@c9up/ream 0.1.3

package/dist/rpc/RpcRouter.d.ts

@@ -0,0 +1,61 @@
+/**
+ * JSON-RPC 2.0 Router — dispatches RPC method calls to handlers.
+ *
+ * Same middleware/guard/validate pipeline as REST routes.
+ *
+ * Usage:
+ *   rpc.method('task.validate', handler).guard('jwt').role('cs_member')
+ *   rpc.namespace('task', TaskController)  // every public method, DI-resolved per call
+ *   rpc.group({ guard: 'jwt' }, (r) => { r.method('user.find', handler) })
+ *
+ * @implements MISS-27
+ */
+import type { HttpContext } from '../http/HttpContext.js';
+export type RpcHandler = (ctx: HttpContext, params: unknown) => Promise<unknown> | unknown;
+export interface RpcMethodDefinition {
+    name: string;
+    handler: RpcHandler;
+    guards: string[];
+    roles: string[];
+    permissions: string[];
+    middleware: string[];
+    validator?: string;
+}
+export declare class RpcMethodBuilder {
+    #private;
+    constructor(def: RpcMethodDefinition);
+    guard(...guards: string[]): this;
+    role(...roles: string[]): this;
+    permission(...permissions: string[]): this;
+    validate(validator: string): this;
+    middleware(...names: string[]): this;
+}
+export declare class RpcRouter {
+    #private;
+    /**
+     * Set the IoC container used to resolve `namespace()` controllers — mirrors
+     * `GraphQLEngine.useContainer()` so RPC and GraphQL resolve class handlers the
+     * same way (fresh DI per call). Without a container, controllers fall back to
+     * `new Controller()`.
+     */
+    useContainer(container: {
+        make<T>(target: new (...args: unknown[]) => T): T;
+    }): void;
+    /** Register an RPC method. */
+    method(name: string, handler: RpcHandler): RpcMethodBuilder;
+    /** Register methods from a controller — auto-registers all public methods. */
+    namespace(prefix: string, controller: new (...args: unknown[]) => Record<string, (...args: unknown[]) => unknown>): void;
+    /** Group methods with shared guards/middleware. */
+    group(config: {
+        guard?: string;
+        guards?: string[];
+        middleware?: string[];
+    }, callback: (rpc: RpcRouter) => void): void;
+    /** Handle an incoming JSON-RPC request. */
+    handle(ctx: HttpContext): Promise<void>;
+    /** Get all registered method names. */
+    getMethods(): string[];
+    /** Get method definition for introspection. */
+    getMethod(name: string): RpcMethodDefinition | undefined;
+}
+//# sourceMappingURL=RpcRouter.d.ts.map

package/dist/rpc/RpcRouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RpcRouter.d.ts","sourceRoot":"","sources":["../../src/rpc/RpcRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAEzD,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;AAE1F,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,UAAU,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,gBAAgB;;gBAGf,GAAG,EAAE,mBAAmB;IAIpC,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IAKhC,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAK9B,UAAU,CAAC,GAAG,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI;IAK1C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKjC,UAAU,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;CAIrC;AA+DD,qBAAa,SAAS;;IAKpB;;;;;OAKG;IACH,YAAY,CAAC,SAAS,EAAE;QAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;KAAE,GAAG,IAAI;IAIpF,8BAA8B;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB;IAa3D,8EAA8E;IAC9E,SAAS,CACP,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,KAAK,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,GACtF,IAAI;IAeP,mDAAmD;IACnD,KAAK,CACH,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EACpE,QAAQ,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GACjC,IAAI;IAWP,2CAA2C;IACrC,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAgD7C,uCAAuC;IACvC,UAAU,IAAI,MAAM,EAAE;IAItB,+CAA+C;IAC/C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;CAGzD"}

package/dist/rpc/RpcRouter.js

@@ -0,0 +1,187 @@
+/**
+ * JSON-RPC 2.0 Router — dispatches RPC method calls to handlers.
+ *
+ * Same middleware/guard/validate pipeline as REST routes.
+ *
+ * Usage:
+ *   rpc.method('task.validate', handler).guard('jwt').role('cs_member')
+ *   rpc.namespace('task', TaskController)  // every public method, DI-resolved per call
+ *   rpc.group({ guard: 'jwt' }, (r) => { r.method('user.find', handler) })
+ *
+ * @implements MISS-27
+ */
+export class RpcMethodBuilder {
+    #def;
+    constructor(def) {
+        this.#def = def;
+    }
+    guard(...guards) {
+        this.#def.guards.push(...guards);
+        return this;
+    }
+    role(...roles) {
+        this.#def.roles.push(...roles);
+        return this;
+    }
+    permission(...permissions) {
+        this.#def.permissions.push(...permissions);
+        return this;
+    }
+    validate(validator) {
+        this.#def.validator = validator;
+        return this;
+    }
+    middleware(...names) {
+        this.#def.middleware.push(...names);
+        return this;
+    }
+}
+/** Build a JSON-RPC 2.0 error envelope. */
+function rpcError(code, message, id) {
+    return { jsonrpc: '2.0', error: { code, message }, id };
+}
+/** Validate the JSON-RPC envelope and extract method/params/id. */
+function parseRpcRequest(request) {
+    if (!request || typeof request !== 'object') {
+        return { ok: false, response: rpcError(-32600, 'Invalid Request', null) };
+    }
+    // request is narrowed to a non-null object by the typeof check above.
+    const jsonrpc = 'jsonrpc' in request && typeof request.jsonrpc === 'string' ? request.jsonrpc : undefined;
+    const method = 'method' in request && typeof request.method === 'string' ? request.method : undefined;
+    const params = 'params' in request ? request.params : undefined;
+    const id = 'id' in request ? request.id : undefined;
+    if (jsonrpc !== '2.0' || !method) {
+        return { ok: false, response: rpcError(-32600, 'Invalid Request', id ?? null) };
+    }
+    return { ok: true, method, params, id };
+}
+/**
+ * Enforce the method's guards/roles/permissions against the request auth state.
+ * Returns the JSON-RPC error code+message to reject with, or undefined when the
+ * caller is authorized.
+ */
+function checkRpcAuthorization(ctx, def) {
+    const needsAuth = def.guards.length > 0 || def.roles.length > 0 || def.permissions.length > 0;
+    if (needsAuth && !ctx.auth?.authenticated) {
+        return { code: -32003, message: 'Unauthorized' };
+    }
+    if (def.roles.length > 0) {
+        const userRoles = ctx.auth?.roles ?? [];
+        if (!def.roles.some((r) => userRoles.includes(r))) {
+            return { code: -32003, message: 'Insufficient role' };
+        }
+    }
+    if (def.permissions.length > 0) {
+        const userPerms = ctx.auth?.permissions ?? [];
+        if (!def.permissions.every((p) => userPerms.includes(p))) {
+            return { code: -32003, message: 'Insufficient permissions' };
+        }
+    }
+    return undefined;
+}
+export class RpcRouter {
+    #methods = new Map();
+    #groupConfig = null;
+    #container;
+    /**
+     * Set the IoC container used to resolve `namespace()` controllers — mirrors
+     * `GraphQLEngine.useContainer()` so RPC and GraphQL resolve class handlers the
+     * same way (fresh DI per call). Without a container, controllers fall back to
+     * `new Controller()`.
+     */
+    useContainer(container) {
+        this.#container = container;
+    }
+    /** Register an RPC method. */
+    method(name, handler) {
+        const def = {
+            name,
+            handler,
+            guards: [...(this.#groupConfig?.guards ?? [])],
+            roles: [...(this.#groupConfig?.roles ?? [])],
+            permissions: [],
+            middleware: [...(this.#groupConfig?.middleware ?? [])],
+        };
+        this.#methods.set(name, def);
+        return new RpcMethodBuilder(def);
+    }
+    /** Register methods from a controller — auto-registers all public methods. */
+    namespace(prefix, controller) {
+        const proto = controller.prototype;
+        const methods = Object.getOwnPropertyNames(proto).filter((m) => m !== 'constructor' && typeof proto[m] === 'function');
+        for (const methodName of methods) {
+            this.method(`${prefix}.${methodName}`, async (ctx, params) => {
+                // Resolve through the container on every call (fresh DI per request,
+                // like GraphQLEngine), falling back to a bare `new` when unset.
+                const instance = this.#container ? this.#container.make(controller) : new controller();
+                return instance[methodName](ctx, params);
+            });
+        }
+    }
+    /** Group methods with shared guards/middleware. */
+    group(config, callback) {
+        const prevConfig = this.#groupConfig;
+        this.#groupConfig = {
+            guards: [...(config.guards ?? []), ...(config.guard ? [config.guard] : [])],
+            roles: [],
+            middleware: config.middleware ?? [],
+        };
+        callback(this);
+        this.#groupConfig = prevConfig;
+    }
+    /** Handle an incoming JSON-RPC request. */
+    async handle(ctx) {
+        const body = ctx.request.body();
+        // Batch support (max 50 to prevent DoS)
+        if (Array.isArray(body)) {
+            if (body.length > 50) {
+                ctx.response.status(400).json({
+                    jsonrpc: '2.0',
+                    error: { code: -32600, message: 'Batch too large (max 50)' },
+                    id: null,
+                });
+                return;
+            }
+            // Note: batch items share the same ctx (auth state). Each is processed sequentially.
+            const results = [];
+            for (const req of body) {
+                results.push(await this.#processOne(ctx, req));
+            }
+            ctx.response.status(200).json(results);
+            return;
+        }
+        const result = await this.#processOne(ctx, body);
+        ctx.response.status(200).json(result);
+    }
+    async #processOne(ctx, request) {
+        const parsed = parseRpcRequest(request);
+        if (!parsed.ok)
+            return parsed.response;
+        const { method, params, id } = parsed;
+        const def = this.#methods.get(method);
+        if (!def)
+            return rpcError(-32601, 'Method not found', id);
+        try {
+            const denied = checkRpcAuthorization(ctx, def);
+            if (denied)
+                return rpcError(denied.code, denied.message, id);
+            const result = await def.handler(ctx, params);
+            return { jsonrpc: '2.0', result, id };
+        }
+        catch (err) {
+            // Don't leak internal error details to caller
+            const isDev = process.env.NODE_ENV !== 'production';
+            const message = isDev && err instanceof Error ? err.message : 'Internal error';
+            return rpcError(-32603, message, id);
+        }
+    }
+    /** Get all registered method names. */
+    getMethods() {
+        return [...this.#methods.keys()];
+    }
+    /** Get method definition for introspection. */
+    getMethod(name) {
+        return this.#methods.get(name);
+    }
+}
+//# sourceMappingURL=RpcRouter.js.map

package/dist/rpc/RpcRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RpcRouter.js","sourceRoot":"","sources":["../../src/rpc/RpcRouter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAgBH,MAAM,OAAO,gBAAgB;IAC3B,IAAI,CAAqB;IAEzB,YAAY,GAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,MAAgB;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAA;QAChC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,GAAG,KAAe;QACrB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,UAAU,CAAC,GAAG,WAAqB;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,UAAU,CAAC,GAAG,KAAe;QAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAA;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAQD,2CAA2C;AAC3C,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe,EAAE,EAAW;IAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAA;AACzD,CAAC;AAMD,mEAAmE;AACnE,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAA;IAC3E,CAAC;IACD,sEAAsE;IACtE,MAAM,OAAO,GACX,SAAS,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3F,MAAM,MAAM,GACV,QAAQ,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxF,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,MAAM,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACnD,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAA;IACjF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,GAAgB,EAChB,GAAwB;IAExB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7F,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAA;QACvD,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAA;QAC7C,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAA;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,OAAO,SAAS;IACpB,QAAQ,GAAqC,IAAI,GAAG,EAAE,CAAA;IACtD,YAAY,GAAuE,IAAI,CAAA;IACvF,UAAU,CAAwD;IAElE;;;;;OAKG;IACH,YAAY,CAAC,SAAgE;QAC3E,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;IAC7B,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,IAAY,EAAE,OAAmB;QACtC,MAAM,GAAG,GAAwB;YAC/B,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9C,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5C,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;SACvD,CAAA;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC5B,OAAO,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAED,8EAA8E;IAC9E,SAAS,CACP,MAAc,EACd,UAAuF;QAEvF,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAA;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,CACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,CAC7D,CAAA;QACD,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;gBAC3D,qEAAqE;gBACrE,gEAAgE;gBAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAA;gBACtF,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC1C,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,KAAK,CACH,MAAoE,EACpE,QAAkC;QAElC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAA;QACpC,IAAI,CAAC,YAAY,GAAG;YAClB,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;SACpC,CAAA;QACD,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC,YAAY,GAAG,UAAU,CAAA;IAChC,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,MAAM,CAAC,GAAgB;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;QAE/B,wCAAwC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE;oBAC5D,EAAE,EAAE,IAAI;iBACT,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YACD,qFAAqF;YACrF,MAAM,OAAO,GAAc,EAAE,CAAA;YAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAChD,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACtC,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAChD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAgB,EAAE,OAAgB;QAClD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAA;QACtC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAA;QAErC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,CAAC,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAA;QAEzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC9C,IAAI,MAAM;gBAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8CAA8C;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAA;YACnD,MAAM,OAAO,GAAG,KAAK,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAA;YAC9E,OAAO,QAAQ,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,+CAA+C;IAC/C,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;CACF"}

package/dist/scheduler/Schedule.d.ts

@@ -0,0 +1,53 @@
+/**
+ * `@Schedule('cron-expr')` method decorator — declares a recurring task.
+ *
+ * Tasks are discovered at boot by `ScheduleProvider` iterating the IoC
+ * service registry, reading this metadata, and registering each entry
+ * with the Rust-backed `Scheduler` (Story 28.1). The Rust ticker owns
+ * the loop; TypeScript only declares *what* runs and *when*.
+ *
+ * @implements Story 28.2
+ */
+import 'reflect-metadata';
+import type { Constructor } from '../helpers/types.js';
+export declare const SCHEDULE_METADATA_KEY: unique symbol;
+export interface ScheduleMetadata {
+    cronExpr: string;
+    methodName: string | symbol;
+    target: Constructor;
+}
+/**
+ * Declares that a method should run on a cron schedule.
+ *
+ * Expressions are standard 5-field cron (minute hour day-of-month month
+ * day-of-week), evaluated in **UTC** by the Rust core — callers that
+ * want local-time semantics must pre-translate.
+ *
+ * Multiple `@Schedule` decorators on different methods of the same class
+ * accumulate into an array rather than overwriting each other. Metadata
+ * is stored with `Reflect.defineMetadata` under a stable symbol key on
+ * the class constructor; inherited metadata is NOT shared (each class
+ * owns its own array — subclasses that add schedules do not mutate the
+ * base class's array).
+ *
+ * Getters, setters, and static methods are rejected at decoration time
+ * with a clear `ReamError` so that misuse surfaces early rather than at
+ * first fire.
+ *
+ * Usage:
+ * ```ts
+ * @Service()
+ * class Cleanup {
+ *   @Schedule('0 *\/5 * * *')
+ *   async runCleanup() { ... }
+ * }
+ * ```
+ */
+export declare function Schedule(cronExpr: string): MethodDecorator;
+/**
+ * Return every `@Schedule` entry declared on `target` (empty array if
+ * none). Returns a shallow copy so callers cannot mutate the stored
+ * metadata by accident.
+ */
+export declare function getScheduleMetadata(target: Constructor): ScheduleMetadata[];
+//# sourceMappingURL=Schedule.d.ts.map

package/dist/scheduler/Schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Schedule.d.ts","sourceRoot":"","sources":["../../src/scheduler/Schedule.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEtD,eAAO,MAAM,qBAAqB,eAA0B,CAAA;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,WAAW,CAAA;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAmC1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,gBAAgB,EAAE,CAG3E"}

package/dist/scheduler/Schedule.js

@@ -0,0 +1,76 @@
+/**
+ * `@Schedule('cron-expr')` method decorator — declares a recurring task.
+ *
+ * Tasks are discovered at boot by `ScheduleProvider` iterating the IoC
+ * service registry, reading this metadata, and registering each entry
+ * with the Rust-backed `Scheduler` (Story 28.1). The Rust ticker owns
+ * the loop; TypeScript only declares *what* runs and *when*.
+ *
+ * @implements Story 28.2
+ */
+import 'reflect-metadata';
+import { ReamError } from '../errors/ReamError.js';
+export const SCHEDULE_METADATA_KEY = Symbol('ream:schedule');
+/**
+ * Declares that a method should run on a cron schedule.
+ *
+ * Expressions are standard 5-field cron (minute hour day-of-month month
+ * day-of-week), evaluated in **UTC** by the Rust core — callers that
+ * want local-time semantics must pre-translate.
+ *
+ * Multiple `@Schedule` decorators on different methods of the same class
+ * accumulate into an array rather than overwriting each other. Metadata
+ * is stored with `Reflect.defineMetadata` under a stable symbol key on
+ * the class constructor; inherited metadata is NOT shared (each class
+ * owns its own array — subclasses that add schedules do not mutate the
+ * base class's array).
+ *
+ * Getters, setters, and static methods are rejected at decoration time
+ * with a clear `ReamError` so that misuse surfaces early rather than at
+ * first fire.
+ *
+ * Usage:
+ * ```ts
+ * @Service()
+ * class Cleanup {
+ *   @Schedule('0 *\/5 * * *')
+ *   async runCleanup() { ... }
+ * }
+ * ```
+ */
+export function Schedule(cronExpr) {
+    return (target, propertyKey, descriptor) => {
+        // Reject static methods. For a static, `target` IS the constructor
+        // (callable function); for an instance method, `target` is the
+        // prototype. We need the real class either way.
+        if (typeof target === 'function') {
+            throw new ReamError('SCHEDULE_INVALID_TARGET', `@Schedule cannot be applied to static method '${String(propertyKey)}'`, {
+                hint: 'Move the scheduled logic to an instance method, or register the task manually via Scheduler.register().',
+            });
+        }
+        // Reject getters/setters — `descriptor.value` is `undefined` for
+        // accessors, and the ticker needs a callable method.
+        if (descriptor && typeof descriptor.value !== 'function') {
+            throw new ReamError('SCHEDULE_INVALID_TARGET', `@Schedule cannot be applied to non-method '${String(propertyKey)}' (getters and setters are not supported)`, {
+                hint: 'Apply @Schedule to a regular method, not to an accessor.',
+            });
+        }
+        const ctor = target.constructor;
+        // getOwnMetadata — do NOT walk the prototype chain. A subclass must
+        // not mutate the base class's shared array; each class owns its own
+        // schedule list. Matches the convention in decorators/Service.ts.
+        const existing = Reflect.getOwnMetadata(SCHEDULE_METADATA_KEY, ctor) ?? [];
+        existing.push({ cronExpr, methodName: propertyKey, target: ctor });
+        Reflect.defineMetadata(SCHEDULE_METADATA_KEY, existing, ctor);
+    };
+}
+/**
+ * Return every `@Schedule` entry declared on `target` (empty array if
+ * none). Returns a shallow copy so callers cannot mutate the stored
+ * metadata by accident.
+ */
+export function getScheduleMetadata(target) {
+    const stored = Reflect.getOwnMetadata(SCHEDULE_METADATA_KEY, target) ?? [];
+    return [...stored];
+}
+//# sourceMappingURL=Schedule.js.map

package/dist/scheduler/Schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Schedule.js","sourceRoot":"","sources":["../../src/scheduler/Schedule.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,kBAAkB,CAAA;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAGlD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,eAAe,CAAC,CAAA;AAQ5D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;QACzC,mEAAmE;QACnE,+DAA+D;QAC/D,gDAAgD;QAChD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,yBAAyB,EACzB,iDAAiD,MAAM,CAAC,WAAW,CAAC,GAAG,EACvE;gBACE,IAAI,EAAE,yGAAyG;aAChH,CACF,CAAA;QACH,CAAC;QAED,iEAAiE;QACjE,qDAAqD;QACrD,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CACjB,yBAAyB,EACzB,8CAA8C,MAAM,CAAC,WAAW,CAAC,2CAA2C,EAC5G;gBACE,IAAI,EAAE,0DAA0D;aACjE,CACF,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,WAA0B,CAAA;QAC9C,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,QAAQ,GAAuB,OAAO,CAAC,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9F,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAClE,OAAO,CAAC,cAAc,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,MAAM,MAAM,GAAuB,OAAO,CAAC,cAAc,CAAC,qBAAqB,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IAC9F,OAAO,CAAC,GAAG,MAAM,CAAC,CAAA;AACpB,CAAC"}

package/dist/scheduler/ScheduleProvider.d.ts

@@ -0,0 +1,56 @@
+/**
+ * `ScheduleProvider` — wires `@Schedule`-decorated methods into the
+ * Rust-backed [`Scheduler`].
+ *
+ * Lifecycle:
+ *   - `boot()` — walks the IoC service registry, reads each class's
+ *     `@Schedule` metadata, and registers a callback per entry.
+ *     Idempotent: calling `boot()` twice is a no-op on the second call.
+ *     Partial failures are rolled back — if the Nth task's registration
+ *     throws, tasks 1..N-1 registered in the same boot are unregistered
+ *     before the error propagates, so the scheduler is never left in a
+ *     half-registered state.
+ *   - `start()` — launches the Rust tick loop.
+ *   - `shutdown()` — cancels the Rust tick loop.
+ *
+ * The registered callback resolves the service **at invocation time**
+ * (not registration time) via `container.make(target)`, so every run
+ * receives freshly-DI'd dependencies for transient-scoped services.
+ *
+ * @implements Story 28.2
+ */
+import type { AppContext } from '../Provider.js';
+import { Provider } from '../Provider.js';
+import { Scheduler } from './Scheduler.js';
+export interface ScheduleProviderOptions {
+    /**
+     * Override the `Scheduler` instance — used by tests to inject a
+     * mock. Production code relies on the default (`new Scheduler()`).
+     */
+    scheduler?: Scheduler;
+}
+export declare class ScheduleProvider extends Provider {
+    #private;
+    readonly scheduler: Scheduler;
+    constructor(app: AppContext, options?: ScheduleProviderOptions);
+    /**
+     * Phase 1 — bind the scheduler into the IoC container under the
+     * stable token `'scheduler'`. CLI entrypoints
+     * (`ream schedule:list` / `ream schedule:run <name>`) retrieve the
+     * scheduler via `container.resolve('scheduler')` once the app has
+     * been booted through `Ignitor`. Consumers that import the
+     * provider directly still read the `readonly scheduler` field.
+     *
+     * Idempotent: re-registering the same provider instance (hot
+     * reload, repeated `app.start()` in tests) re-binds the same
+     * scheduler without error. A DIFFERENT `ScheduleProvider` trying
+     * to claim the `'scheduler'` token throws
+     * `SCHEDULE_PROVIDER_ALREADY_REGISTERED` so dueling providers do
+     * not silently overwrite each other.
+     */
+    register(): void;
+    boot(): Promise<void>;
+    start(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+//# sourceMappingURL=ScheduleProvider.d.ts.map

package/dist/scheduler/ScheduleProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleProvider.d.ts","sourceRoot":"","sources":["../../src/scheduler/ScheduleProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,qBAAa,gBAAiB,SAAQ,QAAQ;;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;gBAGjB,GAAG,EAAE,UAAU,EAAE,OAAO,GAAE,uBAA4B;IAKlE;;;;;;;;;;;;;;OAcG;IACM,QAAQ,IAAI,IAAI;IA4BV,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgFrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGzC"}

package/dist/scheduler/ScheduleProvider.js

@@ -0,0 +1,145 @@
+/**
+ * `ScheduleProvider` — wires `@Schedule`-decorated methods into the
+ * Rust-backed [`Scheduler`].
+ *
+ * Lifecycle:
+ *   - `boot()` — walks the IoC service registry, reads each class's
+ *     `@Schedule` metadata, and registers a callback per entry.
+ *     Idempotent: calling `boot()` twice is a no-op on the second call.
+ *     Partial failures are rolled back — if the Nth task's registration
+ *     throws, tasks 1..N-1 registered in the same boot are unregistered
+ *     before the error propagates, so the scheduler is never left in a
+ *     half-registered state.
+ *   - `start()` — launches the Rust tick loop.
+ *   - `shutdown()` — cancels the Rust tick loop.
+ *
+ * The registered callback resolves the service **at invocation time**
+ * (not registration time) via `container.make(target)`, so every run
+ * receives freshly-DI'd dependencies for transient-scoped services.
+ *
+ * @implements Story 28.2
+ */
+import { getServiceRegistry } from '../decorators/Service.js';
+import { ReamError } from '../errors/ReamError.js';
+import { Provider } from '../Provider.js';
+import { getScheduleMetadata } from './Schedule.js';
+import { Scheduler } from './Scheduler.js';
+export class ScheduleProvider extends Provider {
+    scheduler;
+    #booted = false;
+    constructor(app, options = {}) {
+        super(app);
+        this.scheduler = options.scheduler ?? new Scheduler();
+    }
+    /**
+     * Phase 1 — bind the scheduler into the IoC container under the
+     * stable token `'scheduler'`. CLI entrypoints
+     * (`ream schedule:list` / `ream schedule:run <name>`) retrieve the
+     * scheduler via `container.resolve('scheduler')` once the app has
+     * been booted through `Ignitor`. Consumers that import the
+     * provider directly still read the `readonly scheduler` field.
+     *
+     * Idempotent: re-registering the same provider instance (hot
+     * reload, repeated `app.start()` in tests) re-binds the same
+     * scheduler without error. A DIFFERENT `ScheduleProvider` trying
+     * to claim the `'scheduler'` token throws
+     * `SCHEDULE_PROVIDER_ALREADY_REGISTERED` so dueling providers do
+     * not silently overwrite each other.
+     */
+    register() {
+        const scheduler = this.scheduler;
+        const container = this.app.container;
+        // Probe for an existing binding. The `make` / `resolve` API
+        // throws when unbound; use it to distinguish "same instance"
+        // from "another provider already claimed the token".
+        let existing;
+        try {
+            existing = container.resolve('scheduler');
+        }
+        catch {
+            existing = undefined;
+        }
+        if (existing !== undefined) {
+            if (existing === scheduler) {
+                // Same provider re-running its register phase — no-op.
+                return;
+            }
+            throw new ReamError('SCHEDULE_PROVIDER_ALREADY_REGISTERED', "Container token 'scheduler' is already bound to a different instance", {
+                hint: 'Only one ScheduleProvider can own the scheduler binding. Remove the duplicate provider from your reamrc.ts.',
+            });
+        }
+        container.singleton('scheduler', () => scheduler);
+    }
+    async boot() {
+        if (this.#booted)
+            return;
+        const registry = getServiceRegistry();
+        const registered = [];
+        try {
+            for (const [target] of registry) {
+                const schedules = getScheduleMetadata(target);
+                if (schedules.length === 0)
+                    continue;
+                if (!target.name) {
+                    throw new ReamError('SCHEDULE_ANONYMOUS_CLASS', 'Anonymous classes cannot declare @Schedule — task names would collide', {
+                        hint: 'Name the class explicitly (e.g. `export class Jobs { ... }`) so task names are unique and debuggable.',
+                    });
+                }
+                for (const { cronExpr, methodName } of schedules) {
+                    // Reject symbol method keys — `String(Symbol('x'))` yields
+                    // `Symbol(x)` which collides across distinct symbol instances
+                    // sharing the same description. String keys are the
+                    // documented contract.
+                    if (typeof methodName === 'symbol') {
+                        throw new ReamError('SCHEDULE_SYMBOL_METHOD', `@Schedule on symbol-keyed method is not supported on class '${target.name}'`, {
+                            hint: 'Use a regular named method so the task can be addressed uniquely.',
+                        });
+                    }
+                    const taskName = `${target.name}.${methodName}`;
+                    try {
+                        this.scheduler.register(taskName, cronExpr, async () => {
+                            // Resolve from the container on every fire so transient
+                            // services get a fresh instance each run.
+                            const instance = this.app.container.make(target);
+                            const method = instance[methodName];
+                            if (typeof method !== 'function') {
+                                throw new ReamError('SCHEDULE_METHOD_NOT_FOUND', `Scheduled method ${taskName} is not callable on resolved instance`);
+                            }
+                            await method.call(instance);
+                        });
+                        registered.push(taskName);
+                    }
+                    catch (cause) {
+                        const inner = cause;
+                        throw new ReamError('SCHEDULE_INVALID_CRON', `Failed to register scheduled task '${taskName}': ${inner.message ?? String(cause)}`, {
+                            context: { task: taskName, cronExpr },
+                            hint: inner.hint,
+                        });
+                    }
+                }
+            }
+            this.#booted = true;
+        }
+        catch (err) {
+            // Roll back any partial registrations so a retry does not hit
+            // DUPLICATE_TASK and the scheduler is never half-initialized.
+            for (const name of registered) {
+                try {
+                    this.scheduler.unregister(name);
+                }
+                catch {
+                    // Best-effort rollback; swallow secondary failures so the
+                    // original error reaches the caller unchanged.
+                }
+            }
+            throw err;
+        }
+    }
+    async start() {
+        this.scheduler.start();
+    }
+    async shutdown() {
+        this.scheduler.stop();
+    }
+}
+//# sourceMappingURL=ScheduleProvider.js.map

package/dist/scheduler/ScheduleProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleProvider.js","sourceRoot":"","sources":["../../src/scheduler/ScheduleProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAElD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAU1C,MAAM,OAAO,gBAAiB,SAAQ,QAAQ;IACnC,SAAS,CAAW;IAC7B,OAAO,GAAG,KAAK,CAAA;IAEf,YAAY,GAAe,EAAE,UAAmC,EAAE;QAChE,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAA;IACvD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACM,QAAQ;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAA;QACpC,4DAA4D;QAC5D,6DAA6D;QAC7D,qDAAqD;QACrD,IAAI,QAAiB,CAAA;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,SAAS,CAAA;QACtB,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,uDAAuD;gBACvD,OAAM;YACR,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,sCAAsC,EACtC,sEAAsE,EACtE;gBACE,IAAI,EAAE,6GAA6G;aACpH,CACF,CAAA;QACH,CAAC;QACD,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC;IAEQ,KAAK,CAAC,IAAI;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAA;QACrC,MAAM,UAAU,GAAa,EAAE,CAAA;QAE/B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;gBAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAQ;gBAEpC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,SAAS,CACjB,0BAA0B,EAC1B,uEAAuE,EACvE;wBACE,IAAI,EAAE,uGAAuG;qBAC9G,CACF,CAAA;gBACH,CAAC;gBAED,KAAK,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,SAAS,EAAE,CAAC;oBACjD,2DAA2D;oBAC3D,8DAA8D;oBAC9D,oDAAoD;oBACpD,uBAAuB;oBACvB,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;wBACnC,MAAM,IAAI,SAAS,CACjB,wBAAwB,EACxB,+DAA+D,MAAM,CAAC,IAAI,GAAG,EAC7E;4BACE,IAAI,EAAE,mEAAmE;yBAC1E,CACF,CAAA;oBACH,CAAC;oBAED,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAA;oBAC/C,IAAI,CAAC;wBACH,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;4BACrD,wDAAwD;4BACxD,0CAA0C;4BAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAA0B,MAAM,CAAC,CAAA;4BACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;4BACnC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;gCACjC,MAAM,IAAI,SAAS,CACjB,2BAA2B,EAC3B,oBAAoB,QAAQ,uCAAuC,CACpE,CAAA;4BACH,CAAC;4BACD,MAAO,MAA0C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;wBAClE,CAAC,CAAC,CAAA;wBACF,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,KAAK,GAAG,KAAwD,CAAA;wBACtE,MAAM,IAAI,SAAS,CACjB,uBAAuB,EACvB,sCAAsC,QAAQ,MAAM,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EACpF;4BACE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE;4BACrC,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CACF,CAAA;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8DAA8D;YAC9D,8DAA8D;YAC9D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,0DAA0D;oBAC1D,+CAA+C;gBACjD,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAEQ,KAAK,CAAC,KAAK;QAClB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;IAEQ,KAAK,CAAC,QAAQ;QACrB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;IACvB,CAAC;CACF"}