@every-app/sdk 0.2.0 → 0.3.0-rc.1

package/dist/cloudflare/sentinel.d.ts

@@ -0,0 +1,69 @@
+/**
+ * What a production build of an Every App app is made of in place of the
+ * install's own values. The build is tenant-neutral: whoever builds an
+ * app gets the same Build Output, with these placeholders wherever an
+ * install's Worker name, organization, gateway, identity key or resource
+ * ids belong. The installer rewrites them (`everyapp deploy` for an own
+ * Gateway, the hosted gateway's deployer for a hosted one) and refuses an
+ * output in which any survives.
+ *
+ * A leaf module with no imports, so the gateway Worker can read the same
+ * values (`@every-app/sdk/cloudflare/sentinel`) without loading the
+ * Node-only Worker builder.
+ */
+export declare const BUILD_SENTINEL: Readonly<{
+    workerName: "every-hosted--sentinel";
+    organizationId: "everyapp-hosted-deploy-sentinel";
+    /** The gateway's URL, and so the identity issuer. */
+    gatewayUrl: "https://every-hosted--sentinel.invalid";
+    publicKey: "-----BEGIN PUBLIC KEY-----\nEVERYAPPHOSTEDDEPLOYSENTINEL\n-----END PUBLIC KEY-----\n";
+}>;
+/**
+ * A manifest binding's placeholder: a D1 database's name and id, an R2
+ * bucket's name, a KV namespace's or Hyperdrive config's id. The installer
+ * rewrites each by its binding name; the value only has to be recognizable.
+ */
+export declare function resourceSentinel(binding: string): string;
+/** The fields of the manifest a build's placeholders are made for. */
+interface SentinelManifest {
+    resources?: {
+        d1?: readonly string[];
+        kv?: readonly string[];
+        r2?: readonly string[];
+        hyperdrive?: readonly {
+            readonly name: string;
+        }[];
+    };
+}
+/** Everything install-specific a Worker is built from, by binding. */
+export interface EveryAppDeployTarget {
+    /** The Worker name the gateway registry assigned to this app. */
+    workerName: string;
+    /** The organization that owns the app; scopes the AppGateway binding. */
+    organizationId: string;
+    /** The gateway's URL, which is also the identity tokens' issuer. */
+    gatewayUrl: string;
+    /** SPKI PEM public keys (current + next) that verify identity tokens. */
+    identityPublicKeys: string[];
+    /** Provisioned resources keyed by manifest binding name. */
+    resources: {
+        d1?: Record<string, {
+            name: string;
+            id: string;
+        }>;
+        kv?: Record<string, {
+            id: string;
+        }>;
+        hyperdrive?: Record<string, {
+            id: string;
+        }>;
+        /** R2 buckets by binding, under the names the registry assigned. */
+        r2?: Record<string, {
+            name: string;
+        }>;
+    };
+}
+/** The target every production build is made for: placeholders throughout. */
+export declare function sentinelDeployTarget(manifest: SentinelManifest): EveryAppDeployTarget;
+export {};
+//# sourceMappingURL=sentinel.d.ts.map

package/dist/cloudflare/sentinel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.d.ts","sourceRoot":"","sources":["../../src/cloudflare/sentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,cAAc;;;IAKzB,qDAAqD;;;EAIrD,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,sEAAsE;AACtE,UAAU,gBAAgB;IACxB,SAAS,CAAC,EAAE;QACV,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACvB,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACvB,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACvB,UAAU,CAAC,EAAE,SAAS;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACnD,CAAC;CACH;AAED,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,4DAA4D;IAC5D,SAAS,EAAE;QACT,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAClD,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5C,oEAAoE;QACpE,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACvC,CAAC;CACH;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,gBAAgB,GACzB,oBAAoB,CA2BtB"}

package/dist/cloudflare/sentinel.js

@@ -0,0 +1,50 @@
+/**
+ * What a production build of an Every App app is made of in place of the
+ * install's own values. The build is tenant-neutral: whoever builds an
+ * app gets the same Build Output, with these placeholders wherever an
+ * install's Worker name, organization, gateway, identity key or resource
+ * ids belong. The installer rewrites them (`everyapp deploy` for an own
+ * Gateway, the hosted gateway's deployer for a hosted one) and refuses an
+ * output in which any survives.
+ *
+ * A leaf module with no imports, so the gateway Worker can read the same
+ * values (`@every-app/sdk/cloudflare/sentinel`) without loading the
+ * Node-only Worker builder.
+ */
+export const BUILD_SENTINEL = Object.freeze({
+    // Holds the resource separator, so no registry Worker is ever named so
+    // and a string rewrite of it can't hit anything else.
+    workerName: "every-hosted--sentinel",
+    organizationId: "everyapp-hosted-deploy-sentinel",
+    /** The gateway's URL, and so the identity issuer. */
+    gatewayUrl: "https://every-hosted--sentinel.invalid",
+    publicKey: "-----BEGIN PUBLIC KEY-----\nEVERYAPPHOSTEDDEPLOYSENTINEL\n-----END PUBLIC KEY-----\n",
+});
+/**
+ * A manifest binding's placeholder: a D1 database's name and id, an R2
+ * bucket's name, a KV namespace's or Hyperdrive config's id. The installer
+ * rewrites each by its binding name; the value only has to be recognizable.
+ */
+export function resourceSentinel(binding) {
+    return `${BUILD_SENTINEL.workerName}--${binding}`;
+}
+/** The target every production build is made for: placeholders throughout. */
+export function sentinelDeployTarget(manifest) {
+    const byBinding = (bindings, value) => Object.fromEntries((bindings ?? []).map((binding) => [
+        binding,
+        value(resourceSentinel(binding)),
+    ]));
+    const { resources } = manifest;
+    return {
+        workerName: BUILD_SENTINEL.workerName,
+        organizationId: BUILD_SENTINEL.organizationId,
+        gatewayUrl: BUILD_SENTINEL.gatewayUrl,
+        identityPublicKeys: [BUILD_SENTINEL.publicKey],
+        resources: {
+            d1: byBinding(resources?.d1, (id) => ({ name: id, id })),
+            kv: byBinding(resources?.kv, (id) => ({ id })),
+            hyperdrive: byBinding(resources?.hyperdrive?.map((config) => config.name), (id) => ({ id })),
+            r2: byBinding(resources?.r2, (name) => ({ name })),
+        },
+    };
+}

package/dist/cloudflare/worker.d.ts

@@ -0,0 +1,511 @@
+/** A Durable Object or Workflow class, and the helper Worker defining it. */
+interface ClassResource {
+    readonly name: string;
+    readonly className: string;
+    /** A helper Worker (`workers`) that defines the class; the app's own when unset. */
+    readonly worker?: string;
+}
+/** A Hyperdrive config, and the helper Worker that alone binds it. */
+interface HyperdriveResource {
+    readonly name: string;
+    /** A helper Worker (`workers`) that alone binds it; every Worker when unset. */
+    readonly worker?: string;
+    /** Whether Hyperdrive caches its reads (the deploy's concern; "off" by default). */
+    readonly caching?: "off" | "default";
+}
+/** Cloudflare's limits for one of the app's Workers. */
+interface WorkerLimits {
+    readonly cpuMs?: number;
+}
+/** The fields of `everyapp.config.ts` the Worker definition is built from. */
+export interface EveryAppWorkerManifest {
+    id: string;
+    compatibilityDate?: string;
+    resources?: {
+        d1?: readonly string[];
+        kv?: readonly string[];
+        /**
+         * R2 buckets every one of the app's Workers binds: `R2` named after the
+         * app's Worker, any other binding `<app worker>--<binding>`.
+         */
+        r2?: readonly string[];
+        durableObjects?: readonly ClassResource[];
+        workflows?: readonly ClassResource[];
+        /** Hyperdrive configs, named `<app worker>--<binding>` by the deploy. */
+        hyperdrive?: readonly HyperdriveResource[];
+    };
+    /**
+     * Helper Workers deployed beside the app's Worker as
+     * `<app worker>--<name>`, built with {@link everyAppAuxiliaryWorker}.
+     * `binding` names the app Worker's service binding to one.
+     */
+    workers?: readonly {
+        readonly name: string;
+        readonly binding?: string;
+        readonly limits?: WorkerLimits;
+    }[];
+    /**
+     * The database the app's code talks to, which its Workers read as
+     * DATABASE_PROVIDER; deployed Workers run near `region`.
+     */
+    database?: {
+        readonly provider: "d1" | "postgres";
+        readonly region?: string;
+    };
+    /** Cloudflare's limits for the app's own Worker. */
+    limits?: WorkerLimits;
+    /**
+     * AI providers the app calls through the gateway (`createGatewayFetch()`):
+     * each by id, or as `{ id, optional, anyOf, why, docs }` (the manifest's
+     * settings model, `@every-app/sdk/internal` appSettings).
+     */
+    providers?: ReadonlyArray<string | {
+        readonly id: string;
+    }>;
+    /** Capabilities the app calls through the gateway (`integrationFetch()`). */
+    capabilities?: {
+        readonly [id: string]: unknown;
+    };
+    /**
+     * The app's own secrets, e.g. an API key it calls out with. A deployed
+     * Worker gets them from `everyapp secret set <NAME>`, and later deploys
+     * keep them, so production builds don't declare them. In development each
+     * one that is set locally is declared, read as the Vite plugin reads
+     * secrets (`.dev.vars[.<mode>]` alone when present, otherwise the `.env`
+     * files and the environment), so the plugin passes it through. Type them
+     * as optional in `src/env.d.ts`.
+     *
+     * The keys of `providers` and `capabilities` need no listing: there's no
+     * gateway in development, so each one set locally under the gateway
+     * secret's name (OPENAI_API_KEY, DATAFORSEO_API_KEY, …) is declared for
+     * the SDK's direct fallback.
+     *
+     * Each by name, or as `{ name, optional, anyOf, why, docs }`: whether the
+     * app opens without it, and why it is needed.
+     */
+    secrets?: ReadonlyArray<string | {
+        readonly name: string;
+    }>;
+}
+/** The context cf passes to a `defineConfig((ctx) => …)` factory. */
+export interface EveryAppConfigContext {
+    mode: string | undefined;
+    isPreview?: boolean;
+}
+export interface EveryAppWorkerOptions<TManifest extends EveryAppWorkerManifest, TEntrypoint> {
+    /** The default export of `everyapp.config.ts`, declared `as const`. */
+    manifest: TManifest;
+    /** The Worker entry, usually a `cf-worker` namespace import of `src/entry.worker.ts`. */
+    entrypoint: TEntrypoint;
+    ctx: EveryAppConfigContext;
+    /** App root holding `.dev.vars` and `.env` files. Defaults to the working directory. */
+    root?: string;
+    /**
+     * Cron schedules (UTC) that run the Worker's `scheduled` handler, e.g.
+     * `"0 6 * * *"` (daily at 06:00). Deploys keep them; an app can't declare
+     * routes.
+     */
+    crons?: readonly string[];
+    /**
+     * Compatibility flags beyond `nodejs_compat`, which every Every App Worker
+     * has, e.g. `["global_fetch_strictly_public"]` so the Worker's `fetch()`
+     * reaches only the public internet. Appended to `nodejs_compat`, without
+     * duplicates. The compatibility date is the manifest's.
+     */
+    compatibilityFlags?: readonly string[];
+}
+export interface TextBinding {
+    type: "text";
+    value: string;
+}
+export interface SecretBinding {
+    type: "secret";
+}
+export interface D1Binding {
+    type: "d1";
+    name: string;
+    id?: string;
+}
+export interface KvBinding {
+    type: "kv";
+    id?: string;
+}
+export interface R2Binding {
+    type: "r2";
+    name: string;
+}
+export interface HyperdriveBinding {
+    type: "hyperdrive";
+    id: string;
+    dev?: {
+        connectionString?: string;
+    };
+}
+/**
+ * The app's own Worker, as the bindings of the Durable Objects it defines
+ * name it when its entrypoint is a `cf-worker` module import. cf reads each
+ * class from that module, so the `Env` it generates types the namespace
+ * with it (`DurableObjectNamespace<UserSyncDO>`) and RPC calls on a stub
+ * type-check, and it resolves the reference to the Worker's name.
+ */
+export interface EveryAppWorkerReference<TEntrypoint extends object> {
+    name: string;
+    compatibilityDate: string;
+    entrypoint: TEntrypoint;
+}
+/**
+ * A Durable Object binding. `worker` names the Worker defining the class:
+ * the app's own Worker by its definition (see
+ * {@link EveryAppWorkerReference}), or a Worker by name, which cf types as
+ * an untyped `DurableObjectNamespace`.
+ */
+export interface DurableObjectBinding<TWorker extends string | EveryAppWorkerReference<object> = string, TClassName extends string = string> {
+    type: "durable-object";
+    worker: TWorker;
+    exportName: TClassName;
+}
+export interface WorkflowBinding {
+    type: "workflow";
+    name: string;
+    worker: string;
+    exportName: string;
+}
+export interface GatewayBinding {
+    type: "worker";
+    worker: string;
+    exportName: string;
+    props: Record<string, string>;
+}
+/** The app's service binding to one of its helper Workers. */
+export interface ServiceBinding {
+    type: "worker";
+    worker: string;
+}
+export interface VersionMetadataBinding {
+    type: "version-metadata";
+}
+export type EveryAppBinding = TextBinding | SecretBinding | D1Binding | KvBinding | R2Binding | HyperdriveBinding | DurableObjectBinding<string | EveryAppWorkerReference<object>> | WorkflowBinding | GatewayBinding | ServiceBinding | VersionMetadataBinding;
+export interface DurableObjectExport {
+    type: "durable-object";
+    storage: "sqlite";
+}
+export interface WorkflowExport {
+    type: "workflow";
+    name: string;
+}
+type D1Names<M> = M extends {
+    resources: {
+        d1: readonly (infer B)[];
+    };
+} ? B & string : never;
+type KvNames<M> = M extends {
+    resources: {
+        kv: readonly (infer B)[];
+    };
+} ? B & string : never;
+type R2Names<M> = M extends {
+    resources: {
+        r2: readonly (infer B)[];
+    };
+} ? B & string : never;
+type DurableObjects<M> = M extends {
+    resources: {
+        durableObjects: readonly (infer D)[];
+    };
+} ? D : never;
+type Workflows<M> = M extends {
+    resources: {
+        workflows: readonly (infer W)[];
+    };
+} ? W : never;
+type HelperWorkers<M> = M extends {
+    workers: readonly (infer H)[];
+} ? H : never;
+/** The Hyperdrive bindings the app's own Worker has: those no helper alone takes. */
+type AppHyperdriveNames<M> = M extends {
+    resources: {
+        hyperdrive: readonly (infer H)[];
+    };
+} ? H extends {
+    worker: string;
+} ? never : H extends {
+    name: infer N extends string;
+} ? N : never : never;
+type DatabaseEnv<M> = M extends {
+    database: object;
+} ? {
+    DATABASE_PROVIDER: TextBinding;
+} : unknown;
+/**
+ * The gateway secrets holding the keys of the AI providers and capabilities
+ * an app may ask for, with the settings a provider needs besides its key
+ * (Workers AI's account). With no gateway in development, the SDK reaches
+ * them with the developer's own values under the same names. A copy of the
+ * tables in ../internal, which the Worker loads: the Vite plugin hides
+ * whatever cloudflare.config.ts imports from the Worker. A test keeps them
+ * in step.
+ */
+declare const DEV_GATEWAY_KEYS: {
+    readonly providers: {
+        readonly openai: readonly ["OPENAI_API_KEY"];
+        readonly openrouter: readonly ["OPENROUTER_API_KEY"];
+        readonly "workers-ai": readonly ["WORKERS_AI_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"];
+    };
+    readonly capabilities: {
+        readonly dataforseo: readonly ["DATAFORSEO_API_KEY"];
+        readonly context: readonly ["CONTEXT_API_KEY"];
+        readonly email: readonly ["EMAIL_FROM", "EMAIL_FROM_NAME", "EMAIL_REST_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID", "RESEND_API_KEY", "EMAIL_PROVIDER"];
+        readonly members: readonly [];
+        readonly linkedin: readonly ["LINKEDIN_CLIENT_ID", "LINKEDIN_CLIENT_SECRET"];
+        readonly facebook: readonly ["FACEBOOK_APP_ID", "FACEBOOK_APP_SECRET"];
+        readonly instagram: readonly ["INSTAGRAM_APP_ID", "INSTAGRAM_APP_SECRET"];
+        readonly threads: readonly ["THREADS_APP_ID", "THREADS_APP_SECRET"];
+        readonly youtube: readonly ["YOUTUBE_CLIENT_ID", "YOUTUBE_CLIENT_SECRET"];
+        readonly tiktok: readonly ["TIKTOK_CLIENT_ID", "TIKTOK_CLIENT_SECRET"];
+        readonly "tiktok-business": readonly ["TIKTOK_BUSINESS_CLIENT_ID", "TIKTOK_BUSINESS_CLIENT_SECRET"];
+        readonly reddit: readonly ["REDDIT_CLIENT_ID", "REDDIT_CLIENT_SECRET"];
+        readonly pinterest: readonly ["PINTEREST_CLIENT_ID", "PINTEREST_CLIENT_SECRET"];
+        readonly discord: readonly ["DISCORD_CLIENT_ID", "DISCORD_CLIENT_SECRET"];
+        readonly slack: readonly ["SLACK_CLIENT_ID", "SLACK_CLIENT_SECRET"];
+        readonly mastodon: readonly ["MASTODON_CLIENT_ID", "MASTODON_CLIENT_SECRET", "MASTODON_URL"];
+        readonly kick: readonly ["KICK_CLIENT_ID", "KICK_CLIENT_SECRET"];
+        readonly twitch: readonly ["TWITCH_CLIENT_ID", "TWITCH_CLIENT_SECRET"];
+        readonly tumblr: readonly ["TUMBLR_CLIENT_ID", "TUMBLR_CLIENT_SECRET"];
+        readonly dribbble: readonly ["DRIBBBLE_CLIENT_ID", "DRIBBBLE_CLIENT_SECRET"];
+        readonly "google-workspace": readonly ["GOOGLE_WORKSPACE_CLIENT_ID", "GOOGLE_WORKSPACE_CLIENT_SECRET"];
+        readonly "microsoft-365": readonly ["MICROSOFT_365_CLIENT_ID", "MICROSOFT_365_CLIENT_SECRET"];
+    };
+};
+type DevProviderKeys = typeof DEV_GATEWAY_KEYS.providers;
+type DevCapabilityKeys = typeof DEV_GATEWAY_KEYS.capabilities;
+/** The gateway keys a developer may set locally for the manifest's providers and capabilities. */
+type DevGatewayKeys<M> = (M extends {
+    providers: readonly (infer P)[];
+} ? P extends keyof DevProviderKeys ? DevProviderKeys[P][number] : never : never) | (M extends {
+    capabilities: infer C;
+} ? keyof C extends infer K ? K extends keyof DevCapabilityKeys ? DevCapabilityKeys[K][number] : never : never : never);
+/**
+ * A manifest Durable Object's binding: named after the app's own Worker by
+ * its definition when that Worker defines the class and its entrypoint is a
+ * module import, so cf types the namespace with the class; a helper
+ * Worker's class, or any class behind a path entrypoint, by name.
+ */
+type DurableObjectBindingFor<D, TEntrypoint> = D extends {
+    worker: string;
+} ? DurableObjectBinding : TEntrypoint extends object ? D extends {
+    className: infer C extends string;
+} ? DurableObjectBinding<EveryAppWorkerReference<TEntrypoint>, C> : DurableObjectBinding : DurableObjectBinding;
+type ResourceEnv<M, TEntrypoint> = {
+    [B in D1Names<M>]: D1Binding;
+} & {
+    [B in KvNames<M>]: KvBinding;
+} & {
+    [B in R2Names<M>]: R2Binding;
+} & {
+    [D in DurableObjects<M> as D extends {
+        name: infer N extends string;
+    } ? N : never]: DurableObjectBindingFor<D, TEntrypoint>;
+} & {
+    [W in Workflows<M> as W extends {
+        name: infer N extends string;
+    } ? N : never]: WorkflowBinding;
+} & {
+    [H in HelperWorkers<M> as H extends {
+        binding: infer B extends string;
+    } ? B : never]: ServiceBinding;
+};
+type SharedEnv = {
+    EVERYAPP_APP_ID: TextBinding;
+    CF_VERSION_METADATA: VersionMetadataBinding;
+};
+/**
+ * Hyperdrive in production; in development only where a local connection
+ * string is set, so `Env` marks each optional.
+ */
+type HyperdriveEnv<M> = {
+    [B in AppHyperdriveNames<M>]: HyperdriveBinding;
+};
+/** In dev, an app that lists `email` may get the installation's stand-in senders from .dev.vars. */
+type DevEmailEnv<M> = M extends {
+    capabilities: {
+        email: unknown;
+    };
+} ? {
+    EVERYAPP_EMAIL_SENDERS?: SecretBinding;
+} : unknown;
+/**
+ * Bindings in development: the well-known dev identity, as plain text, and
+ * the developer's own gateway keys (when set).
+ */
+export type EveryAppDevEnv<M, TEntrypoint = string> = ResourceEnv<M, TEntrypoint> & SharedEnv & DatabaseEnv<M> & DevEmailEnv<M> & {
+    EVERYAPP_DEV: TextBinding;
+    EVERYAPP_DEV_CAPABILITIES: TextBinding;
+    /** The specs in `.everyapp/providers/*.json`, when the app has any: providers registered on a gateway, for integrationFetch()'s dev fallback. */
+    EVERYAPP_DEV_PROVIDERS?: TextBinding;
+    EVERYAPP_IDENTITY_PUBLIC_KEYS: TextBinding;
+    EVERYAPP_IDENTITY_ISSUER: TextBinding;
+} & {
+    [K in DevGatewayKeys<M>]: SecretBinding;
+};
+/** Bindings in production: the deployed identity and the gateway binding. */
+export type EveryAppDeployEnv<M, TEntrypoint = string> = ResourceEnv<M, TEntrypoint> & SharedEnv & DatabaseEnv<M> & HyperdriveEnv<M> & {
+    EVERYAPP_AUDIENCE: TextBinding;
+    EVERYAPP_IDENTITY_PUBLIC_KEYS: TextBinding;
+    EVERYAPP_IDENTITY_ISSUER: TextBinding;
+    EVERY_APP_GATEWAY: GatewayBinding;
+    GATEWAY_URL: SecretBinding;
+    /**
+     * The owning organization. The build always declares it; installing a
+     * shared app, which serves every organization, drops it.
+     */
+    EVERY_APP_ORG_ID?: SecretBinding;
+    /**
+     * `1` on a shared app's Workers, added when it is installed: gateway
+     * calls say whom they are for.
+     */
+    EVERYAPP_SHARED?: TextBinding;
+};
+/** The classes the app's own Worker defines: none a helper Worker does. */
+export type EveryAppExports<M> = {
+    [E in DurableObjects<M> | Workflows<M> as E extends {
+        worker: string;
+    } ? never : E extends {
+        className: infer C extends string;
+    } ? C : never]: E extends Workflows<M> ? WorkflowExport : DurableObjectExport;
+};
+export interface EveryAppObservability {
+    enabled: boolean;
+    headSamplingRate: number;
+    redactQueryString: boolean;
+    logs: {
+        enabled: boolean;
+        invocationLogs: boolean;
+        persist: boolean;
+        headSamplingRate: number;
+    };
+    traces: {
+        enabled: boolean;
+        persist: boolean;
+        headSamplingRate: number;
+    };
+    issues: {
+        enabled: boolean;
+    };
+}
+/** Structural copy of cf's targeted placement: run near a cloud region. */
+export interface EveryAppPlacement {
+    region: string;
+}
+/** Structural copy of cf's scheduled (cron) trigger. */
+export interface ScheduledTrigger {
+    type: "scheduled";
+    schedule: string;
+}
+export interface EveryAppWorkerConfig<M, TEntrypoint> {
+    name: string;
+    entrypoint: TEntrypoint;
+    compatibilityDate: string;
+    compatibilityFlags: string[];
+    workersDev: false;
+    previewUrls: false;
+    /** The `crons` option's schedules; absent without any. */
+    triggers?: ScheduledTrigger[];
+    /** Near the manifest's `database.region`, once deployed. */
+    placement?: EveryAppPlacement;
+    /** The manifest's `limits`. */
+    limits?: {
+        cpuMs?: number;
+    };
+    observability: EveryAppObservability;
+    /** Either branch, so `Env` marks dev-only and deploy-only bindings optional. */
+    env: EveryAppDevEnv<M, TEntrypoint> | EveryAppDeployEnv<M, TEntrypoint>;
+    exports: EveryAppExports<M>;
+}
+/**
+ * Observability every Every App Worker ships with: logs (with invocation
+ * logs), sampled traces and Workers Issues, with query strings redacted so
+ * tokens and invitation ids in URLs stay out of logs.
+ */
+export declare const EVERYAPP_OBSERVABILITY: Readonly<EveryAppObservability>;
+/**
+ * Build the Worker definition for an Every App app from its manifest.
+ *
+ * - `development` (cf dev) and no mode (cf API commands, `cf workers types`):
+ *   EVERYAPP_DEV is on, the identity keys and issuer are the well-known dev
+ *   ones (`@every-app/sdk/dev`) as plain text, so nothing needs writing to
+ *   `.dev.vars`, and each D1 database gets a fixed local id (see
+ *   {@link localD1Id}) that `cf d1 … --local` can address.
+ * - `production`: tenant-neutral. Everything install-specific (the Worker
+ *   name, organization, gateway URL, identity keys, resource names and ids)
+ *   is a placeholder from {@link sentinelDeployTarget}, which the installer
+ *   rewrites (`everyapp deploy`, or a hosted gateway's deployer), so every
+ *   build of an app is the same. Only with EVERYAPP_BUILD=1, which
+ *   `everyapp deploy` sets: a bare `cf deploy` would upload the
+ *   placeholders.
+ */
+export declare function everyAppWorker<const M extends EveryAppWorkerManifest, TEntrypoint extends string | object>(options: EveryAppWorkerOptions<M, TEntrypoint>): EveryAppWorkerConfig<M, TEntrypoint>;
+export interface EveryAppAuxiliaryWorkerOptions<TManifest extends EveryAppWorkerManifest, TEntrypoint> extends EveryAppWorkerOptions<TManifest, TEntrypoint> {
+    /** The helper Worker's name in the manifest's `workers`. */
+    worker: string;
+}
+/** A helper Worker's definition, for the Vite plugin's `auxiliaryWorkers`. */
+export interface EveryAppAuxiliaryWorkerConfig<TEntrypoint> {
+    name: string;
+    entrypoint: TEntrypoint;
+    compatibilityDate: string;
+    compatibilityFlags: string[];
+    workersDev: false;
+    previewUrls: false;
+    triggers?: ScheduledTrigger[];
+    placement?: EveryAppPlacement;
+    limits?: {
+        cpuMs?: number;
+    };
+    observability: EveryAppObservability;
+    env: Record<string, EveryAppBinding>;
+    exports: Record<string, DurableObjectExport | WorkflowExport>;
+}
+/**
+ * Build the definition of one of the app's helper Workers (the manifest's
+ * `workers`), e.g. one that runs a memory-hungry job away from the app's
+ * Worker. It is named `<app worker>--<worker>`, is private like the app, and
+ * binds the app's D1 databases, KV namespaces and R2 buckets, the classes it defines, and
+ * the gateway (with the app's identity, for capabilities). Only the app's
+ * Worker reaches it. Pass it to the Vite plugin:
+ *
+ *   cloudflare({
+ *     auxiliaryWorkers: [
+ *       { config: everyAppAuxiliaryWorker({ manifest, worker: "audit", entrypoint: "./src/audit.ts", ctx: { mode } }) },
+ *     ],
+ *   })
+ */
+export declare function everyAppAuxiliaryWorker<const M extends EveryAppWorkerManifest, TEntrypoint extends string | object>(options: EveryAppAuxiliaryWorkerOptions<M, TEntrypoint>): EveryAppAuxiliaryWorkerConfig<TEntrypoint>;
+/**
+ * A helper Worker's name: `<app worker>--<name>`, within Cloudflare's
+ * limit. New app ids can't contain `--`, so it is never another app's
+ * Worker name.
+ */
+export declare function helperWorkerName(appWorker: string, helper: string): string;
+/**
+ * The Workflow a binding defines, named after the app's Worker:
+ * `every-acme-seo` and `RANK_CHECK` → `every-acme-seo--rank-check`.
+ * Workflow names are unique in the account, and new app ids can't contain
+ * `--`, so one app's Workflow is never named like another app's.
+ */
+export declare function workflowNameFor(workerName: string, binding: string): string;
+/**
+ * The local D1 database id for a binding: a 32-hex string, because
+ * `cf d1 … --local` rejects names. The everyapp CLI computes the same id to
+ * apply local migrations to the database `cf dev` serves.
+ */
+export declare function localD1Id(workerName: string, binding: string): string;
+/**
+ * The sqlite file `cf dev` (and `cf d1 … --local`) keeps the local D1
+ * database `databaseId` in, under the app at `root`, for tools such as
+ * drizzle-kit studio: `.cloudflare/state/v3/d1/miniflare-D1DatabaseObject/
+ * <hash>.sqlite`. The database is a Durable Object named after its id, and
+ * the file after that object's id. `databaseId` is the {@link localD1Id}.
+ */
+export declare function localD1Path(root: string, databaseId: string): string;
+export {};
+//# sourceMappingURL=worker.d.ts.map

package/dist/cloudflare/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/cloudflare/worker.ts"],"names":[],"mappings":"AAOA,6EAA6E;AAC7E,UAAU,aAAa;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,sEAAsE;AACtE,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;CACtC;AAED,wDAAwD;AACxD,UAAU,YAAY;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE;QACV,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACvB,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACvB;;;WAGG;QACH,EAAE,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;QAC1C,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;QACrC,yEAAyE;QACzE,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;KAC5C,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;KAChC,EAAE,CAAC;IACJ;;;OAGG;IACH,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,oDAAoD;IACpD,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,6EAA6E;IAC7E,YAAY,CAAC,EAAE;QAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClD;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAgBD,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB,CACpC,SAAS,SAAS,sBAAsB,EACxC,WAAW;IAEX,uEAAuE;IACvE,QAAQ,EAAE,SAAS,CAAC;IACpB,yFAAyF;IACzF,UAAU,EAAE,WAAW,CAAC;IACxB,GAAG,EAAE,qBAAqB,CAAC;IAC3B,wFAAwF;IACxF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAMD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;CAChB;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,IAAI,CAAC;IACX,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrC;AACD;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB,CAAC,WAAW,SAAS,MAAM;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,WAAW,CAAC;CACzB;AACD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CACnC,OAAO,SAAS,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,MAAM,EACjE,UAAU,SAAS,MAAM,GAAG,MAAM;IAElC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;CACxB;AACD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AACD,8DAA8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AACD,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,aAAa,GACb,SAAS,GACT,SAAS,GACT,SAAS,GACT,iBAAiB,GACjB,oBAAoB,CAAC,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAC9D,eAAe,GACf,cAAc,GACd,cAAc,GACd,sBAAsB,CAAC;AAE3B,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,SAAS,EAAE;QAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;KAAE,CAAA;CAAE,GACnE,CAAC,GAAG,MAAM,GACV,KAAK,CAAC;AACV,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,SAAS,EAAE;QAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;KAAE,CAAA;CAAE,GACnE,CAAC,GAAG,MAAM,GACV,KAAK,CAAC;AACV,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,SAAS,EAAE;QAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;KAAE,CAAA;CAAE,GACnE,CAAC,GAAG,MAAM,GACV,KAAK,CAAC;AACV,KAAK,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS;IACjC,SAAS,EAAE;QAAE,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;KAAE,CAAC;CACrD,GACG,CAAC,GACD,KAAK,CAAC;AACV,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS;IAC5B,SAAS,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;KAAE,CAAC;CAChD,GACG,CAAC,GACD,KAAK,CAAC;AAEV,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AAEhF,qFAAqF;AACrF,KAAK,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS;IACrC,SAAS,EAAE;QAAE,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;KAAE,CAAC;CACjD,GACG,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1B,KAAK,GACL,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;CAAE,GACxC,CAAC,GACD,KAAK,GACT,KAAK,CAAC;AAEV,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,iBAAiB,EAAE,WAAW,CAAA;CAAE,GAClC,OAAO,CAAC;AAEZ;;;;;;;;GAQG;AACH,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDZ,CAAC;AACX,KAAK,eAAe,GAAG,OAAO,gBAAgB,CAAC,SAAS,CAAC;AACzD,KAAK,iBAAiB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AAE9D,kGAAkG;AAClG,KAAK,cAAc,CAAC,CAAC,IACjB,CAAC,CAAC,SAAS;IAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;CAAE,GAC1C,CAAC,SAAS,MAAM,eAAe,GAC7B,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAC1B,KAAK,GACP,KAAK,CAAC,GACV,CAAC,CAAC,SAAS;IAAE,YAAY,EAAE,MAAM,CAAC,CAAA;CAAE,GAChC,MAAM,CAAC,SAAS,MAAM,CAAC,GACrB,CAAC,SAAS,MAAM,iBAAiB,GAC/B,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAC5B,KAAK,GACP,KAAK,GACP,KAAK,CAAC,CAAC;AAEf;;;;;GAKG;AACH,KAAK,uBAAuB,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GACvE,oBAAoB,GACpB,WAAW,SAAS,MAAM,GACxB,CAAC,SAAS;IAAE,SAAS,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;CAAE,GAC7C,oBAAoB,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAC7D,oBAAoB,GACtB,oBAAoB,CAAC;AAE3B,KAAK,WAAW,CAAC,CAAC,EAAE,WAAW,IAAI;KAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS;CAAE,GAAG;KACnE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS;CAC7B,GAAG;KACD,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS;CAC7B,GAAG;KACD,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;KAAE,GACjE,CAAC,GACD,KAAK,GAAG,uBAAuB,CAAC,CAAC,EAAE,WAAW,CAAC;CACpD,GAAG;KACD,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;KAAE,GAC5D,CAAC,GACD,KAAK,GAAG,eAAe;CAC5B,GAAG;KACD,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;KAAE,GACnE,CAAC,GACD,KAAK,GAAG,cAAc;CAC3B,CAAC;AAIF,KAAK,SAAS,GAAG;IACf,eAAe,EAAE,WAAW,CAAC;IAC7B,mBAAmB,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAEF;;;GAGG;AACH,KAAK,aAAa,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,iBAAiB;CAAE,CAAC;AAE5E,oGAAoG;AACpG,KAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,YAAY,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAChE;IAAE,sBAAsB,CAAC,EAAE,aAAa,CAAA;CAAE,GAC1C,OAAO,CAAC;AAEZ;;;GAGG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,IAAI,WAAW,CAC/D,CAAC,EACD,WAAW,CACZ,GACC,SAAS,GACT,WAAW,CAAC,CAAC,CAAC,GACd,WAAW,CAAC,CAAC,CAAC,GAAG;IACf,YAAY,EAAE,WAAW,CAAC;IAC1B,yBAAyB,EAAE,WAAW,CAAC;IACvC,iJAAiJ;IACjJ,sBAAsB,CAAC,EAAE,WAAW,CAAC;IACrC,6BAA6B,EAAE,WAAW,CAAC;IAC3C,wBAAwB,EAAE,WAAW,CAAC;CACvC,GAAG;KAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,GAAG,aAAa;CAAE,CAAC;AAElD,6EAA6E;AAC7E,MAAM,MAAM,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,IAAI,WAAW,CAClE,CAAC,EACD,WAAW,CACZ,GACC,SAAS,GACT,WAAW,CAAC,CAAC,CAAC,GACd,aAAa,CAAC,CAAC,CAAC,GAAG;IACjB,iBAAiB,EAAE,WAAW,CAAC;IAC/B,6BAA6B,EAAE,WAAW,CAAC;IAC3C,wBAAwB,EAAE,WAAW,CAAC;IACtC,iBAAiB,EAAE,cAAc,CAAC;IAClC,WAAW,EAAE,aAAa,CAAC;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,aAAa,CAAC;IACjC;;;OAGG;IACH,eAAe,CAAC,EAAE,WAAW,CAAC;CAC/B,CAAC;AAEJ,2EAA2E;AAC3E,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI;KAC9B,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAClE,KAAK,GACL,CAAC,SAAS;QAAE,SAAS,EAAE,MAAM,CAAC,SAAS,MAAM,CAAA;KAAE,GAC7C,CAAC,GACD,KAAK,GAAG,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,mBAAmB;CAC5E,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,cAAc,EAAE,OAAO,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAC9B;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC,EAAE,WAAW;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,WAAW,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,KAAK,CAAC;IAClB,WAAW,EAAE,KAAK,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,4DAA4D;IAC5D,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,+BAA+B;IAC/B,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,aAAa,EAAE,qBAAqB,CAAC;IACrC,gFAAgF;IAChF,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACxE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;CAC7B;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,qBAAqB,CAiB/D,CAAC;AA8HL;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,KAAK,CAAC,CAAC,SAAS,sBAAsB,EACtC,WAAW,SAAS,MAAM,GAAG,MAAM,EAEnC,OAAO,EAAE,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,GAC7C,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,CA6FtC;AAED,MAAM,WAAW,8BAA8B,CAC7C,SAAS,SAAS,sBAAsB,EACxC,WAAW,CACX,SAAQ,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;IACrD,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,WAAW,6BAA6B,CAAC,WAAW;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,WAAW,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,KAAK,CAAC;IAClB,WAAW,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,aAAa,EAAE,qBAAqB,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,CAAC,CAAC,SAAS,sBAAsB,EACtC,WAAW,SAAS,MAAM,GAAG,MAAM,EAEnC,OAAO,EAAE,8BAA8B,CAAC,CAAC,EAAE,WAAW,CAAC,GACtD,6BAA6B,CAAC,WAAW,CAAC,CAiD5C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ1E;AAwVD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAKrE;AAKD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAUpE"}