@demiurgejs/core 0.2.0-beta.4 → 0.2.0-beta.5

package/dist/vite/plugin.d.ts

@@ -6,7 +6,7 @@ import { type RouteImporter } from "../route";
 import type { FontContribution } from "../platform/fonts";
 import type { ImagePolicy } from "../platform/images";
 import type { EnvSchema, EnvSource } from "../security/env";
-import { type StaticPolicyFinding } from "./policy-verification";
+import { type RouteFileInspection, type StaticPolicyFinding } from "./policy-verification";
 import type { StaticFileHeaderPatternRule, VercelStaticDeployment } from "../static";
 import { type LocaleConfiguration } from "../routing";
 export type DemiurgeVitePluginOptions = {
@@ -44,7 +44,6 @@ export declare function createServerEntrySource(root: string, options?: Demiurge
 export declare function isRouteAuditEnabled(options: DemiurgeVitePluginOptions): boolean;
 export declare function createDevImageOptimizer(server: ViteDevServer, options: DemiurgeVitePluginOptions): import("../node").StaticFileHandler;
 export declare function assertRootNotFoundRoute(root: string, options?: DemiurgeVitePluginOptions): Promise<void>;
-export declare function declaresPageRoute(source: string): boolean;
 export declare function missingRootNotFoundBuildMessage(routesDir: string, pageRoute: string): string;
 export declare function missingRootNotFoundMessage(notFoundFile: string): string;
 export declare function createDocumentHtml({ entrySrc, lang, links, metadata, nonce, scripts, styles, title, }: {
@@ -59,6 +58,23 @@ export declare function createDocumentHtml({ entrySrc, lang, links, metadata, no
 }): string;
 export declare function createDevRouteImporters(server: ViteDevServer, routesDir: string): Promise<Record<string, RouteImporter>>;
 export declare function handleDevRequest(manifest: RouteManifest, request: Request, options?: Parameters<typeof handleRequestWithManifest>[2]): Promise<Response | "next">;
+/** The result of one static pass over the route tree. */
+export type RoutePolicyInspection = {
+    /** Every finding of the pass, in a stable order. */
+    findings: StaticPolicyFinding[];
+    /** The inspection of each route file, in the order that the walk found. */
+    inspections: RouteFileInspection[];
+    /** The absolute path of the route directory. */
+    routesDir: string;
+};
+/**
+ * Reads the route tree once and returns the findings and the inspections.
+ *
+ * The build verifier and the `demiurge inspect` command both call this
+ * function, so one pass gives one answer for the route tree.
+ */
+export declare function inspectRoutePolicies(root: string, options?: DemiurgeVitePluginOptions): Promise<RoutePolicyInspection>;
 export declare function verifyRoutePolicies(root: string, options?: DemiurgeVitePluginOptions): Promise<StaticPolicyFinding[]>;
 export declare function formatStaticPolicyFindings(findings: StaticPolicyFinding[]): string;
+export declare function formatStaticPolicyFinding(finding: StaticPolicyFinding): string;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/vite/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/vite/plugin.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,MAAM,EAEX,KAAK,aAAa,EACnB,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EACV,OAAO,EACP,gBAAgB,EAChB,SAAS,EACV,MAAM,aAAa,CAAC;AAGrB,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EAI1B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,UAAU,CAAC;AAUlB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAS5D,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,MAAM,yBAAyB,GAAG;IAGtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAGF,GAAG,CAAC,EAAE,SAAS,CAAC;IAGhB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAGzB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,UAAU,CAAC,EAAE,sBAAsB,CAAC;QACpC,OAAO,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;KAClD,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,GAAG;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,iBAAiB,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC5D,CAAC;AAQF,wBAAgB,QAAQ,CAAC,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAmXxE;AAuED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,UAwE/C;AAiUD,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,yBAA8B,EACvC,MAAM,GAAE,SAAuB,UAmChC;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,EACvC,MAAM,GAAE,SAAuB,UAmBhC;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,UAwCxC;AA+FD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,yBAAyB,WAErE;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,yBAAyB,uCAenC;AA4UD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,iBAgCxC;AAgCD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,WAsB/C;AAED,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,UAalB;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,UAS9D;AAED,wBAAgB,kBAAkB,CAAC,EACjC,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,UAWA;AAiCD,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,0CAalB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,CAAC,CAAM,8BAU9D;AA0CD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,kCAgBxC;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,mBAAmB,EAAE,UAKzE"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/vite/plugin.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,KAAK,MAAM,EAEX,KAAK,aAAa,EACnB,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EACV,OAAO,EACP,gBAAgB,EAChB,SAAS,EACV,MAAM,aAAa,CAAC;AAGrB,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EAI1B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,UAAU,CAAC;AAUlB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAe5D,OAAO,EAKL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,MAAM,yBAAyB,GAAG;IAGtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAGF,GAAG,CAAC,EAAE,SAAS,CAAC;IAGhB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAGzB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QACP,UAAU,CAAC,EAAE,sBAAsB,CAAC;QACpC,OAAO,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;KAClD,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,GAAG;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,iBAAiB,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC5D,CAAC;AAQF,wBAAgB,QAAQ,CAAC,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAmZxE;AAuED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,UAwE/C;AA4XD,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,yBAA8B,EACvC,MAAM,GAAE,SAAuB,UAiEhC;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,EACvC,MAAM,GAAE,SAAuB,UAmBhC;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,UAyCxC;AA2GD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,yBAAyB,WAErE;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,yBAAyB,uCAenC;AA4UD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,iBAgCxC;AAoBD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,UAalB;AAED,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,UAS9D;AAED,wBAAgB,kBAAkB,CAAC,EACjC,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,UAWA;AAiCD,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,0CAalB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,CAAC,CAAM,8BAU9D;AA0CD,yDAAyD;AACzD,MAAM,MAAM,qBAAqB,GAAG;IAClC,oDAAoD;IACpD,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,2EAA2E;IAC3E,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAyBhC;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,kCAGxC;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,mBAAmB,EAAE,UAKzE;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,mBAAmB,UAKrE"}

package/dist/vite/policy-verification.d.ts

@@ -1,10 +1,41 @@
+import type { HttpMethod } from "../route";
+import { type StaticPolicyFindingCode } from "../security";
 export type StaticPolicyFinding = {
-    code: "cors-invalid" | "cors-method-unavailable" | "rate-limit-invalid" | "security-header-render-failed";
+    code: StaticPolicyFindingCode;
     exportName?: string;
     file: string;
     message: string;
-    severity: "error";
+    severity: "error" | "warning";
 };
+export type RouteFileInspection = {
+    /** The statically provable access state of the route policy. */
+    accessState: RouteAccessState;
+    /** `true` when the file exports at least one HTTP method capability. */
+    declaresRoute: boolean;
+    /**
+     * `true` when the file declares a document policy, and also when the policy
+     * expression is not statically readable. An unreadable expression is not
+     * evidence of an absent policy.
+     */
+    declaresDocumentPolicy: boolean;
+    /** The statically provable CSP state of the route policy. */
+    documentCspState: DocumentCspState;
+    declaresPageRoute: boolean;
+    file: string;
+    findings: StaticPolicyFinding[];
+    /** The HTTP methods that the file exports, in a stable order. */
+    methods: HttpMethod[];
+};
+export type DocumentCspState = "present" | "false" | "absent" | "unknown";
+/**
+ * `declared` means the file states access. `unknown` means the expression is
+ * not statically readable, which is not evidence of an absent declaration.
+ */
+export type RouteAccessState = "declared" | "absent" | "unknown";
 export declare function verifyRoutePolicyFile(file: string): Promise<StaticPolicyFinding[]>;
+export declare function inspectRouteFile(file: string): Promise<RouteFileInspection>;
 export declare function verifyRoutePolicySource(source: string, file: string): Promise<StaticPolicyFinding[]>;
+export declare function auditDocumentPolicyCoverage(routesDir: string, inspections: readonly RouteFileInspection[]): StaticPolicyFinding[];
+export declare function auditRouteAccessCoverage(routesDir: string, inspections: readonly RouteFileInspection[]): StaticPolicyFinding[];
+export declare function declaresPageRoute(source: string): boolean;
 //# sourceMappingURL=policy-verification.d.ts.map

package/dist/vite/policy-verification.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-verification.d.ts","sourceRoot":"","sources":["../../src/vite/policy-verification.ts"],"names":[],"mappings":"AA6BA,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,cAAc,GAAG,yBAAyB,GAAG,oBAAoB,GACrE,+BAA+B,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAmCF,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,kCAGvD;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kCAUzE"}
+{"version":3,"file":"policy-verification.d.ts","sourceRoot":"","sources":["../../src/vite/policy-verification.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAgBL,KAAK,uBAAuB,EAC7B,MAAM,aAAa,CAAC;AAiBrB,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,gEAAgE;IAChE,WAAW,EAAE,gBAAgB,CAAC;IAC9B,wEAAwE;IACxE,aAAa,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC,6DAA6D;IAC7D,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,iEAAiE;IACjE,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1E;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAsCjE,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,kCAEvD;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,CAAC,CAmB9B;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kCAKzE;AAmBD,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,SAAS,mBAAmB,EAAE,GAC1C,mBAAmB,EAAE,CAkCvB;AAKD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,SAAS,mBAAmB,EAAE,GAC1C,mBAAmB,EAAE,CAgCvB;AA0GD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,WAsB/C"}

package/dist/vite/route-audit.d.ts

@@ -2,7 +2,13 @@ import { type CacheScope } from "../data";
 import type { ResolvedMetadata } from "../document";
 import { type RouteManifest } from "../router";
 import type { HttpMethod, PageRenderMode, PathVars } from "../route";
-import { type RoutePolicy, type SecurityAudit, type SecurityAuditFinding } from "../security";
+import { type MergedRoutePolicy, type SecurityAudit, type SecurityAuditFinding } from "../security";
+import type { InspectionResolution } from "../inspect/types";
+/**
+ * The version of the route report. ADR 0019 raises this integer when the
+ * framework removes a field or changes the meaning of a field.
+ */
+export declare const ROUTE_AUDIT_VERSION = 1;
 export declare const ROUTE_AUDIT_PATH = "/_demiurge/audit";
 export type RouteAuditCacheRead = {
     key: string;
@@ -30,6 +36,8 @@ export type RouteAuditRoute = {
     policies: string[];
     render?: PageRenderMode;
 };
+/** The named sections of the route report. */
+export type RouteAuditSection = "audit" | "cacheReads" | "metadata" | "policy" | "route" | "scripts";
 export type RouteAudit = {
     audit: SecurityAudit;
     cacheControl?: string;
@@ -39,9 +47,13 @@ export type RouteAudit = {
     method: HttpMethod;
     nonce?: string;
     pathname: string;
-    policy: RoutePolicy;
+    policy: MergedRoutePolicy;
+    /** The resolution of each section of the report. */
+    resolutions: Record<RouteAuditSection, InspectionResolution>;
     route?: RouteAuditRoute;
     scripts: RouteAuditScript[];
+    /** The version of this report shape. */
+    version: number;
 };
 export declare function isRouteAuditRequest(request: Request): boolean;
 export declare function createRouteAuditResponse(manifest: RouteManifest, request: Request): Promise<Response>;

package/dist/vite/route-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-audit.d.ts","sourceRoot":"","sources":["../../src/vite/route-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,gBAAgB,EAAa,MAAM,aAAa,CAAC;AAC/D,OAAO,EAOL,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EAET,MAAM,UAAU,CAAC;AAElB,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAKrB,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAYnD,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IACxC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,WAEnD;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,OAAO,qBA4BjB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,UAAU,CAAC,CA6ErB;AA6GD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,UA8B1D"}
+{"version":3,"file":"route-audit.d.ts","sourceRoot":"","sources":["../../src/vite/route-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,gBAAgB,EAAa,MAAM,aAAa,CAAC;AAC/D,OAAO,EAOL,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EAET,MAAM,UAAU,CAAC;AAElB,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAIrC,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAYnD,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB,CAAC;AAEF,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,YAAY,GACZ,UAAU,GACV,QAAQ,GACR,OAAO,GACP,SAAS,CAAC;AAcd,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IACxC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAC7D,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,WAEnD;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,OAAO,qBA4BjB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,UAAU,CAAC,CA6ErB;AAkHD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,UAAU,UA8B1D"}

package/dist/vite/server-only-boundary.d.ts

@@ -0,0 +1,8 @@
+export type ServerOnlyBoundaryFinding = {
+    importPath: string[];
+    module: string;
+};
+export declare function importsServerOnlyMarker(code: string): boolean;
+export declare function formatServerOnlyBoundaryFindings(findings: ServerOnlyBoundaryFinding[]): string;
+export declare function formatServerOnlyDevError(module: string): string;
+//# sourceMappingURL=server-only-boundary.d.ts.map

package/dist/vite/server-only-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-only-boundary.d.ts","sourceRoot":"","sources":["../../src/vite/server-only-boundary.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAcF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI7D;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,yBAAyB,EAAE,UAOtC;AAKD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,UAItD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@demiurgejs/core",
-  "version": "0.2.0-beta.4",
+  "version": "0.2.0-beta.5",
   "description": "A React framework for secure routing, server rendering, and framework-managed HTML documents.",
   "license": "MIT",
   "author": "North Shore Software Labs",
@@ -84,6 +84,11 @@
     "./static": {
       "types": "./dist/static/index.d.ts",
       "default": "./dist/static/index.js"
+    },
+    "./server-only": {
+      "types": "./dist/server-only/index.d.ts",
+      "browser": "./dist/server-only/browser.js",
+      "default": "./dist/server-only/index.js"
     }
   },
   "scripts": {

package/dist/chunks/env-startup-DOBYWlZD.js

@@ -1,257 +0,0 @@
-class g extends Error {
-  issues;
-  constructor(n) {
-    super(j(n)), this.name = "EnvValidationError", this.issues = n;
-  }
-}
-function L(e) {
-  return e;
-}
-function A(e, n) {
-  const r = [], t = {};
-  for (const i of Object.keys(e)) {
-    const s = e[i], a = n[String(i)];
-    if (a === void 0 || a === "") {
-      if (s.optional) {
-        t[i] = void 0;
-        continue;
-      }
-      r.push({
-        code: "missing",
-        key: String(i),
-        message: `Environment variable ${String(i)} is required.`
-      });
-      continue;
-    }
-    try {
-      t[i] = s.parse(String(i), a);
-    } catch (u) {
-      r.push({
-        code: "invalid",
-        key: String(i),
-        message: u instanceof Error ? u.message : `Environment variable ${String(i)} is invalid.`
-      });
-    }
-  }
-  if (r.length)
-    throw new g(r);
-  return t;
-}
-function b(e = {}) {
-  return f(e, !1, (n, r) => {
-    if (r === "true" || r === "1")
-      return !0;
-    if (r === "false" || r === "0")
-      return !1;
-    throw new Error(`Environment variable ${n} must be true, false, 1, or 0.`);
-  }, "boolean");
-}
-function w(e, n = {}) {
-  return f(n, !1, (r, t) => {
-    if (e.includes(t))
-      return t;
-    throw new Error(
-      `Environment variable ${r} must be one of: ${e.join(", ")}.`
-    );
-  }, "enum", { values: [...e] });
-}
-function $(e = {}) {
-  return f(e, !1, (n, r) => {
-    if (!/^-?\d+$/.test(r))
-      throw new Error(`Environment variable ${n} must be an integer.`);
-    const t = Number(r);
-    if (!Number.isSafeInteger(t))
-      throw new Error(`Environment variable ${n} must be a safe integer.`);
-    if (e.min !== void 0 && t < e.min)
-      throw new Error(
-        `Environment variable ${n} must be greater than or equal to ${e.min}.`
-      );
-    if (e.max !== void 0 && t > e.max)
-      throw new Error(
-        `Environment variable ${n} must be less than or equal to ${e.max}.`
-      );
-    return t;
-  }, "integer");
-}
-function p(e = {}) {
-  return f(
-    e,
-    !0,
-    (n, r) => d(n, r, e),
-    "secret"
-  );
-}
-function k(e = {}) {
-  return f(
-    e,
-    !1,
-    (n, r) => d(n, r, e),
-    "string"
-  );
-}
-function S(e = {}) {
-  return f(e, !1, (n, r) => {
-    let t;
-    try {
-      t = new URL(r);
-    } catch {
-      throw new Error(`Environment variable ${n} must be a valid URL.`);
-    }
-    if (e.protocols?.length && !e.protocols.includes(t.protocol))
-      throw new Error(
-        `Environment variable ${n} must use one of these protocols: ${e.protocols.join(", ")}.`
-      );
-    return t;
-  }, "url");
-}
-const l = {
-  boolean: b,
-  enum: w,
-  integer: $,
-  secret: p,
-  string: k,
-  url: S
-};
-function f(e, n, r, t = "string", i = {}) {
-  const s = { ...e, ...i }, { client: a = !1, critical: u = !1, optional: o = !1, ...c } = s;
-  if (a && n)
-    throw new Error(
-      "A secret environment variable cannot reach client code. Declare a separate variable for the browser."
-    );
-  return {
-    client: a,
-    critical: u,
-    kind: t,
-    optional: o,
-    options: c,
-    parse: r,
-    sensitive: n
-  };
-}
-function d(e, n, r) {
-  if (r.minLength !== void 0 && n.length < r.minLength)
-    throw new Error(
-      `Environment variable ${e} must be at least ${r.minLength} characters.`
-    );
-  return n;
-}
-function j(e) {
-  return e.length === 1 ? e[0].message : `Environment validation failed with ${e.length} issues.`;
-}
-const v = /* @__PURE__ */ new Map();
-function D(e) {
-  return Object.fromEntries(
-    Object.entries(e).map(([n, r]) => [n, {
-      client: r.client,
-      critical: r.critical,
-      kind: r.kind,
-      optional: r.optional,
-      options: r.options,
-      sensitive: r.sensitive
-    }])
-  );
-}
-function y(e) {
-  return Object.fromEntries(
-    Object.entries(e).map(([n, r]) => [
-      n,
-      O(n, r)
-    ])
-  );
-}
-function T(e, n = {}) {
-  const r = V(e) ? e : y(e), t = n.source ?? q(), i = [], s = [], a = {};
-  for (const [o, c] of Object.entries(r)) {
-    const m = t[o];
-    if (m === void 0 || m === "") {
-      if (a[o] = void 0, c.optional) continue;
-      E(c, i, s, {
-        code: "missing",
-        key: o,
-        message: `Environment variable ${o} is required.`
-      });
-      continue;
-    }
-    try {
-      a[o] = c.parse(o, m);
-    } catch (h) {
-      a[o] = void 0, E(c, i, s, {
-        code: "invalid",
-        key: o,
-        message: h instanceof Error ? h.message : `Environment variable ${o} is invalid.`
-      });
-    }
-  }
-  if (i.length) throw new g(i);
-  const u = n.warn ?? x;
-  for (const o of s) u(o);
-  for (const [o, c] of Object.entries(a)) v.set(o, c);
-  return { values: a, warnings: s };
-}
-function z(e) {
-  const n = {};
-  for (const r of Object.keys(e)) {
-    if (!v.has(r))
-      throw new Error(
-        `Demiurge did not validate the environment variable ${r}. The framework validates the schema of demiurge.config.ts when the server starts.`
-      );
-    n[r] = v.get(r);
-  }
-  return n;
-}
-function N() {
-  v.clear();
-}
-function E(e, n, r, t) {
-  if (e.critical) {
-    n.push(t);
-    return;
-  }
-  r.push(
-    `Demiurge started without a valid value for ${t.key}. ${t.message} A request that needs this value fails.`
-  );
-}
-function O(e, n) {
-  const r = {
-    ...n.options,
-    client: n.client,
-    critical: n.critical,
-    optional: n.optional
-  };
-  if (n.kind === "boolean") return l.boolean(r);
-  if (n.kind === "integer") return l.integer(r);
-  if (n.kind === "secret") return l.secret(r);
-  if (n.kind === "url") return l.url(r);
-  if (n.kind === "enum") {
-    const t = n.options.values;
-    if (!Array.isArray(t) || !t.length)
-      throw new Error(
-        `The environment variable ${e} does not have the values of its enum.`
-      );
-    return l.enum(t, r);
-  }
-  return l.string(r);
-}
-function V(e) {
-  return Object.values(e).every(
-    (n) => "parse" in n && typeof n.parse == "function"
-  );
-}
-function q() {
-  return globalThis.process?.env ?? {};
-}
-function x(e) {
-  globalThis.console?.warn?.(e);
-}
-export {
-  g as E,
-  y as a,
-  N as b,
-  T as c,
-  L as d,
-  l as e,
-  z as r,
-  D as s,
-  A as v
-};
-//# sourceMappingURL=env-startup-DOBYWlZD.js.map

package/dist/chunks/env-startup-DOBYWlZD.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env-startup-DOBYWlZD.js","sources":["../../src/security/env.ts","../../src/security/env-startup.ts"],"sourcesContent":["export type EnvSource = Record<string, string | undefined>;\n\nexport type EnvValidationIssue = {\n  code: \"invalid\" | \"missing\";\n  key: string;\n  message: string;\n};\n\nexport class EnvValidationError extends Error {\n  issues: EnvValidationIssue[];\n\n  constructor(issues: EnvValidationIssue[]) {\n    super(formatEnvValidationError(issues));\n    this.name = \"EnvValidationError\";\n    this.issues = issues;\n  }\n}\n\nexport type EnvVariableKind =\n  | \"boolean\"\n  | \"enum\"\n  | \"integer\"\n  | \"secret\"\n  | \"string\"\n  | \"url\";\n\n// The serializable description of one variable. The framework writes this\n// description into the generated server entry, so the schema of the\n// configuration file reaches the production process without the file.\nexport type EnvVariableDescriptor = {\n  // A client variable reaches the browser bundle. The build refuses a client\n  // bundle that reads a variable which this field does not mark.\n  client: boolean;\n  critical: boolean;\n  kind: EnvVariableKind;\n  optional: boolean;\n  options: Record<string, unknown>;\n  sensitive: boolean;\n};\n\nexport type EnvSchemaDescriptor = Record<string, EnvVariableDescriptor>;\n\nexport type EnvVariable<T, Optional extends boolean = false> =\n  & Omit<EnvVariableDescriptor, \"optional\">\n  & {\n    optional: Optional;\n    parse: (key: string, value: string) => T;\n  };\n\nexport type EnvSchema = Record<string, EnvVariable<unknown, boolean>>;\n\nexport type InferEnvSchema<Schema extends EnvSchema> = {\n  [Key in keyof Schema]: Schema[Key] extends EnvVariable<infer Value, infer Optional>\n    ? Optional extends true\n      ? Value | undefined\n      : Value\n    : never;\n};\n\ntype SharedEnvVariableOptions = {\n  // A client variable reaches the browser bundle. The build inlines its value.\n  // The default value is false, and the value then stays on the server.\n  client?: boolean;\n  // A critical variable stops the server start when it is absent or invalid.\n  critical?: boolean;\n};\n\ntype RequiredEnvVariableOptions = SharedEnvVariableOptions & {\n  optional?: false;\n};\n\ntype OptionalEnvVariableOptions = SharedEnvVariableOptions & {\n  optional: true;\n};\n\ntype EnvVariableOptions = RequiredEnvVariableOptions | OptionalEnvVariableOptions;\n\ntype RequiredStringEnvOptions = RequiredEnvVariableOptions & {\n  minLength?: number;\n};\n\ntype OptionalStringEnvOptions = OptionalEnvVariableOptions & {\n  minLength?: number;\n};\n\ntype StringEnvOptions = RequiredStringEnvOptions | OptionalStringEnvOptions;\n\n// A secret variable never reaches the browser. The option is absent from the\n// type of the builder, and the builder also refuses it at run time.\ntype RequiredSecretEnvOptions = RequiredStringEnvOptions & { client?: never };\n\ntype OptionalSecretEnvOptions = OptionalStringEnvOptions & { client?: never };\n\ntype SecretEnvOptions = RequiredSecretEnvOptions | OptionalSecretEnvOptions;\n\ntype RequiredUrlEnvOptions = RequiredEnvVariableOptions & {\n  protocols?: readonly string[];\n};\n\ntype OptionalUrlEnvOptions = OptionalEnvVariableOptions & {\n  protocols?: readonly string[];\n};\n\ntype UrlEnvOptions = RequiredUrlEnvOptions | OptionalUrlEnvOptions;\n\ntype RequiredIntegerEnvOptions = RequiredEnvVariableOptions & {\n  max?: number;\n  min?: number;\n};\n\ntype OptionalIntegerEnvOptions = OptionalEnvVariableOptions & {\n  max?: number;\n  min?: number;\n};\n\ntype IntegerEnvOptions = RequiredIntegerEnvOptions | OptionalIntegerEnvOptions;\n\nexport function defineEnvSchema<Schema extends EnvSchema>(schema: Schema) {\n  return schema;\n}\n\nexport function validateEnv<Schema extends EnvSchema>(\n  schema: Schema,\n  source: EnvSource,\n): InferEnvSchema<Schema> {\n  const issues: EnvValidationIssue[] = [];\n  const values: Partial<Record<keyof Schema, unknown>> = {};\n\n  // TYPE-EVIDENCE: Object.keys returns the schema keys as strings. The cast narrows them to the schema key type because they come from the schema.\n  for (const key of Object.keys(schema) as Array<keyof Schema>) {\n    const variable = schema[key];\n    const rawValue = source[String(key)];\n\n    if (rawValue === undefined || rawValue === \"\") {\n      if (variable.optional) {\n        values[key] = undefined;\n        continue;\n      }\n\n      issues.push({\n        code: \"missing\",\n        key: String(key),\n        message: `Environment variable ${String(key)} is required.`,\n      });\n      continue;\n    }\n\n    try {\n      values[key] = variable.parse(String(key), rawValue);\n    } catch (error) {\n      issues.push({\n        code: \"invalid\",\n        key: String(key),\n        message: error instanceof Error\n          ? error.message\n          : `Environment variable ${String(key)} is invalid.`,\n      });\n    }\n  }\n\n  if (issues.length) {\n    throw new EnvValidationError(issues);\n  }\n\n  // TYPE-EVIDENCE: the loop above populated values from the validated schema entries. The cast restores the inferred schema type.\n  return values as InferEnvSchema<Schema>;\n}\n\nfunction booleanEnv(options: OptionalEnvVariableOptions): EnvVariable<boolean, true>;\nfunction booleanEnv(options?: RequiredEnvVariableOptions): EnvVariable<boolean, false>;\nfunction booleanEnv(options: EnvVariableOptions = {}) {\n  return createVariable(options, false, (key, value) => {\n    if (value === \"true\" || value === \"1\") {\n      return true;\n    }\n\n    if (value === \"false\" || value === \"0\") {\n      return false;\n    }\n\n    throw new Error(`Environment variable ${key} must be true, false, 1, or 0.`);\n  }, \"boolean\");\n}\n\nfunction enumEnv<const Values extends readonly [string, ...string[]]>(\n  values: Values,\n  options: OptionalEnvVariableOptions,\n): EnvVariable<Values[number], true>;\nfunction enumEnv<const Values extends readonly [string, ...string[]]>(\n  values: Values,\n  options?: RequiredEnvVariableOptions,\n): EnvVariable<Values[number], false>;\nfunction enumEnv<const Values extends readonly [string, ...string[]]>(\n  values: Values,\n  options: EnvVariableOptions = {},\n) {\n  return createVariable(options, false, (key, value) => {\n    if (values.includes(value)) {\n      return value;\n    }\n\n    throw new Error(\n      `Environment variable ${key} must be one of: ${values.join(\", \")}.`,\n    );\n  }, \"enum\", { values: [...values] });\n}\n\nfunction integerEnv(options: OptionalIntegerEnvOptions): EnvVariable<number, true>;\nfunction integerEnv(options?: RequiredIntegerEnvOptions): EnvVariable<number, false>;\nfunction integerEnv(options: IntegerEnvOptions = {}) {\n  return createVariable(options, false, (key, value) => {\n    if (!/^-?\\d+$/.test(value)) {\n      throw new Error(`Environment variable ${key} must be an integer.`);\n    }\n\n    const parsed = Number(value);\n\n    if (!Number.isSafeInteger(parsed)) {\n      throw new Error(`Environment variable ${key} must be a safe integer.`);\n    }\n\n    if (options.min !== undefined && parsed < options.min) {\n      throw new Error(\n        `Environment variable ${key} must be greater than or equal to ${options.min}.`,\n      );\n    }\n\n    if (options.max !== undefined && parsed > options.max) {\n      throw new Error(\n        `Environment variable ${key} must be less than or equal to ${options.max}.`,\n      );\n    }\n\n    return parsed;\n  }, \"integer\");\n}\n\nfunction secretEnv(options: OptionalSecretEnvOptions): EnvVariable<string, true>;\nfunction secretEnv(options?: RequiredSecretEnvOptions): EnvVariable<string, false>;\nfunction secretEnv(options: SecretEnvOptions = {}) {\n  return createVariable(\n    options,\n    true,\n    (key, value) => parseString(key, value, options),\n    \"secret\",\n  );\n}\n\nfunction stringEnv(options: OptionalStringEnvOptions): EnvVariable<string, true>;\nfunction stringEnv(options?: RequiredStringEnvOptions): EnvVariable<string, false>;\nfunction stringEnv(options: StringEnvOptions = {}) {\n  return createVariable(\n    options,\n    false,\n    (key, value) => parseString(key, value, options),\n    \"string\",\n  );\n}\n\nfunction urlEnv(options: OptionalUrlEnvOptions): EnvVariable<URL, true>;\nfunction urlEnv(options?: RequiredUrlEnvOptions): EnvVariable<URL, false>;\nfunction urlEnv(options: UrlEnvOptions = {}) {\n  return createVariable(options, false, (key, value) => {\n    let url: URL;\n\n    try {\n      url = new URL(value);\n    } catch {\n      throw new Error(`Environment variable ${key} must be a valid URL.`);\n    }\n\n    if (\n      options.protocols?.length &&\n      !options.protocols.includes(url.protocol)\n    ) {\n      throw new Error(\n        `Environment variable ${key} must use one of these protocols: ${options.protocols.join(\", \")}.`,\n      );\n    }\n\n    return url;\n  }, \"url\");\n}\n\nexport const env = {\n  boolean: booleanEnv,\n  enum: enumEnv,\n  integer: integerEnv,\n  secret: secretEnv,\n  string: stringEnv,\n  url: urlEnv,\n};\n\nfunction createVariable<T>(\n  options: EnvVariableOptions,\n  sensitive: boolean,\n  parse: (key: string, value: string) => T,\n  kind: EnvVariableKind = \"string\",\n  extra: Record<string, unknown> = {},\n): EnvVariable<T, boolean> {\n  // TYPE-EVIDENCE: each builder passes its own declared options and its own extra values. The cast reads the shared options and keeps the rest as the serializable description.\n  const merged = { ...options, ...extra } as\n    & Record<string, unknown>\n    & EnvVariableOptions\n    & { client?: boolean };\n  const { client = false, critical = false, optional = false, ...rest } = merged;\n\n  if (client && sensitive) {\n    throw new Error(\n      \"A secret environment variable cannot reach client code. Declare a separate variable for the browser.\",\n    );\n  }\n\n  return {\n    client,\n    critical,\n    kind,\n    optional,\n    options: rest,\n    parse,\n    sensitive,\n  };\n}\n\nfunction parseString(\n  key: string,\n  value: string,\n  options: StringEnvOptions,\n) {\n  if (options.minLength !== undefined && value.length < options.minLength) {\n    throw new Error(\n      `Environment variable ${key} must be at least ${options.minLength} characters.`,\n    );\n  }\n\n  return value;\n}\n\nfunction formatEnvValidationError(issues: EnvValidationIssue[]) {\n  if (issues.length === 1) {\n    return issues[0].message;\n  }\n\n  return `Environment validation failed with ${issues.length} issues.`;\n}\n","import {\n  env,\n  EnvValidationError,\n  type EnvSchema,\n  type EnvSchemaDescriptor,\n  type EnvSource,\n  type EnvValidationIssue,\n  type EnvVariable,\n  type EnvVariableDescriptor,\n  type InferEnvSchema,\n} from \"./env\";\n\nexport type EnvStartupOptions = {\n  source?: EnvSource;\n  warn?: (message: string) => void;\n};\n\nexport type EnvStartupResult = {\n  values: Record<string, unknown>;\n  warnings: string[];\n};\n\nconst initialized = new Map<string, unknown>();\n\n// The configuration file declares the schema. The build writes this\n// description into the generated server entry, because the production process\n// does not read the configuration file.\nexport function serializeEnvSchema(schema: EnvSchema): EnvSchemaDescriptor {\n  return Object.fromEntries(\n    Object.entries(schema).map(([key, variable]) => [key, {\n      client: variable.client,\n      critical: variable.critical,\n      kind: variable.kind,\n      optional: variable.optional,\n      options: variable.options,\n      sensitive: variable.sensitive,\n    }]),\n  );\n}\n\nexport function deserializeEnvSchema(\n  descriptor: EnvSchemaDescriptor,\n): EnvSchema {\n  return Object.fromEntries(\n    Object.entries(descriptor).map(([key, variable]) => [\n      key,\n      createVariableFromDescriptor(key, variable),\n    ]),\n  );\n}\n\n// The server entry calls this function while the module graph loads. A\n// critical failure therefore stops the process before it accepts traffic.\nexport function startEnvironment(\n  schema: EnvSchema | EnvSchemaDescriptor,\n  options: EnvStartupOptions = {},\n): EnvStartupResult {\n  const resolved = isEnvSchema(schema) ? schema : deserializeEnvSchema(schema);\n  const source = options.source ?? readProcessEnvironment();\n  const critical: EnvValidationIssue[] = [];\n  const warnings: string[] = [];\n  const values: Record<string, unknown> = {};\n\n  for (const [key, variable] of Object.entries(resolved)) {\n    const rawValue = source[key];\n\n    if (rawValue === undefined || rawValue === \"\") {\n      values[key] = undefined;\n      if (variable.optional) continue;\n      record(variable, critical, warnings, {\n        code: \"missing\",\n        key,\n        message: `Environment variable ${key} is required.`,\n      });\n      continue;\n    }\n\n    try {\n      values[key] = variable.parse(key, rawValue);\n    } catch (error) {\n      values[key] = undefined;\n      record(variable, critical, warnings, {\n        code: \"invalid\",\n        key,\n        message: error instanceof Error\n          ? error.message\n          : `Environment variable ${key} is invalid.`,\n      });\n    }\n  }\n\n  if (critical.length) throw new EnvValidationError(critical);\n\n  const warn = options.warn ?? defaultWarn;\n  for (const warning of warnings) warn(warning);\n  for (const [key, value] of Object.entries(values)) initialized.set(key, value);\n\n  return { values, warnings };\n}\n\n// Applications read the validated values with the types that the schema\n// declares. This function is server-only.\nexport function readEnv<Schema extends EnvSchema>(\n  schema: Schema,\n): InferEnvSchema<Schema> {\n  const values: Record<string, unknown> = {};\n\n  for (const key of Object.keys(schema)) {\n    if (!initialized.has(key)) {\n      throw new Error(\n        `Demiurge did not validate the environment variable ${key}. The framework validates the schema of demiurge.config.ts when the server starts.`,\n      );\n    }\n    values[key] = initialized.get(key);\n  }\n\n  // TYPE-EVIDENCE: startEnvironment parsed each value with the same schema. The cast restores the inferred schema type.\n  return values as InferEnvSchema<Schema>;\n}\n\nexport function resetEnvironment() {\n  initialized.clear();\n}\n\nfunction record(\n  variable: { critical: boolean },\n  critical: EnvValidationIssue[],\n  warnings: string[],\n  issue: EnvValidationIssue,\n) {\n  if (variable.critical) {\n    critical.push(issue);\n    return;\n  }\n  warnings.push(\n    `Demiurge started without a valid value for ${issue.key}. ${issue.message} A request that needs this value fails.`,\n  );\n}\n\nfunction createVariableFromDescriptor(\n  key: string,\n  descriptor: EnvVariableDescriptor,\n): EnvVariable<unknown, boolean> {\n  // TYPE-EVIDENCE: serializeEnvSchema wrote these options from a builder call. The cast returns them to the overloaded builder parameter.\n  const options = {\n    ...descriptor.options,\n    client: descriptor.client,\n    critical: descriptor.critical,\n    optional: descriptor.optional,\n  } as never;\n\n  if (descriptor.kind === \"boolean\") return env.boolean(options);\n  if (descriptor.kind === \"integer\") return env.integer(options);\n  if (descriptor.kind === \"secret\") return env.secret(options);\n  if (descriptor.kind === \"url\") return env.url(options);\n  if (descriptor.kind === \"enum\") {\n    const values = descriptor.options.values;\n    if (!Array.isArray(values) || !values.length) {\n      throw new Error(\n        `The environment variable ${key} does not have the values of its enum.`,\n      );\n    }\n    // TYPE-EVIDENCE: the descriptor keeps the declared enum values. The cast restores the tuple type that the builder needs.\n    return env.enum(values as [string, ...string[]], options);\n  }\n  return env.string(options);\n}\n\nfunction isEnvSchema(\n  schema: EnvSchema | EnvSchemaDescriptor,\n): schema is EnvSchema {\n  return Object.values(schema).every(\n    (variable) => \"parse\" in variable && typeof variable.parse === \"function\",\n  );\n}\n\nfunction readProcessEnvironment(): EnvSource {\n  // TYPE-EVIDENCE: the framework runs this function on a server runtime. The cast reads the process environment without a Node type dependency here.\n  const runtime = globalThis as { process?: { env?: EnvSource } };\n  return runtime.process?.env ?? {};\n}\n\nfunction defaultWarn(message: string) {\n  // TYPE-EVIDENCE: a server runtime supplies console. The cast keeps the warning optional.\n  const runtime = globalThis as {\n    console?: { warn?: (message: string) => void };\n  };\n  runtime.console?.warn?.(message);\n}\n"],"names":["EnvValidationError","issues","formatEnvValidationError","defineEnvSchema","schema","validateEnv","source","values","key","variable","rawValue","error","booleanEnv","options","createVariable","value","enumEnv","integerEnv","parsed","secretEnv","parseString","stringEnv","urlEnv","url","env","sensitive","parse","kind","extra","merged","client","critical","optional","rest","initialized","serializeEnvSchema","deserializeEnvSchema","descriptor","createVariableFromDescriptor","startEnvironment","resolved","isEnvSchema","readProcessEnvironment","warnings","record","warn","defaultWarn","warning","readEnv","resetEnvironment","issue","message"],"mappings":"AAQO,MAAMA,UAA2B,MAAM;AAAA,EAC5C;AAAA,EAEA,YAAYC,GAA8B;AACxC,UAAMC,EAAyBD,CAAM,CAAC,GACtC,KAAK,OAAO,sBACZ,KAAK,SAASA;AAAA,EAChB;AACF;AAqGO,SAASE,EAA0CC,GAAgB;AACxE,SAAOA;AACT;AAEO,SAASC,EACdD,GACAE,GACwB;AACxB,QAAML,IAA+B,CAAA,GAC/BM,IAAiD,CAAA;AAGvD,aAAWC,KAAO,OAAO,KAAKJ,CAAM,GAA0B;AAC5D,UAAMK,IAAWL,EAAOI,CAAG,GACrBE,IAAWJ,EAAO,OAAOE,CAAG,CAAC;AAEnC,QAAIE,MAAa,UAAaA,MAAa,IAAI;AAC7C,UAAID,EAAS,UAAU;AACrB,QAAAF,EAAOC,CAAG,IAAI;AACd;AAAA,MACF;AAEA,MAAAP,EAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,KAAK,OAAOO,CAAG;AAAA,QACf,SAAS,wBAAwB,OAAOA,CAAG,CAAC;AAAA,MAAA,CAC7C;AACD;AAAA,IACF;AAEA,QAAI;AACF,MAAAD,EAAOC,CAAG,IAAIC,EAAS,MAAM,OAAOD,CAAG,GAAGE,CAAQ;AAAA,IACpD,SAASC,GAAO;AACd,MAAAV,EAAO,KAAK;AAAA,QACV,MAAM;AAAA,QACN,KAAK,OAAOO,CAAG;AAAA,QACf,SAASG,aAAiB,QACtBA,EAAM,UACN,wBAAwB,OAAOH,CAAG,CAAC;AAAA,MAAA,CACxC;AAAA,IACH;AAAA,EACF;AAEA,MAAIP,EAAO;AACT,UAAM,IAAID,EAAmBC,CAAM;AAIrC,SAAOM;AACT;AAIA,SAASK,EAAWC,IAA8B,IAAI;AACpD,SAAOC,EAAeD,GAAS,IAAO,CAACL,GAAKO,MAAU;AACpD,QAAIA,MAAU,UAAUA,MAAU;AAChC,aAAO;AAGT,QAAIA,MAAU,WAAWA,MAAU;AACjC,aAAO;AAGT,UAAM,IAAI,MAAM,wBAAwBP,CAAG,gCAAgC;AAAA,EAC7E,GAAG,SAAS;AACd;AAUA,SAASQ,EACPT,GACAM,IAA8B,IAC9B;AACA,SAAOC,EAAeD,GAAS,IAAO,CAACL,GAAKO,MAAU;AACpD,QAAIR,EAAO,SAASQ,CAAK;AACvB,aAAOA;AAGT,UAAM,IAAI;AAAA,MACR,wBAAwBP,CAAG,oBAAoBD,EAAO,KAAK,IAAI,CAAC;AAAA,IAAA;AAAA,EAEpE,GAAG,QAAQ,EAAE,QAAQ,CAAC,GAAGA,CAAM,GAAG;AACpC;AAIA,SAASU,EAAWJ,IAA6B,IAAI;AACnD,SAAOC,EAAeD,GAAS,IAAO,CAACL,GAAKO,MAAU;AACpD,QAAI,CAAC,UAAU,KAAKA,CAAK;AACvB,YAAM,IAAI,MAAM,wBAAwBP,CAAG,sBAAsB;AAGnE,UAAMU,IAAS,OAAOH,CAAK;AAE3B,QAAI,CAAC,OAAO,cAAcG,CAAM;AAC9B,YAAM,IAAI,MAAM,wBAAwBV,CAAG,0BAA0B;AAGvE,QAAIK,EAAQ,QAAQ,UAAaK,IAASL,EAAQ;AAChD,YAAM,IAAI;AAAA,QACR,wBAAwBL,CAAG,qCAAqCK,EAAQ,GAAG;AAAA,MAAA;AAI/E,QAAIA,EAAQ,QAAQ,UAAaK,IAASL,EAAQ;AAChD,YAAM,IAAI;AAAA,QACR,wBAAwBL,CAAG,kCAAkCK,EAAQ,GAAG;AAAA,MAAA;AAI5E,WAAOK;AAAA,EACT,GAAG,SAAS;AACd;AAIA,SAASC,EAAUN,IAA4B,IAAI;AACjD,SAAOC;AAAA,IACLD;AAAA,IACA;AAAA,IACA,CAACL,GAAKO,MAAUK,EAAYZ,GAAKO,GAAOF,CAAO;AAAA,IAC/C;AAAA,EAAA;AAEJ;AAIA,SAASQ,EAAUR,IAA4B,IAAI;AACjD,SAAOC;AAAA,IACLD;AAAA,IACA;AAAA,IACA,CAACL,GAAKO,MAAUK,EAAYZ,GAAKO,GAAOF,CAAO;AAAA,IAC/C;AAAA,EAAA;AAEJ;AAIA,SAASS,EAAOT,IAAyB,IAAI;AAC3C,SAAOC,EAAeD,GAAS,IAAO,CAACL,GAAKO,MAAU;AACpD,QAAIQ;AAEJ,QAAI;AACF,MAAAA,IAAM,IAAI,IAAIR,CAAK;AAAA,IACrB,QAAQ;AACN,YAAM,IAAI,MAAM,wBAAwBP,CAAG,uBAAuB;AAAA,IACpE;AAEA,QACEK,EAAQ,WAAW,UACnB,CAACA,EAAQ,UAAU,SAASU,EAAI,QAAQ;AAExC,YAAM,IAAI;AAAA,QACR,wBAAwBf,CAAG,qCAAqCK,EAAQ,UAAU,KAAK,IAAI,CAAC;AAAA,MAAA;AAIhG,WAAOU;AAAA,EACT,GAAG,KAAK;AACV;AAEO,MAAMC,IAAM;AAAA,EACjB,SAASZ;AAAA,EACT,MAAMI;AAAA,EACN,SAASC;AAAA,EACT,QAAQE;AAAA,EACR,QAAQE;AAAA,EACR,KAAKC;AACP;AAEA,SAASR,EACPD,GACAY,GACAC,GACAC,IAAwB,UACxBC,IAAiC,IACR;AAEzB,QAAMC,IAAS,EAAE,GAAGhB,GAAS,GAAGe,EAAA,GAI1B,EAAE,QAAAE,IAAS,IAAO,UAAAC,IAAW,IAAO,UAAAC,IAAW,IAAO,GAAGC,EAAA,IAASJ;AAExE,MAAIC,KAAUL;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,SAAO;AAAA,IACL,QAAAK;AAAA,IACA,UAAAC;AAAA,IACA,MAAAJ;AAAA,IACA,UAAAK;AAAA,IACA,SAASC;AAAA,IACT,OAAAP;AAAA,IACA,WAAAD;AAAA,EAAA;AAEJ;AAEA,SAASL,EACPZ,GACAO,GACAF,GACA;AACA,MAAIA,EAAQ,cAAc,UAAaE,EAAM,SAASF,EAAQ;AAC5D,UAAM,IAAI;AAAA,MACR,wBAAwBL,CAAG,qBAAqBK,EAAQ,SAAS;AAAA,IAAA;AAIrE,SAAOE;AACT;AAEA,SAASb,EAAyBD,GAA8B;AAC9D,SAAIA,EAAO,WAAW,IACbA,EAAO,CAAC,EAAE,UAGZ,sCAAsCA,EAAO,MAAM;AAC5D;AClUA,MAAMiC,wBAAkB,IAAA;AAKjB,SAASC,EAAmB/B,GAAwC;AACzE,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQA,CAAM,EAAE,IAAI,CAAC,CAACI,GAAKC,CAAQ,MAAM,CAACD,GAAK;AAAA,MACpD,QAAQC,EAAS;AAAA,MACjB,UAAUA,EAAS;AAAA,MACnB,MAAMA,EAAS;AAAA,MACf,UAAUA,EAAS;AAAA,MACnB,SAASA,EAAS;AAAA,MAClB,WAAWA,EAAS;AAAA,IAAA,CACrB,CAAC;AAAA,EAAA;AAEN;AAEO,SAAS2B,EACdC,GACW;AACX,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQA,CAAU,EAAE,IAAI,CAAC,CAAC7B,GAAKC,CAAQ,MAAM;AAAA,MAClDD;AAAA,MACA8B,EAA6B9B,GAAKC,CAAQ;AAAA,IAAA,CAC3C;AAAA,EAAA;AAEL;AAIO,SAAS8B,EACdnC,GACAS,IAA6B,IACX;AAClB,QAAM2B,IAAWC,EAAYrC,CAAM,IAAIA,IAASgC,EAAqBhC,CAAM,GACrEE,IAASO,EAAQ,UAAU6B,EAAA,GAC3BX,IAAiC,CAAA,GACjCY,IAAqB,CAAA,GACrBpC,IAAkC,CAAA;AAExC,aAAW,CAACC,GAAKC,CAAQ,KAAK,OAAO,QAAQ+B,CAAQ,GAAG;AACtD,UAAM9B,IAAWJ,EAAOE,CAAG;AAE3B,QAAIE,MAAa,UAAaA,MAAa,IAAI;AAE7C,UADAH,EAAOC,CAAG,IAAI,QACVC,EAAS,SAAU;AACvB,MAAAmC,EAAOnC,GAAUsB,GAAUY,GAAU;AAAA,QACnC,MAAM;AAAA,QACN,KAAAnC;AAAA,QACA,SAAS,wBAAwBA,CAAG;AAAA,MAAA,CACrC;AACD;AAAA,IACF;AAEA,QAAI;AACF,MAAAD,EAAOC,CAAG,IAAIC,EAAS,MAAMD,GAAKE,CAAQ;AAAA,IAC5C,SAASC,GAAO;AACd,MAAAJ,EAAOC,CAAG,IAAI,QACdoC,EAAOnC,GAAUsB,GAAUY,GAAU;AAAA,QACnC,MAAM;AAAA,QACN,KAAAnC;AAAA,QACA,SAASG,aAAiB,QACtBA,EAAM,UACN,wBAAwBH,CAAG;AAAA,MAAA,CAChC;AAAA,IACH;AAAA,EACF;AAEA,MAAIuB,EAAS,OAAQ,OAAM,IAAI/B,EAAmB+B,CAAQ;AAE1D,QAAMc,IAAOhC,EAAQ,QAAQiC;AAC7B,aAAWC,KAAWJ,EAAU,CAAAE,EAAKE,CAAO;AAC5C,aAAW,CAACvC,GAAKO,CAAK,KAAK,OAAO,QAAQR,CAAM,EAAG,CAAA2B,EAAY,IAAI1B,GAAKO,CAAK;AAE7E,SAAO,EAAE,QAAAR,GAAQ,UAAAoC,EAAA;AACnB;AAIO,SAASK,EACd5C,GACwB;AACxB,QAAMG,IAAkC,CAAA;AAExC,aAAWC,KAAO,OAAO,KAAKJ,CAAM,GAAG;AACrC,QAAI,CAAC8B,EAAY,IAAI1B,CAAG;AACtB,YAAM,IAAI;AAAA,QACR,sDAAsDA,CAAG;AAAA,MAAA;AAG7D,IAAAD,EAAOC,CAAG,IAAI0B,EAAY,IAAI1B,CAAG;AAAA,EACnC;AAGA,SAAOD;AACT;AAEO,SAAS0C,IAAmB;AACjC,EAAAf,EAAY,MAAA;AACd;AAEA,SAASU,EACPnC,GACAsB,GACAY,GACAO,GACA;AACA,MAAIzC,EAAS,UAAU;AACrB,IAAAsB,EAAS,KAAKmB,CAAK;AACnB;AAAA,EACF;AACA,EAAAP,EAAS;AAAA,IACP,8CAA8CO,EAAM,GAAG,KAAKA,EAAM,OAAO;AAAA,EAAA;AAE7E;AAEA,SAASZ,EACP9B,GACA6B,GAC+B;AAE/B,QAAMxB,IAAU;AAAA,IACd,GAAGwB,EAAW;AAAA,IACd,QAAQA,EAAW;AAAA,IACnB,UAAUA,EAAW;AAAA,IACrB,UAAUA,EAAW;AAAA,EAAA;AAGvB,MAAIA,EAAW,SAAS,UAAW,QAAOb,EAAI,QAAQX,CAAO;AAC7D,MAAIwB,EAAW,SAAS,UAAW,QAAOb,EAAI,QAAQX,CAAO;AAC7D,MAAIwB,EAAW,SAAS,SAAU,QAAOb,EAAI,OAAOX,CAAO;AAC3D,MAAIwB,EAAW,SAAS,MAAO,QAAOb,EAAI,IAAIX,CAAO;AACrD,MAAIwB,EAAW,SAAS,QAAQ;AAC9B,UAAM9B,IAAS8B,EAAW,QAAQ;AAClC,QAAI,CAAC,MAAM,QAAQ9B,CAAM,KAAK,CAACA,EAAO;AACpC,YAAM,IAAI;AAAA,QACR,4BAA4BC,CAAG;AAAA,MAAA;AAInC,WAAOgB,EAAI,KAAKjB,GAAiCM,CAAO;AAAA,EAC1D;AACA,SAAOW,EAAI,OAAOX,CAAO;AAC3B;AAEA,SAAS4B,EACPrC,GACqB;AACrB,SAAO,OAAO,OAAOA,CAAM,EAAE;AAAA,IAC3B,CAACK,MAAa,WAAWA,KAAY,OAAOA,EAAS,SAAU;AAAA,EAAA;AAEnE;AAEA,SAASiC,IAAoC;AAG3C,SADgB,WACD,SAAS,OAAO,CAAA;AACjC;AAEA,SAASI,EAAYK,GAAiB;AAKpC,EAHgB,WAGR,SAAS,OAAOA,CAAO;AACjC;"}