@kelpie/server 0.1.0

package/dist/modules/workspace/capabilities.js

@@ -0,0 +1,12 @@
+/**
+ * Capabilities the workspace module declares.
+ *
+ * A capability is a name plus what kind of answer it takes. Services reference
+ * these constants rather than the string, so a typo is a compile error.
+ */
+export const SEATS_LIMIT = {
+    name: 'seats.limit',
+    kind: 'limit',
+    description: 'How many people can belong to one workspace. Unlimited in open source.',
+};
+//# sourceMappingURL=capabilities.js.map

package/dist/modules/workspace/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../src/modules/workspace/capabilities.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,wEAAwE;CACtF,CAAA"}

package/dist/modules/workspace/idempotencyMiddleware.d.ts

@@ -0,0 +1,16 @@
+import type { MiddlewareHandler } from 'hono';
+import type { Database } from '../../lib/database.ts';
+import type { IdFactory } from '../../lib/ids.ts';
+import type { Logger } from '../../lib/logger.ts';
+import type { CredentialDependencies } from '../auth/credentials.ts';
+/** `api.md`: a replayed key returns the original response within this window. */
+export declare const IDEMPOTENCY_REPLAY_WINDOW_MS: number;
+export interface IdempotencyMiddlewareDependencies {
+    readonly db: Database;
+    readonly now: () => Date;
+    readonly createId: IdFactory;
+    readonly credentials: CredentialDependencies;
+    readonly log: Logger;
+}
+export declare function createIdempotencyMiddleware(dependencies: IdempotencyMiddlewareDependencies): MiddlewareHandler;
+//# sourceMappingURL=idempotencyMiddleware.d.ts.map

package/dist/modules/workspace/idempotencyMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyMiddleware.d.ts","sourceRoot":"","sources":["../../../src/modules/workspace/idempotencyMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAEtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAGrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAGjD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAmBpE,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,QAAsB,CAAA;AAE/D,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAA;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AA8ED,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,iCAAiC,GAAG,iBAAiB,CA0F9G"}

package/dist/modules/workspace/idempotencyMiddleware.js

@@ -0,0 +1,142 @@
+import { createHash } from 'node:crypto';
+import { AppError, describeThrown } from '../../lib/errors.js';
+import { PUBLIC_ROUTE_PREFIX } from '../../lib/http.js';
+import { actorWorkspaceId } from '../auth/actor.js';
+import { resolveActorFrom } from '../auth/credentials.js';
+import { completeIdempotencyKey, deleteIdempotencyKey, findIdempotencyKey, pruneExpiredIdempotencyKeys, reserveIdempotencyKey, } from './idempotencyRepository.js';
+/**
+ * `POST /v1/*` accepts an optional `Idempotency-Key` header (`api.md`). Applied
+ * once here rather than per route, because every module's `POST` gets the same
+ * behaviour and none of them decide it individually.
+ */
+const IDEMPOTENCY_KEY_HEADER = 'Idempotency-Key';
+/** `api.md`: a replayed key returns the original response within this window. */
+export const IDEMPOTENCY_REPLAY_WINDOW_MS = 24 * 60 * 60 * 1000;
+/** Method, path, and raw body, so a byte-for-byte different request never replays. */
+function hashRequest(method, path, rawBody) {
+    return createHash('sha256').update(method).update('\n').update(path).update('\n').update(rawBody).digest('hex');
+}
+function isPublicRoute(path) {
+    return path === PUBLIC_ROUTE_PREFIX || path.startsWith(`${PUBLIC_ROUTE_PREFIX}/`);
+}
+/**
+ * Builds the replayed `Response` directly rather than through `c.json()`: the
+ * stored status is a `number` read back from the database, not one of the
+ * literal `ContentfulStatusCode`s `c.json()`'s type expects, and there is
+ * nothing to narrow it to at this point.
+ */
+function replayResponse(stored) {
+    return new Response(JSON.stringify(stored.body), {
+        status: stored.status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+function conflict(message) {
+    return AppError.conflict(message, [{ field: 'Idempotency-Key', message }]);
+}
+/**
+ * Reserves the key, retrying once if the row we read after a failed reserve
+ * has since disappeared — the concurrent request holding it failed and freed
+ * it between our attempts. A second miss means another request just took it;
+ * treated the same as any other in-flight conflict rather than retried again,
+ * so a pathological case cannot loop.
+ */
+async function acquireReservation(dependencies, params) {
+    const expiresAt = new Date(params.now.getTime() + IDEMPOTENCY_REPLAY_WINDOW_MS);
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+        const reserved = await reserveIdempotencyKey(dependencies.db, {
+            id: dependencies.createId('idempotencyKey'),
+            workspaceId: params.workspaceId,
+            key: params.key,
+            requestHash: params.requestHash,
+            expiresAt,
+            now: params.now,
+        });
+        if (reserved !== undefined) {
+            return { kind: 'reserved', record: reserved };
+        }
+        const existing = await findIdempotencyKey(dependencies.db, params.workspaceId, params.key);
+        if (existing !== undefined) {
+            return { kind: 'existing', record: existing };
+        }
+    }
+    return { kind: 'contended' };
+}
+export function createIdempotencyMiddleware(dependencies) {
+    return async (context, next) => {
+        if (context.req.method !== 'POST' || isPublicRoute(context.req.path)) {
+            await next();
+            return;
+        }
+        const key = context.req.header(IDEMPOTENCY_KEY_HEADER);
+        if (key === undefined || key.length === 0) {
+            await next();
+            return;
+        }
+        const actor = await resolveActorFrom(dependencies.credentials, context);
+        const workspaceId = actorWorkspaceId(actor);
+        // Between signup and a first workspace (`POST /v1/workspaces`, `POST
+        // /v1/invites/accept`) there is nothing to scope a key to. The request
+        // runs unguarded rather than refusing a legitimate onboarding call.
+        if (workspaceId === null) {
+            await next();
+            return;
+        }
+        const rawBody = await context.req.text();
+        const requestHash = hashRequest(context.req.method, context.req.path, rawBody);
+        const now = dependencies.now();
+        const outcome = await acquireReservation(dependencies, { workspaceId, key, requestHash, now });
+        if (outcome.kind === 'contended') {
+            throw conflict('A request with this Idempotency-Key is already in progress');
+        }
+        if (outcome.kind === 'existing') {
+            if (outcome.record.response === null) {
+                throw conflict('A request with this Idempotency-Key is already in progress');
+            }
+            if (outcome.record.requestHash !== requestHash) {
+                throw conflict('This Idempotency-Key was already used for a different request');
+            }
+            return replayResponse(outcome.record.response);
+        }
+        const record = outcome.record;
+        // `app.onError` (`app.ts`) catches a thrown `AppError` at the dispatch frame
+        // closest to where it was thrown, inside Hono's own `compose`, and resolves
+        // `next()` there rather than rejecting it back up through this middleware.
+        // So "the handler threw" and "the handler answered" are indistinguishable
+        // from here by whether `next()` rejects — both leave `context.res` set. The
+        // `try`/`catch` below only ever fires for something `onError` itself could
+        // not handle (a non-`Error` throw); the real failure signal is the status.
+        try {
+            await next();
+        }
+        catch (error) {
+            await deleteIdempotencyKey(dependencies.db, record.id);
+            throw error;
+        }
+        if (context.res.status >= 400) {
+            // Not replayed: a retry of this key should run again, not repeat the
+            // failure. Deleting rather than storing it is what makes that happen.
+            await deleteIdempotencyKey(dependencies.db, record.id);
+            return undefined;
+        }
+        try {
+            const bodyText = await context.res.clone().text();
+            const body = bodyText.length === 0 ? null : JSON.parse(bodyText);
+            await completeIdempotencyKey(dependencies.db, record.id, { status: context.res.status, body });
+            await pruneExpiredIdempotencyKeys(dependencies.db, workspaceId, now);
+        }
+        catch (persistError) {
+            // The handler already answered correctly; a bookkeeping failure here must
+            // not turn that answer into a 500. The reservation is left in flight and
+            // simply expires, so the worst case is a future replay of this key being
+            // refused as in-progress rather than replayed, never a duplicate write.
+            dependencies.log.warn('failed to persist idempotency key response', {
+                workspaceId,
+                key,
+                error: describeThrown(persistError),
+            });
+        }
+        return undefined;
+    };
+}
+//# sourceMappingURL=idempotencyMiddleware.js.map

package/dist/modules/workspace/idempotencyMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyMiddleware.js","sourceRoot":"","sources":["../../../src/modules/workspace/idempotencyMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAGvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAEzD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AAInC;;;;GAIG;AAEH,MAAM,sBAAsB,GAAG,iBAAiB,CAAA;AAEhD,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAU/D,sFAAsF;AACtF,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAChE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,KAAK,mBAAmB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,mBAAmB,GAAG,CAAC,CAAA;AACnF,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAgC;IACtD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;AAC5E,CAAC;AAeD;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,YAA+C,EAC/C,MAAgH;IAEhH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,4BAA4B,CAAC,CAAA;IAE/E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,EAAE,EAAE;YAC5D,EAAE,EAAE,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS;YACT,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC,CAAA;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;QAE1F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,YAA+C;IACzF,OAAO,KAAK,EAAE,OAAgB,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,EAAE,CAAA;YACZ,OAAM;QACR,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;QAEtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,EAAE,CAAA;YACZ,OAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACvE,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAE3C,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,EAAE,CAAA;YACZ,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC9E,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAA;QAE9B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;QAE9F,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,QAAQ,CAAC,4DAA4D,CAAC,CAAA;QAC9E,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACrC,MAAM,QAAQ,CAAC,4DAA4D,CAAC,CAAA;YAC9E,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBAC/C,MAAM,QAAQ,CAAC,+DAA+D,CAAC,CAAA;YACjF,CAAC;YAED,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAE7B,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACtD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC9B,qEAAqE;YACrE,sEAAsE;YACtE,MAAM,oBAAoB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACtD,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;YACjD,MAAM,IAAI,GAAY,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAEzE,MAAM,sBAAsB,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9F,MAAM,2BAA2B,CAAC,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,wEAAwE;YACxE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBAClE,WAAW;gBACX,GAAG;gBACH,KAAK,EAAE,cAAc,CAAC,YAAY,CAAC;aACpC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;AACH,CAAC"}

package/dist/modules/workspace/idempotencyRepository.d.ts

@@ -0,0 +1,43 @@
+import { idempotencyKeys } from './schema.ts';
+import type { StoredIdempotentResponse } from './schema.ts';
+import type { Queryable } from './repository.ts';
+/** Queries for `idempotency_keys`. The middleware decides; these read and write. */
+export type IdempotencyKeyRecord = typeof idempotencyKeys.$inferSelect;
+/**
+ * Reserves a key, or reclaims one whose reservation has expired.
+ *
+ * A plain insert would raise a unique violation on a second request for the
+ * same `(workspace_id, key)`, which is exactly the signal the caller needs —
+ * but Postgres has no way to say "insert, unless the existing row is expired,
+ * in which case overwrite it" as two statements without a race between them.
+ * `onConflictDoUpdate` with a `setWhere` does it as one: the update only fires
+ * when the existing row's `expires_at` is already past, and `returning()` is
+ * empty exactly when neither the insert nor the update happened, which is the
+ * caller's signal to go read the live row instead.
+ */
+export declare function reserveIdempotencyKey(db: Queryable, params: {
+    readonly id: string;
+    readonly workspaceId: string;
+    readonly key: string;
+    readonly requestHash: string;
+    readonly expiresAt: Date;
+    readonly now: Date;
+}): Promise<IdempotencyKeyRecord | undefined>;
+/** The live row for a key, whether its reservation is still in flight or answered. */
+export declare function findIdempotencyKey(db: Queryable, workspaceId: string, key: string): Promise<IdempotencyKeyRecord | undefined>;
+/** Fills in the reservation once the handler has answered. */
+export declare function completeIdempotencyKey(db: Queryable, id: string, response: StoredIdempotentResponse): Promise<void>;
+/** Frees a reservation the handler failed to fill, so a retry is not blocked by it. */
+export declare function deleteIdempotencyKey(db: Queryable, id: string): Promise<void>;
+/**
+ * Clears this workspace's other expired keys.
+ *
+ * Enforced here rather than by a schedule, the same call as
+ * `webhooks/delivery.ts` makes about its delivery log: there is no scheduler in
+ * the service, and the table only grows through a reservation, so pruning on
+ * every reservation caps it where the growth happens. The residue is the same
+ * kind too — a key nobody replays keeps its row until the next reservation in
+ * that workspace sweeps it.
+ */
+export declare function pruneExpiredIdempotencyKeys(db: Queryable, workspaceId: string, now: Date): Promise<number>;
+//# sourceMappingURL=idempotencyRepository.d.ts.map

package/dist/modules/workspace/idempotencyRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyRepository.d.ts","sourceRoot":"","sources":["../../../src/modules/workspace/idempotencyRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,oFAAoF;AAEpF,MAAM,MAAM,oBAAoB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAA;AAEtE;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE;IACN,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;CACnB,GACA,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CA0B3C;AAED,sFAAsF;AACtF,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAQ3C;AAED,8DAA8D;AAC9D,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,SAAS,EACb,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,uFAAuF;AACvF,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,MAAM,CAAC,CAOjB"}

package/dist/modules/workspace/idempotencyRepository.js

@@ -0,0 +1,75 @@
+import { and, eq, lt } from 'drizzle-orm';
+import { idempotencyKeys } from './schema.js';
+/**
+ * Reserves a key, or reclaims one whose reservation has expired.
+ *
+ * A plain insert would raise a unique violation on a second request for the
+ * same `(workspace_id, key)`, which is exactly the signal the caller needs —
+ * but Postgres has no way to say "insert, unless the existing row is expired,
+ * in which case overwrite it" as two statements without a race between them.
+ * `onConflictDoUpdate` with a `setWhere` does it as one: the update only fires
+ * when the existing row's `expires_at` is already past, and `returning()` is
+ * empty exactly when neither the insert nor the update happened, which is the
+ * caller's signal to go read the live row instead.
+ */
+export async function reserveIdempotencyKey(db, params) {
+    const [reserved] = await db
+        .insert(idempotencyKeys)
+        .values({
+        id: params.id,
+        workspaceId: params.workspaceId,
+        key: params.key,
+        requestHash: params.requestHash,
+        response: null,
+        expiresAt: params.expiresAt,
+        createdAt: params.now,
+    })
+        .onConflictDoUpdate({
+        target: [idempotencyKeys.workspaceId, idempotencyKeys.key],
+        set: {
+            id: params.id,
+            requestHash: params.requestHash,
+            response: null,
+            expiresAt: params.expiresAt,
+            createdAt: params.now,
+        },
+        setWhere: lt(idempotencyKeys.expiresAt, params.now),
+    })
+        .returning();
+    return reserved;
+}
+/** The live row for a key, whether its reservation is still in flight or answered. */
+export async function findIdempotencyKey(db, workspaceId, key) {
+    const [found] = await db
+        .select()
+        .from(idempotencyKeys)
+        .where(and(eq(idempotencyKeys.workspaceId, workspaceId), eq(idempotencyKeys.key, key)))
+        .limit(1);
+    return found;
+}
+/** Fills in the reservation once the handler has answered. */
+export async function completeIdempotencyKey(db, id, response) {
+    await db.update(idempotencyKeys).set({ response }).where(eq(idempotencyKeys.id, id));
+}
+/** Frees a reservation the handler failed to fill, so a retry is not blocked by it. */
+export async function deleteIdempotencyKey(db, id) {
+    await db.delete(idempotencyKeys).where(eq(idempotencyKeys.id, id));
+}
+/**
+ * Clears this workspace's other expired keys.
+ *
+ * Enforced here rather than by a schedule, the same call as
+ * `webhooks/delivery.ts` makes about its delivery log: there is no scheduler in
+ * the service, and the table only grows through a reservation, so pruning on
+ * every reservation caps it where the growth happens. The residue is the same
+ * kind too — a key nobody replays keeps its row until the next reservation in
+ * that workspace sweeps it.
+ */
+export async function pruneExpiredIdempotencyKeys(db, workspaceId, now) {
+    const deleted = await db
+        .delete(idempotencyKeys)
+        .where(and(eq(idempotencyKeys.workspaceId, workspaceId), lt(idempotencyKeys.expiresAt, now)))
+        .returning({ id: idempotencyKeys.id });
+    return deleted.length;
+}
+//# sourceMappingURL=idempotencyRepository.js.map

package/dist/modules/workspace/idempotencyRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencyRepository.js","sourceRoot":"","sources":["../../../src/modules/workspace/idempotencyRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAQ7C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAa,EACb,MAOC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,GAAG;KACtB,CAAC;SACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC;QAC1D,GAAG,EAAE;YACH,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,GAAG;SACtB;QACD,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;KACpD,CAAC;SACD,SAAS,EAAE,CAAA;IAEd,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAa,EACb,WAAmB,EACnB,GAAW;IAEX,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;SACrB,MAAM,EAAE;SACR,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;SACtF,KAAK,CAAC,CAAC,CAAC,CAAA;IAEX,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAa,EACb,EAAU,EACV,QAAkC;IAElC,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACtF,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAa,EAAE,EAAU;IAClE,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,EAAa,EACb,WAAmB,EACnB,GAAS;IAET,MAAM,OAAO,GAAG,MAAM,EAAE;SACrB,MAAM,CAAC,eAAe,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;SAC5F,SAAS,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC,CAAA;IAExC,OAAO,OAAO,CAAC,MAAM,CAAA;AACvB,CAAC"}

package/dist/modules/workspace/index.d.ts

@@ -0,0 +1,9 @@
+import type { KelpieModule } from '../../runtime/module.ts';
+/**
+ * Workspaces, membership, and invites.
+ *
+ * Requires `auth`: `workspace_members.user_id` references `users`, and every
+ * route here resolves an actor from a session.
+ */
+export declare function createWorkspaceModule(migrationsDirectory: string): KelpieModule;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/workspace/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/workspace/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAS3D;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,mBAAmB,EAAE,MAAM,GAAG,YAAY,CAgD/E"}

package/dist/modules/workspace/index.js

@@ -0,0 +1,53 @@
+import { parseModuleCapability } from '../../runtime/moduleConfig.js';
+import { SEATS_LIMIT } from './capabilities.js';
+import * as repository from './repository.js';
+import { mountWorkspaceRoutes } from './routes.js';
+import * as schema from './schema.js';
+import { createWorkspaceService } from './service.js';
+import { registerWorkspaceTools } from './tools.js';
+/**
+ * Workspaces, membership, and invites.
+ *
+ * Requires `auth`: `workspace_members.user_id` references `users`, and every
+ * route here resolves an actor from a session.
+ */
+export function createWorkspaceModule(migrationsDirectory) {
+    return {
+        id: 'workspace',
+        requires: ['auth'],
+        structural: true,
+        register(context) {
+            context.entitlements.declare(SEATS_LIMIT);
+            // Answers `module.<id>` for whatever a config override left undecided
+            // (`runtime/registry.ts` registers that provider first, ahead of this
+            // one, so a locked value never reaches this query).
+            context.entitlements.provide(async (workspaceId, capability) => {
+                const moduleId = parseModuleCapability(capability.name);
+                if (moduleId === undefined) {
+                    return undefined;
+                }
+                const setting = await repository.findModuleSetting(context.db, workspaceId, moduleId);
+                return setting === undefined ? undefined : { kind: 'flag', granted: setting.enabled };
+            });
+            const service = createWorkspaceService({
+                db: context.db,
+                transaction: context.transaction,
+                email: context.email,
+                createId: context.createId,
+                now: context.now,
+                entitlements: context.entitlements,
+                toggleableModuleIds: context.moduleCatalog
+                    .filter((entry) => !entry.structural)
+                    .map((entry) => entry.id),
+                moduleConfigOverrides: context.moduleConfig,
+            });
+            context.schema(schema, migrationsDirectory);
+            context.routes((router) => {
+                mountWorkspaceRoutes(router, { db: context.db, now: context.now, service });
+            });
+            registerWorkspaceTools(context.mcp, service);
+            return Promise.resolve();
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/modules/workspace/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/workspace/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,mBAA2B;IAC/D,OAAO;QACL,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,UAAU,EAAE,IAAI;QAEhB,QAAQ,CAAC,OAAO;YACd,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YAEzC,sEAAsE;YACtE,sEAAsE;YACtE,oDAAoD;YACpD,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE;gBAC7D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;gBAEvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,OAAO,SAAS,CAAA;gBAClB,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;gBAErF,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAA;YACvF,CAAC,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,sBAAsB,CAAC;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,mBAAmB,EAAE,OAAO,CAAC,aAAa;qBACvC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;qBACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,qBAAqB,EAAE,OAAO,CAAC,YAAY;aAC5C,CAAC,CAAA;YAEF,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;YAE3C,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;gBACxB,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;YAC7E,CAAC,CAAC,CAAA;YAEF,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAE5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/modules/workspace/repository.d.ts

@@ -0,0 +1,112 @@
+import type { Database } from '../../lib/database.ts';
+import type { Transaction } from '../../runtime/transaction.ts';
+import { handbookPages } from '../handbook/schema.ts';
+import { pipelineStages } from '../pipelines/schema.ts';
+import { invites, workspaceMembers, workspaceModuleSettings, workspaces } from './schema.ts';
+/** Queries for workspaces, membership, and invites. The service decides; these read and write. */
+export type Queryable = Database | Transaction;
+export type WorkspaceRecord = typeof workspaces.$inferSelect;
+export type MemberRecord = typeof workspaceMembers.$inferSelect;
+export type InviteRecord = typeof invites.$inferSelect;
+export declare function insertWorkspace(db: Queryable, values: typeof workspaces.$inferInsert): Promise<WorkspaceRecord>;
+export declare function findWorkspace(db: Queryable, id: string): Promise<WorkspaceRecord | undefined>;
+export declare function updateWorkspace(db: Queryable, id: string, changes: Partial<typeof workspaces.$inferInsert>): Promise<WorkspaceRecord | undefined>;
+/**
+ * Removes the workspace and, through `workspace_id` cascades, everything it
+ * owned. No table outside this one holds a workspace's data.
+ */
+export declare function deleteWorkspace(db: Queryable, id: string): Promise<void>;
+export declare function insertMember(db: Queryable, values: typeof workspaceMembers.$inferInsert): Promise<MemberRecord>;
+export declare function findMember(db: Queryable, workspaceId: string, id: string): Promise<MemberRecord | undefined>;
+export declare function updateMemberRole(db: Queryable, id: string, role: string, updatedAt: Date): Promise<MemberRecord | undefined>;
+export declare function deleteMember(db: Queryable, id: string): Promise<void>;
+/**
+ * What a member is named on, counted per table.
+ *
+ * The `owner_id` and `author_id` columns are `ON DELETE RESTRICT`, so the
+ * database would refuse the delete on its own. It would only name one table
+ * while doing it, and `api.md` wants every referencing type in the `409`
+ * details, so the counts are read first and the refusal is the service's.
+ *
+ * This is the one place the workspace module reads other modules' tables. The
+ * alternative is each of them registering a "does this member matter to you"
+ * hook, which is more machinery than one query list is worth today.
+ *
+ * @returns Only the types with at least one reference, in a fixed order.
+ */
+export declare function countMemberReferences(db: Queryable, memberId: string): Promise<readonly {
+    readonly type: string;
+    readonly count: number;
+}[]>;
+/** A membership plus the identity behind it, which is what a member is to a reader. */
+export interface MemberWithUser {
+    readonly id: string;
+    readonly userId: string;
+    readonly role: string;
+    readonly joinedAt: Date;
+    readonly name: string;
+    readonly email: string;
+}
+/**
+ * Members with their user's name and email.
+ *
+ * Joined here rather than left to the caller: every list of members is read to
+ * be shown to a human, and a membership row on its own carries nothing a human
+ * recognises. Notes and activities attribute to a member id and resolve the name
+ * through this list.
+ */
+export declare function listMembers(db: Queryable, workspaceId: string): Promise<MemberWithUser[]>;
+/** One member in the same shape `listMembers` produces, for a write to answer with. */
+export declare function findMemberWithUser(db: Queryable, workspaceId: string, id: string): Promise<MemberWithUser | undefined>;
+/**
+ * The workspace's owner. Earliest-joined breaks a tie, so the answer does not
+ * move if a second owner ever exists; the service is what keeps there being one.
+ */
+export declare function findOwner(db: Queryable, workspaceId: string): Promise<MemberRecord | undefined>;
+/**
+ * The member a record is assigned to when nobody chose one.
+ *
+ * A public form submit has no actor, so a Deal it creates has no natural owner
+ * and `forms.md` gives it the workspace's default member. That is the owner: the
+ * account that created the workspace, and the one person guaranteed to be able
+ * to reassign it.
+ *
+ * @returns undefined only for a workspace with no members, which membership
+ *   creation makes unreachable through the API.
+ */
+export declare function findDefaultMember(db: Queryable, workspaceId: string): Promise<MemberRecord | undefined>;
+/**
+ * Seats already spoken for: members plus invitations still open.
+ *
+ * An open invite counts, otherwise a workspace on its last seat could send ten
+ * invitations and let whoever accepts first through while the others fail. One
+ * that has expired does not, because nobody can accept it.
+ */
+export declare function countSeatsInUse(db: Queryable, workspaceId: string, now: Date): Promise<number>;
+export declare function insertInvite(db: Queryable, values: typeof invites.$inferInsert): Promise<InviteRecord>;
+export declare function listInvites(db: Queryable, workspaceId: string): Promise<InviteRecord[]>;
+export declare function findInvite(db: Queryable, workspaceId: string, id: string): Promise<InviteRecord | undefined>;
+export declare function updateInvite(db: Queryable, id: string, changes: Partial<typeof invites.$inferInsert>): Promise<InviteRecord | undefined>;
+/**
+ * Every invitation to this address in this workspace, expired ones included.
+ *
+ * The column is `citext`, so an address invited as `Grace@Example.com` is found
+ * by `grace@example.com` and the caller does not have to case-fold twice.
+ */
+export declare function listInvitesForEmail(db: Queryable, workspaceId: string, email: string): Promise<InviteRecord[]>;
+/** The same set, removed. Expiry is not a filter: a dead invitation is still noise. */
+export declare function deleteInvitesForEmail(db: Queryable, workspaceId: string, email: string): Promise<void>;
+export declare function findInviteByTokenHash(db: Queryable, tokenHash: string): Promise<InviteRecord | undefined>;
+export declare function deleteInvite(db: Queryable, id: string): Promise<void>;
+export declare function insertHandbookPages(db: Queryable, values: readonly (typeof handbookPages.$inferInsert)[]): Promise<void>;
+export declare function insertPipelineStages(db: Queryable, values: readonly (typeof pipelineStages.$inferInsert)[]): Promise<void>;
+export type ModuleSettingRecord = typeof workspaceModuleSettings.$inferSelect;
+export declare function listModuleSettings(db: Queryable, workspaceId: string): Promise<ModuleSettingRecord[]>;
+/** Undefined means the workspace has never toggled this module, not that it is disabled. */
+export declare function findModuleSetting(db: Queryable, workspaceId: string, moduleId: string): Promise<ModuleSettingRecord | undefined>;
+/**
+ * Sets a workspace's choice for one module, inserting the row on its first
+ * toggle and overwriting `enabled` on every one after.
+ */
+export declare function upsertModuleSetting(db: Queryable, values: typeof workspaceModuleSettings.$inferInsert): Promise<ModuleSettingRecord>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/modules/workspace/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../src/modules/workspace/repository.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAI/D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAIrD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAGvD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE5F,kGAAkG;AAElG,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAA;AAE9C,MAAM,MAAM,eAAe,GAAG,OAAO,UAAU,CAAC,YAAY,CAAA;AAC5D,MAAM,MAAM,YAAY,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAA;AAC/D,MAAM,MAAM,YAAY,GAAG,OAAO,OAAO,CAAC,YAAY,CAAA;AAEtD,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,OAAO,UAAU,CAAC,YAAY,GACrC,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAED,wBAAsB,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAInG;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,OAAO,UAAU,CAAC,YAAY,CAAC,GAC/C,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAItC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,OAAO,gBAAgB,CAAC,YAAY,GAC3C,OAAO,CAAC,YAAY,CAAC,CAQvB;AAED,wBAAsB,UAAU,CAC9B,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAQnC;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,SAAS,EACb,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,IAAI,GACd,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAQnC;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAoBvE;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAc/F;AAED,uFAAuF;AACvF,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAgBrC;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CASnC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,OAAO,OAAO,CAAC,YAAY,GAClC,OAAO,CAAC,YAAY,CAAC,CAQvB;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAE7F;AAED,wBAAsB,UAAU,CAC9B,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAQnC;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,SAAS,EACb,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,OAAO,OAAO,CAAC,YAAY,CAAC,GAC5C,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAInC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,EAAE,CAAC,CAMzB;AAED,uFAAuF;AACvF,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAInC;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,SAAS,CAAC,OAAO,aAAa,CAAC,YAAY,CAAC,EAAE,GACrD,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,SAAS,CAAC,OAAO,cAAc,CAAC,YAAY,CAAC,EAAE,GACtD,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,CAAC,YAAY,CAAA;AAE7E,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAK3G;AAED,4FAA4F;AAC5F,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,SAAS,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAQ1C;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,OAAO,uBAAuB,CAAC,YAAY,GAClD,OAAO,CAAC,mBAAmB,CAAC,CAiB9B"}