@copypatch/backend 2.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Efe Arabacı
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,57 @@
+# @copypatch/backend
+
+Framework-neutral CopyPatch v2 backend runtime. It exposes a Web
+`Request`/`Response` API that is mounted inside the host application, so
+CopyPatch does not require a separate server, port, proxy, or CORS policy.
+
+## Install
+
+```bash
+pnpm add @copypatch/backend @copypatch/storage-sqlite
+```
+
+Use `@copypatch/storage-postgres` instead when the application runs on
+multiple instances or does not have persistent local disk.
+
+## Minimal usage
+
+```ts
+import { createCopyPatchBackend } from '@copypatch/backend';
+import { createSQLitePersistence } from '@copypatch/storage-sqlite';
+
+const persistence = createSQLitePersistence('./data/copypatch.sqlite');
+await persistence.migrate();
+
+export const backend = createCopyPatchBackend({
+  persistence,
+  passphraseHash: process.env.COPYPATCH_PASSPHRASE_HASH!,
+});
+
+export const handle = (request: Request) => backend.handle(request);
+```
+
+Mount `handle` at `\/__copypatch\/api\/v2` in the same deployment as the host
+application. Unsafe requests require an exact same-origin `Origin` header.
+CopyPatch does not emit CORS headers.
+
+`passphraseHash` must be an Argon2id encoded hash. As an alternative, provide
+a host `authAdapter`; the two authentication modes are mutually exclusive.
+Host authentication context is passed as the second argument to `handle` and
+must not be serialized into request headers.
+
+For server rendering, `backend.readPublished(locale)` reads storage directly
+and returns a safe public snapshot fallback if storage is temporarily
+unavailable.
+
+## Exports
+
+- `createCopyPatchBackend(options)`
+- `CopyPatchBackend`
+- `hashToken`, `hashRateLimitKey`, and token helpers
+- `SESSION_COOKIE_NAME`
+
+CopyPatch is ESM-only and requires Node.js 20 or newer.
+
+## License
+
+MIT

package/dist/backend.d.ts

@@ -0,0 +1,29 @@
+import { type ContentSnapshot, type CopyPatchAuthAdapter, type CopyPatchHandleContext, type CopyPatchPersistence } from '@copypatch/core';
+export declare const SESSION_COOKIE_NAME = "__Host-copypatch-session";
+interface BackendBaseOptions {
+    persistence: CopyPatchPersistence;
+    maxTextLength?: number;
+    session?: {
+        idleTimeoutMs?: number;
+        absoluteTimeoutMs?: number;
+    };
+    rateLimit?: {
+        limit?: number;
+        windowMs?: number;
+    };
+    now?: () => number;
+}
+export type CopyPatchBackendOptions<THostAuth = unknown> = BackendBaseOptions & ({
+    passphraseHash: string;
+    authAdapter?: never;
+} | {
+    authAdapter: CopyPatchAuthAdapter<THostAuth>;
+    passphraseHash?: never;
+});
+export interface CopyPatchBackend<THostAuth = unknown> {
+    handle(request: Request, context?: CopyPatchHandleContext<THostAuth>): Promise<Response>;
+    readPublished(locale: string): Promise<ContentSnapshot>;
+}
+export declare function createCopyPatchBackend<THostAuth = unknown>(options: CopyPatchBackendOptions<THostAuth>): CopyPatchBackend<THostAuth>;
+export {};
+//# sourceMappingURL=backend.d.ts.map

package/dist/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EAO1B,MAAM,iBAAiB,CAAC;AAGzB,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAQ9D,UAAU,kBAAkB;IAC1B,WAAW,EAAE,oBAAoB,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,CAAC,SAAS,GAAG,OAAO,IAAI,kBAAkB,GAAG,CAC5E;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAA;CAAE,GAC/C;IAAE,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAAC,cAAc,CAAC,EAAE,KAAK,CAAA;CAAE,CAC3E,CAAC;AAEF,MAAM,WAAW,gBAAgB,CAAC,SAAS,GAAG,OAAO;IACnD,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzF,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACzD;AAsdD,wBAAgB,sBAAsB,CAAC,SAAS,GAAG,OAAO,EACxD,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,GAC1C,gBAAgB,CAAC,SAAS,CAAC,CAiC7B"}

package/dist/backend.js

@@ -0,0 +1,496 @@
+import { API_BASE_PATH, CSRF_HEADER_NAME, DEFAULT_MAX_TEXT_LENGTH, HARD_MAX_TEXT_LENGTH, isValidContentKey, isValidLocale, normalizeText, } from '@copypatch/core';
+import { generateToken, hashesEqual, hashRateLimitKey, hashToken, verifyPassphrase } from './crypto.js';
+export const SESSION_COOKIE_NAME = '__Host-copypatch-session';
+const UNSAFE_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
+const MAX_CHANGES = 500;
+const MAX_BODY_BYTES = 2 * 1024 * 1024;
+const DEFAULT_IDLE_TIMEOUT_MS = 12 * 60 * 60 * 1000;
+const DEFAULT_ABSOLUTE_TIMEOUT_MS = 7 * 24 * 60 * 60 * 1000;
+class CopyPatchBackendRuntime {
+    options;
+    snapshots = new Map();
+    constructor(options) {
+        this.options = options;
+    }
+    async readPublished(locale) {
+        if (!isValidLocale(locale))
+            throw new TypeError('Invalid locale.');
+        return (await this.readPublishedWithFallback(locale)).snapshot;
+    }
+    async handle(request, context = {}) {
+        try {
+            return this.secure(await this.route(request, context));
+        }
+        catch {
+            return this.secure(this.error(500, 'INTERNAL_ERROR', 'The request could not be completed.'));
+        }
+    }
+    async route(request, context) {
+        const url = new URL(request.url);
+        const method = request.method.toUpperCase();
+        if (method === 'OPTIONS')
+            return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+        if (UNSAFE_METHODS.has(method)) {
+            const originFailure = this.checkOrigin(request, url.origin);
+            if (originFailure)
+                return originFailure;
+            const rateFailure = await this.checkRateLimit(request, context, url.pathname);
+            if (rateFailure)
+                return rateFailure;
+        }
+        if (method === 'GET' && (url.pathname === '/healthz' || url.pathname === `${API_BASE_PATH}/health`)) {
+            const health = await this.options.persistence.health();
+            return this.json(health.ok ? 200 : 503, { status: health.ok ? 'ok' : 'unavailable' }, { 'cache-control': 'no-store' });
+        }
+        if (url.pathname === `${API_BASE_PATH}/session`) {
+            if (method === 'POST')
+                return this.createSession(request, context);
+            if (method === 'GET')
+                return this.readSession(request, context);
+            if (method === 'DELETE')
+                return this.deleteSession(request, context);
+            return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+        }
+        const contentMatch = this.matchLocale(url.pathname, `${API_BASE_PATH}/content/`);
+        if (contentMatch !== null) {
+            if (method !== 'GET')
+                return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+            if (!isValidLocale(contentMatch))
+                return this.validation('Invalid locale.');
+            const result = await this.readPublishedWithFallback(contentMatch);
+            const headers = result.fallback
+                ? { 'cache-control': 'no-store' }
+                : { 'cache-control': 'public, max-age=0, must-revalidate', etag: `W/"rev-${result.snapshot.revision}"` };
+            if (!result.fallback && request.headers.get('if-none-match') === headers.etag) {
+                return new Response(null, { status: 304, headers });
+            }
+            return this.json(200, result.snapshot, headers);
+        }
+        const changesMatch = this.matchLocale(url.pathname, `${API_BASE_PATH}/editor/`, '/changes');
+        if (changesMatch !== null) {
+            if (method !== 'PUT')
+                return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+            return this.saveDrafts(request, context, changesMatch);
+        }
+        const publishMatch = this.matchLocale(url.pathname, `${API_BASE_PATH}/editor/`, '/publish');
+        if (publishMatch !== null) {
+            if (method !== 'POST')
+                return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+            return this.publishDrafts(request, context, publishMatch);
+        }
+        const draftsMatch = this.matchLocale(url.pathname, `${API_BASE_PATH}/editor/`, '/drafts');
+        if (draftsMatch !== null) {
+            if (method !== 'DELETE')
+                return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+            return this.discardDrafts(request, context, draftsMatch);
+        }
+        const editorMatch = this.matchLocale(url.pathname, `${API_BASE_PATH}/editor/`);
+        if (editorMatch !== null) {
+            if (method !== 'GET')
+                return this.error(405, 'UNSUPPORTED_OPERATION', 'Method not allowed.');
+            if (!isValidLocale(editorMatch))
+                return this.validation('Invalid locale.');
+            const auth = await this.authenticate(request, context);
+            if (auth instanceof Response)
+                return auth;
+            if (!this.hasRole(auth.principal, 'editor') && !this.hasRole(auth.principal, 'publisher')) {
+                return this.error(403, 'UNAUTHENTICATED', 'Editor access is required.');
+            }
+            return this.json(200, await this.options.persistence.readEditor(editorMatch), { 'cache-control': 'no-store' });
+        }
+        return this.error(404, 'NOT_FOUND', 'Endpoint not found.');
+    }
+    async createSession(request, context) {
+        if (this.options.authAdapter) {
+            const auth = await this.authenticateHost(request, context, true);
+            if (auth instanceof Response)
+                return auth;
+            return this.json(200, { authenticated: true, requiresCsrf: false, roles: auth.principal.roles, publishingMode: 'draft' }, { 'cache-control': 'no-store' });
+        }
+        const parsed = await this.readJson(request);
+        if (parsed instanceof Response)
+            return parsed;
+        if (!this.isRecord(parsed))
+            return this.validation('Invalid session payload.');
+        const passphrase = parsed.passphrase ?? parsed.password;
+        if (typeof passphrase !== 'string' || passphrase.length < 1 || Object.keys(parsed).some((key) => key !== 'passphrase' && key !== 'password')) {
+            return this.validation('A passphrase is required.');
+        }
+        if (!await verifyPassphrase(passphrase, this.options.passphraseHash ?? '')) {
+            return this.error(401, 'UNAUTHENTICATED', 'Invalid credentials.');
+        }
+        const now = this.options.now();
+        const sessionToken = generateToken();
+        const csrfToken = generateToken();
+        const stored = {
+            tokenHash: hashToken(sessionToken),
+            csrfTokenHash: hashToken(csrfToken),
+            subject: 'built-in',
+            roles: ['editor', 'publisher'],
+            createdAt: now,
+            lastSeenAt: now,
+            idleExpiresAt: now + this.options.idleTimeoutMs,
+            absoluteExpiresAt: now + this.options.absoluteTimeoutMs,
+        };
+        await this.options.persistence.createSession(stored);
+        const cookie = `${SESSION_COOKIE_NAME}=${sessionToken}; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=${Math.floor(this.options.absoluteTimeoutMs / 1000)}`;
+        return this.json(200, { authenticated: true, requiresCsrf: true, csrfToken, roles: stored.roles, publishingMode: 'draft' }, {
+            'cache-control': 'no-store',
+            'set-cookie': cookie,
+        });
+    }
+    async readSession(request, context) {
+        if (this.options.authAdapter) {
+            const auth = await this.authenticateHost(request, context, false);
+            if (auth instanceof Response)
+                return this.json(200, { authenticated: false, requiresCsrf: false }, { 'cache-control': 'no-store' });
+            return this.json(200, { authenticated: true, requiresCsrf: false, roles: auth.principal.roles, publishingMode: 'draft' }, { 'cache-control': 'no-store' });
+        }
+        const auth = await this.authenticateBuiltIn(request);
+        if (auth instanceof Response)
+            return this.json(200, { authenticated: false, requiresCsrf: false }, { 'cache-control': 'no-store' });
+        const csrfToken = generateToken();
+        const updated = await this.options.persistence.touchSession(auth.sessionTokenHash, {
+            lastSeenAt: this.options.now(),
+            idleExpiresAt: Math.min(this.options.now() + this.options.idleTimeoutMs, auth.session.absoluteExpiresAt),
+            csrfTokenHash: hashToken(csrfToken),
+        });
+        if (!updated)
+            return this.json(200, { authenticated: false, requiresCsrf: false }, { 'cache-control': 'no-store' });
+        return this.json(200, { authenticated: true, requiresCsrf: true, csrfToken, roles: updated.roles, publishingMode: 'draft' }, { 'cache-control': 'no-store' });
+    }
+    async deleteSession(request, context) {
+        const auth = await this.authenticateMutation(request, context, 'editor');
+        if (auth instanceof Response)
+            return auth;
+        if (auth.sessionTokenHash)
+            await this.options.persistence.deleteSession(auth.sessionTokenHash);
+        const expiredCookie = `${SESSION_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=Strict; Max-Age=0`;
+        return this.json(200, { success: true }, { 'cache-control': 'no-store', 'set-cookie': expiredCookie });
+    }
+    async saveDrafts(request, context, locale) {
+        if (!isValidLocale(locale))
+            return this.validation('Invalid locale.');
+        const auth = await this.authenticateMutation(request, context, 'editor');
+        if (auth instanceof Response)
+            return auth;
+        const parsed = await this.readJson(request);
+        if (parsed instanceof Response)
+            return parsed;
+        const command = this.parseSaveCommand(parsed, locale);
+        if (command instanceof Response)
+            return command;
+        const result = await this.options.persistence.saveDrafts(command);
+        return this.mutationResponse(result);
+    }
+    async publishDrafts(request, context, locale) {
+        if (!isValidLocale(locale))
+            return this.validation('Invalid locale.');
+        const auth = await this.authenticateMutation(request, context, 'publisher');
+        if (auth instanceof Response)
+            return auth;
+        const parsed = await this.readJson(request);
+        if (parsed instanceof Response)
+            return parsed;
+        const revisions = this.parseRevisions(parsed);
+        if (revisions instanceof Response)
+            return revisions;
+        const result = await this.options.persistence.publishDrafts({ locale, ...revisions });
+        return this.mutationResponse(result);
+    }
+    async discardDrafts(request, context, locale) {
+        if (!isValidLocale(locale))
+            return this.validation('Invalid locale.');
+        const auth = await this.authenticateMutation(request, context, 'editor');
+        if (auth instanceof Response)
+            return auth;
+        const parsed = await this.readJson(request);
+        if (parsed instanceof Response)
+            return parsed;
+        const revisions = this.parseRevisions(parsed);
+        if (revisions instanceof Response)
+            return revisions;
+        const result = await this.options.persistence.discardDrafts({ locale, ...revisions });
+        return this.mutationResponse(result);
+    }
+    async authenticateMutation(request, context, role) {
+        const auth = this.options.authAdapter
+            ? await this.authenticateHost(request, context, true)
+            : await this.authenticateBuiltIn(request);
+        if (auth instanceof Response)
+            return auth;
+        if (!this.hasRole(auth.principal, role))
+            return this.error(403, 'UNAUTHENTICATED', `${role} role is required.`);
+        if (!this.options.authAdapter) {
+            const csrf = request.headers.get(CSRF_HEADER_NAME);
+            if (!csrf || !auth.session || !hashesEqual(hashToken(csrf), auth.session.csrfTokenHash)) {
+                return this.error(403, 'CSRF_FAILED', 'Mutation verification failed.');
+            }
+        }
+        return auth;
+    }
+    async authenticate(request, context) {
+        return this.options.authAdapter
+            ? this.authenticateHost(request, context, false)
+            : this.authenticateBuiltIn(request);
+    }
+    async authenticateHost(request, context, mutation) {
+        try {
+            const principal = await this.options.authAdapter.authenticate(request.clone(), context);
+            if (!principal || !this.validPrincipal(principal))
+                return this.error(401, 'UNAUTHENTICATED', 'Authentication is required.');
+            if (mutation) {
+                const verified = await this.options.authAdapter.verifyMutation(request.clone(), principal, context);
+                if (verified === false)
+                    return this.error(403, 'CSRF_FAILED', 'Mutation verification failed.');
+            }
+            return { principal };
+        }
+        catch {
+            return this.error(mutation ? 403 : 401, mutation ? 'CSRF_FAILED' : 'UNAUTHENTICATED', mutation ? 'Mutation verification failed.' : 'Authentication is required.');
+        }
+    }
+    async authenticateBuiltIn(request) {
+        const rawToken = this.cookie(request, SESSION_COOKIE_NAME);
+        if (!rawToken)
+            return this.error(401, 'UNAUTHENTICATED', 'Authentication is required.');
+        const tokenHash = hashToken(rawToken);
+        const session = await this.options.persistence.readSession(tokenHash);
+        const now = this.options.now();
+        if (!session || session.idleExpiresAt <= now || session.absoluteExpiresAt <= now || !this.validPrincipal(session)) {
+            if (session)
+                await this.options.persistence.deleteSession(tokenHash);
+            return this.error(401, 'UNAUTHENTICATED', 'Authentication is required.');
+        }
+        const updated = await this.options.persistence.touchSession(tokenHash, {
+            lastSeenAt: now,
+            idleExpiresAt: Math.min(now + this.options.idleTimeoutMs, session.absoluteExpiresAt),
+        });
+        if (!updated)
+            return this.error(401, 'UNAUTHENTICATED', 'Authentication is required.');
+        return { principal: updated, sessionTokenHash: tokenHash, session: updated };
+    }
+    async checkRateLimit(request, context, pathname) {
+        const identity = context.clientAddress ?? 'unknown-client';
+        const keyHash = hashRateLimitKey(`${identity}\0${request.method.toUpperCase()}\0${pathname}`);
+        const decision = await this.options.persistence.consumeRateLimit({
+            keyHash,
+            limit: this.options.rateLimit,
+            windowMs: this.options.rateLimitWindowMs,
+            now: this.options.now(),
+        });
+        if (decision.allowed)
+            return null;
+        return this.json(429, {
+            error: { code: 'RATE_LIMITED', message: 'Too many requests.' },
+        }, {
+            'cache-control': 'no-store',
+            'retry-after': String(Math.max(1, Math.ceil((decision.resetAt - this.options.now()) / 1000))),
+        });
+    }
+    checkOrigin(request, expectedOrigin) {
+        const origin = request.headers.get('origin');
+        if (origin !== expectedOrigin)
+            return this.error(403, 'ORIGIN_REJECTED', 'Exact same-origin is required.');
+        return null;
+    }
+    parseSaveCommand(value, locale) {
+        if (!this.isRecord(value) || !this.onlyKeys(value, ['expectedPublishedRevision', 'expectedDraftRevision', 'changes'])) {
+            return this.validation('Invalid draft payload.');
+        }
+        const revisions = this.parseRevisionValues(value.expectedPublishedRevision, value.expectedDraftRevision);
+        if (!revisions || !Array.isArray(value.changes) || value.changes.length < 1 || value.changes.length > MAX_CHANGES) {
+            return this.validation('Invalid draft payload.');
+        }
+        const keys = new Set();
+        const changes = [];
+        for (const item of value.changes) {
+            if (!this.isRecord(item) || !this.onlyKeys(item, ['key', 'text']) || typeof item.key !== 'string' || typeof item.text !== 'string') {
+                return this.validation('Invalid content change.');
+            }
+            if (!isValidContentKey(item.key) || item.text.length > this.options.maxTextLength || keys.has(item.key)) {
+                return this.validation('Invalid content change.');
+            }
+            keys.add(item.key);
+            changes.push({ key: item.key, text: normalizeText(item.text, true) });
+        }
+        return { locale, ...revisions, changes };
+    }
+    parseRevisions(value) {
+        if (!this.isRecord(value) || !this.onlyKeys(value, ['expectedPublishedRevision', 'expectedDraftRevision'])) {
+            return this.validation('Both expected revisions are required.');
+        }
+        const revisions = this.parseRevisionValues(value.expectedPublishedRevision, value.expectedDraftRevision);
+        return revisions ?? this.validation('Both expected revisions must be positive safe integers.');
+    }
+    parseRevisionValues(published, draft) {
+        if (!Number.isSafeInteger(published) || !Number.isSafeInteger(draft) || published < 1 || draft < 1)
+            return null;
+        return { expectedPublishedRevision: published, expectedDraftRevision: draft };
+    }
+    mutationResponse(result) {
+        if (result.status === 'conflict') {
+            return this.json(409, {
+                error: { code: 'REVISION_CONFLICT', message: 'The editor snapshot has changed.' },
+                latest: result.latest,
+            }, { 'cache-control': 'no-store' });
+        }
+        return this.json(200, { success: true, ...result.value }, { 'cache-control': 'no-store' });
+    }
+    async readPublishedWithFallback(locale) {
+        try {
+            const snapshot = this.copySnapshot(await this.options.persistence.readPublished(locale));
+            this.snapshots.set(locale, snapshot);
+            return { snapshot: this.copySnapshot(snapshot), fallback: false };
+        }
+        catch {
+            const cached = this.snapshots.get(locale) ?? { revision: 1, content: {} };
+            return { snapshot: this.copySnapshot(cached), fallback: true };
+        }
+    }
+    copySnapshot(snapshot) {
+        return { revision: snapshot.revision, content: { ...snapshot.content } };
+    }
+    async readJson(request) {
+        const contentLength = Number(request.headers.get('content-length') ?? '0');
+        if (Number.isFinite(contentLength) && contentLength > MAX_BODY_BYTES)
+            return this.validation('Request body is too large.');
+        let text;
+        try {
+            const body = await this.readTextBody(request);
+            if (body instanceof Response)
+                return body;
+            text = body;
+        }
+        catch {
+            return this.validation('Request body could not be read.');
+        }
+        if (Buffer.byteLength(text, 'utf8') > MAX_BODY_BYTES)
+            return this.validation('Request body is too large.');
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return this.validation('Invalid JSON request body.');
+        }
+    }
+    async readTextBody(request) {
+        if (!request.body)
+            return '';
+        const reader = request.body.getReader();
+        const chunks = [];
+        let byteLength = 0;
+        try {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                if (!value)
+                    continue;
+                byteLength += value.byteLength;
+                if (byteLength > MAX_BODY_BYTES) {
+                    await reader.cancel().catch(() => undefined);
+                    return this.validation('Request body is too large.');
+                }
+                chunks.push(value);
+            }
+        }
+        finally {
+            reader.releaseLock();
+        }
+        return Buffer.concat(chunks, byteLength).toString('utf8');
+    }
+    matchLocale(pathname, prefix, suffix = '') {
+        if (!pathname.startsWith(prefix) || (suffix && !pathname.endsWith(suffix)))
+            return null;
+        const end = suffix ? pathname.length - suffix.length : pathname.length;
+        const encoded = pathname.slice(prefix.length, end);
+        if (!encoded || encoded.includes('/'))
+            return null;
+        try {
+            return decodeURIComponent(encoded);
+        }
+        catch {
+            return '';
+        }
+    }
+    cookie(request, name) {
+        for (const part of (request.headers.get('cookie') ?? '').split(';')) {
+            const separator = part.indexOf('=');
+            if (separator < 0)
+                continue;
+            if (part.slice(0, separator).trim() === name)
+                return part.slice(separator + 1).trim();
+        }
+        return null;
+    }
+    validPrincipal(principal) {
+        return typeof principal.subject === 'string'
+            && principal.subject.length > 0
+            && Array.isArray(principal.roles)
+            && principal.roles.every((role) => role === 'editor' || role === 'publisher');
+    }
+    hasRole(principal, role) {
+        return principal.roles.includes(role);
+    }
+    isRecord(value) {
+        return typeof value === 'object' && value !== null && !Array.isArray(value);
+    }
+    onlyKeys(value, allowed) {
+        return Object.keys(value).every((key) => allowed.includes(key));
+    }
+    secure(response) {
+        response.headers.set('x-content-type-options', 'nosniff');
+        response.headers.set('x-frame-options', 'SAMEORIGIN');
+        response.headers.set('referrer-policy', 'same-origin');
+        return response;
+    }
+    validation(message) {
+        return this.error(400, 'VALIDATION_ERROR', message);
+    }
+    error(status, code, message) {
+        const body = { error: { code, message } };
+        return this.json(status, body, { 'cache-control': 'no-store' });
+    }
+    json(status, value, headers = {}) {
+        return Response.json(value, { status, headers });
+    }
+}
+export function createCopyPatchBackend(options) {
+    const hasPassphrase = typeof options.passphraseHash === 'string';
+    const hasAdapter = typeof options.authAdapter === 'object';
+    if (hasPassphrase === hasAdapter)
+        throw new TypeError('Configure exactly one of passphraseHash or authAdapter.');
+    if (hasPassphrase && !options.passphraseHash.startsWith('$argon2id$')) {
+        throw new TypeError('passphraseHash must be an Argon2id encoded hash.');
+    }
+    const maxTextLength = options.maxTextLength ?? DEFAULT_MAX_TEXT_LENGTH;
+    if (!Number.isSafeInteger(maxTextLength) || maxTextLength < 1 || maxTextLength > HARD_MAX_TEXT_LENGTH) {
+        throw new TypeError(`maxTextLength must be between 1 and ${HARD_MAX_TEXT_LENGTH}.`);
+    }
+    const idleTimeoutMs = options.session?.idleTimeoutMs ?? DEFAULT_IDLE_TIMEOUT_MS;
+    const absoluteTimeoutMs = options.session?.absoluteTimeoutMs ?? DEFAULT_ABSOLUTE_TIMEOUT_MS;
+    const rateLimit = options.rateLimit?.limit ?? 30;
+    const rateLimitWindowMs = options.rateLimit?.windowMs ?? 60_000;
+    for (const [name, value] of Object.entries({ idleTimeoutMs, absoluteTimeoutMs, rateLimit, rateLimitWindowMs })) {
+        if (!Number.isSafeInteger(value) || value < 1)
+            throw new TypeError(`${name} must be a positive safe integer.`);
+    }
+    if (idleTimeoutMs > absoluteTimeoutMs)
+        throw new TypeError('idleTimeoutMs cannot exceed absoluteTimeoutMs.');
+    const resolved = {
+        persistence: options.persistence,
+        maxTextLength,
+        idleTimeoutMs,
+        absoluteTimeoutMs,
+        rateLimit,
+        rateLimitWindowMs,
+        now: options.now ?? Date.now,
+    };
+    if (hasPassphrase)
+        resolved.passphraseHash = options.passphraseHash;
+    if (hasAdapter)
+        resolved.authAdapter = options.authAdapter;
+    return new CopyPatchBackendRuntime(resolved);
+}
+//# sourceMappingURL=backend.js.map

package/dist/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,aAAa,GAad,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExG,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAiD5D,MAAM,uBAAuB;IAGE;IAFZ,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEhE,YAA6B,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;IAAG,CAAC;IAEpE,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,UAA6C,EAAE;QAC5E,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,qCAAqC,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,OAA0C;QAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;QACjG,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YACxC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9E,IAAI,WAAW;gBAAE,OAAO,WAAW,CAAC;QACtC,CAAC;QAED,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,aAAa,SAAS,CAAC,EAAE,CAAC;YACpG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACzH,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,aAAa,UAAU,EAAE,CAAC;YAChD,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnE,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,aAAa,WAAW,CAAC,CAAC;QACjF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;YAC7F,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,OAAO,GAA2B,MAAM,CAAC,QAAQ;gBACrD,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE;gBACjC,CAAC,CAAC,EAAE,eAAe,EAAE,oCAAoC,EAAE,IAAI,EAAE,UAAU,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;YAC3G,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC9E,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,aAAa,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5F,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;YAC7F,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,aAAa,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5F,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,aAAa,UAAU,EAAE,SAAS,CAAC,CAAC;QAC1F,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;YAChG,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,aAAa,UAAU,CAAC,CAAC;QAC/E,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;YAC7F,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,IAAI,YAAY,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACjH,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,OAA0C;QACtF,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACjE,IAAI,IAAI,YAAY,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7J,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,MAAM,YAAY,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC;QACxD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;YAC7I,OAAO,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,MAAM,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAkB;YAC5B,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC;YAClC,aAAa,EAAE,SAAS,CAAC,SAAS,CAAC;YACnC,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC9B,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;YAC/C,iBAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB;SACxD,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,GAAG,mBAAmB,IAAI,YAAY,wDAAwD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAAE,CAAC;QACjK,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE;YAC1H,eAAe,EAAE,UAAU;YAC3B,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,OAA0C;QACpF,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAClE,IAAI,IAAI,YAAY,QAAQ;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;YACpI,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7J,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACpI,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAiB,EAAE;YAClF,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9B,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,OAAQ,CAAC,iBAAiB,CAAC;YACzG,aAAa,EAAE,SAAS,CAAC,SAAS,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACpH,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAChK,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,OAA0C;QACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzE,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/F,MAAM,aAAa,GAAG,GAAG,mBAAmB,yDAAyD,CAAC;QACtG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IACzG,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAgB,EAAE,OAA0C,EAAE,MAAc;QACnG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzE,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,MAAM,YAAY,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,OAAO,YAAY,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,OAA0C,EAAE,MAAc;QACtG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5E,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,MAAM,YAAY,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,SAAS,YAAY,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,OAA0C,EAAE,MAAc;QACtG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzE,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,MAAM,YAAY,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,SAAS,YAAY,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,OAAgB,EAChB,OAA0C,EAC1C,IAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW;YACnC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;YACrD,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,IAAI,YAAY,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;QAChH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,+BAA+B,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,OAA0C;QACrF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;YAC7B,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,OAAgB,EAChB,OAA0C,EAC1C,QAAiB;QAEjB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAY,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YACzF,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;YAC5H,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAY,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACrG,IAAI,QAAQ,KAAK,KAAK;oBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,+BAA+B,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;QACpK,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,IAAI,GAAG,IAAI,OAAO,CAAC,iBAAiB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClH,IAAI,OAAO;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE;YACrE,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,iBAAiB,CAAC;SACrF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QACvF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,OAAgB,EAChB,OAA0C,EAC1C,QAAgB;QAEhB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,gBAAgB,CAAC;QAC3D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC;YAC/D,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;YACxC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YACpB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAAE;SAC/D,EAAE;YACD,eAAe,EAAE,UAAU;YAC3B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;SAC9F,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,OAAgB,EAAE,cAAsB;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,KAAc,EAAE,MAAc;QACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,2BAA2B,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACtH,OAAO,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzG,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAClH,OAAO,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnI,OAAO,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxG,OAAO,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,2BAA2B,EAAE,uBAAuB,CAAC,CAAC,EAAE,CAAC;YAC3G,OAAO,IAAI,CAAC,UAAU,CAAC,uCAAuC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzG,OAAO,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,yDAAyD,CAAC,CAAC;IACjG,CAAC;IAEO,mBAAmB,CAAC,SAAkB,EAAE,KAAc;QAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,SAAoB,GAAG,CAAC,IAAK,KAAgB,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxI,OAAO,EAAE,yBAAyB,EAAE,SAAmB,EAAE,qBAAqB,EAAE,KAAe,EAAE,CAAC;IACpG,CAAC;IAEO,gBAAgB,CAAI,MAAoC;QAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,kCAAkC,EAAE;gBACjF,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7F,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,MAAc;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC1E,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAAyB;QAC5C,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAgB;QACrC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;QAC3H,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,IAAI,YAAY,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;QAC3G,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAgB;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC/B,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;oBAChC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,MAAM,GAAG,EAAE;QAC/D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,OAAgB,EAAE,IAAY;QAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,SAAS,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CAAC,SAA6B;QAClD,OAAO,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;eACvC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;eAC5B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;eAC9B,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC;IAClF,CAAC;IAEO,OAAO,CAAC,SAA6B,EAAE,IAAmB;QAChE,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAEO,QAAQ,CAAC,KAAc;QAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,QAAQ,CAAC,KAA8B,EAAE,OAA0B;QACzE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,MAAM,CAAC,QAAkB;QAC/B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC1D,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACtD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACvD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,MAAc,EAAE,IAAe,EAAE,OAAe;QAC5D,MAAM,IAAI,GAAqB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IAEO,IAAI,CAAC,MAAc,EAAE,KAAc,EAAE,UAAkC,EAAE;QAC/E,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,OAA2C;IAE3C,MAAM,aAAa,GAAG,OAAQ,OAAwC,CAAC,cAAc,KAAK,QAAQ,CAAC;IACnG,MAAM,UAAU,GAAG,OAAQ,OAAqC,CAAC,WAAW,KAAK,QAAQ,CAAC;IAC1F,IAAI,aAAa,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjH,IAAI,aAAa,IAAI,CAAE,OAAsC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,oBAAoB,EAAE,CAAC;QACtG,MAAM,IAAI,SAAS,CAAC,uCAAuC,oBAAoB,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,IAAI,uBAAuB,CAAC;IAChF,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,EAAE,iBAAiB,IAAI,2BAA2B,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;IACjD,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,IAAI,MAAM,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;QAC/G,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,aAAa,GAAG,iBAAiB;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IAE7G,MAAM,QAAQ,GAA+B;QAC3C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa;QACb,aAAa;QACb,iBAAiB;QACjB,SAAS;QACT,iBAAiB;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;KAC7B,CAAC;IACF,IAAI,aAAa;QAAE,QAAQ,CAAC,cAAc,GAAI,OAAsC,CAAC,cAAc,CAAC;IACpG,IAAI,UAAU;QAAE,QAAQ,CAAC,WAAW,GAAI,OAA4D,CAAC,WAAW,CAAC;IACjH,OAAO,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,6 @@
+export declare function generateToken(): string;
+export declare function hashToken(token: string): string;
+export declare function hashRateLimitKey(value: string): string;
+export declare function hashesEqual(left: string, right: string): boolean;
+export declare function verifyPassphrase(passphrase: string, argon2idHash: string): Promise<boolean>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAGA,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOjG"}

package/dist/crypto.js

@@ -0,0 +1,27 @@
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { verify } from '@node-rs/argon2';
+export function generateToken() {
+    return randomBytes(32).toString('base64url');
+}
+export function hashToken(token) {
+    return createHash('sha256').update(token, 'utf8').digest('hex');
+}
+export function hashRateLimitKey(value) {
+    return hashToken(`copypatch-rate-limit\0${value}`);
+}
+export function hashesEqual(left, right) {
+    const leftBytes = Buffer.from(left, 'hex');
+    const rightBytes = Buffer.from(right, 'hex');
+    return leftBytes.length === rightBytes.length && timingSafeEqual(leftBytes, rightBytes);
+}
+export async function verifyPassphrase(passphrase, argon2idHash) {
+    if (!argon2idHash.startsWith('$argon2id$'))
+        return false;
+    try {
+        return await verify(argon2idHash, passphrase);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,SAAS,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,YAAoB;IAC7E,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './backend.js';
+export * from './crypto.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from './backend.js';
+export * from './crypto.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@copypatch/backend",
+  "version": "2.0.0",
+  "description": "Storage-independent CopyPatch backend runtime",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@copypatch/core": "2.0.0",
+    "@node-rs/argon2": "^2.0.2"
+  },
+  "devDependencies": {
+    "typescript": "^5.8.0"
+  }
+}