callers widening this must never include a\n\t * prefix that matches secrets (`emdash:preview_secret`, `plugin:`,\n\t * `emdash:passkey_pending:`) — the output may be user-downloadable.\n\t */\n\toptionPrefixes?: string[];\n\t/** Exact options-table keys to include in addition to `optionPrefixes`. */\n\toptionKeys?: string[];\n}\n\n/**\n * Generate a portable database snapshot.\n *\n * Discovers ec_* content tables dynamically, exports system tables\n * needed for rendering, and includes schema info for table recreation.\n */\nexport async function generateSnapshot(\n\tdb: Kysely<Database>,\n\toptions?: GenerateSnapshotOptions,\n): Promise<Snapshot> {\n\tconst includeDrafts = options?.includeDrafts ?? false;\n\tconst includeTrashed = options?.includeTrashed ?? false;\n\tconst optionPrefixes = options?.optionPrefixes ?? SAFE_OPTIONS_PREFIXES;\n\tconst optionKeys = new Set(options?.optionKeys);\n\tconst publishedOnly = !includeDrafts && !includeTrashed;\n\tconst publishedProjection = createPublishedProjection();\n\n\tconst contentTables = await listTablesLike(db, \"ec_%\");\n\n\t// Build list of all tables to export\n\tconst allTables = [...contentTables, ...SYSTEM_TABLES];\n\n\tconst tables: Record<string, Record<string, unknown>[]> = {};\n\tconst schema: Record<string, { columns: string[]; types?: Record<string, string> }> = {};\n\n\tfor (const tableName of allTables) {\n\t\tif (isExcluded(tableName)) continue;\n\n\t\t// Content table names come from the database catalog. Validate them\n\t\t// before passing them to sql.ref().\n\t\tif (!SAFE_TABLE_NAME.test(tableName)) continue;\n\n\t\tconst columnInfo = await listTableColumns(db, tableName);\n\t\tif (columnInfo.length === 0) continue;\n\n\t\tconst columns = columnInfo.map((column) => column.name);\n\t\tconst types: Record<string, SnapshotColumnType> = {};\n\t\tfor (const column of columnInfo) {\n\t\t\ttypes[column.name] = normalizeColumnType(column.type);\n\t\t}\n\n\t\tschema[tableName] = { columns, types };\n\n\t\tlet rows: Record<string, unknown>[];\n\n\t\tif (tableName.startsWith(\"ec_\")) {\n\t\t\tif (includeTrashed) {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t} else if (includeDrafts) {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t} else {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\t\t\tAND status = 'published'\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t}\n\t\t} else if (\n\t\t\tpublishedOnly &&\n\t\t\tisSystemTable(tableName) &&\n\t\t\tPUBLISHED_TABLE_POLICIES[tableName] === \"omit\"\n\t\t) {\n\t\t\trows = [];\n\t\t} else if (tableName === \"options\") {\n\t\t\trows = (\n\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t`.execute(db)\n\t\t\t).rows.filter((row) => {\n\t\t\t\tconst name = typeof row.name === \"string\" ? row.name : \"\";\n\t\t\t\treturn optionKeys.has(name) || optionPrefixes.some((prefix) => name.startsWith(prefix));\n\t\t\t});\n\t\t} else {\n\t\t\trows = (\n\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t`.execute(db)\n\t\t\t).rows;\n\t\t}\n\n\t\tif (publishedOnly) {\n\t\t\tif (tableName.startsWith(\"ec_\")) {\n\t\t\t\trecordPublishedContent(publishedProjection, tableName, rows);\n\t\t\t} else if (\n\t\t\t\tisSystemTable(tableName) &&\n\t\t\t\tPUBLISHED_TABLE_POLICIES[tableName] === \"content-linked\"\n\t\t\t) {\n\t\t\t\trows = projectPublishedRows(tableName, rows, publishedProjection);\n\t\t\t}\n\t\t\tfor (const row of rows) collectMediaReferences(row, publishedProjection);\n\t\t}\n\n\t\tif (rows.length > 0) {\n\t\t\ttables[tableName] = normalizeRows(rows, types);\n\t\t}\n\t}\n\n\t// Absolutize local media URLs in content tables so snapshots are portable.\n\t// Local image fields are stored as JSON with provider:\"local\" and\n\t// meta.storageKey but no src — the URL is derived at render time.\n\t// For snapshots consumed by external preview services, inject src now.\n\tif (options?.origin) {\n\t\tconst origin = options.origin;\n\t\tfor (const [tableName, rows] of Object.entries(tables)) {\n\t\t\tif (!tableName.startsWith(\"ec_\")) continue;\n\t\t\tfor (const row of rows) {\n\t\t\t\tfor (const [col, value] of Object.entries(row)) {\n\t\t\t\t\tif (typeof value !== \"string\" || !value.startsWith(\"{\")) continue;\n\t\t\t\t\trow[col] = injectMediaSrc(value, origin);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\treturn {\n\t\ttables,\n\t\tschema,\n\t\tgeneratedAt: new Date().toISOString(),\n\t};\n}\n"],"mappings":";;;;;;;;AAuBA,eAAsB,uBACrB,QACA,KACA,KACA,QACmB;AACnB,KAAI,MAAM,KAAK,KAAK,GAAG,IAAM,QAAO;CAEpC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B,OACA,QAAQ,OAAO,OAAO,EACtB;EAAE,MAAM;EAAQ,MAAM;EAAW,EACjC,OACA,CAAC,SAAS,CACV;CAED,MAAM,WAAW,IAAI,WAAW,IAAI,SAAS,EAAE;AAC/C,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,EACpC,UAAS,IAAI,KAAK,SAAS,IAAI,UAAU,GAAG,IAAI,EAAE,EAAE,GAAG;AAGxD,QAAO,OAAO,OAAO,OAAO,QAAQ,KAAK,UAAU,QAAQ,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;;;;;;;;;;;;AAavF,SAAgB,4BACf,QACsD;CACtD,MAAM,YAAY,OAAO,YAAY,IAAI;AACzC,KAAI,aAAa,EAAG,QAAO;CAE3B,MAAM,MAAM,OAAO,UAAU,YAAY,EAAE;AAC3C,KAAI,IAAI,WAAW,GAAI,QAAO;CAE9B,MAAM,OAAO,OAAO,UAAU,GAAG,UAAU;CAC3C,MAAM,kBAAkB,KAAK,YAAY,IAAI;AAC7C,KAAI,mBAAmB,EAAG,QAAO;CAEjC,MAAM,SAAS,KAAK,UAAU,GAAG,gBAAgB;CACjD,MAAM,MAAM,SAAS,KAAK,UAAU,kBAAkB,EAAE,EAAE,GAAG;AAE7D,KAAI,MAAM,IAAI,IAAI,OAAO,WAAW,EAAG,QAAO;AAE9C,QAAO;EAAE;EAAQ;EAAK;EAAK;;AAK5B,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;;;;;AAM7B,SAAS,eAAe,SAAiB,QAAwB;AAChE,KAAI;EACH,MAAM,MAAM,KAAK,MAAM,QAAQ;AAC/B,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,IAAI,CAAE,QAAO;AAC1E,MAAI,mBAAmB,KAAK,OAAO,CAClC,QAAO,KAAK,UAAU,IAAI;AAE3B,SAAO;SACA;AACP,SAAO;;;AAIT,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;;;;;AAO5E,SAAS,mBAAmB,KAA8B,QAAyB;CAClF,IAAI,WAAW;AAGf,MAAK,IAAI,aAAa,WAAY,CAAC,IAAI,YAAY,IAAI,MAAM,IAAI,SAAU,CAAC,IAAI,KAAK;EAEpF,MAAM,cADO,SAAS,IAAI,KAAK,GAAG,IAAI,OAAO,SACpB,cAAc,IAAI;AAC3C,MAAI,OAAO,eAAe,YAAY,YAAY;AACjD,OAAI,MAAM,GAAG,SAAS,oBAAoB;AAC1C,cAAW;;;AAKb,MAAK,MAAM,SAAS,OAAO,OAAO,IAAI,CACrC,KAAI,MAAM,QAAQ,MAAM,EACvB;OAAK,MAAM,QAAQ,MAClB,KAAI,SAAS,KAAK,EACjB;OAAI,mBAAmB,MAAM,OAAO,CACnC,YAAW;;YAIJ,SAAS,MAAM,EACzB;MAAI,mBAAmB,OAAO,OAAO,CACpC,YAAW;;AAKd,QAAO;;;;;;;AAUR,MAAM,kBAAkB;;;;;AAmBxB,MAAM,gBAAgB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;AAUD,MAAM,2BAAsE;CAC3E,qBAAqB;CACrB,6BAA6B;CAC7B,qBAAqB;CACrB,gBAAgB;CAChB,uBAAuB;CACvB,6BAA6B;CAC7B,eAAe;CACf,oBAAoB;CACpB,kBAAkB;CAClB,sBAAsB;CACtB,iBAAiB;CACjB,aAAa;CACb,oBAAoB;CACpB,oBAAoB;CACpB,YAAY;CACZ,SAAS;CACT,OAAO;CACP,WAAW;CACX;AAED,MAAM,mBAAwC,IAAI,IAAI,cAAc;AAEpE,SAAS,cAAc,WAA6C;AACnE,QAAO,iBAAiB,IAAI,UAAU;;;;;AAkBvC,MAAM,oBAAoB;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;;;AASD,MAAM,wBAAwB,CAAC,QAAQ;AAEvC,SAAS,WAAW,WAA4B;AAC/C,QAAO,kBAAkB,MAAM,WAAW,UAAU,WAAW,OAAO,CAAC;;AAKxE,SAAS,oBAAoB,MAAkC;AAC9D,SAAQ,KAAK,aAAa,EAA1B;EACC,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,QAAO;EACR,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,QAAO;EACR,KAAK;EACL,KAAK,QACJ,QAAO;EACR,KAAK;EACL,KAAK,QACJ,QAAO;EACR,QACC,QAAO;;;AAIV,SAAS,cACR,MACA,OAC4B;AAC5B,MAAK,MAAM,OAAO,KACjB,MAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,MAAM,EAAE;EACnD,MAAM,QAAQ,IAAI;AAClB,MAAI,SAAS,UAAU,UAAU,QAAQ,UAAU,UAAa,OAAO,UAAU,SAChF,KAAI,UAAU,KAAK,UAAU,MAAM;;AAItC,QAAO;;AAGR,SAAS,4BAAiD;AACzD,QAAO;EACN,yBAAS,IAAI,KAAK;EAClB,gCAAgB,IAAI,KAAK;EACzB,0BAAU,IAAI,KAAK;EACnB,kCAAkB,IAAI,KAAK;EAC3B;;AAGF,SAAS,WAAW,OAA+B;AAClD,QAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;;AAGhE,SAAS,uBACR,YACA,WACA,MACO;CACP,MAAM,aAAyC;EAC9C,qBAAK,IAAI,KAAK;EACd,mCAAmB,IAAI,KAAK;EAC5B;AACD,MAAK,MAAM,OAAO,MAAM;EACvB,MAAM,KAAK,WAAW,IAAI,GAAG;EAC7B,MAAM,mBAAmB,WAAW,IAAI,kBAAkB;AAC1D,MAAI,GAAI,YAAW,IAAI,IAAI,GAAG;AAC9B,MAAI,iBAAkB,YAAW,kBAAkB,IAAI,iBAAiB;;AAEzE,YAAW,QAAQ,IAAI,UAAU,MAAM,EAAa,EAAE,WAAW;;AAGlE,SAAS,4BACR,YACA,YACA,WACU;CACV,MAAM,iBAAiB,WAAW,WAAW;CAC7C,MAAM,KAAK,WAAW,UAAU;AAChC,KAAI,CAAC,kBAAkB,CAAC,GAAI,QAAO;CACnC,MAAM,aAAa,WAAW,QAAQ,IAAI,eAAe;AACzD,QAAO,YAAY,IAAI,IAAI,GAAG,KAAK,QAAQ,YAAY,kBAAkB,IAAI,GAAG,KAAK;;AAGtF,SAAS,uBAAuB,OAAgB,YAAuC;AACtF,KAAI,OAAO,UAAU,UAAU;AAC9B,MAAI,MAAM,WAAW,kBAAkB,EAAE;GACxC,MAAM,aAAa,MAAM,MAAM,GAAyB,CAAC,MAAM,mBAAmB,EAAE,CAAC;AACrF,OAAI,WAAY,YAAW,iBAAiB,IAAI,WAAW;AAC3D;;EAED,MAAM,UAAU,MAAM,WAAW;AACjC,MAAI,QAAQ,WAAW,IAAI,IAAI,QAAQ,WAAW,IAAI,CACrD,KAAI;AACH,0BAAuB,KAAK,MAAM,MAAM,EAAE,WAAW;UAC9C;AAIT;;AAED,KAAI,MAAM,QAAQ,MAAM,EAAE;AACzB,OAAK,MAAM,QAAQ,MAAO,wBAAuB,MAAM,WAAW;AAClE;;AAED,KAAI,CAAC,SAAS,MAAM,CAAE;CAEtB,MAAM,UAAU,WAAW,MAAM,QAAQ;AACzC,KAAI,QAAS,YAAW,SAAS,IAAI,QAAQ;CAE7C,MAAM,WAAW,WAAW,MAAM,SAAS;CAC3C,MAAM,OAAO,SAAS,MAAM,KAAK,GAAG,MAAM,OAAO;CACjD,MAAM,eAAe,WAAW,MAAM,GAAG;AACzC,MAAK,aAAa,WAAY,CAAC,YAAY,SAAU,aACpD,YAAW,SAAS,IAAI,aAAa;CAEtC,MAAM,aAAa,WAAW,MAAM,WAAW,IAAI,WAAW,MAAM,WAAW;AAC/E,KAAI,WAAY,YAAW,iBAAiB,IAAI,WAAW;CAG3D,MAAM,WAAW,YADH,SAAS,MAAM,MAAM,GAAG,MAAM,QAAQ,OACjB,KAAK;AACxC,KAAI,UAAU;AACb,aAAW,SAAS,IAAI,SAAS;AACjC,aAAW,iBAAiB,IAAI,SAAS;;AAG1C,MAAK,MAAM,SAAS,OAAO,OAAO,MAAM,CAAE,wBAAuB,OAAO,WAAW;;AAGpF,SAAS,oBACR,MACA,YAC4B;CAC5B,MAAM,iBAAiB,IAAI,IAAI,WAAW,eAAe;CACzD,MAAM,cAAc,IAAI,IAAI,WAAW,eAAe;CACtD,IAAI,UAAU;AACd,QAAO,SAAS;AACf,YAAU;AACV,OAAK,MAAM,OAAO,MAAM;GACvB,MAAM,KAAK,WAAW,IAAI,GAAG;GAC7B,MAAM,QAAQ,WAAW,IAAI,kBAAkB;AAC/C,OAAI,CAAC,GAAI;AACT,OAAI,YAAY,IAAI,GAAG,IAAK,SAAS,eAAe,IAAI,MAAM,EAAG;AAChE,QAAI,CAAC,YAAY,IAAI,GAAG,EAAE;AACzB,iBAAY,IAAI,GAAG;AACnB,eAAU;;AAEX,QAAI,SAAS,CAAC,eAAe,IAAI,MAAM,EAAE;AACxC,oBAAe,IAAI,MAAM;AACzB,eAAU;;IAEX,MAAM,WAAW,WAAW,IAAI,UAAU;AAC1C,QAAI,YAAY,CAAC,YAAY,IAAI,SAAS,EAAE;AAC3C,iBAAY,IAAI,SAAS;AACzB,eAAU;;;;;AAKd,QAAO,KAAK,QAAQ,QAAQ;EAC3B,MAAM,KAAK,WAAW,IAAI,GAAG;EAC7B,MAAM,QAAQ,WAAW,IAAI,kBAAkB;AAC/C,SAAQ,MAAM,YAAY,IAAI,GAAG,IAAM,SAAS,eAAe,IAAI,MAAM;GACxE;;AAGH,SAAS,qBACR,WACA,MACA,YAC4B;AAC5B,SAAQ,WAAR;EACC,KAAK,cACJ,QAAO,KAAK,QAAQ,QAAQ;AAE3B,OAAI,CADc,4BAA4B,YAAY,IAAI,YAAY,IAAI,WAAW,CACzE,QAAO;GACvB,MAAM,QAAQ,WAAW,IAAI,UAAU;AACvC,OAAI,OAAO;AACV,2BAAuB,OAAO,WAAW;AACzC,QAAI,CAAC,qBAAqB,KAAK,MAAM,EAAE;AACtC,gBAAW,SAAS,IAAI,MAAM;AAC9B,gBAAW,iBAAiB,IAAI,MAAM;;;AAGxC,UAAO;IACN;EACH,KAAK,qBACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,YAAY,4BAA4B,YAAY,IAAI,YAAY,IAAI,SAAS;GACvF,MAAM,gBAAgB,WAAW,IAAI,YAAY;AACjD,OAAI,aAAa,cAAe,YAAW,eAAe,IAAI,cAAc;AAC5E,UAAO;IACN;EACH,KAAK,aACJ,QAAO,oBAAoB,MAAM,WAAW;EAC7C,KAAK,qBACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,OAAO,WAAW,IAAI,KAAK;GACjC,MAAM,cAAc,WAAW,IAAI,aAAa;AAChD,OAAI,CAAC,eAAe,SAAS,SAAU,QAAO;AAC9C,OAAI,SAAS,YAAY;AACxB,eAAW,eAAe,IAAI,YAAY;AAC1C,WAAO;;AAER,OAAI,SAAS,gBAAgB,CAAC,IAAI,aAAc,QAAO;AAIvD,UAAO,4BAA4B,YAFlC,WAAW,IAAI,qBAAqB,KACnC,SAAS,UAAU,SAAS,SAAS,GAAG,KAAK,KAAK,OACO,YAAY;IACtE;EACH,KAAK,QACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,KAAK,WAAW,IAAI,GAAG;GAC7B,MAAM,aAAa,WAAW,IAAI,YAAY;AAC9C,UACE,OAAO,QAAQ,WAAW,SAAS,IAAI,GAAG,IAC1C,eAAe,QAAQ,WAAW,iBAAiB,IAAI,WAAW;IAEnE;EACH,KAAK,UACJ,QAAO;EACR,QACC,QAAO,EAAE;;;;;;;;;AA4BZ,eAAsB,iBACrB,IACA,SACoB;CACpB,MAAM,gBAAgB,SAAS,iBAAiB;CAChD,MAAM,iBAAiB,SAAS,kBAAkB;CAClD,MAAM,iBAAiB,SAAS,kBAAkB;CAClD,MAAM,aAAa,IAAI,IAAI,SAAS,WAAW;CAC/C,MAAM,gBAAgB,CAAC,iBAAiB,CAAC;CACzC,MAAM,sBAAsB,2BAA2B;CAKvD,MAAM,YAAY,CAAC,GAHG,MAAM,eAAe,IAAI,OAAO,EAGjB,GAAG,cAAc;CAEtD,MAAM,SAAoD,EAAE;CAC5D,MAAM,SAAgF,EAAE;AAExF,MAAK,MAAM,aAAa,WAAW;AAClC,MAAI,WAAW,UAAU,CAAE;AAI3B,MAAI,CAAC,gBAAgB,KAAK,UAAU,CAAE;EAEtC,MAAM,aAAa,MAAM,iBAAiB,IAAI,UAAU;AACxD,MAAI,WAAW,WAAW,EAAG;EAE7B,MAAM,UAAU,WAAW,KAAK,WAAW,OAAO,KAAK;EACvD,MAAM,QAA4C,EAAE;AACpD,OAAK,MAAM,UAAU,WACpB,OAAM,OAAO,QAAQ,oBAAoB,OAAO,KAAK;AAGtD,SAAO,aAAa;GAAE;GAAS;GAAO;EAEtC,IAAI;AAEJ,MAAI,UAAU,WAAW,MAAM,CAC9B,KAAI,eACH,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;OAClC,QAAQ,GAAG,EACZ;WACQ,cACV,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;;OAElC,QAAQ,GAAG,EACZ;MAEF,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;;;OAGlC,QAAQ,GAAG,EACZ;WAGH,iBACA,cAAc,UAAU,IACxB,yBAAyB,eAAe,OAExC,QAAO,EAAE;WACC,cAAc,UACxB,SACC,MAAM,GAA4B;qBACjB,IAAI,IAAI,UAAU,CAAC;MAClC,QAAQ,GAAG,EACZ,KAAK,QAAQ,QAAQ;GACtB,MAAM,OAAO,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AACvD,UAAO,WAAW,IAAI,KAAK,IAAI,eAAe,MAAM,WAAW,KAAK,WAAW,OAAO,CAAC;IACtF;MAEF,SACC,MAAM,GAA4B;qBACjB,IAAI,IAAI,UAAU,CAAC;MAClC,QAAQ,GAAG,EACZ;AAGH,MAAI,eAAe;AAClB,OAAI,UAAU,WAAW,MAAM,CAC9B,wBAAuB,qBAAqB,WAAW,KAAK;YAE5D,cAAc,UAAU,IACxB,yBAAyB,eAAe,iBAExC,QAAO,qBAAqB,WAAW,MAAM,oBAAoB;AAElE,QAAK,MAAM,OAAO,KAAM,wBAAuB,KAAK,oBAAoB;;AAGzE,MAAI,KAAK,SAAS,EACjB,QAAO,aAAa,cAAc,MAAM,MAAM;;AAQhD,KAAI,SAAS,QAAQ;EACpB,MAAM,SAAS,QAAQ;AACvB,OAAK,MAAM,CAAC,WAAW,SAAS,OAAO,QAAQ,OAAO,EAAE;AACvD,OAAI,CAAC,UAAU,WAAW,MAAM,CAAE;AAClC,QAAK,MAAM,OAAO,KACjB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,EAAE;AAC/C,QAAI,OAAO,UAAU,YAAY,CAAC,MAAM,WAAW,IAAI,CAAE;AACzD,QAAI,OAAO,eAAe,OAAO,OAAO;;;;AAM5C,QAAO;EACN;EACA;EACA,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC"}
+{"version":3,"file":"snapshot-BjaXDZQ5.mjs","names":[],"sources":["../src/api/handlers/snapshot.ts"],"sourcesContent":["/**\n * Snapshot handler — generates a portable database snapshot.\n *\n * Returns all content tables, schema definitions, and supporting data\n * needed to render content in an isolated preview database.\n *\n * Used by:\n * - DO preview database (EmDashPreviewDB.populateFromSnapshot)\n * - Future: CLI export, backup, site migration\n */\n\nimport type { Kysely } from \"kysely\";\nimport { sql } from \"kysely\";\n\nimport { listTableColumns, listTablesLike } from \"../../database/dialect-helpers.js\";\nimport type { Database } from \"../../database/types.js\";\n\n// ─�� Preview signature verification ──────────────────────────────\n\n/**\n * Verify HMAC-SHA256 preview signature using crypto.subtle.\n * Returns true if the signature is valid and not expired.\n */\nexport async function verifyPreviewSignature(\n\tsource: string,\n\texp: number,\n\tsig: string,\n\tsecret: string,\n): Promise<boolean> {\n\tif (exp < Date.now() / 1000) return false;\n\n\tconst encoder = new TextEncoder();\n\tconst key = await crypto.subtle.importKey(\n\t\t\"raw\",\n\t\tencoder.encode(secret),\n\t\t{ name: \"HMAC\", hash: \"SHA-256\" },\n\t\tfalse,\n\t\t[\"verify\"],\n\t);\n\n\tconst sigBytes = new Uint8Array(sig.length / 2);\n\tfor (let i = 0; i < sig.length; i += 2) {\n\t\tsigBytes[i / 2] = parseInt(sig.substring(i, i + 2), 16);\n\t}\n\n\treturn crypto.subtle.verify(\"HMAC\", key, sigBytes, encoder.encode(`${source}:${exp}`));\n}\n\n/**\n * Parse an X-Preview-Signature header value into its components.\n *\n * Format: \"source:exp:sig\" where source is a URL (contains colons),\n * exp is a unix timestamp, and sig is 64 hex chars.\n *\n * Parses from the right since source URLs contain colons.\n *\n * @returns Parsed components, or null if the format is invalid\n */\nexport function parsePreviewSignatureHeader(\n\theader: string,\n): { source: string; exp: number; sig: string } | null {\n\tconst lastColon = header.lastIndexOf(\":\");\n\tif (lastColon <= 0) return null;\n\n\tconst sig = header.substring(lastColon + 1);\n\tif (sig.length !== 64) return null;\n\n\tconst rest = header.substring(0, lastColon);\n\tconst secondLastColon = rest.lastIndexOf(\":\");\n\tif (secondLastColon <= 0) return null;\n\n\tconst source = rest.substring(0, secondLastColon);\n\tconst exp = parseInt(rest.substring(secondLastColon + 1), 10);\n\n\tif (isNaN(exp) || source.length === 0) return null;\n\n\treturn { source, exp, sig };\n}\n\n// ── Media URL rewriting ─────────────────────────────────────────\n\nconst MEDIA_FILE_PREFIX = \"/_emdash/api/media/file/\";\nconst MEDIA_FILE_SUFFIX = /[?#]/;\nconst EXTERNAL_OR_ROOT_URL = /^(?:[a-z][a-z0-9+.-]*:|\\/)/i;\n\n/**\n * Parse a JSON string value and inject `src` for local media objects.\n * Returns the original string if it's not a local media value.\n */\nfunction injectMediaSrc(jsonStr: string, origin: string): string {\n\ttry {\n\t\tconst obj = JSON.parse(jsonStr);\n\t\tif (typeof obj !== \"object\" || obj === null || Array.isArray(obj)) return jsonStr;\n\t\tif (injectMediaSrcInto(obj, origin)) {\n\t\t\treturn JSON.stringify(obj);\n\t\t}\n\t\treturn jsonStr;\n\t} catch {\n\t\treturn jsonStr;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/**\n * Recursively walk an object and inject `src` into local media values.\n * Returns true if any modifications were made.\n */\nfunction injectMediaSrcInto(obj: Record<string, unknown>, origin: string): boolean {\n\tlet modified = false;\n\n\t// Check if this object itself is a local media value\n\tif ((obj.provider === \"local\" || (!obj.provider && obj.id && obj.meta)) && !obj.src) {\n\t\tconst meta = isRecord(obj.meta) ? obj.meta : undefined;\n\t\tconst storageKey = meta?.storageKey ?? obj.id;\n\t\tif (typeof storageKey === \"string\" && storageKey) {\n\t\t\tobj.src = `${origin}${MEDIA_FILE_PREFIX}${storageKey}`;\n\t\t\tmodified = true;\n\t\t}\n\t}\n\n\t// Recurse into nested objects/arrays (e.g. Portable Text with image blocks)\n\tfor (const value of Object.values(obj)) {\n\t\tif (Array.isArray(value)) {\n\t\t\tfor (const item of value) {\n\t\t\t\tif (isRecord(item)) {\n\t\t\t\t\tif (injectMediaSrcInto(item, origin)) {\n\t\t\t\t\t\tmodified = true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (isRecord(value)) {\n\t\t\tif (injectMediaSrcInto(value, origin)) {\n\t\t\t\tmodified = true;\n\t\t\t}\n\t\t}\n\t}\n\n\treturn modified;\n}\n\n// ── Snapshot generation ─────────────────────────────────────────\n\n/**\n * Safe identifier pattern for snapshot table names.\n * More permissive than validateIdentifier() — allows leading underscores\n * (needed for system tables like _emdash_collections).\n */\nconst SAFE_TABLE_NAME = /^[a-z_][a-z0-9_]*$/;\n\n/** Snapshot shape consumed by the DO preview database */\nexport interface Snapshot {\n\ttables: Record<string, Record<string, unknown>[]>;\n\tschema: Record<\n\t\tstring,\n\t\t{\n\t\t\tcolumns: string[];\n\t\t\ttypes?: Record<string, string>;\n\t\t}\n\t>;\n\tgeneratedAt: string;\n}\n\n/**\n * System tables included in snapshots.\n * Content tables (ec_*) are discovered dynamically.\n */\nconst SYSTEM_TABLES = [\n\t\"_emdash_block_types\",\n\t\"_emdash_block_type_versions\",\n\t\"_emdash_collections\",\n\t\"_emdash_fields\",\n\t\"_emdash_taxonomy_defs\",\n\t\"_emdash_taxonomy_def_groups\",\n\t\"_emdash_menus\",\n\t\"_emdash_menu_items\",\n\t\"_emdash_sections\",\n\t\"_emdash_widget_areas\",\n\t\"_emdash_widgets\",\n\t\"_emdash_seo\",\n\t\"_emdash_migrations\",\n\t\"content_taxonomies\",\n\t\"taxonomies\",\n\t\"options\",\n\t\"media\",\n\t\"revisions\",\n] as const;\n\ntype SystemTable = (typeof SYSTEM_TABLES)[number];\ntype PublishedTablePolicy = \"full\" | \"content-linked\" | \"omit\";\n\n/**\n * Published snapshots are available to preview-signature callers, so every\n * system table must be classified explicitly. Adding a snapshot table without\n * choosing a policy is a type error rather than an accidental data export.\n */\nconst PUBLISHED_TABLE_POLICIES: Record<SystemTable, PublishedTablePolicy> = {\n\t_emdash_block_types: \"full\",\n\t_emdash_block_type_versions: \"full\",\n\t_emdash_collections: \"full\",\n\t_emdash_fields: \"full\",\n\t_emdash_taxonomy_defs: \"full\",\n\t_emdash_taxonomy_def_groups: \"full\",\n\t_emdash_menus: \"full\",\n\t_emdash_menu_items: \"content-linked\",\n\t_emdash_sections: \"full\",\n\t_emdash_widget_areas: \"full\",\n\t_emdash_widgets: \"full\",\n\t_emdash_seo: \"content-linked\",\n\t_emdash_migrations: \"full\",\n\tcontent_taxonomies: \"content-linked\",\n\ttaxonomies: \"content-linked\",\n\toptions: \"content-linked\",\n\tmedia: \"content-linked\",\n\trevisions: \"omit\",\n};\n\nconst SYSTEM_TABLE_SET: ReadonlySet<string> = new Set(SYSTEM_TABLES);\n\nfunction isSystemTable(tableName: string): tableName is SystemTable {\n\treturn SYSTEM_TABLE_SET.has(tableName);\n}\n\ninterface PublishedContentReferences {\n\tids: Set<string>;\n\ttranslationGroups: Set<string>;\n}\n\ninterface PublishedProjection {\n\tcontent: Map<string, PublishedContentReferences>;\n\ttaxonomyGroups: Set<string>;\n\tmediaIds: Set<string>;\n\tmediaStorageKeys: Set<string>;\n}\n\n/**\n * Table name prefixes excluded from snapshots (auth/security data).\n */\nconst EXCLUDED_PREFIXES = [\n\t\"_emdash_api_tokens\",\n\t\"_emdash_oauth_tokens\",\n\t\"_emdash_authorization_codes\",\n\t\"_emdash_device_codes\",\n\t\"_emdash_migrations_lock\",\n\t\"_emdash_transfer_\",\n\t\"_plugin_\",\n\t\"users\",\n\t\"sessions\",\n\t\"credentials\",\n\t\"challenges\",\n];\n\n/**\n * Options key prefixes safe for inclusion in snapshots.\n *\n * The options table contains plugin secrets (plugin:*), passkey challenges\n * (emdash:passkey_pending:*), and setup state that must not leak to\n * preview databases. Only site-level rendering settings are needed.\n */\nconst SAFE_OPTIONS_PREFIXES = [\"site:\"];\n\nfunction isExcluded(tableName: string): boolean {\n\treturn EXCLUDED_PREFIXES.some((prefix) => tableName.startsWith(prefix));\n}\n\ntype SnapshotColumnType = \"TEXT\" | \"INTEGER\" | \"REAL\" | \"BLOB\" | \"JSON\";\n\nfunction normalizeColumnType(type: string): SnapshotColumnType {\n\tswitch (type.toLowerCase()) {\n\t\tcase \"smallint\":\n\t\tcase \"integer\":\n\t\tcase \"bigint\":\n\t\tcase \"boolean\":\n\t\t\treturn \"INTEGER\";\n\t\tcase \"real\":\n\t\tcase \"double precision\":\n\t\tcase \"numeric\":\n\t\tcase \"decimal\":\n\t\t\treturn \"REAL\";\n\t\tcase \"blob\":\n\t\tcase \"bytea\":\n\t\t\treturn \"BLOB\";\n\t\tcase \"json\":\n\t\tcase \"jsonb\":\n\t\t\treturn \"JSON\";\n\t\tdefault:\n\t\t\treturn \"TEXT\";\n\t}\n}\n\nfunction normalizeRows(\n\trows: Record<string, unknown>[],\n\ttypes: Record<string, SnapshotColumnType>,\n): Record<string, unknown>[] {\n\tfor (const row of rows) {\n\t\tfor (const [column, type] of Object.entries(types)) {\n\t\t\tconst value = row[column];\n\t\t\tif (type === \"JSON\" && value !== null && value !== undefined && typeof value !== \"string\") {\n\t\t\t\trow[column] = JSON.stringify(value);\n\t\t\t}\n\t\t}\n\t}\n\treturn rows;\n}\n\nfunction createPublishedProjection(): PublishedProjection {\n\treturn {\n\t\tcontent: new Map(),\n\t\ttaxonomyGroups: new Set(),\n\t\tmediaIds: new Set(),\n\t\tmediaStorageKeys: new Set(),\n\t};\n}\n\nfunction readString(value: unknown): string | null {\n\treturn typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nfunction recordPublishedContent(\n\tprojection: PublishedProjection,\n\ttableName: string,\n\trows: Record<string, unknown>[],\n): void {\n\tconst references: PublishedContentReferences = {\n\t\tids: new Set(),\n\t\ttranslationGroups: new Set(),\n\t};\n\tfor (const row of rows) {\n\t\tconst id = readString(row.id);\n\t\tconst translationGroup = readString(row.translation_group);\n\t\tif (id) references.ids.add(id);\n\t\tif (translationGroup) references.translationGroups.add(translationGroup);\n\t}\n\tprojection.content.set(tableName.slice(\"ec_\".length), references);\n}\n\nfunction isPublishedContentReference(\n\tprojection: PublishedProjection,\n\tcollection: unknown,\n\treference: unknown,\n): boolean {\n\tconst collectionName = readString(collection);\n\tconst id = readString(reference);\n\tif (!collectionName || !id) return false;\n\tconst references = projection.content.get(collectionName);\n\treturn references?.ids.has(id) === true || references?.translationGroups.has(id) === true;\n}\n\nfunction collectMediaReferences(value: unknown, projection: PublishedProjection): void {\n\tif (typeof value === \"string\") {\n\t\tif (value.startsWith(MEDIA_FILE_PREFIX)) {\n\t\t\tconst storageKey = value.slice(MEDIA_FILE_PREFIX.length).split(MEDIA_FILE_SUFFIX, 1)[0];\n\t\t\tif (storageKey) projection.mediaStorageKeys.add(storageKey);\n\t\t\treturn;\n\t\t}\n\t\tconst trimmed = value.trimStart();\n\t\tif (trimmed.startsWith(\"{\") || trimmed.startsWith(\"[\")) {\n\t\t\ttry {\n\t\t\t\tcollectMediaReferences(JSON.parse(value), projection);\n\t\t\t} catch {\n\t\t\t\t// Not structured data.\n\t\t\t}\n\t\t}\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tfor (const item of value) collectMediaReferences(item, projection);\n\t\treturn;\n\t}\n\tif (!isRecord(value)) return;\n\n\tconst mediaId = readString(value.mediaId);\n\tif (mediaId) projection.mediaIds.add(mediaId);\n\n\tconst provider = readString(value.provider);\n\tconst meta = isRecord(value.meta) ? value.meta : null;\n\tconst localMediaId = readString(value.id);\n\tif ((provider === \"local\" || (!provider && meta)) && localMediaId) {\n\t\tprojection.mediaIds.add(localMediaId);\n\t}\n\tconst storageKey = readString(value.storageKey) ?? readString(meta?.storageKey);\n\tif (storageKey) projection.mediaStorageKeys.add(storageKey);\n\n\tconst asset = isRecord(value.asset) ? value.asset : null;\n\tconst assetRef = readString(asset?._ref);\n\tif (assetRef) {\n\t\tprojection.mediaIds.add(assetRef);\n\t\tprojection.mediaStorageKeys.add(assetRef);\n\t}\n\n\tfor (const child of Object.values(value)) collectMediaReferences(child, projection);\n}\n\nfunction projectTaxonomyRows(\n\trows: Record<string, unknown>[],\n\tprojection: PublishedProjection,\n): Record<string, unknown>[] {\n\tconst includedGroups = new Set(projection.taxonomyGroups);\n\tconst includedIds = new Set(projection.taxonomyGroups);\n\tlet changed = true;\n\twhile (changed) {\n\t\tchanged = false;\n\t\tfor (const row of rows) {\n\t\t\tconst id = readString(row.id);\n\t\t\tconst group = readString(row.translation_group);\n\t\t\tif (!id) continue;\n\t\t\tif (includedIds.has(id) || (group && includedGroups.has(group))) {\n\t\t\t\tif (!includedIds.has(id)) {\n\t\t\t\t\tincludedIds.add(id);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t\tif (group && !includedGroups.has(group)) {\n\t\t\t\t\tincludedGroups.add(group);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t\tconst parentId = readString(row.parent_id);\n\t\t\t\tif (parentId && !includedIds.has(parentId)) {\n\t\t\t\t\tincludedIds.add(parentId);\n\t\t\t\t\tchanged = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\treturn rows.filter((row) => {\n\t\tconst id = readString(row.id);\n\t\tconst group = readString(row.translation_group);\n\t\treturn (id && includedIds.has(id)) || (group && includedGroups.has(group));\n\t});\n}\n\nfunction projectPublishedRows(\n\ttableName: SystemTable,\n\trows: Record<string, unknown>[],\n\tprojection: PublishedProjection,\n): Record<string, unknown>[] {\n\tswitch (tableName) {\n\t\tcase \"_emdash_seo\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst published = isPublishedContentReference(projection, row.collection, row.content_id);\n\t\t\t\tif (!published) return false;\n\t\t\t\tconst image = readString(row.seo_image);\n\t\t\t\tif (image) {\n\t\t\t\t\tcollectMediaReferences(image, projection);\n\t\t\t\t\tif (!EXTERNAL_OR_ROOT_URL.test(image)) {\n\t\t\t\t\t\tprojection.mediaIds.add(image);\n\t\t\t\t\t\tprojection.mediaStorageKeys.add(image);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn true;\n\t\t\t});\n\t\tcase \"content_taxonomies\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst published = isPublishedContentReference(projection, row.collection, row.entry_id);\n\t\t\t\tconst taxonomyGroup = readString(row.taxonomy_id);\n\t\t\t\tif (published && taxonomyGroup) projection.taxonomyGroups.add(taxonomyGroup);\n\t\t\t\treturn published;\n\t\t\t});\n\t\tcase \"taxonomies\":\n\t\t\treturn projectTaxonomyRows(rows, projection);\n\t\tcase \"_emdash_menu_items\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst type = readString(row.type);\n\t\t\t\tconst referenceId = readString(row.reference_id);\n\t\t\t\tif (!referenceId || type === \"custom\") return true;\n\t\t\t\tif (type === \"taxonomy\") {\n\t\t\t\t\tprojection.taxonomyGroups.add(referenceId);\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (type === \"collection\" && !row.reference_id) return true;\n\t\t\t\tconst collection =\n\t\t\t\t\treadString(row.reference_collection) ??\n\t\t\t\t\t(type === \"post\" || type === \"page\" ? `${type}s` : null);\n\t\t\t\treturn isPublishedContentReference(projection, collection, referenceId);\n\t\t\t});\n\t\tcase \"media\":\n\t\t\treturn rows.filter((row) => {\n\t\t\t\tconst id = readString(row.id);\n\t\t\t\tconst storageKey = readString(row.storage_key);\n\t\t\t\treturn (\n\t\t\t\t\t(id !== null && projection.mediaIds.has(id)) ||\n\t\t\t\t\t(storageKey !== null && projection.mediaStorageKeys.has(storageKey))\n\t\t\t\t);\n\t\t\t});\n\t\tcase \"options\":\n\t\t\treturn rows;\n\t\tdefault:\n\t\t\treturn [];\n\t}\n}\n\nexport interface GenerateSnapshotOptions {\n\t/** Include draft and scheduled content (default: false) */\n\tincludeDrafts?: boolean;\n\t/** Include trashed content (deleted_at set). Used by backups (default: false) */\n\tincludeTrashed?: boolean;\n\t/** Origin URL for absolutizing local media URLs (e.g. \"https://mysite.com\") */\n\torigin?: string;\n\t/**\n\t * Allowlist of options-table key prefixes to include (default:\n\t * `SAFE_OPTIONS_PREFIXES`). Callers widening this must never include a\n\t * prefix that matches secrets (`emdash:preview_secret`, `plugin:`,\n\t * `emdash:passkey_pending:`) — the output may be user-downloadable.\n\t */\n\toptionPrefixes?: string[];\n\t/** Exact options-table keys to include in addition to `optionPrefixes`. */\n\toptionKeys?: string[];\n}\n\n/**\n * Generate a portable database snapshot.\n *\n * Discovers ec_* content tables dynamically, exports system tables\n * needed for rendering, and includes schema info for table recreation.\n */\nexport async function generateSnapshot(\n\tdb: Kysely<Database>,\n\toptions?: GenerateSnapshotOptions,\n): Promise<Snapshot> {\n\tconst includeDrafts = options?.includeDrafts ?? false;\n\tconst includeTrashed = options?.includeTrashed ?? false;\n\tconst optionPrefixes = options?.optionPrefixes ?? SAFE_OPTIONS_PREFIXES;\n\tconst optionKeys = new Set(options?.optionKeys);\n\tconst publishedOnly = !includeDrafts && !includeTrashed;\n\tconst publishedProjection = createPublishedProjection();\n\n\tconst contentTables = await listTablesLike(db, \"ec_%\");\n\n\t// Build list of all tables to export\n\tconst allTables = [...contentTables, ...SYSTEM_TABLES];\n\n\tconst tables: Record<string, Record<string, unknown>[]> = {};\n\tconst schema: Record<string, { columns: string[]; types?: Record<string, string> }> = {};\n\n\tfor (const tableName of allTables) {\n\t\tif (isExcluded(tableName)) continue;\n\n\t\t// Content table names come from the database catalog. Validate them\n\t\t// before passing them to sql.ref().\n\t\tif (!SAFE_TABLE_NAME.test(tableName)) continue;\n\n\t\tconst columnInfo = await listTableColumns(db, tableName);\n\t\tif (columnInfo.length === 0) continue;\n\n\t\tconst columns = columnInfo.map((column) => column.name);\n\t\tconst types: Record<string, SnapshotColumnType> = {};\n\t\tfor (const column of columnInfo) {\n\t\t\ttypes[column.name] = normalizeColumnType(column.type);\n\t\t}\n\n\t\tschema[tableName] = { columns, types };\n\n\t\tlet rows: Record<string, unknown>[];\n\n\t\tif (tableName.startsWith(\"ec_\")) {\n\t\t\tif (includeTrashed) {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t} else if (includeDrafts) {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t} else {\n\t\t\t\trows = (\n\t\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t\t\tWHERE deleted_at IS NULL\n\t\t\t\t\t\tAND status = 'published'\n\t\t\t\t\t`.execute(db)\n\t\t\t\t).rows;\n\t\t\t}\n\t\t} else if (\n\t\t\tpublishedOnly &&\n\t\t\tisSystemTable(tableName) &&\n\t\t\tPUBLISHED_TABLE_POLICIES[tableName] === \"omit\"\n\t\t) {\n\t\t\trows = [];\n\t\t} else if (tableName === \"options\") {\n\t\t\trows = (\n\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t`.execute(db)\n\t\t\t).rows.filter((row) => {\n\t\t\t\tconst name = typeof row.name === \"string\" ? row.name : \"\";\n\t\t\t\treturn optionKeys.has(name) || optionPrefixes.some((prefix) => name.startsWith(prefix));\n\t\t\t});\n\t\t} else {\n\t\t\trows = (\n\t\t\t\tawait sql<Record<string, unknown>>`\n\t\t\t\t\tSELECT * FROM ${sql.ref(tableName)}\n\t\t\t\t`.execute(db)\n\t\t\t).rows;\n\t\t}\n\n\t\tif (publishedOnly) {\n\t\t\tif (tableName.startsWith(\"ec_\")) {\n\t\t\t\trecordPublishedContent(publishedProjection, tableName, rows);\n\t\t\t} else if (\n\t\t\t\tisSystemTable(tableName) &&\n\t\t\t\tPUBLISHED_TABLE_POLICIES[tableName] === \"content-linked\"\n\t\t\t) {\n\t\t\t\trows = projectPublishedRows(tableName, rows, publishedProjection);\n\t\t\t}\n\t\t\tfor (const row of rows) collectMediaReferences(row, publishedProjection);\n\t\t}\n\n\t\tif (rows.length > 0) {\n\t\t\ttables[tableName] = normalizeRows(rows, types);\n\t\t}\n\t}\n\n\t// Absolutize local media URLs in content tables so snapshots are portable.\n\t// Local image fields are stored as JSON with provider:\"local\" and\n\t// meta.storageKey but no src — the URL is derived at render time.\n\t// For snapshots consumed by external preview services, inject src now.\n\tif (options?.origin) {\n\t\tconst origin = options.origin;\n\t\tfor (const [tableName, rows] of Object.entries(tables)) {\n\t\t\tif (!tableName.startsWith(\"ec_\")) continue;\n\t\t\tfor (const row of rows) {\n\t\t\t\tfor (const [col, value] of Object.entries(row)) {\n\t\t\t\t\tif (typeof value !== \"string\" || !value.startsWith(\"{\")) continue;\n\t\t\t\t\trow[col] = injectMediaSrc(value, origin);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\treturn {\n\t\ttables,\n\t\tschema,\n\t\tgeneratedAt: new Date().toISOString(),\n\t};\n}\n"],"mappings":";;;;;;;;AAuBA,eAAsB,uBACrB,QACA,KACA,KACA,QACmB;AACnB,KAAI,MAAM,KAAK,KAAK,GAAG,IAAM,QAAO;CAEpC,MAAM,UAAU,IAAI,aAAa;CACjC,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B,OACA,QAAQ,OAAO,OAAO,EACtB;EAAE,MAAM;EAAQ,MAAM;EAAW,EACjC,OACA,CAAC,SAAS,CACV;CAED,MAAM,WAAW,IAAI,WAAW,IAAI,SAAS,EAAE;AAC/C,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,EACpC,UAAS,IAAI,KAAK,SAAS,IAAI,UAAU,GAAG,IAAI,EAAE,EAAE,GAAG;AAGxD,QAAO,OAAO,OAAO,OAAO,QAAQ,KAAK,UAAU,QAAQ,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;;;;;;;;;;;;AAavF,SAAgB,4BACf,QACsD;CACtD,MAAM,YAAY,OAAO,YAAY,IAAI;AACzC,KAAI,aAAa,EAAG,QAAO;CAE3B,MAAM,MAAM,OAAO,UAAU,YAAY,EAAE;AAC3C,KAAI,IAAI,WAAW,GAAI,QAAO;CAE9B,MAAM,OAAO,OAAO,UAAU,GAAG,UAAU;CAC3C,MAAM,kBAAkB,KAAK,YAAY,IAAI;AAC7C,KAAI,mBAAmB,EAAG,QAAO;CAEjC,MAAM,SAAS,KAAK,UAAU,GAAG,gBAAgB;CACjD,MAAM,MAAM,SAAS,KAAK,UAAU,kBAAkB,EAAE,EAAE,GAAG;AAE7D,KAAI,MAAM,IAAI,IAAI,OAAO,WAAW,EAAG,QAAO;AAE9C,QAAO;EAAE;EAAQ;EAAK;EAAK;;AAK5B,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;;;;;AAM7B,SAAS,eAAe,SAAiB,QAAwB;AAChE,KAAI;EACH,MAAM,MAAM,KAAK,MAAM,QAAQ;AAC/B,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,IAAI,CAAE,QAAO;AAC1E,MAAI,mBAAmB,KAAK,OAAO,CAClC,QAAO,KAAK,UAAU,IAAI;AAE3B,SAAO;SACA;AACP,SAAO;;;AAIT,SAAS,SAAS,OAAkD;AACnE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;;;;;AAO5E,SAAS,mBAAmB,KAA8B,QAAyB;CAClF,IAAI,WAAW;AAGf,MAAK,IAAI,aAAa,WAAY,CAAC,IAAI,YAAY,IAAI,MAAM,IAAI,SAAU,CAAC,IAAI,KAAK;EAEpF,MAAM,cADO,SAAS,IAAI,KAAK,GAAG,IAAI,OAAO,SACpB,cAAc,IAAI;AAC3C,MAAI,OAAO,eAAe,YAAY,YAAY;AACjD,OAAI,MAAM,GAAG,SAAS,oBAAoB;AAC1C,cAAW;;;AAKb,MAAK,MAAM,SAAS,OAAO,OAAO,IAAI,CACrC,KAAI,MAAM,QAAQ,MAAM,EACvB;OAAK,MAAM,QAAQ,MAClB,KAAI,SAAS,KAAK,EACjB;OAAI,mBAAmB,MAAM,OAAO,CACnC,YAAW;;YAIJ,SAAS,MAAM,EACzB;MAAI,mBAAmB,OAAO,OAAO,CACpC,YAAW;;AAKd,QAAO;;;;;;;AAUR,MAAM,kBAAkB;;;;;AAmBxB,MAAM,gBAAgB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;AAUD,MAAM,2BAAsE;CAC3E,qBAAqB;CACrB,6BAA6B;CAC7B,qBAAqB;CACrB,gBAAgB;CAChB,uBAAuB;CACvB,6BAA6B;CAC7B,eAAe;CACf,oBAAoB;CACpB,kBAAkB;CAClB,sBAAsB;CACtB,iBAAiB;CACjB,aAAa;CACb,oBAAoB;CACpB,oBAAoB;CACpB,YAAY;CACZ,SAAS;CACT,OAAO;CACP,WAAW;CACX;AAED,MAAM,mBAAwC,IAAI,IAAI,cAAc;AAEpE,SAAS,cAAc,WAA6C;AACnE,QAAO,iBAAiB,IAAI,UAAU;;;;;AAkBvC,MAAM,oBAAoB;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;;;AASD,MAAM,wBAAwB,CAAC,QAAQ;AAEvC,SAAS,WAAW,WAA4B;AAC/C,QAAO,kBAAkB,MAAM,WAAW,UAAU,WAAW,OAAO,CAAC;;AAKxE,SAAS,oBAAoB,MAAkC;AAC9D,SAAQ,KAAK,aAAa,EAA1B;EACC,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,QAAO;EACR,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACJ,QAAO;EACR,KAAK;EACL,KAAK,QACJ,QAAO;EACR,KAAK;EACL,KAAK,QACJ,QAAO;EACR,QACC,QAAO;;;AAIV,SAAS,cACR,MACA,OAC4B;AAC5B,MAAK,MAAM,OAAO,KACjB,MAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,MAAM,EAAE;EACnD,MAAM,QAAQ,IAAI;AAClB,MAAI,SAAS,UAAU,UAAU,QAAQ,UAAU,UAAa,OAAO,UAAU,SAChF,KAAI,UAAU,KAAK,UAAU,MAAM;;AAItC,QAAO;;AAGR,SAAS,4BAAiD;AACzD,QAAO;EACN,yBAAS,IAAI,KAAK;EAClB,gCAAgB,IAAI,KAAK;EACzB,0BAAU,IAAI,KAAK;EACnB,kCAAkB,IAAI,KAAK;EAC3B;;AAGF,SAAS,WAAW,OAA+B;AAClD,QAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;;AAGhE,SAAS,uBACR,YACA,WACA,MACO;CACP,MAAM,aAAyC;EAC9C,qBAAK,IAAI,KAAK;EACd,mCAAmB,IAAI,KAAK;EAC5B;AACD,MAAK,MAAM,OAAO,MAAM;EACvB,MAAM,KAAK,WAAW,IAAI,GAAG;EAC7B,MAAM,mBAAmB,WAAW,IAAI,kBAAkB;AAC1D,MAAI,GAAI,YAAW,IAAI,IAAI,GAAG;AAC9B,MAAI,iBAAkB,YAAW,kBAAkB,IAAI,iBAAiB;;AAEzE,YAAW,QAAQ,IAAI,UAAU,MAAM,EAAa,EAAE,WAAW;;AAGlE,SAAS,4BACR,YACA,YACA,WACU;CACV,MAAM,iBAAiB,WAAW,WAAW;CAC7C,MAAM,KAAK,WAAW,UAAU;AAChC,KAAI,CAAC,kBAAkB,CAAC,GAAI,QAAO;CACnC,MAAM,aAAa,WAAW,QAAQ,IAAI,eAAe;AACzD,QAAO,YAAY,IAAI,IAAI,GAAG,KAAK,QAAQ,YAAY,kBAAkB,IAAI,GAAG,KAAK;;AAGtF,SAAS,uBAAuB,OAAgB,YAAuC;AACtF,KAAI,OAAO,UAAU,UAAU;AAC9B,MAAI,MAAM,WAAW,kBAAkB,EAAE;GACxC,MAAM,aAAa,MAAM,MAAM,GAAyB,CAAC,MAAM,mBAAmB,EAAE,CAAC;AACrF,OAAI,WAAY,YAAW,iBAAiB,IAAI,WAAW;AAC3D;;EAED,MAAM,UAAU,MAAM,WAAW;AACjC,MAAI,QAAQ,WAAW,IAAI,IAAI,QAAQ,WAAW,IAAI,CACrD,KAAI;AACH,0BAAuB,KAAK,MAAM,MAAM,EAAE,WAAW;UAC9C;AAIT;;AAED,KAAI,MAAM,QAAQ,MAAM,EAAE;AACzB,OAAK,MAAM,QAAQ,MAAO,wBAAuB,MAAM,WAAW;AAClE;;AAED,KAAI,CAAC,SAAS,MAAM,CAAE;CAEtB,MAAM,UAAU,WAAW,MAAM,QAAQ;AACzC,KAAI,QAAS,YAAW,SAAS,IAAI,QAAQ;CAE7C,MAAM,WAAW,WAAW,MAAM,SAAS;CAC3C,MAAM,OAAO,SAAS,MAAM,KAAK,GAAG,MAAM,OAAO;CACjD,MAAM,eAAe,WAAW,MAAM,GAAG;AACzC,MAAK,aAAa,WAAY,CAAC,YAAY,SAAU,aACpD,YAAW,SAAS,IAAI,aAAa;CAEtC,MAAM,aAAa,WAAW,MAAM,WAAW,IAAI,WAAW,MAAM,WAAW;AAC/E,KAAI,WAAY,YAAW,iBAAiB,IAAI,WAAW;CAG3D,MAAM,WAAW,YADH,SAAS,MAAM,MAAM,GAAG,MAAM,QAAQ,OACjB,KAAK;AACxC,KAAI,UAAU;AACb,aAAW,SAAS,IAAI,SAAS;AACjC,aAAW,iBAAiB,IAAI,SAAS;;AAG1C,MAAK,MAAM,SAAS,OAAO,OAAO,MAAM,CAAE,wBAAuB,OAAO,WAAW;;AAGpF,SAAS,oBACR,MACA,YAC4B;CAC5B,MAAM,iBAAiB,IAAI,IAAI,WAAW,eAAe;CACzD,MAAM,cAAc,IAAI,IAAI,WAAW,eAAe;CACtD,IAAI,UAAU;AACd,QAAO,SAAS;AACf,YAAU;AACV,OAAK,MAAM,OAAO,MAAM;GACvB,MAAM,KAAK,WAAW,IAAI,GAAG;GAC7B,MAAM,QAAQ,WAAW,IAAI,kBAAkB;AAC/C,OAAI,CAAC,GAAI;AACT,OAAI,YAAY,IAAI,GAAG,IAAK,SAAS,eAAe,IAAI,MAAM,EAAG;AAChE,QAAI,CAAC,YAAY,IAAI,GAAG,EAAE;AACzB,iBAAY,IAAI,GAAG;AACnB,eAAU;;AAEX,QAAI,SAAS,CAAC,eAAe,IAAI,MAAM,EAAE;AACxC,oBAAe,IAAI,MAAM;AACzB,eAAU;;IAEX,MAAM,WAAW,WAAW,IAAI,UAAU;AAC1C,QAAI,YAAY,CAAC,YAAY,IAAI,SAAS,EAAE;AAC3C,iBAAY,IAAI,SAAS;AACzB,eAAU;;;;;AAKd,QAAO,KAAK,QAAQ,QAAQ;EAC3B,MAAM,KAAK,WAAW,IAAI,GAAG;EAC7B,MAAM,QAAQ,WAAW,IAAI,kBAAkB;AAC/C,SAAQ,MAAM,YAAY,IAAI,GAAG,IAAM,SAAS,eAAe,IAAI,MAAM;GACxE;;AAGH,SAAS,qBACR,WACA,MACA,YAC4B;AAC5B,SAAQ,WAAR;EACC,KAAK,cACJ,QAAO,KAAK,QAAQ,QAAQ;AAE3B,OAAI,CADc,4BAA4B,YAAY,IAAI,YAAY,IAAI,WAAW,CACzE,QAAO;GACvB,MAAM,QAAQ,WAAW,IAAI,UAAU;AACvC,OAAI,OAAO;AACV,2BAAuB,OAAO,WAAW;AACzC,QAAI,CAAC,qBAAqB,KAAK,MAAM,EAAE;AACtC,gBAAW,SAAS,IAAI,MAAM;AAC9B,gBAAW,iBAAiB,IAAI,MAAM;;;AAGxC,UAAO;IACN;EACH,KAAK,qBACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,YAAY,4BAA4B,YAAY,IAAI,YAAY,IAAI,SAAS;GACvF,MAAM,gBAAgB,WAAW,IAAI,YAAY;AACjD,OAAI,aAAa,cAAe,YAAW,eAAe,IAAI,cAAc;AAC5E,UAAO;IACN;EACH,KAAK,aACJ,QAAO,oBAAoB,MAAM,WAAW;EAC7C,KAAK,qBACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,OAAO,WAAW,IAAI,KAAK;GACjC,MAAM,cAAc,WAAW,IAAI,aAAa;AAChD,OAAI,CAAC,eAAe,SAAS,SAAU,QAAO;AAC9C,OAAI,SAAS,YAAY;AACxB,eAAW,eAAe,IAAI,YAAY;AAC1C,WAAO;;AAER,OAAI,SAAS,gBAAgB,CAAC,IAAI,aAAc,QAAO;AAIvD,UAAO,4BAA4B,YAFlC,WAAW,IAAI,qBAAqB,KACnC,SAAS,UAAU,SAAS,SAAS,GAAG,KAAK,KAAK,OACO,YAAY;IACtE;EACH,KAAK,QACJ,QAAO,KAAK,QAAQ,QAAQ;GAC3B,MAAM,KAAK,WAAW,IAAI,GAAG;GAC7B,MAAM,aAAa,WAAW,IAAI,YAAY;AAC9C,UACE,OAAO,QAAQ,WAAW,SAAS,IAAI,GAAG,IAC1C,eAAe,QAAQ,WAAW,iBAAiB,IAAI,WAAW;IAEnE;EACH,KAAK,UACJ,QAAO;EACR,QACC,QAAO,EAAE;;;;;;;;;AA4BZ,eAAsB,iBACrB,IACA,SACoB;CACpB,MAAM,gBAAgB,SAAS,iBAAiB;CAChD,MAAM,iBAAiB,SAAS,kBAAkB;CAClD,MAAM,iBAAiB,SAAS,kBAAkB;CAClD,MAAM,aAAa,IAAI,IAAI,SAAS,WAAW;CAC/C,MAAM,gBAAgB,CAAC,iBAAiB,CAAC;CACzC,MAAM,sBAAsB,2BAA2B;CAKvD,MAAM,YAAY,CAAC,GAHG,MAAM,eAAe,IAAI,OAAO,EAGjB,GAAG,cAAc;CAEtD,MAAM,SAAoD,EAAE;CAC5D,MAAM,SAAgF,EAAE;AAExF,MAAK,MAAM,aAAa,WAAW;AAClC,MAAI,WAAW,UAAU,CAAE;AAI3B,MAAI,CAAC,gBAAgB,KAAK,UAAU,CAAE;EAEtC,MAAM,aAAa,MAAM,iBAAiB,IAAI,UAAU;AACxD,MAAI,WAAW,WAAW,EAAG;EAE7B,MAAM,UAAU,WAAW,KAAK,WAAW,OAAO,KAAK;EACvD,MAAM,QAA4C,EAAE;AACpD,OAAK,MAAM,UAAU,WACpB,OAAM,OAAO,QAAQ,oBAAoB,OAAO,KAAK;AAGtD,SAAO,aAAa;GAAE;GAAS;GAAO;EAEtC,IAAI;AAEJ,MAAI,UAAU,WAAW,MAAM,CAC9B,KAAI,eACH,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;OAClC,QAAQ,GAAG,EACZ;WACQ,cACV,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;;OAElC,QAAQ,GAAG,EACZ;MAEF,SACC,MAAM,GAA4B;sBACjB,IAAI,IAAI,UAAU,CAAC;;;OAGlC,QAAQ,GAAG,EACZ;WAGH,iBACA,cAAc,UAAU,IACxB,yBAAyB,eAAe,OAExC,QAAO,EAAE;WACC,cAAc,UACxB,SACC,MAAM,GAA4B;qBACjB,IAAI,IAAI,UAAU,CAAC;MAClC,QAAQ,GAAG,EACZ,KAAK,QAAQ,QAAQ;GACtB,MAAM,OAAO,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AACvD,UAAO,WAAW,IAAI,KAAK,IAAI,eAAe,MAAM,WAAW,KAAK,WAAW,OAAO,CAAC;IACtF;MAEF,SACC,MAAM,GAA4B;qBACjB,IAAI,IAAI,UAAU,CAAC;MAClC,QAAQ,GAAG,EACZ;AAGH,MAAI,eAAe;AAClB,OAAI,UAAU,WAAW,MAAM,CAC9B,wBAAuB,qBAAqB,WAAW,KAAK;YAE5D,cAAc,UAAU,IACxB,yBAAyB,eAAe,iBAExC,QAAO,qBAAqB,WAAW,MAAM,oBAAoB;AAElE,QAAK,MAAM,OAAO,KAAM,wBAAuB,KAAK,oBAAoB;;AAGzE,MAAI,KAAK,SAAS,EACjB,QAAO,aAAa,cAAc,MAAM,MAAM;;AAQhD,KAAI,SAAS,QAAQ;EACpB,MAAM,SAAS,QAAQ;AACvB,OAAK,MAAM,CAAC,WAAW,SAAS,OAAO,QAAQ,OAAO,EAAE;AACvD,OAAI,CAAC,UAAU,WAAW,MAAM,CAAE;AAClC,QAAK,MAAM,OAAO,KACjB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,EAAE;AAC/C,QAAI,OAAO,UAAU,YAAY,CAAC,MAAM,WAAW,IAAI,CAAE;AACzD,QAAI,OAAO,eAAe,OAAO,OAAO;;;;AAM5C,QAAO;EACN;EACA;EACA,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC"}

package/dist/{stage-D8DWgPcO.mjs → stage-CZQnXM_G.mjs}

@@ -1,9 +1,9 @@
 import { i as transferErrorDetailSchema, r as isTransferError, t as TransferError } from "./errors-B4f4It-2.mjs";
 import { o as TRANSFER_LIMITS } from "./canonical-BudtH-Fx.mjs";
 import { a as isSha256Digest, i as createSha256, r as createHashingStream } from "./digest-DJ1tHCgy.mjs";
-import { r as bumpRunningExportWriteEpochs } from "./fence-C3MUitUN.mjs";
+import { r as bumpRunningExportWriteEpochs } from "./fence-Dagicj14.mjs";
 import { n as siteImportReceiptSchema } from "./receipt-BUsQCOeM.mjs";
-import { a as timestampIsOlderThan, b as transferCursorSchema, c as EXECUTING_IMPORT_STATES, f as PRE_EXECUTION_IMPORT_STATES, h as TRANSFER_RUNTIME_GENERATION, i as timestampIsLive, m as TERMINAL_IMPORT_STATES, o as timestampNow, r as timestampIsDue, s as timestampOffset, v as isTransferOperationKind, x as transferProgressSchema, y as isTransferOperationState } from "./approvals-D-m6wvGl.mjs";
+import { a as timestampIsOlderThan, b as transferCursorSchema, c as EXECUTING_IMPORT_STATES, f as PRE_EXECUTION_IMPORT_STATES, h as TRANSFER_RUNTIME_GENERATION, i as timestampIsLive, m as TERMINAL_IMPORT_STATES, o as timestampNow, r as timestampIsDue, s as timestampOffset, v as isTransferOperationKind, x as transferProgressSchema, y as isTransferOperationState } from "./approvals-DTtYSB27.mjs";
 import { n as stagingAuxKey, r as stagingKey } from "./keys-CifIkT0N.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
@@ -659,4 +659,4 @@ var TransferStage = class {
 
 //#endregion
 export { toPublicOperation as a, TransferOperationRepository as i, putVerified as n, readStreamBytes as r, TransferStage as t };
-//# sourceMappingURL=stage-D8DWgPcO.mjs.map
+//# sourceMappingURL=stage-CZQnXM_G.mjs.map

package/dist/{stage-D8DWgPcO.mjs.map → stage-CZQnXM_G.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"stage-D8DWgPcO.mjs","names":[],"sources":["../src/transfer/ops/operations.ts","../src/transfer/staging/stage.ts"],"sourcesContent":["/**\n * Transfer operation rows: creation, lease claims, and lease-fenced state\n * writes.\n *\n * Every step of a running operation happens under a lease: `claim` is one\n * `UPDATE … WHERE lease is free … RETURNING` statement that installs a fresh\n * ULID lease token, and every later write is fenced on that token and on the\n * lease still being live. A caller that loses its lease (expiry, another\n * caller took over) gets `TRANSFER_LEASE_LOST` and must stop without writing.\n */\n\nimport { sql, type Kysely, type Selectable, type UpdateObject } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database, TransferOperationTable } from \"../../database/types.js\";\nimport {\n\tTransferError,\n\ttransferErrorDetailSchema,\n\ttype TransferErrorCode,\n\ttype TransferErrorDetail,\n} from \"../errors.js\";\nimport { bumpRunningExportWriteEpochs } from \"../fence.js\";\nimport { isSha256Digest, type Sha256Digest } from \"../format/digest.js\";\nimport { TRANSFER_LIMITS } from \"../format/limits.js\";\nimport { siteImportReceiptSchema, type SiteImportReceipt } from \"../format/receipt.js\";\nimport {\n\tEXECUTING_IMPORT_STATES,\n\tisTransferOperationKind,\n\tisTransferOperationState,\n\tPRE_EXECUTION_IMPORT_STATES,\n\tTERMINAL_IMPORT_STATES,\n\tTRANSFER_RUNTIME_GENERATION,\n\ttransferCursorSchema,\n\ttransferProgressSchema,\n\ttype TransferCursor,\n\ttype TransferOperationKind,\n\ttype TransferOperationState,\n\ttype TransferProgress,\n} from \"./states.js\";\nimport {\n\ttimestampIsDue,\n\ttimestampIsLive,\n\ttimestampIsOlderThan,\n\ttimestampNow,\n\ttimestampOffset,\n} from \"./time.js\";\n\ntype OperationRow = Selectable<TransferOperationTable>;\ntype OperationUpdate = UpdateObject<Database, \"_emdash_transfer_operations\">;\n\nexport interface TransferOperation {\n\tid: string;\n\tkind: TransferOperationKind;\n\tstate: TransferOperationState;\n\tstage: string | null;\n\tcursor: TransferCursor | null;\n\tprogress: TransferProgress | null;\n\toptions: unknown;\n\tidempotencyKey: string | null;\n\tpackageDigest: Sha256Digest | null;\n\tplanDigest: Sha256Digest | null;\n\toriginSiteId: string | null;\n\t/**\n\t * 128-bit hex secret in the operation's staging prefix. Internal only:\n\t * serialize operations for clients with {@link toPublicOperation}.\n\t */\n\tstagingSecret: string;\n\treceipt: SiteImportReceipt | null;\n\terrorCode: string | null;\n\terrorDetail: TransferErrorDetail | null;\n\twriteEpoch: number;\n\tattemptCount: number;\n\tleaseToken: string | null;\n\tleaseExpiresAt: string | null;\n\truntimeGeneration: number;\n\tcancelRequestedAt: string | null;\n\tmutationStartedAt: string | null;\n\tcreatedBy: string;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\tcompletedAt: string | null;\n\texpiresAt: string | null;\n\tstagingCollectedAt: string | null;\n}\n\n/**\n * An operation as it may be shown to API clients: without the staging secret\n * and lease token.\n */\nexport type PublicTransferOperation = Omit<TransferOperation, \"stagingSecret\" | \"leaseToken\">;\n\nexport function toPublicOperation(operation: TransferOperation): PublicTransferOperation {\n\tconst { stagingSecret: _secret, leaseToken: _lease, ...rest } = operation;\n\treturn rest;\n}\n\nexport interface CreateTransferOperationInput {\n\tkind: TransferOperationKind;\n\tcreatedBy: string;\n\tidempotencyKey?: string;\n\t/** For imports, the digest of the manifest the operation was created with. */\n\tpackageDigest?: Sha256Digest;\n\toriginSiteId?: string;\n\toptions?: unknown;\n\t/** Seconds until the operation expires if it does not finish. */\n\tttlSeconds?: number;\n}\n\nexport type ClaimResult =\n\t| { outcome: \"claimed\"; operation: TransferOperation; leaseToken: string }\n\t| { outcome: \"lease_active\"; operation: TransferOperation }\n\t| { outcome: \"invalid_state\"; operation: TransferOperation };\n\nexport interface OperationPatch {\n\tstate?: TransferOperationState;\n\tstage?: string | null;\n\tcursor?: TransferCursor | null;\n\tprogress?: TransferProgress | null;\n\tpackageDigest?: Sha256Digest;\n\tplanDigest?: Sha256Digest | null;\n\toriginSiteId?: string;\n\t/** Record that the importer is about to write to the target (idempotent). */\n\tmarkMutationStarted?: true;\n\t/** Reset `expires_at` to now + this many seconds. */\n\tttlSeconds?: number;\n\t/**\n\t * Record the retryable failure of the last step on a non-terminal\n\t * operation in `error_code`/`error_detail`, or clear it with null.\n\t */\n\tretryError?: { code: TransferErrorCode; detail?: TransferErrorDetail } | null;\n}\n\nconst MAX_IDEMPOTENCY_KEY_LENGTH = 255;\n\nfunction parseJson(value: string | null): unknown {\n\tif (value === null) return null;\n\treturn JSON.parse(value);\n}\n\nfunction toOperation(row: OperationRow): TransferOperation {\n\tconst { kind, state } = row;\n\tif (!isTransferOperationKind(kind) || !isTransferOperationState(state)) {\n\t\tthrow new TransferError(\"TRANSFER_INVALID_STATE\", \"Unknown transfer operation kind or state\");\n\t}\n\tconst cursor = parseJson(row.cursor);\n\tconst progress = parseJson(row.progress);\n\tconst receipt = parseJson(row.receipt);\n\tconst errorDetail = parseJson(row.error_detail);\n\treturn {\n\t\tid: row.id,\n\t\tkind,\n\t\tstate,\n\t\tstage: row.stage,\n\t\tcursor: cursor === null ? null : transferCursorSchema.parse(cursor),\n\t\tprogress: progress === null ? null : transferProgressSchema.parse(progress),\n\t\toptions: parseJson(row.options),\n\t\tidempotencyKey: row.idempotency_key,\n\t\tpackageDigest: isSha256Digest(row.package_digest) ? row.package_digest : null,\n\t\tplanDigest: isSha256Digest(row.plan_digest) ? row.plan_digest : null,\n\t\toriginSiteId: row.origin_site_id,\n\t\tstagingSecret: row.staging_secret,\n\t\treceipt: receipt === null ? null : siteImportReceiptSchema.parse(receipt),\n\t\terrorCode: row.error_code,\n\t\terrorDetail: errorDetail === null ? null : transferErrorDetailSchema.parse(errorDetail),\n\t\twriteEpoch: Number(row.write_epoch),\n\t\tattemptCount: Number(row.attempt_count),\n\t\tleaseToken: row.lease_token,\n\t\tleaseExpiresAt: row.lease_expires_at,\n\t\truntimeGeneration: Number(row.runtime_generation),\n\t\tcancelRequestedAt: row.cancel_requested_at,\n\t\tmutationStartedAt: row.mutation_started_at,\n\t\tcreatedBy: row.created_by,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\tcompletedAt: row.completed_at,\n\t\texpiresAt: row.expires_at,\n\t\tstagingCollectedAt: row.staging_collected_at,\n\t};\n}\n\nexport function createStagingSecret(): string {\n\tconst bytes = new Uint8Array(16);\n\tcrypto.getRandomValues(bytes);\n\treturn Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class TransferOperationRepository {\n\tconstructor(private readonly db: Kysely<Database>) {}\n\n\tasync get(id: string): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toOperation(row) : null;\n\t}\n\n\tasync require(id: string): Promise<TransferOperation> {\n\t\tconst operation = await this.get(id);\n\t\tif (!operation) {\n\t\t\tthrow new TransferError(\"TRANSFER_OPERATION_NOT_FOUND\", \"Transfer operation not found\");\n\t\t}\n\t\treturn operation;\n\t}\n\n\t/**\n\t * Create an operation, or return the existing one for the same\n\t * `(createdBy, kind, idempotencyKey)`. Throws\n\t * `TRANSFER_IDEMPOTENCY_CONFLICT` when that key was used with a different\n\t * package digest, and `TRANSFER_IMPORT_IN_PROGRESS` when another import\n\t * already occupies the target.\n\t */\n\tasync create(\n\t\tinput: CreateTransferOperationInput,\n\t): Promise<{ operation: TransferOperation; created: boolean }> {\n\t\tif (\n\t\t\tinput.idempotencyKey !== undefined &&\n\t\t\t(input.idempotencyKey.length === 0 ||\n\t\t\t\tinput.idempotencyKey.length > MAX_IDEMPOTENCY_KEY_LENGTH)\n\t\t) {\n\t\t\tthrow new TransferError(\"TRANSFER_IDEMPOTENCY_CONFLICT\", \"Invalid idempotency key\");\n\t\t}\n\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst existing = await this.findByIdempotencyKey(input);\n\t\t\tif (existing) return { operation: existing, created: false };\n\t\t}\n\n\t\tconst id = ulid();\n\t\tconst inserted = await this.db\n\t\t\t.insertInto(\"_emdash_transfer_operations\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tkind: input.kind,\n\t\t\t\tstate: input.kind === \"export\" ? \"pending\" : \"uploading\",\n\t\t\t\tidempotency_key: input.idempotencyKey ?? null,\n\t\t\t\tpackage_digest: input.packageDigest ?? null,\n\t\t\t\torigin_site_id: input.originSiteId ?? null,\n\t\t\t\toptions: input.options === undefined ? null : JSON.stringify(input.options),\n\t\t\t\tstaging_secret: createStagingSecret(),\n\t\t\t\truntime_generation: TRANSFER_RUNTIME_GENERATION,\n\t\t\t\tcreated_by: input.createdBy,\n\t\t\t\texpires_at: timestampOffset(this.db, input.ttlSeconds ?? defaultTtl(input.kind)),\n\t\t\t\tstage: null,\n\t\t\t\tcursor: null,\n\t\t\t\tprogress: null,\n\t\t\t\tplan_digest: null,\n\t\t\t\treceipt: null,\n\t\t\t\terror_code: null,\n\t\t\t\terror_detail: null,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t\tcancel_requested_at: null,\n\t\t\t\tmutation_started_at: null,\n\t\t\t\tcompleted_at: null,\n\t\t\t\tstaging_collected_at: null,\n\t\t\t})\n\t\t\t.onConflict((conflict) => conflict.doNothing())\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (inserted) return { operation: toOperation(inserted), created: true };\n\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst existing = await this.findByIdempotencyKey(input);\n\t\t\tif (existing) return { operation: existing, created: false };\n\t\t}\n\t\tthrow new TransferError(\n\t\t\t\"TRANSFER_IMPORT_IN_PROGRESS\",\n\t\t\t\"Another import is already in progress on this site\",\n\t\t);\n\t}\n\n\tprivate async findByIdempotencyKey(\n\t\tinput: CreateTransferOperationInput,\n\t): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"created_by\", \"=\", input.createdBy)\n\t\t\t.where(\"kind\", \"=\", input.kind)\n\t\t\t.where(\"idempotency_key\", \"=\", input.idempotencyKey ?? \"\")\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return null;\n\t\tif (\n\t\t\tinput.packageDigest !== undefined &&\n\t\t\trow.package_digest !== null &&\n\t\t\trow.package_digest !== input.packageDigest\n\t\t) {\n\t\t\tthrow new TransferError(\n\t\t\t\t\"TRANSFER_IDEMPOTENCY_CONFLICT\",\n\t\t\t\t\"Idempotency key was already used for a different package\",\n\t\t\t);\n\t\t}\n\t\treturn toOperation(row);\n\t}\n\n\t/** The import that currently occupies the target, if any. */\n\tasync findOccupyingImport(): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES, ...EXECUTING_IMPORT_STATES]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"state\", \"in\", [\"failed\", \"cancelled\"]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is not\", null),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toOperation(row) : null;\n\t}\n\n\t/**\n\t * Take the operation's lease if it is in one of `states` and no live lease\n\t * exists. Throws `TRANSFER_OPERATION_NOT_FOUND`, or\n\t * `TRANSFER_RUNTIME_MISMATCH` when the row was written by an incompatible\n\t * runtime generation.\n\t */\n\tasync claim(\n\t\tid: string,\n\t\tstates: readonly TransferOperationState[],\n\t\toptions: { leaseSeconds?: number } = {},\n\t): Promise<ClaimResult> {\n\t\tconst leaseToken = ulid();\n\t\tconst now = timestampNow(this.db);\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({\n\t\t\t\tlease_token: leaseToken,\n\t\t\t\tlease_expires_at: timestampOffset(\n\t\t\t\t\tthis.db,\n\t\t\t\t\toptions.leaseSeconds ?? TRANSFER_LIMITS.leaseSeconds,\n\t\t\t\t),\n\t\t\t\tattempt_count: sql<number>`attempt_count + 1`,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"state\", \"in\", [...states])\n\t\t\t.where(\"runtime_generation\", \"=\", TRANSFER_RUNTIME_GENERATION)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (row) return { outcome: \"claimed\", operation: toOperation(row), leaseToken };\n\n\t\tconst current = await this.require(id);\n\t\tif (current.runtimeGeneration !== TRANSFER_RUNTIME_GENERATION) {\n\t\t\tthrow new TransferError(\n\t\t\t\t\"TRANSFER_RUNTIME_MISMATCH\",\n\t\t\t\t\"Transfer operation was created by an incompatible EmDash version\",\n\t\t\t);\n\t\t}\n\t\tif (!states.includes(current.state)) return { outcome: \"invalid_state\", operation: current };\n\t\treturn { outcome: \"lease_active\", operation: current };\n\t}\n\n\t/**\n\t * Write state under the lease and extend it. Throws `TRANSFER_LEASE_LOST`\n\t * when the lease is gone.\n\t */\n\tasync advance(id: string, leaseToken: string, patch: OperationPatch): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tlease_expires_at: timestampOffset(this.db, TRANSFER_LIMITS.leaseSeconds),\n\t\t});\n\t}\n\n\t/** Write state and give up the lease so the next step can claim it. */\n\tasync release(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tpatch: OperationPatch = {},\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/**\n\t * Write `patch`, move to `state`, and give up the lease; when a cancel was\n\t * requested while the lease was held, move to `cancelled` instead. One\n\t * statement decides, so a cancel racing the release is never lost.\n\t */\n\tasync releaseUnlessCancelled(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tstate: TransferOperationState,\n\t\tpatch: Omit<OperationPatch, \"state\"> = {},\n\t): Promise<TransferOperation> {\n\t\tconst now = timestampNow(this.db);\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tstate: sql<string>`CASE WHEN cancel_requested_at IS NULL THEN ${state} ELSE 'cancelled' END`,\n\t\t\tcompleted_at: sql<\n\t\t\t\tstring | null\n\t\t\t>`CASE WHEN cancel_requested_at IS NULL THEN completed_at ELSE ${now} END`,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\tasync complete(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tresult: { receipt?: SiteImportReceipt; ttlSeconds?: number; progress?: TransferProgress } = {},\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"complete\",\n\t\t\treceipt: result.receipt === undefined ? undefined : JSON.stringify(result.receipt),\n\t\t\tprogress: result.progress === undefined ? undefined : JSON.stringify(result.progress),\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\texpires_at:\n\t\t\t\tresult.ttlSeconds === undefined ? undefined : timestampOffset(this.db, result.ttlSeconds),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\tasync fail(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\terror: { code: TransferErrorCode; detail?: TransferErrorDetail },\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"failed\",\n\t\t\terror_code: error.code,\n\t\t\terror_detail: error.detail === undefined ? null : JSON.stringify(error.detail),\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/** Finish a cancellation the lease holder observed via `cancelRequestedAt`. */\n\tasync finishCancelled(id: string, leaseToken: string): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"cancelled\",\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/**\n\t * Cancel an import. Without a live lease the operation becomes `cancelled`\n\t * immediately; otherwise `cancel_requested_at` is set and the lease holder\n\t * stops after its current batch. Returns the updated operation.\n\t */\n\tasync requestCancel(id: string): Promise<TransferOperation> {\n\t\tconst cancellable = [...PRE_EXECUTION_IMPORT_STATES, ...EXECUTING_IMPORT_STATES];\n\t\tconst now = timestampNow(this.db);\n\t\tconst immediate = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({\n\t\t\t\tstate: \"cancelled\",\n\t\t\t\tcancel_requested_at: now,\n\t\t\t\tcompleted_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", cancellable)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (immediate) return toOperation(immediate);\n\n\t\tconst flagged = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ cancel_requested_at: now, updated_at: now })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", cancellable)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (flagged) return toOperation(flagged);\n\n\t\tawait this.require(id);\n\t\tthrow new TransferError(\"TRANSFER_INVALID_STATE\", \"Transfer operation cannot be cancelled\");\n\t}\n\n\t/**\n\t * Mark a failed or cancelled import abandoned. Lifts the write fence; never\n\t * deletes imported data.\n\t */\n\tasync abandon(id: string): Promise<TransferOperation> {\n\t\tconst now = timestampNow(this.db);\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ state: \"abandoned\", updated_at: now })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", [\"failed\", \"cancelled\"])\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (row) return toOperation(row);\n\t\tawait this.require(id);\n\t\tthrow new TransferError(\n\t\t\t\"TRANSFER_INVALID_STATE\",\n\t\t\t\"Only a failed or cancelled import can be abandoned\",\n\t\t);\n\t}\n\n\t/**\n\t * Move operations past their `expires_at` to `expired` (pre-execution\n\t * imports and every non-expired export) when no live lease holds them.\n\t * Returns the expired operations so their staging can be collected.\n\t */\n\tasync expireDue(\n\t\tlimit = 50,\n\t): Promise<Array<Pick<TransferOperation, \"id\" | \"kind\" | \"stagingSecret\">>> {\n\t\tconst candidates = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"expires_at\", \"is not\", null)\n\t\t\t.where(timestampIsDue(this.db, \"expires_at\"))\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is\", null),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"export\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"running\", \"complete\", \"failed\"]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.orderBy(\"expires_at\")\n\t\t\t.limit(limit)\n\t\t\t.execute();\n\t\tif (candidates.length === 0) return [];\n\t\tconst now = timestampNow(this.db);\n\t\tconst rows = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ state: \"expired\", updated_at: now, lease_token: null, lease_expires_at: null })\n\t\t\t.where(\n\t\t\t\t\"id\",\n\t\t\t\t\"in\",\n\t\t\t\tcandidates.map((candidate) => candidate.id),\n\t\t\t)\n\t\t\t.where(timestampIsDue(this.db, \"expires_at\"))\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is\", null),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"export\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"running\", \"complete\", \"failed\"]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returning([\"id\", \"kind\", \"staging_secret\"])\n\t\t\t.execute();\n\t\treturn rows.flatMap((row) =>\n\t\t\tisTransferOperationKind(row.kind)\n\t\t\t\t? [{ id: row.id, kind: row.kind, stagingSecret: row.staging_secret }]\n\t\t\t\t: [],\n\t\t);\n\t}\n\n\t/**\n\t * Operations whose staging area can be collected and has not been yet:\n\t * imports in a terminal state, and exports that failed or expired\n\t * (complete exports stay downloadable until they expire). Oldest first.\n\t * A collector deletes staged objects with `TransferStage.deleteSome` until\n\t * it returns 0, deletes child rows with {@link deleteChildRows} until it\n\t * returns 0, then calls {@link markCollected}; a crash anywhere in between\n\t * leaves the operation listed here, so collection resumes.\n\t *\n\t * `importRetentionSeconds` keeps a finished import's staging for that long\n\t * after its last state change; expired imports are listed at once.\n\t */\n\tasync listUncollected(\n\t\tlimit = 20,\n\t\toptions: { importRetentionSeconds?: number } = {},\n\t): Promise<Array<Pick<TransferOperation, \"id\" | \"kind\" | \"state\" | \"stagingSecret\">>> {\n\t\tconst retention = options.importRetentionSeconds ?? 0;\n\t\tconst retainedStates = TERMINAL_IMPORT_STATES.filter((state) => state !== \"expired\");\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.select([\"id\", \"kind\", \"state\", \"staging_secret\"])\n\t\t\t.where(\"staging_collected_at\", \"is\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([eb(\"kind\", \"=\", \"import\"), eb(\"state\", \"=\", \"expired\")]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", retainedStates),\n\t\t\t\t\t\ttimestampIsOlderThan(this.db, \"updated_at\", retention),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([eb(\"kind\", \"=\", \"export\"), eb(\"state\", \"in\", [\"failed\", \"expired\"])]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.orderBy(\"updated_at\")\n\t\t\t.orderBy(\"id\")\n\t\t\t.limit(Math.min(Math.max(limit, 1), 100))\n\t\t\t.execute();\n\t\treturn rows.flatMap((row) =>\n\t\t\tisTransferOperationKind(row.kind) && isTransferOperationState(row.state)\n\t\t\t\t? [{ id: row.id, kind: row.kind, state: row.state, stagingSecret: row.staging_secret }]\n\t\t\t\t: [],\n\t\t);\n\t}\n\n\t/** Record that an operation's staging area and child rows are gone. */\n\tasync markCollected(id: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ staging_collected_at: timestampNow(this.db) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"staging_collected_at\", \"is\", null)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Delete up to `limit` child rows of each child table of an operation\n\t * (staged files, package index, media blobs), one bounded statement per\n\t * table. Returns the number deleted; call until it returns 0. Always drain\n\t * children this way before deleting an operation row: an `ON DELETE\n\t * CASCADE` over millions of child rows in one statement exceeds D1's\n\t * limits.\n\t */\n\tasync deleteChildRows(operationId: string, limit = 500): Promise<number> {\n\t\tconst bounded = Math.min(Math.max(Math.trunc(limit), 1), 5000);\n\t\tconst staged = await sql`\n\t\t\tDELETE FROM _emdash_transfer_staged_files\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND path IN (\n\t\t\t\t\tSELECT path FROM _emdash_transfer_staged_files\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\tconst indexed = await sql`\n\t\t\tDELETE FROM _emdash_transfer_package_index\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND (kind, id) IN (\n\t\t\t\t\tSELECT kind, id FROM _emdash_transfer_package_index\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\tconst blobs = await sql`\n\t\t\tDELETE FROM _emdash_transfer_media_blobs\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND media_id IN (\n\t\t\t\t\tSELECT media_id FROM _emdash_transfer_media_blobs\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\treturn [staged, indexed, blobs].reduce(\n\t\t\t(sum, result) => sum + Number(result.numAffectedRows ?? 0n),\n\t\t\t0,\n\t\t);\n\t}\n\n\t/**\n\t * Delete a collected operation row once it has no child rows left.\n\t * Returns false, deleting nothing, otherwise. Identity-map rows are kept.\n\t */\n\tasync deleteIfChildless(id: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_transfer_operations\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"staging_collected_at\", \"is not\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.and([\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_staged_files\")\n\t\t\t\t\t\t\t\t.select(\"path\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_staged_files.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_package_index\")\n\t\t\t\t\t\t\t\t.select(\"kind\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_package_index.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_media_blobs\")\n\t\t\t\t\t\t\t\t.select(\"media_id\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_media_blobs.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows ?? 0n) > 0;\n\t}\n\n\t/**\n\t * Bump `write_epoch` on every running export. Fenced write paths call this\n\t * so an export's consistency fence notices writes to tables that have no\n\t * `updated_at`. Returns the number of exports touched.\n\t */\n\tasync recordWriteForRunningExports(): Promise<number> {\n\t\treturn bumpRunningExportWriteEpochs(this.db);\n\t}\n\n\t/** Operations newest first, `{ items, nextCursor }` over `(created_at, id)`. */\n\tasync list(\n\t\toptions: {\n\t\t\tkind?: TransferOperationKind;\n\t\t\tcreatedBy?: string;\n\t\t\tlimit?: number;\n\t\t\tcursor?: { createdAt: string; id: string };\n\t\t} = {},\n\t): Promise<{ items: PublicTransferOperation[]; next?: { createdAt: string; id: string } }> {\n\t\tconst limit = Math.min(Math.max(options.limit ?? 50, 1), 100);\n\t\tlet query = this.db.selectFrom(\"_emdash_transfer_operations\").selectAll();\n\t\tif (options.kind) query = query.where(\"kind\", \"=\", options.kind);\n\t\tif (options.createdBy) query = query.where(\"created_by\", \"=\", options.createdBy);\n\t\tconst cursor = options.cursor;\n\t\tif (cursor) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", cursor.createdAt),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", cursor.createdAt), eb(\"id\", \"<\", cursor.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\t\tconst rows = await query\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1)\n\t\t\t.execute();\n\t\tconst items = rows.slice(0, limit).map((row) => toPublicOperation(toOperation(row)));\n\t\tconst last = items.at(-1);\n\t\treturn rows.length > limit && last\n\t\t\t? { items, next: { createdAt: last.createdAt, id: last.id } }\n\t\t\t: { items };\n\t}\n\n\tprivate patchValues(patch: OperationPatch): OperationUpdate {\n\t\tconst values: OperationUpdate = {};\n\t\tif (patch.state !== undefined) values.state = patch.state;\n\t\tif (patch.stage !== undefined) values.stage = patch.stage;\n\t\tif (patch.cursor !== undefined) {\n\t\t\tvalues.cursor =\n\t\t\t\tpatch.cursor === null ? null : JSON.stringify(transferCursorSchema.parse(patch.cursor));\n\t\t}\n\t\tif (patch.progress !== undefined) {\n\t\t\tvalues.progress =\n\t\t\t\tpatch.progress === null\n\t\t\t\t\t? null\n\t\t\t\t\t: JSON.stringify(transferProgressSchema.parse(patch.progress));\n\t\t}\n\t\tif (patch.packageDigest !== undefined) values.package_digest = patch.packageDigest;\n\t\tif (patch.planDigest !== undefined) values.plan_digest = patch.planDigest;\n\t\tif (patch.originSiteId !== undefined) values.origin_site_id = patch.originSiteId;\n\t\tif (patch.markMutationStarted) {\n\t\t\tvalues.mutation_started_at = sql<string>`COALESCE(mutation_started_at, ${timestampNow(this.db)})`;\n\t\t}\n\t\tif (patch.ttlSeconds !== undefined)\n\t\t\tvalues.expires_at = timestampOffset(this.db, patch.ttlSeconds);\n\t\tif (patch.retryError !== undefined) {\n\t\t\tvalues.error_code = patch.retryError?.code ?? null;\n\t\t\tvalues.error_detail =\n\t\t\t\tpatch.retryError?.detail === undefined ? null : JSON.stringify(patch.retryError.detail);\n\t\t}\n\t\treturn values;\n\t}\n\n\tprivate async fencedUpdate(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tvalues: OperationUpdate,\n\t): Promise<TransferOperation> {\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ ...values, updated_at: timestampNow(this.db) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t\t.where(timestampIsLive(this.db, \"lease_expires_at\"))\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (!row) {\n\t\t\tthrow new TransferError(\"TRANSFER_LEASE_LOST\", \"Transfer operation lease was lost\");\n\t\t}\n\t\treturn toOperation(row);\n\t}\n}\n\nfunction defaultTtl(kind: TransferOperationKind): number {\n\treturn kind === \"export\"\n\t\t? TRANSFER_LIMITS.exportTtlSeconds\n\t\t: TRANSFER_LIMITS.pendingImportTtlSeconds;\n}\n","/**\n * Byte-level access to one operation's staging area.\n */\n\nimport type { DownloadResult, Storage } from \"../../storage/types.js\";\nimport { TransferError, isTransferError } from \"../errors.js\";\nimport { createHashingStream, createSha256 } from \"../format/digest.js\";\nimport { stagingAuxKey, stagingKey, type StagingAuxFile } from \"./keys.js\";\n\ntype FixedLengthStreamConstructor = new (\n\texpectedLength: number | bigint,\n) => TransformStream<ArrayBufferView | ArrayBuffer, Uint8Array>;\n\ndeclare const FixedLengthStream: FixedLengthStreamConstructor | undefined;\n\nexport interface ExpectedFile {\n\tbytes: number;\n\t/** Lowercase hex SHA-256. */\n\tsha256: string;\n}\n\nexport interface PutVerifiedOptions {\n\tcontentType?: string;\n\t/**\n\t * Called before deleting the object after a failed upload; return true to\n\t * keep it (the path was already verified by another upload).\n\t */\n\tkeepExistingOnFailure?: () => Promise<boolean>;\n}\n\nconst PACKAGE_CONTENT_TYPE = \"application/octet-stream\";\n\nfunction oversizeError(): TransferError {\n\treturn new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File is larger than declared\");\n}\n\nfunction toStream(body: ReadableStream<Uint8Array> | Uint8Array): ReadableStream<Uint8Array> {\n\tif (body instanceof Uint8Array) {\n\t\treturn new ReadableStream<Uint8Array>({\n\t\t\tstart(controller) {\n\t\t\t\tif (body.byteLength > 0) controller.enqueue(body);\n\t\t\t\tcontroller.close();\n\t\t\t},\n\t\t});\n\t}\n\treturn body;\n}\n\n/**\n * Stream `body` into `key`, hashing and counting as it goes. The object is\n * kept only if exactly `expected.bytes` bytes with digest `expected.sha256`\n * were written; otherwise it is deleted and `TRANSFER_FILE_SIZE_MISMATCH` or\n * `TRANSFER_FILE_DIGEST_MISMATCH` is thrown. Where the runtime provides\n * `FixedLengthStream` (workerd), the upload is wrapped in one so R2 receives\n * a known length.\n *\n * Callers staging a package file must check its staged-files row first and\n * refuse the upload when it is already `verified` and its object still\n * matches, and must pass `keepExistingOnFailure` returning true once the row\n * is verified: a failed retry or concurrent upload of the same path must not\n * delete the object a successful upload stored. A failing upload that\n * already overwrote the object can still leave bad bytes behind a verified\n * row, so readers verify sizes and digests again when they read staged\n * files, and a later upload of that path replaces the bad object.\n */\nexport async function putVerified(\n\tstorage: Storage,\n\tkey: string,\n\tbody: ReadableStream<Uint8Array> | Uint8Array,\n\texpected: ExpectedFile,\n\toptions: PutVerifiedOptions = {},\n): Promise<void> {\n\tconst discard = async () => {\n\t\tif (options.keepExistingOnFailure && (await options.keepExistingOnFailure())) return;\n\t\tawait storage.delete(key).catch(() => undefined);\n\t};\n\tif (!Number.isSafeInteger(expected.bytes) || expected.bytes < 0) {\n\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"Invalid declared size\");\n\t}\n\tconst hasher = await createSha256();\n\tconst hashing = createHashingStream(hasher, {\n\t\tmaxBytes: expected.bytes,\n\t\tonLimitExceeded: oversizeError,\n\t});\n\tlet stream = toStream(body).pipeThrough(hashing.stream);\n\tif (typeof FixedLengthStream !== \"undefined\") {\n\t\tstream = stream.pipeThrough(new FixedLengthStream(expected.bytes));\n\t}\n\n\ttry {\n\t\tawait storage.upload({\n\t\t\tkey,\n\t\t\tbody: stream,\n\t\t\tcontentType: options.contentType ?? PACKAGE_CONTENT_TYPE,\n\t\t});\n\t} catch (error) {\n\t\tawait discard();\n\t\tif (isTransferError(error)) throw error;\n\t\tconst cause = findTransferError(error);\n\t\tif (cause) throw cause;\n\t\tif (hashing.bytes() !== expected.bytes) {\n\t\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File size does not match\", {\n\t\t\t\tcause: error,\n\t\t\t});\n\t\t}\n\t\tthrow new TransferError(\"TRANSFER_STORAGE_ERROR\", \"Failed to store file\", { cause: error });\n\t}\n\n\tconst digest = await hasher.digest();\n\tif (hashing.bytes() !== expected.bytes) {\n\t\tawait discard();\n\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File size does not match\", {\n\t\t\tdetail: { expected: expected.bytes, actual: hashing.bytes() },\n\t\t});\n\t}\n\tif (digest !== expected.sha256) {\n\t\tawait discard();\n\t\tthrow new TransferError(\"TRANSFER_FILE_DIGEST_MISMATCH\", \"File digest does not match\");\n\t}\n}\n\nfunction findTransferError(error: unknown): TransferError | null {\n\tlet current: unknown = error;\n\tfor (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n\t\tif (current instanceof TransferError) return current;\n\t\tcurrent = current.cause;\n\t}\n\treturn null;\n}\n\n/** Read a whole stream, failing once it exceeds `maxBytes`. */\nexport async function readStreamBytes(\n\tstream: ReadableStream<Uint8Array>,\n\tmaxBytes: number,\n): Promise<Uint8Array> {\n\tconst reader = stream.getReader();\n\tconst parts: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tthrow new TransferError(\"TRANSFER_LIMIT_EXCEEDED\", \"File exceeds its size limit\", {\n\t\t\t\t\tdetail: { limit: maxBytes },\n\t\t\t\t});\n\t\t\t}\n\t\t\tparts.push(value);\n\t\t}\n\t} catch (error) {\n\t\tawait reader.cancel().catch(() => undefined);\n\t\tthrow error;\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const part of parts) {\n\t\tbytes.set(part, offset);\n\t\toffset += part.byteLength;\n\t}\n\treturn bytes;\n}\n\n/** One operation's staging area in `storage` under `prefix` (see keys.ts). */\nexport class TransferStage {\n\tconstructor(\n\t\treadonly storage: Storage,\n\t\treadonly prefix: string,\n\t) {}\n\n\tkeyFor(path: string): string {\n\t\treturn stagingKey(this.prefix, path);\n\t}\n\n\tasync putVerified(\n\t\tpath: string,\n\t\tbody: ReadableStream<Uint8Array> | Uint8Array,\n\t\tbytes: number,\n\t\tsha256: string,\n\t\toptions: PutVerifiedOptions = {},\n\t): Promise<void> {\n\t\tawait putVerified(this.storage, this.keyFor(path), body, { bytes, sha256 }, options);\n\t}\n\n\tasync exists(path: string): Promise<boolean> {\n\t\treturn this.storage.exists(this.keyFor(path));\n\t}\n\n\tasync open(path: string): Promise<DownloadResult> {\n\t\ttry {\n\t\t\treturn await this.storage.download(this.keyFor(path));\n\t\t} catch (error) {\n\t\t\tthrow new TransferError(\"TRANSFER_FILE_MISSING\", \"Staged file is missing\", {\n\t\t\t\tdetail: { path },\n\t\t\t\tcause: error,\n\t\t\t});\n\t\t}\n\t}\n\n\tasync readBytes(path: string, maxBytes: number): Promise<Uint8Array> {\n\t\tconst file = await this.open(path);\n\t\treturn readStreamBytes(file.body, maxBytes);\n\t}\n\n\tasync putAux(file: StagingAuxFile, content: string): Promise<void> {\n\t\tawait this.storage.upload({\n\t\t\tkey: stagingAuxKey(this.prefix, file),\n\t\t\tbody: new TextEncoder().encode(content),\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\t}\n\n\tasync readAux(file: StagingAuxFile, maxBytes: number): Promise<string | null> {\n\t\tconst key = stagingAuxKey(this.prefix, file);\n\t\tif (!(await this.storage.exists(key))) return null;\n\t\tconst download = await this.storage.download(key);\n\t\treturn new TextDecoder().decode(await readStreamBytes(download.body, maxBytes));\n\t}\n\n\t/**\n\t * Delete up to `limit` staged objects. Returns the number deleted; call\n\t * again until it returns 0.\n\t */\n\tasync deleteSome(limit = 100): Promise<number> {\n\t\tconst listing = await this.storage.list({ prefix: this.prefix, limit });\n\t\tfor (const file of listing.files) await this.storage.delete(file.key);\n\t\treturn listing.files.length;\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2FA,SAAgB,kBAAkB,WAAuD;CACxF,MAAM,EAAE,eAAe,SAAS,YAAY,QAAQ,GAAG,SAAS;AAChE,QAAO;;AAuCR,MAAM,6BAA6B;AAEnC,SAAS,UAAU,OAA+B;AACjD,KAAI,UAAU,KAAM,QAAO;AAC3B,QAAO,KAAK,MAAM,MAAM;;AAGzB,SAAS,YAAY,KAAsC;CAC1D,MAAM,EAAE,MAAM,UAAU;AACxB,KAAI,CAAC,wBAAwB,KAAK,IAAI,CAAC,yBAAyB,MAAM,CACrE,OAAM,IAAI,cAAc,0BAA0B,2CAA2C;CAE9F,MAAM,SAAS,UAAU,IAAI,OAAO;CACpC,MAAM,WAAW,UAAU,IAAI,SAAS;CACxC,MAAM,UAAU,UAAU,IAAI,QAAQ;CACtC,MAAM,cAAc,UAAU,IAAI,aAAa;AAC/C,QAAO;EACN,IAAI,IAAI;EACR;EACA;EACA,OAAO,IAAI;EACX,QAAQ,WAAW,OAAO,OAAO,qBAAqB,MAAM,OAAO;EACnE,UAAU,aAAa,OAAO,OAAO,uBAAuB,MAAM,SAAS;EAC3E,SAAS,UAAU,IAAI,QAAQ;EAC/B,gBAAgB,IAAI;EACpB,eAAe,eAAe,IAAI,eAAe,GAAG,IAAI,iBAAiB;EACzE,YAAY,eAAe,IAAI,YAAY,GAAG,IAAI,cAAc;EAChE,cAAc,IAAI;EAClB,eAAe,IAAI;EACnB,SAAS,YAAY,OAAO,OAAO,wBAAwB,MAAM,QAAQ;EACzE,WAAW,IAAI;EACf,aAAa,gBAAgB,OAAO,OAAO,0BAA0B,MAAM,YAAY;EACvF,YAAY,OAAO,IAAI,YAAY;EACnC,cAAc,OAAO,IAAI,cAAc;EACvC,YAAY,IAAI;EAChB,gBAAgB,IAAI;EACpB,mBAAmB,OAAO,IAAI,mBAAmB;EACjD,mBAAmB,IAAI;EACvB,mBAAmB,IAAI;EACvB,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,WAAW,IAAI;EACf,oBAAoB,IAAI;EACxB;;AAGF,SAAgB,sBAA8B;CAC7C,MAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;AAGhF,IAAa,8BAAb,MAAyC;CACxC,YAAY,AAAiB,IAAsB;EAAtB;;CAE7B,MAAM,IAAI,IAA+C;EACxD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;CAGjC,MAAM,QAAQ,IAAwC;EACrD,MAAM,YAAY,MAAM,KAAK,IAAI,GAAG;AACpC,MAAI,CAAC,UACJ,OAAM,IAAI,cAAc,gCAAgC,+BAA+B;AAExF,SAAO;;;;;;;;;CAUR,MAAM,OACL,OAC8D;AAC9D,MACC,MAAM,mBAAmB,WACxB,MAAM,eAAe,WAAW,KAChC,MAAM,eAAe,SAAS,4BAE/B,OAAM,IAAI,cAAc,iCAAiC,0BAA0B;AAGpF,MAAI,MAAM,mBAAmB,QAAW;GACvC,MAAM,WAAW,MAAM,KAAK,qBAAqB,MAAM;AACvD,OAAI,SAAU,QAAO;IAAE,WAAW;IAAU,SAAS;IAAO;;EAG7D,MAAM,KAAK,MAAM;EACjB,MAAM,WAAW,MAAM,KAAK,GAC1B,WAAW,8BAA8B,CACzC,OAAO;GACP;GACA,MAAM,MAAM;GACZ,OAAO,MAAM,SAAS,WAAW,YAAY;GAC7C,iBAAiB,MAAM,kBAAkB;GACzC,gBAAgB,MAAM,iBAAiB;GACvC,gBAAgB,MAAM,gBAAgB;GACtC,SAAS,MAAM,YAAY,SAAY,OAAO,KAAK,UAAU,MAAM,QAAQ;GAC3E,gBAAgB,qBAAqB;GACrC,oBAAoB;GACpB,YAAY,MAAM;GAClB,YAAY,gBAAgB,KAAK,IAAI,MAAM,cAAc,WAAW,MAAM,KAAK,CAAC;GAChF,OAAO;GACP,QAAQ;GACR,UAAU;GACV,aAAa;GACb,SAAS;GACT,YAAY;GACZ,cAAc;GACd,aAAa;GACb,kBAAkB;GAClB,qBAAqB;GACrB,qBAAqB;GACrB,cAAc;GACd,sBAAsB;GACtB,CAAC,CACD,YAAY,aAAa,SAAS,WAAW,CAAC,CAC9C,cAAc,CACd,kBAAkB;AACpB,MAAI,SAAU,QAAO;GAAE,WAAW,YAAY,SAAS;GAAE,SAAS;GAAM;AAExE,MAAI,MAAM,mBAAmB,QAAW;GACvC,MAAM,WAAW,MAAM,KAAK,qBAAqB,MAAM;AACvD,OAAI,SAAU,QAAO;IAAE,WAAW;IAAU,SAAS;IAAO;;AAE7D,QAAM,IAAI,cACT,+BACA,qDACA;;CAGF,MAAc,qBACb,OACoC;EACpC,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,cAAc,KAAK,MAAM,UAAU,CACzC,MAAM,QAAQ,KAAK,MAAM,KAAK,CAC9B,MAAM,mBAAmB,KAAK,MAAM,kBAAkB,GAAG,CACzD,kBAAkB;AACpB,MAAI,CAAC,IAAK,QAAO;AACjB,MACC,MAAM,kBAAkB,UACxB,IAAI,mBAAmB,QACvB,IAAI,mBAAmB,MAAM,cAE7B,OAAM,IAAI,cACT,iCACA,2DACA;AAEF,SAAO,YAAY,IAAI;;;CAIxB,MAAM,sBAAyD;EAC9D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,QAAQ,KAAK,SAAS,CAC5B,OAAO,OACP,GAAG,GAAG,CACL,GAAG,SAAS,MAAM,CAAC,GAAG,6BAA6B,GAAG,wBAAwB,CAAC,EAC/E,GAAG,IAAI,CACN,GAAG,SAAS,MAAM,CAAC,UAAU,YAAY,CAAC,EAC1C,GAAG,uBAAuB,UAAU,KAAK,CACzC,CAAC,CACF,CAAC,CACF,CACA,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;;;;;;;CASjC,MAAM,MACL,IACA,QACA,UAAqC,EAAE,EAChB;EACvB,MAAM,aAAa,MAAM;EACzB,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GACJ,aAAa;GACb,kBAAkB,gBACjB,KAAK,IACL,QAAQ,gBAAgB,gBAAgB,aACxC;GACD,eAAe,GAAW;GAC1B,YAAY;GACZ,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,SAAS,MAAM,CAAC,GAAG,OAAO,CAAC,CACjC,MAAM,sBAAsB,KAAK,4BAA4B,CAC7D,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,IAAK,QAAO;GAAE,SAAS;GAAW,WAAW,YAAY,IAAI;GAAE;GAAY;EAE/E,MAAM,UAAU,MAAM,KAAK,QAAQ,GAAG;AACtC,MAAI,QAAQ,sBAAsB,4BACjC,OAAM,IAAI,cACT,6BACA,mEACA;AAEF,MAAI,CAAC,OAAO,SAAS,QAAQ,MAAM,CAAE,QAAO;GAAE,SAAS;GAAiB,WAAW;GAAS;AAC5F,SAAO;GAAE,SAAS;GAAgB,WAAW;GAAS;;;;;;CAOvD,MAAM,QAAQ,IAAY,YAAoB,OAAmD;AAChG,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,kBAAkB,gBAAgB,KAAK,IAAI,gBAAgB,aAAa;GACxE,CAAC;;;CAIH,MAAM,QACL,IACA,YACA,QAAwB,EAAE,EACG;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,aAAa;GACb,kBAAkB;GAClB,CAAC;;;;;;;CAQH,MAAM,uBACL,IACA,YACA,OACA,QAAuC,EAAE,EACZ;EAC7B,MAAM,MAAM,aAAa,KAAK,GAAG;AACjC,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,OAAO,GAAW,8CAA8C,MAAM;GACtE,cAAc,GAEb,gEAAgE,IAAI;GACrE,aAAa;GACb,kBAAkB;GAClB,CAAC;;CAGH,MAAM,SACL,IACA,YACA,SAA4F,EAAE,EACjE;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,SAAS,OAAO,YAAY,SAAY,SAAY,KAAK,UAAU,OAAO,QAAQ;GAClF,UAAU,OAAO,aAAa,SAAY,SAAY,KAAK,UAAU,OAAO,SAAS;GACrF,cAAc,aAAa,KAAK,GAAG;GACnC,YACC,OAAO,eAAe,SAAY,SAAY,gBAAgB,KAAK,IAAI,OAAO,WAAW;GAC1F,aAAa;GACb,kBAAkB;GAClB,CAAC;;CAGH,MAAM,KACL,IACA,YACA,OAC6B;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,YAAY,MAAM;GAClB,cAAc,MAAM,WAAW,SAAY,OAAO,KAAK,UAAU,MAAM,OAAO;GAC9E,cAAc,aAAa,KAAK,GAAG;GACnC,aAAa;GACb,kBAAkB;GAClB,CAAC;;;CAIH,MAAM,gBAAgB,IAAY,YAAgD;AACjF,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,cAAc,aAAa,KAAK,GAAG;GACnC,aAAa;GACb,kBAAkB;GAClB,CAAC;;;;;;;CAQH,MAAM,cAAc,IAAwC;EAC3D,MAAM,cAAc,CAAC,GAAG,6BAA6B,GAAG,wBAAwB;EAChF,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,YAAY,MAAM,KAAK,GAC3B,YAAY,8BAA8B,CAC1C,IAAI;GACJ,OAAO;GACP,qBAAqB;GACrB,cAAc;GACd,YAAY;GACZ,aAAa;GACb,kBAAkB;GAClB,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,YAAY,CACjC,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,UAAW,QAAO,YAAY,UAAU;EAE5C,MAAM,UAAU,MAAM,KAAK,GACzB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,qBAAqB;GAAK,YAAY;GAAK,CAAC,CAClD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,YAAY,CACjC,cAAc,CACd,kBAAkB;AACpB,MAAI,QAAS,QAAO,YAAY,QAAQ;AAExC,QAAM,KAAK,QAAQ,GAAG;AACtB,QAAM,IAAI,cAAc,0BAA0B,yCAAyC;;;;;;CAO5F,MAAM,QAAQ,IAAwC;EACrD,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,OAAO;GAAa,YAAY;GAAK,CAAC,CAC5C,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,CAAC,UAAU,YAAY,CAAC,CAC7C,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,IAAK,QAAO,YAAY,IAAI;AAChC,QAAM,KAAK,QAAQ,GAAG;AACtB,QAAM,IAAI,cACT,0BACA,qDACA;;;;;;;CAQF,MAAM,UACL,QAAQ,IACmE;EAC3E,MAAM,aAAa,MAAM,KAAK,GAC5B,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,cAAc,UAAU,KAAK,CACnC,MAAM,eAAe,KAAK,IAAI,aAAa,CAAC,CAC5C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI;GACN,GAAG,QAAQ,KAAK,SAAS;GACzB,GAAG,SAAS,MAAM,CAAC,GAAG,4BAA4B,CAAC;GACnD,GAAG,uBAAuB,MAAM,KAAK;GACrC,CAAC,EACF,GAAG,IAAI,CACN,GAAG,QAAQ,KAAK,SAAS,EACzB,GAAG,SAAS,MAAM;GAAC;GAAW;GAAW;GAAY;GAAS,CAAC,CAC/D,CAAC,CACF,CAAC,CACF,CACA,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,QAAQ,aAAa,CACrB,MAAM,MAAM,CACZ,SAAS;AACX,MAAI,WAAW,WAAW,EAAG,QAAO,EAAE;EACtC,MAAM,MAAM,aAAa,KAAK,GAAG;AAyBjC,UAxBa,MAAM,KAAK,GACtB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,OAAO;GAAW,YAAY;GAAK,aAAa;GAAM,kBAAkB;GAAM,CAAC,CACrF,MACA,MACA,MACA,WAAW,KAAK,cAAc,UAAU,GAAG,CAC3C,CACA,MAAM,eAAe,KAAK,IAAI,aAAa,CAAC,CAC5C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI;GACN,GAAG,QAAQ,KAAK,SAAS;GACzB,GAAG,SAAS,MAAM,CAAC,GAAG,4BAA4B,CAAC;GACnD,GAAG,uBAAuB,MAAM,KAAK;GACrC,CAAC,EACF,GAAG,IAAI,CACN,GAAG,QAAQ,KAAK,SAAS,EACzB,GAAG,SAAS,MAAM;GAAC;GAAW;GAAW;GAAY;GAAS,CAAC,CAC/D,CAAC,CACF,CAAC,CACF,CACA,UAAU;GAAC;GAAM;GAAQ;GAAiB,CAAC,CAC3C,SAAS,EACC,SAAS,QACpB,wBAAwB,IAAI,KAAK,GAC9B,CAAC;GAAE,IAAI,IAAI;GAAI,MAAM,IAAI;GAAM,eAAe,IAAI;GAAgB,CAAC,GACnE,EAAE,CACL;;;;;;;;;;;;;;CAeF,MAAM,gBACL,QAAQ,IACR,UAA+C,EAAE,EACoC;EACrF,MAAM,YAAY,QAAQ,0BAA0B;EACpD,MAAM,iBAAiB,uBAAuB,QAAQ,UAAU,UAAU,UAAU;AA2BpF,UA1Ba,MAAM,KAAK,GACtB,WAAW,8BAA8B,CACzC,OAAO;GAAC;GAAM;GAAQ;GAAS;GAAiB,CAAC,CACjD,MAAM,wBAAwB,MAAM,KAAK,CACzC,OAAO,OACP,GAAG,GAAG;GACL,GAAG,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,EAAE,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC;GAChE,GAAG,IAAI;IACN,GAAG,QAAQ,KAAK,SAAS;IACzB,GAAG,SAAS,MAAM,eAAe;IACjC,qBAAqB,KAAK,IAAI,cAAc,UAAU;IACtD,CAAC;GACF,GAAG,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,EAAE,GAAG,SAAS,MAAM,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC;GAC7E,CAAC,CACF,CACA,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,QAAQ,aAAa,CACrB,QAAQ,KAAK,CACb,MAAM,KAAK,IAAI,KAAK,IAAI,OAAO,EAAE,EAAE,IAAI,CAAC,CACxC,SAAS,EACC,SAAS,QACpB,wBAAwB,IAAI,KAAK,IAAI,yBAAyB,IAAI,MAAM,GACrE,CAAC;GAAE,IAAI,IAAI;GAAI,MAAM,IAAI;GAAM,OAAO,IAAI;GAAO,eAAe,IAAI;GAAgB,CAAC,GACrF,EAAE,CACL;;;CAIF,MAAM,cAAc,IAA2B;AAC9C,QAAM,KAAK,GACT,YAAY,8BAA8B,CAC1C,IAAI,EAAE,sBAAsB,aAAa,KAAK,GAAG,EAAE,CAAC,CACpD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,wBAAwB,MAAM,KAAK,CACzC,SAAS;;;;;;;;;;CAWZ,MAAM,gBAAgB,aAAqB,QAAQ,KAAsB;EACxE,MAAM,UAAU,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,MAAM,EAAE,EAAE,EAAE,IAAK;AA4B9D,SAAO;GA3BQ,MAAM,GAAG;;0BAEA,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACF,MAAM,GAAG;;0BAED,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACJ,MAAM,GAAG;;0BAEC,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACa,CAAC,QAC9B,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB,GAAG,EAC3D,EACA;;;;;;CAOF,MAAM,kBAAkB,IAA8B;EACrD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,8BAA8B,CACzC,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,wBAAwB,UAAU,KAAK,CAC7C,OAAO,OACP,GAAG,IAAI;GACN,GAAG,IACF,GAAG,OACF,GACE,WAAW,gCAAgC,CAC3C,OAAO,OAAO,CACd,MAAM,8CAA8C,KAAK,GAAG,CAC9D,CACD;GACD,GAAG,IACF,GAAG,OACF,GACE,WAAW,iCAAiC,CAC5C,OAAO,OAAO,CACd,MAAM,+CAA+C,KAAK,GAAG,CAC/D,CACD;GACD,GAAG,IACF,GAAG,OACF,GACE,WAAW,+BAA+B,CAC1C,OAAO,WAAW,CAClB,MAAM,6CAA6C,KAAK,GAAG,CAC7D,CACD;GACD,CAAC,CACF,CACA,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,GAAG,GAAG;;;;;;;CAQ9C,MAAM,+BAAgD;AACrD,SAAO,6BAA6B,KAAK,GAAG;;;CAI7C,MAAM,KACL,UAKI,EAAE,EACoF;EAC1F,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,SAAS,IAAI,EAAE,EAAE,IAAI;EAC7D,IAAI,QAAQ,KAAK,GAAG,WAAW,8BAA8B,CAAC,WAAW;AACzE,MAAI,QAAQ,KAAM,SAAQ,MAAM,MAAM,QAAQ,KAAK,QAAQ,KAAK;AAChE,MAAI,QAAQ,UAAW,SAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ,UAAU;EAChF,MAAM,SAAS,QAAQ;AACvB,MAAI,OACH,SAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,OAAO,UAAU,EACvC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,OAAO,UAAU,EAAE,GAAG,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC,CAC3E,CAAC,CACF;EAEF,MAAM,OAAO,MAAM,MACjB,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE,CAChB,SAAS;EACX,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,kBAAkB,YAAY,IAAI,CAAC,CAAC;EACpF,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,SAAO,KAAK,SAAS,SAAS,OAC3B;GAAE;GAAO,MAAM;IAAE,WAAW,KAAK;IAAW,IAAI,KAAK;IAAI;GAAE,GAC3D,EAAE,OAAO;;CAGb,AAAQ,YAAY,OAAwC;EAC3D,MAAM,SAA0B,EAAE;AAClC,MAAI,MAAM,UAAU,OAAW,QAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,UAAU,OAAW,QAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,WAAW,OACpB,QAAO,SACN,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,qBAAqB,MAAM,MAAM,OAAO,CAAC;AAEzF,MAAI,MAAM,aAAa,OACtB,QAAO,WACN,MAAM,aAAa,OAChB,OACA,KAAK,UAAU,uBAAuB,MAAM,MAAM,SAAS,CAAC;AAEjE,MAAI,MAAM,kBAAkB,OAAW,QAAO,iBAAiB,MAAM;AACrE,MAAI,MAAM,eAAe,OAAW,QAAO,cAAc,MAAM;AAC/D,MAAI,MAAM,iBAAiB,OAAW,QAAO,iBAAiB,MAAM;AACpE,MAAI,MAAM,oBACT,QAAO,sBAAsB,GAAW,iCAAiC,aAAa,KAAK,GAAG,CAAC;AAEhG,MAAI,MAAM,eAAe,OACxB,QAAO,aAAa,gBAAgB,KAAK,IAAI,MAAM,WAAW;AAC/D,MAAI,MAAM,eAAe,QAAW;AACnC,UAAO,aAAa,MAAM,YAAY,QAAQ;AAC9C,UAAO,eACN,MAAM,YAAY,WAAW,SAAY,OAAO,KAAK,UAAU,MAAM,WAAW,OAAO;;AAEzF,SAAO;;CAGR,MAAc,aACb,IACA,YACA,QAC6B;EAC7B,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,GAAG;GAAQ,YAAY,aAAa,KAAK,GAAG;GAAE,CAAC,CACrD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,KAAK,IAAI,mBAAmB,CAAC,CACnD,cAAc,CACd,kBAAkB;AACpB,MAAI,CAAC,IACJ,OAAM,IAAI,cAAc,uBAAuB,oCAAoC;AAEpF,SAAO,YAAY,IAAI;;;AAIzB,SAAS,WAAW,MAAqC;AACxD,QAAO,SAAS,WACb,gBAAgB,mBAChB,gBAAgB;;;;;AC1yBpB,MAAM,uBAAuB;AAE7B,SAAS,gBAA+B;AACvC,QAAO,IAAI,cAAc,+BAA+B,+BAA+B;;AAGxF,SAAS,SAAS,MAA2E;AAC5F,KAAI,gBAAgB,WACnB,QAAO,IAAI,eAA2B,EACrC,MAAM,YAAY;AACjB,MAAI,KAAK,aAAa,EAAG,YAAW,QAAQ,KAAK;AACjD,aAAW,OAAO;IAEnB,CAAC;AAEH,QAAO;;;;;;;;;;;;;;;;;;;AAoBR,eAAsB,YACrB,SACA,KACA,MACA,UACA,UAA8B,EAAE,EAChB;CAChB,MAAM,UAAU,YAAY;AAC3B,MAAI,QAAQ,yBAA0B,MAAM,QAAQ,uBAAuB,CAAG;AAC9E,QAAM,QAAQ,OAAO,IAAI,CAAC,YAAY,OAAU;;AAEjD,KAAI,CAAC,OAAO,cAAc,SAAS,MAAM,IAAI,SAAS,QAAQ,EAC7D,OAAM,IAAI,cAAc,+BAA+B,wBAAwB;CAEhF,MAAM,SAAS,MAAM,cAAc;CACnC,MAAM,UAAU,oBAAoB,QAAQ;EAC3C,UAAU,SAAS;EACnB,iBAAiB;EACjB,CAAC;CACF,IAAI,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO;AACvD,KAAI,OAAO,sBAAsB,YAChC,UAAS,OAAO,YAAY,IAAI,kBAAkB,SAAS,MAAM,CAAC;AAGnE,KAAI;AACH,QAAM,QAAQ,OAAO;GACpB;GACA,MAAM;GACN,aAAa,QAAQ,eAAe;GACpC,CAAC;UACM,OAAO;AACf,QAAM,SAAS;AACf,MAAI,gBAAgB,MAAM,CAAE,OAAM;EAClC,MAAM,QAAQ,kBAAkB,MAAM;AACtC,MAAI,MAAO,OAAM;AACjB,MAAI,QAAQ,OAAO,KAAK,SAAS,MAChC,OAAM,IAAI,cAAc,+BAA+B,4BAA4B,EAClF,OAAO,OACP,CAAC;AAEH,QAAM,IAAI,cAAc,0BAA0B,wBAAwB,EAAE,OAAO,OAAO,CAAC;;CAG5F,MAAM,SAAS,MAAM,OAAO,QAAQ;AACpC,KAAI,QAAQ,OAAO,KAAK,SAAS,OAAO;AACvC,QAAM,SAAS;AACf,QAAM,IAAI,cAAc,+BAA+B,4BAA4B,EAClF,QAAQ;GAAE,UAAU,SAAS;GAAO,QAAQ,QAAQ,OAAO;GAAE,EAC7D,CAAC;;AAEH,KAAI,WAAW,SAAS,QAAQ;AAC/B,QAAM,SAAS;AACf,QAAM,IAAI,cAAc,iCAAiC,6BAA6B;;;AAIxF,SAAS,kBAAkB,OAAsC;CAChE,IAAI,UAAmB;AACvB,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AACnE,MAAI,mBAAmB,cAAe,QAAO;AAC7C,YAAU,QAAQ;;AAEnB,QAAO;;;AAIR,eAAsB,gBACrB,QACA,UACsB;CACtB,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,QAAsB,EAAE;CAC9B,IAAI,QAAQ;AACZ,KAAI;AACH,WAAS;GACR,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,OAAI,KAAM;AACV,YAAS,MAAM;AACf,OAAI,QAAQ,SACX,OAAM,IAAI,cAAc,2BAA2B,+BAA+B,EACjF,QAAQ,EAAE,OAAO,UAAU,EAC3B,CAAC;AAEH,SAAM,KAAK,MAAM;;UAEV,OAAO;AACf,QAAM,OAAO,QAAQ,CAAC,YAAY,OAAU;AAC5C,QAAM;WACG;AACT,SAAO,aAAa;;CAErB,MAAM,QAAQ,IAAI,WAAW,MAAM;CACnC,IAAI,SAAS;AACb,MAAK,MAAM,QAAQ,OAAO;AACzB,QAAM,IAAI,MAAM,OAAO;AACvB,YAAU,KAAK;;AAEhB,QAAO;;;AAIR,IAAa,gBAAb,MAA2B;CAC1B,YACC,AAAS,SACT,AAAS,QACR;EAFQ;EACA;;CAGV,OAAO,MAAsB;AAC5B,SAAO,WAAW,KAAK,QAAQ,KAAK;;CAGrC,MAAM,YACL,MACA,MACA,OACA,QACA,UAA8B,EAAE,EAChB;AAChB,QAAM,YAAY,KAAK,SAAS,KAAK,OAAO,KAAK,EAAE,MAAM;GAAE;GAAO;GAAQ,EAAE,QAAQ;;CAGrF,MAAM,OAAO,MAAgC;AAC5C,SAAO,KAAK,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC;;CAG9C,MAAM,KAAK,MAAuC;AACjD,MAAI;AACH,UAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,OAAO,KAAK,CAAC;WAC7C,OAAO;AACf,SAAM,IAAI,cAAc,yBAAyB,0BAA0B;IAC1E,QAAQ,EAAE,MAAM;IAChB,OAAO;IACP,CAAC;;;CAIJ,MAAM,UAAU,MAAc,UAAuC;AAEpE,SAAO,iBADM,MAAM,KAAK,KAAK,KAAK,EACN,MAAM,SAAS;;CAG5C,MAAM,OAAO,MAAsB,SAAgC;AAClE,QAAM,KAAK,QAAQ,OAAO;GACzB,KAAK,cAAc,KAAK,QAAQ,KAAK;GACrC,MAAM,IAAI,aAAa,CAAC,OAAO,QAAQ;GACvC,aAAa;GACb,CAAC;;CAGH,MAAM,QAAQ,MAAsB,UAA0C;EAC7E,MAAM,MAAM,cAAc,KAAK,QAAQ,KAAK;AAC5C,MAAI,CAAE,MAAM,KAAK,QAAQ,OAAO,IAAI,CAAG,QAAO;EAC9C,MAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,IAAI;AACjD,SAAO,IAAI,aAAa,CAAC,OAAO,MAAM,gBAAgB,SAAS,MAAM,SAAS,CAAC;;;;;;CAOhF,MAAM,WAAW,QAAQ,KAAsB;EAC9C,MAAM,UAAU,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ,KAAK;GAAQ;GAAO,CAAC;AACvE,OAAK,MAAM,QAAQ,QAAQ,MAAO,OAAM,KAAK,QAAQ,OAAO,KAAK,IAAI;AACrE,SAAO,QAAQ,MAAM"}
+{"version":3,"file":"stage-CZQnXM_G.mjs","names":[],"sources":["../src/transfer/ops/operations.ts","../src/transfer/staging/stage.ts"],"sourcesContent":["/**\n * Transfer operation rows: creation, lease claims, and lease-fenced state\n * writes.\n *\n * Every step of a running operation happens under a lease: `claim` is one\n * `UPDATE … WHERE lease is free … RETURNING` statement that installs a fresh\n * ULID lease token, and every later write is fenced on that token and on the\n * lease still being live. A caller that loses its lease (expiry, another\n * caller took over) gets `TRANSFER_LEASE_LOST` and must stop without writing.\n */\n\nimport { sql, type Kysely, type Selectable, type UpdateObject } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport type { Database, TransferOperationTable } from \"../../database/types.js\";\nimport {\n\tTransferError,\n\ttransferErrorDetailSchema,\n\ttype TransferErrorCode,\n\ttype TransferErrorDetail,\n} from \"../errors.js\";\nimport { bumpRunningExportWriteEpochs } from \"../fence.js\";\nimport { isSha256Digest, type Sha256Digest } from \"../format/digest.js\";\nimport { TRANSFER_LIMITS } from \"../format/limits.js\";\nimport { siteImportReceiptSchema, type SiteImportReceipt } from \"../format/receipt.js\";\nimport {\n\tEXECUTING_IMPORT_STATES,\n\tisTransferOperationKind,\n\tisTransferOperationState,\n\tPRE_EXECUTION_IMPORT_STATES,\n\tTERMINAL_IMPORT_STATES,\n\tTRANSFER_RUNTIME_GENERATION,\n\ttransferCursorSchema,\n\ttransferProgressSchema,\n\ttype TransferCursor,\n\ttype TransferOperationKind,\n\ttype TransferOperationState,\n\ttype TransferProgress,\n} from \"./states.js\";\nimport {\n\ttimestampIsDue,\n\ttimestampIsLive,\n\ttimestampIsOlderThan,\n\ttimestampNow,\n\ttimestampOffset,\n} from \"./time.js\";\n\ntype OperationRow = Selectable<TransferOperationTable>;\ntype OperationUpdate = UpdateObject<Database, \"_emdash_transfer_operations\">;\n\nexport interface TransferOperation {\n\tid: string;\n\tkind: TransferOperationKind;\n\tstate: TransferOperationState;\n\tstage: string | null;\n\tcursor: TransferCursor | null;\n\tprogress: TransferProgress | null;\n\toptions: unknown;\n\tidempotencyKey: string | null;\n\tpackageDigest: Sha256Digest | null;\n\tplanDigest: Sha256Digest | null;\n\toriginSiteId: string | null;\n\t/**\n\t * 128-bit hex secret in the operation's staging prefix. Internal only:\n\t * serialize operations for clients with {@link toPublicOperation}.\n\t */\n\tstagingSecret: string;\n\treceipt: SiteImportReceipt | null;\n\terrorCode: string | null;\n\terrorDetail: TransferErrorDetail | null;\n\twriteEpoch: number;\n\tattemptCount: number;\n\tleaseToken: string | null;\n\tleaseExpiresAt: string | null;\n\truntimeGeneration: number;\n\tcancelRequestedAt: string | null;\n\tmutationStartedAt: string | null;\n\tcreatedBy: string;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\tcompletedAt: string | null;\n\texpiresAt: string | null;\n\tstagingCollectedAt: string | null;\n}\n\n/**\n * An operation as it may be shown to API clients: without the staging secret\n * and lease token.\n */\nexport type PublicTransferOperation = Omit<TransferOperation, \"stagingSecret\" | \"leaseToken\">;\n\nexport function toPublicOperation(operation: TransferOperation): PublicTransferOperation {\n\tconst { stagingSecret: _secret, leaseToken: _lease, ...rest } = operation;\n\treturn rest;\n}\n\nexport interface CreateTransferOperationInput {\n\tkind: TransferOperationKind;\n\tcreatedBy: string;\n\tidempotencyKey?: string;\n\t/** For imports, the digest of the manifest the operation was created with. */\n\tpackageDigest?: Sha256Digest;\n\toriginSiteId?: string;\n\toptions?: unknown;\n\t/** Seconds until the operation expires if it does not finish. */\n\tttlSeconds?: number;\n}\n\nexport type ClaimResult =\n\t| { outcome: \"claimed\"; operation: TransferOperation; leaseToken: string }\n\t| { outcome: \"lease_active\"; operation: TransferOperation }\n\t| { outcome: \"invalid_state\"; operation: TransferOperation };\n\nexport interface OperationPatch {\n\tstate?: TransferOperationState;\n\tstage?: string | null;\n\tcursor?: TransferCursor | null;\n\tprogress?: TransferProgress | null;\n\tpackageDigest?: Sha256Digest;\n\tplanDigest?: Sha256Digest | null;\n\toriginSiteId?: string;\n\t/** Record that the importer is about to write to the target (idempotent). */\n\tmarkMutationStarted?: true;\n\t/** Reset `expires_at` to now + this many seconds. */\n\tttlSeconds?: number;\n\t/**\n\t * Record the retryable failure of the last step on a non-terminal\n\t * operation in `error_code`/`error_detail`, or clear it with null.\n\t */\n\tretryError?: { code: TransferErrorCode; detail?: TransferErrorDetail } | null;\n}\n\nconst MAX_IDEMPOTENCY_KEY_LENGTH = 255;\n\nfunction parseJson(value: string | null): unknown {\n\tif (value === null) return null;\n\treturn JSON.parse(value);\n}\n\nfunction toOperation(row: OperationRow): TransferOperation {\n\tconst { kind, state } = row;\n\tif (!isTransferOperationKind(kind) || !isTransferOperationState(state)) {\n\t\tthrow new TransferError(\"TRANSFER_INVALID_STATE\", \"Unknown transfer operation kind or state\");\n\t}\n\tconst cursor = parseJson(row.cursor);\n\tconst progress = parseJson(row.progress);\n\tconst receipt = parseJson(row.receipt);\n\tconst errorDetail = parseJson(row.error_detail);\n\treturn {\n\t\tid: row.id,\n\t\tkind,\n\t\tstate,\n\t\tstage: row.stage,\n\t\tcursor: cursor === null ? null : transferCursorSchema.parse(cursor),\n\t\tprogress: progress === null ? null : transferProgressSchema.parse(progress),\n\t\toptions: parseJson(row.options),\n\t\tidempotencyKey: row.idempotency_key,\n\t\tpackageDigest: isSha256Digest(row.package_digest) ? row.package_digest : null,\n\t\tplanDigest: isSha256Digest(row.plan_digest) ? row.plan_digest : null,\n\t\toriginSiteId: row.origin_site_id,\n\t\tstagingSecret: row.staging_secret,\n\t\treceipt: receipt === null ? null : siteImportReceiptSchema.parse(receipt),\n\t\terrorCode: row.error_code,\n\t\terrorDetail: errorDetail === null ? null : transferErrorDetailSchema.parse(errorDetail),\n\t\twriteEpoch: Number(row.write_epoch),\n\t\tattemptCount: Number(row.attempt_count),\n\t\tleaseToken: row.lease_token,\n\t\tleaseExpiresAt: row.lease_expires_at,\n\t\truntimeGeneration: Number(row.runtime_generation),\n\t\tcancelRequestedAt: row.cancel_requested_at,\n\t\tmutationStartedAt: row.mutation_started_at,\n\t\tcreatedBy: row.created_by,\n\t\tcreatedAt: row.created_at,\n\t\tupdatedAt: row.updated_at,\n\t\tcompletedAt: row.completed_at,\n\t\texpiresAt: row.expires_at,\n\t\tstagingCollectedAt: row.staging_collected_at,\n\t};\n}\n\nexport function createStagingSecret(): string {\n\tconst bytes = new Uint8Array(16);\n\tcrypto.getRandomValues(bytes);\n\treturn Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport class TransferOperationRepository {\n\tconstructor(private readonly db: Kysely<Database>) {}\n\n\tasync get(id: string): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toOperation(row) : null;\n\t}\n\n\tasync require(id: string): Promise<TransferOperation> {\n\t\tconst operation = await this.get(id);\n\t\tif (!operation) {\n\t\t\tthrow new TransferError(\"TRANSFER_OPERATION_NOT_FOUND\", \"Transfer operation not found\");\n\t\t}\n\t\treturn operation;\n\t}\n\n\t/**\n\t * Create an operation, or return the existing one for the same\n\t * `(createdBy, kind, idempotencyKey)`. Throws\n\t * `TRANSFER_IDEMPOTENCY_CONFLICT` when that key was used with a different\n\t * package digest, and `TRANSFER_IMPORT_IN_PROGRESS` when another import\n\t * already occupies the target.\n\t */\n\tasync create(\n\t\tinput: CreateTransferOperationInput,\n\t): Promise<{ operation: TransferOperation; created: boolean }> {\n\t\tif (\n\t\t\tinput.idempotencyKey !== undefined &&\n\t\t\t(input.idempotencyKey.length === 0 ||\n\t\t\t\tinput.idempotencyKey.length > MAX_IDEMPOTENCY_KEY_LENGTH)\n\t\t) {\n\t\t\tthrow new TransferError(\"TRANSFER_IDEMPOTENCY_CONFLICT\", \"Invalid idempotency key\");\n\t\t}\n\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst existing = await this.findByIdempotencyKey(input);\n\t\t\tif (existing) return { operation: existing, created: false };\n\t\t}\n\n\t\tconst id = ulid();\n\t\tconst inserted = await this.db\n\t\t\t.insertInto(\"_emdash_transfer_operations\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tkind: input.kind,\n\t\t\t\tstate: input.kind === \"export\" ? \"pending\" : \"uploading\",\n\t\t\t\tidempotency_key: input.idempotencyKey ?? null,\n\t\t\t\tpackage_digest: input.packageDigest ?? null,\n\t\t\t\torigin_site_id: input.originSiteId ?? null,\n\t\t\t\toptions: input.options === undefined ? null : JSON.stringify(input.options),\n\t\t\t\tstaging_secret: createStagingSecret(),\n\t\t\t\truntime_generation: TRANSFER_RUNTIME_GENERATION,\n\t\t\t\tcreated_by: input.createdBy,\n\t\t\t\texpires_at: timestampOffset(this.db, input.ttlSeconds ?? defaultTtl(input.kind)),\n\t\t\t\tstage: null,\n\t\t\t\tcursor: null,\n\t\t\t\tprogress: null,\n\t\t\t\tplan_digest: null,\n\t\t\t\treceipt: null,\n\t\t\t\terror_code: null,\n\t\t\t\terror_detail: null,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t\tcancel_requested_at: null,\n\t\t\t\tmutation_started_at: null,\n\t\t\t\tcompleted_at: null,\n\t\t\t\tstaging_collected_at: null,\n\t\t\t})\n\t\t\t.onConflict((conflict) => conflict.doNothing())\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (inserted) return { operation: toOperation(inserted), created: true };\n\n\t\tif (input.idempotencyKey !== undefined) {\n\t\t\tconst existing = await this.findByIdempotencyKey(input);\n\t\t\tif (existing) return { operation: existing, created: false };\n\t\t}\n\t\tthrow new TransferError(\n\t\t\t\"TRANSFER_IMPORT_IN_PROGRESS\",\n\t\t\t\"Another import is already in progress on this site\",\n\t\t);\n\t}\n\n\tprivate async findByIdempotencyKey(\n\t\tinput: CreateTransferOperationInput,\n\t): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"created_by\", \"=\", input.createdBy)\n\t\t\t.where(\"kind\", \"=\", input.kind)\n\t\t\t.where(\"idempotency_key\", \"=\", input.idempotencyKey ?? \"\")\n\t\t\t.executeTakeFirst();\n\t\tif (!row) return null;\n\t\tif (\n\t\t\tinput.packageDigest !== undefined &&\n\t\t\trow.package_digest !== null &&\n\t\t\trow.package_digest !== input.packageDigest\n\t\t) {\n\t\t\tthrow new TransferError(\n\t\t\t\t\"TRANSFER_IDEMPOTENCY_CONFLICT\",\n\t\t\t\t\"Idempotency key was already used for a different package\",\n\t\t\t);\n\t\t}\n\t\treturn toOperation(row);\n\t}\n\n\t/** The import that currently occupies the target, if any. */\n\tasync findOccupyingImport(): Promise<TransferOperation | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.selectAll()\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES, ...EXECUTING_IMPORT_STATES]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"state\", \"in\", [\"failed\", \"cancelled\"]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is not\", null),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn row ? toOperation(row) : null;\n\t}\n\n\t/**\n\t * Take the operation's lease if it is in one of `states` and no live lease\n\t * exists. Throws `TRANSFER_OPERATION_NOT_FOUND`, or\n\t * `TRANSFER_RUNTIME_MISMATCH` when the row was written by an incompatible\n\t * runtime generation.\n\t */\n\tasync claim(\n\t\tid: string,\n\t\tstates: readonly TransferOperationState[],\n\t\toptions: { leaseSeconds?: number } = {},\n\t): Promise<ClaimResult> {\n\t\tconst leaseToken = ulid();\n\t\tconst now = timestampNow(this.db);\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({\n\t\t\t\tlease_token: leaseToken,\n\t\t\t\tlease_expires_at: timestampOffset(\n\t\t\t\t\tthis.db,\n\t\t\t\t\toptions.leaseSeconds ?? TRANSFER_LIMITS.leaseSeconds,\n\t\t\t\t),\n\t\t\t\tattempt_count: sql<number>`attempt_count + 1`,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"state\", \"in\", [...states])\n\t\t\t.where(\"runtime_generation\", \"=\", TRANSFER_RUNTIME_GENERATION)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (row) return { outcome: \"claimed\", operation: toOperation(row), leaseToken };\n\n\t\tconst current = await this.require(id);\n\t\tif (current.runtimeGeneration !== TRANSFER_RUNTIME_GENERATION) {\n\t\t\tthrow new TransferError(\n\t\t\t\t\"TRANSFER_RUNTIME_MISMATCH\",\n\t\t\t\t\"Transfer operation was created by an incompatible EmDash version\",\n\t\t\t);\n\t\t}\n\t\tif (!states.includes(current.state)) return { outcome: \"invalid_state\", operation: current };\n\t\treturn { outcome: \"lease_active\", operation: current };\n\t}\n\n\t/**\n\t * Write state under the lease and extend it. Throws `TRANSFER_LEASE_LOST`\n\t * when the lease is gone.\n\t */\n\tasync advance(id: string, leaseToken: string, patch: OperationPatch): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tlease_expires_at: timestampOffset(this.db, TRANSFER_LIMITS.leaseSeconds),\n\t\t});\n\t}\n\n\t/** Write state and give up the lease so the next step can claim it. */\n\tasync release(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tpatch: OperationPatch = {},\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/**\n\t * Write `patch`, move to `state`, and give up the lease; when a cancel was\n\t * requested while the lease was held, move to `cancelled` instead. One\n\t * statement decides, so a cancel racing the release is never lost.\n\t */\n\tasync releaseUnlessCancelled(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tstate: TransferOperationState,\n\t\tpatch: Omit<OperationPatch, \"state\"> = {},\n\t): Promise<TransferOperation> {\n\t\tconst now = timestampNow(this.db);\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\t...this.patchValues(patch),\n\t\t\tstate: sql<string>`CASE WHEN cancel_requested_at IS NULL THEN ${state} ELSE 'cancelled' END`,\n\t\t\tcompleted_at: sql<\n\t\t\t\tstring | null\n\t\t\t>`CASE WHEN cancel_requested_at IS NULL THEN completed_at ELSE ${now} END`,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\tasync complete(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tresult: { receipt?: SiteImportReceipt; ttlSeconds?: number; progress?: TransferProgress } = {},\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"complete\",\n\t\t\treceipt: result.receipt === undefined ? undefined : JSON.stringify(result.receipt),\n\t\t\tprogress: result.progress === undefined ? undefined : JSON.stringify(result.progress),\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\texpires_at:\n\t\t\t\tresult.ttlSeconds === undefined ? undefined : timestampOffset(this.db, result.ttlSeconds),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\tasync fail(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\terror: { code: TransferErrorCode; detail?: TransferErrorDetail },\n\t): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"failed\",\n\t\t\terror_code: error.code,\n\t\t\terror_detail: error.detail === undefined ? null : JSON.stringify(error.detail),\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/** Finish a cancellation the lease holder observed via `cancelRequestedAt`. */\n\tasync finishCancelled(id: string, leaseToken: string): Promise<TransferOperation> {\n\t\treturn this.fencedUpdate(id, leaseToken, {\n\t\t\tstate: \"cancelled\",\n\t\t\tcompleted_at: timestampNow(this.db),\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t});\n\t}\n\n\t/**\n\t * Cancel an import. Without a live lease the operation becomes `cancelled`\n\t * immediately; otherwise `cancel_requested_at` is set and the lease holder\n\t * stops after its current batch. Returns the updated operation.\n\t */\n\tasync requestCancel(id: string): Promise<TransferOperation> {\n\t\tconst cancellable = [...PRE_EXECUTION_IMPORT_STATES, ...EXECUTING_IMPORT_STATES];\n\t\tconst now = timestampNow(this.db);\n\t\tconst immediate = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({\n\t\t\t\tstate: \"cancelled\",\n\t\t\t\tcancel_requested_at: now,\n\t\t\t\tcompleted_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t\tlease_token: null,\n\t\t\t\tlease_expires_at: null,\n\t\t\t})\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", cancellable)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (immediate) return toOperation(immediate);\n\n\t\tconst flagged = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ cancel_requested_at: now, updated_at: now })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", cancellable)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (flagged) return toOperation(flagged);\n\n\t\tawait this.require(id);\n\t\tthrow new TransferError(\"TRANSFER_INVALID_STATE\", \"Transfer operation cannot be cancelled\");\n\t}\n\n\t/**\n\t * Mark a failed or cancelled import abandoned. Lifts the write fence; never\n\t * deletes imported data.\n\t */\n\tasync abandon(id: string): Promise<TransferOperation> {\n\t\tconst now = timestampNow(this.db);\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ state: \"abandoned\", updated_at: now })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"kind\", \"=\", \"import\")\n\t\t\t.where(\"state\", \"in\", [\"failed\", \"cancelled\"])\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (row) return toOperation(row);\n\t\tawait this.require(id);\n\t\tthrow new TransferError(\n\t\t\t\"TRANSFER_INVALID_STATE\",\n\t\t\t\"Only a failed or cancelled import can be abandoned\",\n\t\t);\n\t}\n\n\t/**\n\t * Move operations past their `expires_at` to `expired` (pre-execution\n\t * imports and every non-expired export) when no live lease holds them.\n\t * Returns the expired operations so their staging can be collected.\n\t */\n\tasync expireDue(\n\t\tlimit = 50,\n\t): Promise<Array<Pick<TransferOperation, \"id\" | \"kind\" | \"stagingSecret\">>> {\n\t\tconst candidates = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"expires_at\", \"is not\", null)\n\t\t\t.where(timestampIsDue(this.db, \"expires_at\"))\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is\", null),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"export\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"running\", \"complete\", \"failed\"]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.orderBy(\"expires_at\")\n\t\t\t.limit(limit)\n\t\t\t.execute();\n\t\tif (candidates.length === 0) return [];\n\t\tconst now = timestampNow(this.db);\n\t\tconst rows = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ state: \"expired\", updated_at: now, lease_token: null, lease_expires_at: null })\n\t\t\t.where(\n\t\t\t\t\"id\",\n\t\t\t\t\"in\",\n\t\t\t\tcandidates.map((candidate) => candidate.id),\n\t\t\t)\n\t\t\t.where(timestampIsDue(this.db, \"expires_at\"))\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [...PRE_EXECUTION_IMPORT_STATES]),\n\t\t\t\t\t\teb(\"mutation_started_at\", \"is\", null),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"export\"),\n\t\t\t\t\t\teb(\"state\", \"in\", [\"pending\", \"running\", \"complete\", \"failed\"]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.returning([\"id\", \"kind\", \"staging_secret\"])\n\t\t\t.execute();\n\t\treturn rows.flatMap((row) =>\n\t\t\tisTransferOperationKind(row.kind)\n\t\t\t\t? [{ id: row.id, kind: row.kind, stagingSecret: row.staging_secret }]\n\t\t\t\t: [],\n\t\t);\n\t}\n\n\t/**\n\t * Operations whose staging area can be collected and has not been yet:\n\t * imports in a terminal state, and exports that failed or expired\n\t * (complete exports stay downloadable until they expire). Oldest first.\n\t * A collector deletes staged objects with `TransferStage.deleteSome` until\n\t * it returns 0, deletes child rows with {@link deleteChildRows} until it\n\t * returns 0, then calls {@link markCollected}; a crash anywhere in between\n\t * leaves the operation listed here, so collection resumes.\n\t *\n\t * `importRetentionSeconds` keeps a finished import's staging for that long\n\t * after its last state change; expired imports are listed at once.\n\t */\n\tasync listUncollected(\n\t\tlimit = 20,\n\t\toptions: { importRetentionSeconds?: number } = {},\n\t): Promise<Array<Pick<TransferOperation, \"id\" | \"kind\" | \"state\" | \"stagingSecret\">>> {\n\t\tconst retention = options.importRetentionSeconds ?? 0;\n\t\tconst retainedStates = TERMINAL_IMPORT_STATES.filter((state) => state !== \"expired\");\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_emdash_transfer_operations\")\n\t\t\t.select([\"id\", \"kind\", \"state\", \"staging_secret\"])\n\t\t\t.where(\"staging_collected_at\", \"is\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb.and([eb(\"kind\", \"=\", \"import\"), eb(\"state\", \"=\", \"expired\")]),\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb(\"kind\", \"=\", \"import\"),\n\t\t\t\t\t\teb(\"state\", \"in\", retainedStates),\n\t\t\t\t\t\ttimestampIsOlderThan(this.db, \"updated_at\", retention),\n\t\t\t\t\t]),\n\t\t\t\t\teb.and([eb(\"kind\", \"=\", \"export\"), eb(\"state\", \"in\", [\"failed\", \"expired\"])]),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb(\"lease_expires_at\", \"is\", null),\n\t\t\t\t\ttimestampIsDue(this.db, \"lease_expires_at\"),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.orderBy(\"updated_at\")\n\t\t\t.orderBy(\"id\")\n\t\t\t.limit(Math.min(Math.max(limit, 1), 100))\n\t\t\t.execute();\n\t\treturn rows.flatMap((row) =>\n\t\t\tisTransferOperationKind(row.kind) && isTransferOperationState(row.state)\n\t\t\t\t? [{ id: row.id, kind: row.kind, state: row.state, stagingSecret: row.staging_secret }]\n\t\t\t\t: [],\n\t\t);\n\t}\n\n\t/** Record that an operation's staging area and child rows are gone. */\n\tasync markCollected(id: string): Promise<void> {\n\t\tawait this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ staging_collected_at: timestampNow(this.db) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"staging_collected_at\", \"is\", null)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Delete up to `limit` child rows of each child table of an operation\n\t * (staged files, package index, media blobs), one bounded statement per\n\t * table. Returns the number deleted; call until it returns 0. Always drain\n\t * children this way before deleting an operation row: an `ON DELETE\n\t * CASCADE` over millions of child rows in one statement exceeds D1's\n\t * limits.\n\t */\n\tasync deleteChildRows(operationId: string, limit = 500): Promise<number> {\n\t\tconst bounded = Math.min(Math.max(Math.trunc(limit), 1), 5000);\n\t\tconst staged = await sql`\n\t\t\tDELETE FROM _emdash_transfer_staged_files\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND path IN (\n\t\t\t\t\tSELECT path FROM _emdash_transfer_staged_files\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\tconst indexed = await sql`\n\t\t\tDELETE FROM _emdash_transfer_package_index\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND (kind, id) IN (\n\t\t\t\t\tSELECT kind, id FROM _emdash_transfer_package_index\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\tconst blobs = await sql`\n\t\t\tDELETE FROM _emdash_transfer_media_blobs\n\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\tAND media_id IN (\n\t\t\t\t\tSELECT media_id FROM _emdash_transfer_media_blobs\n\t\t\t\t\tWHERE operation_id = ${operationId}\n\t\t\t\t\tLIMIT ${bounded}\n\t\t\t\t)\n\t\t`.execute(this.db);\n\t\treturn [staged, indexed, blobs].reduce(\n\t\t\t(sum, result) => sum + Number(result.numAffectedRows ?? 0n),\n\t\t\t0,\n\t\t);\n\t}\n\n\t/**\n\t * Delete a collected operation row once it has no child rows left.\n\t * Returns false, deleting nothing, otherwise. Identity-map rows are kept.\n\t */\n\tasync deleteIfChildless(id: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_emdash_transfer_operations\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"staging_collected_at\", \"is not\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.and([\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_staged_files\")\n\t\t\t\t\t\t\t\t.select(\"path\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_staged_files.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_package_index\")\n\t\t\t\t\t\t\t\t.select(\"kind\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_package_index.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t\teb.not(\n\t\t\t\t\t\teb.exists(\n\t\t\t\t\t\t\teb\n\t\t\t\t\t\t\t\t.selectFrom(\"_emdash_transfer_media_blobs\")\n\t\t\t\t\t\t\t\t.select(\"media_id\")\n\t\t\t\t\t\t\t\t.where(\"_emdash_transfer_media_blobs.operation_id\", \"=\", id),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t]),\n\t\t\t)\n\t\t\t.executeTakeFirst();\n\t\treturn Number(result.numDeletedRows ?? 0n) > 0;\n\t}\n\n\t/**\n\t * Bump `write_epoch` on every running export. Fenced write paths call this\n\t * so an export's consistency fence notices writes to tables that have no\n\t * `updated_at`. Returns the number of exports touched.\n\t */\n\tasync recordWriteForRunningExports(): Promise<number> {\n\t\treturn bumpRunningExportWriteEpochs(this.db);\n\t}\n\n\t/** Operations newest first, `{ items, nextCursor }` over `(created_at, id)`. */\n\tasync list(\n\t\toptions: {\n\t\t\tkind?: TransferOperationKind;\n\t\t\tcreatedBy?: string;\n\t\t\tlimit?: number;\n\t\t\tcursor?: { createdAt: string; id: string };\n\t\t} = {},\n\t): Promise<{ items: PublicTransferOperation[]; next?: { createdAt: string; id: string } }> {\n\t\tconst limit = Math.min(Math.max(options.limit ?? 50, 1), 100);\n\t\tlet query = this.db.selectFrom(\"_emdash_transfer_operations\").selectAll();\n\t\tif (options.kind) query = query.where(\"kind\", \"=\", options.kind);\n\t\tif (options.createdBy) query = query.where(\"created_by\", \"=\", options.createdBy);\n\t\tconst cursor = options.cursor;\n\t\tif (cursor) {\n\t\t\tquery = query.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"created_at\", \"<\", cursor.createdAt),\n\t\t\t\t\teb.and([eb(\"created_at\", \"=\", cursor.createdAt), eb(\"id\", \"<\", cursor.id)]),\n\t\t\t\t]),\n\t\t\t);\n\t\t}\n\t\tconst rows = await query\n\t\t\t.orderBy(\"created_at\", \"desc\")\n\t\t\t.orderBy(\"id\", \"desc\")\n\t\t\t.limit(limit + 1)\n\t\t\t.execute();\n\t\tconst items = rows.slice(0, limit).map((row) => toPublicOperation(toOperation(row)));\n\t\tconst last = items.at(-1);\n\t\treturn rows.length > limit && last\n\t\t\t? { items, next: { createdAt: last.createdAt, id: last.id } }\n\t\t\t: { items };\n\t}\n\n\tprivate patchValues(patch: OperationPatch): OperationUpdate {\n\t\tconst values: OperationUpdate = {};\n\t\tif (patch.state !== undefined) values.state = patch.state;\n\t\tif (patch.stage !== undefined) values.stage = patch.stage;\n\t\tif (patch.cursor !== undefined) {\n\t\t\tvalues.cursor =\n\t\t\t\tpatch.cursor === null ? null : JSON.stringify(transferCursorSchema.parse(patch.cursor));\n\t\t}\n\t\tif (patch.progress !== undefined) {\n\t\t\tvalues.progress =\n\t\t\t\tpatch.progress === null\n\t\t\t\t\t? null\n\t\t\t\t\t: JSON.stringify(transferProgressSchema.parse(patch.progress));\n\t\t}\n\t\tif (patch.packageDigest !== undefined) values.package_digest = patch.packageDigest;\n\t\tif (patch.planDigest !== undefined) values.plan_digest = patch.planDigest;\n\t\tif (patch.originSiteId !== undefined) values.origin_site_id = patch.originSiteId;\n\t\tif (patch.markMutationStarted) {\n\t\t\tvalues.mutation_started_at = sql<string>`COALESCE(mutation_started_at, ${timestampNow(this.db)})`;\n\t\t}\n\t\tif (patch.ttlSeconds !== undefined)\n\t\t\tvalues.expires_at = timestampOffset(this.db, patch.ttlSeconds);\n\t\tif (patch.retryError !== undefined) {\n\t\t\tvalues.error_code = patch.retryError?.code ?? null;\n\t\t\tvalues.error_detail =\n\t\t\t\tpatch.retryError?.detail === undefined ? null : JSON.stringify(patch.retryError.detail);\n\t\t}\n\t\treturn values;\n\t}\n\n\tprivate async fencedUpdate(\n\t\tid: string,\n\t\tleaseToken: string,\n\t\tvalues: OperationUpdate,\n\t): Promise<TransferOperation> {\n\t\tconst row = await this.db\n\t\t\t.updateTable(\"_emdash_transfer_operations\")\n\t\t\t.set({ ...values, updated_at: timestampNow(this.db) })\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t\t.where(timestampIsLive(this.db, \"lease_expires_at\"))\n\t\t\t.returningAll()\n\t\t\t.executeTakeFirst();\n\t\tif (!row) {\n\t\t\tthrow new TransferError(\"TRANSFER_LEASE_LOST\", \"Transfer operation lease was lost\");\n\t\t}\n\t\treturn toOperation(row);\n\t}\n}\n\nfunction defaultTtl(kind: TransferOperationKind): number {\n\treturn kind === \"export\"\n\t\t? TRANSFER_LIMITS.exportTtlSeconds\n\t\t: TRANSFER_LIMITS.pendingImportTtlSeconds;\n}\n","/**\n * Byte-level access to one operation's staging area.\n */\n\nimport type { DownloadResult, Storage } from \"../../storage/types.js\";\nimport { TransferError, isTransferError } from \"../errors.js\";\nimport { createHashingStream, createSha256 } from \"../format/digest.js\";\nimport { stagingAuxKey, stagingKey, type StagingAuxFile } from \"./keys.js\";\n\ntype FixedLengthStreamConstructor = new (\n\texpectedLength: number | bigint,\n) => TransformStream<ArrayBufferView | ArrayBuffer, Uint8Array>;\n\ndeclare const FixedLengthStream: FixedLengthStreamConstructor | undefined;\n\nexport interface ExpectedFile {\n\tbytes: number;\n\t/** Lowercase hex SHA-256. */\n\tsha256: string;\n}\n\nexport interface PutVerifiedOptions {\n\tcontentType?: string;\n\t/**\n\t * Called before deleting the object after a failed upload; return true to\n\t * keep it (the path was already verified by another upload).\n\t */\n\tkeepExistingOnFailure?: () => Promise<boolean>;\n}\n\nconst PACKAGE_CONTENT_TYPE = \"application/octet-stream\";\n\nfunction oversizeError(): TransferError {\n\treturn new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File is larger than declared\");\n}\n\nfunction toStream(body: ReadableStream<Uint8Array> | Uint8Array): ReadableStream<Uint8Array> {\n\tif (body instanceof Uint8Array) {\n\t\treturn new ReadableStream<Uint8Array>({\n\t\t\tstart(controller) {\n\t\t\t\tif (body.byteLength > 0) controller.enqueue(body);\n\t\t\t\tcontroller.close();\n\t\t\t},\n\t\t});\n\t}\n\treturn body;\n}\n\n/**\n * Stream `body` into `key`, hashing and counting as it goes. The object is\n * kept only if exactly `expected.bytes` bytes with digest `expected.sha256`\n * were written; otherwise it is deleted and `TRANSFER_FILE_SIZE_MISMATCH` or\n * `TRANSFER_FILE_DIGEST_MISMATCH` is thrown. Where the runtime provides\n * `FixedLengthStream` (workerd), the upload is wrapped in one so R2 receives\n * a known length.\n *\n * Callers staging a package file must check its staged-files row first and\n * refuse the upload when it is already `verified` and its object still\n * matches, and must pass `keepExistingOnFailure` returning true once the row\n * is verified: a failed retry or concurrent upload of the same path must not\n * delete the object a successful upload stored. A failing upload that\n * already overwrote the object can still leave bad bytes behind a verified\n * row, so readers verify sizes and digests again when they read staged\n * files, and a later upload of that path replaces the bad object.\n */\nexport async function putVerified(\n\tstorage: Storage,\n\tkey: string,\n\tbody: ReadableStream<Uint8Array> | Uint8Array,\n\texpected: ExpectedFile,\n\toptions: PutVerifiedOptions = {},\n): Promise<void> {\n\tconst discard = async () => {\n\t\tif (options.keepExistingOnFailure && (await options.keepExistingOnFailure())) return;\n\t\tawait storage.delete(key).catch(() => undefined);\n\t};\n\tif (!Number.isSafeInteger(expected.bytes) || expected.bytes < 0) {\n\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"Invalid declared size\");\n\t}\n\tconst hasher = await createSha256();\n\tconst hashing = createHashingStream(hasher, {\n\t\tmaxBytes: expected.bytes,\n\t\tonLimitExceeded: oversizeError,\n\t});\n\tlet stream = toStream(body).pipeThrough(hashing.stream);\n\tif (typeof FixedLengthStream !== \"undefined\") {\n\t\tstream = stream.pipeThrough(new FixedLengthStream(expected.bytes));\n\t}\n\n\ttry {\n\t\tawait storage.upload({\n\t\t\tkey,\n\t\t\tbody: stream,\n\t\t\tcontentType: options.contentType ?? PACKAGE_CONTENT_TYPE,\n\t\t});\n\t} catch (error) {\n\t\tawait discard();\n\t\tif (isTransferError(error)) throw error;\n\t\tconst cause = findTransferError(error);\n\t\tif (cause) throw cause;\n\t\tif (hashing.bytes() !== expected.bytes) {\n\t\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File size does not match\", {\n\t\t\t\tcause: error,\n\t\t\t});\n\t\t}\n\t\tthrow new TransferError(\"TRANSFER_STORAGE_ERROR\", \"Failed to store file\", { cause: error });\n\t}\n\n\tconst digest = await hasher.digest();\n\tif (hashing.bytes() !== expected.bytes) {\n\t\tawait discard();\n\t\tthrow new TransferError(\"TRANSFER_FILE_SIZE_MISMATCH\", \"File size does not match\", {\n\t\t\tdetail: { expected: expected.bytes, actual: hashing.bytes() },\n\t\t});\n\t}\n\tif (digest !== expected.sha256) {\n\t\tawait discard();\n\t\tthrow new TransferError(\"TRANSFER_FILE_DIGEST_MISMATCH\", \"File digest does not match\");\n\t}\n}\n\nfunction findTransferError(error: unknown): TransferError | null {\n\tlet current: unknown = error;\n\tfor (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n\t\tif (current instanceof TransferError) return current;\n\t\tcurrent = current.cause;\n\t}\n\treturn null;\n}\n\n/** Read a whole stream, failing once it exceeds `maxBytes`. */\nexport async function readStreamBytes(\n\tstream: ReadableStream<Uint8Array>,\n\tmaxBytes: number,\n): Promise<Uint8Array> {\n\tconst reader = stream.getReader();\n\tconst parts: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\ttotal += value.byteLength;\n\t\t\tif (total > maxBytes) {\n\t\t\t\tthrow new TransferError(\"TRANSFER_LIMIT_EXCEEDED\", \"File exceeds its size limit\", {\n\t\t\t\t\tdetail: { limit: maxBytes },\n\t\t\t\t});\n\t\t\t}\n\t\t\tparts.push(value);\n\t\t}\n\t} catch (error) {\n\t\tawait reader.cancel().catch(() => undefined);\n\t\tthrow error;\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const part of parts) {\n\t\tbytes.set(part, offset);\n\t\toffset += part.byteLength;\n\t}\n\treturn bytes;\n}\n\n/** One operation's staging area in `storage` under `prefix` (see keys.ts). */\nexport class TransferStage {\n\tconstructor(\n\t\treadonly storage: Storage,\n\t\treadonly prefix: string,\n\t) {}\n\n\tkeyFor(path: string): string {\n\t\treturn stagingKey(this.prefix, path);\n\t}\n\n\tasync putVerified(\n\t\tpath: string,\n\t\tbody: ReadableStream<Uint8Array> | Uint8Array,\n\t\tbytes: number,\n\t\tsha256: string,\n\t\toptions: PutVerifiedOptions = {},\n\t): Promise<void> {\n\t\tawait putVerified(this.storage, this.keyFor(path), body, { bytes, sha256 }, options);\n\t}\n\n\tasync exists(path: string): Promise<boolean> {\n\t\treturn this.storage.exists(this.keyFor(path));\n\t}\n\n\tasync open(path: string): Promise<DownloadResult> {\n\t\ttry {\n\t\t\treturn await this.storage.download(this.keyFor(path));\n\t\t} catch (error) {\n\t\t\tthrow new TransferError(\"TRANSFER_FILE_MISSING\", \"Staged file is missing\", {\n\t\t\t\tdetail: { path },\n\t\t\t\tcause: error,\n\t\t\t});\n\t\t}\n\t}\n\n\tasync readBytes(path: string, maxBytes: number): Promise<Uint8Array> {\n\t\tconst file = await this.open(path);\n\t\treturn readStreamBytes(file.body, maxBytes);\n\t}\n\n\tasync putAux(file: StagingAuxFile, content: string): Promise<void> {\n\t\tawait this.storage.upload({\n\t\t\tkey: stagingAuxKey(this.prefix, file),\n\t\t\tbody: new TextEncoder().encode(content),\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\t}\n\n\tasync readAux(file: StagingAuxFile, maxBytes: number): Promise<string | null> {\n\t\tconst key = stagingAuxKey(this.prefix, file);\n\t\tif (!(await this.storage.exists(key))) return null;\n\t\tconst download = await this.storage.download(key);\n\t\treturn new TextDecoder().decode(await readStreamBytes(download.body, maxBytes));\n\t}\n\n\t/**\n\t * Delete up to `limit` staged objects. Returns the number deleted; call\n\t * again until it returns 0.\n\t */\n\tasync deleteSome(limit = 100): Promise<number> {\n\t\tconst listing = await this.storage.list({ prefix: this.prefix, limit });\n\t\tfor (const file of listing.files) await this.storage.delete(file.key);\n\t\treturn listing.files.length;\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2FA,SAAgB,kBAAkB,WAAuD;CACxF,MAAM,EAAE,eAAe,SAAS,YAAY,QAAQ,GAAG,SAAS;AAChE,QAAO;;AAuCR,MAAM,6BAA6B;AAEnC,SAAS,UAAU,OAA+B;AACjD,KAAI,UAAU,KAAM,QAAO;AAC3B,QAAO,KAAK,MAAM,MAAM;;AAGzB,SAAS,YAAY,KAAsC;CAC1D,MAAM,EAAE,MAAM,UAAU;AACxB,KAAI,CAAC,wBAAwB,KAAK,IAAI,CAAC,yBAAyB,MAAM,CACrE,OAAM,IAAI,cAAc,0BAA0B,2CAA2C;CAE9F,MAAM,SAAS,UAAU,IAAI,OAAO;CACpC,MAAM,WAAW,UAAU,IAAI,SAAS;CACxC,MAAM,UAAU,UAAU,IAAI,QAAQ;CACtC,MAAM,cAAc,UAAU,IAAI,aAAa;AAC/C,QAAO;EACN,IAAI,IAAI;EACR;EACA;EACA,OAAO,IAAI;EACX,QAAQ,WAAW,OAAO,OAAO,qBAAqB,MAAM,OAAO;EACnE,UAAU,aAAa,OAAO,OAAO,uBAAuB,MAAM,SAAS;EAC3E,SAAS,UAAU,IAAI,QAAQ;EAC/B,gBAAgB,IAAI;EACpB,eAAe,eAAe,IAAI,eAAe,GAAG,IAAI,iBAAiB;EACzE,YAAY,eAAe,IAAI,YAAY,GAAG,IAAI,cAAc;EAChE,cAAc,IAAI;EAClB,eAAe,IAAI;EACnB,SAAS,YAAY,OAAO,OAAO,wBAAwB,MAAM,QAAQ;EACzE,WAAW,IAAI;EACf,aAAa,gBAAgB,OAAO,OAAO,0BAA0B,MAAM,YAAY;EACvF,YAAY,OAAO,IAAI,YAAY;EACnC,cAAc,OAAO,IAAI,cAAc;EACvC,YAAY,IAAI;EAChB,gBAAgB,IAAI;EACpB,mBAAmB,OAAO,IAAI,mBAAmB;EACjD,mBAAmB,IAAI;EACvB,mBAAmB,IAAI;EACvB,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,WAAW,IAAI;EACf,oBAAoB,IAAI;EACxB;;AAGF,SAAgB,sBAA8B;CAC7C,MAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;AAGhF,IAAa,8BAAb,MAAyC;CACxC,YAAY,AAAiB,IAAsB;EAAtB;;CAE7B,MAAM,IAAI,IAA+C;EACxD,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;CAGjC,MAAM,QAAQ,IAAwC;EACrD,MAAM,YAAY,MAAM,KAAK,IAAI,GAAG;AACpC,MAAI,CAAC,UACJ,OAAM,IAAI,cAAc,gCAAgC,+BAA+B;AAExF,SAAO;;;;;;;;;CAUR,MAAM,OACL,OAC8D;AAC9D,MACC,MAAM,mBAAmB,WACxB,MAAM,eAAe,WAAW,KAChC,MAAM,eAAe,SAAS,4BAE/B,OAAM,IAAI,cAAc,iCAAiC,0BAA0B;AAGpF,MAAI,MAAM,mBAAmB,QAAW;GACvC,MAAM,WAAW,MAAM,KAAK,qBAAqB,MAAM;AACvD,OAAI,SAAU,QAAO;IAAE,WAAW;IAAU,SAAS;IAAO;;EAG7D,MAAM,KAAK,MAAM;EACjB,MAAM,WAAW,MAAM,KAAK,GAC1B,WAAW,8BAA8B,CACzC,OAAO;GACP;GACA,MAAM,MAAM;GACZ,OAAO,MAAM,SAAS,WAAW,YAAY;GAC7C,iBAAiB,MAAM,kBAAkB;GACzC,gBAAgB,MAAM,iBAAiB;GACvC,gBAAgB,MAAM,gBAAgB;GACtC,SAAS,MAAM,YAAY,SAAY,OAAO,KAAK,UAAU,MAAM,QAAQ;GAC3E,gBAAgB,qBAAqB;GACrC,oBAAoB;GACpB,YAAY,MAAM;GAClB,YAAY,gBAAgB,KAAK,IAAI,MAAM,cAAc,WAAW,MAAM,KAAK,CAAC;GAChF,OAAO;GACP,QAAQ;GACR,UAAU;GACV,aAAa;GACb,SAAS;GACT,YAAY;GACZ,cAAc;GACd,aAAa;GACb,kBAAkB;GAClB,qBAAqB;GACrB,qBAAqB;GACrB,cAAc;GACd,sBAAsB;GACtB,CAAC,CACD,YAAY,aAAa,SAAS,WAAW,CAAC,CAC9C,cAAc,CACd,kBAAkB;AACpB,MAAI,SAAU,QAAO;GAAE,WAAW,YAAY,SAAS;GAAE,SAAS;GAAM;AAExE,MAAI,MAAM,mBAAmB,QAAW;GACvC,MAAM,WAAW,MAAM,KAAK,qBAAqB,MAAM;AACvD,OAAI,SAAU,QAAO;IAAE,WAAW;IAAU,SAAS;IAAO;;AAE7D,QAAM,IAAI,cACT,+BACA,qDACA;;CAGF,MAAc,qBACb,OACoC;EACpC,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,cAAc,KAAK,MAAM,UAAU,CACzC,MAAM,QAAQ,KAAK,MAAM,KAAK,CAC9B,MAAM,mBAAmB,KAAK,MAAM,kBAAkB,GAAG,CACzD,kBAAkB;AACpB,MAAI,CAAC,IAAK,QAAO;AACjB,MACC,MAAM,kBAAkB,UACxB,IAAI,mBAAmB,QACvB,IAAI,mBAAmB,MAAM,cAE7B,OAAM,IAAI,cACT,iCACA,2DACA;AAEF,SAAO,YAAY,IAAI;;;CAIxB,MAAM,sBAAyD;EAC9D,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,8BAA8B,CACzC,WAAW,CACX,MAAM,QAAQ,KAAK,SAAS,CAC5B,OAAO,OACP,GAAG,GAAG,CACL,GAAG,SAAS,MAAM,CAAC,GAAG,6BAA6B,GAAG,wBAAwB,CAAC,EAC/E,GAAG,IAAI,CACN,GAAG,SAAS,MAAM,CAAC,UAAU,YAAY,CAAC,EAC1C,GAAG,uBAAuB,UAAU,KAAK,CACzC,CAAC,CACF,CAAC,CACF,CACA,kBAAkB;AACpB,SAAO,MAAM,YAAY,IAAI,GAAG;;;;;;;;CASjC,MAAM,MACL,IACA,QACA,UAAqC,EAAE,EAChB;EACvB,MAAM,aAAa,MAAM;EACzB,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GACJ,aAAa;GACb,kBAAkB,gBACjB,KAAK,IACL,QAAQ,gBAAgB,gBAAgB,aACxC;GACD,eAAe,GAAW;GAC1B,YAAY;GACZ,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,SAAS,MAAM,CAAC,GAAG,OAAO,CAAC,CACjC,MAAM,sBAAsB,KAAK,4BAA4B,CAC7D,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,IAAK,QAAO;GAAE,SAAS;GAAW,WAAW,YAAY,IAAI;GAAE;GAAY;EAE/E,MAAM,UAAU,MAAM,KAAK,QAAQ,GAAG;AACtC,MAAI,QAAQ,sBAAsB,4BACjC,OAAM,IAAI,cACT,6BACA,mEACA;AAEF,MAAI,CAAC,OAAO,SAAS,QAAQ,MAAM,CAAE,QAAO;GAAE,SAAS;GAAiB,WAAW;GAAS;AAC5F,SAAO;GAAE,SAAS;GAAgB,WAAW;GAAS;;;;;;CAOvD,MAAM,QAAQ,IAAY,YAAoB,OAAmD;AAChG,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,kBAAkB,gBAAgB,KAAK,IAAI,gBAAgB,aAAa;GACxE,CAAC;;;CAIH,MAAM,QACL,IACA,YACA,QAAwB,EAAE,EACG;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,aAAa;GACb,kBAAkB;GAClB,CAAC;;;;;;;CAQH,MAAM,uBACL,IACA,YACA,OACA,QAAuC,EAAE,EACZ;EAC7B,MAAM,MAAM,aAAa,KAAK,GAAG;AACjC,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,GAAG,KAAK,YAAY,MAAM;GAC1B,OAAO,GAAW,8CAA8C,MAAM;GACtE,cAAc,GAEb,gEAAgE,IAAI;GACrE,aAAa;GACb,kBAAkB;GAClB,CAAC;;CAGH,MAAM,SACL,IACA,YACA,SAA4F,EAAE,EACjE;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,SAAS,OAAO,YAAY,SAAY,SAAY,KAAK,UAAU,OAAO,QAAQ;GAClF,UAAU,OAAO,aAAa,SAAY,SAAY,KAAK,UAAU,OAAO,SAAS;GACrF,cAAc,aAAa,KAAK,GAAG;GACnC,YACC,OAAO,eAAe,SAAY,SAAY,gBAAgB,KAAK,IAAI,OAAO,WAAW;GAC1F,aAAa;GACb,kBAAkB;GAClB,CAAC;;CAGH,MAAM,KACL,IACA,YACA,OAC6B;AAC7B,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,YAAY,MAAM;GAClB,cAAc,MAAM,WAAW,SAAY,OAAO,KAAK,UAAU,MAAM,OAAO;GAC9E,cAAc,aAAa,KAAK,GAAG;GACnC,aAAa;GACb,kBAAkB;GAClB,CAAC;;;CAIH,MAAM,gBAAgB,IAAY,YAAgD;AACjF,SAAO,KAAK,aAAa,IAAI,YAAY;GACxC,OAAO;GACP,cAAc,aAAa,KAAK,GAAG;GACnC,aAAa;GACb,kBAAkB;GAClB,CAAC;;;;;;;CAQH,MAAM,cAAc,IAAwC;EAC3D,MAAM,cAAc,CAAC,GAAG,6BAA6B,GAAG,wBAAwB;EAChF,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,YAAY,MAAM,KAAK,GAC3B,YAAY,8BAA8B,CAC1C,IAAI;GACJ,OAAO;GACP,qBAAqB;GACrB,cAAc;GACd,YAAY;GACZ,aAAa;GACb,kBAAkB;GAClB,CAAC,CACD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,YAAY,CACjC,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,UAAW,QAAO,YAAY,UAAU;EAE5C,MAAM,UAAU,MAAM,KAAK,GACzB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,qBAAqB;GAAK,YAAY;GAAK,CAAC,CAClD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,YAAY,CACjC,cAAc,CACd,kBAAkB;AACpB,MAAI,QAAS,QAAO,YAAY,QAAQ;AAExC,QAAM,KAAK,QAAQ,GAAG;AACtB,QAAM,IAAI,cAAc,0BAA0B,yCAAyC;;;;;;CAO5F,MAAM,QAAQ,IAAwC;EACrD,MAAM,MAAM,aAAa,KAAK,GAAG;EACjC,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,OAAO;GAAa,YAAY;GAAK,CAAC,CAC5C,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,QAAQ,KAAK,SAAS,CAC5B,MAAM,SAAS,MAAM,CAAC,UAAU,YAAY,CAAC,CAC7C,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,cAAc,CACd,kBAAkB;AACpB,MAAI,IAAK,QAAO,YAAY,IAAI;AAChC,QAAM,KAAK,QAAQ,GAAG;AACtB,QAAM,IAAI,cACT,0BACA,qDACA;;;;;;;CAQF,MAAM,UACL,QAAQ,IACmE;EAC3E,MAAM,aAAa,MAAM,KAAK,GAC5B,WAAW,8BAA8B,CACzC,OAAO,KAAK,CACZ,MAAM,cAAc,UAAU,KAAK,CACnC,MAAM,eAAe,KAAK,IAAI,aAAa,CAAC,CAC5C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI;GACN,GAAG,QAAQ,KAAK,SAAS;GACzB,GAAG,SAAS,MAAM,CAAC,GAAG,4BAA4B,CAAC;GACnD,GAAG,uBAAuB,MAAM,KAAK;GACrC,CAAC,EACF,GAAG,IAAI,CACN,GAAG,QAAQ,KAAK,SAAS,EACzB,GAAG,SAAS,MAAM;GAAC;GAAW;GAAW;GAAY;GAAS,CAAC,CAC/D,CAAC,CACF,CAAC,CACF,CACA,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,QAAQ,aAAa,CACrB,MAAM,MAAM,CACZ,SAAS;AACX,MAAI,WAAW,WAAW,EAAG,QAAO,EAAE;EACtC,MAAM,MAAM,aAAa,KAAK,GAAG;AAyBjC,UAxBa,MAAM,KAAK,GACtB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,OAAO;GAAW,YAAY;GAAK,aAAa;GAAM,kBAAkB;GAAM,CAAC,CACrF,MACA,MACA,MACA,WAAW,KAAK,cAAc,UAAU,GAAG,CAC3C,CACA,MAAM,eAAe,KAAK,IAAI,aAAa,CAAC,CAC5C,OAAO,OACP,GAAG,GAAG,CACL,GAAG,IAAI;GACN,GAAG,QAAQ,KAAK,SAAS;GACzB,GAAG,SAAS,MAAM,CAAC,GAAG,4BAA4B,CAAC;GACnD,GAAG,uBAAuB,MAAM,KAAK;GACrC,CAAC,EACF,GAAG,IAAI,CACN,GAAG,QAAQ,KAAK,SAAS,EACzB,GAAG,SAAS,MAAM;GAAC;GAAW;GAAW;GAAY;GAAS,CAAC,CAC/D,CAAC,CACF,CAAC,CACF,CACA,UAAU;GAAC;GAAM;GAAQ;GAAiB,CAAC,CAC3C,SAAS,EACC,SAAS,QACpB,wBAAwB,IAAI,KAAK,GAC9B,CAAC;GAAE,IAAI,IAAI;GAAI,MAAM,IAAI;GAAM,eAAe,IAAI;GAAgB,CAAC,GACnE,EAAE,CACL;;;;;;;;;;;;;;CAeF,MAAM,gBACL,QAAQ,IACR,UAA+C,EAAE,EACoC;EACrF,MAAM,YAAY,QAAQ,0BAA0B;EACpD,MAAM,iBAAiB,uBAAuB,QAAQ,UAAU,UAAU,UAAU;AA2BpF,UA1Ba,MAAM,KAAK,GACtB,WAAW,8BAA8B,CACzC,OAAO;GAAC;GAAM;GAAQ;GAAS;GAAiB,CAAC,CACjD,MAAM,wBAAwB,MAAM,KAAK,CACzC,OAAO,OACP,GAAG,GAAG;GACL,GAAG,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,EAAE,GAAG,SAAS,KAAK,UAAU,CAAC,CAAC;GAChE,GAAG,IAAI;IACN,GAAG,QAAQ,KAAK,SAAS;IACzB,GAAG,SAAS,MAAM,eAAe;IACjC,qBAAqB,KAAK,IAAI,cAAc,UAAU;IACtD,CAAC;GACF,GAAG,IAAI,CAAC,GAAG,QAAQ,KAAK,SAAS,EAAE,GAAG,SAAS,MAAM,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC;GAC7E,CAAC,CACF,CACA,OAAO,OACP,GAAG,GAAG;GACL,GAAG,eAAe,MAAM,KAAK;GAC7B,GAAG,oBAAoB,MAAM,KAAK;GAClC,eAAe,KAAK,IAAI,mBAAmB;GAC3C,CAAC,CACF,CACA,QAAQ,aAAa,CACrB,QAAQ,KAAK,CACb,MAAM,KAAK,IAAI,KAAK,IAAI,OAAO,EAAE,EAAE,IAAI,CAAC,CACxC,SAAS,EACC,SAAS,QACpB,wBAAwB,IAAI,KAAK,IAAI,yBAAyB,IAAI,MAAM,GACrE,CAAC;GAAE,IAAI,IAAI;GAAI,MAAM,IAAI;GAAM,OAAO,IAAI;GAAO,eAAe,IAAI;GAAgB,CAAC,GACrF,EAAE,CACL;;;CAIF,MAAM,cAAc,IAA2B;AAC9C,QAAM,KAAK,GACT,YAAY,8BAA8B,CAC1C,IAAI,EAAE,sBAAsB,aAAa,KAAK,GAAG,EAAE,CAAC,CACpD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,wBAAwB,MAAM,KAAK,CACzC,SAAS;;;;;;;;;;CAWZ,MAAM,gBAAgB,aAAqB,QAAQ,KAAsB;EACxE,MAAM,UAAU,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,MAAM,EAAE,EAAE,EAAE,IAAK;AA4B9D,SAAO;GA3BQ,MAAM,GAAG;;0BAEA,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACF,MAAM,GAAG;;0BAED,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACJ,MAAM,GAAG;;0BAEC,YAAY;;;4BAGV,YAAY;aAC3B,QAAQ;;IAEjB,QAAQ,KAAK,GAAG;GACa,CAAC,QAC9B,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB,GAAG,EAC3D,EACA;;;;;;CAOF,MAAM,kBAAkB,IAA8B;EACrD,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,8BAA8B,CACzC,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,wBAAwB,UAAU,KAAK,CAC7C,OAAO,OACP,GAAG,IAAI;GACN,GAAG,IACF,GAAG,OACF,GACE,WAAW,gCAAgC,CAC3C,OAAO,OAAO,CACd,MAAM,8CAA8C,KAAK,GAAG,CAC9D,CACD;GACD,GAAG,IACF,GAAG,OACF,GACE,WAAW,iCAAiC,CAC5C,OAAO,OAAO,CACd,MAAM,+CAA+C,KAAK,GAAG,CAC/D,CACD;GACD,GAAG,IACF,GAAG,OACF,GACE,WAAW,+BAA+B,CAC1C,OAAO,WAAW,CAClB,MAAM,6CAA6C,KAAK,GAAG,CAC7D,CACD;GACD,CAAC,CACF,CACA,kBAAkB;AACpB,SAAO,OAAO,OAAO,kBAAkB,GAAG,GAAG;;;;;;;CAQ9C,MAAM,+BAAgD;AACrD,SAAO,6BAA6B,KAAK,GAAG;;;CAI7C,MAAM,KACL,UAKI,EAAE,EACoF;EAC1F,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,QAAQ,SAAS,IAAI,EAAE,EAAE,IAAI;EAC7D,IAAI,QAAQ,KAAK,GAAG,WAAW,8BAA8B,CAAC,WAAW;AACzE,MAAI,QAAQ,KAAM,SAAQ,MAAM,MAAM,QAAQ,KAAK,QAAQ,KAAK;AAChE,MAAI,QAAQ,UAAW,SAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ,UAAU;EAChF,MAAM,SAAS,QAAQ;AACvB,MAAI,OACH,SAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,cAAc,KAAK,OAAO,UAAU,EACvC,GAAG,IAAI,CAAC,GAAG,cAAc,KAAK,OAAO,UAAU,EAAE,GAAG,MAAM,KAAK,OAAO,GAAG,CAAC,CAAC,CAC3E,CAAC,CACF;EAEF,MAAM,OAAO,MAAM,MACjB,QAAQ,cAAc,OAAO,CAC7B,QAAQ,MAAM,OAAO,CACrB,MAAM,QAAQ,EAAE,CAChB,SAAS;EACX,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,QAAQ,kBAAkB,YAAY,IAAI,CAAC,CAAC;EACpF,MAAM,OAAO,MAAM,GAAG,GAAG;AACzB,SAAO,KAAK,SAAS,SAAS,OAC3B;GAAE;GAAO,MAAM;IAAE,WAAW,KAAK;IAAW,IAAI,KAAK;IAAI;GAAE,GAC3D,EAAE,OAAO;;CAGb,AAAQ,YAAY,OAAwC;EAC3D,MAAM,SAA0B,EAAE;AAClC,MAAI,MAAM,UAAU,OAAW,QAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,UAAU,OAAW,QAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,WAAW,OACpB,QAAO,SACN,MAAM,WAAW,OAAO,OAAO,KAAK,UAAU,qBAAqB,MAAM,MAAM,OAAO,CAAC;AAEzF,MAAI,MAAM,aAAa,OACtB,QAAO,WACN,MAAM,aAAa,OAChB,OACA,KAAK,UAAU,uBAAuB,MAAM,MAAM,SAAS,CAAC;AAEjE,MAAI,MAAM,kBAAkB,OAAW,QAAO,iBAAiB,MAAM;AACrE,MAAI,MAAM,eAAe,OAAW,QAAO,cAAc,MAAM;AAC/D,MAAI,MAAM,iBAAiB,OAAW,QAAO,iBAAiB,MAAM;AACpE,MAAI,MAAM,oBACT,QAAO,sBAAsB,GAAW,iCAAiC,aAAa,KAAK,GAAG,CAAC;AAEhG,MAAI,MAAM,eAAe,OACxB,QAAO,aAAa,gBAAgB,KAAK,IAAI,MAAM,WAAW;AAC/D,MAAI,MAAM,eAAe,QAAW;AACnC,UAAO,aAAa,MAAM,YAAY,QAAQ;AAC9C,UAAO,eACN,MAAM,YAAY,WAAW,SAAY,OAAO,KAAK,UAAU,MAAM,WAAW,OAAO;;AAEzF,SAAO;;CAGR,MAAc,aACb,IACA,YACA,QAC6B;EAC7B,MAAM,MAAM,MAAM,KAAK,GACrB,YAAY,8BAA8B,CAC1C,IAAI;GAAE,GAAG;GAAQ,YAAY,aAAa,KAAK,GAAG;GAAE,CAAC,CACrD,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,KAAK,IAAI,mBAAmB,CAAC,CACnD,cAAc,CACd,kBAAkB;AACpB,MAAI,CAAC,IACJ,OAAM,IAAI,cAAc,uBAAuB,oCAAoC;AAEpF,SAAO,YAAY,IAAI;;;AAIzB,SAAS,WAAW,MAAqC;AACxD,QAAO,SAAS,WACb,gBAAgB,mBAChB,gBAAgB;;;;;AC1yBpB,MAAM,uBAAuB;AAE7B,SAAS,gBAA+B;AACvC,QAAO,IAAI,cAAc,+BAA+B,+BAA+B;;AAGxF,SAAS,SAAS,MAA2E;AAC5F,KAAI,gBAAgB,WACnB,QAAO,IAAI,eAA2B,EACrC,MAAM,YAAY;AACjB,MAAI,KAAK,aAAa,EAAG,YAAW,QAAQ,KAAK;AACjD,aAAW,OAAO;IAEnB,CAAC;AAEH,QAAO;;;;;;;;;;;;;;;;;;;AAoBR,eAAsB,YACrB,SACA,KACA,MACA,UACA,UAA8B,EAAE,EAChB;CAChB,MAAM,UAAU,YAAY;AAC3B,MAAI,QAAQ,yBAA0B,MAAM,QAAQ,uBAAuB,CAAG;AAC9E,QAAM,QAAQ,OAAO,IAAI,CAAC,YAAY,OAAU;;AAEjD,KAAI,CAAC,OAAO,cAAc,SAAS,MAAM,IAAI,SAAS,QAAQ,EAC7D,OAAM,IAAI,cAAc,+BAA+B,wBAAwB;CAEhF,MAAM,SAAS,MAAM,cAAc;CACnC,MAAM,UAAU,oBAAoB,QAAQ;EAC3C,UAAU,SAAS;EACnB,iBAAiB;EACjB,CAAC;CACF,IAAI,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,OAAO;AACvD,KAAI,OAAO,sBAAsB,YAChC,UAAS,OAAO,YAAY,IAAI,kBAAkB,SAAS,MAAM,CAAC;AAGnE,KAAI;AACH,QAAM,QAAQ,OAAO;GACpB;GACA,MAAM;GACN,aAAa,QAAQ,eAAe;GACpC,CAAC;UACM,OAAO;AACf,QAAM,SAAS;AACf,MAAI,gBAAgB,MAAM,CAAE,OAAM;EAClC,MAAM,QAAQ,kBAAkB,MAAM;AACtC,MAAI,MAAO,OAAM;AACjB,MAAI,QAAQ,OAAO,KAAK,SAAS,MAChC,OAAM,IAAI,cAAc,+BAA+B,4BAA4B,EAClF,OAAO,OACP,CAAC;AAEH,QAAM,IAAI,cAAc,0BAA0B,wBAAwB,EAAE,OAAO,OAAO,CAAC;;CAG5F,MAAM,SAAS,MAAM,OAAO,QAAQ;AACpC,KAAI,QAAQ,OAAO,KAAK,SAAS,OAAO;AACvC,QAAM,SAAS;AACf,QAAM,IAAI,cAAc,+BAA+B,4BAA4B,EAClF,QAAQ;GAAE,UAAU,SAAS;GAAO,QAAQ,QAAQ,OAAO;GAAE,EAC7D,CAAC;;AAEH,KAAI,WAAW,SAAS,QAAQ;AAC/B,QAAM,SAAS;AACf,QAAM,IAAI,cAAc,iCAAiC,6BAA6B;;;AAIxF,SAAS,kBAAkB,OAAsC;CAChE,IAAI,UAAmB;AACvB,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AACnE,MAAI,mBAAmB,cAAe,QAAO;AAC7C,YAAU,QAAQ;;AAEnB,QAAO;;;AAIR,eAAsB,gBACrB,QACA,UACsB;CACtB,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,QAAsB,EAAE;CAC9B,IAAI,QAAQ;AACZ,KAAI;AACH,WAAS;GACR,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,OAAI,KAAM;AACV,YAAS,MAAM;AACf,OAAI,QAAQ,SACX,OAAM,IAAI,cAAc,2BAA2B,+BAA+B,EACjF,QAAQ,EAAE,OAAO,UAAU,EAC3B,CAAC;AAEH,SAAM,KAAK,MAAM;;UAEV,OAAO;AACf,QAAM,OAAO,QAAQ,CAAC,YAAY,OAAU;AAC5C,QAAM;WACG;AACT,SAAO,aAAa;;CAErB,MAAM,QAAQ,IAAI,WAAW,MAAM;CACnC,IAAI,SAAS;AACb,MAAK,MAAM,QAAQ,OAAO;AACzB,QAAM,IAAI,MAAM,OAAO;AACvB,YAAU,KAAK;;AAEhB,QAAO;;;AAIR,IAAa,gBAAb,MAA2B;CAC1B,YACC,AAAS,SACT,AAAS,QACR;EAFQ;EACA;;CAGV,OAAO,MAAsB;AAC5B,SAAO,WAAW,KAAK,QAAQ,KAAK;;CAGrC,MAAM,YACL,MACA,MACA,OACA,QACA,UAA8B,EAAE,EAChB;AAChB,QAAM,YAAY,KAAK,SAAS,KAAK,OAAO,KAAK,EAAE,MAAM;GAAE;GAAO;GAAQ,EAAE,QAAQ;;CAGrF,MAAM,OAAO,MAAgC;AAC5C,SAAO,KAAK,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC;;CAG9C,MAAM,KAAK,MAAuC;AACjD,MAAI;AACH,UAAO,MAAM,KAAK,QAAQ,SAAS,KAAK,OAAO,KAAK,CAAC;WAC7C,OAAO;AACf,SAAM,IAAI,cAAc,yBAAyB,0BAA0B;IAC1E,QAAQ,EAAE,MAAM;IAChB,OAAO;IACP,CAAC;;;CAIJ,MAAM,UAAU,MAAc,UAAuC;AAEpE,SAAO,iBADM,MAAM,KAAK,KAAK,KAAK,EACN,MAAM,SAAS;;CAG5C,MAAM,OAAO,MAAsB,SAAgC;AAClE,QAAM,KAAK,QAAQ,OAAO;GACzB,KAAK,cAAc,KAAK,QAAQ,KAAK;GACrC,MAAM,IAAI,aAAa,CAAC,OAAO,QAAQ;GACvC,aAAa;GACb,CAAC;;CAGH,MAAM,QAAQ,MAAsB,UAA0C;EAC7E,MAAM,MAAM,cAAc,KAAK,QAAQ,KAAK;AAC5C,MAAI,CAAE,MAAM,KAAK,QAAQ,OAAO,IAAI,CAAG,QAAO;EAC9C,MAAM,WAAW,MAAM,KAAK,QAAQ,SAAS,IAAI;AACjD,SAAO,IAAI,aAAa,CAAC,OAAO,MAAM,gBAAgB,SAAS,MAAM,SAAS,CAAC;;;;;;CAOhF,MAAM,WAAW,QAAQ,KAAsB;EAC9C,MAAM,UAAU,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ,KAAK;GAAQ;GAAO,CAAC;AACvE,OAAK,MAAM,QAAQ,QAAQ,MAAO,OAAM,KAAK,QAAQ,OAAO,KAAK,IAAI;AACrE,SAAO,QAAQ,MAAM"}

package/dist/{staged-CD_imitH.mjs → staged-ByBmPFtX.mjs}

@@ -1,5 +1,5 @@
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-xC4UD5-S.mjs";
-import { c as decodeCursor, i as InvalidCursorError, l as encodeCursor, o as STAGED_CURSOR_MARKER } from "./types-D2NEXtgB.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-DiW8VMwz.mjs";
+import { a as InvalidCursorError, l as decodeCursor, s as STAGED_CURSOR_MARKER, u as encodeCursor } from "./types-DwhEvIVb.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -683,4 +683,4 @@ function mergeStagedReferenceBaselines(base, incoming) {
 
 //#endregion
 export { mergeStagedReferenceBaselines as a, readStagedReferenceBaselines as c, RelationRepository as d, STAGED_REFERENCES_KEY as i, readStagedReferences as l, REFERENCE_PAGE_MAX_LIMIT as n, mergeStagedReferences as o, STAGED_REFERENCES_BASELINE_KEY as r, pageStagedGroups as s, REFERENCE_PAGE_LIMIT as t, REFERENCE_INSERT_BATCH_SIZE as u };
-//# sourceMappingURL=staged-CD_imitH.mjs.map
+//# sourceMappingURL=staged-ByBmPFtX.mjs.map