@dotdo/postgres 0.1.0

package/dist/readonly/cache-reader.js

@@ -0,0 +1,198 @@
+/**
+ * Cache-First Read Path
+ *
+ * Reads from Cloudflare Cache first, falls back to R2.
+ * Cache is FREE on Cloudflare! This is a cost-saving feature.
+ */
+/**
+ * Default cache configuration
+ */
+const DEFAULT_CACHE_CONFIG = {
+    enabled: true,
+    ttlSeconds: 300,
+    useStale: true,
+    keyPrefix: 'postgres-readonly:',
+};
+/**
+ * Cache-first reader for database files.
+ *
+ * Reads from Cloudflare Cache (FREE!) first, falls back to R2.
+ */
+export class CacheReader {
+    r2;
+    cache;
+    r2Config;
+    cacheConfig;
+    stats = {
+        cacheHits: 0,
+        cacheMisses: 0,
+    };
+    constructor(r2, cache, r2Config, cacheConfig) {
+        this.r2 = r2;
+        this.cache = cache;
+        this.r2Config = r2Config;
+        this.cacheConfig = {
+            ...DEFAULT_CACHE_CONFIG,
+            ...cacheConfig,
+        };
+    }
+    /**
+     * Build the R2 key from a file path
+     */
+    buildR2Key(path) {
+        const prefix = this.r2Config.prefix || '';
+        return `${prefix}${path}`;
+    }
+    /**
+     * Build the cache key from a file path
+     */
+    buildCacheKey(path) {
+        const r2Key = this.buildR2Key(path);
+        return `${this.cacheConfig.keyPrefix}${this.r2Config.bucket}/${r2Key}`;
+    }
+    /**
+     * Build Cache-Control header based on config
+     */
+    buildCacheControl() {
+        const parts = [`max-age=${this.cacheConfig.ttlSeconds}`];
+        if (this.cacheConfig.useStale) {
+            // Use stale-while-revalidate for better performance
+            // Allow serving stale content for same duration as TTL while revalidating
+            parts.push(`stale-while-revalidate=${this.cacheConfig.ttlSeconds}`);
+        }
+        return parts.join(', ');
+    }
+    /**
+     * Read a file, checking cache first then R2.
+     *
+     * @param path - The file path relative to R2 prefix
+     * @returns The cache result or null if not found
+     */
+    async read(path) {
+        const cacheKey = this.buildCacheKey(path);
+        // Skip cache if disabled
+        if (this.cacheConfig.enabled) {
+            // Try cache first
+            const cachedResponse = await this.cache.match(cacheKey);
+            if (cachedResponse) {
+                this.stats.cacheHits++;
+                const data = await cachedResponse.arrayBuffer();
+                return { data, source: 'cache' };
+            }
+        }
+        // Cache miss - read from R2
+        const r2Key = this.buildR2Key(path);
+        const r2Object = await this.r2.get(r2Key);
+        if (!r2Object) {
+            if (this.cacheConfig.enabled) {
+                this.stats.cacheMisses++;
+            }
+            return null;
+        }
+        this.stats.cacheMisses++;
+        // Get data from R2
+        const data = await r2Object.arrayBuffer();
+        // Cache the data for next time (if caching is enabled)
+        if (this.cacheConfig.enabled) {
+            const response = new Response(data, {
+                headers: {
+                    'Content-Type': 'application/octet-stream',
+                    'Content-Length': String(data.byteLength),
+                    'Cache-Control': this.buildCacheControl(),
+                    'ETag': r2Object.etag,
+                },
+            });
+            // Don't await cache put - fire and forget for better performance
+            void this.cache.put(cacheKey, response).catch(() => {
+                // Ignore cache put errors
+            });
+        }
+        return { data, source: 'r2' };
+    }
+    /**
+     * Read a file with metadata.
+     *
+     * @param path - The file path relative to R2 prefix
+     * @returns The cache result with metadata or null if not found
+     */
+    async readWithMetadata(path) {
+        // Skip cache for metadata reads - always go to R2
+        const r2Key = this.buildR2Key(path);
+        const r2Object = await this.r2.get(r2Key);
+        if (!r2Object) {
+            return null;
+        }
+        const data = await r2Object.arrayBuffer();
+        const result = {
+            data,
+            source: 'r2',
+            size: r2Object.size,
+            etag: r2Object.etag,
+        };
+        if (r2Object.customMetadata !== undefined) {
+            result.metadata = r2Object.customMetadata;
+        }
+        return result;
+    }
+    /**
+     * Check if a file exists.
+     *
+     * @param path - The file path relative to R2 prefix
+     * @returns true if the file exists
+     */
+    async exists(path) {
+        const cacheKey = this.buildCacheKey(path);
+        // Check cache first if enabled
+        if (this.cacheConfig.enabled) {
+            const cachedResponse = await this.cache.match(cacheKey);
+            if (cachedResponse) {
+                return true;
+            }
+        }
+        // Fall back to R2 head
+        const r2Key = this.buildR2Key(path);
+        const headResult = await this.r2.head(r2Key);
+        return headResult !== null;
+    }
+    /**
+     * Invalidate a cached file.
+     *
+     * @param path - The file path relative to R2 prefix
+     */
+    async invalidate(path) {
+        const cacheKey = this.buildCacheKey(path);
+        if (this.cache.delete) {
+            await this.cache.delete(cacheKey);
+        }
+    }
+    /**
+     * Get cache statistics.
+     */
+    getStats() {
+        const total = this.stats.cacheHits + this.stats.cacheMisses;
+        return {
+            cacheHits: this.stats.cacheHits,
+            cacheMisses: this.stats.cacheMisses,
+            hitRatio: total === 0 ? 0 : this.stats.cacheHits / total,
+        };
+    }
+    /**
+     * Reset cache statistics.
+     */
+    resetStats() {
+        this.stats = { cacheHits: 0, cacheMisses: 0 };
+    }
+}
+/**
+ * Create a cache reader.
+ *
+ * @param r2 - R2 bucket
+ * @param cache - Cloudflare Cache
+ * @param r2Config - R2 configuration
+ * @param cacheConfig - Cache configuration (optional)
+ * @returns A cache reader instance
+ */
+export function createCacheReader(r2, cache, r2Config, cacheConfig) {
+    return new CacheReader(r2, cache, r2Config, cacheConfig);
+}
+//# sourceMappingURL=cache-reader.js.map

package/dist/readonly/cache-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-reader.js","sourceRoot":"","sources":["../../src/readonly/cache-reader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8EH;;GAEG;AACH,MAAM,oBAAoB,GAA0B;IAClD,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,oBAAoB;CAChC,CAAA;AAED;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACL,EAAE,CAAmB;IACrB,KAAK,CAA+E;IACpF,QAAQ,CAAU;IAClB,WAAW,CAAuB;IAE3C,KAAK,GAA+C;QAC1D,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;KACf,CAAA;IAED,YACE,EAAqB,EACrB,KAAqB,EACrB,QAAkB,EAClB,WAAkC;QAElC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,KAAK,GAAG,KAAsF,CAAA;QACnG,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,WAAW,GAAG;YACjB,GAAG,oBAAoB;YACvB,GAAG,WAAW;SACf,CAAA;IACH,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,IAAY;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAA;QACzC,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAA;IAC3B,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,IAAY;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAA;IACxE,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,MAAM,KAAK,GAAG,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAA;QAExD,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC9B,oDAAoD;YACpD,0EAA0E;YAC1E,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAA;QACrE,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAEzC,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC7B,kBAAkB;YAClB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACvD,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAA;gBACtB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,CAAA;gBAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;YAClC,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;YAC1B,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;QAExB,mBAAmB;QACnB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;QAEzC,uDAAuD;QACvD,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE;gBAClC,OAAO,EAAE;oBACP,cAAc,EAAE,0BAA0B;oBAC1C,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACzC,eAAe,EAAE,IAAI,CAAC,iBAAiB,EAAE;oBACzC,MAAM,EAAE,QAAQ,CAAC,IAAI;iBACtB;aACF,CAAC,CAAA;YAEF,iEAAiE;YACjE,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjD,0BAA0B;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,kDAAkD;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;QAEzC,MAAM,MAAM,GAA4B;YACtC,IAAI;YACJ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAA;QACD,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAA;QAC3C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAEzC,+BAA+B;QAC/B,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACvD,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,OAAO,UAAU,KAAK,IAAI,CAAA;IAC5B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAEzC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAA;QAC3D,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAC/B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;YACnC,QAAQ,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK;SACzD,CAAA;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAC/C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,KAAqB,EACrB,QAAkB,EAClB,WAAkC;IAElC,OAAO,IAAI,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAC1D,CAAC"}

package/dist/readonly/config.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Read-Only Deployment Mode Configuration
+ *
+ * Security feature for deployments where writes are impossible.
+ * Workers read from R2 + Cloudflare Cache (free!) for read-only queries.
+ */
+/**
+ * R2 storage configuration for read-only mode
+ */
+export interface R2Config {
+    /** R2 bucket name */
+    bucket: string;
+    /** Key prefix for database files (default: '') */
+    prefix?: string;
+}
+/**
+ * Cache configuration for read-only mode
+ */
+export interface CacheConfig {
+    /** Whether caching is enabled (default: true) */
+    enabled?: boolean;
+    /** Cache TTL in seconds (default: 300 = 5 minutes) */
+    ttlSeconds?: number;
+    /** Use stale-while-revalidate for better performance (default: true) */
+    useStale?: boolean;
+    /** Cache key prefix (default: 'postgres-readonly:') */
+    keyPrefix?: string;
+}
+/**
+ * Action to take when a write is attempted in read-only mode
+ * - 'throw': Throw an error (default, recommended for security)
+ * - 'ignore': Silently ignore the write
+ * - 'log': Log the attempt and return empty result
+ */
+export type WriteAttemptAction = 'throw' | 'ignore' | 'log';
+/**
+ * Configuration for read-only deployment mode
+ */
+export interface ReadOnlyConfig {
+    /** Whether read-only mode is enabled */
+    enabled: boolean;
+    /** R2 bucket configuration */
+    r2?: R2Config;
+    /** Cache configuration */
+    cache?: CacheConfig;
+    /** Action to take on write attempts (default: 'throw') */
+    onWriteAttempt?: WriteAttemptAction;
+}
+/**
+ * Partial configuration for creating read-only config with defaults
+ */
+export type ReadOnlyConfigInput = Partial<Omit<ReadOnlyConfig, 'r2' | 'cache'>> & {
+    r2?: Partial<R2Config>;
+    cache?: Partial<CacheConfig>;
+};
+/**
+ * Default read-only configuration
+ */
+export declare const DEFAULT_READONLY_CONFIG: ReadOnlyConfig;
+/**
+ * Create a read-only configuration with defaults
+ *
+ * @param input - Partial configuration to merge with defaults
+ * @returns Complete read-only configuration
+ */
+export declare function createReadOnlyConfig(input?: ReadOnlyConfigInput): ReadOnlyConfig;
+/**
+ * Check if a configuration represents read-only mode
+ *
+ * @param config - Configuration to check
+ * @returns true if read-only mode is enabled
+ */
+export declare function isReadOnlyMode(config: ReadOnlyConfig | undefined | null): boolean;
+//# sourceMappingURL=config.d.ts.map

package/dist/readonly/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/readonly/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAA;AAE3D;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,8BAA8B;IAC9B,EAAE,CAAC,EAAE,QAAQ,CAAA;IACb,0BAA0B;IAC1B,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,kBAAkB,CAAA;CACpC;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG;IAChF,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;CAC7B,CAAA;AAYD;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAIrC,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,GAAE,mBAAwB,GAAG,cAAc,CA4BpF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAKjF"}

package/dist/readonly/config.js

@@ -0,0 +1,67 @@
+/**
+ * Read-Only Deployment Mode Configuration
+ *
+ * Security feature for deployments where writes are impossible.
+ * Workers read from R2 + Cloudflare Cache (free!) for read-only queries.
+ */
+/**
+ * Default cache configuration
+ */
+const DEFAULT_CACHE_CONFIG = {
+    enabled: true,
+    ttlSeconds: 300, // 5 minutes
+    useStale: true,
+    keyPrefix: 'postgres-readonly:',
+};
+/**
+ * Default read-only configuration
+ */
+export const DEFAULT_READONLY_CONFIG = {
+    enabled: true,
+    cache: { ...DEFAULT_CACHE_CONFIG },
+    onWriteAttempt: 'throw',
+};
+/**
+ * Create a read-only configuration with defaults
+ *
+ * @param input - Partial configuration to merge with defaults
+ * @returns Complete read-only configuration
+ */
+export function createReadOnlyConfig(input = {}) {
+    const config = {
+        enabled: input.enabled ?? DEFAULT_READONLY_CONFIG.enabled,
+    };
+    // Set onWriteAttempt if provided or use default
+    const onWriteAttempt = input.onWriteAttempt ?? DEFAULT_READONLY_CONFIG.onWriteAttempt;
+    if (onWriteAttempt !== undefined) {
+        config.onWriteAttempt = onWriteAttempt;
+    }
+    // Merge cache config
+    if (input.cache !== undefined || DEFAULT_READONLY_CONFIG.cache) {
+        config.cache = {
+            ...DEFAULT_CACHE_CONFIG,
+            ...(input.cache || {}),
+        };
+    }
+    // Merge R2 config if provided
+    if (input.r2) {
+        config.r2 = {
+            bucket: input.r2.bucket,
+            prefix: input.r2.prefix ?? '',
+        };
+    }
+    return config;
+}
+/**
+ * Check if a configuration represents read-only mode
+ *
+ * @param config - Configuration to check
+ * @returns true if read-only mode is enabled
+ */
+export function isReadOnlyMode(config) {
+    if (!config) {
+        return false;
+    }
+    return config.enabled === true;
+}
+//# sourceMappingURL=config.js.map

package/dist/readonly/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/readonly/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwDH;;GAEG;AACH,MAAM,oBAAoB,GAA0B;IAClD,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,GAAG,EAAE,YAAY;IAC7B,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,oBAAoB;CAChC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,EAAE,GAAG,oBAAoB,EAAE;IAClC,cAAc,EAAE,OAAO;CACxB,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE;IAClE,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,OAAO;KAC1D,CAAA;IAED,gDAAgD;IAChD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,uBAAuB,CAAC,cAAc,CAAA;IACrF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,cAAc,GAAG,cAAc,CAAA;IACxC,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC;QAC/D,MAAM,CAAC,KAAK,GAAG;YACb,GAAG,oBAAoB;YACvB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,CAAA;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,CAAC,EAAE,GAAG;YACV,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAO;YACxB,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE;SAC9B,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyC;IACtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI,CAAA;AAChC,CAAC"}

package/dist/readonly/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Read-Only Deployment Mode
+ *
+ * Security feature for deployments where writes are impossible.
+ * Workers read from R2 + Cloudflare Cache (FREE!) for read-only queries.
+ *
+ * Key security guarantees:
+ * - IMPOSSIBLE to write in read-only mode
+ * - SQL parsing to reject INSERT/UPDATE/DELETE
+ * - Worker reads directly from R2 + Cache
+ */
+export type { ReadOnlyConfig, ReadOnlyConfigInput, R2Config, CacheConfig, WriteAttemptAction, } from './config';
+export { DEFAULT_READONLY_CONFIG, createReadOnlyConfig, isReadOnlyMode } from './config';
+export type { WriteBlockerFn } from './write-blocker';
+export { isWriteQuery, WriteBlockedError, createWriteBlocker, SQL_WRITE_PATTERNS, } from './write-blocker';
+export type { ReadOnlyPGLiteOptions, PGLiteInterface } from './pglite-wrapper';
+export { ReadOnlyPGLite, createReadOnlyPGLite } from './pglite-wrapper';
+export type { CacheResult, CacheResultWithMetadata, CacheStats, R2BucketInterface, R2ObjectInterface, R2HeadObjectInterface, CacheInterface, } from './cache-reader';
+export { CacheReader, createCacheReader } from './cache-reader';
+export type { ReadOnlyWorkerEnv, ReadOnlyWorkerConfig } from './worker';
+export { ReadOnlyWorker, createReadOnlyWorker, handleReadOnlyRequest } from './worker';
+//# sourceMappingURL=index.d.ts.map

package/dist/readonly/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/readonly/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,kBAAkB,GACnB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAGxF,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AAGxB,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAGvE,YAAY,EACV,WAAW,EACX,uBAAuB,EACvB,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,cAAc,GACf,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAG/D,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA"}

package/dist/readonly/index.js

@@ -0,0 +1,17 @@
+/**
+ * Read-Only Deployment Mode
+ *
+ * Security feature for deployments where writes are impossible.
+ * Workers read from R2 + Cloudflare Cache (FREE!) for read-only queries.
+ *
+ * Key security guarantees:
+ * - IMPOSSIBLE to write in read-only mode
+ * - SQL parsing to reject INSERT/UPDATE/DELETE
+ * - Worker reads directly from R2 + Cache
+ */
+export { DEFAULT_READONLY_CONFIG, createReadOnlyConfig, isReadOnlyMode } from './config';
+export { isWriteQuery, WriteBlockedError, createWriteBlocker, SQL_WRITE_PATTERNS, } from './write-blocker';
+export { ReadOnlyPGLite, createReadOnlyPGLite } from './pglite-wrapper';
+export { CacheReader, createCacheReader } from './cache-reader';
+export { ReadOnlyWorker, createReadOnlyWorker, handleReadOnlyRequest } from './worker';
+//# sourceMappingURL=index.js.map

package/dist/readonly/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/readonly/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAIxF,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AAIxB,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAYvE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAI/D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA"}

package/dist/readonly/pglite-wrapper.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Read-Only PGLite Wrapper
+ *
+ * Wraps PGLite to prevent writes at the SQL level.
+ * Security feature for read-only deployments.
+ */
+import type { ReadOnlyConfig } from './config';
+/**
+ * Options for creating a read-only PGLite wrapper
+ */
+export interface ReadOnlyPGLiteOptions extends ReadOnlyConfig {
+}
+/**
+ * Minimal PGLite interface we need to wrap
+ */
+export interface PGLiteInterface {
+    query<T = unknown>(sql: string, params?: unknown[], options?: unknown): Promise<{
+        rows: T[];
+        fields?: unknown[];
+        affectedRows?: number;
+    }>;
+    exec(sql: string): Promise<Array<{
+        rows: unknown[];
+        fields?: unknown[];
+    }>>;
+    transaction<T>(fn: (tx: {
+        query: PGLiteInterface['query'];
+        exec?: PGLiteInterface['exec'];
+    }) => Promise<T>): Promise<T>;
+    close(): Promise<void>;
+}
+/**
+ * Read-only wrapper for PGLite that prevents write operations.
+ */
+export declare class ReadOnlyPGLite {
+    /** The underlying PGLite instance */
+    readonly inner: PGLiteInterface;
+    /** Read-only configuration */
+    private readonly config;
+    constructor(pglite: PGLiteInterface, config: ReadOnlyConfig);
+    /**
+     * Check if a query is allowed and handle blocked writes.
+     * Returns true if the query should proceed, false if silently blocked.
+     * Throws WriteBlockedError if configured to throw.
+     */
+    private checkQuery;
+    /**
+     * Execute a single SQL query.
+     */
+    query<T = unknown>(sql: string, params?: unknown[], options?: unknown): Promise<{
+        rows: T[];
+        fields?: unknown[];
+        affectedRows?: number;
+    }>;
+    /**
+     * Execute multiple SQL statements.
+     */
+    exec(sql: string): Promise<Array<{
+        rows: unknown[];
+        fields?: unknown[];
+    }>>;
+    /**
+     * Execute a transaction with read-only protection on all queries.
+     */
+    transaction<T>(fn: (tx: {
+        query: ReadOnlyPGLite['query'];
+        exec?: ReadOnlyPGLite['exec'];
+    }) => Promise<T>): Promise<T>;
+    /**
+     * Close the underlying PGLite instance.
+     */
+    close(): Promise<void>;
+}
+/**
+ * Create a read-only PGLite wrapper.
+ *
+ * @param pglite - The PGLite instance to wrap
+ * @param config - Optional read-only configuration
+ * @returns A read-only wrapped PGLite instance
+ */
+export declare function createReadOnlyPGLite(pglite: PGLiteInterface, config?: Partial<ReadOnlyConfig>): ReadOnlyPGLite;
+//# sourceMappingURL=pglite-wrapper.d.ts.map

package/dist/readonly/pglite-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pglite-wrapper.d.ts","sourceRoot":"","sources":["../../src/readonly/pglite-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAI9C;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,cAAc;CAAG;AAEhE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,CAAC,GAAG,OAAO,EACf,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,EAClB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC,CAAA;IAC1E,WAAW,CAAC,CAAC,EACX,EAAE,EAAE,CAAC,EAAE,EAAE;QACP,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;KAC/B,KAAK,OAAO,CAAC,CAAC,CAAC,GACf,OAAO,CAAC,CAAC,CAAC,CAAA;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAWD;;GAEG;AACH,qBAAa,cAAc;IACzB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc;IAK3D;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA0BlB;;OAEG;IACG,KAAK,CAAC,CAAC,GAAG,OAAO,EACrB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,EAClB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpE;;OAEG;IACG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IAchF;;OAEG;IACG,WAAW,CAAC,CAAC,EACjB,EAAE,EAAE,CAAC,EAAE,EAAE;QACP,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;QAC9B,IAAI,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;KAC9B,KAAK,OAAO,CAAC,CAAC,CAAC,GACf,OAAO,CAAC,CAAC,CAAC;IAgCb;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,EACvB,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAC/B,cAAc,CAGhB"}

package/dist/readonly/pglite-wrapper.js

@@ -0,0 +1,123 @@
+/**
+ * Read-Only PGLite Wrapper
+ *
+ * Wraps PGLite to prevent writes at the SQL level.
+ * Security feature for read-only deployments.
+ */
+import { createReadOnlyConfig } from './config';
+import { isWriteQuery, WriteBlockedError } from './write-blocker';
+/**
+ * Empty result returned when writes are silently blocked
+ */
+const EMPTY_RESULT = {
+    rows: [],
+    fields: [],
+    affectedRows: 0,
+};
+/**
+ * Read-only wrapper for PGLite that prevents write operations.
+ */
+export class ReadOnlyPGLite {
+    /** The underlying PGLite instance */
+    inner;
+    /** Read-only configuration */
+    config;
+    constructor(pglite, config) {
+        this.inner = pglite;
+        this.config = config;
+    }
+    /**
+     * Check if a query is allowed and handle blocked writes.
+     * Returns true if the query should proceed, false if silently blocked.
+     * Throws WriteBlockedError if configured to throw.
+     */
+    checkQuery(sql) {
+        // If read-only mode is disabled, allow everything
+        if (!this.config.enabled) {
+            return true;
+        }
+        // Check if this is a write query
+        if (!isWriteQuery(sql)) {
+            return true;
+        }
+        // Handle write attempt based on configuration
+        switch (this.config.onWriteAttempt) {
+            case 'throw':
+                throw new WriteBlockedError(sql);
+            case 'ignore':
+            case 'log':
+                // Return false to indicate the query should be silently blocked
+                return false;
+            default:
+                throw new WriteBlockedError(sql);
+        }
+    }
+    /**
+     * Execute a single SQL query.
+     */
+    async query(sql, params, options) {
+        if (!this.checkQuery(sql)) {
+            return EMPTY_RESULT;
+        }
+        return this.inner.query(sql, params, options);
+    }
+    /**
+     * Execute multiple SQL statements.
+     */
+    async exec(sql) {
+        // Split statements and check each one
+        // Note: This is a simple split; real SQL parsing would be more complex
+        const statements = sql.split(';').filter(s => s.trim());
+        for (const statement of statements) {
+            if (!this.checkQuery(statement)) {
+                return [EMPTY_RESULT];
+            }
+        }
+        return this.inner.exec(sql);
+    }
+    /**
+     * Execute a transaction with read-only protection on all queries.
+     */
+    async transaction(fn) {
+        const self = this;
+        return this.inner.transaction(async (innerTx) => {
+            // Create a wrapped transaction that checks queries
+            const wrappedTx = {
+                async query(sql, params, options) {
+                    if (!self.checkQuery(sql)) {
+                        return EMPTY_RESULT;
+                    }
+                    return innerTx.query(sql, params, options);
+                },
+                async exec(sql) {
+                    const statements = sql.split(';').filter(s => s.trim());
+                    for (const statement of statements) {
+                        if (!self.checkQuery(statement)) {
+                            return [EMPTY_RESULT];
+                        }
+                    }
+                    return innerTx.exec(sql);
+                },
+            };
+            return fn(wrappedTx);
+        });
+    }
+    /**
+     * Close the underlying PGLite instance.
+     */
+    async close() {
+        return this.inner.close();
+    }
+}
+/**
+ * Create a read-only PGLite wrapper.
+ *
+ * @param pglite - The PGLite instance to wrap
+ * @param config - Optional read-only configuration
+ * @returns A read-only wrapped PGLite instance
+ */
+export function createReadOnlyPGLite(pglite, config) {
+    const fullConfig = createReadOnlyConfig(config);
+    return new ReadOnlyPGLite(pglite, fullConfig);
+}
+//# sourceMappingURL=pglite-wrapper.js.map

package/dist/readonly/pglite-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pglite-wrapper.js","sourceRoot":"","sources":["../../src/readonly/pglite-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AA0BjE;;GAEG;AACH,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,EAAe;IACrB,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,CAAC;CAChB,CAAA;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IACzB,qCAAqC;IAC5B,KAAK,CAAiB;IAE/B,8BAA8B;IACb,MAAM,CAAgB;IAEvC,YAAY,MAAuB,EAAE,MAAsB;QACzD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAA;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED;;;;OAIG;IACK,UAAU,CAAC,GAAW;QAC5B,kDAAkD;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,8CAA8C;QAC9C,QAAQ,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACnC,KAAK,OAAO;gBACV,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAA;YAElC,KAAK,QAAQ,CAAC;YACd,KAAK,KAAK;gBACR,gEAAgE;gBAChE,OAAO,KAAK,CAAA;YAEd;gBACE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,GAAW,EACX,MAAkB,EAClB,OAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,YAAwE,CAAA;QACjF,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAI,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,sCAAsC;QACtC,uEAAuE;QACvE,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAEvD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,YAAY,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,EAGgB;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAA;QAEjB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC9C,mDAAmD;YACnD,MAAM,SAAS,GAAG;gBAChB,KAAK,CAAC,KAAK,CACT,GAAW,EACX,MAAkB,EAClB,OAAiB;oBAEjB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC1B,OAAO,YAAwE,CAAA;oBACjF,CAAC;oBACD,OAAO,OAAO,CAAC,KAAK,CAAI,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;gBAC/C,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,GAAW;oBACpB,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;oBACvD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;wBACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;4BAChC,OAAO,CAAC,YAAY,CAAC,CAAA;wBACvB,CAAC;oBACH,CAAC;oBACD,OAAO,OAAO,CAAC,IAAK,CAAC,GAAG,CAAC,CAAA;gBAC3B,CAAC;aACF,CAAA;YAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IAC3B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAuB,EACvB,MAAgC;IAEhC,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAC/C,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAC/C,CAAC"}