@daloyjs/core 0.17.0 → 0.28.0

package/dist/compression.js

@@ -0,0 +1,368 @@
+/**
+ * Wave 7 (first focused slice): first-party `compression()` middleware with
+ * BREACH-aware safe defaults.
+ *
+ * Built on the web-standard `CompressionStream` API so the same line works
+ * on Node, Bun, Deno, Cloudflare Workers, Vercel Edge, and Fastly Compute.
+ * The middleware deliberately refuses to expose a configurable compression
+ * level — `CompressionStream` uses the runtime's documented default (gzip
+ * level 6 on Node / V8); a `level: 9` opt-in is rejected at construction
+ * because the bytes-saved-per-CPU-cycle tradeoff turns into a small-vCPU
+ * DoS amplifier under sustained load with single-digit-percent bytes-saved
+ * gains on typical JSON payloads.
+ *
+ * BREACH guards (CRIME-style cross-domain compression-oracle defenses) are
+ * always-on and not opt-out: the middleware refuses to compress responses
+ * that carry `Set-Cookie`, responses on requests that carry an
+ * `Authorization` header, responses on requests that carry a
+ * recognized session / CSRF cookie, and responses whose content type is
+ * already entropy-coded (images, video, audio, archives, fonts, wasm, pdf).
+ *
+ * @since 0.25.0
+ */
+/**
+ * Internal marker stamped on the hook so a future audit gate can confirm
+ * the BREACH-aware middleware is installed (Wave 9 audit-item parity).
+ *
+ * @since 0.25.0
+ */
+export const COMPRESSION_HOOK_MARKER = Symbol.for("daloy.compression.hook");
+// Lowercased MIME-prefix deny-list. Each entry is matched as a leading
+// prefix of the response's resolved content-type token (no parameters).
+const ALWAYS_DENY_CONTENT_TYPES = Object.freeze([
+    "image/",
+    "video/",
+    "audio/",
+    "font/",
+    "application/zip",
+    "application/gzip",
+    "application/x-7z",
+    "application/x-gzip",
+    "application/x-bzip",
+    "application/x-xz",
+    "application/zstd",
+    "application/x-zstd",
+    "application/wasm",
+    "application/pdf",
+    "application/epub+zip",
+]);
+// Allow lossless override: `image/svg+xml` IS compressible (XML text).
+const ALLOW_SUBTYPES = Object.freeze(["image/svg+xml"]);
+// Cookie-name substring tokens that flag a request as security-state-bound.
+const ALWAYS_AUTH_COOKIE_TOKENS = Object.freeze([
+    "session",
+    "csrf",
+    "xsrf",
+    "__host-",
+    "__secure-",
+]);
+function parseAcceptEncoding(header) {
+    if (!header)
+        return [];
+    const out = [];
+    for (const raw of header.split(",")) {
+        const part = raw.trim();
+        if (!part)
+            continue;
+        const [tokenRaw, ...paramsRaw] = part.split(";");
+        const token = (tokenRaw ?? "").trim().toLowerCase();
+        if (!token)
+            continue;
+        let q = 1;
+        for (const p of paramsRaw) {
+            const m = p.trim().match(/^q=([0-9.]+)$/i);
+            if (m) {
+                const parsed = Number.parseFloat(m[1]);
+                if (Number.isFinite(parsed) && parsed >= 0 && parsed <= 1)
+                    q = parsed;
+            }
+        }
+        if (token === "br" || token === "gzip" || token === "deflate") {
+            out.push({ encoding: token, q });
+        }
+        else if (token === "identity") {
+            out.push({ encoding: "identity", q });
+        }
+        else if (token === "*") {
+            out.push({ encoding: "*", q });
+        }
+    }
+    return out;
+}
+function pickEncoding(accept, serverPreferred, runtimeSupported) {
+    if (accept.length === 0)
+        return null;
+    // Reject if `identity;q=0` AND no positive coded entries OR `*;q=0`.
+    // Per RFC 9110 §12.5.3, if the server cannot satisfy, it should send 406
+    // — we instead choose to skip compression (return null) which serves
+    // `identity` and lets upstream content-negotiation logic make any
+    // 406-vs-200 call.
+    // Build a map of encoding → highest q value the client expressed.
+    const explicit = new Map();
+    let starQ;
+    for (const a of accept) {
+        if (a.encoding === "*") {
+            starQ = a.q;
+        }
+        else {
+            const prev = explicit.get(a.encoding);
+            if (prev === undefined || a.q > prev)
+                explicit.set(a.encoding, a.q);
+        }
+    }
+    for (const enc of serverPreferred) {
+        if (!runtimeSupported.has(enc))
+            continue;
+        const q = explicit.get(enc) ?? starQ;
+        if (q !== undefined && q > 0)
+            return enc;
+    }
+    return null;
+}
+let cachedRuntimeSupport = null;
+function detectRuntimeSupport() {
+    if (cachedRuntimeSupport)
+        return cachedRuntimeSupport;
+    const Stream = globalThis.CompressionStream;
+    const supported = new Set();
+    if (!Stream) {
+        cachedRuntimeSupport = supported;
+        return supported;
+    }
+    for (const enc of ["br", "gzip", "deflate"]) {
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-unused-vars
+            const _ = new Stream(enc);
+            supported.add(enc);
+        }
+        catch {
+            // not supported on this runtime
+        }
+    }
+    cachedRuntimeSupport = supported;
+    return supported;
+}
+/**
+ * @internal Reset cached runtime probe. Test-only.
+ * @since 0.25.0
+ */
+export function _resetCompressionRuntimeProbeForTests() {
+    cachedRuntimeSupport = null;
+}
+function isExcludedContentType(contentType, extraDeny) {
+    if (!contentType)
+        return false;
+    const token = contentType.split(";")[0].trim().toLowerCase();
+    if (!token)
+        return false;
+    for (const allow of ALLOW_SUBTYPES) {
+        if (token === allow)
+            return false;
+    }
+    for (const deny of ALWAYS_DENY_CONTENT_TYPES) {
+        if (token.startsWith(deny))
+            return true;
+    }
+    for (const deny of extraDeny) {
+        if (token.startsWith(deny))
+            return true;
+    }
+    return false;
+}
+function requestCarriesAuthCookie(cookieHeader, extra) {
+    if (!cookieHeader)
+        return false;
+    const lower = cookieHeader.toLowerCase();
+    for (const tok of ALWAYS_AUTH_COOKIE_TOKENS) {
+        if (lower.includes(tok))
+            return true;
+    }
+    for (const tok of extra) {
+        if (lower.includes(tok.toLowerCase()))
+            return true;
+    }
+    return false;
+}
+function appendVaryAcceptEncoding(headers) {
+    const existing = headers.get("vary");
+    if (!existing) {
+        headers.set("vary", "Accept-Encoding");
+        return;
+    }
+    const parts = existing
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+    for (const p of parts) {
+        if (p === "*")
+            return;
+        if (p.toLowerCase() === "accept-encoding")
+            return;
+    }
+    headers.set("vary", `${existing}, Accept-Encoding`);
+}
+function normalizeOptionTokens(values, optionName) {
+    if (!values)
+        return Object.freeze([]);
+    const normalized = [];
+    for (const value of values) {
+        if (typeof value !== "string") {
+            throw new TypeError(`compression(): \`${optionName}\` entries must be non-empty strings.`);
+        }
+        const token = value.trim().toLowerCase();
+        if (!token) {
+            throw new TypeError(`compression(): \`${optionName}\` entries must be non-empty strings.`);
+        }
+        normalized.push(token);
+    }
+    return Object.freeze(normalized);
+}
+async function compressBytes(bytes, encoding) {
+    const Stream = globalThis.CompressionStream;
+    const cs = new Stream(encoding);
+    const writer = cs.writable.getWriter();
+    // Intentionally do not `await writer.write(...)` separately from
+    // close — the stream queues the chunk synchronously and we want both
+    // operations to settle together for predictable backpressure on the
+    // tiny in-memory body we hand it.
+    void writer.write(bytes);
+    const closePromise = writer.close();
+    const reader = cs.readable.getReader();
+    const chunks = [];
+    let total = 0;
+    // eslint-disable-next-line no-constant-condition
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (value) {
+            chunks.push(value);
+            total += value.byteLength;
+        }
+    }
+    await closePromise;
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        out.set(c, offset);
+        offset += c.byteLength;
+    }
+    return out;
+}
+/**
+ * BREACH-aware response compression middleware.
+ *
+ * Picks `br` > `gzip` > `deflate` based on the client's `Accept-Encoding`
+ * header AND the runtime's `CompressionStream` support (probed once,
+ * cached). Skips compression when ANY of the following are true:
+ *
+ * - request method is not `GET` / `HEAD` (compressing responses on
+ *   state-changing requests offers no caching win and trips BREACH
+ *   oracles more easily);
+ * - request carried an `Authorization` header (auth-bound bodies);
+ * - request carried a recognized session / CSRF / `__Host-` /
+ *   `__Secure-` cookie (auth-bound bodies);
+ * - response status is not `2xx`;
+ * - response already declares a `Content-Encoding`;
+ * - response declares a `Set-Cookie` (response is mutating auth state);
+ * - response body byte length is below `minimumSize` (default `1024`);
+ * - response `Content-Type` is in the always-on already-compressed
+ *   deny-list (image/video/audio/archives/fonts/wasm/pdf, with
+ *   `image/svg+xml` carved back in as compressible XML).
+ *
+ * When skipping, the middleware still appends `Vary: Accept-Encoding`
+ * to the response so cache keys remain content-negotiation-correct.
+ *
+ * @example
+ * ```ts
+ * import { App, compression } from "@daloyjs/core";
+ *
+ * const app = new App();
+ * app.use(compression());
+ * ```
+ *
+ * @since 0.25.0
+ */
+export function compression(opts = {}) {
+    if (Object.prototype.hasOwnProperty.call(opts, "compressLevel")) {
+        throw new TypeError("compression(): `compressLevel` is not configurable. CompressionStream uses the runtime default (typically 6); higher levels are a CPU-DoS amplifier with single-digit-percent bytes-saved gains.");
+    }
+    const minimumSize = opts.minimumSize === undefined ? 1024 : opts.minimumSize;
+    if (!Number.isFinite(minimumSize) ||
+        !Number.isInteger(minimumSize) ||
+        minimumSize < 0 ||
+        minimumSize > 2 ** 31 - 1) {
+        throw new TypeError("compression(): `minimumSize` must be a finite non-negative integer.");
+    }
+    const serverPreferred = opts.encodings && opts.encodings.length > 0
+        ? Object.freeze([...opts.encodings])
+        : Object.freeze(["br", "gzip", "deflate"]);
+    // Validate the encodings list.
+    for (const enc of serverPreferred) {
+        if (enc !== "br" && enc !== "gzip" && enc !== "deflate") {
+            throw new TypeError(`compression(): unknown encoding ${JSON.stringify(enc)} — supported: br, gzip, deflate.`);
+        }
+    }
+    const extraDeny = normalizeOptionTokens(opts.excludeContentTypes, "excludeContentTypes");
+    const extraAuthCookies = normalizeOptionTokens(opts.authCookieNames, "authCookieNames");
+    const hooks = {
+        async onSend(res, ctx) {
+            const req = ctx?.request;
+            if (!req)
+                return undefined;
+            appendVaryAcceptEncoding(res.headers);
+            const method = req.method;
+            if (method !== "GET" && method !== "HEAD")
+                return undefined;
+            if (res.status < 200 || res.status >= 300)
+                return undefined;
+            if (res.headers.has("content-encoding"))
+                return undefined;
+            if (res.headers.has("set-cookie"))
+                return undefined;
+            if (req.headers.has("authorization"))
+                return undefined;
+            if (requestCarriesAuthCookie(req.headers.get("cookie"), extraAuthCookies)) {
+                return undefined;
+            }
+            if (isExcludedContentType(res.headers.get("content-type"), extraDeny)) {
+                return undefined;
+            }
+            const runtimeSupported = detectRuntimeSupport();
+            if (runtimeSupported.size === 0)
+                return undefined;
+            const accept = parseAcceptEncoding(req.headers.get("accept-encoding"));
+            const chosen = pickEncoding(accept, serverPreferred, runtimeSupported);
+            if (!chosen)
+                return undefined;
+            const original = new Uint8Array(await res.clone().arrayBuffer());
+            if (original.byteLength < minimumSize)
+                return undefined;
+            const compressed = await compressBytes(original, chosen);
+            if (compressed.byteLength >= original.byteLength) {
+                // Negative-compression-ratio guard: if the compressor produced a
+                // larger payload (very small / high-entropy bodies that slipped past
+                // the minimumSize check) skip rather than ship more bytes.
+                return undefined;
+            }
+            const headers = new Headers(res.headers);
+            headers.set("content-encoding", chosen);
+            headers.set("content-length", String(compressed.byteLength));
+            // Strong ETag computed upstream over the uncompressed body is now
+            // inconsistent with the wire bytes — downgrade to weak per RFC 9110.
+            const existingEtag = headers.get("etag");
+            if (existingEtag && !existingEtag.startsWith("W/")) {
+                headers.set("etag", `W/${existingEtag}`);
+            }
+            const responseBody = method === "HEAD" ? null : compressed;
+            return new Response(responseBody, {
+                status: res.status,
+                statusText: res.statusText,
+                headers,
+            });
+        },
+    };
+    hooks[COMPRESSION_HOOK_MARKER] = true;
+    return hooks;
+}
+//# sourceMappingURL=compression.js.map

package/dist/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sourceRoot":"","sources":["../src/compression.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA8DH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkB,MAAM,CAAC,GAAG,CAC9D,wBAAwB,CACzB,CAAC;AAEF,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,yBAAyB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACjE,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;CACvB,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;AAE3E,4EAA4E;AAC5E,MAAM,yBAAyB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACjE,SAAS;IACT,MAAM;IACN,MAAM;IACN,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAOH,SAAS,mBAAmB,CAAC,MAAqB;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;gBACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC;oBAAE,CAAC,GAAG,MAAM,CAAC;YACxE,CAAC;QACH,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,MAAsB,EACtB,eAA+C,EAC/C,gBAAkD;IAElD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,kEAAkE;IAClE,mBAAmB;IACnB,kEAAkE;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,KAAyB,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YACvB,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;QACrC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,oBAAoB,GAAoC,IAAI,CAAC;AAEjE,SAAS,oBAAoB;IAC3B,IAAI,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IACtD,MAAM,MAAM,GAAI,UAEd,CAAC,iBAAiB,CAAC;IACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,oBAAoB,GAAG,SAAS,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAU,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IACD,oBAAoB,GAAG,SAAS,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qCAAqC;IACnD,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA0B,EAC1B,SAA4B;IAE5B,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAC/B,YAA2B,EAC3B,KAAwB;IAExB,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACvC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO;QACtB,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,iBAAiB;YAAE,OAAO;IACpD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,mBAAmB,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAqC,EACrC,UAAkB;IAElB,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,oBAAoB,UAAU,uCAAuC,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CACjB,oBAAoB,UAAU,uCAAuC,CACtE,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAiB,EACjB,QAA6B;IAE7B,MAAM,MAAM,GAAI,UAKd,CAAC,iBAAiB,CAAC;IACrB,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACvC,iEAAiE;IACjE,qEAAqE;IACrE,oEAAoE;IACpE,kCAAkC;IAClC,KAAK,MAAM,CAAC,KAAK,CAAC,KAAmB,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACvC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,iDAAiD;IACjD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,MAAM,YAAY,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,WAAW,CAAC,OAA2B,EAAE;IACvD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CACjB,kMAAkM,CACnM,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC3D,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC;QAC9B,WAAW,GAAG,CAAC;QACf,WAAW,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC,CAAC;IACxD,+BAA+B;IAC/B,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,SAAS,CACjB,mCAAmC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kCAAkC,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,qBAAqB,CACrC,IAAI,CAAC,mBAAmB,EACxB,qBAAqB,CACtB,CAAC;IACF,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,IAAI,CAAC,eAAe,EACpB,iBAAiB,CAClB,CAAC;IAEF,MAAM,KAAK,GAAiD;QAC1D,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG;YACnB,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC;YACzB,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC3B,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC5D,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC5D,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1D,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,OAAO,SAAS,CAAC;YACpD,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvD,IACE,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,EACrE,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IACE,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,EACjE,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,gBAAgB,GAAG,oBAAoB,EAAE,CAAC;YAChD,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAE9B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,UAAU,GAAG,WAAW;gBAAE,OAAO,SAAS,CAAC;YACxD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACzD,IAAI,UAAU,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACjD,iEAAiE;gBACjE,qEAAqE;gBACrE,2DAA2D;gBAC3D,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7D,kEAAkE;YAClE,qEAAqE;YACrE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,YAAY,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,YAAY,GAChB,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,UAAuB,CAAC;YACtD,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,KAAK,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Wave 4 leftover: `defineConfig({ schema, source })`.
+ *
+ * Single boot-time helper that loads application configuration from a
+ * caller-chosen source (`process.env`, a file on disk, or an async secrets
+ * resolver), validates the merged object against a Standard-Schema
+ * validator, and aggregates **every** validation issue into a single
+ * structured error printed to stderr before the process exits.
+ *
+ * The point is to fail fast and loud: a misconfigured deployment should
+ * surface every missing/invalid key in one shot so operators do not have
+ * to redeploy four times to discover four different typos.
+ *
+ * @since 0.20.0
+ */
+import { type StandardSchemaV1 } from "./schema.js";
+/**
+ * Aggregated validation failure thrown by {@link defineConfig}. Holds the
+ * full list of `{ key, message }` issues so callers can surface them in a
+ * dashboard, a startup probe, or a custom error renderer.
+ */
+export declare class ConfigValidationError extends Error {
+    readonly issues: ReadonlyArray<{
+        key: string;
+        message: string;
+    }>;
+    constructor(issues: ReadonlyArray<{
+        key: string;
+        message: string;
+    }>);
+}
+/**
+ * Source the raw object that gets handed to the schema validator. The
+ * built-in sources are intentionally narrow — anything more elaborate
+ * (Vault, Doppler, AWS Secrets Manager, ...) should arrive via the
+ * `"custom"` source with an async resolver.
+ */
+export type ConfigSource = "env" | {
+    kind: "env";
+    env: Record<string, string | undefined>;
+} | {
+    kind: "file";
+    path: string;
+    parse?: (text: string) => unknown;
+} | {
+    kind: "object";
+    data: Record<string, unknown>;
+} | {
+    kind: "custom";
+    resolve: () => Promise<Record<string, unknown>>;
+};
+/** Options accepted by {@link defineConfig}. */
+export interface DefineConfigOptions<S extends StandardSchemaV1> {
+    /** Standard-Schema validator (Zod, Valibot, ArkType, TypeBox, ...). */
+    schema: S;
+    /** Source of the raw input. Default `"env"` (reads from `process.env`). */
+    source?: ConfigSource;
+    /**
+     * Optional pre-validation transform. Useful for coercing string env
+     * values (`"true"` / `"42"`) to typed primitives before they hit the
+     * schema, or for renaming `FOO_BAR` → `fooBar`. Receives the raw
+     * source object and must return the object handed to the validator.
+     */
+    transform?: (raw: Record<string, unknown>) => Record<string, unknown>;
+    /**
+     * Stream errors are written to. Defaults to `process.stderr`. Set to
+     * `false` to suppress the printed summary; the thrown
+     * {@link ConfigValidationError} still carries `issues`.
+     */
+    stderr?: {
+        write: (chunk: string) => void;
+    } | false;
+}
+/**
+ * Load and validate configuration at boot. Aggregates every Standard-Schema
+ * issue into a single {@link ConfigValidationError}, prints a human-readable
+ * summary to stderr, and only resolves with the typed config object when
+ * validation succeeded.
+ *
+ * @example
+ * ```ts
+ * import { z } from "zod";
+ * import { defineConfig } from "@daloyjs/core";
+ *
+ * const Config = z.object({
+ *   PORT: z.coerce.number().int().min(1).max(65535),
+ *   DATABASE_URL: z.string().url(),
+ *   NODE_ENV: z.enum(["development", "production", "test"]),
+ * });
+ *
+ * export const config = await defineConfig({ schema: Config });
+ * ```
+ *
+ * @since 0.20.0
+ */
+export declare function defineConfig<S extends StandardSchemaV1>(opts: DefineConfigOptions<S>): Promise<StandardSchemaV1.InferOutput<S>>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAY,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE9D;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBACrD,MAAM,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAUpE;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,KAAK,GACL;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC;AAExE,gDAAgD;AAChD,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,gBAAgB;IAC7D,uEAAuE;IACvE,MAAM,EAAE,CAAC,CAAC;IACV,2EAA2E;IAC3E,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtE;;;;OAIG;IACH,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,GAAG,KAAK,CAAC;CACrD;AA8CD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,YAAY,CAAC,CAAC,SAAS,gBAAgB,EAC3D,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAkC1C"}

package/dist/config.js

@@ -0,0 +1,132 @@
+/**
+ * Wave 4 leftover: `defineConfig({ schema, source })`.
+ *
+ * Single boot-time helper that loads application configuration from a
+ * caller-chosen source (`process.env`, a file on disk, or an async secrets
+ * resolver), validates the merged object against a Standard-Schema
+ * validator, and aggregates **every** validation issue into a single
+ * structured error printed to stderr before the process exits.
+ *
+ * The point is to fail fast and loud: a misconfigured deployment should
+ * surface every missing/invalid key in one shot so operators do not have
+ * to redeploy four times to discover four different typos.
+ *
+ * @since 0.20.0
+ */
+import { validate } from "./schema.js";
+/**
+ * Aggregated validation failure thrown by {@link defineConfig}. Holds the
+ * full list of `{ key, message }` issues so callers can surface them in a
+ * dashboard, a startup probe, or a custom error renderer.
+ */
+export class ConfigValidationError extends Error {
+    issues;
+    constructor(issues) {
+        const summary = issues
+            .map((i) => `  - ${i.key || "<root>"}: ${i.message}`)
+            .join("\n");
+        super(`defineConfig(): configuration is invalid (${issues.length} issue${issues.length === 1 ? "" : "s"})\n${summary}`);
+        this.name = "ConfigValidationError";
+        this.issues = issues;
+    }
+}
+async function readSource(source) {
+    if (source === "env") {
+        return readEnvObject((typeof process !== "undefined" ? process.env : {}));
+    }
+    if (source.kind === "env")
+        return readEnvObject(source.env);
+    if (source.kind === "object")
+        return { ...source.data };
+    if (source.kind === "file") {
+        const fs = await import("node:fs/promises");
+        const text = await fs.readFile(source.path, "utf8");
+        const parsed = (source.parse ?? JSON.parse)(text);
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new ConfigValidationError([
+                { key: source.path, message: "file did not parse to an object" },
+            ]);
+        }
+        return { ...parsed };
+    }
+    return { ...(await source.resolve()) };
+}
+function readEnvObject(env) {
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+function pathToKey(path) {
+    return path
+        .map((segment) => {
+        if (typeof segment === "object" && segment !== null && "key" in segment) {
+            return String(segment.key);
+        }
+        return String(segment);
+    })
+        .join(".");
+}
+/**
+ * Load and validate configuration at boot. Aggregates every Standard-Schema
+ * issue into a single {@link ConfigValidationError}, prints a human-readable
+ * summary to stderr, and only resolves with the typed config object when
+ * validation succeeded.
+ *
+ * @example
+ * ```ts
+ * import { z } from "zod";
+ * import { defineConfig } from "@daloyjs/core";
+ *
+ * const Config = z.object({
+ *   PORT: z.coerce.number().int().min(1).max(65535),
+ *   DATABASE_URL: z.string().url(),
+ *   NODE_ENV: z.enum(["development", "production", "test"]),
+ * });
+ *
+ * export const config = await defineConfig({ schema: Config });
+ * ```
+ *
+ * @since 0.20.0
+ */
+export async function defineConfig(opts) {
+    const stderr = opts.stderr === false
+        ? null
+        : (opts.stderr ?? (typeof process !== "undefined" ? process.stderr : null));
+    let raw;
+    try {
+        raw = await readSource(opts.source ?? "env");
+    }
+    catch (err) {
+        if (err instanceof ConfigValidationError) {
+            if (stderr)
+                stderr.write(`${err.message}\n`);
+            throw err;
+        }
+        const wrapped = new ConfigValidationError([
+            {
+                key: "<source>",
+                message: err instanceof Error ? err.message : "failed to read source",
+            },
+        ]);
+        if (stderr)
+            stderr.write(`${wrapped.message}\n`);
+        throw wrapped;
+    }
+    const input = opts.transform ? opts.transform(raw) : raw;
+    const result = await validate(opts.schema, input);
+    if (result.issues) {
+        const issues = result.issues.map((issue) => ({
+            key: pathToKey(issue.path ?? []),
+            message: issue.message,
+        }));
+        const err = new ConfigValidationError(issues);
+        if (stderr)
+            stderr.write(`${err.message}\n`);
+        throw err;
+    }
+    return result.value;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAyB,MAAM,aAAa,CAAC;AAE9D;;;;GAIG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,MAAM,CAAkD;IACjE,YAAY,MAAuD;QACjE,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACpD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CACH,6CAA6C,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,EAAE,CACjH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAoCD,KAAK,UAAU,UAAU,CAAC,MAAoB;IAC5C,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,aAAa,CAClB,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAGjD,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,qBAAqB,CAAC;gBAC9B,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAI,MAAkC,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,GAAuC;IAC5D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAuD;IACxE,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACxE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAA4B;IAE5B,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,KAAK;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,IAAI,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAC7C,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACxC;gBACE,GAAG,EAAE,UAAU;gBACf,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;aACtE;SACF,CAAC,CAAC;QACH,IAAI,MAAM;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7C,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}