everything-dev 2.0.0-rc.6 → 2.0.0-rc.8

package/dist/resolver.d.cts

@@ -0,0 +1,99 @@
+import { Cause, Context, Effect, Layer, Schema } from "effect";
+//#region src/resolver.d.ts
+/**
+ * Bundle resolution — the one seam every boot-time byte crosses (config
+ * manifest discovery, contract-type fetches, federation remote loading, SSR
+ * serving). Two tiers, one policy (ADR 0011/0021):
+ *
+ * - Self-contained runtime image: a staged namespace under `BOS_BUNDLE_DIR`
+ *   resolves from disk; a miss falls through to the network so a partially-
+ *   staged namespace boots over the wire instead of failing.
+ * - Registry tier: plain resilient network fetch — CDN is the single
+ *   distribution source. The stale-if-error disk cache exists only behind an
+ *   explicit `BOS_BUNDLE_CACHE_DIR` opt-in; cached bytes are a resilience
+ *   artifact, never a deployment, so a post-reset boot can never satisfy
+ *   itself with pre-reset bytes.
+ */
+interface BundleNamespace {
+  readonly bundleDir: string;
+  readonly account: string;
+  readonly gateway: string;
+}
+declare const BundleReadError_base: Schema.Class<BundleReadError, Schema.TaggedStruct<"BundleReadError", {
+  readonly path: Schema.String;
+  readonly cause: Schema.optional<Schema.Unknown>;
+}>, Cause.YieldableError>;
+declare class BundleReadError extends BundleReadError_base {}
+/**
+ * Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their
+ * namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the
+ * staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The
+ * namespace is taken from the URL itself — this answers "which staged
+ * directory do these bytes live in?" rather than "is this my namespace?" —
+ * and the result is contained within the account/gateway directory. Returns
+ * null for foreign shapes.
+ */
+declare function bundleUrlToStagedPath(url: string, bundleDir: string): string | null;
+/** Resolve a relative config-supplied path inside `dir`, or null on escape. */
+declare function resolveContained(dir: string, relative: string): string | null;
+/**
+ * Own-namespace path for a bundle URL: the shared URL→staged-path mapping,
+ * narrowed to the runtime identity — a URL whose encoded namespace differs
+ * from `namespace.account`/`namespace.gateway` must fall to the network,
+ * never serve a sibling namespace's staged bytes.
+ */
+declare function bundleUrlToLocalPath(url: string, namespace: BundleNamespace): string | null;
+declare const BundleResolver_base: Context.ServiceClass<BundleResolver, "everything-dev/resolver/BundleResolver", {
+  /** Resolve a fetch target from the staged namespace; null = miss or not our namespace — fall through to the network. */
+  readonly lookup: (input: string | URL | Request) => Effect.Effect<Response | null>;
+}>;
+declare class BundleResolver extends BundleResolver_base {
+  static layer(namespace: BundleNamespace | undefined): Layer.Layer<BundleResolver>;
+}
+interface BundleFetchHandle {
+  readonly uninstall: () => Promise<void>;
+}
+interface BundleFetchOptions {
+  /** Own-namespace FS resolution — requires a staged `BOS_BUNDLE_DIR`. */
+  namespace?: BundleNamespace;
+  /**
+   * Explicit opt-in stale-if-error cache (child tier): `/bundles/…` URLs
+   * write through to disk on success and serve last-known-good bytes when
+   * the origin fails. Never derived implicitly — a cache that activates
+   * itself can serve pre-reset bytes after a deploy.
+   */
+  cacheDir?: string;
+  /** Per-attempt deadline for idempotent GETs crossing the interceptor. */
+  timeoutMs?: number;
+}
+/**
+ * Installs the resolver as a global fetch interceptor — the one seam every
+ * boot-time consumer shares (config manifest discovery, contract-type
+ * fetches, orchestrator host loading, MF remoteEntry/identity probes) and
+ * the SSR serving path. One layered resolution policy, as a single Effect
+ * program on the managed runtime: staged disk → network → (explicitly
+ * opted-in) stale-if-error. Own-namespace URLs resolve from the staged
+ * directory and fall through to the network on a miss; a miss never touches
+ * the write-through cache — for the own namespace the staged disk IS the
+ * resilience artifact. Inert when neither a staged namespace nor an
+ * explicit cache is configured.
+ */
+declare function installGlobalBundleFetch(options: BundleFetchOptions): BundleFetchHandle;
+/**
+ * Boot-time installer for the CLI and the host server: derives the own
+ * namespace from `BOS_BUNDLE_DIR` plus the runtime identity
+ * (`BOS_ACCOUNT`/`BOS_GATEWAY` registry env taking precedence over the
+ * bos.config.json fields), and the stale-if-error cache from an explicit
+ * `BOS_BUNDLE_CACHE_DIR` — never implicit. Tier auto-detection (ADR 0021):
+ * an identity whose namespace is not actually staged under the bundle dir
+ * drops to the registry tier — plain resilient network fetch — instead of
+ * deterministically 404ing own-namespace URLs against a foreign image's
+ * staged bytes. Never throws — a missing or malformed identity leaves the
+ * default fetch in place.
+ */
+declare function installBundleFetchFromEnv(input: {
+  configPath?: string | null;
+}): BundleFetchHandle | null;
+//#endregion
+export { BundleFetchHandle, BundleFetchOptions, BundleNamespace, BundleReadError, BundleResolver, bundleUrlToLocalPath, bundleUrlToStagedPath, installBundleFetchFromEnv, installGlobalBundleFetch, resolveContained };
+//# sourceMappingURL=resolver.d.cts.map

package/dist/resolver.d.mts

@@ -0,0 +1,99 @@
+import { Cause, Context, Effect, Layer, Schema } from "effect";
+//#region src/resolver.d.ts
+/**
+ * Bundle resolution — the one seam every boot-time byte crosses (config
+ * manifest discovery, contract-type fetches, federation remote loading, SSR
+ * serving). Two tiers, one policy (ADR 0011/0021):
+ *
+ * - Self-contained runtime image: a staged namespace under `BOS_BUNDLE_DIR`
+ *   resolves from disk; a miss falls through to the network so a partially-
+ *   staged namespace boots over the wire instead of failing.
+ * - Registry tier: plain resilient network fetch — CDN is the single
+ *   distribution source. The stale-if-error disk cache exists only behind an
+ *   explicit `BOS_BUNDLE_CACHE_DIR` opt-in; cached bytes are a resilience
+ *   artifact, never a deployment, so a post-reset boot can never satisfy
+ *   itself with pre-reset bytes.
+ */
+interface BundleNamespace {
+  readonly bundleDir: string;
+  readonly account: string;
+  readonly gateway: string;
+}
+declare const BundleReadError_base: Schema.Class<BundleReadError, Schema.TaggedStruct<"BundleReadError", {
+  readonly path: Schema.String;
+  readonly cause: Schema.optional<Schema.Unknown>;
+}>, Cause.YieldableError>;
+declare class BundleReadError extends BundleReadError_base {}
+/**
+ * Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their
+ * namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the
+ * staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The
+ * namespace is taken from the URL itself — this answers "which staged
+ * directory do these bytes live in?" rather than "is this my namespace?" —
+ * and the result is contained within the account/gateway directory. Returns
+ * null for foreign shapes.
+ */
+declare function bundleUrlToStagedPath(url: string, bundleDir: string): string | null;
+/** Resolve a relative config-supplied path inside `dir`, or null on escape. */
+declare function resolveContained(dir: string, relative: string): string | null;
+/**
+ * Own-namespace path for a bundle URL: the shared URL→staged-path mapping,
+ * narrowed to the runtime identity — a URL whose encoded namespace differs
+ * from `namespace.account`/`namespace.gateway` must fall to the network,
+ * never serve a sibling namespace's staged bytes.
+ */
+declare function bundleUrlToLocalPath(url: string, namespace: BundleNamespace): string | null;
+declare const BundleResolver_base: Context.ServiceClass<BundleResolver, "everything-dev/resolver/BundleResolver", {
+  /** Resolve a fetch target from the staged namespace; null = miss or not our namespace — fall through to the network. */
+  readonly lookup: (input: string | URL | Request) => Effect.Effect<Response | null>;
+}>;
+declare class BundleResolver extends BundleResolver_base {
+  static layer(namespace: BundleNamespace | undefined): Layer.Layer<BundleResolver>;
+}
+interface BundleFetchHandle {
+  readonly uninstall: () => Promise<void>;
+}
+interface BundleFetchOptions {
+  /** Own-namespace FS resolution — requires a staged `BOS_BUNDLE_DIR`. */
+  namespace?: BundleNamespace;
+  /**
+   * Explicit opt-in stale-if-error cache (child tier): `/bundles/…` URLs
+   * write through to disk on success and serve last-known-good bytes when
+   * the origin fails. Never derived implicitly — a cache that activates
+   * itself can serve pre-reset bytes after a deploy.
+   */
+  cacheDir?: string;
+  /** Per-attempt deadline for idempotent GETs crossing the interceptor. */
+  timeoutMs?: number;
+}
+/**
+ * Installs the resolver as a global fetch interceptor — the one seam every
+ * boot-time consumer shares (config manifest discovery, contract-type
+ * fetches, orchestrator host loading, MF remoteEntry/identity probes) and
+ * the SSR serving path. One layered resolution policy, as a single Effect
+ * program on the managed runtime: staged disk → network → (explicitly
+ * opted-in) stale-if-error. Own-namespace URLs resolve from the staged
+ * directory and fall through to the network on a miss; a miss never touches
+ * the write-through cache — for the own namespace the staged disk IS the
+ * resilience artifact. Inert when neither a staged namespace nor an
+ * explicit cache is configured.
+ */
+declare function installGlobalBundleFetch(options: BundleFetchOptions): BundleFetchHandle;
+/**
+ * Boot-time installer for the CLI and the host server: derives the own
+ * namespace from `BOS_BUNDLE_DIR` plus the runtime identity
+ * (`BOS_ACCOUNT`/`BOS_GATEWAY` registry env taking precedence over the
+ * bos.config.json fields), and the stale-if-error cache from an explicit
+ * `BOS_BUNDLE_CACHE_DIR` — never implicit. Tier auto-detection (ADR 0021):
+ * an identity whose namespace is not actually staged under the bundle dir
+ * drops to the registry tier — plain resilient network fetch — instead of
+ * deterministically 404ing own-namespace URLs against a foreign image's
+ * staged bytes. Never throws — a missing or malformed identity leaves the
+ * default fetch in place.
+ */
+declare function installBundleFetchFromEnv(input: {
+  configPath?: string | null;
+}): BundleFetchHandle | null;
+//#endregion
+export { BundleFetchHandle, BundleFetchOptions, BundleNamespace, BundleReadError, BundleResolver, bundleUrlToLocalPath, bundleUrlToStagedPath, installBundleFetchFromEnv, installGlobalBundleFetch, resolveContained };
+//# sourceMappingURL=resolver.d.mts.map

package/dist/resolver.mjs

@@ -0,0 +1,284 @@
+import { FetchNetworkError, HttpFetch } from "./http-client.mjs";
+import { bundleCachePath, readBundleCache, writeBundleCache } from "./bundle-cache.mjs";
+import { isAppDescriptorPath } from "./config.mjs";
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { Cause, Context, Data, Duration, Effect, Layer, ManagedRuntime, Schedule, Schema } from "effect";
+import { readFile } from "node:fs/promises";
+import { cacheControlOf } from "every-plugin/build/artifact-names";
+
+//#region src/resolver.ts
+var BundleReadError = class extends Schema.TaggedError()("BundleReadError", {
+	path: Schema.String,
+	cause: Schema.optional(Schema.Unknown)
+}) {};
+const MIME_TYPES = {
+	".js": "text/javascript",
+	".mjs": "text/javascript",
+	".cjs": "text/javascript",
+	".css": "text/css",
+	".json": "application/json",
+	".map": "application/json",
+	".svg": "image/svg+xml",
+	".png": "image/png",
+	".jpg": "image/jpeg",
+	".jpeg": "image/jpeg",
+	".gif": "image/gif",
+	".webp": "image/webp",
+	".avif": "image/avif",
+	".ico": "image/x-icon",
+	".html": "text/html",
+	".htm": "text/html",
+	".webmanifest": "application/manifest+json",
+	".md": "text/markdown",
+	".ts": "text/plain",
+	".woff": "font/woff",
+	".woff2": "font/woff2",
+	".ttf": "font/ttf",
+	".otf": "font/otf",
+	".eot": "application/vnd.ms-opentype",
+	".wasm": "application/wasm",
+	".txt": "text/xml",
+	".xml": "application/xml"
+};
+/**
+* Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their
+* namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the
+* staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The
+* namespace is taken from the URL itself — this answers "which staged
+* directory do these bytes live in?" rather than "is this my namespace?" —
+* and the result is contained within the account/gateway directory. Returns
+* null for foreign shapes.
+*/
+function bundleUrlToStagedPath(url, bundleDir) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	const segments = parsed.pathname.split("/").filter(Boolean);
+	if (segments[0] !== "bundles" || segments.length < 3) return null;
+	let decoded;
+	try {
+		decoded = segments.slice(1).map((segment) => decodeURIComponent(segment));
+	} catch {
+		return null;
+	}
+	const [account, gateway, ...rest] = decoded;
+	if (!account || !gateway || rest.length === 0) return null;
+	const nsDir = path.resolve(bundleDir, account, gateway);
+	const filePath = path.resolve(nsDir, ...rest);
+	if (filePath === nsDir || !filePath.startsWith(nsDir + path.sep)) return null;
+	return filePath;
+}
+/** Resolve a relative config-supplied path inside `dir`, or null on escape. */
+function resolveContained(dir, relative) {
+	const resolved = path.resolve(dir, ...relative.split("/").filter(Boolean));
+	if (resolved === dir || !resolved.startsWith(dir + path.sep)) return null;
+	return resolved;
+}
+/**
+* Own-namespace path for a bundle URL: the shared URL→staged-path mapping,
+* narrowed to the runtime identity — a URL whose encoded namespace differs
+* from `namespace.account`/`namespace.gateway` must fall to the network,
+* never serve a sibling namespace's staged bytes.
+*/
+function bundleUrlToLocalPath(url, namespace) {
+	const filePath = bundleUrlToStagedPath(url, namespace.bundleDir);
+	if (!filePath) return null;
+	const nsDir = path.resolve(namespace.bundleDir, namespace.account, namespace.gateway);
+	if (filePath !== nsDir && !filePath.startsWith(nsDir + path.sep)) return null;
+	return filePath;
+}
+var BundleResolver = class BundleResolver extends Context.Service()("everything-dev/resolver/BundleResolver") {
+	static layer(namespace) {
+		if (!namespace) return Layer.succeed(BundleResolver, BundleResolver.of({ lookup: () => Effect.succeed(null) }));
+		const respond = Effect.fn("BundleResolver.respond")(function* (url) {
+			const filePath = bundleUrlToLocalPath(url, namespace);
+			if (!filePath) return null;
+			const bytes = yield* Effect.tryPromise({
+				try: () => readFile(filePath),
+				catch: (cause) => new BundleReadError({
+					path: filePath,
+					cause
+				})
+			}).pipe(Effect.catchTag("BundleReadError", () => Effect.succeed(null)));
+			if (bytes === null) return null;
+			const name = path.basename(filePath);
+			const contentType = MIME_TYPES[path.extname(name).toLowerCase()] ?? "application/octet-stream";
+			return new Response(new Uint8Array(bytes), { headers: {
+				"content-type": contentType,
+				"cache-control": cacheControlOf(name),
+				etag: `"${Buffer.from(bytes.subarray(0, 4096)).toString("base64").slice(0, 24)}"`
+			} });
+		});
+		return Layer.effect(BundleResolver, Effect.succeed(BundleResolver.of({ lookup: (input) => {
+			const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+			return respond(url);
+		} })));
+	}
+};
+const staleResponse = (bytes, url) => {
+	const name = url.split("?")[0]?.split("/").pop() ?? "";
+	const contentType = MIME_TYPES[path.extname(name).toLowerCase()] ?? "application/octet-stream";
+	return new Response(bytes.slice().buffer, {
+		status: 200,
+		headers: {
+			"content-type": contentType,
+			"x-bundle-cache": "stale"
+		}
+	});
+};
+const DEFAULT_ATTEMPT_TIMEOUT = "30 seconds";
+const RETRY_BASE_DELAY = "250 millis";
+const RETRY_CAP = "5 seconds";
+const RETRY_TIMES = 4;
+const isTransientStatus = (status) => status === 429 || status >= 500;
+function requestMethod(input, init) {
+	if (init?.method) return init.method.toUpperCase();
+	if (typeof input === "string" || input instanceof URL) return "GET";
+	return input.method.toUpperCase();
+}
+const asError = (cause) => cause instanceof Error ? cause : new Error(String(cause));
+/** A 429/5xx response — carried as a failure so the Schedule can retry it,
+* with the Response kept for the exhausted-retries fallthrough. */
+var TransientBundleResponse = class extends Data.TaggedError("TransientBundleResponse") {};
+/**
+* One network attempt through the `HttpFetch` policy: the fetch runs under
+* the fiber's interruption signal, and `Effect.timeout` interrupts at the
+* deadline — aborting the in-flight request. The response is returned
+* regardless of status; transient statuses are lifted by the caller.
+*/
+const fetchAttempt = Effect.fn("resolver.attempt")(function* (http, input, init, timeout) {
+	return yield* http.attempt(input, init).pipe(Effect.timeoutOrElse({
+		duration: Duration.toMillis(timeout),
+		orElse: () => Effect.fail(new Cause.TimeoutError())
+	}), Effect.filterOrFail((response) => !isTransientStatus(response.status), (response) => new TransientBundleResponse({ response })));
+});
+/**
+* The resilience policy for idempotent GETs crossing the interceptor
+* (ADR 0021 amendment — the CDN-only image): a cold boot has no staged
+* fallback, so one edge hiccup or a hung connection during the load window
+* must not hard-fail the host or a plugin. Transient statuses and network
+* errors (including the deadline's TimeoutError) retry on a capped
+* exponential schedule before propagating; the last transient response is
+* returned so an explicit stale-if-error cache still sees it. Non-GETs pass
+* through untouched; a caller-initiated cancellation is never spent on the
+* schedule.
+*/
+const resilientFetch = Effect.fn("resolver.fetch")(function* (http, input, init, timeout) {
+	if (requestMethod(input, init) !== "GET") return yield* http.attempt(input, init).pipe(Effect.mapError((cause) => asError(cause.cause)));
+	return yield* fetchAttempt(http, input, init, timeout).pipe(Effect.retry({
+		schedule: Schedule.exponential(RETRY_BASE_DELAY).pipe(Schedule.upTo({
+			duration: RETRY_CAP,
+			times: RETRY_TIMES
+		})),
+		while: (error) => !((error instanceof FetchNetworkError || error instanceof Cause.TimeoutError) && init?.signal?.aborted)
+	}), Effect.catchTags({
+		TransientBundleResponse: (error) => Effect.succeed(error.response),
+		FetchNetworkError: (error) => Effect.fail(asError(error.cause))
+	}));
+});
+/**
+* Installs the resolver as a global fetch interceptor — the one seam every
+* boot-time consumer shares (config manifest discovery, contract-type
+* fetches, orchestrator host loading, MF remoteEntry/identity probes) and
+* the SSR serving path. One layered resolution policy, as a single Effect
+* program on the managed runtime: staged disk → network → (explicitly
+* opted-in) stale-if-error. Own-namespace URLs resolve from the staged
+* directory and fall through to the network on a miss; a miss never touches
+* the write-through cache — for the own namespace the staged disk IS the
+* resilience artifact. Inert when neither a staged namespace nor an
+* explicit cache is configured.
+*/
+function installGlobalBundleFetch(options) {
+	const namespace = options.namespace;
+	const cacheDir = options.cacheDir;
+	const timeout = Duration.millis(options.timeoutMs ?? Duration.toMillis(DEFAULT_ATTEMPT_TIMEOUT));
+	const original = globalThis.fetch;
+	const runtime = ManagedRuntime.make(Layer.mergeAll(BundleResolver.layer(namespace), HttpFetch.layerWith({ fetchImpl: original })));
+	const program = Effect.fn("resolver.program")(function* (input, init) {
+		const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+		const http = yield* HttpFetch;
+		if (namespace && bundleUrlToLocalPath(url, namespace)) {
+			const local = yield* (yield* BundleResolver).lookup(input);
+			if (local !== null) return local;
+			return yield* resilientFetch(http, input, init, timeout);
+		}
+		if (cacheDir !== void 0 && bundleCachePath(url, { cacheDir })) {
+			const cachedRead = Effect.tryPromise(() => readBundleCache(url, { cacheDir }));
+			return yield* Effect.gen(function* () {
+				const response = yield* resilientFetch(http, input, init, timeout);
+				if (response.ok) yield* Effect.tryPromise(async () => {
+					const bytes = new Uint8Array(await response.clone().arrayBuffer());
+					await writeBundleCache(url, bytes, { cacheDir });
+				}).pipe(Effect.ignore);
+				else {
+					const cached = yield* cachedRead;
+					if (cached) return staleResponse(cached, url);
+				}
+				return response;
+			}).pipe(Effect.catch((error) => Effect.gen(function* () {
+				const cached = yield* cachedRead;
+				if (cached) return staleResponse(cached, url);
+				return yield* Effect.fail(error);
+			})));
+		}
+		return yield* resilientFetch(http, input, init, timeout);
+	});
+	const patched = ((input, init) => runtime.runPromise(program(input, init)));
+	const originalPreconnect = original.preconnect;
+	if (originalPreconnect) patched.preconnect = originalPreconnect.bind(original);
+	globalThis.fetch = patched;
+	return { uninstall: async () => {
+		if (globalThis.fetch === patched) globalThis.fetch = original;
+		await runtime.dispose();
+	} };
+}
+/**
+* Boot-time installer for the CLI and the host server: derives the own
+* namespace from `BOS_BUNDLE_DIR` plus the runtime identity
+* (`BOS_ACCOUNT`/`BOS_GATEWAY` registry env taking precedence over the
+* bos.config.json fields), and the stale-if-error cache from an explicit
+* `BOS_BUNDLE_CACHE_DIR` — never implicit. Tier auto-detection (ADR 0021):
+* an identity whose namespace is not actually staged under the bundle dir
+* drops to the registry tier — plain resilient network fetch — instead of
+* deterministically 404ing own-namespace URLs against a foreign image's
+* staged bytes. Never throws — a missing or malformed identity leaves the
+* default fetch in place.
+*/
+function installBundleFetchFromEnv(input) {
+	const bundleDir = process.env.BOS_BUNDLE_DIR;
+	const cacheDir = process.env.BOS_BUNDLE_CACHE_DIR;
+	if (!bundleDir && cacheDir === void 0) return null;
+	let configAccount;
+	let configGateway;
+	const configPath = input.configPath;
+	if (configPath && !isAppDescriptorPath(configPath)) try {
+		const parsed = JSON.parse(readFileSync(configPath, "utf8"));
+		configAccount = parsed.account;
+		configGateway = parsed.domain;
+	} catch {}
+	const account = process.env.BOS_ACCOUNT ?? configAccount;
+	const gateway = process.env.BOS_GATEWAY ?? configGateway;
+	if (bundleDir && (!account || !gateway)) return null;
+	let namespace;
+	if (bundleDir && account && gateway) {
+		if (existsSync(path.join(bundleDir, account, gateway))) namespace = {
+			bundleDir,
+			account,
+			gateway
+		};
+		else console.warn(`[bundles] staged namespace ${account}/${gateway} not found under ${bundleDir} — registry tier (network fetch)`);
+	}
+	return installGlobalBundleFetch({
+		namespace,
+		cacheDir
+	});
+}
+
+//#endregion
+export { BundleReadError, BundleResolver, bundleUrlToLocalPath, bundleUrlToStagedPath, installBundleFetchFromEnv, installGlobalBundleFetch, resolveContained };
+//# sourceMappingURL=resolver.mjs.map

package/dist/resolver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.mjs","names":[],"sources":["../src/resolver.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport {\n  Cause,\n  Context,\n  Data,\n  Duration,\n  Effect,\n  Layer,\n  ManagedRuntime,\n  Schedule,\n  Schema,\n} from \"effect\";\nimport { cacheControlOf } from \"every-plugin/build/artifact-names\";\nimport { bundleCachePath, readBundleCache, writeBundleCache } from \"./bundle-cache\";\nimport { isAppDescriptorPath } from \"./config\";\nimport { FetchNetworkError, HttpFetch, type HttpFetchShape } from \"./http-client\";\n\ntype FetchImpl = typeof globalThis.fetch;\n\n/**\n * Bundle resolution — the one seam every boot-time byte crosses (config\n * manifest discovery, contract-type fetches, federation remote loading, SSR\n * serving). Two tiers, one policy (ADR 0011/0021):\n *\n * - Self-contained runtime image: a staged namespace under `BOS_BUNDLE_DIR`\n *   resolves from disk; a miss falls through to the network so a partially-\n *   staged namespace boots over the wire instead of failing.\n * - Registry tier: plain resilient network fetch — CDN is the single\n *   distribution source. The stale-if-error disk cache exists only behind an\n *   explicit `BOS_BUNDLE_CACHE_DIR` opt-in; cached bytes are a resilience\n *   artifact, never a deployment, so a post-reset boot can never satisfy\n *   itself with pre-reset bytes.\n */\n\nexport interface BundleNamespace {\n  readonly bundleDir: string;\n  readonly account: string;\n  readonly gateway: string;\n}\n\nexport class BundleReadError extends Schema.TaggedError<BundleReadError>()(\"BundleReadError\", {\n  path: Schema.String,\n  cause: Schema.optional(Schema.Unknown),\n}) {}\n\nconst MIME_TYPES: Record<string, string> = {\n  \".js\": \"text/javascript\",\n  \".mjs\": \"text/javascript\",\n  \".cjs\": \"text/javascript\",\n  \".css\": \"text/css\",\n  \".json\": \"application/json\",\n  \".map\": \"application/json\",\n  \".svg\": \"image/svg+xml\",\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".webp\": \"image/webp\",\n  \".avif\": \"image/avif\",\n  \".ico\": \"image/x-icon\",\n  \".html\": \"text/html\",\n  \".htm\": \"text/html\",\n  \".webmanifest\": \"application/manifest+json\",\n  \".md\": \"text/markdown\",\n  \".ts\": \"text/plain\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n  \".ttf\": \"font/ttf\",\n  \".otf\": \"font/otf\",\n  \".eot\": \"application/vnd.ms-opentype\",\n  \".wasm\": \"application/wasm\",\n  \".txt\": \"text/xml\",\n  \".xml\": \"application/xml\",\n};\n\n/**\n * Maps a bundle URL onto the staged namespace layout. Bundle URLs carry their\n * namespace in the path (`…/bundles/<account>/<gateway>/<workspace>/…`); the\n * staged layout mirrors it under `<bundleDir>/<account>/<gateway>/…`. The\n * namespace is taken from the URL itself — this answers \"which staged\n * directory do these bytes live in?\" rather than \"is this my namespace?\" —\n * and the result is contained within the account/gateway directory. Returns\n * null for foreign shapes.\n */\nexport function bundleUrlToStagedPath(url: string, bundleDir: string): string | null {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return null;\n  }\n  if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") return null;\n\n  const segments = parsed.pathname.split(\"/\").filter(Boolean);\n  if (segments[0] !== \"bundles\" || segments.length < 3) return null;\n\n  let decoded: string[];\n  try {\n    decoded = segments.slice(1).map((segment) => decodeURIComponent(segment));\n  } catch {\n    return null;\n  }\n  const [account, gateway, ...rest] = decoded;\n  if (!account || !gateway || rest.length === 0) return null;\n\n  const nsDir = path.resolve(bundleDir, account, gateway);\n  const filePath = path.resolve(nsDir, ...rest);\n  if (filePath === nsDir || !filePath.startsWith(nsDir + path.sep)) return null;\n  return filePath;\n}\n\n/** Resolve a relative config-supplied path inside `dir`, or null on escape. */\nexport function resolveContained(dir: string, relative: string): string | null {\n  const resolved = path.resolve(dir, ...relative.split(\"/\").filter(Boolean));\n  if (resolved === dir || !resolved.startsWith(dir + path.sep)) return null;\n  return resolved;\n}\n\n/**\n * Own-namespace path for a bundle URL: the shared URL→staged-path mapping,\n * narrowed to the runtime identity — a URL whose encoded namespace differs\n * from `namespace.account`/`namespace.gateway` must fall to the network,\n * never serve a sibling namespace's staged bytes.\n */\nexport function bundleUrlToLocalPath(url: string, namespace: BundleNamespace): string | null {\n  const filePath = bundleUrlToStagedPath(url, namespace.bundleDir);\n  if (!filePath) return null;\n\n  const nsDir = path.resolve(namespace.bundleDir, namespace.account, namespace.gateway);\n  if (filePath !== nsDir && !filePath.startsWith(nsDir + path.sep)) return null;\n\n  return filePath;\n}\n\nexport class BundleResolver extends Context.Service<\n  BundleResolver,\n  {\n    /** Resolve a fetch target from the staged namespace; null = miss or not our namespace — fall through to the network. */\n    readonly lookup: (input: string | URL | Request) => Effect.Effect<Response | null>;\n  }\n>()(\"everything-dev/resolver/BundleResolver\") {\n  static layer(namespace: BundleNamespace | undefined): Layer.Layer<BundleResolver> {\n    if (!namespace) {\n      return Layer.succeed(\n        BundleResolver,\n        BundleResolver.of({ lookup: () => Effect.succeed(null) }),\n      );\n    }\n    const respond = Effect.fn(\"BundleResolver.respond\")(function* (\n      url: string,\n    ): Effect.fn.Return<Response | null, never> {\n      const filePath = bundleUrlToLocalPath(url, namespace);\n      if (!filePath) return null;\n      const bytes = yield* Effect.tryPromise({\n        try: () => readFile(filePath),\n        catch: (cause) => new BundleReadError({ path: filePath, cause }),\n      }).pipe(Effect.catchTag(\"BundleReadError\", () => Effect.succeed(null)));\n      if (bytes === null) return null;\n      const name = path.basename(filePath);\n      const contentType =\n        MIME_TYPES[path.extname(name).toLowerCase()] ?? \"application/octet-stream\";\n      return new Response(new Uint8Array(bytes), {\n        headers: {\n          \"content-type\": contentType,\n          \"cache-control\": cacheControlOf(name),\n          etag: `\"${Buffer.from(bytes.subarray(0, 4096)).toString(\"base64\").slice(0, 24)}\"`,\n        },\n      });\n    });\n\n    return Layer.effect(\n      BundleResolver,\n      Effect.succeed(\n        BundleResolver.of({\n          lookup: (input) => {\n            const url =\n              typeof input === \"string\" ? input : input instanceof URL ? input.href : input.url;\n            return respond(url);\n          },\n        }),\n      ),\n    );\n  }\n}\n\nexport interface BundleFetchHandle {\n  readonly uninstall: () => Promise<void>;\n}\n\nexport interface BundleFetchOptions {\n  /** Own-namespace FS resolution — requires a staged `BOS_BUNDLE_DIR`. */\n  namespace?: BundleNamespace;\n  /**\n   * Explicit opt-in stale-if-error cache (child tier): `/bundles/…` URLs\n   * write through to disk on success and serve last-known-good bytes when\n   * the origin fails. Never derived implicitly — a cache that activates\n   * itself can serve pre-reset bytes after a deploy.\n   */\n  cacheDir?: string;\n  /** Per-attempt deadline for idempotent GETs crossing the interceptor. */\n  timeoutMs?: number;\n}\n\nconst staleResponse = (bytes: Uint8Array, url: string): Response => {\n  const name = url.split(\"?\")[0]?.split(\"/\").pop() ?? \"\";\n  const contentType = MIME_TYPES[path.extname(name).toLowerCase()] ?? \"application/octet-stream\";\n  return new Response(bytes.slice().buffer, {\n    status: 200,\n    headers: { \"content-type\": contentType, \"x-bundle-cache\": \"stale\" },\n  });\n};\n\nconst DEFAULT_ATTEMPT_TIMEOUT = \"30 seconds\";\nconst RETRY_BASE_DELAY = \"250 millis\";\nconst RETRY_CAP = \"5 seconds\";\nconst RETRY_TIMES = 4;\n\nconst isTransientStatus = (status: number): boolean => status === 429 || status >= 500;\n\nfunction requestMethod(input: Parameters<FetchImpl>[0], init?: Parameters<FetchImpl>[1]): string {\n  if (init?.method) return init.method.toUpperCase();\n  if (typeof input === \"string\" || input instanceof URL) return \"GET\";\n  return input.method.toUpperCase();\n}\n\nconst asError = (cause: unknown): Error =>\n  cause instanceof Error ? cause : new Error(String(cause));\n\n/** A 429/5xx response — carried as a failure so the Schedule can retry it,\n * with the Response kept for the exhausted-retries fallthrough. */\nclass TransientBundleResponse extends Data.TaggedError(\"TransientBundleResponse\")<{\n  readonly response: Response;\n}> {}\n\n/**\n * One network attempt through the `HttpFetch` policy: the fetch runs under\n * the fiber's interruption signal, and `Effect.timeout` interrupts at the\n * deadline — aborting the in-flight request. The response is returned\n * regardless of status; transient statuses are lifted by the caller.\n */\nconst fetchAttempt = Effect.fn(\"resolver.attempt\")(function* (\n  http: HttpFetchShape,\n  input: Parameters<FetchImpl>[0],\n  init: Parameters<FetchImpl>[1],\n  timeout: Duration.Duration,\n): Effect.fn.Return<Response, FetchNetworkError | Cause.TimeoutError | TransientBundleResponse> {\n  return yield* http.attempt(input, init).pipe(\n    Effect.timeoutOrElse({\n      duration: Duration.toMillis(timeout),\n      orElse: () => Effect.fail(new Cause.TimeoutError()),\n    }),\n    Effect.filterOrFail(\n      (response) => !isTransientStatus(response.status),\n      (response) => new TransientBundleResponse({ response }),\n    ),\n  );\n});\n\n/**\n * The resilience policy for idempotent GETs crossing the interceptor\n * (ADR 0021 amendment — the CDN-only image): a cold boot has no staged\n * fallback, so one edge hiccup or a hung connection during the load window\n * must not hard-fail the host or a plugin. Transient statuses and network\n * errors (including the deadline's TimeoutError) retry on a capped\n * exponential schedule before propagating; the last transient response is\n * returned so an explicit stale-if-error cache still sees it. Non-GETs pass\n * through untouched; a caller-initiated cancellation is never spent on the\n * schedule.\n */\nconst resilientFetch = Effect.fn(\"resolver.fetch\")(function* (\n  http: HttpFetchShape,\n  input: Parameters<FetchImpl>[0],\n  init: Parameters<FetchImpl>[1],\n  timeout: Duration.Duration,\n): Effect.fn.Return<Response, Cause.TimeoutError | Error> {\n  if (requestMethod(input, init) !== \"GET\") {\n    return yield* http.attempt(input, init).pipe(Effect.mapError((cause) => asError(cause.cause)));\n  }\n  return yield* fetchAttempt(http, input, init, timeout).pipe(\n    Effect.retry({\n      schedule: Schedule.exponential(RETRY_BASE_DELAY).pipe(\n        Schedule.upTo({ duration: RETRY_CAP, times: RETRY_TIMES }),\n      ),\n      // A caller-initiated cancellation is not transient — propagate it\n      // immediately instead of spending the schedule on a canceled request.\n      while: (error) =>\n        !(\n          (error instanceof FetchNetworkError || error instanceof Cause.TimeoutError) &&\n          init?.signal?.aborted\n        ),\n    }),\n    Effect.catchTags({\n      TransientBundleResponse: (error) => Effect.succeed(error.response),\n      FetchNetworkError: (error) => Effect.fail(asError(error.cause)),\n    }),\n  );\n});\n\n/**\n * Installs the resolver as a global fetch interceptor — the one seam every\n * boot-time consumer shares (config manifest discovery, contract-type\n * fetches, orchestrator host loading, MF remoteEntry/identity probes) and\n * the SSR serving path. One layered resolution policy, as a single Effect\n * program on the managed runtime: staged disk → network → (explicitly\n * opted-in) stale-if-error. Own-namespace URLs resolve from the staged\n * directory and fall through to the network on a miss; a miss never touches\n * the write-through cache — for the own namespace the staged disk IS the\n * resilience artifact. Inert when neither a staged namespace nor an\n * explicit cache is configured.\n */\nexport function installGlobalBundleFetch(options: BundleFetchOptions): BundleFetchHandle {\n  const namespace = options.namespace;\n  const cacheDir = options.cacheDir;\n  const timeout = Duration.millis(options.timeoutMs ?? Duration.toMillis(DEFAULT_ATTEMPT_TIMEOUT));\n  const original: FetchImpl = globalThis.fetch;\n\n  const runtime = ManagedRuntime.make(\n    Layer.mergeAll(BundleResolver.layer(namespace), HttpFetch.layerWith({ fetchImpl: original })),\n  );\n\n  const program = Effect.fn(\"resolver.program\")(function* (\n    input: Parameters<FetchImpl>[0],\n    init?: Parameters<FetchImpl>[1],\n  ): Effect.fn.Return<Response, Cause.TimeoutError | Error, BundleResolver | HttpFetch> {\n    const url = typeof input === \"string\" ? input : input instanceof URL ? input.href : input.url;\n    const http = yield* HttpFetch;\n\n    if (namespace && bundleUrlToLocalPath(url, namespace)) {\n      const resolver = yield* BundleResolver;\n      const local = yield* resolver.lookup(input);\n      if (local !== null) return local;\n      return yield* resilientFetch(http, input, init, timeout);\n    }\n\n    if (cacheDir !== undefined && bundleCachePath(url, { cacheDir })) {\n      const cachedRead = Effect.tryPromise(() => readBundleCache(url, { cacheDir }));\n      return yield* Effect.gen(function* () {\n        const response = yield* resilientFetch(http, input, init, timeout);\n        if (response.ok) {\n          // write-through is best-effort\n          yield* Effect.tryPromise(async () => {\n            const bytes = new Uint8Array(await response.clone().arrayBuffer());\n            await writeBundleCache(url, bytes, { cacheDir });\n          }).pipe(Effect.ignore);\n        } else {\n          const cached = yield* cachedRead;\n          if (cached) return staleResponse(cached, url);\n        }\n        return response;\n      }).pipe(\n        Effect.catch((error) =>\n          Effect.gen(function* () {\n            const cached = yield* cachedRead;\n            if (cached) return staleResponse(cached, url);\n            return yield* Effect.fail(error);\n          }),\n        ),\n      );\n    }\n\n    return yield* resilientFetch(http, input, init, timeout);\n  });\n\n  interface FetchWithPreconnect {\n    (input: Parameters<FetchImpl>[0], init?: Parameters<FetchImpl>[1]): Promise<Response>;\n    preconnect?: (...args: unknown[]) => unknown;\n  }\n\n  const patched = ((input: Parameters<FetchImpl>[0], init?: Parameters<FetchImpl>[1]) =>\n    runtime.runPromise(program(input, init))) as FetchWithPreconnect;\n  const originalPreconnect = (original as FetchWithPreconnect).preconnect;\n  if (originalPreconnect) {\n    patched.preconnect = originalPreconnect.bind(original);\n  }\n  globalThis.fetch = patched as unknown as FetchImpl;\n  return {\n    uninstall: async () => {\n      if (globalThis.fetch === patched) {\n        globalThis.fetch = original;\n      }\n      await runtime.dispose();\n    },\n  };\n}\n\n/**\n * Boot-time installer for the CLI and the host server: derives the own\n * namespace from `BOS_BUNDLE_DIR` plus the runtime identity\n * (`BOS_ACCOUNT`/`BOS_GATEWAY` registry env taking precedence over the\n * bos.config.json fields), and the stale-if-error cache from an explicit\n * `BOS_BUNDLE_CACHE_DIR` — never implicit. Tier auto-detection (ADR 0021):\n * an identity whose namespace is not actually staged under the bundle dir\n * drops to the registry tier — plain resilient network fetch — instead of\n * deterministically 404ing own-namespace URLs against a foreign image's\n * staged bytes. Never throws — a missing or malformed identity leaves the\n * default fetch in place.\n */\nexport function installBundleFetchFromEnv(input: {\n  configPath?: string | null;\n}): BundleFetchHandle | null {\n  const bundleDir = process.env.BOS_BUNDLE_DIR;\n  const cacheDir = process.env.BOS_BUNDLE_CACHE_DIR;\n  if (!bundleDir && cacheDir === undefined) return null;\n\n  let configAccount: string | undefined;\n  let configGateway: string | undefined;\n  const configPath = input.configPath;\n  if (configPath && !isAppDescriptorPath(configPath)) {\n    try {\n      const parsed = JSON.parse(readFileSync(configPath, \"utf8\")) as {\n        account?: string;\n        domain?: string;\n      };\n      configAccount = parsed.account;\n      configGateway = parsed.domain;\n    } catch {\n      // unreadable config — identity may still come from the registry env\n    }\n  }\n\n  const account = process.env.BOS_ACCOUNT ?? configAccount;\n  const gateway = process.env.BOS_GATEWAY ?? configGateway;\n  if (bundleDir && (!account || !gateway)) return null;\n\n  let namespace: BundleNamespace | undefined;\n  if (bundleDir && account && gateway) {\n    if (existsSync(path.join(bundleDir, account, gateway))) {\n      namespace = { bundleDir, account, gateway };\n    } else {\n      console.warn(\n        `[bundles] staged namespace ${account}/${gateway} not found under ${bundleDir} — registry tier (network fetch)`,\n      );\n    }\n  }\n  return installGlobalBundleFetch({ namespace, cacheDir });\n}\n"],"mappings":";;;;;;;;;;AA0CA,IAAa,kBAAb,cAAqC,OAAO,YAA6B,CAAC,CAAC,mBAAmB;CAC5F,MAAM,OAAO;CACb,OAAO,OAAO,SAAS,OAAO,OAAO;AACvC,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAM,aAAqC;CACzC,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,SAAS;CACT,SAAS;CACT,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,gBAAgB;CAChB,OAAO;CACP,OAAO;CACP,SAAS;CACT,UAAU;CACV,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;AACV;;;;;;;;;;AAWA,SAAgB,sBAAsB,KAAa,WAAkC;CACnF,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,OAAO;CACT;CACA,IAAI,OAAO,aAAa,YAAY,OAAO,aAAa,SAAS,OAAO;CAExE,MAAM,WAAW,OAAO,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO;CAC1D,IAAI,SAAS,OAAO,aAAa,SAAS,SAAS,GAAG,OAAO;CAE7D,IAAI;CACJ,IAAI;EACF,UAAU,SAAS,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,mBAAmB,OAAO,CAAC;CAC1E,QAAQ;EACN,OAAO;CACT;CACA,MAAM,CAAC,SAAS,SAAS,GAAG,QAAQ;CACpC,IAAI,CAAC,WAAW,CAAC,WAAW,KAAK,WAAW,GAAG,OAAO;CAEtD,MAAM,QAAQ,KAAK,QAAQ,WAAW,SAAS,OAAO;CACtD,MAAM,WAAW,KAAK,QAAQ,OAAO,GAAG,IAAI;CAC5C,IAAI,aAAa,SAAS,CAAC,SAAS,WAAW,QAAQ,KAAK,GAAG,GAAG,OAAO;CACzE,OAAO;AACT;;AAGA,SAAgB,iBAAiB,KAAa,UAAiC;CAC7E,MAAM,WAAW,KAAK,QAAQ,KAAK,GAAG,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO,CAAC;CACzE,IAAI,aAAa,OAAO,CAAC,SAAS,WAAW,MAAM,KAAK,GAAG,GAAG,OAAO;CACrE,OAAO;AACT;;;;;;;AAQA,SAAgB,qBAAqB,KAAa,WAA2C;CAC3F,MAAM,WAAW,sBAAsB,KAAK,UAAU,SAAS;CAC/D,IAAI,CAAC,UAAU,OAAO;CAEtB,MAAM,QAAQ,KAAK,QAAQ,UAAU,WAAW,UAAU,SAAS,UAAU,OAAO;CACpF,IAAI,aAAa,SAAS,CAAC,SAAS,WAAW,QAAQ,KAAK,GAAG,GAAG,OAAO;CAEzE,OAAO;AACT;AAEA,IAAa,iBAAb,MAAa,uBAAuB,QAAQ,QAM1C,CAAC,CAAC,wCAAwC,CAAC,CAAC;CAC5C,OAAO,MAAM,WAAqE;EAChF,IAAI,CAAC,WACH,OAAO,MAAM,QACX,gBACA,eAAe,GAAG,EAAE,cAAc,OAAO,QAAQ,IAAI,EAAE,CAAC,CAC1D;EAEF,MAAM,UAAU,OAAO,GAAG,wBAAwB,CAAC,CAAC,WAClD,KAC0C;GAC1C,MAAM,WAAW,qBAAqB,KAAK,SAAS;GACpD,IAAI,CAAC,UAAU,OAAO;GACtB,MAAM,QAAQ,OAAO,OAAO,WAAW;IACrC,WAAW,SAAS,QAAQ;IAC5B,QAAQ,UAAU,IAAI,gBAAgB;KAAE,MAAM;KAAU;IAAM,CAAC;GACjE,CAAC,CAAC,CAAC,KAAK,OAAO,SAAS,yBAAyB,OAAO,QAAQ,IAAI,CAAC,CAAC;GACtE,IAAI,UAAU,MAAM,OAAO;GAC3B,MAAM,OAAO,KAAK,SAAS,QAAQ;GACnC,MAAM,cACJ,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,MAAM;GAClD,OAAO,IAAI,SAAS,IAAI,WAAW,KAAK,GAAG,EACzC,SAAS;IACP,gBAAgB;IAChB,iBAAiB,eAAe,IAAI;IACpC,MAAM,IAAI,OAAO,KAAK,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE;GACjF,EACF,CAAC;EACH,CAAC;EAED,OAAO,MAAM,OACX,gBACA,OAAO,QACL,eAAe,GAAG,EAChB,SAAS,UAAU;GACjB,MAAM,MACJ,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,OAAO,MAAM;GAChF,OAAO,QAAQ,GAAG;EACpB,EACF,CAAC,CACH,CACF;CACF;AACF;AAoBA,MAAM,iBAAiB,OAAmB,QAA0B;CAClE,MAAM,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACpD,MAAM,cAAc,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,MAAM;CACpE,OAAO,IAAI,SAAS,MAAM,MAAM,CAAC,CAAC,QAAQ;EACxC,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAa,kBAAkB;EAAQ;CACpE,CAAC;AACH;AAEA,MAAM,0BAA0B;AAChC,MAAM,mBAAmB;AACzB,MAAM,YAAY;AAClB,MAAM,cAAc;AAEpB,MAAM,qBAAqB,WAA4B,WAAW,OAAO,UAAU;AAEnF,SAAS,cAAc,OAAiC,MAAyC;CAC/F,IAAI,MAAM,QAAQ,OAAO,KAAK,OAAO,YAAY;CACjD,IAAI,OAAO,UAAU,YAAY,iBAAiB,KAAK,OAAO;CAC9D,OAAO,MAAM,OAAO,YAAY;AAClC;AAEA,MAAM,WAAW,UACf,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;;;AAI1D,IAAM,0BAAN,cAAsC,KAAK,YAAY,yBAAyB,CAAC,CAE9E,CAAC;;;;;;;AAQJ,MAAM,eAAe,OAAO,GAAG,kBAAkB,CAAC,CAAC,WACjD,MACA,OACA,MACA,SAC8F;CAC9F,OAAO,OAAO,KAAK,QAAQ,OAAO,IAAI,CAAC,CAAC,KACtC,OAAO,cAAc;EACnB,UAAU,SAAS,SAAS,OAAO;EACnC,cAAc,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;CACpD,CAAC,GACD,OAAO,cACJ,aAAa,CAAC,kBAAkB,SAAS,MAAM,IAC/C,aAAa,IAAI,wBAAwB,EAAE,SAAS,CAAC,CACxD,CACF;AACF,CAAC;;;;;;;;;;;;AAaD,MAAM,iBAAiB,OAAO,GAAG,gBAAgB,CAAC,CAAC,WACjD,MACA,OACA,MACA,SACwD;CACxD,IAAI,cAAc,OAAO,IAAI,MAAM,OACjC,OAAO,OAAO,KAAK,QAAQ,OAAO,IAAI,CAAC,CAAC,KAAK,OAAO,UAAU,UAAU,QAAQ,MAAM,KAAK,CAAC,CAAC;CAE/F,OAAO,OAAO,aAAa,MAAM,OAAO,MAAM,OAAO,CAAC,CAAC,KACrD,OAAO,MAAM;EACX,UAAU,SAAS,YAAY,gBAAgB,CAAC,CAAC,KAC/C,SAAS,KAAK;GAAE,UAAU;GAAW,OAAO;EAAY,CAAC,CAC3D;EAGA,QAAQ,UACN,GACG,iBAAiB,qBAAqB,iBAAiB,MAAM,iBAC9D,MAAM,QAAQ;CAEpB,CAAC,GACD,OAAO,UAAU;EACf,0BAA0B,UAAU,OAAO,QAAQ,MAAM,QAAQ;EACjE,oBAAoB,UAAU,OAAO,KAAK,QAAQ,MAAM,KAAK,CAAC;CAChE,CAAC,CACH;AACF,CAAC;;;;;;;;;;;;;AAcD,SAAgB,yBAAyB,SAAgD;CACvF,MAAM,YAAY,QAAQ;CAC1B,MAAM,WAAW,QAAQ;CACzB,MAAM,UAAU,SAAS,OAAO,QAAQ,aAAa,SAAS,SAAS,uBAAuB,CAAC;CAC/F,MAAM,WAAsB,WAAW;CAEvC,MAAM,UAAU,eAAe,KAC7B,MAAM,SAAS,eAAe,MAAM,SAAS,GAAG,UAAU,UAAU,EAAE,WAAW,SAAS,CAAC,CAAC,CAC9F;CAEA,MAAM,UAAU,OAAO,GAAG,kBAAkB,CAAC,CAAC,WAC5C,OACA,MACoF;EACpF,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,iBAAiB,MAAM,MAAM,OAAO,MAAM;EAC1F,MAAM,OAAO,OAAO;EAEpB,IAAI,aAAa,qBAAqB,KAAK,SAAS,GAAG;GAErD,MAAM,QAAQ,QAAO,OADG,eACK,CAAC,OAAO,KAAK;GAC1C,IAAI,UAAU,MAAM,OAAO;GAC3B,OAAO,OAAO,eAAe,MAAM,OAAO,MAAM,OAAO;EACzD;EAEA,IAAI,aAAa,UAAa,gBAAgB,KAAK,EAAE,SAAS,CAAC,GAAG;GAChE,MAAM,aAAa,OAAO,iBAAiB,gBAAgB,KAAK,EAAE,SAAS,CAAC,CAAC;GAC7E,OAAO,OAAO,OAAO,IAAI,aAAa;IACpC,MAAM,WAAW,OAAO,eAAe,MAAM,OAAO,MAAM,OAAO;IACjE,IAAI,SAAS,IAEX,OAAO,OAAO,WAAW,YAAY;KACnC,MAAM,QAAQ,IAAI,WAAW,MAAM,SAAS,MAAM,CAAC,CAAC,YAAY,CAAC;KACjE,MAAM,iBAAiB,KAAK,OAAO,EAAE,SAAS,CAAC;IACjD,CAAC,CAAC,CAAC,KAAK,OAAO,MAAM;SAChB;KACL,MAAM,SAAS,OAAO;KACtB,IAAI,QAAQ,OAAO,cAAc,QAAQ,GAAG;IAC9C;IACA,OAAO;GACT,CAAC,CAAC,CAAC,KACD,OAAO,OAAO,UACZ,OAAO,IAAI,aAAa;IACtB,MAAM,SAAS,OAAO;IACtB,IAAI,QAAQ,OAAO,cAAc,QAAQ,GAAG;IAC5C,OAAO,OAAO,OAAO,KAAK,KAAK;GACjC,CAAC,CACH,CACF;EACF;EAEA,OAAO,OAAO,eAAe,MAAM,OAAO,MAAM,OAAO;CACzD,CAAC;CAOD,MAAM,YAAY,OAAiC,SACjD,QAAQ,WAAW,QAAQ,OAAO,IAAI,CAAC;CACzC,MAAM,qBAAsB,SAAiC;CAC7D,IAAI,oBACF,QAAQ,aAAa,mBAAmB,KAAK,QAAQ;CAEvD,WAAW,QAAQ;CACnB,OAAO,EACL,WAAW,YAAY;EACrB,IAAI,WAAW,UAAU,SACvB,WAAW,QAAQ;EAErB,MAAM,QAAQ,QAAQ;CACxB,EACF;AACF;;;;;;;;;;;;;AAcA,SAAgB,0BAA0B,OAEb;CAC3B,MAAM,YAAY,QAAQ,IAAI;CAC9B,MAAM,WAAW,QAAQ,IAAI;CAC7B,IAAI,CAAC,aAAa,aAAa,QAAW,OAAO;CAEjD,IAAI;CACJ,IAAI;CACJ,MAAM,aAAa,MAAM;CACzB,IAAI,cAAc,CAAC,oBAAoB,UAAU,GAC/C,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;EAI1D,gBAAgB,OAAO;EACvB,gBAAgB,OAAO;CACzB,QAAQ,CAER;CAGF,MAAM,UAAU,QAAQ,IAAI,eAAe;CAC3C,MAAM,UAAU,QAAQ,IAAI,eAAe;CAC3C,IAAI,cAAc,CAAC,WAAW,CAAC,UAAU,OAAO;CAEhD,IAAI;CACJ,IAAI,aAAa,WAAW,SAAS;EACnC,IAAI,WAAW,KAAK,KAAK,WAAW,SAAS,OAAO,CAAC,GACnD,YAAY;GAAE;GAAW;GAAS;EAAQ;OAE1C,QAAQ,KACN,8BAA8B,QAAQ,GAAG,QAAQ,mBAAmB,UAAU,iCAChF;CAEJ;CACA,OAAO,yBAAyB;EAAE;EAAW;CAAS,CAAC;AACzD"}