everything-dev 2.0.0-rc.6 → 2.0.0-rc.7

package/dist/bundle-fs-resolve.mjs

@@ -1,228 +0,0 @@
-import { bundleUrlToStagedPath } from "./bundle-path.mjs";
-import { isAppDescriptorPath } from "./config.mjs";
-import { bundleCachePath, bundleCacheRoot, readBundleCache, writeBundleCache } from "./bundle-cache.mjs";
-import { existsSync, readFileSync } from "node:fs";
-import path from "node:path";
-import { Context, Effect, Layer, ManagedRuntime, Schema } from "effect";
-import { readFile } from "node:fs/promises";
-import { cacheControlOf } from "every-plugin/build/artifact-names";
-
-//#region src/bundle-fs-resolve.ts
-var BundleReadError = class extends Schema.TaggedError()("BundleReadError", {
-	path: Schema.String,
-	cause: Schema.optional(Schema.Unknown)
-}) {};
-const MIME_TYPES = {
-	".js": "text/javascript",
-	".mjs": "text/javascript",
-	".cjs": "text/javascript",
-	".css": "text/css",
-	".json": "application/json",
-	".map": "application/json",
-	".svg": "image/svg+xml",
-	".png": "image/png",
-	".jpg": "image/jpeg",
-	".jpeg": "image/jpeg",
-	".gif": "image/gif",
-	".webp": "image/webp",
-	".avif": "image/avif",
-	".ico": "image/x-icon",
-	".html": "text/html",
-	".htm": "text/html",
-	".webmanifest": "application/manifest+json",
-	".md": "text/markdown",
-	".ts": "text/plain",
-	".woff": "font/woff",
-	".woff2": "font/woff2",
-	".ttf": "font/ttf",
-	".otf": "font/otf",
-	".eot": "application/vnd.ms-fontobject",
-	".wasm": "application/wasm",
-	".txt": "text/plain",
-	".xml": "application/xml"
-};
-/**
-* Own-namespace path for a bundle URL: the shared URL→staged-path mapping,
-* narrowed to the runtime identity — a URL whose encoded namespace differs
-* from `namespace.account`/`namespace.gateway` must fall to the network/cache
-* path, never serve a sibling namespace's staged bytes.
-*/
-function bundleUrlToLocalPath(url, namespace) {
-	const filePath = bundleUrlToStagedPath(url, namespace.bundleDir);
-	if (!filePath) return null;
-	const nsDir = path.resolve(namespace.bundleDir, namespace.account, namespace.gateway);
-	if (filePath !== nsDir && !filePath.startsWith(nsDir + path.sep)) return null;
-	return filePath;
-}
-var BundleResolver = class BundleResolver extends Context.Service()("everything-dev/bundle-fs-resolve/BundleResolver") {
-	static layer(namespace) {
-		const respond = Effect.fn("BundleResolver.respond")(function* (url) {
-			const filePath = bundleUrlToLocalPath(url, namespace);
-			if (!filePath) return null;
-			const bytes = yield* Effect.tryPromise({
-				try: () => readFile(filePath),
-				catch: (cause) => new BundleReadError({
-					path: filePath,
-					cause
-				})
-			}).pipe(Effect.catchTag("BundleReadError", () => Effect.succeed(null)));
-			if (bytes === null) return null;
-			const name = path.basename(filePath);
-			const contentType = MIME_TYPES[path.extname(name).toLowerCase()] ?? "application/octet-stream";
-			return new Response(new Uint8Array(bytes), { headers: {
-				"content-type": contentType,
-				"cache-control": cacheControlOf(name),
-				etag: `"${Buffer.from(bytes.subarray(0, 4096)).toString("base64").slice(0, 24)}"`
-			} });
-		});
-		return Layer.effect(BundleResolver, Effect.succeed(BundleResolver.of({ lookup: (input) => {
-			const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
-			return respond(url);
-		} })));
-	}
-};
-const staleResponse = (bytes, url) => {
-	const name = url.split("?")[0].split("/").pop() ?? "";
-	const contentType = MIME_TYPES[path.extname(name).toLowerCase()] ?? "application/octet-stream";
-	return new Response(bytes.slice().buffer, {
-		status: 200,
-		headers: {
-			"content-type": contentType,
-			"x-bundle-cache": "stale"
-		}
-	});
-};
-const FETCH_RETRY_ATTEMPTS = 3;
-const FETCH_RETRY_BASE_DELAY_MS = 250;
-const isTransientStatus = (status) => status === 429 || status >= 500;
-function requestMethod(input, init) {
-	if (init?.method) return init.method.toUpperCase();
-	if (typeof input === "string" || input instanceof URL) return "GET";
-	return input.method.toUpperCase();
-}
-/**
-* Bounded transient-failure retry for idempotent GETs crossing the
-* interceptor (ADR 0021 amendment — the CDN-only image): a cold boot has no
-* staged fallback, so one edge/registry hiccup during the load window would
-* hard-fail the host or a plugin with no recourse. Network errors and
-* 429/5xx responses retry twice (250ms, 750ms backoff) before propagating;
-* non-transient statuses and non-GET requests pass through untouched. After
-* exhausting attempts a stale-if-error cache still sees the final failure.
-*/
-async function fetchWithTransientRetry(original, input, init) {
-	if (requestMethod(input, init) !== "GET") return original(input, init);
-	let lastError;
-	let lastResponse = null;
-	for (let attempt = 0; attempt < FETCH_RETRY_ATTEMPTS; attempt++) {
-		if (attempt > 0) await new Promise((resolve) => setTimeout(resolve, FETCH_RETRY_BASE_DELAY_MS * 3 ** (attempt - 1)));
-		try {
-			const response = await original(input, init);
-			if (!isTransientStatus(response.status)) return response;
-			lastResponse = response;
-		} catch (error) {
-			lastError = error;
-		}
-	}
-	if (lastResponse) return lastResponse;
-	throw lastError;
-}
-/**
-* Installs the resolver as a global fetch interceptor — the one seam every
-* boot-time consumer shares (config manifest discovery, contract-type
-* fetches, orchestrator host loading, MF remoteEntry/identity probes).
-* One layered resolution policy: staged disk → network → stale-if-error.
-* Own-namespace URLs resolve from the staged directory and fall through to
-* the original fetch on a miss (a partially-staged namespace boots over the
-* wire instead of failing); a miss never touches the write-through cache —
-* for the own namespace the staged disk IS the resilience artifact. Foreign
-* `/bundles/…` URLs get the network with the stale-if-error cache; every
-* other URL falls through to the original fetch untouched. Inert when
-* neither a staged namespace nor a cache is configured.
-*/
-function installGlobalBundleFetch(options) {
-	const namespace = options.namespace;
-	const cacheDir = options.cacheDir;
-	const runtime = namespace ? ManagedRuntime.make(BundleResolver.layer(namespace)) : null;
-	const original = globalThis.fetch;
-	const patched = (async (input, init) => {
-		const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
-		if (namespace && bundleUrlToLocalPath(url, namespace)) {
-			if (!runtime) throw new Error("unreachable: resolver runtime missing");
-			const response = await runtime.runPromise(Effect.gen(function* () {
-				return yield* (yield* BundleResolver).lookup(input);
-			}));
-			if (response !== null) return response;
-			return fetchWithTransientRetry(original, input, init);
-		}
-		if (cacheDir !== void 0 && bundleCachePath(url, { cacheDir })) return (async () => {
-			try {
-				const response = await fetchWithTransientRetry(original, input, init);
-				if (response.ok) try {
-					const bytes = new Uint8Array(await response.clone().arrayBuffer());
-					await writeBundleCache(url, bytes, { cacheDir });
-				} catch {}
-				else {
-					const cached = await readBundleCache(url, { cacheDir });
-					if (cached) return staleResponse(cached, url);
-				}
-				return response;
-			} catch (error) {
-				const cached = await readBundleCache(url, { cacheDir });
-				if (cached) return staleResponse(cached, url);
-				throw error;
-			}
-		})();
-		return fetchWithTransientRetry(original, input, init);
-	});
-	const originalPreconnect = original.preconnect;
-	if (originalPreconnect) patched.preconnect = originalPreconnect.bind(original);
-	globalThis.fetch = patched;
-	return { uninstall: async () => {
-		if (globalThis.fetch === patched) globalThis.fetch = original;
-		if (runtime) await runtime.dispose();
-	} };
-}
-/**
-* Boot-time installer for the CLI: derives the own namespace from
-* `BOS_BUNDLE_DIR` plus the runtime identity (`BOS_ACCOUNT`/`BOS_GATEWAY`
-* registry env taking precedence over the bos.config.json fields), and the
-* foreign-namespace cache from `BOS_BUNDLE_CACHE_DIR`. Tier auto-detection
-* (ADR 0021): an identity whose namespace is not actually staged under the
-* bundle dir drops to the registry tier — plain network fetch — instead of
-* deterministically 404ing own-namespace URLs against a foreign image's
-* staged bytes. Never throws — a missing or malformed identity leaves the
-* default network fetch in place.
-*/
-function installBundleFetchFromEnv(input) {
-	const bundleDir = process.env.BOS_BUNDLE_DIR;
-	const cacheDir = process.env.BOS_BUNDLE_CACHE_DIR;
-	if (!bundleDir && cacheDir === void 0) return null;
-	let configAccount;
-	let configGateway;
-	const configPath = input.configPath;
-	if (configPath && !isAppDescriptorPath(configPath)) try {
-		const parsed = JSON.parse(readFileSync(configPath, "utf8"));
-		configAccount = parsed.account;
-		configGateway = parsed.domain;
-	} catch {}
-	const account = process.env.BOS_ACCOUNT ?? configAccount;
-	const gateway = process.env.BOS_GATEWAY ?? configGateway;
-	if (bundleDir && (!account || !gateway)) return null;
-	let namespace;
-	if (bundleDir && account && gateway) {
-		if (existsSync(path.join(bundleDir, account, gateway))) namespace = {
-			bundleDir,
-			account,
-			gateway
-		};
-		else console.warn(`[bundles] staged namespace ${account}/${gateway} not found under ${bundleDir} — registry tier (network fetch)`);
-	}
-	return installGlobalBundleFetch({
-		namespace,
-		cacheDir: cacheDir ?? (namespace ? bundleCacheRoot() : void 0)
-	});
-}
-
-//#endregion
-export { BundleReadError, BundleResolver, bundleUrlToLocalPath, installBundleFetchFromEnv, installGlobalBundleFetch };
-//# sourceMappingURL=bundle-fs-resolve.mjs.map

package/dist/bundle-fs-resolve.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundle-fs-resolve.mjs","names":[],"sources":["../src/bundle-fs-resolve.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { Context, Effect, Layer, ManagedRuntime, Schema } from \"effect\";\nimport { cacheControlOf } from \"every-plugin/build/artifact-names\";\nimport {\n  bundleCachePath,\n  bundleCacheRoot,\n  readBundleCache,\n  writeBundleCache,\n} from \"./bundle-cache\";\nimport { bundleUrlToStagedPath } from \"./bundle-path\";\nimport { isAppDescriptorPath } from \"./config\";\n\n/**\n * Local-first bundle resolution (ADR 0011 amendment; unified policy, ADR 0021\n * amendment): a self-contained runtime image stages its own namespace under\n * `BOS_BUNDLE_DIR` as `bundles/<account>/<gateway>/<workspace>/…` and consumes\n * those bytes directly from disk; a miss falls through to the network, so a\n * partially-staged namespace boots over the wire instead of failing. The\n * registry tier (children, `BOS_BUNDLE_DIR` unset) keeps the network fetch —\n * the namespace guard below only ever matches the runtime's own\n * account/gateway, never another runtime's layout.\n */\n\nexport interface BundleNamespace {\n  readonly bundleDir: string;\n  readonly account: string;\n  readonly gateway: string;\n}\n\nexport class BundleReadError extends Schema.TaggedError<BundleReadError>()(\"BundleReadError\", {\n  path: Schema.String,\n  cause: Schema.optional(Schema.Unknown),\n}) {}\n\nconst MIME_TYPES: Record<string, string> = {\n  \".js\": \"text/javascript\",\n  \".mjs\": \"text/javascript\",\n  \".cjs\": \"text/javascript\",\n  \".css\": \"text/css\",\n  \".json\": \"application/json\",\n  \".map\": \"application/json\",\n  \".svg\": \"image/svg+xml\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".webp\": \"image/webp\",\n  \".avif\": \"image/avif\",\n  \".ico\": \"image/x-icon\",\n  \".html\": \"text/html\",\n  \".htm\": \"text/html\",\n  \".webmanifest\": \"application/manifest+json\",\n  \".md\": \"text/markdown\",\n  \".ts\": \"text/plain\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".otf\": \"font/otf\",\n  \".eot\": \"application/vnd.ms-fontobject\",\n  \".wasm\": \"application/wasm\",\n  \".txt\": \"text/plain\",\n  \".xml\": \"application/xml\",\n};\n\n/**\n * Own-namespace path for a bundle URL: the shared URL→staged-path mapping,\n * narrowed to the runtime identity — a URL whose encoded namespace differs\n * from `namespace.account`/`namespace.gateway` must fall to the network/cache\n * path, never serve a sibling namespace's staged bytes.\n */\nexport function bundleUrlToLocalPath(url: string, namespace: BundleNamespace): string | null {\n  const filePath = bundleUrlToStagedPath(url, namespace.bundleDir);\n  if (!filePath) return null;\n\n  const nsDir = path.resolve(namespace.bundleDir, namespace.account, namespace.gateway);\n  if (filePath !== nsDir && !filePath.startsWith(nsDir + path.sep)) return null;\n\n  return filePath;\n}\n\nexport class BundleResolver extends Context.Service<\n  BundleResolver,\n  {\n    /** Resolve a fetch target from the staged namespace; null = miss or not our namespace — fall through to the network. */\n    readonly lookup: (input: string | URL | Request) => Effect.Effect<Response | null>;\n  }\n>()(\"everything-dev/bundle-fs-resolve/BundleResolver\") {\n  static layer(namespace: BundleNamespace): Layer.Layer<BundleResolver> {\n    const respond = Effect.fn(\"BundleResolver.respond\")(function* (\n      url: string,\n    ): Effect.fn.Return<Response | null, never> {\n      const filePath = bundleUrlToLocalPath(url, namespace);\n      if (!filePath) return null;\n      const bytes = yield* Effect.tryPromise({\n        try: () => readFile(filePath),\n        catch: (cause) => new BundleReadError({ path: filePath, cause }),\n      }).pipe(Effect.catchTag(\"BundleReadError\", () => Effect.succeed(null)));\n      if (bytes === null) return null;\n      const name = path.basename(filePath);\n      const contentType =\n        MIME_TYPES[path.extname(name).toLowerCase()] ?? \"application/octet-stream\";\n      return new Response(new Uint8Array(bytes), {\n        headers: {\n          \"content-type\": contentType,\n          \"cache-control\": cacheControlOf(name),\n          etag: `\"${Buffer.from(bytes.subarray(0, 4096)).toString(\"base64\").slice(0, 24)}\"`,\n        },\n      });\n    });\n\n    return Layer.effect(\n      BundleResolver,\n      Effect.succeed(\n        BundleResolver.of({\n          lookup: (input) => {\n            const url =\n              typeof input === \"string\" ? input : input instanceof URL ? input.href : input.url;\n            return respond(url);\n          },\n        }),\n      ),\n    );\n  }\n}\n\nexport interface BundleFetchHandle {\n  readonly uninstall: () => Promise<void>;\n}\n\nexport interface BundleFetchOptions {\n  /** Own-namespace FS resolution — requires a staged `BOS_BUNDLE_DIR`. */\n  namespace?: BundleNamespace;\n  /**\n   * Foreign-namespace stale-if-error cache (child tier): `/bundles/…` URLs\n   * outside the own namespace write through to disk on success and serve\n   * the last-known-good bytes when the origin fails. Enabled implicitly\n   * when `namespace` is present (deployment contexts), or explicitly via\n   * `BOS_BUNDLE_CACHE_DIR`.\n   */\n  cacheDir?: string;\n}\n\ntype FetchImpl = typeof globalThis.fetch;\n\nconst staleResponse = (bytes: Uint8Array, url: string): Response => {\n  const name = url.split(\"?\")[0].split(\"/\").pop() ?? \"\";\n  const contentType = MIME_TYPES[path.extname(name).toLowerCase()] ?? \"application/octet-stream\";\n  return new Response(bytes.slice().buffer, {\n    status: 200,\n    headers: { \"content-type\": contentType, \"x-bundle-cache\": \"stale\" },\n  });\n};\n\nconst FETCH_RETRY_ATTEMPTS = 3;\nconst FETCH_RETRY_BASE_DELAY_MS = 250;\n\nconst isTransientStatus = (status: number): boolean => status === 429 || status >= 500;\n\nfunction requestMethod(input: Parameters<FetchImpl>[0], init?: Parameters<FetchImpl>[1]): string {\n  if (init?.method) return init.method.toUpperCase();\n  if (typeof input === \"string\" || input instanceof URL) return \"GET\";\n  return input.method.toUpperCase();\n}\n\n/**\n * Bounded transient-failure retry for idempotent GETs crossing the\n * interceptor (ADR 0021 amendment — the CDN-only image): a cold boot has no\n * staged fallback, so one edge/registry hiccup during the load window would\n * hard-fail the host or a plugin with no recourse. Network errors and\n * 429/5xx responses retry twice (250ms, 750ms backoff) before propagating;\n * non-transient statuses and non-GET requests pass through untouched. After\n * exhausting attempts a stale-if-error cache still sees the final failure.\n */\nasync function fetchWithTransientRetry(\n  original: FetchImpl,\n  input: Parameters<FetchImpl>[0],\n  init?: Parameters<FetchImpl>[1],\n): Promise<Response> {\n  if (requestMethod(input, init) !== \"GET\") return original(input, init);\n  let lastError: unknown;\n  let lastResponse: Response | null = null;\n  for (let attempt = 0; attempt < FETCH_RETRY_ATTEMPTS; attempt++) {\n    if (attempt > 0) {\n      await new Promise((resolve) =>\n        setTimeout(resolve, FETCH_RETRY_BASE_DELAY_MS * 3 ** (attempt - 1)),\n      );\n    }\n    try {\n      const response = await original(input, init);\n      if (!isTransientStatus(response.status)) return response;\n      lastResponse = response;\n    } catch (error) {\n      lastError = error;\n    }\n  }\n  if (lastResponse) return lastResponse;\n  throw lastError;\n}\n\n/**\n * Installs the resolver as a global fetch interceptor — the one seam every\n * boot-time consumer shares (config manifest discovery, contract-type\n * fetches, orchestrator host loading, MF remoteEntry/identity probes).\n * One layered resolution policy: staged disk → network → stale-if-error.\n * Own-namespace URLs resolve from the staged directory and fall through to\n * the original fetch on a miss (a partially-staged namespace boots over the\n * wire instead of failing); a miss never touches the write-through cache —\n * for the own namespace the staged disk IS the resilience artifact. Foreign\n * `/bundles/…` URLs get the network with the stale-if-error cache; every\n * other URL falls through to the original fetch untouched. Inert when\n * neither a staged namespace nor a cache is configured.\n */\nexport function installGlobalBundleFetch(options: BundleFetchOptions): BundleFetchHandle {\n  const namespace = options.namespace;\n  const cacheDir = options.cacheDir;\n  const runtime = namespace ? ManagedRuntime.make(BundleResolver.layer(namespace)) : null;\n  const original: FetchImpl = globalThis.fetch;\n  const patched = (async (input: Parameters<FetchImpl>[0], init?: Parameters<FetchImpl>[1]) => {\n    const url = typeof input === \"string\" ? input : input instanceof URL ? input.href : input.url;\n\n    if (namespace && bundleUrlToLocalPath(url, namespace)) {\n      if (!runtime) throw new Error(\"unreachable: resolver runtime missing\");\n      const response = await runtime.runPromise(\n        Effect.gen(function* () {\n          const resolver = yield* BundleResolver;\n          return yield* resolver.lookup(input);\n        }),\n      );\n      if (response !== null) return response;\n      return fetchWithTransientRetry(original, input, init);\n    }\n\n    if (cacheDir !== undefined && bundleCachePath(url, { cacheDir })) {\n      return (async () => {\n        try {\n          const response = await fetchWithTransientRetry(original, input, init);\n          if (response.ok) {\n            try {\n              const bytes = new Uint8Array(await response.clone().arrayBuffer());\n              await writeBundleCache(url, bytes, { cacheDir });\n            } catch {\n              // write-through is best-effort\n            }\n          } else {\n            const cached = await readBundleCache(url, { cacheDir });\n            if (cached) return staleResponse(cached, url);\n          }\n          return response;\n        } catch (error) {\n          const cached = await readBundleCache(url, { cacheDir });\n          if (cached) return staleResponse(cached, url);\n          throw error;\n        }\n      })();\n    }\n\n    return fetchWithTransientRetry(original, input, init);\n  }) as FetchImpl;\n  const originalPreconnect = (original as Partial<FetchImpl>).preconnect;\n  if (originalPreconnect) {\n    patched.preconnect = originalPreconnect.bind(original);\n  }\n  globalThis.fetch = patched;\n  return {\n    uninstall: async () => {\n      if (globalThis.fetch === patched) {\n        globalThis.fetch = original;\n      }\n      if (runtime) await runtime.dispose();\n    },\n  };\n}\n\n/**\n * Boot-time installer for the CLI: derives the own namespace from\n * `BOS_BUNDLE_DIR` plus the runtime identity (`BOS_ACCOUNT`/`BOS_GATEWAY`\n * registry env taking precedence over the bos.config.json fields), and the\n * foreign-namespace cache from `BOS_BUNDLE_CACHE_DIR`. Tier auto-detection\n * (ADR 0021): an identity whose namespace is not actually staged under the\n * bundle dir drops to the registry tier — plain network fetch — instead of\n * deterministically 404ing own-namespace URLs against a foreign image's\n * staged bytes. Never throws — a missing or malformed identity leaves the\n * default network fetch in place.\n */\nexport function installBundleFetchFromEnv(input: {\n  configPath?: string | null;\n}): BundleFetchHandle | null {\n  const bundleDir = process.env.BOS_BUNDLE_DIR;\n  const cacheDir = process.env.BOS_BUNDLE_CACHE_DIR;\n  if (!bundleDir && cacheDir === undefined) return null;\n\n  let configAccount: string | undefined;\n  let configGateway: string | undefined;\n  const configPath = input.configPath;\n  if (configPath && !isAppDescriptorPath(configPath)) {\n    try {\n      const parsed = JSON.parse(readFileSync(configPath, \"utf8\")) as {\n        account?: string;\n        domain?: string;\n      };\n      configAccount = parsed.account;\n      configGateway = parsed.domain;\n    } catch {\n      // unreadable config — identity may still come from the registry env\n    }\n  }\n\n  const account = process.env.BOS_ACCOUNT ?? configAccount;\n  const gateway = process.env.BOS_GATEWAY ?? configGateway;\n  if (bundleDir && (!account || !gateway)) return null;\n\n  let namespace: BundleNamespace | undefined;\n  if (bundleDir && account && gateway) {\n    if (existsSync(path.join(bundleDir, account, gateway))) {\n      namespace = { bundleDir, account, gateway };\n    } else {\n      console.warn(\n        `[bundles] staged namespace ${account}/${gateway} not found under ${bundleDir} — registry tier (network fetch)`,\n      );\n    }\n  }\n  return installGlobalBundleFetch({\n    namespace,\n    cacheDir: cacheDir ?? (namespace ? bundleCacheRoot() : undefined),\n  });\n}\n"],"mappings":";;;;;;;;;;AA+BA,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB;CAC5F,MAAM,OAAO;CACb,OAAO,OAAO,SAAS,OAAO,OAAO;AACvC,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,aAAqC;CACzC,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,SAAS;CACT,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,gBAAgB;CAChB,OAAO;CACP,OAAO;CACP,SAAS;CACT,UAAU;CACV,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;AACV;;;;;;;AAQA,SAAgB,qBAAqB,KAAa,WAA2C;CAC3F,MAAM,WAAW,sBAAsB,KAAK,UAAU,SAAS;CAC/D,IAAI,CAAC,UAAU,OAAO;CAEtB,MAAM,QAAQ,KAAK,QAAQ,UAAU,WAAW,UAAU,SAAS,UAAU,OAAO;CACpF,IAAI,aAAa,SAAS,CAAC,SAAS,WAAW,QAAQ,KAAK,GAAG,GAAG,OAAO;CAEzE,OAAO;AACT;AAEA,IAAa,iBAAb,MAAa,uBAAuB,QAAQ,QAM1C,CAAC,CAAC,iDAAiD,CAAC,CAAC;CACrD,OAAO,MAAM,WAAyD;EACpE,MAAM,UAAU,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAClD,KAC0C;GAC1C,MAAM,WAAW,qBAAqB,KAAK,SAAS;GACpD,IAAI,CAAC,UAAU,OAAO;GACtB,MAAM,QAAQ,OAAO,OAAO,WAAW;IACrC,WAAW,SAAS,QAAQ;IAC5B,QAAQ,UAAU,IAAI,gBAAgB;KAAE,MAAM;KAAU;IAAM,CAAC;GACjE,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,yBAAyB,OAAO,QAAQ,IAAI,CAAC,CAAC;GACtE,IAAI,UAAU,MAAM,OAAO;GAC3B,MAAM,OAAO,KAAK,SAAS,QAAQ;GACnC,MAAM,cACJ,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,MAAM;GAClD,OAAO,IAAI,SAAS,IAAI,WAAW,KAAK,GAAG,EACzC,SAAS;IACP,gBAAgB;IAChB,iBAAiB,eAAe,IAAI;IACpC,MAAM,IAAI,OAAO,KAAK,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE;GACjF,EACF,CAAC;EACH,CAAC;EAED,OAAO,MAAM,OACX,gBACA,OAAO,QACL,eAAe,GAAG,EAChB,SAAS,UAAU;GACjB,MAAM,MACJ,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,OAAO,MAAM;GAChF,OAAO,QAAQ,GAAG;EACpB,EACF,CAAC,CACH,CACF;CACF;AACF;AAqBA,MAAM,iBAAiB,OAAmB,QAA0B;CAClE,MAAM,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACnD,MAAM,cAAc,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,MAAM;CACpE,OAAO,IAAI,SAAS,MAAM,MAAM,CAAC,CAAC,QAAQ;EACxC,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAa,kBAAkB;EAAQ;CACpE,CAAC;AACH;AAEA,MAAM,uBAAuB;AAC7B,MAAM,4BAA4B;AAElC,MAAM,qBAAqB,WAA4B,WAAW,OAAO,UAAU;AAEnF,SAAS,cAAc,OAAiC,MAAyC;CAC/F,IAAI,MAAM,QAAQ,OAAO,KAAK,OAAO,YAAY;CACjD,IAAI,OAAO,UAAU,YAAY,iBAAiB,KAAK,OAAO;CAC9D,OAAO,MAAM,OAAO,YAAY;AAClC;;;;;;;;;;AAWA,eAAe,wBACb,UACA,OACA,MACmB;CACnB,IAAI,cAAc,OAAO,IAAI,MAAM,OAAO,OAAO,SAAS,OAAO,IAAI;CACrE,IAAI;CACJ,IAAI,eAAgC;CACpC,KAAK,IAAI,UAAU,GAAG,UAAU,sBAAsB,WAAW;EAC/D,IAAI,UAAU,GACZ,MAAM,IAAI,SAAS,YACjB,WAAW,SAAS,4BAA4B,MAAM,UAAU,EAAE,CACpE;EAEF,IAAI;GACF,MAAM,WAAW,MAAM,SAAS,OAAO,IAAI;GAC3C,IAAI,CAAC,kBAAkB,SAAS,MAAM,GAAG,OAAO;GAChD,eAAe;EACjB,SAAS,OAAO;GACd,YAAY;EACd;CACF;CACA,IAAI,cAAc,OAAO;CACzB,MAAM;AACR;;;;;;;;;;;;;;AAeA,SAAgB,yBAAyB,SAAgD;CACvF,MAAM,YAAY,QAAQ;CAC1B,MAAM,WAAW,QAAQ;CACzB,MAAM,UAAU,YAAY,eAAe,KAAK,eAAe,MAAM,SAAS,CAAC,IAAI;CACnF,MAAM,WAAsB,WAAW;CACvC,MAAM,WAAW,OAAO,OAAiC,SAAoC;EAC3F,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,OAAO,MAAM;EAE1F,IAAI,aAAa,qBAAqB,KAAK,SAAS,GAAG;GACrD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,uCAAuC;GACrE,MAAM,WAAW,MAAM,QAAQ,WAC7B,OAAO,IAAI,aAAa;IAEtB,OAAO,QAAO,OADU,eACF,CAAC,OAAO,KAAK;GACrC,CAAC,CACH;GACA,IAAI,aAAa,MAAM,OAAO;GAC9B,OAAO,wBAAwB,UAAU,OAAO,IAAI;EACtD;EAEA,IAAI,aAAa,UAAa,gBAAgB,KAAK,EAAE,SAAS,CAAC,GAC7D,QAAQ,YAAY;GAClB,IAAI;IACF,MAAM,WAAW,MAAM,wBAAwB,UAAU,OAAO,IAAI;IACpE,IAAI,SAAS,IACX,IAAI;KACF,MAAM,QAAQ,IAAI,WAAW,MAAM,SAAS,MAAM,CAAC,CAAC,YAAY,CAAC;KACjE,MAAM,iBAAiB,KAAK,OAAO,EAAE,SAAS,CAAC;IACjD,QAAQ,CAER;SACK;KACL,MAAM,SAAS,MAAM,gBAAgB,KAAK,EAAE,SAAS,CAAC;KACtD,IAAI,QAAQ,OAAO,cAAc,QAAQ,GAAG;IAC9C;IACA,OAAO;GACT,SAAS,OAAO;IACd,MAAM,SAAS,MAAM,gBAAgB,KAAK,EAAE,SAAS,CAAC;IACtD,IAAI,QAAQ,OAAO,cAAc,QAAQ,GAAG;IAC5C,MAAM;GACR;EACF,EAAC,CAAE;EAGL,OAAO,wBAAwB,UAAU,OAAO,IAAI;CACtD;CACA,MAAM,qBAAsB,SAAgC;CAC5D,IAAI,oBACF,QAAQ,aAAa,mBAAmB,KAAK,QAAQ;CAEvD,WAAW,QAAQ;CACnB,OAAO,EACL,WAAW,YAAY;EACrB,IAAI,WAAW,UAAU,SACvB,WAAW,QAAQ;EAErB,IAAI,SAAS,MAAM,QAAQ,QAAQ;CACrC,EACF;AACF;;;;;;;;;;;;AAaA,SAAgB,0BAA0B,OAEb;CAC3B,MAAM,YAAY,QAAQ,IAAI;CAC9B,MAAM,WAAW,QAAQ,IAAI;CAC7B,IAAI,CAAC,aAAa,aAAa,QAAW,OAAO;CAEjD,IAAI;CACJ,IAAI;CACJ,MAAM,aAAa,MAAM;CACzB,IAAI,cAAc,CAAC,oBAAoB,UAAU,GAC/C,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;EAI1D,gBAAgB,OAAO;EACvB,gBAAgB,OAAO;CACzB,QAAQ,CAER;CAGF,MAAM,UAAU,QAAQ,IAAI,eAAe;CAC3C,MAAM,UAAU,QAAQ,IAAI,eAAe;CAC3C,IAAI,cAAc,CAAC,WAAW,CAAC,UAAU,OAAO;CAEhD,IAAI;CACJ,IAAI,aAAa,WAAW,SAAS;EACnC,IAAI,WAAW,KAAK,KAAK,WAAW,SAAS,OAAO,CAAC,GACnD,YAAY;GAAE;GAAW;GAAS;EAAQ;OAE1C,QAAQ,KACN,8BAA8B,QAAQ,GAAG,QAAQ,mBAAmB,UAAU,iCAChF;CAEJ;CACA,OAAO,yBAAyB;EAC9B;EACA,UAAU,aAAa,YAAY,gBAAgB,IAAI;CACzD,CAAC;AACH"}

package/dist/bundle-path.cjs

@@ -1,48 +0,0 @@
-const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
-let node_path = require("node:path");
-node_path = require_runtime.__toESM(node_path, 1);
-
-//#region src/bundle-path.ts
-/**
-* Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their
-* namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the
-* staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The
-* namespace is taken from the URL itself — unlike the runtime-identity
-* resolution, this answers "which staged directory do these bytes live in?"
-* rather than "is this my namespace?" — and the result is contained within
-* the account/gateway directory. Returns null for foreign shapes.
-*/
-function bundleUrlToStagedPath(url, bundleDir) {
-	let parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		return null;
-	}
-	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
-	const segments = parsed.pathname.split("/").filter(Boolean);
-	if (segments[0] !== "bundles" || segments.length < 3) return null;
-	let decoded;
-	try {
-		decoded = segments.slice(1).map((segment) => decodeURIComponent(segment));
-	} catch {
-		return null;
-	}
-	const [account, gateway, ...rest] = decoded;
-	if (!account || !gateway || rest.length === 0) return null;
-	const nsDir = node_path.default.resolve(bundleDir, account, gateway);
-	const filePath = node_path.default.resolve(nsDir, ...rest);
-	if (filePath === nsDir || !filePath.startsWith(nsDir + node_path.default.sep)) return null;
-	return filePath;
-}
-/** Resolve a relative config-supplied path inside `dir`, or null on escape. */
-function resolveContained(dir, relative) {
-	const resolved = node_path.default.resolve(dir, ...relative.split("/").filter(Boolean));
-	if (resolved === dir || !resolved.startsWith(dir + node_path.default.sep)) return null;
-	return resolved;
-}
-
-//#endregion
-exports.bundleUrlToStagedPath = bundleUrlToStagedPath;
-exports.resolveContained = resolveContained;
-//# sourceMappingURL=bundle-path.cjs.map

package/dist/bundle-path.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundle-path.cjs","names":["path"],"sources":["../src/bundle-path.ts"],"sourcesContent":["import path from \"node:path\";\n\n/**\n * Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their\n * namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the\n * staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The\n * namespace is taken from the URL itself — unlike the runtime-identity\n * resolution, this answers \"which staged directory do these bytes live in?\"\n * rather than \"is this my namespace?\" — and the result is contained within\n * the account/gateway directory. Returns null for foreign shapes.\n */\nexport function bundleUrlToStagedPath(url: string, bundleDir: string): string | null {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return null;\n  }\n  if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") return null;\n\n  const segments = parsed.pathname.split(\"/\").filter(Boolean);\n  if (segments[0] !== \"bundles\" || segments.length < 3) return null;\n\n  let decoded: string[];\n  try {\n    decoded = segments.slice(1).map((segment) => decodeURIComponent(segment));\n  } catch {\n    return null;\n  }\n  const [account, gateway, ...rest] = decoded;\n  if (!account || !gateway || rest.length === 0) return null;\n\n  const nsDir = path.resolve(bundleDir, account, gateway);\n  const filePath = path.resolve(nsDir, ...rest);\n  if (filePath === nsDir || !filePath.startsWith(nsDir + path.sep)) return null;\n  return filePath;\n}\n\n/** Resolve a relative config-supplied path inside `dir`, or null on escape. */\nexport function resolveContained(dir: string, relative: string): string | null {\n  const resolved = path.resolve(dir, ...relative.split(\"/\").filter(Boolean));\n  if (resolved === dir || !resolved.startsWith(dir + path.sep)) return null;\n  return resolved;\n}\n"],"mappings":";;;;;;;;;;;;;;AAWA,SAAgB,sBAAsB,KAAa,WAAkC;CACnF,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SAAS,OAAO;CAExE,MAAM,WAAW,OAAO,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO;CAC1D,IAAI,SAAS,OAAO,aAAa,SAAS,SAAS,GAAG,OAAO;CAE7D,IAAI;CACJ,IAAI;EACF,UAAU,SAAS,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,mBAAmB,OAAO,CAAC;CAC1E,QAAQ;EACN,OAAO;CACT;CACA,MAAM,CAAC,SAAS,SAAS,GAAG,QAAQ;CACpC,IAAI,CAAC,WAAW,CAAC,WAAW,KAAK,WAAW,GAAG,OAAO;CAEtD,MAAM,QAAQA,kBAAK,QAAQ,WAAW,SAAS,OAAO;CACtD,MAAM,WAAWA,kBAAK,QAAQ,OAAO,GAAG,IAAI;CAC5C,IAAI,aAAa,SAAS,CAAC,SAAS,WAAW,QAAQA,kBAAK,GAAG,GAAG,OAAO;CACzE,OAAO;AACT;;AAGA,SAAgB,iBAAiB,KAAa,UAAiC;CAC7E,MAAM,WAAWA,kBAAK,QAAQ,KAAK,GAAG,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO,CAAC;CACzE,IAAI,aAAa,OAAO,CAAC,SAAS,WAAW,MAAMA,kBAAK,GAAG,GAAG,OAAO;CACrE,OAAO;AACT"}

package/dist/bundle-path.mjs

@@ -1,45 +0,0 @@
-import path from "node:path";
-
-//#region src/bundle-path.ts
-/**
-* Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their
-* namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the
-* staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The
-* namespace is taken from the URL itself — unlike the runtime-identity
-* resolution, this answers "which staged directory do these bytes live in?"
-* rather than "is this my namespace?" — and the result is contained within
-* the account/gateway directory. Returns null for foreign shapes.
-*/
-function bundleUrlToStagedPath(url, bundleDir) {
-	let parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		return null;
-	}
-	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
-	const segments = parsed.pathname.split("/").filter(Boolean);
-	if (segments[0] !== "bundles" || segments.length < 3) return null;
-	let decoded;
-	try {
-		decoded = segments.slice(1).map((segment) => decodeURIComponent(segment));
-	} catch {
-		return null;
-	}
-	const [account, gateway, ...rest] = decoded;
-	if (!account || !gateway || rest.length === 0) return null;
-	const nsDir = path.resolve(bundleDir, account, gateway);
-	const filePath = path.resolve(nsDir, ...rest);
-	if (filePath === nsDir || !filePath.startsWith(nsDir + path.sep)) return null;
-	return filePath;
-}
-/** Resolve a relative config-supplied path inside `dir`, or null on escape. */
-function resolveContained(dir, relative) {
-	const resolved = path.resolve(dir, ...relative.split("/").filter(Boolean));
-	if (resolved === dir || !resolved.startsWith(dir + path.sep)) return null;
-	return resolved;
-}
-
-//#endregion
-export { bundleUrlToStagedPath, resolveContained };
-//# sourceMappingURL=bundle-path.mjs.map

package/dist/bundle-path.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundle-path.mjs","names":[],"sources":["../src/bundle-path.ts"],"sourcesContent":["import path from \"node:path\";\n\n/**\n * Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their\n * namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the\n * staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The\n * namespace is taken from the URL itself — unlike the runtime-identity\n * resolution, this answers \"which staged directory do these bytes live in?\"\n * rather than \"is this my namespace?\" — and the result is contained within\n * the account/gateway directory. Returns null for foreign shapes.\n */\nexport function bundleUrlToStagedPath(url: string, bundleDir: string): string | null {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return null;\n  }\n  if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") return null;\n\n  const segments = parsed.pathname.split(\"/\").filter(Boolean);\n  if (segments[0] !== \"bundles\" || segments.length < 3) return null;\n\n  let decoded: string[];\n  try {\n    decoded = segments.slice(1).map((segment) => decodeURIComponent(segment));\n  } catch {\n    return null;\n  }\n  const [account, gateway, ...rest] = decoded;\n  if (!account || !gateway || rest.length === 0) return null;\n\n  const nsDir = path.resolve(bundleDir, account, gateway);\n  const filePath = path.resolve(nsDir, ...rest);\n  if (filePath === nsDir || !filePath.startsWith(nsDir + path.sep)) return null;\n  return filePath;\n}\n\n/** Resolve a relative config-supplied path inside `dir`, or null on escape. */\nexport function resolveContained(dir: string, relative: string): string | null {\n  const resolved = path.resolve(dir, ...relative.split(\"/\").filter(Boolean));\n  if (resolved === dir || !resolved.startsWith(dir + path.sep)) return null;\n  return resolved;\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,sBAAsB,KAAa,WAAkC;CACnF,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SAAS,OAAO;CAExE,MAAM,WAAW,OAAO,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO;CAC1D,IAAI,SAAS,OAAO,aAAa,SAAS,SAAS,GAAG,OAAO;CAE7D,IAAI;CACJ,IAAI;EACF,UAAU,SAAS,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,mBAAmB,OAAO,CAAC;CAC1E,QAAQ;EACN,OAAO;CACT;CACA,MAAM,CAAC,SAAS,SAAS,GAAG,QAAQ;CACpC,IAAI,CAAC,WAAW,CAAC,WAAW,KAAK,WAAW,GAAG,OAAO;CAEtD,MAAM,QAAQ,KAAK,QAAQ,WAAW,SAAS,OAAO;CACtD,MAAM,WAAW,KAAK,QAAQ,OAAO,GAAG,IAAI;CAC5C,IAAI,aAAa,SAAS,CAAC,SAAS,WAAW,QAAQ,KAAK,GAAG,GAAG,OAAO;CACzE,OAAO;AACT;;AAGA,SAAgB,iBAAiB,KAAa,UAAiC;CAC7E,MAAM,WAAW,KAAK,QAAQ,KAAK,GAAG,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO,CAAC;CACzE,IAAI,aAAa,OAAO,CAAC,SAAS,WAAW,MAAM,KAAK,GAAG,GAAG,OAAO;CACrE,OAAO;AACT"}

package/dist/mf.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mf.cjs","names":["computeSriHash","readBundleCache","writeBundleCache","getInstance","createInstance","isEffectCriticalSharedDep","readFileSync"],"sources":["../src/mf.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { createInstance, getInstance } from \"@module-federation/enhanced/runtime\";\nimport { setGlobalFederationInstance } from \"@module-federation/runtime-core\";\nimport { isEffectCriticalSharedDep } from \"every-plugin/build/rspack\";\nimport { readBundleCache, writeBundleCache } from \"./bundle-cache\";\nimport { computeSriHash, type IntegrityRegistry } from \"./integrity\";\nimport type { BosConfig, BosPluginRef } from \"./types\";\n\ntype FederationInstance = ReturnType<typeof createInstance>;\n\nlet mfInstance: FederationInstance | null = null;\n\nfunction fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  return fetch(url, { ...init, signal: controller.signal }).finally(() => clearTimeout(timer));\n}\n\nexport function patchManifestFetchForSsrPublicPath(mf: FederationInstance): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) return;\n  if ((mf as any).__everythingDevPatchedManifestFetch === true) return;\n  (mf as any).__everythingDevPatchedManifestFetch = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\" || !url.endsWith(\"/mf-manifest.json\")) {\n      return;\n    }\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000)\n      .then((res) => res.json())\n      .then((json: any) => {\n        json.metaData = json.metaData ?? {};\n        json.metaData.ssrPublicPath =\n          json.metaData.ssrPublicPath ?? url.replace(/\\/mf-manifest\\.json$/, \"/\");\n        if (json.metaData.publicPath === \"auto\" || json.metaData.publicPath === \"\") {\n          json.metaData.publicPath = \"/\";\n        }\n        return new Response(JSON.stringify(json), {\n          headers: { \"content-type\": \"application/json\" },\n        });\n      });\n  });\n}\n\nexport function installIntegrityFetchHook(\n  mf: FederationInstance,\n  registry: IntegrityRegistry,\n  options?: { cacheDir?: string },\n): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) {\n    console.warn(\"[SRI] MF lifecycle fetch hook not available, skipping integrity-in-pipeline\");\n    return;\n  }\n  if ((mf as any).__everythingDevIntegrityHook === true) return;\n  (mf as any).__everythingDevIntegrityHook = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\") return;\n\n    const expectedHash = registry.get(url);\n    if (!expectedHash) return;\n\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000).then(async (res) => {\n      const buffer = Buffer.from(await res.arrayBuffer());\n      const computed = computeSriHash(buffer);\n\n      if (computed !== expectedHash) {\n        // ticket 09 (atomic-deploys): an SRI mismatch is treated like an\n        // origin failure — the last-known-good bytes (which satisfied the\n        // same pin when cached) serve instead, and the corrupted bytes are\n        // never written into the cache.\n        const cached = await readBundleCache(url as string, { cacheDir: options?.cacheDir });\n        if (cached && computeSriHash(Buffer.from(cached)) === expectedHash) {\n          console.warn(\n            `[SRI] Origin bytes failed verification for ${url} — serving last-known-good from the bundle cache`,\n          );\n          return new Response(cached.slice().buffer, {\n            status: 200,\n            headers: { \"x-bundle-cache\": \"stale\" },\n          });\n        }\n        console.error(\n          `[SRI] Integrity check failed in MF fetch pipeline for ${url}\\n  Expected: ${expectedHash}\\n  Computed: ${computed}`,\n        );\n        return new Response(`Integrity check failed for ${url}`, {\n          status: 500,\n          statusText: \"Integrity Check Failed\",\n        });\n      }\n\n      // verified: pin-checked write-through\n      await writeBundleCache(url as string, new Uint8Array(buffer), {\n        cacheDir: options?.cacheDir,\n      }).catch(() => {\n        // write-through is best-effort\n      });\n\n      return new Response(buffer, {\n        status: res.status,\n        statusText: res.statusText,\n        headers: res.headers,\n      });\n    });\n  });\n}\n\nexport function getFederationInstance(): FederationInstance {\n  if (mfInstance) return mfInstance;\n\n  const existing = getInstance();\n  if (existing) {\n    mfInstance = existing as FederationInstance;\n    setGlobalFederationInstance(mfInstance as any);\n    patchManifestFetchForSsrPublicPath(mfInstance);\n    return mfInstance;\n  }\n\n  mfInstance = createInstance({\n    name: \"host\",\n    remotes: [],\n  }) as FederationInstance;\n  setGlobalFederationInstance(mfInstance as any);\n  patchManifestFetchForSsrPublicPath(mfInstance);\n  return mfInstance;\n}\n\nexport async function registerRemote(opts: {\n  name: string;\n  entry: string;\n  type?: \"manifest\" | \"script\";\n}): Promise<void> {\n  const instance = getFederationInstance();\n\n  const inferType = (): \"manifest\" | \"script\" => {\n    if (opts.type) return opts.type;\n    if (opts.entry.endsWith(\"/mf-manifest.json\")) return \"manifest\";\n    if (/\\/remoteEntry(\\.[a-f0-9]{8,})?\\.js$/.test(opts.entry)) return \"script\";\n    return typeof window === \"undefined\" ? \"script\" : \"manifest\";\n  };\n\n  const remoteType = inferType();\n\n  instance.registerRemotes([\n    {\n      name: opts.name,\n      entry: opts.entry,\n      type: remoteType,\n    },\n  ]);\n}\n\nexport async function loadRemoteModule<T>(\n  specifier: string,\n  options?: { loadFactory?: boolean; from?: \"build\" | \"runtime\" },\n): Promise<T> {\n  const instance = getFederationInstance();\n\n  const isServer = typeof window === \"undefined\";\n  if (isServer) {\n    await (instance as any).initializeSharing?.(\"default\");\n  }\n\n  const mod = await instance.loadRemote<T>(specifier, options as any);\n  if (!mod) {\n    throw new Error(`Failed to load remote module: ${specifier}`);\n  }\n  return mod;\n}\n\nexport async function ensureNodeRuntimePlugin(): Promise<void> {\n  const instance = getFederationInstance();\n  if (typeof window !== \"undefined\") return;\n  if ((instance as any).__nodeRuntimePluginLoaded) return;\n\n  const mod: any = await import(\"@module-federation/node/runtimePlugin\");\n  const factory = mod?.default ?? mod;\n  const plugin = typeof factory === \"function\" ? factory() : null;\n  if (plugin) {\n    instance.registerPlugins([plugin]);\n  }\n  (instance as any).__nodeRuntimePluginLoaded = true;\n}\n\nexport interface FederationCompatRemote {\n  role: string;\n  url: string;\n  reachable: boolean;\n  pluginVersion: string | null;\n  ok: boolean;\n  reason?: string;\n}\n\nexport interface FederationCompatReport {\n  ok: boolean;\n  hostVersion: string | null;\n  hostReachable: boolean;\n  hostReason?: string;\n  remotes: FederationCompatRemote[];\n}\n\nfunction parseSemver(v: unknown): { major: number; minor: number; patch: number } | null {\n  const m = typeof v === \"string\" ? /^(\\d+)\\.(\\d+)\\.(\\d+)/.exec(v) : null;\n  return m ? { major: +m[1]!, minor: +m[2]!, patch: +m[3]! } : null;\n}\n\nfunction satisfiesConstraint(version: string, constraint: string): boolean {\n  const trimmed = constraint.trim();\n  if (!trimmed) return true;\n  if (![\"^\", \"~\", \">\", \"<\", \"=\", \"x\"].some((c) => trimmed.startsWith(c))) {\n    return version === trimmed;\n  }\n  const m = /^\\s*\\^\\s*(\\d+)\\.(\\d+)\\.(\\d+)/.exec(trimmed);\n  if (!m) return true;\n  const v = parseSemver(version);\n  if (!v) return false;\n  if (v.major !== +m[1]!) return false;\n  if (v.minor < +m[2]! || (v.minor === +m[2]! && v.patch < +m[3]!)) return false;\n  const constraintPrerelease = trimmed.match(/-([0-9A-Za-z.-]+)/);\n  const versionPrerelease = /-([0-9A-Za-z.-]+)\\s*$/.exec(version);\n  if (constraintPrerelease) {\n    if (!versionPrerelease) return false;\n    const cPre = constraintPrerelease[1]!.split(\".\");\n    const vPre = versionPrerelease[1]!.split(\".\");\n    for (let i = 0; i < Math.max(cPre.length, vPre.length); i += 1) {\n      const c = cPre[i] ?? \"0\";\n      const p = vPre[i] ?? \"0\";\n      if (c === p) continue;\n      const cNum = /^\\d+$/.test(c) ? +c : null;\n      const pNum = /^\\d+$/.test(p) ? +p : null;\n      if (cNum !== null && pNum !== null) return cNum < pNum;\n      return cNum === null ? c.localeCompare(p) < 0 : false;\n    }\n    return true;\n  }\n  if (versionPrerelease) return false;\n  return true;\n}\n\nfunction manifestUrl(remoteUrl: string): string {\n  return remoteUrl.endsWith(\"/\") ? `${remoteUrl}mf-manifest.json` : `${remoteUrl}/mf-manifest.json`;\n}\n\nasync function fetchManifest(url: string, timeoutMs: number): Promise<unknown> {\n  const res = await fetch(manifestUrl(url), { signal: AbortSignal.timeout(timeoutMs) });\n  if (!res.ok) throw new Error(`HTTP ${res.status} ${res.statusText}`);\n  return res.json();\n}\n\nfunction listFederationRemotes(bosConfig: BosConfig): Array<{ role: string; url: string }> {\n  const out: Array<{ role: string; url: string }> = [];\n  for (const role of [\"api\", \"auth\"] as const) {\n    const url = readProductionUrl((bosConfig?.app as Record<string, unknown> | undefined)?.[role]);\n    if (url) out.push({ role, url });\n  }\n  for (const [id, slot] of Object.entries(bosConfig?.plugins ?? {})) {\n    const url = readProductionUrl(slot);\n    if (url) out.push({ role: id, url });\n  }\n  return out;\n}\n\nfunction readProductionUrl(entry: unknown): string | null {\n  if (typeof entry === \"string\") return entry.length > 0 ? entry : null;\n  if (entry && typeof (entry as BosPluginRef).production === \"string\") {\n    const url = (entry as BosPluginRef).production!;\n    return url.length > 0 ? url : null;\n  }\n  return null;\n}\n\ninterface RemoteManifest {\n  metaData?: { pluginVersion?: string };\n  shared?: Array<{ name: string; version?: string; requiredVersion?: string | null }>;\n}\n\nexport async function checkFederationCompat(\n  bosConfig: BosConfig | null,\n  opts: { timeoutMs?: number } = {},\n): Promise<FederationCompatReport> {\n  const timeoutMs = opts.timeoutMs ?? 15_000;\n\n  if (!bosConfig?.app?.host?.production) {\n    return { ok: true, hostVersion: null, hostReachable: false, remotes: [] };\n  }\n\n  const hostUrl = bosConfig.app.host.production;\n  let hostManifest: RemoteManifest | null = null;\n  let hostReason: string | undefined;\n  try {\n    hostManifest = (await fetchManifest(hostUrl, timeoutMs)) as RemoteManifest;\n  } catch (e) {\n    hostReason = e instanceof Error ? e.message : String(e);\n  }\n\n  const hostVersion = hostManifest?.metaData?.pluginVersion ?? null;\n  const hostShared = (hostManifest?.shared ?? []).filter(\n    (s) => typeof s.requiredVersion === \"string\",\n  );\n\n  const remotes = listFederationRemotes(bosConfig);\n  const settled = await Promise.allSettled(\n    remotes.map(async ({ role, url }) => {\n      let manifest: RemoteManifest | null = null;\n      let reason: string | undefined;\n      try {\n        manifest = (await fetchManifest(url, timeoutMs)) as RemoteManifest;\n      } catch (e) {\n        reason = e instanceof Error ? e.message : String(e);\n      }\n\n      const version = manifest?.metaData?.pluginVersion ?? null;\n      const versionOk = version !== null && version === hostVersion;\n\n      if (!manifest) {\n        return {\n          role,\n          url,\n          reachable: false,\n          pluginVersion: null,\n          ok: false,\n          reason: reason ?? \"unreachable\",\n        } satisfies FederationCompatRemote;\n      }\n\n      if (!versionOk) {\n        return {\n          role,\n          url,\n          reachable: true,\n          pluginVersion: version,\n          ok: false,\n          reason: hostVersion\n            ? `expected pluginVersion=${hostVersion} (host), got ${version ?? \"missing\"} — redeploy this plugin`\n            : `host manifest missing pluginVersion`,\n        } satisfies FederationCompatRemote;\n      }\n\n      const missingShared: string[] = [];\n      const mismatchedShared: string[] = [];\n      for (const hostDep of hostShared) {\n        const remDep = manifest.shared?.find((s) => s.name === hostDep.name);\n        if (!remDep) {\n          missingShared.push(`${hostDep.name}@${hostDep.requiredVersion}`);\n          continue;\n        }\n        if (!satisfiesConstraint(remDep.version ?? \"\", hostDep.requiredVersion!)) {\n          mismatchedShared.push(\n            `${hostDep.name}: remote=${remDep.version ?? \"?\"} hostReq=${hostDep.requiredVersion}`,\n          );\n        }\n        if (isEffectCriticalSharedDep(hostDep.name)) {\n          const hostVersion = hostDep.version ?? \"\";\n          const remoteVersion = remDep.version ?? \"\";\n          if (remoteVersion && remoteVersion !== hostVersion) {\n            mismatchedShared.push(\n              `${hostDep.name}: exact-version skew — remote=${remoteVersion} host=${hostVersion} — bundle was built against a different prerelease build; redeploy host and plugin together`,\n            );\n          }\n          const remoteRequired =\n            typeof remDep.requiredVersion === \"string\" ? remDep.requiredVersion.trim() : \"\";\n          if (\n            remoteRequired.length > 0 &&\n            remoteRequired[0] !== \"^\" &&\n            !satisfiesConstraint(hostVersion, remoteRequired)\n          ) {\n            mismatchedShared.push(\n              `${hostDep.name}: train skew — host=${hostVersion} vs remote requiredVersion=${remoteRequired}`,\n            );\n          }\n        }\n      }\n\n      const reasons = [\n        ...missingShared.map((d) => `missing shared \"${d}\" required by host`),\n        ...mismatchedShared,\n      ];\n      return {\n        role,\n        url,\n        reachable: true,\n        pluginVersion: version,\n        ok: reasons.length === 0,\n        reason: reasons[0],\n      } satisfies FederationCompatRemote;\n    }),\n  );\n\n  const remoteReports = settled.map((s, i) => {\n    const placeholder = {\n      role: remotes[i]!.role,\n      url: remotes[i]!.url,\n      reachable: false,\n      pluginVersion: null,\n      ok: false,\n    };\n    return s.status === \"fulfilled\" ? s.value : { ...placeholder, reason: String(s.reason) };\n  });\n\n  const ok =\n    hostManifest !== null &&\n    remoteReports.every((r) => r.ok && r.reachable && r.pluginVersion !== null);\n\n  return {\n    ok,\n    hostVersion,\n    hostReachable: hostManifest !== null,\n    hostReason,\n    remotes: remoteReports,\n  };\n}\n\nexport function loadBosConfigForMfCheck(configPath: string): BosConfig {\n  return JSON.parse(readFileSync(configPath, \"utf8\")) as BosConfig;\n}\n"],"mappings":";;;;;;;;;AAUA,IAAI,aAAwC;AAE5C,SAAS,iBAAiB,KAAa,MAAmB,WAAsC;CAC9F,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,SAAS;CAC5D,OAAO,MAAM,KAAK;EAAE,GAAG;EAAM,QAAQ,WAAW;CAAO,CAAC,CAAC,CAAC,cAAc,aAAa,KAAK,CAAC;AAC7F;AAEA,SAAgB,mCAAmC,IAA8B;CAC/E,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;CAC1D,IAAK,GAAW,wCAAwC,MAAM;CAC9D,AAAC,GAAW,sCAAsC;CAElD,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,SAAS,mBAAmB,GAC9D;EAEF,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAChE,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,CACzB,MAAM,SAAc;GACnB,KAAK,WAAW,KAAK,YAAY,CAAC;GAClC,KAAK,SAAS,gBACZ,KAAK,SAAS,iBAAiB,IAAI,QAAQ,wBAAwB,GAAG;GACxE,IAAI,KAAK,SAAS,eAAe,UAAU,KAAK,SAAS,eAAe,IACtE,KAAK,SAAS,aAAa;GAE7B,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG,EACxC,SAAS,EAAE,gBAAgB,mBAAmB,EAChD,CAAC;EACH,CAAC;CACL,CAAC;AACH;AAEA,SAAgB,0BACd,IACA,UACA,SACM;CACN,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;EACxD,QAAQ,KAAK,6EAA6E;EAC1F;CACF;CACA,IAAK,GAAW,iCAAiC,MAAM;CACvD,AAAC,GAAW,+BAA+B;CAE3C,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,UAAU;EAE7B,MAAM,eAAe,SAAS,IAAI,GAAG;EACrC,IAAI,CAAC,cAAc;EAEnB,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;GACtF,MAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;GAClD,MAAM,WAAWA,iCAAe,MAAM;GAEtC,IAAI,aAAa,cAAc;IAK7B,MAAM,SAAS,MAAMC,qCAAgB,KAAe,EAAE,UAAU,SAAS,SAAS,CAAC;IACnF,IAAI,UAAUD,iCAAe,OAAO,KAAK,MAAM,CAAC,MAAM,cAAc;KAClE,QAAQ,KACN,8CAA8C,IAAI,iDACpD;KACA,OAAO,IAAI,SAAS,OAAO,MAAM,CAAC,CAAC,QAAQ;MACzC,QAAQ;MACR,SAAS,EAAE,kBAAkB,QAAQ;KACvC,CAAC;IACH;IACA,QAAQ,MACN,yDAAyD,IAAI,gBAAgB,aAAa,gBAAgB,UAC5G;IACA,OAAO,IAAI,SAAS,8BAA8B,OAAO;KACvD,QAAQ;KACR,YAAY;IACd,CAAC;GACH;GAGA,MAAME,sCAAiB,KAAe,IAAI,WAAW,MAAM,GAAG,EAC5D,UAAU,SAAS,SACrB,CAAC,CAAC,CAAC,YAAY,CAEf,CAAC;GAED,OAAO,IAAI,SAAS,QAAQ;IAC1B,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,SAAS,IAAI;GACf,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,wBAA4C;CAC1D,IAAI,YAAY,OAAO;CAEvB,MAAM,eAAWC,iDAAY;CAC7B,IAAI,UAAU;EACZ,aAAa;EACb,iEAA4B,UAAiB;EAC7C,mCAAmC,UAAU;EAC7C,OAAO;CACT;CAEA,iBAAaC,oDAAe;EAC1B,MAAM;EACN,SAAS,CAAC;CACZ,CAAC;CACD,iEAA4B,UAAiB;CAC7C,mCAAmC,UAAU;CAC7C,OAAO;AACT;AAEA,eAAsB,eAAe,MAInB;CAChB,MAAM,WAAW,sBAAsB;CAEvC,MAAM,kBAAyC;EAC7C,IAAI,KAAK,MAAM,OAAO,KAAK;EAC3B,IAAI,KAAK,MAAM,SAAS,mBAAmB,GAAG,OAAO;EACrD,IAAI,sCAAsC,KAAK,KAAK,KAAK,GAAG,OAAO;EACnE,OAAO,OAAO,WAAW,cAAc,WAAW;CACpD;CAEA,MAAM,aAAa,UAAU;CAE7B,SAAS,gBAAgB,CACvB;EACE,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,MAAM;CACR,CACF,CAAC;AACH;AAEA,eAAsB,iBACpB,WACA,SACY;CACZ,MAAM,WAAW,sBAAsB;CAGvC,IADiB,OAAO,WAAW,aAEjC,MAAO,SAAiB,oBAAoB,SAAS;CAGvD,MAAM,MAAM,MAAM,SAAS,WAAc,WAAW,OAAc;CAClE,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,iCAAiC,WAAW;CAE9D,OAAO;AACT;AAEA,eAAsB,0BAAyC;CAC7D,MAAM,WAAW,sBAAsB;CACvC,IAAI,OAAO,WAAW,aAAa;CACnC,IAAK,SAAiB,2BAA2B;CAEjD,MAAM,MAAW,MAAM,OAAO;CAC9B,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,SAAS,OAAO,YAAY,aAAa,QAAQ,IAAI;CAC3D,IAAI,QACF,SAAS,gBAAgB,CAAC,MAAM,CAAC;CAEnC,AAAC,SAAiB,4BAA4B;AAChD;AAmBA,SAAS,YAAY,GAAoE;CACvF,MAAM,IAAI,OAAO,MAAM,WAAW,uBAAuB,KAAK,CAAC,IAAI;CACnE,OAAO,IAAI;EAAE,OAAO,CAAC,EAAE;EAAK,OAAO,CAAC,EAAE;EAAK,OAAO,CAAC,EAAE;CAAI,IAAI;AAC/D;AAEA,SAAS,oBAAoB,SAAiB,YAA6B;CACzE,MAAM,UAAU,WAAW,KAAK;CAChC,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,CAAC;EAAC;EAAK;EAAK;EAAK;EAAK;EAAK;CAAG,CAAC,CAAC,MAAM,MAAM,QAAQ,WAAW,CAAC,CAAC,GACnE,OAAO,YAAY;CAErB,MAAM,IAAI,+BAA+B,KAAK,OAAO;CACrD,IAAI,CAAC,GAAG,OAAO;CACf,MAAM,IAAI,YAAY,OAAO;CAC7B,IAAI,CAAC,GAAG,OAAO;CACf,IAAI,EAAE,UAAU,CAAC,EAAE,IAAK,OAAO;CAC/B,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAQ,EAAE,UAAU,CAAC,EAAE,MAAO,EAAE,QAAQ,CAAC,EAAE,IAAM,OAAO;CACzE,MAAM,uBAAuB,QAAQ,MAAM,mBAAmB;CAC9D,MAAM,oBAAoB,wBAAwB,KAAK,OAAO;CAC9D,IAAI,sBAAsB;EACxB,IAAI,CAAC,mBAAmB,OAAO;EAC/B,MAAM,OAAO,qBAAqB,EAAE,CAAE,MAAM,GAAG;EAC/C,MAAM,OAAO,kBAAkB,EAAE,CAAE,MAAM,GAAG;EAC5C,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,QAAQ,KAAK,MAAM,GAAG,KAAK,GAAG;GAC9D,MAAM,IAAI,KAAK,MAAM;GACrB,MAAM,IAAI,KAAK,MAAM;GACrB,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI;GACpC,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI;GACpC,IAAI,SAAS,QAAQ,SAAS,MAAM,OAAO,OAAO;GAClD,OAAO,SAAS,OAAO,EAAE,cAAc,CAAC,IAAI,IAAI;EAClD;EACA,OAAO;CACT;CACA,IAAI,mBAAmB,OAAO;CAC9B,OAAO;AACT;AAEA,SAAS,YAAY,WAA2B;CAC9C,OAAO,UAAU,SAAS,GAAG,IAAI,GAAG,UAAU,oBAAoB,GAAG,UAAU;AACjF;AAEA,eAAe,cAAc,KAAa,WAAqC;CAC7E,MAAM,MAAM,MAAM,MAAM,YAAY,GAAG,GAAG,EAAE,QAAQ,YAAY,QAAQ,SAAS,EAAE,CAAC;CACpF,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,YAAY;CACnE,OAAO,IAAI,KAAK;AAClB;AAEA,SAAS,sBAAsB,WAA4D;CACzF,MAAM,MAA4C,CAAC;CACnD,KAAK,MAAM,QAAQ,CAAC,OAAO,MAAM,GAAY;EAC3C,MAAM,MAAM,mBAAmB,WAAW,IAAG,GAA2C,KAAK;EAC7F,IAAI,KAAK,IAAI,KAAK;GAAE;GAAM;EAAI,CAAC;CACjC;CACA,KAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,WAAW,WAAW,CAAC,CAAC,GAAG;EACjE,MAAM,MAAM,kBAAkB,IAAI;EAClC,IAAI,KAAK,IAAI,KAAK;GAAE,MAAM;GAAI;EAAI,CAAC;CACrC;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,OAA+B;CACxD,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,SAAS,IAAI,QAAQ;CACjE,IAAI,SAAS,OAAQ,MAAuB,eAAe,UAAU;EACnE,MAAM,MAAO,MAAuB;EACpC,OAAO,IAAI,SAAS,IAAI,MAAM;CAChC;CACA,OAAO;AACT;AAOA,eAAsB,sBACpB,WACA,OAA+B,CAAC,GACC;CACjC,MAAM,YAAY,KAAK,aAAa;CAEpC,IAAI,CAAC,WAAW,KAAK,MAAM,YACzB,OAAO;EAAE,IAAI;EAAM,aAAa;EAAM,eAAe;EAAO,SAAS,CAAC;CAAE;CAG1E,MAAM,UAAU,UAAU,IAAI,KAAK;CACnC,IAAI,eAAsC;CAC1C,IAAI;CACJ,IAAI;EACF,eAAgB,MAAM,cAAc,SAAS,SAAS;CACxD,SAAS,GAAG;EACV,aAAa,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;CACxD;CAEA,MAAM,cAAc,cAAc,UAAU,iBAAiB;CAC7D,MAAM,cAAc,cAAc,UAAU,CAAC,EAAC,CAAE,QAC7C,MAAM,OAAO,EAAE,oBAAoB,QACtC;CAEA,MAAM,UAAU,sBAAsB,SAAS;CAwF/C,MAAM,iBAAgB,MAvFA,QAAQ,WAC5B,QAAQ,IAAI,OAAO,EAAE,MAAM,UAAU;EACnC,IAAI,WAAkC;EACtC,IAAI;EACJ,IAAI;GACF,WAAY,MAAM,cAAc,KAAK,SAAS;EAChD,SAAS,GAAG;GACV,SAAS,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;EACpD;EAEA,MAAM,UAAU,UAAU,UAAU,iBAAiB;EACrD,MAAM,YAAY,YAAY,QAAQ,YAAY;EAElD,IAAI,CAAC,UACH,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI;GACJ,QAAQ,UAAU;EACpB;EAGF,IAAI,CAAC,WACH,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI;GACJ,QAAQ,cACJ,0BAA0B,YAAY,eAAe,WAAW,UAAU,2BAC1E;EACN;EAGF,MAAM,gBAA0B,CAAC;EACjC,MAAM,mBAA6B,CAAC;EACpC,KAAK,MAAM,WAAW,YAAY;GAChC,MAAM,SAAS,SAAS,QAAQ,MAAM,MAAM,EAAE,SAAS,QAAQ,IAAI;GACnE,IAAI,CAAC,QAAQ;IACX,cAAc,KAAK,GAAG,QAAQ,KAAK,GAAG,QAAQ,iBAAiB;IAC/D;GACF;GACA,IAAI,CAAC,oBAAoB,OAAO,WAAW,IAAI,QAAQ,eAAgB,GACrE,iBAAiB,KACf,GAAG,QAAQ,KAAK,WAAW,OAAO,WAAW,IAAI,WAAW,QAAQ,iBACtE;GAEF,QAAIC,qDAA0B,QAAQ,IAAI,GAAG;IAC3C,MAAM,cAAc,QAAQ,WAAW;IACvC,MAAM,gBAAgB,OAAO,WAAW;IACxC,IAAI,iBAAiB,kBAAkB,aACrC,iBAAiB,KACf,GAAG,QAAQ,KAAK,gCAAgC,cAAc,QAAQ,YAAY,4FACpF;IAEF,MAAM,iBACJ,OAAO,OAAO,oBAAoB,WAAW,OAAO,gBAAgB,KAAK,IAAI;IAC/E,IACE,eAAe,SAAS,KACxB,eAAe,OAAO,OACtB,CAAC,oBAAoB,aAAa,cAAc,GAEhD,iBAAiB,KACf,GAAG,QAAQ,KAAK,sBAAsB,YAAY,6BAA6B,gBACjF;GAEJ;EACF;EAEA,MAAM,UAAU,CACd,GAAG,cAAc,KAAK,MAAM,mBAAmB,EAAE,mBAAmB,GACpE,GAAG,gBACL;EACA,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI,QAAQ,WAAW;GACvB,QAAQ,QAAQ;EAClB;CACF,CAAC,CACH,EAE6B,CAAC,KAAK,GAAG,MAAM;EAC1C,MAAM,cAAc;GAClB,MAAM,QAAQ,EAAE,CAAE;GAClB,KAAK,QAAQ,EAAE,CAAE;GACjB,WAAW;GACX,eAAe;GACf,IAAI;EACN;EACA,OAAO,EAAE,WAAW,cAAc,EAAE,QAAQ;GAAE,GAAG;GAAa,QAAQ,OAAO,EAAE,MAAM;EAAE;CACzF,CAAC;CAMD,OAAO;EACL,IAJA,iBAAiB,QACjB,cAAc,OAAO,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,IAAI;EAI1E;EACA,eAAe,iBAAiB;EAChC;EACA,SAAS;CACX;AACF;AAEA,SAAgB,wBAAwB,YAA+B;CACrE,OAAO,KAAK,UAAMC,sBAAa,YAAY,MAAM,CAAC;AACpD"}

package/dist/mf.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"mf.mjs","names":[],"sources":["../src/mf.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { createInstance, getInstance } from \"@module-federation/enhanced/runtime\";\nimport { setGlobalFederationInstance } from \"@module-federation/runtime-core\";\nimport { isEffectCriticalSharedDep } from \"every-plugin/build/rspack\";\nimport { readBundleCache, writeBundleCache } from \"./bundle-cache\";\nimport { computeSriHash, type IntegrityRegistry } from \"./integrity\";\nimport type { BosConfig, BosPluginRef } from \"./types\";\n\ntype FederationInstance = ReturnType<typeof createInstance>;\n\nlet mfInstance: FederationInstance | null = null;\n\nfunction fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  return fetch(url, { ...init, signal: controller.signal }).finally(() => clearTimeout(timer));\n}\n\nexport function patchManifestFetchForSsrPublicPath(mf: FederationInstance): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) return;\n  if ((mf as any).__everythingDevPatchedManifestFetch === true) return;\n  (mf as any).__everythingDevPatchedManifestFetch = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\" || !url.endsWith(\"/mf-manifest.json\")) {\n      return;\n    }\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000)\n      .then((res) => res.json())\n      .then((json: any) => {\n        json.metaData = json.metaData ?? {};\n        json.metaData.ssrPublicPath =\n          json.metaData.ssrPublicPath ?? url.replace(/\\/mf-manifest\\.json$/, \"/\");\n        if (json.metaData.publicPath === \"auto\" || json.metaData.publicPath === \"\") {\n          json.metaData.publicPath = \"/\";\n        }\n        return new Response(JSON.stringify(json), {\n          headers: { \"content-type\": \"application/json\" },\n        });\n      });\n  });\n}\n\nexport function installIntegrityFetchHook(\n  mf: FederationInstance,\n  registry: IntegrityRegistry,\n  options?: { cacheDir?: string },\n): void {\n  if (!mf || !(mf as any).loaderHook?.lifecycle?.fetch?.on) {\n    console.warn(\"[SRI] MF lifecycle fetch hook not available, skipping integrity-in-pipeline\");\n    return;\n  }\n  if ((mf as any).__everythingDevIntegrityHook === true) return;\n  (mf as any).__everythingDevIntegrityHook = true;\n\n  (mf as any).loaderHook.lifecycle.fetch.on((url: unknown, init: unknown) => {\n    if (typeof url !== \"string\") return;\n\n    const expectedHash = registry.get(url);\n    if (!expectedHash) return;\n\n    return fetchWithTimeout(url as string, init as RequestInit, 15_000).then(async (res) => {\n      const buffer = Buffer.from(await res.arrayBuffer());\n      const computed = computeSriHash(buffer);\n\n      if (computed !== expectedHash) {\n        // ticket 09 (atomic-deploys): an SRI mismatch is treated like an\n        // origin failure — the last-known-good bytes (which satisfied the\n        // same pin when cached) serve instead, and the corrupted bytes are\n        // never written into the cache.\n        const cached = await readBundleCache(url as string, { cacheDir: options?.cacheDir });\n        if (cached && computeSriHash(Buffer.from(cached)) === expectedHash) {\n          console.warn(\n            `[SRI] Origin bytes failed verification for ${url} — serving last-known-good from the bundle cache`,\n          );\n          return new Response(cached.slice().buffer, {\n            status: 200,\n            headers: { \"x-bundle-cache\": \"stale\" },\n          });\n        }\n        console.error(\n          `[SRI] Integrity check failed in MF fetch pipeline for ${url}\\n  Expected: ${expectedHash}\\n  Computed: ${computed}`,\n        );\n        return new Response(`Integrity check failed for ${url}`, {\n          status: 500,\n          statusText: \"Integrity Check Failed\",\n        });\n      }\n\n      // verified: pin-checked write-through\n      await writeBundleCache(url as string, new Uint8Array(buffer), {\n        cacheDir: options?.cacheDir,\n      }).catch(() => {\n        // write-through is best-effort\n      });\n\n      return new Response(buffer, {\n        status: res.status,\n        statusText: res.statusText,\n        headers: res.headers,\n      });\n    });\n  });\n}\n\nexport function getFederationInstance(): FederationInstance {\n  if (mfInstance) return mfInstance;\n\n  const existing = getInstance();\n  if (existing) {\n    mfInstance = existing as FederationInstance;\n    setGlobalFederationInstance(mfInstance as any);\n    patchManifestFetchForSsrPublicPath(mfInstance);\n    return mfInstance;\n  }\n\n  mfInstance = createInstance({\n    name: \"host\",\n    remotes: [],\n  }) as FederationInstance;\n  setGlobalFederationInstance(mfInstance as any);\n  patchManifestFetchForSsrPublicPath(mfInstance);\n  return mfInstance;\n}\n\nexport async function registerRemote(opts: {\n  name: string;\n  entry: string;\n  type?: \"manifest\" | \"script\";\n}): Promise<void> {\n  const instance = getFederationInstance();\n\n  const inferType = (): \"manifest\" | \"script\" => {\n    if (opts.type) return opts.type;\n    if (opts.entry.endsWith(\"/mf-manifest.json\")) return \"manifest\";\n    if (/\\/remoteEntry(\\.[a-f0-9]{8,})?\\.js$/.test(opts.entry)) return \"script\";\n    return typeof window === \"undefined\" ? \"script\" : \"manifest\";\n  };\n\n  const remoteType = inferType();\n\n  instance.registerRemotes([\n    {\n      name: opts.name,\n      entry: opts.entry,\n      type: remoteType,\n    },\n  ]);\n}\n\nexport async function loadRemoteModule<T>(\n  specifier: string,\n  options?: { loadFactory?: boolean; from?: \"build\" | \"runtime\" },\n): Promise<T> {\n  const instance = getFederationInstance();\n\n  const isServer = typeof window === \"undefined\";\n  if (isServer) {\n    await (instance as any).initializeSharing?.(\"default\");\n  }\n\n  const mod = await instance.loadRemote<T>(specifier, options as any);\n  if (!mod) {\n    throw new Error(`Failed to load remote module: ${specifier}`);\n  }\n  return mod;\n}\n\nexport async function ensureNodeRuntimePlugin(): Promise<void> {\n  const instance = getFederationInstance();\n  if (typeof window !== \"undefined\") return;\n  if ((instance as any).__nodeRuntimePluginLoaded) return;\n\n  const mod: any = await import(\"@module-federation/node/runtimePlugin\");\n  const factory = mod?.default ?? mod;\n  const plugin = typeof factory === \"function\" ? factory() : null;\n  if (plugin) {\n    instance.registerPlugins([plugin]);\n  }\n  (instance as any).__nodeRuntimePluginLoaded = true;\n}\n\nexport interface FederationCompatRemote {\n  role: string;\n  url: string;\n  reachable: boolean;\n  pluginVersion: string | null;\n  ok: boolean;\n  reason?: string;\n}\n\nexport interface FederationCompatReport {\n  ok: boolean;\n  hostVersion: string | null;\n  hostReachable: boolean;\n  hostReason?: string;\n  remotes: FederationCompatRemote[];\n}\n\nfunction parseSemver(v: unknown): { major: number; minor: number; patch: number } | null {\n  const m = typeof v === \"string\" ? /^(\\d+)\\.(\\d+)\\.(\\d+)/.exec(v) : null;\n  return m ? { major: +m[1]!, minor: +m[2]!, patch: +m[3]! } : null;\n}\n\nfunction satisfiesConstraint(version: string, constraint: string): boolean {\n  const trimmed = constraint.trim();\n  if (!trimmed) return true;\n  if (![\"^\", \"~\", \">\", \"<\", \"=\", \"x\"].some((c) => trimmed.startsWith(c))) {\n    return version === trimmed;\n  }\n  const m = /^\\s*\\^\\s*(\\d+)\\.(\\d+)\\.(\\d+)/.exec(trimmed);\n  if (!m) return true;\n  const v = parseSemver(version);\n  if (!v) return false;\n  if (v.major !== +m[1]!) return false;\n  if (v.minor < +m[2]! || (v.minor === +m[2]! && v.patch < +m[3]!)) return false;\n  const constraintPrerelease = trimmed.match(/-([0-9A-Za-z.-]+)/);\n  const versionPrerelease = /-([0-9A-Za-z.-]+)\\s*$/.exec(version);\n  if (constraintPrerelease) {\n    if (!versionPrerelease) return false;\n    const cPre = constraintPrerelease[1]!.split(\".\");\n    const vPre = versionPrerelease[1]!.split(\".\");\n    for (let i = 0; i < Math.max(cPre.length, vPre.length); i += 1) {\n      const c = cPre[i] ?? \"0\";\n      const p = vPre[i] ?? \"0\";\n      if (c === p) continue;\n      const cNum = /^\\d+$/.test(c) ? +c : null;\n      const pNum = /^\\d+$/.test(p) ? +p : null;\n      if (cNum !== null && pNum !== null) return cNum < pNum;\n      return cNum === null ? c.localeCompare(p) < 0 : false;\n    }\n    return true;\n  }\n  if (versionPrerelease) return false;\n  return true;\n}\n\nfunction manifestUrl(remoteUrl: string): string {\n  return remoteUrl.endsWith(\"/\") ? `${remoteUrl}mf-manifest.json` : `${remoteUrl}/mf-manifest.json`;\n}\n\nasync function fetchManifest(url: string, timeoutMs: number): Promise<unknown> {\n  const res = await fetch(manifestUrl(url), { signal: AbortSignal.timeout(timeoutMs) });\n  if (!res.ok) throw new Error(`HTTP ${res.status} ${res.statusText}`);\n  return res.json();\n}\n\nfunction listFederationRemotes(bosConfig: BosConfig): Array<{ role: string; url: string }> {\n  const out: Array<{ role: string; url: string }> = [];\n  for (const role of [\"api\", \"auth\"] as const) {\n    const url = readProductionUrl((bosConfig?.app as Record<string, unknown> | undefined)?.[role]);\n    if (url) out.push({ role, url });\n  }\n  for (const [id, slot] of Object.entries(bosConfig?.plugins ?? {})) {\n    const url = readProductionUrl(slot);\n    if (url) out.push({ role: id, url });\n  }\n  return out;\n}\n\nfunction readProductionUrl(entry: unknown): string | null {\n  if (typeof entry === \"string\") return entry.length > 0 ? entry : null;\n  if (entry && typeof (entry as BosPluginRef).production === \"string\") {\n    const url = (entry as BosPluginRef).production!;\n    return url.length > 0 ? url : null;\n  }\n  return null;\n}\n\ninterface RemoteManifest {\n  metaData?: { pluginVersion?: string };\n  shared?: Array<{ name: string; version?: string; requiredVersion?: string | null }>;\n}\n\nexport async function checkFederationCompat(\n  bosConfig: BosConfig | null,\n  opts: { timeoutMs?: number } = {},\n): Promise<FederationCompatReport> {\n  const timeoutMs = opts.timeoutMs ?? 15_000;\n\n  if (!bosConfig?.app?.host?.production) {\n    return { ok: true, hostVersion: null, hostReachable: false, remotes: [] };\n  }\n\n  const hostUrl = bosConfig.app.host.production;\n  let hostManifest: RemoteManifest | null = null;\n  let hostReason: string | undefined;\n  try {\n    hostManifest = (await fetchManifest(hostUrl, timeoutMs)) as RemoteManifest;\n  } catch (e) {\n    hostReason = e instanceof Error ? e.message : String(e);\n  }\n\n  const hostVersion = hostManifest?.metaData?.pluginVersion ?? null;\n  const hostShared = (hostManifest?.shared ?? []).filter(\n    (s) => typeof s.requiredVersion === \"string\",\n  );\n\n  const remotes = listFederationRemotes(bosConfig);\n  const settled = await Promise.allSettled(\n    remotes.map(async ({ role, url }) => {\n      let manifest: RemoteManifest | null = null;\n      let reason: string | undefined;\n      try {\n        manifest = (await fetchManifest(url, timeoutMs)) as RemoteManifest;\n      } catch (e) {\n        reason = e instanceof Error ? e.message : String(e);\n      }\n\n      const version = manifest?.metaData?.pluginVersion ?? null;\n      const versionOk = version !== null && version === hostVersion;\n\n      if (!manifest) {\n        return {\n          role,\n          url,\n          reachable: false,\n          pluginVersion: null,\n          ok: false,\n          reason: reason ?? \"unreachable\",\n        } satisfies FederationCompatRemote;\n      }\n\n      if (!versionOk) {\n        return {\n          role,\n          url,\n          reachable: true,\n          pluginVersion: version,\n          ok: false,\n          reason: hostVersion\n            ? `expected pluginVersion=${hostVersion} (host), got ${version ?? \"missing\"} — redeploy this plugin`\n            : `host manifest missing pluginVersion`,\n        } satisfies FederationCompatRemote;\n      }\n\n      const missingShared: string[] = [];\n      const mismatchedShared: string[] = [];\n      for (const hostDep of hostShared) {\n        const remDep = manifest.shared?.find((s) => s.name === hostDep.name);\n        if (!remDep) {\n          missingShared.push(`${hostDep.name}@${hostDep.requiredVersion}`);\n          continue;\n        }\n        if (!satisfiesConstraint(remDep.version ?? \"\", hostDep.requiredVersion!)) {\n          mismatchedShared.push(\n            `${hostDep.name}: remote=${remDep.version ?? \"?\"} hostReq=${hostDep.requiredVersion}`,\n          );\n        }\n        if (isEffectCriticalSharedDep(hostDep.name)) {\n          const hostVersion = hostDep.version ?? \"\";\n          const remoteVersion = remDep.version ?? \"\";\n          if (remoteVersion && remoteVersion !== hostVersion) {\n            mismatchedShared.push(\n              `${hostDep.name}: exact-version skew — remote=${remoteVersion} host=${hostVersion} — bundle was built against a different prerelease build; redeploy host and plugin together`,\n            );\n          }\n          const remoteRequired =\n            typeof remDep.requiredVersion === \"string\" ? remDep.requiredVersion.trim() : \"\";\n          if (\n            remoteRequired.length > 0 &&\n            remoteRequired[0] !== \"^\" &&\n            !satisfiesConstraint(hostVersion, remoteRequired)\n          ) {\n            mismatchedShared.push(\n              `${hostDep.name}: train skew — host=${hostVersion} vs remote requiredVersion=${remoteRequired}`,\n            );\n          }\n        }\n      }\n\n      const reasons = [\n        ...missingShared.map((d) => `missing shared \"${d}\" required by host`),\n        ...mismatchedShared,\n      ];\n      return {\n        role,\n        url,\n        reachable: true,\n        pluginVersion: version,\n        ok: reasons.length === 0,\n        reason: reasons[0],\n      } satisfies FederationCompatRemote;\n    }),\n  );\n\n  const remoteReports = settled.map((s, i) => {\n    const placeholder = {\n      role: remotes[i]!.role,\n      url: remotes[i]!.url,\n      reachable: false,\n      pluginVersion: null,\n      ok: false,\n    };\n    return s.status === \"fulfilled\" ? s.value : { ...placeholder, reason: String(s.reason) };\n  });\n\n  const ok =\n    hostManifest !== null &&\n    remoteReports.every((r) => r.ok && r.reachable && r.pluginVersion !== null);\n\n  return {\n    ok,\n    hostVersion,\n    hostReachable: hostManifest !== null,\n    hostReason,\n    remotes: remoteReports,\n  };\n}\n\nexport function loadBosConfigForMfCheck(configPath: string): BosConfig {\n  return JSON.parse(readFileSync(configPath, \"utf8\")) as BosConfig;\n}\n"],"mappings":";;;;;;;;AAUA,IAAI,aAAwC;AAE5C,SAAS,iBAAiB,KAAa,MAAmB,WAAsC;CAC9F,MAAM,aAAa,IAAI,gBAAgB;CACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,SAAS;CAC5D,OAAO,MAAM,KAAK;EAAE,GAAG;EAAM,QAAQ,WAAW;CAAO,CAAC,CAAC,CAAC,cAAc,aAAa,KAAK,CAAC;AAC7F;AAEA,SAAgB,mCAAmC,IAA8B;CAC/E,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;CAC1D,IAAK,GAAW,wCAAwC,MAAM;CAC9D,AAAC,GAAW,sCAAsC;CAElD,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,SAAS,mBAAmB,GAC9D;EAEF,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAChE,MAAM,QAAQ,IAAI,KAAK,CAAC,CAAC,CACzB,MAAM,SAAc;GACnB,KAAK,WAAW,KAAK,YAAY,CAAC;GAClC,KAAK,SAAS,gBACZ,KAAK,SAAS,iBAAiB,IAAI,QAAQ,wBAAwB,GAAG;GACxE,IAAI,KAAK,SAAS,eAAe,UAAU,KAAK,SAAS,eAAe,IACtE,KAAK,SAAS,aAAa;GAE7B,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG,EACxC,SAAS,EAAE,gBAAgB,mBAAmB,EAChD,CAAC;EACH,CAAC;CACL,CAAC;AACH;AAEA,SAAgB,0BACd,IACA,UACA,SACM;CACN,IAAI,CAAC,MAAM,CAAE,GAAW,YAAY,WAAW,OAAO,IAAI;EACxD,QAAQ,KAAK,6EAA6E;EAC1F;CACF;CACA,IAAK,GAAW,iCAAiC,MAAM;CACvD,AAAC,GAAW,+BAA+B;CAE3C,AAAC,GAAW,WAAW,UAAU,MAAM,IAAI,KAAc,SAAkB;EACzE,IAAI,OAAO,QAAQ,UAAU;EAE7B,MAAM,eAAe,SAAS,IAAI,GAAG;EACrC,IAAI,CAAC,cAAc;EAEnB,OAAO,iBAAiB,KAAe,MAAqB,IAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;GACtF,MAAM,SAAS,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC;GAClD,MAAM,WAAW,eAAe,MAAM;GAEtC,IAAI,aAAa,cAAc;IAK7B,MAAM,SAAS,MAAM,gBAAgB,KAAe,EAAE,UAAU,SAAS,SAAS,CAAC;IACnF,IAAI,UAAU,eAAe,OAAO,KAAK,MAAM,CAAC,MAAM,cAAc;KAClE,QAAQ,KACN,8CAA8C,IAAI,iDACpD;KACA,OAAO,IAAI,SAAS,OAAO,MAAM,CAAC,CAAC,QAAQ;MACzC,QAAQ;MACR,SAAS,EAAE,kBAAkB,QAAQ;KACvC,CAAC;IACH;IACA,QAAQ,MACN,yDAAyD,IAAI,gBAAgB,aAAa,gBAAgB,UAC5G;IACA,OAAO,IAAI,SAAS,8BAA8B,OAAO;KACvD,QAAQ;KACR,YAAY;IACd,CAAC;GACH;GAGA,MAAM,iBAAiB,KAAe,IAAI,WAAW,MAAM,GAAG,EAC5D,UAAU,SAAS,SACrB,CAAC,CAAC,CAAC,YAAY,CAEf,CAAC;GAED,OAAO,IAAI,SAAS,QAAQ;IAC1B,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,SAAS,IAAI;GACf,CAAC;EACH,CAAC;CACH,CAAC;AACH;AAEA,SAAgB,wBAA4C;CAC1D,IAAI,YAAY,OAAO;CAEvB,MAAM,WAAW,YAAY;CAC7B,IAAI,UAAU;EACZ,aAAa;EACb,4BAA4B,UAAiB;EAC7C,mCAAmC,UAAU;EAC7C,OAAO;CACT;CAEA,aAAa,eAAe;EAC1B,MAAM;EACN,SAAS,CAAC;CACZ,CAAC;CACD,4BAA4B,UAAiB;CAC7C,mCAAmC,UAAU;CAC7C,OAAO;AACT;AAEA,eAAsB,eAAe,MAInB;CAChB,MAAM,WAAW,sBAAsB;CAEvC,MAAM,kBAAyC;EAC7C,IAAI,KAAK,MAAM,OAAO,KAAK;EAC3B,IAAI,KAAK,MAAM,SAAS,mBAAmB,GAAG,OAAO;EACrD,IAAI,sCAAsC,KAAK,KAAK,KAAK,GAAG,OAAO;EACnE,OAAO,OAAO,WAAW,cAAc,WAAW;CACpD;CAEA,MAAM,aAAa,UAAU;CAE7B,SAAS,gBAAgB,CACvB;EACE,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,MAAM;CACR,CACF,CAAC;AACH;AAEA,eAAsB,iBACpB,WACA,SACY;CACZ,MAAM,WAAW,sBAAsB;CAGvC,IADiB,OAAO,WAAW,aAEjC,MAAO,SAAiB,oBAAoB,SAAS;CAGvD,MAAM,MAAM,MAAM,SAAS,WAAc,WAAW,OAAc;CAClE,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,iCAAiC,WAAW;CAE9D,OAAO;AACT;AAEA,eAAsB,0BAAyC;CAC7D,MAAM,WAAW,sBAAsB;CACvC,IAAI,OAAO,WAAW,aAAa;CACnC,IAAK,SAAiB,2BAA2B;CAEjD,MAAM,MAAW,MAAM,OAAO;CAC9B,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,SAAS,OAAO,YAAY,aAAa,QAAQ,IAAI;CAC3D,IAAI,QACF,SAAS,gBAAgB,CAAC,MAAM,CAAC;CAEnC,AAAC,SAAiB,4BAA4B;AAChD;AAmBA,SAAS,YAAY,GAAoE;CACvF,MAAM,IAAI,OAAO,MAAM,WAAW,uBAAuB,KAAK,CAAC,IAAI;CACnE,OAAO,IAAI;EAAE,OAAO,CAAC,EAAE;EAAK,OAAO,CAAC,EAAE;EAAK,OAAO,CAAC,EAAE;CAAI,IAAI;AAC/D;AAEA,SAAS,oBAAoB,SAAiB,YAA6B;CACzE,MAAM,UAAU,WAAW,KAAK;CAChC,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,CAAC;EAAC;EAAK;EAAK;EAAK;EAAK;EAAK;CAAG,CAAC,CAAC,MAAM,MAAM,QAAQ,WAAW,CAAC,CAAC,GACnE,OAAO,YAAY;CAErB,MAAM,IAAI,+BAA+B,KAAK,OAAO;CACrD,IAAI,CAAC,GAAG,OAAO;CACf,MAAM,IAAI,YAAY,OAAO;CAC7B,IAAI,CAAC,GAAG,OAAO;CACf,IAAI,EAAE,UAAU,CAAC,EAAE,IAAK,OAAO;CAC/B,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAQ,EAAE,UAAU,CAAC,EAAE,MAAO,EAAE,QAAQ,CAAC,EAAE,IAAM,OAAO;CACzE,MAAM,uBAAuB,QAAQ,MAAM,mBAAmB;CAC9D,MAAM,oBAAoB,wBAAwB,KAAK,OAAO;CAC9D,IAAI,sBAAsB;EACxB,IAAI,CAAC,mBAAmB,OAAO;EAC/B,MAAM,OAAO,qBAAqB,EAAE,CAAE,MAAM,GAAG;EAC/C,MAAM,OAAO,kBAAkB,EAAE,CAAE,MAAM,GAAG;EAC5C,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,QAAQ,KAAK,MAAM,GAAG,KAAK,GAAG;GAC9D,MAAM,IAAI,KAAK,MAAM;GACrB,MAAM,IAAI,KAAK,MAAM;GACrB,IAAI,MAAM,GAAG;GACb,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI;GACpC,MAAM,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI;GACpC,IAAI,SAAS,QAAQ,SAAS,MAAM,OAAO,OAAO;GAClD,OAAO,SAAS,OAAO,EAAE,cAAc,CAAC,IAAI,IAAI;EAClD;EACA,OAAO;CACT;CACA,IAAI,mBAAmB,OAAO;CAC9B,OAAO;AACT;AAEA,SAAS,YAAY,WAA2B;CAC9C,OAAO,UAAU,SAAS,GAAG,IAAI,GAAG,UAAU,oBAAoB,GAAG,UAAU;AACjF;AAEA,eAAe,cAAc,KAAa,WAAqC;CAC7E,MAAM,MAAM,MAAM,MAAM,YAAY,GAAG,GAAG,EAAE,QAAQ,YAAY,QAAQ,SAAS,EAAE,CAAC;CACpF,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,YAAY;CACnE,OAAO,IAAI,KAAK;AAClB;AAEA,SAAS,sBAAsB,WAA4D;CACzF,MAAM,MAA4C,CAAC;CACnD,KAAK,MAAM,QAAQ,CAAC,OAAO,MAAM,GAAY;EAC3C,MAAM,MAAM,mBAAmB,WAAW,IAAG,GAA2C,KAAK;EAC7F,IAAI,KAAK,IAAI,KAAK;GAAE;GAAM;EAAI,CAAC;CACjC;CACA,KAAK,MAAM,CAAC,IAAI,SAAS,OAAO,QAAQ,WAAW,WAAW,CAAC,CAAC,GAAG;EACjE,MAAM,MAAM,kBAAkB,IAAI;EAClC,IAAI,KAAK,IAAI,KAAK;GAAE,MAAM;GAAI;EAAI,CAAC;CACrC;CACA,OAAO;AACT;AAEA,SAAS,kBAAkB,OAA+B;CACxD,IAAI,OAAO,UAAU,UAAU,OAAO,MAAM,SAAS,IAAI,QAAQ;CACjE,IAAI,SAAS,OAAQ,MAAuB,eAAe,UAAU;EACnE,MAAM,MAAO,MAAuB;EACpC,OAAO,IAAI,SAAS,IAAI,MAAM;CAChC;CACA,OAAO;AACT;AAOA,eAAsB,sBACpB,WACA,OAA+B,CAAC,GACC;CACjC,MAAM,YAAY,KAAK,aAAa;CAEpC,IAAI,CAAC,WAAW,KAAK,MAAM,YACzB,OAAO;EAAE,IAAI;EAAM,aAAa;EAAM,eAAe;EAAO,SAAS,CAAC;CAAE;CAG1E,MAAM,UAAU,UAAU,IAAI,KAAK;CACnC,IAAI,eAAsC;CAC1C,IAAI;CACJ,IAAI;EACF,eAAgB,MAAM,cAAc,SAAS,SAAS;CACxD,SAAS,GAAG;EACV,aAAa,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;CACxD;CAEA,MAAM,cAAc,cAAc,UAAU,iBAAiB;CAC7D,MAAM,cAAc,cAAc,UAAU,CAAC,EAAC,CAAE,QAC7C,MAAM,OAAO,EAAE,oBAAoB,QACtC;CAEA,MAAM,UAAU,sBAAsB,SAAS;CAwF/C,MAAM,iBAAgB,MAvFA,QAAQ,WAC5B,QAAQ,IAAI,OAAO,EAAE,MAAM,UAAU;EACnC,IAAI,WAAkC;EACtC,IAAI;EACJ,IAAI;GACF,WAAY,MAAM,cAAc,KAAK,SAAS;EAChD,SAAS,GAAG;GACV,SAAS,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;EACpD;EAEA,MAAM,UAAU,UAAU,UAAU,iBAAiB;EACrD,MAAM,YAAY,YAAY,QAAQ,YAAY;EAElD,IAAI,CAAC,UACH,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI;GACJ,QAAQ,UAAU;EACpB;EAGF,IAAI,CAAC,WACH,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI;GACJ,QAAQ,cACJ,0BAA0B,YAAY,eAAe,WAAW,UAAU,2BAC1E;EACN;EAGF,MAAM,gBAA0B,CAAC;EACjC,MAAM,mBAA6B,CAAC;EACpC,KAAK,MAAM,WAAW,YAAY;GAChC,MAAM,SAAS,SAAS,QAAQ,MAAM,MAAM,EAAE,SAAS,QAAQ,IAAI;GACnE,IAAI,CAAC,QAAQ;IACX,cAAc,KAAK,GAAG,QAAQ,KAAK,GAAG,QAAQ,iBAAiB;IAC/D;GACF;GACA,IAAI,CAAC,oBAAoB,OAAO,WAAW,IAAI,QAAQ,eAAgB,GACrE,iBAAiB,KACf,GAAG,QAAQ,KAAK,WAAW,OAAO,WAAW,IAAI,WAAW,QAAQ,iBACtE;GAEF,IAAI,0BAA0B,QAAQ,IAAI,GAAG;IAC3C,MAAM,cAAc,QAAQ,WAAW;IACvC,MAAM,gBAAgB,OAAO,WAAW;IACxC,IAAI,iBAAiB,kBAAkB,aACrC,iBAAiB,KACf,GAAG,QAAQ,KAAK,gCAAgC,cAAc,QAAQ,YAAY,4FACpF;IAEF,MAAM,iBACJ,OAAO,OAAO,oBAAoB,WAAW,OAAO,gBAAgB,KAAK,IAAI;IAC/E,IACE,eAAe,SAAS,KACxB,eAAe,OAAO,OACtB,CAAC,oBAAoB,aAAa,cAAc,GAEhD,iBAAiB,KACf,GAAG,QAAQ,KAAK,sBAAsB,YAAY,6BAA6B,gBACjF;GAEJ;EACF;EAEA,MAAM,UAAU,CACd,GAAG,cAAc,KAAK,MAAM,mBAAmB,EAAE,mBAAmB,GACpE,GAAG,gBACL;EACA,OAAO;GACL;GACA;GACA,WAAW;GACX,eAAe;GACf,IAAI,QAAQ,WAAW;GACvB,QAAQ,QAAQ;EAClB;CACF,CAAC,CACH,EAE6B,CAAC,KAAK,GAAG,MAAM;EAC1C,MAAM,cAAc;GAClB,MAAM,QAAQ,EAAE,CAAE;GAClB,KAAK,QAAQ,EAAE,CAAE;GACjB,WAAW;GACX,eAAe;GACf,IAAI;EACN;EACA,OAAO,EAAE,WAAW,cAAc,EAAE,QAAQ;GAAE,GAAG;GAAa,QAAQ,OAAO,EAAE,MAAM;EAAE;CACzF,CAAC;CAMD,OAAO;EACL,IAJA,iBAAiB,QACjB,cAAc,OAAO,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,IAAI;EAI1E;EACA,eAAe,iBAAiB;EAChC;EACA,SAAS;CACX;AACF;AAEA,SAAgB,wBAAwB,YAA+B;CACrE,OAAO,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AACpD"}