@heavybit/shared-lib 1.3.2 → 2.7.0

package/dist/cjs/contracts/notification-dispatch.js

@@ -1,92 +1,116 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DISPATCH_TEMPLATE_VARIABLES = exports.notificationDispatchSchema = exports.dispatchRecipientSchema = exports.dispatchValueSchema = exports.DISPATCH_LIMITS = exports.NOTIFICATION_CATEGORIES = exports.DISPATCH_CHANNELS = exports.NOTIFICATION_DISPATCH = void 0;
+exports.dispatchDataKeySchema = exports.dispatchRecipientSchema = exports.dispatchValueSchema = exports.DISPATCH_LIMITS = exports.NOTIFICATION_DISPATCH = void 0;
+exports.createNotificationDispatchSchema = createNotificationDispatchSchema;
+/**
+ * Notification dispatch: a generic command contract (shared plumbing, no app vocabulary).
+ *
+ * Services never send email, SMS or push themselves. They stage one dispatch command (default
+ * `notification:dispatch`) through their outbox, and the app's notification-service renders a seeded
+ * template and delivers it. Both sides build their schema from {@link createNotificationDispatchSchema},
+ * so producers and the consumer cannot drift.
+ *
+ * App-specific parts are parameters: the app passes its own categories (e.g. `security`, `order`) and
+ * channels (e.g. `email`, `sms`, `in_app`). Template slugs and their variables also belong to the app
+ * (keep a table next to the notification-service seeds and test both sides against it).
+ */
 const zod_1 = require("zod");
 /**
- * `notification:dispatch` — the one command every Showbiz service stages (through its outbox) to have
- * notification-service render a seeded template and deliver it by email and/or the in-app feed. No
- * other service sends email itself. One contract for both sides: producers type their payload with it
- * and notification-service validates against it, so the two cannot drift.
+ * Default command name for a dispatch. An app may use another name and pass it to its producers.
+ *
+ * @example await outbox.command(tx, NOTIFICATION_DISPATCH, dispatch, { correlationId });
  */
 exports.NOTIFICATION_DISPATCH = 'notification:dispatch';
-/** Channels a dispatch may ask for. `in_app` needs a recipient `userId` (the bell feed is per user). */
-exports.DISPATCH_CHANNELS = ['email', 'in_app'];
 /**
- * What a dispatch is about. Account mail (`security`, `account`, `team`, `marketing`) goes to a user;
- * `staff` is an operational alert to a configured staff address.
+ * Size limits that keep a dispatch small enough for a queue message and safe to render.
+ *
+ * @example z.string().max(DISPATCH_LIMITS.template)
  */
-exports.NOTIFICATION_CATEGORIES = ['security', 'account', 'team', 'marketing', 'staff'];
 exports.DISPATCH_LIMITS = {
     template: 100,
     email: 254,
     name: 200,
+    userId: 36,
     dataKeys: 40,
     dataKey: 64,
     dataValue: 2000,
     secretKeys: 10,
     permission: 100,
 };
-/** Template variables are flat scalars: they are printed into the copy, never serialised objects. */
+/**
+ * Template variables are flat scalars: they are printed into the copy, never serialised objects.
+ *
+ * @example dispatchValueSchema.parse('1250.00')
+ */
 exports.dispatchValueSchema = zod_1.z.union([zod_1.z.string().max(exports.DISPATCH_LIMITS.dataValue), zod_1.z.number().finite(), zod_1.z.boolean(), zod_1.z.null()]);
+/**
+ * Who receives a dispatch. `userId` is needed for per-user channels such as an in-app feed;
+ * addresses with no account behind them carry only `email`.
+ *
+ * @example { email: 'ada@example.com', name: 'Ada', userId: '01J…', timezone: 'Europe/Lisbon' }
+ */
 exports.dispatchRecipientSchema = zod_1.z.object({
     email: zod_1.z.string().trim().email().max(exports.DISPATCH_LIMITS.email),
     name: zod_1.z.string().trim().max(exports.DISPATCH_LIMITS.name).optional(),
-    userId: zod_1.z.string().max(36).nullish(),
+    userId: zod_1.z.string().max(exports.DISPATCH_LIMITS.userId).nullish(),
     locale: zod_1.z.string().max(20).nullish(),
     /** IANA zone; time variables are rendered in it. */
     timezone: zod_1.z.string().max(64).nullish(),
 });
-const dataKey = zod_1.z.string().regex(/^[A-Za-z][A-Za-z0-9_]*$/, 'Use a template variable name').max(exports.DISPATCH_LIMITS.dataKey);
-exports.notificationDispatchSchema = zod_1.z
-    .object({
-    /** Seeded `notification_templates.slug`. */
-    template: zod_1.z.string().trim().min(1).max(exports.DISPATCH_LIMITS.template),
-    category: zod_1.z.enum(exports.NOTIFICATION_CATEGORIES),
-    recipient: exports.dispatchRecipientSchema,
-    channels: zod_1.z.array(zod_1.z.enum(exports.DISPATCH_CHANNELS)).min(1).max(exports.DISPATCH_CHANNELS.length),
-    data: zod_1.z
-        .record(dataKey, exports.dispatchValueSchema)
-        .default({})
-        .refine((data) => Object.keys(data).length <= exports.DISPATCH_LIMITS.dataKeys, `At most ${exports.DISPATCH_LIMITS.dataKeys} variables`),
-    /**
-     * Keys of `data` holding a one-time secret (a sign-in code, a reset or confirm link). They are used to
-     * render the email and nothing else: notification-service never stores them and never puts them in the
-     * in-app feed, and email-service masks them in what it keeps.
-     */
-    secretKeys: zod_1.z.array(dataKey).max(exports.DISPATCH_LIMITS.secretKeys).default([]),
-    /** Security and staff alerts are always delivered, whatever the recipient's preferences. */
-    bypassPreferences: zod_1.z.boolean().optional(),
-    /** The permission staff recipients hold; informational until recipients are resolved by permission. */
-    targetPermission: zod_1.z.string().max(exports.DISPATCH_LIMITS.permission).optional(),
-})
-    .superRefine((dispatch, ctx) => {
-    for (const key of dispatch.secretKeys) {
-        if (!(key in dispatch.data)) {
-            ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['secretKeys'], message: `Secret key "${key}" is not in data` });
-        }
-    }
-});
 /**
- * The seeded templates Showbiz services dispatch, with the variables (`data` keys) each dispatch carries.
- * Producers send exactly these keys; a seeded template may use any subset (notification-service dead-letters
- * a dispatch missing a variable its template uses). Both sides test against this table.
+ * A template variable name the renderer can match.
+ *
+ * @example dispatchDataKeySchema.parse('expiresInMinutes')
  */
-exports.DISPATCH_TEMPLATE_VARIABLES = {
-    // auth-admin-service: account and security mail
-    'account-activation': ['name', 'code', 'expiresInHours'],
-    'login-otp': ['name', 'code', 'expiresInMinutes', 'device'],
-    'password-reset': ['name', 'resetUrl', 'expiresInMinutes'],
-    'staff-invitation': ['name', 'resetUrl', 'expiresInMinutes'],
-    'password-changed': ['name', 'changedAt'],
-    'new-device-login': ['name', 'device', 'ip', 'country', 'occurredAt', 'confirmUrl', 'disputeUrl'],
-    'team-member-added': ['name', 'profileName', 'role', 'invitedBy'],
-    'account-suspended': ['name', 'reason'],
-    'welcome-listener': ['name'],
-    'welcome-creator': ['name'],
-    // ai / newswire / editorial: staff alerts
-    'ai_budget_threshold': ['requester', 'period', 'threshold_pct', 'spent_usd', 'limit_usd'],
-    'newswire_source_unhealthy': ['source_name', 'source_slug', 'consecutive_failures', 'last_error', 'last_success_at'],
-    'newswire_block_rate_high': ['blocked', 'total', 'block_rate_pct', 'window_hours'],
-    'autopublish_audit_alert': ['problem_rate_pct', 'problem_count', 'sample_count', 'window_days', 'action_taken'],
-};
+exports.dispatchDataKeySchema = zod_1.z.string().regex(/^[A-Za-z][A-Za-z0-9_]*$/, 'Use a template variable name').max(exports.DISPATCH_LIMITS.dataKey);
+/**
+ * Build the dispatch schema for an app's categories and channels. Producers type their payload with it;
+ * the notification-service validates incoming commands with the same schema.
+ *
+ * Rules every app gets: a seeded `template` slug; one or more distinct channels; at most 40 flat-scalar `data`
+ * variables with renderer-safe names; `secretKeys` (one-time codes, reset links) must be keys of `data`;
+ * the consumer must use them only to render, never store them or show them in a feed.
+ *
+ * @typeParam C The app's categories (inferred as literals).
+ * @typeParam Ch The app's channels (inferred as literals).
+ * @param vocabulary The app's categories and channels.
+ * @returns A Zod schema; `data` defaults to `{}` and `secretKeys` to `[]`.
+ * @example
+ * export const dispatchSchema = createNotificationDispatchSchema({
+ *   categories: ['security', 'account', 'order', 'staff'],
+ *   channels: ['email', 'sms'],
+ * });
+ * export type Dispatch = z.input<typeof dispatchSchema>;
+ */
+function createNotificationDispatchSchema(vocabulary) {
+    return zod_1.z
+        .object({
+        /** Seeded template slug in the notification-service. */
+        template: zod_1.z.string().trim().min(1).max(exports.DISPATCH_LIMITS.template),
+        category: zod_1.z.enum([...vocabulary.categories]),
+        recipient: exports.dispatchRecipientSchema,
+        channels: zod_1.z
+            .array(zod_1.z.enum([...vocabulary.channels]))
+            .min(1)
+            .max(vocabulary.channels.length)
+            .refine((channels) => new Set(channels).size === channels.length, 'Each channel at most once'),
+        data: zod_1.z
+            .record(exports.dispatchDataKeySchema, exports.dispatchValueSchema)
+            .default({})
+            .refine((data) => Object.keys(data).length <= exports.DISPATCH_LIMITS.dataKeys, `At most ${exports.DISPATCH_LIMITS.dataKeys} variables`),
+        /** Keys of `data` holding a one-time secret: used to render, never stored or shown in a feed. */
+        secretKeys: zod_1.z.array(exports.dispatchDataKeySchema).max(exports.DISPATCH_LIMITS.secretKeys).default([]),
+        /** Deliver whatever the recipient's notification preferences say (for mail the recipient cannot opt out of). */
+        bypassPreferences: zod_1.z.boolean().optional(),
+        /** The permission the recipients were resolved by, when they were (traceability only). */
+        targetPermission: zod_1.z.string().max(exports.DISPATCH_LIMITS.permission).optional(),
+    })
+        .superRefine((dispatch, ctx) => {
+        for (const key of dispatch.secretKeys) {
+            if (!(key in dispatch.data)) {
+                ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, path: ['secretKeys'], message: `Secret key "${key}" is not in data` });
+            }
+        }
+    });
+}
 //# sourceMappingURL=notification-dispatch.js.map

package/dist/cjs/contracts/notification-dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-dispatch.js","sourceRoot":"","sources":["../../../src/contracts/notification-dispatch.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D,wGAAwG;AAC3F,QAAA,iBAAiB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAG9D;;;GAGG;AACU,QAAA,uBAAuB,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;AAGzF,QAAA,eAAe,GAAG;IAC7B,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,GAAG;CACP,CAAC;AAEX,qGAAqG;AACxF,QAAA,mBAAmB,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,SAAS,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAGvH,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,KAAK,CAAC;IAC3D,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACpC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACpC,oDAAoD;IACpD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,OAAO,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC,GAAG,CAAC,uBAAe,CAAC,OAAO,CAAC,CAAC;AAE5G,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,4CAA4C;IAC5C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAe,CAAC,QAAQ,CAAC;IAChE,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,+BAAuB,CAAC;IACzC,SAAS,EAAE,+BAAuB;IAClC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,yBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,yBAAiB,CAAC,MAAM,CAAC;IACjF,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC,OAAO,EAAE,2BAAmB,CAAC;SACpC,OAAO,CAAC,EAAE,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,uBAAe,CAAC,QAAQ,EAAE,WAAW,uBAAe,CAAC,QAAQ,YAAY,CAAC;IAC1H;;;;OAIG;IACH,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,uBAAe,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxE,4FAA4F;IAC5F,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,uGAAuG;IACvG,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,eAAe,GAAG,kBAAkB,EAAE,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACU,QAAA,2BAA2B,GAAG;IACzC,gDAAgD;IAChD,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC;IACxD,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,CAAC;IAC3D,gBAAgB,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC;IAC1D,kBAAkB,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC;IAC5D,kBAAkB,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;IACzC,kBAAkB,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC;IACjG,mBAAmB,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC;IACjE,mBAAmB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACvC,kBAAkB,EAAE,CAAC,MAAM,CAAC;IAC5B,iBAAiB,EAAE,CAAC,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,qBAAqB,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC;IACzF,2BAA2B,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,sBAAsB,EAAE,YAAY,EAAE,iBAAiB,CAAC;IACpH,0BAA0B,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,CAAC;IAClF,yBAAyB,EAAE,CAAC,kBAAkB,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,CAAC;CAC3D,CAAC"}
+{"version":3,"file":"notification-dispatch.js","sourceRoot":"","sources":["../../../src/contracts/notification-dispatch.ts"],"names":[],"mappings":";;;AAoGA,4EA8BC;AAlID;;;;;;;;;;;GAWG;AACH,6BAAwB;AAExB;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D;;;;GAIG;AACU,QAAA,eAAe,GAAG;IAC7B,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,EAAE;IACV,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,GAAG;CACP,CAAC;AAEX;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,SAAS,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAGpI;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,KAAK,CAAC;IAC3D,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IACxD,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACpC,oDAAoD;IACpD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;CACvC,CAAC,CAAC;AAGH;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC,GAAG,CAAC,uBAAe,CAAC,OAAO,CAAC,CAAC;AAc9I;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,gCAAgC,CAAkD,UAAqC;IACrI,OAAO,OAAC;SACL,MAAM,CAAC;QACN,wDAAwD;QACxD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAe,CAAC,QAAQ,CAAC;QAChE,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,UAAU,CAAgB,CAAC;QAC3D,SAAS,EAAE,+BAAuB;QAClC,QAAQ,EAAE,OAAC;aACR,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAkB,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC/B,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;QAChG,IAAI,EAAE,OAAC;aACJ,MAAM,CAAC,6BAAqB,EAAE,2BAAmB,CAAC;aAClD,OAAO,CAAC,EAAE,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,uBAAe,CAAC,QAAQ,EAAE,WAAW,uBAAe,CAAC,QAAQ,YAAY,CAAC;QAC1H,iGAAiG;QACjG,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC,CAAC,GAAG,CAAC,uBAAe,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACtF,gHAAgH;QAChH,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACzC,0FAA0F;QAC1F,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;KACxE,CAAC;SACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;QAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,eAAe,GAAG,kBAAkB,EAAE,CAAC,CAAC;YACrH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cjs/database/db.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDb = createDb;
+exports.knexConfig = knexConfig;
+exports.connectionOptions = connectionOptions;
+const mysql2_1 = require("drizzle-orm/mysql2");
+const pool_js_1 = require("./pool.js");
+/**
+ * Creates the service's Drizzle database. There is no module-level singleton: call it once in
+ * `container.ts` and inject `db` into repositories.
+ *
+ * @example const { db, ping, close } = createDb({ env: config, schema });
+ */
+function createDb(options) {
+    const { env, schema } = options;
+    const pool = options.pool ?? (0, pool_js_1.createMysqlPool)(connectionOptions(env));
+    const db = (0, mysql2_1.drizzle)(pool, { schema, mode: 'default' });
+    return {
+        db,
+        ping: () => (0, pool_js_1.pingMysql)(pool),
+        close: () => pool.end(),
+    };
+}
+/**
+ * Knex config for a service's `knexfile.js`. Knex runs **migrations and seeds only** (`.cjs` files
+ * in `./migrations` and `./seeds`); repositories use Drizzle.
+ *
+ * @example module.exports = knexConfig(config);
+ */
+function knexConfig(env) {
+    return (0, pool_js_1.createKnexConfig)(connectionOptions(env));
+}
+/** Maps the validated `DB_*` env to connection options. */
+function connectionOptions(env) {
+    return { host: env.DB_HOST, port: env.DB_PORT, user: env.DB_USER, password: env.DB_PASSWORD, database: env.DB_NAME, poolMax: env.DB_POOL_MAX };
+}
+//# sourceMappingURL=db.js.map

package/dist/cjs/database/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../src/database/db.ts"],"names":[],"mappings":";;AAyCA,4BASC;AAQD,gCAEC;AAGD,8CAEC;AAhED,+CAAkE;AAIlE,uCAAsG;AA8BtG;;;;;GAKG;AACH,SAAgB,QAAQ,CAA0C,OAAiC;IACjG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,yBAAe,EAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,GAAG,IAAA,gBAAO,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAsB,CAAC;IAC3E,OAAO;QACL,EAAE;QACF,IAAI,EAAE,GAAG,EAAE,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,GAAgB;IACzC,OAAO,IAAA,0BAAgB,EAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,SAAgB,iBAAiB,CAAC,GAAgB;IAChD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AACjJ,CAAC"}

package/dist/cjs/database/index.js

@@ -1,57 +1,28 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createMysqlPool = createMysqlPool;
-exports.createKnexConfig = createKnexConfig;
-exports.pingMysql = pingMysql;
-exports.escapeLike = escapeLike;
-const promise_1 = __importDefault(require("mysql2/promise"));
 /**
- * mysql2 pool for Drizzle. Sessions run in UTC and utf8mb4 so timestamps and emoji round-trip
- * unchanged regardless of server defaults.
+ * `@heavybit/shared-lib/database`: Drizzle data access for services. Repositories use Drizzle
+ * through {@link ScopedRepository} and the scopes in `scopes.ts`; raw scoped queries and Knex in
+ * `src/` are forbidden. Knex is for migrations and seeds only (`knexConfig`, `@heavybit/shared-lib/knex`).
  */
-function createMysqlPool(options) {
-    return promise_1.default.createPool({
-        host: options.host,
-        port: options.port,
-        user: options.user,
-        password: options.password,
-        database: options.database,
-        connectionLimit: options.poolMax ?? 10,
-        waitForConnections: true,
-        enableKeepAlive: true,
-        timezone: 'Z',
-        charset: 'utf8mb4_unicode_ci',
-        dateStrings: false,
-        supportBigNumbers: true,
-    });
-}
-/** Knex config for migrations/seeds and query-builder use (same session settings as the pool). */
-function createKnexConfig(options) {
-    return {
-        client: 'mysql2',
-        connection: {
-            host: options.host,
-            port: options.port,
-            user: options.user,
-            password: options.password,
-            database: options.database,
-            timezone: 'Z',
-            charset: 'utf8mb4',
-        },
-        pool: { min: 0, max: options.poolMax ?? 10 },
-        migrations: { directory: options.migrationsDir ?? './migrations', tableName: 'knex_migrations', loadExtensions: ['.cjs', '.js'] },
-        seeds: { directory: options.seedsDir ?? './seeds', loadExtensions: ['.cjs', '.js'] },
-    };
-}
-/** Readiness probe helper. */
-async function pingMysql(pool) {
-    await pool.query('SELECT 1');
-}
-/** Escapes `%`, `_` and `\` for use inside a LIKE pattern. */
-function escapeLike(value) {
-    return value.replace(/[\\%_]/g, (ch) => `\\${ch}`);
-}
+__exportStar(require("./pool.js"), exports);
+__exportStar(require("./db.js"), exports);
+__exportStar(require("./scopes.js"), exports);
+__exportStar(require("./scoped-repository.js"), exports);
+__exportStar(require("./pagination.js"), exports);
+__exportStar(require("./tables.js"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/database/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/index.ts"],"names":[],"mappings":";;;;;AAgBA,0CAeC;AAGD,4CAgBC;AAGD,8BAEC;AAGD,gCAEC;AA3DD,6DAAmC;AAWnC;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAA+B;IAC7D,OAAO,iBAAK,CAAC,UAAU,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QACtC,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,kGAAkG;AAClG,SAAgB,gBAAgB,CAAC,OAA+E;IAC9G,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,GAAG;YACb,OAAO,EAAE,SAAS;SACnB;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;QAC5C,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;QACjI,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;KACrF,CAAC;AACJ,CAAC;AAED,8BAA8B;AACvB,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;GAIG;AACH,4CAA0B;AAC1B,0CAAwB;AACxB,8CAA4B;AAC5B,yDAAuC;AACvC,kDAAgC;AAChC,8CAA4B"}

package/dist/cjs/database/pagination.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cursorQuerySchema = exports.DEFAULT_PAGE_LIMIT = exports.MAX_PAGE_LIMIT = void 0;
+exports.parseCursorQuery = parseCursorQuery;
+exports.encodeCursor = encodeCursor;
+exports.decodeCursor = decodeCursor;
+exports.buildCursorPage = buildCursorPage;
+const zod_1 = require("zod");
+const errors_js_1 = require("../common/errors.js");
+const response_js_1 = require("../common/response.js");
+const index_js_1 = require("../validation/index.js");
+/**
+ * Cursor (keyset) pagination (D6). Clients send `?cursor=&limit=`; the cursor is an opaque
+ * base64url token of `{ sortKey, id }` (the last row's sort value plus an id tie-breaker).
+ * Dependency-light: usable from controllers without the database subpath.
+ */
+/** Largest page size a client may ask for. */
+exports.MAX_PAGE_LIMIT = 100;
+/** Page size when the client sends none. */
+exports.DEFAULT_PAGE_LIMIT = 20;
+const MAX_CURSOR_LENGTH = 512;
+/** `{ cursor?, limit }` query schema: limit 1–100, default 20; unknown keys are stripped. */
+exports.cursorQuerySchema = zod_1.z.object({
+    cursor: zod_1.z.string().trim().min(1).max(MAX_CURSOR_LENGTH).optional(),
+    limit: zod_1.z.coerce.number().int().min(1).max(exports.MAX_PAGE_LIMIT).default(exports.DEFAULT_PAGE_LIMIT),
+});
+/**
+ * Validates `{ cursor, limit }` from a query string.
+ *
+ * @throws ValidationError (422) with field errors when invalid.
+ * @example const { cursor, limit } = parseCursorQuery(req.query);
+ */
+function parseCursorQuery(input) {
+    const result = exports.cursorQuerySchema.safeParse({ cursor: emptyToUndefined(input?.cursor), limit: emptyToUndefined(input?.limit) });
+    if (result.success)
+        return result.data;
+    throw new errors_js_1.ValidationError((0, index_js_1.zodIssuesToErrors)(result.error), 'Invalid pagination parameters');
+}
+function emptyToUndefined(value) {
+    return value === '' || value === null ? undefined : value;
+}
+/**
+ * Encodes a cursor. Date sort keys become ISO strings.
+ *
+ * @example encodeCursor({ sortKey: row.createdAt, id: row.id })
+ */
+function encodeCursor(cursor) {
+    const sortKey = cursor.sortKey instanceof Date ? cursor.sortKey.toISOString() : cursor.sortKey;
+    return Buffer.from(JSON.stringify({ k: sortKey, i: cursor.id }), 'utf8').toString('base64url');
+}
+/**
+ * Decodes a cursor produced by {@link encodeCursor}.
+ *
+ * @throws ValidationError (422, field `cursor`) for anything malformed or tampered with.
+ */
+function decodeCursor(token) {
+    const invalid = () => new errors_js_1.ValidationError({ cursor: ['Invalid cursor'] }, 'Invalid cursor');
+    if (typeof token !== 'string' || token.length === 0 || token.length > MAX_CURSOR_LENGTH || !/^[A-Za-z0-9_-]+$/.test(token))
+        throw invalid();
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(token, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw invalid();
+    }
+    if (!parsed || typeof parsed !== 'object')
+        throw invalid();
+    const { k, i } = parsed;
+    const validKey = k === null || typeof k === 'string' || (typeof k === 'number' && Number.isFinite(k));
+    if (!validKey || typeof i !== 'string' || i.length === 0 || i.length > 64)
+        throw invalid();
+    return { sortKey: k, id: i };
+}
+/**
+ * Builds a page from `limit + 1` fetched rows: the extra row only signals that more exist.
+ *
+ * @param rows Rows fetched with `limit + 1`.
+ * @param limit The page size.
+ * @param cursorOf Extracts `{ sortKey, id }` from a row for the next cursor.
+ */
+function buildCursorPage(rows, limit, cursorOf) {
+    const data = rows.slice(0, limit);
+    const hasMore = rows.length > limit && data.length > 0;
+    const nextCursor = hasMore ? encodeCursor(cursorOf(data[data.length - 1])) : null;
+    return { data, meta: (0, response_js_1.buildCursorPageMeta)(limit, nextCursor) };
+}
+//# sourceMappingURL=pagination.js.map

package/dist/cjs/database/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../src/database/pagination.ts"],"names":[],"mappings":";;;AA0CA,4CAIC;AAWD,oCAGC;AAOD,oCAcC;AASD,0CAKC;AA/FD,6BAAwB;AACxB,mDAAsD;AACtD,uDAA4D;AAE5D,qDAA2D;AAE3D;;;;GAIG;AAEH,8CAA8C;AACjC,QAAA,cAAc,GAAG,GAAG,CAAC;AAClC,4CAA4C;AAC/B,QAAA,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,6FAA6F;AAChF,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAClE,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAc,CAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC;CACtF,CAAC,CAAC;AAcH;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,KAAwD;IACvF,MAAM,MAAM,GAAG,yBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/H,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,IAAI,2BAAe,CAAC,IAAA,4BAAiB,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,MAAqD;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAC/F,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAa;IACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,2BAAe,CAAC,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC5I,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3D,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAsC,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3F,OAAO,EAAE,OAAO,EAAE,CAAkB,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAI,IAAS,EAAE,KAAa,EAAE,QAAmE;IAC9H,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAA,iCAAmB,EAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/cjs/database/pool.js

@@ -0,0 +1,60 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMysqlPool = createMysqlPool;
+exports.createKnexConfig = createKnexConfig;
+exports.pingMysql = pingMysql;
+exports.escapeLike = escapeLike;
+const promise_1 = __importDefault(require("mysql2/promise"));
+/**
+ * mysql2 pool for Drizzle. Sessions run in UTC and utf8mb4 so timestamps and emoji round-trip
+ * unchanged regardless of server defaults.
+ */
+function createMysqlPool(options) {
+    return promise_1.default.createPool({
+        host: options.host,
+        port: options.port,
+        user: options.user,
+        password: options.password,
+        database: options.database,
+        connectionLimit: options.poolMax ?? 10,
+        waitForConnections: true,
+        enableKeepAlive: true,
+        timezone: '+00:00',
+        charset: 'utf8mb4_unicode_ci',
+        dateStrings: false,
+        supportBigNumbers: true,
+    });
+}
+/**
+ * Knex config for migrations and seeds: mysql2, utf8mb4, UTC, `.cjs` files only. Services call it
+ * through `knexConfig(env)` in their `knexfile.js`.
+ */
+function createKnexConfig(options) {
+    return {
+        client: 'mysql2',
+        connection: {
+            host: options.host,
+            port: options.port,
+            user: options.user,
+            password: options.password,
+            database: options.database,
+            timezone: '+00:00',
+            charset: 'utf8mb4',
+        },
+        pool: { min: 0, max: options.poolMax ?? 10 },
+        migrations: { directory: options.migrationsDir ?? './migrations', tableName: 'knex_migrations', extension: 'cjs', loadExtensions: ['.cjs'] },
+        seeds: { directory: options.seedsDir ?? './seeds', extension: 'cjs', loadExtensions: ['.cjs'] },
+    };
+}
+/** Readiness probe helper. */
+async function pingMysql(pool) {
+    await pool.query('SELECT 1');
+}
+/** Escapes `%`, `_` and `\` for use inside a LIKE pattern. */
+function escapeLike(value) {
+    return value.replace(/[\\%_]/g, (ch) => `\\${ch}`);
+}
+//# sourceMappingURL=pool.js.map

package/dist/cjs/database/pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.js","sourceRoot":"","sources":["../../../src/database/pool.ts"],"names":[],"mappings":";;;;;AA+BA,0CAeC;AAMD,4CAgBC;AAGD,8BAEC;AAGD,gCAEC;AA7ED,6DAAmC;AA0BnC;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAA+B;IAC7D,OAAO,iBAAK,CAAC,UAAU,CAAC;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QACtC,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAA0B;IACzD,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,SAAS;SACnB;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;QAC5C,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,aAAa,IAAI,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE;QAC5I,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE;KAChG,CAAC;AACJ,CAAC;AAED,8BAA8B;AACvB,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/cjs/database/scoped-repository.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopedRepository = void 0;
+const drizzle_orm_1 = require("drizzle-orm");
+const errors_js_1 = require("../common/errors.js");
+const pagination_js_1 = require("./pagination.js");
+const scopes_js_1 = require("./scopes.js");
+/**
+ * Base for every repository over scoped data (Drizzle). Every read, count, update and delete is
+ * AND-ed with the scope's condition, and every insert is stamped with the scope value; there is no
+ * method that returns an unscoped query. Subclasses add queries only through {@link scoped} and
+ * {@link executor}.
+ *
+ * @example
+ * class NoteRepository extends ScopedRepository<typeof notes, ScopeContext<'workspaceId'>> {
+ *   findByTitle(ctx: ScopeContext<'workspaceId'>, title: string) {
+ *     return this.executor().select().from(this.table).where(this.scoped(ctx, eq(this.table.title, title)));
+ *   }
+ * }
+ * const repo = new NoteRepository(db, notes, workspaceScope);
+ */
+class ScopedRepository {
+    #db;
+    table;
+    scope;
+    idColumn;
+    constructor(db, table, scope, options = {}) {
+        this.#db = db;
+        this.table = table;
+        this.scope = scope;
+        this.idColumn = (0, scopes_js_1.resolveColumn)(table, options.idColumn ?? 'id').column;
+        (0, scopes_js_1.resolveColumn)(table, scope.column); // fail fast when the table lacks the scope column
+    }
+    /** The row with `id` inside the caller's scope, or null (absent and out-of-scope look the same). */
+    async findById(ctx, id, options = {}) {
+        const rows = await this.executor(options.tx).select().from(this.table)
+            .where(this.scoped(ctx, (0, drizzle_orm_1.eq)(this.idColumn, id))).limit(1);
+        return rows[0] ?? null;
+    }
+    /** Rows inside the caller's scope, keyset-paginated by `orderBy` then id. */
+    async findMany(ctx, options = {}) {
+        return this.selectPage(ctx, options, clampLimit(options.limit));
+    }
+    /** Like {@link findMany}, returning `{ data, meta: { limit, nextCursor, hasMore } }`. */
+    async findPage(ctx, options = {}) {
+        const limit = clampLimit(options.limit);
+        const rows = await this.selectPage(ctx, options, limit + 1);
+        const { key: sortKey } = (0, scopes_js_1.resolveColumn)(this.table, options.orderBy?.column ?? this.idColumn.name);
+        const { key: idKey } = (0, scopes_js_1.resolveColumn)(this.table, this.idColumn.name);
+        return (0, pagination_js_1.buildCursorPage)(rows, limit, (row) => {
+            const record = row;
+            return { sortKey: record[sortKey], id: String(record[idKey]) };
+        });
+    }
+    /** Number of rows inside the caller's scope matching `where`. */
+    async count(ctx, where, options = {}) {
+        const rows = await this.executor(options.tx).select({ n: (0, drizzle_orm_1.count)() }).from(this.table).where(this.scoped(ctx, where));
+        return Number(rows[0]?.n ?? 0);
+    }
+    /**
+     * Inserts rows stamped with the caller's scope value.
+     *
+     * @throws ForbiddenError (`SCOPE_MISMATCH`) when a row names another scope.
+     * @returns The stamped rows as written.
+     */
+    async insert(ctx, rows, options = {}) {
+        const list = (Array.isArray(rows) ? rows : [rows]).map((row) => this.scope.stamp(this.table, row, ctx));
+        if (list.length === 0)
+            return [];
+        await this.executor(options.tx).insert(this.table).values(list);
+        return list;
+    }
+    /**
+     * Updates rows inside the caller's scope. Rows never move between scopes.
+     *
+     * @throws ForbiddenError (`SCOPE_IMMUTABLE`) when `values` sets the scope column.
+     * @returns Number of rows changed.
+     */
+    async update(ctx, where, values, options = {}) {
+        if ((0, scopes_js_1.resolveColumn)(this.table, this.scope.column).key in values) {
+            throw new errors_js_1.ForbiddenError(`The ${this.scope.name} of a row cannot be changed`, { code: 'SCOPE_IMMUTABLE' });
+        }
+        const result = await this.executor(options.tx).update(this.table).set(values).where(this.scoped(ctx, where));
+        return affectedRows(result);
+    }
+    /**
+     * Deletes rows inside the caller's scope.
+     *
+     * @returns Number of rows deleted.
+     */
+    async delete(ctx, where, options = {}) {
+        const result = await this.executor(options.tx).delete(this.table).where(this.scoped(ctx, where));
+        return affectedRows(result);
+    }
+    /** The scope condition AND-ed with `conditions`. The only way subclasses may build a WHERE. */
+    scoped(ctx, ...conditions) {
+        return (0, drizzle_orm_1.and)(this.scope.condition(this.table, ctx), ...conditions);
+    }
+    /** The executor for a call: `tx` when given, otherwise the pool. Always pair with {@link scoped}. */
+    executor(tx) {
+        return tx ?? this.#db;
+    }
+    async selectPage(ctx, options, take) {
+        const sort = (0, scopes_js_1.resolveColumn)(this.table, options.orderBy?.column ?? this.idColumn.name).column;
+        const descending = (options.orderBy?.direction ?? 'desc') === 'desc';
+        const after = options.cursor ? this.afterCursor(options.cursor, sort, descending) : undefined;
+        const order = descending ? [(0, drizzle_orm_1.desc)(sort), (0, drizzle_orm_1.desc)(this.idColumn)] : [(0, drizzle_orm_1.asc)(sort), (0, drizzle_orm_1.asc)(this.idColumn)];
+        const rows = await this.executor(options.tx).select().from(this.table)
+            .where(this.scoped(ctx, options.where, after)).orderBy(...order).limit(take);
+        return rows;
+    }
+    /** Keyset condition: rows strictly after the cursor's (sortKey, id) in the sort direction. */
+    afterCursor(token, sort, descending) {
+        const { sortKey, id } = (0, pagination_js_1.decodeCursor)(token);
+        const past = descending ? drizzle_orm_1.lt : drizzle_orm_1.gt;
+        if (sort === this.idColumn)
+            return past(this.idColumn, id);
+        const value = sort.dataType === 'date' && typeof sortKey === 'string' ? new Date(sortKey) : sortKey;
+        return (0, drizzle_orm_1.or)(past(sort, value), (0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(sort, value), past(this.idColumn, id)));
+    }
+}
+exports.ScopedRepository = ScopedRepository;
+function clampLimit(limit) {
+    if (limit === undefined || !Number.isFinite(limit))
+        return pagination_js_1.DEFAULT_PAGE_LIMIT;
+    return Math.min(pagination_js_1.MAX_PAGE_LIMIT, Math.max(1, Math.trunc(limit)));
+}
+function affectedRows(result) {
+    const header = (Array.isArray(result) ? result[0] : result);
+    return Number(header?.affectedRows ?? 0);
+}
+//# sourceMappingURL=scoped-repository.js.map

package/dist/cjs/database/scoped-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-repository.js","sourceRoot":"","sources":["../../../src/database/scoped-repository.ts"],"names":[],"mappings":";;;AAAA,6CAA4H;AAE5H,mDAAqD;AAErD,mDAAwH;AACxH,2CAA2D;AA2C3D;;;;;;;;;;;;;GAaG;AACH,MAAa,gBAAgB;IAClB,GAAG,CAAa;IACN,KAAK,CAAS;IACd,KAAK,CAAiB;IACtB,QAAQ,CAAc;IAEzC,YAAY,EAAc,EAAE,KAAa,EAAE,KAAqB,EAAE,UAAmC,EAAE;QACrG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAA,yBAAa,EAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;QACtE,IAAA,yBAAa,EAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kDAAkD;IACxF,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,QAAQ,CAAC,GAAS,EAAE,EAAU,EAAE,UAAoB,EAAE;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAmB,CAAC;aACjF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAA,gBAAE,EAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAQ,IAAI,CAAC,CAAC,CAA0C,IAAI,IAAI,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,QAAQ,CAAC,GAAS,EAAE,UAA2B,EAAE;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,QAAQ,CAAC,GAAS,EAAE,UAA2B,EAAE;QACrD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClG,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,IAAA,+BAAe,EAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,GAA8B,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAyB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK,CAAC,GAAS,EAAE,KAAW,EAAE,UAAoB,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAA,mBAAK,GAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAClI,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,GAAS,EAAE,IAA2D,EAAE,UAAoB,EAAE;QACzG,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAA8B,EAAE,GAAG,CAAC,CAAC,CAAC;QACnI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAkC,CAAC,CAAC;QAC9F,OAAO,IAAkC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,GAAS,EAAE,KAAU,EAAE,MAAyC,EAAE,UAAoB,EAAE;QACnG,IAAI,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;YAC/D,MAAM,IAAI,0BAAc,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,6BAA6B,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAe,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACtH,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,GAAS,EAAE,KAAU,EAAE,UAAoB,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACjG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,+FAA+F;IACrF,MAAM,CAAC,GAAS,EAAE,GAAG,UAAkC;QAC/D,OAAO,IAAA,iBAAG,EAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,UAAU,CAAE,CAAC;IACpE,CAAC;IAED,qGAAqG;IAC3F,QAAQ,CAAC,EAAe;QAChC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAS,EAAE,OAAwB,EAAE,IAAY;QACxE,MAAM,IAAI,GAAG,IAAA,yBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC7F,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,KAAK,MAAM,CAAC;QACrE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAI,EAAC,IAAI,CAAC,EAAE,IAAA,kBAAI,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAG,EAAC,IAAI,CAAC,EAAE,IAAA,iBAAG,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAmB,CAAC;aACjF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/E,OAAO,IAAkC,CAAC;IAC5C,CAAC;IAED,8FAA8F;IACtF,WAAW,CAAC,KAAa,EAAE,IAAiB,EAAE,UAAmB;QACvE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,IAAA,4BAAY,EAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,gBAAE,CAAC,CAAC,CAAC,gBAAE,CAAC;QAClC,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACpG,OAAO,IAAA,gBAAE,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC;IAC/E,CAAC;CACF;AA7GD,4CA6GC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,kCAAkB,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,8BAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAA+B,CAAC;IAC1F,OAAO,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}