@graphoria/server 0.2.2 → 0.3.0

package/README.md

@@ -76,26 +76,31 @@ await close(); // release database connections
 
 The server reads a small set of environment variables. Every variable has a sensible default except `JWT_SECRET` (or PASETO equivalents) and `ADMIN_SECRET`, both of which are required.
 
-| Variable               | Default                        | Purpose                                                                    |
-| ---------------------- | ------------------------------ | -------------------------------------------------------------------------- |
-| `PORT`                 | `3000`                         | HTTP port for `createBunServer`.                                           |
-| `JWT_SECRET`           | _required_                     | Symmetric secret for JWT signing.                                          |
-| `JWT_EXPIRES_IN`       | `5m`                           | Access-token lifetime.                                                     |
-| `JWT_RT_EXPIRES_IN`    | `7d`                           | Refresh-token lifetime.                                                    |
-| `PASETO_LOCAL_KEY`     | _required for_ `paseto_local`  | XChaCha20-Poly1305 key (`k4.local.…`).                                     |
-| `PASETO_SECRET_KEY`    | _required for_ `paseto_public` | Ed25519 secret (`k4.secret.…`).                                            |
-| `PASETO_PUBLIC_KEY`    | _required for_ `paseto_public` | Ed25519 public (`k4.public.…`).                                            |
-| `ADMIN_SECRET`         | _required_                     | Bypasses RBAC when sent in the admin header.                               |
-| `REDIS_URL`            | `redis://localhost:6379`       | Refresh-token rotation + cache.                                            |
-| `GRAPHQL_API_ENDPOINT` | `/graphql`                     | GraphQL endpoint path.                                                     |
-| `REST_API_PREFIX`      | `/rest`                        | REST API prefix.                                                           |
-| `GRAPHIQL_ENDPOINT`    | `/graphiql`                    | Built-in GraphiQL playground path.                                         |
-| `SCALAR_ENDPOINT`      | `/scalar`                      | Scalar API documentation path.                                             |
-| `OPENAPI_ENDPOINT`     | `/openapi.json`                | OpenAPI document path.                                                     |
-| `CORS_ENABLED`         | `true`                         | Toggle CORS preflight handler.                                             |
-| `MAX_QUERY_DEPTH`      | `0` (disabled)                 | Reject queries deeper than this — guard against abusive nested selections. |
-
-The complete list lives in [`packages/server/src/types/env.ts`](./src/types/env.ts).
+| Variable               | Default                        | Purpose                                                                            |
+| ---------------------- | ------------------------------ | ---------------------------------------------------------------------------------- |
+| `PORT`                 | `3000`                         | HTTP port for `createBunServer`.                                                   |
+| `JWT_SECRET`           | _required_                     | Symmetric secret for JWT signing.                                                  |
+| `JWT_EXPIRES_IN`       | `5m`                           | Access-token lifetime.                                                             |
+| `JWT_RT_EXPIRES_IN`    | `7d`                           | Refresh-token lifetime.                                                            |
+| `PASETO_LOCAL_KEY`     | _required for_ `paseto_local`  | XChaCha20-Poly1305 key (`k4.local.…`).                                             |
+| `PASETO_SECRET_KEY`    | _required for_ `paseto_public` | Ed25519 secret (`k4.secret.…`).                                                    |
+| `PASETO_PUBLIC_KEY`    | _required for_ `paseto_public` | Ed25519 public (`k4.public.…`).                                                    |
+| `ADMIN_SECRET`         | _required_                     | Bypasses RBAC when sent in the admin header.                                       |
+| `REDIS_URL`            | `redis://localhost:6379`       | Refresh-token rotation + cache.                                                    |
+| `GRAPHQL_API_ENDPOINT` | `/graphql`                     | GraphQL endpoint path.                                                             |
+| `REST_API_PREFIX`      | `/rest`                        | REST API prefix.                                                                   |
+| `GRAPHIQL_ENDPOINT`    | `/graphiql`                    | Built-in GraphiQL playground path.                                                 |
+| `SCALAR_ENDPOINT`      | `/scalar`                      | Scalar API documentation path.                                                     |
+| `OPENAPI_ENDPOINT`     | `/openapi.json`                | OpenAPI document path.                                                             |
+| `CORS_ENABLED`         | `true`                         | Toggle CORS preflight handler.                                                     |
+| `MAX_QUERY_DEPTH`      | `8`                            | Reject caller queries deeper than this. `0` disables the limit.                    |
+| `DEFAULT_PAGE_SIZE`    | `100`                          | Page size applied to a list field that asks for no limit. `0` leaves it unbounded. |
+| `MAX_PAGE_SIZE`        | `1000`                         | Reject a list field asking for more rows than this. `0` removes the ceiling.       |
+
+The complete list lives in [`packages/server/src/types/env.ts`](./src/types/env.ts). Two more limits
+are not in the table above because they ship **off** — `MAX_QUERY_COST` and `RATE_LIMIT_MAX` — and a
+third, `QUERY_TIMEOUT_MS`, bounds every statement at `10000` ms. All five are documented together in
+[Resource Limits](../../docs/LIMITS.md).
 
 ## Configuration helpers
 

package/dist/src/ai/tools/core.d.ts

@@ -18,7 +18,7 @@ export type ValidationError = {
         column: number;
     }>;
 };
-export type ValidateQueryFn = (query: string) => {
+export type ValidateQueryFn = (query: string, variables?: Record<string, unknown>) => {
     hasErrors: boolean;
     validationErrors: readonly ValidationError[];
 };
@@ -26,6 +26,11 @@ export type ValidateQueryFn = (query: string) => {
  * Build a query validator for a role. Without a positive depth limit it
  * delegates to the role's own `hasErrors`; with one it layers a depth-limit
  * rule on the standard rule set.
+ *
+ * The cost budget applies on both branches, and there is no MCP-specific
+ * override for it. MCP gets its own depth knob because an agent legitimately
+ * writes deeper queries than an application does; nothing makes the same
+ * argument for asking a database for more rows.
  */
 export declare const makeValidateQuery: (role: RoleEntities, maxQueryDepth?: number) => ValidateQueryFn;
 export type GraphqlExecOutcome = {

package/dist/src/ai/tools/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../../src/ai/tools/core.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAKtE;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC;AAE3C,eAAO,MAAM,YAAY,YACvB,OAAO,EACP,WAAW,EACX,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,iBAAiB,CACT,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,iBAAiB,QACvB,MAAM,SACJ,WAAW,GAAG;IAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,KAC9C,UAA6D,CAAC;AAEjE,eAAO,MAAM,yBAAyB,UAAW,MAAM,KAAG,OAKzD,CAAC;AAyJF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,SACrB,YAAY,kBAAkB,MAAM,KAAG,eAU7C,CAAC;AAIJ,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,SACvB,YAAY,iBACH,eAAe,wBACR;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAC3E,OAAO,CAAC,kBAAkB,CA0B5B,CAAC;AAIF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SACrB,YAAY,oBACA;IAAE,IAAI,CAAC,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KACvD,cAAc,EA+EhB,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,SACvB,YAAY,kBACF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE,KAClD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IA0G5B,CAAC"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../../src/ai/tools/core.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAOtE;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC;AAE3C,eAAO,MAAM,YAAY,YACvB,OAAO,EACP,WAAW,EACX,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,iBAAiB,CACT,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,iBAAiB,QACvB,MAAM,SACJ,WAAW,GAAG;IAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,KAC9C,UAA6D,CAAC;AAEjE,eAAO,MAAM,yBAAyB,UAAW,MAAM,KAAG,OAKzD,CAAC;AAyJF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAChC;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,SACrB,YAAY,kBAAkB,MAAM,KAAG,eAwB7C,CAAC;AAIJ,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,SACvB,YAAY,iBACH,eAAe,wBACR;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAC3E,OAAO,CAAC,kBAAkB,CA0B5B,CAAC;AAIF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SACrB,YAAY,oBACA;IAAE,IAAI,CAAC,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KACvD,cAAc,EA+EhB,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,SACvB,YAAY,kBACF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE,KAClD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IA0G5B,CAAC"}

package/dist/src/ai/tools/core.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=core.test.d.ts.map

package/dist/src/ai/tools/core.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.test.d.ts","sourceRoot":"","sources":["../../../../src/ai/tools/core.test.ts"],"names":[],"mappings":""}

package/dist/src/analyzeQuery/costLimit.d.ts

@@ -0,0 +1,30 @@
+import { GraphQLError } from "graphql";
+import type { DocumentNode, GraphQLSchema } from "graphql";
+/**
+ * Page bounds the estimate is drawn against. `maxPageSize` is carried, not read:
+ * a resolved limit above it is rejected at execution, so the walk never has to
+ * clamp — but the estimator needs it the day that ordering changes.
+ */
+export type CostPageLimits = {
+    defaultPageSize: number;
+    maxPageSize: number;
+};
+/**
+ * Estimate how many rows a document asks a database for, before executing it.
+ *
+ * Every field costs 1 for itself plus the cost of its children multiplied by the
+ * page size it requests — the `limit` argument for a list field, resolved through
+ * `variables`, falling back to `defaultPageSize`; 1 for anything that returns a
+ * single row. Fragment spreads are expanded, so moving a fan-out into a fragment
+ * does not hide it.
+ *
+ * A document carrying several operations is scored by its most expensive one:
+ * a request executes one of them.
+ */
+export declare const estimateQueryCost: (document: DocumentNode, schema: GraphQLSchema, variables: Record<string, unknown>, pageLimits: CostPageLimits) => number;
+/**
+ * Reject a document whose estimated cost exceeds `maxCost`. Returns `null` when
+ * it is within budget.
+ */
+export declare const checkQueryCost: (document: DocumentNode, schema: GraphQLSchema, variables: Record<string, unknown>, pageLimits: CostPageLimits, maxCost: number) => GraphQLError | null;
+//# sourceMappingURL=costLimit.d.ts.map

package/dist/src/analyzeQuery/costLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"costLimit.d.ts","sourceRoot":"","sources":["../../../src/analyzeQuery/costLimit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA2B,MAAM,SAAS,CAAC;AAEhE,OAAO,KAAK,EACV,YAAY,EAGZ,aAAa,EAId,MAAM,SAAS,CAAC;AAKjB;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AA4KF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,aAClB,YAAY,UACd,aAAa,aACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,cACtB,cAAc,KACzB,MAA0E,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,cAAc,aACf,YAAY,UACd,aAAa,aACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,cACtB,cAAc,WACjB,MAAM,KACd,YAAY,GAAG,IAWjB,CAAC"}

package/dist/src/analyzeQuery/costLimit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=costLimit.test.d.ts.map

package/dist/src/analyzeQuery/costLimit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"costLimit.test.d.ts","sourceRoot":"","sources":["../../../src/analyzeQuery/costLimit.test.ts"],"names":[],"mappings":""}

package/dist/src/analyzeQuery/depthLimit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"depthLimit.d.ts","sourceRoot":"","sources":["../../../src/analyzeQuery/depthLimit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,UAAU,EAGV,iBAAiB,EAClB,MAAM,SAAS,CAAC;AA6EjB;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,aACd,MAAM,eACP,iBAAiB,KAAG,UAuB7B,CAAC"}
+{"version":3,"file":"depthLimit.d.ts","sourceRoot":"","sources":["../../../src/analyzeQuery/depthLimit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,UAAU,EAA0B,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAgE9F;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,aACd,MAAM,eACP,iBAAiB,KAAG,UAuB7B,CAAC"}

package/dist/src/analyzeQuery/fragments.d.ts

@@ -0,0 +1,6 @@
+import type { DocumentNode, FragmentDefinitionNode } from "graphql";
+/**
+ * Collect all fragment definitions from a document.
+ */
+export declare const collectFragments: (document: DocumentNode) => Map<string, FragmentDefinitionNode>;
+//# sourceMappingURL=fragments.d.ts.map

package/dist/src/analyzeQuery/fragments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragments.d.ts","sourceRoot":"","sources":["../../../src/analyzeQuery/fragments.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,gBAAgB,aAAc,YAAY,KAAG,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAU3F,CAAC"}

package/dist/src/config/types/ai.d.ts

@@ -4,7 +4,6 @@ import { z } from "zod";
  * When enabled, exposes a `/mcp` endpoint for LLM agents.
  */
 export declare const MCPZod: z.ZodObject<{
-    /** Whether the MCP server is enabled. Off by default. */
     enabled: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>;
 /** Authoring type for MCP configuration */
@@ -18,15 +17,10 @@ export type MCPConfig = z.input<typeof MCPZod>;
  * `DEEPSEEK_API_KEY`, `OLLAMA_HOST`), not from this config.
  */
 export declare const AIZod: z.ZodObject<{
-    /** Whether the AI agent is enabled. Off by default. */
     enabled: z.ZodDefault<z.ZodBoolean>;
-    /** Overrides the built-in system prompt sent to the LLM. */
     systemPrompt: z.ZodOptional<z.ZodString>;
-    /** REST endpoint path for the agent (default: "/ai"). */
     endpoint: z.ZodDefault<z.ZodString>;
-    /** Model Context Protocol (MCP) server. Off by default. See MCP.md. */
     mcp: z.ZodDefault<z.ZodOptional<z.ZodObject<{
-        /** Whether the MCP server is enabled. Off by default. */
         enabled: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strict>>>;
 }, z.core.$strict>;

package/dist/src/config/types/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../../../src/config/types/ai.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,MAAM;IACjB,yDAAyD;;kBAEzD,CAAC;AAEH,2CAA2C;AAC3C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK;IAChB,uDAAuD;;IAEvD,4DAA4D;;IAE5D,yDAAyD;;IAEzD,uEAAuE;;QAtBvE,yDAAyD;;;kBAwBzD,CAAC;AAEH,0CAA0C;AAC1C,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../../../src/config/types/ai.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,MAAM;;kBAGjB,CAAC;AAEH,2CAA2C;AAC3C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,KAAK;;;;;;;kBAShB,CAAC;AAEH,0CAA0C;AAC1C,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC"}

package/dist/src/config/types/auth.d.ts

@@ -53,11 +53,8 @@ export type FilterCondition = z.input<typeof FilterConditionZod>;
  * Table-level permission configuration
  */
 export declare const TablePermissionZod: z.ZodObject<{
-    /** Allowed columns — "ALL" or array of column names */
     columns: z.ZodUnion<readonly [z.ZodLiteral<"ALL">, z.ZodArray<z.ZodString>]>;
-    /** Role-based query filtering (WHERE clause) */
     filter: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
-    /** Role-based default ordering (ORDER BY clause) */
     orderBy: z.ZodOptional<z.ZodArray<z.ZodObject<{
         column: z.ZodString;
         direction: z.ZodEnum<{
@@ -75,13 +72,9 @@ export type TablePermission = z.input<typeof TablePermissionZod>;
  * Permission configuration for a role
  */
 export declare const RolePermissionZod: z.ZodDefault<z.ZodObject<{
-    /** Tables accessible by this role */
     tables: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodLiteral<"ALL">, z.ZodObject<{
-        /** Allowed columns — "ALL" or array of column names */
         columns: z.ZodUnion<readonly [z.ZodLiteral<"ALL">, z.ZodArray<z.ZodString>]>;
-        /** Role-based query filtering (WHERE clause) */
         filter: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
-        /** Role-based default ordering (ORDER BY clause) */
         orderBy: z.ZodOptional<z.ZodArray<z.ZodObject<{
             column: z.ZodString;
             direction: z.ZodEnum<{
@@ -94,42 +87,29 @@ export declare const RolePermissionZod: z.ZodDefault<z.ZodObject<{
             }>;
         }, z.core.$strict>>>;
     }, z.core.$strict>]>>]>>>;
-    /** Stored procedures accessible by this role */
     storedProcedures: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-    /** Queues accessible by this role */
     queues: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-    /** Operations accessible by this role */
     operations: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-    /** Remote schemas accessible by this role */
     remoteSchemas: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-    /** Remote REST APIs accessible by this role */
     remoteREST: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        max: z.ZodNumber;
+        windowMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
 }, z.core.$strict>>;
 export type RolePermission = z.input<typeof RolePermissionZod>;
 /**
  * Authentication configuration
  */
 export declare const AuthConfigZod: z.ZodDefault<z.ZodOptional<z.ZodObject<{
-    /** Whether authentication is enabled */
     enabled: z.ZodBoolean;
-    /** Database name where auth tables are stored */
     database: z.ZodString;
-    /** Schema name for auth tables (default: "auth") */
     schema: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    /**
-     * Whether Graphoria should run CREATE SCHEMA / TABLE IF NOT EXISTS for the
-     * auth user table on every boot. Default: false.
-     */
     autoCreateTables: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    /** Permissions per role */
     permissions: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDefault<z.ZodObject<{
-        /** Tables accessible by this role */
         tables: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodLiteral<"ALL">, z.ZodObject<{
-            /** Allowed columns — "ALL" or array of column names */
             columns: z.ZodUnion<readonly [z.ZodLiteral<"ALL">, z.ZodArray<z.ZodString>]>;
-            /** Role-based query filtering (WHERE clause) */
             filter: z.ZodOptional<z.ZodType<Record<string, unknown>, unknown, z.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
-            /** Role-based default ordering (ORDER BY clause) */
             orderBy: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 column: z.ZodString;
                 direction: z.ZodEnum<{
@@ -142,16 +122,15 @@ export declare const AuthConfigZod: z.ZodDefault<z.ZodOptional<z.ZodObject<{
                 }>;
             }, z.core.$strict>>>;
         }, z.core.$strict>]>>]>>>;
-        /** Stored procedures accessible by this role */
         storedProcedures: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-        /** Queues accessible by this role */
         queues: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-        /** Operations accessible by this role */
         operations: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-        /** Remote schemas accessible by this role */
         remoteSchemas: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
-        /** Remote REST APIs accessible by this role */
         remoteREST: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodString>, z.ZodLiteral<"ALL">]>>>;
+        rateLimit: z.ZodOptional<z.ZodObject<{
+            max: z.ZodNumber;
+            windowMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>>>>;
 }, z.core.$strict>>>;
 export type AuthConfig = z.input<typeof AuthConfigZod>;

package/dist/src/config/types/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/config/types/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;EAO5B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;kBAG3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAC3B,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,EACL,MAAM,EACN,IAAI,EACJ,SAAS,EACT,SAAS,EACT,aAAa,EACb,UAAU,CACF,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKjE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAMjE;;GAEG;AACH,eAAO,MAAM,kBAAkB;IAC7B,uDAAuD;;IAEvD,gDAAgD;;IAEhD,oDAAoD;;;;;;;;;;;;kBAEpD,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAE1B,qCAAqC;;QAfvC,uDAAuD;;QAEvD,gDAAgD;;QAEhD,oDAAoD;;;;;;;;;;;;;IAoBlD,gDAAgD;;IAKhD,qCAAqC;;IAKrC,yCAAyC;;IAKzC,6CAA6C;;IAK7C,+CAA+C;;mBAa/C,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAM/D;;GAEG;AACH,eAAO,MAAM,aAAa;IAEtB,wCAAwC;;IAExC,iDAAiD;;IAEjD,oDAAoD;;IAEpD;;;OAGG;;IAEH,2BAA2B;;QAlE3B,qCAAqC;;YAfvC,uDAAuD;;YAEvD,gDAAgD;;YAEhD,oDAAoD;;;;;;;;;;;;;QAoBlD,gDAAgD;;QAKhD,qCAAqC;;QAKrC,yCAAyC;;QAKzC,6CAA6C;;QAK7C,+CAA+C;;;oBA+C/C,CAAC;AAEL,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/config/types/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;EAO5B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;kBAG3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAC3B,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,EACL,MAAM,EACN,IAAI,EACJ,SAAS,EACT,SAAS,EACT,aAAa,EACb,UAAU,CACF,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKjE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAMjE;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;kBAO7B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;mBAmD1B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAM/D;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAuBtB,CAAC;AAEL,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/src/config/types/cron.d.ts

@@ -35,129 +35,35 @@ export type CronTickCallback<TVariables = Record<string, unknown>> = (options: {
  * This allows TypeScript to infer the variables type
  */
 export declare const createTypedCronJobZod: <TVariables extends DefaultVariables>() => z.ZodObject<{
-    /**
-     * Unique name/identifier for the cron job
-     */
     name: z.ZodString;
-    /**
-     * Cron pattern or ISO 8601 date string
-     * Examples:
-     * - "0 0 * * *" (daily at midnight)
-     * - "*\/5 * * * *" (every 5 minutes)
-     * - "2024-01-23T00:00:00" (specific date/time)
-     */
     pattern: z.ZodString;
-    /**
-     * Optional GraphQL query to execute when the cron job runs
-     * If not provided, you must use the gqlQuery function in onTick callback
-     */
     query: z.ZodOptional<z.ZodString>;
-    /**
-     * Optional variables to pass to the GraphQL query
-     */
     variables: z.ZodOptional<z.ZodCustom<TVariables, TVariables>>;
-    /**
-     * Optional timezone (e.g., "America/New_York", "Europe/Stockholm")
-     */
     timezone: z.ZodOptional<z.ZodString>;
-    /**
-     * Whether the job should be paused from start
-     */
     paused: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    /**
-     * Maximum number of times the job should run
-     */
     maxRuns: z.ZodOptional<z.ZodNumber>;
-    /**
-     * Minimum number of seconds between triggers
-     */
     interval: z.ZodOptional<z.ZodNumber>;
-    /**
-     * ISO 8601 formatted datetime to start the job
-     */
     startAt: z.ZodOptional<z.ZodString>;
-    /**
-     * ISO 8601 formatted datetime to stop the job
-     */
     stopAt: z.ZodOptional<z.ZodString>;
-    /**
-     * Enable over-run protection (blocks new triggers while old one is in progress)
-     */
     protect: z.ZodOptional<z.ZodBoolean>;
-    /**
-     * Whether to catch errors silently or handle them
-     */
     catchErrors: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    /**
-     * Context to pass along with the cron job (for logging, etc.)
-     */
     context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-    /**
-     * Callback executed on each tick
-     */
     onTick: z.ZodOptional<z.ZodCustom<CronTickCallback<TVariables>, CronTickCallback<TVariables>>>;
 }, z.core.$strict>;
 export declare const TypedCronJobZod: z.ZodObject<{
-    /**
-     * Unique name/identifier for the cron job
-     */
     name: z.ZodString;
-    /**
-     * Cron pattern or ISO 8601 date string
-     * Examples:
-     * - "0 0 * * *" (daily at midnight)
-     * - "*\/5 * * * *" (every 5 minutes)
-     * - "2024-01-23T00:00:00" (specific date/time)
-     */
     pattern: z.ZodString;
-    /**
-     * Optional GraphQL query to execute when the cron job runs
-     * If not provided, you must use the gqlQuery function in onTick callback
-     */
     query: z.ZodOptional<z.ZodString>;
-    /**
-     * Optional variables to pass to the GraphQL query
-     */
     variables: z.ZodOptional<z.ZodCustom<Record<string, unknown>, Record<string, unknown>>>;
-    /**
-     * Optional timezone (e.g., "America/New_York", "Europe/Stockholm")
-     */
     timezone: z.ZodOptional<z.ZodString>;
-    /**
-     * Whether the job should be paused from start
-     */
     paused: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    /**
-     * Maximum number of times the job should run
-     */
     maxRuns: z.ZodOptional<z.ZodNumber>;
-    /**
-     * Minimum number of seconds between triggers
-     */
     interval: z.ZodOptional<z.ZodNumber>;
-    /**
-     * ISO 8601 formatted datetime to start the job
-     */
     startAt: z.ZodOptional<z.ZodString>;
-    /**
-     * ISO 8601 formatted datetime to stop the job
-     */
     stopAt: z.ZodOptional<z.ZodString>;
-    /**
-     * Enable over-run protection (blocks new triggers while old one is in progress)
-     */
     protect: z.ZodOptional<z.ZodBoolean>;
-    /**
-     * Whether to catch errors silently or handle them
-     */
     catchErrors: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    /**
-     * Context to pass along with the cron job (for logging, etc.)
-     */
     context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-    /**
-     * Callback executed on each tick
-     */
     onTick: z.ZodOptional<z.ZodCustom<CronTickCallback<Record<string, unknown>>, CronTickCallback<Record<string, unknown>>>>;
 }, z.core.$strict>;
 export type CronJobType = z.input<typeof TypedCronJobZod>;

package/dist/src/config/types/cron.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../../../src/config/types/cron.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,sBAAsB,wCAAoC,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,WAAW,CAAC,UAAU,GAAG,gBAAgB,IAAI;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CACnE,OAAO,EAAE;IACP,QAAQ,EAAE,CAAC,OAAO,GAAG,OAAO,EAC1B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,GAAG,CAAC,EAAE,OAAO,KACV,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,EACD,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,EAChC,QAAQ,CAAC,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,KAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,SAAS,gBAAgB;IAErE;;OAEG;;IAGH;;;;;;OAMG;;IAGH;;;OAGG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;kBAEH,CAAC;AAEL,eAAO,MAAM,eAAe;IA5ExB;;OAEG;;IAGH;;;;;;OAMG;;IAGH;;;OAGG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;kBAI+C,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,UAAU,GAAG,gBAAgB,IAAI,IAAI,CAC5D,WAAW,EACX,WAAW,GAAG,QAAQ,CACvB,GAAG;IACF,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;CACvC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,UAAU,GAAG,gBAAgB,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC"}
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../../../src/config/types/cron.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,sBAAsB,wCAAoC,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,WAAW,CAAC,UAAU,GAAG,gBAAgB,IAAI;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CACnE,OAAO,EAAE;IACP,QAAQ,EAAE,CAAC,OAAO,GAAG,OAAO,EAC1B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,GAAG,CAAC,EAAE,OAAO,KACV,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,EACD,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,EAChC,QAAQ,CAAC,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,KAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,SAAS,gBAAgB;;;;;;;;;;;;;;;kBA4ErE,CAAC;AAEL,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;kBAA0B,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,UAAU,GAAG,gBAAgB,IAAI,IAAI,CAC5D,WAAW,EACX,WAAW,GAAG,QAAQ,CACvB,GAAG;IACF,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;CACvC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,UAAU,GAAG,gBAAgB,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC"}