@ketvietlab/ketjs 0.1.1

package/dist/server/sessionstore.js

@@ -0,0 +1,232 @@
+// Where sessions live.
+//
+// The store is an interface for the same reason the stream store is: a single
+// process is happy in memory, and a deployment behind more than one pod is not.
+// Sessions in memory across three pods means a login lands on one and the next
+// request is anonymous on another — a bug that only appears once you scale, which
+// is the worst moment to discover it.
+//
+// The database-backed store already solves that, because the database is shared.
+// Redis would be faster, and it belongs in its own package the way the Postgres
+// driver does — the framework cannot depend on a client without spending the one
+// exception it has already spent.
+const alive = (r, now) => r.expiresAt > now;
+export function memorySessionStore(o = {}) {
+    const now = o.now ?? (() => Date.now());
+    const rows = new Map();
+    return {
+        name: 'memory',
+        async init() { },
+        async create(r) {
+            rows.set(r.id, { ...r });
+        },
+        async read(id) {
+            const r = rows.get(id);
+            if (!r)
+                return null;
+            // Expired is gone, not merely stale: reading it back would be a session
+            // that outlived its own expiry for as long as nothing swept.
+            if (!alive(r, now())) {
+                rows.delete(id);
+                return null;
+            }
+            return { ...r };
+        },
+        async touch(id, expiresAt) {
+            const r = rows.get(id);
+            if (!r || !alive(r, now()))
+                return null;
+            r.expiresAt = expiresAt;
+            return expiresAt;
+        },
+        async updateContext(id, expectedRevision, context) {
+            const r = rows.get(id);
+            if (!r || !alive(r, now()) || r.revision !== expectedRevision)
+                return null;
+            const next = { ...r, ...context, revision: r.revision + 1 };
+            rows.set(id, next);
+            return { ...next, companies: [...next.companies], branches: next.branches ? [...next.branches] : null };
+        },
+        async destroy(id) {
+            rows.delete(id);
+        },
+        async listUser(userId) {
+            const out = [];
+            for (const [id, r] of rows) {
+                if (!alive(r, now())) {
+                    rows.delete(id);
+                    continue;
+                }
+                if (r.userId === userId)
+                    out.push({ ...r, companies: [...r.companies], branches: r.branches ? [...r.branches] : null });
+            }
+            return out.sort((a, b) => b.createdAt - a.createdAt);
+        },
+        async destroyUser(userId) {
+            let n = 0;
+            for (const [id, r] of rows)
+                if (r.userId === userId) {
+                    rows.delete(id);
+                    n++;
+                }
+            return n;
+        },
+        async destroyUserExcept(userId, keepId) {
+            let n = 0;
+            for (const [id, r] of rows)
+                if (r.userId === userId && id !== keepId) {
+                    rows.delete(id);
+                    n++;
+                }
+            return n;
+        },
+        async sweep(at) {
+            let n = 0;
+            for (const [id, r] of rows)
+                if (r.expiresAt <= at) {
+                    rows.delete(id);
+                    n++;
+                }
+            return n;
+        },
+    };
+}
+const DDL = `
+CREATE TABLE IF NOT EXISTS ket_session (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL,
+  companies   TEXT NOT NULL,
+  company     TEXT,
+  branch      TEXT,
+  branches    TEXT,
+  security_version INTEGER NOT NULL DEFAULT 0,
+  revision    INTEGER NOT NULL DEFAULT 0,
+  created_at  BIGINT NOT NULL,
+  expires_at  BIGINT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS ket_session_user ON ket_session (user_id);
+CREATE INDEX IF NOT EXISTS ket_session_expiry ON ket_session (expires_at);
+`;
+/**
+ * One row per session, in whatever database the app already has.
+ *
+ * This is the store that makes several pods work at all, and it needs no extra
+ * infrastructure to do it — which is the point. Reach for Redis when the read
+ * traffic justifies it, not before.
+ */
+export function dbSessionStore(adapter, o = {}) {
+    // Injectable, because a store that reaches for Date.now cannot be tested for
+    // expiry without sleeping — and a test that sleeps is a test that flakes.
+    const now = o.now ?? (() => Date.now());
+    const pg = adapter.name === 'postgres';
+    const p = (n) => (pg ? `$${n}` : '?');
+    const decode = (row) => ({
+        id: String(row.id),
+        userId: String(row.user_id),
+        companies: JSON.parse(String(row.companies)),
+        company: row.company === null || row.company === undefined ? null : String(row.company),
+        branch: row.branch === null || row.branch === undefined ? null : String(row.branch),
+        branches: row.branches === null || row.branches === undefined
+            ? null
+            : JSON.parse(String(row.branches)),
+        securityVersion: Number(row.security_version ?? 0),
+        revision: Number(row.revision ?? 0),
+        createdAt: Number(row.created_at),
+        expiresAt: Number(row.expires_at),
+    });
+    return {
+        name: adapter.name,
+        async init() {
+            await adapter.exec(DDL);
+            const columns = (await adapter.introspect()).ket_session ?? {};
+            for (const [name, sql] of [
+                ['branch', 'TEXT'],
+                ['security_version', 'INTEGER NOT NULL DEFAULT 0'],
+                ['revision', 'INTEGER NOT NULL DEFAULT 0'],
+            ])
+                if (pg)
+                    await adapter.exec(`ALTER TABLE ket_session ADD COLUMN IF NOT EXISTS ${name} ${sql}`);
+                else if (!columns[name])
+                    await adapter.exec(`ALTER TABLE ket_session ADD COLUMN ${name} ${sql}`);
+        },
+        async create(r) {
+            await adapter.run(`INSERT INTO ket_session
+           (id, user_id, companies, company, branch, branches, security_version, revision, created_at, expires_at)
+         VALUES (${p(1)}, ${p(2)}, ${p(3)}, ${p(4)}, ${p(5)}, ${p(6)}, ${p(7)}, ${p(8)}, ${p(9)}, ${p(10)})`, [
+                r.id,
+                r.userId,
+                JSON.stringify(r.companies),
+                r.company,
+                r.branch,
+                r.branches ? JSON.stringify(r.branches) : null,
+                r.securityVersion,
+                r.revision,
+                r.createdAt,
+                r.expiresAt,
+            ]);
+        },
+        async read(id) {
+            const rows = await adapter.all(`SELECT * FROM ket_session WHERE id = ${p(1)}`, [id]);
+            if (!rows.length)
+                return null;
+            const r = decode(rows[0]);
+            if (r.expiresAt <= now()) {
+                await adapter.run(`DELETE FROM ket_session WHERE id = ${p(1)}`, [id]);
+                return null;
+            }
+            return r;
+        },
+        async touch(id, expiresAt) {
+            // The expiry guard is in the statement, so a session that lapsed between the
+            // read and the write is not quietly revived by the refresh.
+            const res = (await adapter.run(`UPDATE ket_session SET expires_at = ${p(1)} WHERE id = ${p(2)} AND expires_at > ${p(3)}`, [expiresAt, id, now()]));
+            return res.changes ? expiresAt : null;
+        },
+        async updateContext(id, expectedRevision, context) {
+            const res = (await adapter.run(`UPDATE ket_session SET
+           companies = ${p(1)}, company = ${p(2)}, branch = ${p(3)}, branches = ${p(4)},
+           security_version = ${p(5)}, revision = revision + 1
+         WHERE id = ${p(6)} AND revision = ${p(7)} AND expires_at > ${p(8)}`, [
+                JSON.stringify(context.companies),
+                context.company,
+                context.branch,
+                context.branches ? JSON.stringify(context.branches) : null,
+                context.securityVersion,
+                id,
+                expectedRevision,
+                now(),
+            ]));
+            if (!res.changes)
+                return null;
+            const rows = await adapter.all(`SELECT * FROM ket_session WHERE id = ${p(1)}`, [id]);
+            return rows.length ? decode(rows[0]) : null;
+        },
+        async destroy(id) {
+            await adapter.run(`DELETE FROM ket_session WHERE id = ${p(1)}`, [id]);
+        },
+        async listUser(userId) {
+            await adapter.run(`DELETE FROM ket_session WHERE user_id = ${p(1)} AND expires_at <= ${p(2)}`, [
+                userId,
+                now(),
+            ]);
+            const rows = await adapter.all(`SELECT * FROM ket_session WHERE user_id = ${p(1)} ORDER BY created_at DESC`, [userId]);
+            return rows.map((row) => decode(row));
+        },
+        async destroyUser(userId) {
+            const res = (await adapter.run(`DELETE FROM ket_session WHERE user_id = ${p(1)}`, [userId]));
+            return res.changes ?? 0;
+        },
+        async destroyUserExcept(userId, keepId) {
+            const res = (await adapter.run(`DELETE FROM ket_session WHERE user_id = ${p(1)} AND id <> ${p(2)}`, [
+                userId,
+                keepId,
+            ]));
+            return res.changes ?? 0;
+        },
+        async sweep(at) {
+            const res = (await adapter.run(`DELETE FROM ket_session WHERE expires_at <= ${p(1)}`, [at]));
+            return res.changes ?? 0;
+        },
+    };
+}
+//# sourceMappingURL=sessionstore.js.map

package/dist/server/sessionstore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionstore.js","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/sessionstore.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,sCAAsC;AACtC,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,iFAAiF;AACjF,kCAAkC;AAiDlC,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,GAAW,EAAW,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAA;AAE3E,MAAM,UAAU,kBAAkB,CAAC,CAAC,GAA2B,EAAE;IAC/D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC7C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,IAAI,KAAI,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;YACnB,wEAAwE;YACxE,6DAA6D;YAC7D,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACf,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,EAAE,GAAG,CAAC,EAAE,CAAA;QACjB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAA;YACvC,CAAC,CAAC,SAAS,GAAG,SAAS,CAAA;YACvB,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO;YAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACtB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,OAAO,IAAI,CAAA;YAC1E,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAA;YAC3D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YAClB,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzG,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACjB,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,GAAG,GAAoB,EAAE,CAAA;YAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACf,SAAQ;gBACV,CAAC;gBACD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBACrB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YAClG,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;QACtD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,IAAI,CAAC,GAAG,CAAC,CAAA;YACT,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI;gBACxB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACxB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACf,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM;YACpC,IAAI,CAAC,GAAG,CAAC,CAAA;YACT,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI;gBACxB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACf,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EAAE;YACZ,IAAI,CAAC,GAAG,CAAC,CAAA;YACT,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI;gBACxB,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACf,CAAC,EAAE,CAAA;gBACL,CAAC;YACH,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;CAeX,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,CAAC,GAA2B,EAAE;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACvC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,UAAU,CAAA;IACtC,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,CAAC,GAA4B,EAAiB,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAa;QACxD,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QACvF,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACnF,QAAQ,EACN,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;YACjD,CAAC,CAAC,IAAI;YACN,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAc;QACpD,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAClD,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;KAClC,CAAC,CAAA;IAEF,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACvB,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,CAAA;YAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACxB,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAClB,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;gBAClD,CAAC,UAAU,EAAE,4BAA4B,CAAC;aAClC;gBACR,IAAI,EAAE;oBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,oDAAoD,IAAI,IAAI,GAAG,EAAE,CAAC,CAAA;qBACxF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,sCAAsC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAA;QACpG,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,CAAC;YACZ,MAAM,OAAO,CAAC,GAAG,CACf;;mBAEW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EACpG;gBACE,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM;gBACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3B,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC9C,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS;aACZ,CACF,CAAA;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YACpF,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAA;YACpD,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,EAAE,CAAC;gBACzB,MAAM,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;gBACrE,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS;YACvB,6EAA6E;YAC7E,4DAA4D;YAC5D,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAC5B,uCAAuC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,EACzF,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CACvB,CAAyB,CAAA;YAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;QACvC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO;YAC/C,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAC5B;yBACiB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;gCACtD,CAAC,CAAC,CAAC,CAAC;sBACd,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,EACpE;gBACE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBACjC,OAAO,CAAC,OAAO;gBACf,OAAO,CAAC,MAAM;gBACd,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1D,OAAO,CAAC,eAAe;gBACvB,EAAE;gBACF,gBAAgB;gBAChB,GAAG,EAAE;aACN,CACF,CAAyB,CAAA;YAC1B,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YACpF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxE,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,MAAM,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QACvE,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7F,MAAM;gBACN,GAAG,EAAE;aACN,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,6CAA6C,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAC5E,CAAC,MAAM,CAAC,CACT,CAAA;YACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAA8B,CAAC,CAAC,CAAA;QAClE,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAE1F,CAAA;YACD,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;QACzB,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM;YACpC,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClG,MAAM;gBACN,MAAM;aACP,CAAC,CAAyB,CAAA;YAC3B,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;QACzB,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAE;YACZ,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAE1F,CAAA;YACD,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/server/storage/index.d.ts

@@ -0,0 +1,11 @@
+import type { RuntimeConfig } from '../config.ts';
+import type { Storage } from './types.ts';
+export declare function storageFromConfig(config: RuntimeConfig): Storage;
+export { localStorage } from './local.ts';
+export { s3Storage } from './s3.ts';
+export { namespacedStorage, effectStorage } from './types.ts';
+export type { Storage, Stored, OpenStorage, StorageEffect } from './types.ts';
+export type { S3StorageOptions } from './s3.ts';
+export { signRequest, presignUrl, sha256 } from './sigv4.ts';
+export type { SigV4Credentials } from './sigv4.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAGjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzC,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAqBhE;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC7D,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC7E,YAAY,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAC5D,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA"}

package/dist/server/storage/index.js

@@ -0,0 +1,31 @@
+import { KetError } from '../../kernel/errors.js';
+import { localStorage } from './local.js';
+import { s3Storage } from './s3.js';
+export function storageFromConfig(config) {
+    if (config.storageKind === 'local')
+        return localStorage({ dir: config.storageDir });
+    const missing = [
+        ['KET_S3_ENDPOINT', config.s3Endpoint],
+        ['KET_S3_BUCKET', config.s3Bucket],
+        ['KET_S3_KEY', config.s3AccessKeyId],
+        ['KET_S3_SECRET', config.s3SecretAccessKey],
+    ].filter(([, value]) => !value);
+    if (missing.length)
+        throw new KetError({
+            code: 'E_STORAGE_CONFIG',
+            message: `S3 storage is missing ${missing.map(([name]) => name).join(', ')}`,
+        });
+    return s3Storage({
+        endpoint: config.s3Endpoint,
+        region: config.s3Region,
+        bucket: config.s3Bucket,
+        accessKeyId: config.s3AccessKeyId,
+        secretAccessKey: config.s3SecretAccessKey,
+        pathStyle: config.s3PathStyle,
+    });
+}
+export { localStorage } from './local.js';
+export { s3Storage } from './s3.js';
+export { namespacedStorage, effectStorage } from './types.js';
+export { signRequest, presignUrl, sha256 } from './sigv4.js';
+//# sourceMappingURL=index.js.map

package/dist/server/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/ketjs/src/server/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAGnC,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;IACnF,MAAM,OAAO,GAAG;QACd,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC;QAClC,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC;QACpC,CAAC,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC;KAC5C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;IAC/B,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,yBAAyB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC7E,CAAC,CAAA;IACJ,OAAO,SAAS,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC,UAAoB;QACrC,MAAM,EAAE,MAAM,CAAC,QAAQ;QACvB,MAAM,EAAE,MAAM,CAAC,QAAkB;QACjC,WAAW,EAAE,MAAM,CAAC,aAAuB;QAC3C,eAAe,EAAE,MAAM,CAAC,iBAA2B;QACnD,SAAS,EAAE,MAAM,CAAC,WAAW;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAG7D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA"}

package/dist/server/storage/local.d.ts

@@ -0,0 +1,5 @@
+import type { Storage } from './types.ts';
+export declare function localStorage(options: {
+    dir: string;
+}): Storage;
+//# sourceMappingURL=local.d.ts.map

package/dist/server/storage/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/storage/local.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAU,MAAM,YAAY,CAAA;AAIjD,wBAAgB,YAAY,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAgJ9D"}

package/dist/server/storage/local.js

@@ -0,0 +1,165 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { dirname, relative, resolve, sep } from 'node:path';
+import { storageKey } from './types.js';
+export function localStorage(options) {
+    const root = resolve(options.dir);
+    const pathOf = (key) => {
+        const path = resolve(root, storageKey(key));
+        if (!path.startsWith(root + sep))
+            throw new Error(`storage key escapes root: ${key}`);
+        return path;
+    };
+    const metaPath = (path) => `${path}.ketmeta`;
+    /**
+     * A crash between open() and rename() strands a temp file that list() hides, so
+     * the sweep can never reach it. Each write clears the stale ones beside it.
+     */
+    const reapTemps = async (dir) => {
+        const cutoff = Date.now() - 60 * 60 * 1_000;
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (!entry.isFile() || !entry.name.includes('.ket-tmp-'))
+                continue;
+            const stale = resolve(dir, entry.name);
+            try {
+                if ((await stat(stale)).mtimeMs < cutoff)
+                    await rm(stale, { force: true });
+            }
+            catch { }
+        }
+    };
+    const head = async (key) => {
+        const path = pathOf(key);
+        try {
+            const info = await stat(path);
+            // A directory satisfies stat() but is not an object. Without this a key naming
+            // a shard reports a plausible size and get() then hands back an EISDIR stream
+            // after the response headers have already gone out.
+            if (!info.isFile())
+                return null;
+            let meta = { type: 'application/octet-stream' };
+            try {
+                meta = JSON.parse(await readFile(metaPath(path), 'utf8'));
+            }
+            catch { }
+            return {
+                key,
+                size: info.size,
+                type: meta.type,
+                ...(meta.etag ? { etag: meta.etag } : {}),
+                modifiedAt: info.mtime.toISOString(),
+            };
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+    };
+    return {
+        name: 'local',
+        async put(key, body, options) {
+            const path = pathOf(key);
+            await mkdir(dirname(path), { recursive: true });
+            await reapTemps(dirname(path));
+            const temp = `${path}.ket-tmp-${randomUUID()}`;
+            const handle = await open(temp, 'wx');
+            const hash = createHash('sha256');
+            let size = 0;
+            try {
+                for await (const chunk of body) {
+                    size += chunk.byteLength;
+                    hash.update(chunk);
+                    let offset = 0;
+                    while (offset < chunk.byteLength)
+                        offset += (await handle.write(chunk, offset)).bytesWritten;
+                }
+                await handle.sync();
+            }
+            catch (error) {
+                await handle.close().catch(() => { });
+                await rm(temp, { force: true });
+                throw error;
+            }
+            await handle.close();
+            if (options.size !== undefined && size !== options.size) {
+                await rm(temp, { force: true });
+                throw new Error(`storage body size ${size} does not match declared size ${options.size}`);
+            }
+            const etag = hash.digest('hex');
+            await rename(temp, path);
+            const metaTemp = `${metaPath(path)}.ket-tmp-${randomUUID()}`;
+            await writeFile(metaTemp, JSON.stringify({ type: options.type, etag }));
+            await rename(metaTemp, metaPath(path));
+            return (await head(key));
+        },
+        async get(key) {
+            const meta = await head(key);
+            if (!meta)
+                return null;
+            return { body: createReadStream(pathOf(key)), meta };
+        },
+        head,
+        async remove(key) {
+            const path = pathOf(key);
+            await Promise.all([rm(path, { force: true }), rm(metaPath(path), { force: true })]);
+        },
+        async list(prefix, options = {}) {
+            if (prefix)
+                storageKey(prefix.endsWith('/') ? `${prefix}x` : prefix);
+            const keys = [];
+            const limit = Math.max(1, Math.min(1_000, options.limit ?? 100));
+            // Visit in key order — a directory sorts as "name/", which is the prefix every
+            // key beneath it carries — so results come out sorted and the walk stops once
+            // the page plus one look-ahead is full. Sorting on arrival instead made a
+            // paginated sweep re-read the whole tree for every page.
+            const ordered = (entries) => entries
+                .map((entry) => ({ entry, at: entry.isDirectory() ? `${entry.name}/` : entry.name }))
+                .sort((a, b) => (a.at < b.at ? -1 : a.at > b.at ? 1 : 0));
+            const walk = async (dir) => {
+                let entries;
+                try {
+                    entries = await readdir(dir, { withFileTypes: true });
+                }
+                catch (error) {
+                    if (error.code === 'ENOENT')
+                        return;
+                    throw error;
+                }
+                for (const { entry } of ordered(entries)) {
+                    if (keys.length > limit)
+                        return;
+                    const path = resolve(dir, entry.name);
+                    if (entry.isDirectory())
+                        await walk(path);
+                    else if (!entry.name.endsWith('.ketmeta') && !entry.name.includes('.ket-tmp-')) {
+                        const key = relative(root, path).split(sep).join('/');
+                        if (!key.startsWith(prefix) || (options.after && key <= options.after))
+                            continue;
+                        keys.push(key);
+                    }
+                }
+            };
+            const slash = prefix.lastIndexOf('/');
+            const directory = slash >= 0 ? prefix.slice(0, slash) : '';
+            await walk(directory ? pathOf(directory) : root);
+            const page = keys.slice(0, limit);
+            return {
+                keys: page,
+                ...(keys.length > limit ? { next: page[page.length - 1] } : {}),
+            };
+        },
+        async signedUrl() {
+            return null;
+        },
+    };
+}
+//# sourceMappingURL=local.js.map

package/dist/server/storage/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../../../../../packages/ketjs/src/server/storage/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC9F,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAKvC,MAAM,UAAU,YAAY,CAAC,OAAwB;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAA;QACrF,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,UAAU,CAAA;IAEpD;;;OAGG;IACH,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;QAC3C,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,SAAQ;YAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,MAAM;oBAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5E,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC,CAAA;IAED,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAA0B,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7B,+EAA+E;YAC/E,8EAA8E;YAC9E,oDAAoD;YACpD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAA;YAC/B,IAAI,IAAI,GAAc,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;YAC1D,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAc,CAAA;YACxE,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO;gBACL,GAAG;gBACH,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;aACrC,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACnE,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;YAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/C,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;YAC9B,MAAM,IAAI,GAAG,GAAG,IAAI,YAAY,UAAU,EAAE,EAAE,CAAA;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;YACjC,IAAI,IAAI,GAAG,CAAC,CAAA;YACZ,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;oBAC/B,IAAI,IAAI,KAAK,CAAC,UAAU,CAAA;oBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBAClB,IAAI,MAAM,GAAG,CAAC,CAAA;oBACd,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU;wBAAE,MAAM,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAA;gBAC9F,CAAC;gBACD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBACpC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC/B,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC/B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,iCAAiC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YAC3F,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC/B,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACxB,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,UAAU,EAAE,EAAE,CAAA;YAC5D,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACvE,MAAM,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;YACtC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAW,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;YAC5B,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAA;YACtB,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAA8B,EAAE,IAAI,EAAE,CAAA;QACnF,CAAC;QACD,IAAI;QACJ,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACrF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE;YAC7B,IAAI,MAAM;gBAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YACpE,MAAM,IAAI,GAAa,EAAE,CAAA;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAA;YAChE,+EAA+E;YAC/E,8EAA8E;YAC9E,0EAA0E;YAC1E,yDAAyD;YACzD,MAAM,OAAO,GAAG,CAAC,OAAiB,EAAE,EAAE,CACpC,OAAO;iBACJ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;iBACpF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;gBAChD,IAAI,OAAiB,CAAA;gBACrB,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAM;oBAC9D,MAAM,KAAK,CAAA;gBACb,CAAC;gBACD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;wBAAE,OAAM;oBAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;oBACrC,IAAI,KAAK,CAAC,WAAW,EAAE;wBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;yBACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC/E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;wBACrD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;4BAAE,SAAQ;wBAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YACrC,MAAM,SAAS,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YACjC,OAAO;gBACL,IAAI,EAAE,IAAI;gBACV,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAA;QACH,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/server/storage/s3.d.ts

@@ -0,0 +1,11 @@
+import type { Storage } from './types.ts';
+import type { SigV4Credentials } from './sigv4.ts';
+export type S3StorageOptions = SigV4Credentials & {
+    endpoint: string;
+    bucket: string;
+    pathStyle?: boolean;
+    fetch?: typeof globalThis.fetch;
+    now?: () => Date;
+};
+export declare function s3Storage(options: S3StorageOptions): Storage;
+//# sourceMappingURL=s3.d.ts.map

package/dist/server/storage/s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/storage/s3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAU,MAAM,YAAY,CAAA;AAEjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CACjB,CAAA;AAkBD,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CA+H5D"}

package/dist/server/storage/s3.js

@@ -0,0 +1,133 @@
+import { storageKey } from './types.js';
+import { presignUrl, signRequest } from './sigv4.js';
+const encodeKey = (key) => storageKey(key)
+    .split('/')
+    .map((part) => encodeURIComponent(part))
+    .join('/');
+const xml = (value) => value.replace(/&(lt|gt|amp|quot|apos);/g, (_, entity) => {
+    const found = { lt: '<', gt: '>', amp: '&', quot: '"', apos: "'" };
+    return found[entity];
+});
+export function s3Storage(options) {
+    const request = options.fetch ?? globalThis.fetch;
+    const endpoint = new URL(options.endpoint);
+    const credentials = {
+        accessKeyId: options.accessKeyId,
+        secretAccessKey: options.secretAccessKey,
+        region: options.region,
+        service: 's3',
+    };
+    const urlOf = (key) => {
+        const url = new URL(endpoint);
+        const suffix = key ? `/${encodeKey(key)}` : '';
+        if (options.pathStyle)
+            url.pathname = `/${encodeURIComponent(options.bucket)}${suffix}`;
+        else {
+            url.hostname = `${options.bucket}.${url.hostname}`;
+            url.pathname = suffix || '/';
+        }
+        return url;
+    };
+    const signedFetch = async (method, url, init = {}, payloadHash = method === 'PUT'
+        ? 'UNSIGNED-PAYLOAD'
+        : 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855') => {
+        const headers = signRequest({
+            method,
+            url,
+            headers: init.headers,
+            payloadHash,
+            credentials,
+            now: options.now?.(),
+        });
+        return request(url, {
+            ...init,
+            method,
+            headers,
+            ...(init.body ? { duplex: 'half' } : {}),
+        });
+    };
+    const checked = async (response, operation) => {
+        if (response.ok)
+            return response;
+        const detail = (await response.text()).slice(0, 1_000);
+        throw new Error(`S3 ${operation} failed (${response.status}): ${detail}`);
+    };
+    const meta = (key, headers) => ({
+        key,
+        size: Number(headers.get('content-length') ?? 0),
+        type: headers.get('content-type') ?? 'application/octet-stream',
+        ...(headers.get('etag') ? { etag: headers.get('etag').replace(/^"|"$/g, '') } : {}),
+        ...(headers.get('last-modified') ? { modifiedAt: headers.get('last-modified') } : {}),
+    });
+    return {
+        name: 's3',
+        async put(key, body, o) {
+            // Without a declared length fetch frames the body as chunked, which S3 answers
+            // with 411; refuse here rather than at the far end with an opaque error.
+            if (o.size === undefined)
+                throw new Error(`S3 PUT of "${key}" requires a declared size; S3 rejects a body sent without content-length`);
+            const url = urlOf(key);
+            const headers = new Headers({ 'content-type': o.type, 'content-length': String(o.size) });
+            const response = await checked(await signedFetch('PUT', url, { headers, body }), 'PUT');
+            return {
+                key,
+                size: o.size,
+                type: o.type,
+                ...(response.headers.get('etag')
+                    ? { etag: response.headers.get('etag').replace(/^"|"$/g, '') }
+                    : {}),
+            };
+        },
+        async get(key) {
+            const response = await signedFetch('GET', urlOf(key));
+            if (response.status === 404) {
+                await response.body?.cancel();
+                return null;
+            }
+            await checked(response, 'GET');
+            if (!response.body)
+                throw new Error('S3 GET returned no body');
+            return {
+                body: response.body,
+                meta: meta(key, response.headers),
+            };
+        },
+        async head(key) {
+            const response = await signedFetch('HEAD', urlOf(key));
+            // Without s3:ListBucket S3 answers 403, not 404, for a key that is not there,
+            // so treating only 404 as absent breaks every first upload of new content.
+            if (response.status === 404 || response.status === 403)
+                return null;
+            await checked(response, 'HEAD');
+            return meta(key, response.headers);
+        },
+        async remove(key) {
+            await checked(await signedFetch('DELETE', urlOf(key)), 'DELETE');
+        },
+        async list(prefix, o = {}) {
+            const url = urlOf();
+            url.searchParams.set('list-type', '2');
+            url.searchParams.set('prefix', prefix);
+            url.searchParams.set('max-keys', String(Math.max(1, Math.min(1_000, o.limit ?? 100))));
+            if (o.after)
+                url.searchParams.set('start-after', o.after);
+            // URLSearchParams serialises a space as "+" but SigV4 signs it as %20, and the
+            // two must agree or the request is refused.
+            url.search = url.search.replace(/\+/g, '%20');
+            const response = await checked(await signedFetch('GET', url), 'LIST');
+            const body = await response.text();
+            const keys = [...body.matchAll(/<Key>([\s\S]*?)<\/Key>/g)].map((match) => xml(match[1]));
+            const truncated = /<IsTruncated>true<\/IsTruncated>/.test(body);
+            return { keys, ...(truncated && keys.length ? { next: keys[keys.length - 1] } : {}) };
+        },
+        async signedUrl(key, o) {
+            return presignUrl({
+                url: urlOf(key),
+                expiresIn: o.expiresIn,
+                credentials,
+                now: options.now?.(),
+            });
+        },
+    };
+}
+//# sourceMappingURL=s3.js.map

package/dist/server/storage/s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.js","sourceRoot":"","sources":["../../../../../../../packages/ketjs/src/server/storage/s3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAepD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAChC,UAAU,CAAC,GAAG,CAAC;KACZ,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;KACvC,IAAI,CAAC,GAAG,CAAC,CAAA;AAEd,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CACpC,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,MAAc,EAAE,EAAE;IAC9D,MAAM,KAAK,GAA2B,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;IAC1F,OAAO,KAAK,CAAC,MAAM,CAAW,CAAA;AAChC,CAAC,CAAC,CAAA;AAEJ,MAAM,UAAU,SAAS,CAAC,OAAyB;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAqB;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,IAAI;KACd,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,GAAY,EAAO,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9C,IAAI,OAAO,CAAC,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;aAClF,CAAC;YACJ,GAAG,CAAC,QAAQ,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAA;YAClD,GAAG,CAAC,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAA;QAC9B,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,KAAK,EACvB,MAAc,EACd,GAAQ,EACR,IAAI,GAAsB,EAAE,EAC5B,WAAW,GAAG,MAAM,KAAK,KAAK;QAC5B,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,kEAAkE,EACnD,EAAE;QACrB,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,MAAM;YACN,GAAG;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW;YACX,WAAW;YACX,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;SACrB,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,GAAG,EAAE;YAClB,GAAG,IAAI;YACP,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACf,CAAC,CAAA;IAC9B,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,EAAE,QAAkB,EAAE,SAAiB,EAAqB,EAAE;QACjF,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAA;QAChC,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACtD,MAAM,IAAI,KAAK,CAAC,MAAM,SAAS,YAAY,QAAQ,CAAC,MAAM,MAAM,MAAM,EAAE,CAAC,CAAA;IAC3E,CAAC,CAAA;IAED,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,OAAgB,EAAU,EAAE,CAAC,CAAC;QACvD,GAAG;QACH,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,0BAA0B;QAC/D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC,CAAA;IAEF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACpB,+EAA+E;YAC/E,yEAAyE;YACzE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBACtB,MAAM,IAAI,KAAK,CACb,cAAc,GAAG,2EAA2E,CAC7F,CAAA;YACH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;YACtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;YACvF,OAAO;gBACL,GAAG;gBACH,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC9B,CAAC,CAAC,EAAE,IAAI,EAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE;oBAC1E,CAAC,CAAC,EAAE,CAAC;aACR,CAAA;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;YACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;gBAC7B,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;YAC9D,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAA4C;gBAC3D,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC;aAClC,CAAA;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;YACtD,8EAA8E;YAC9E,2EAA2E;YAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAA;YACnE,MAAM,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,OAAO,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAClE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;YACvB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;YACnB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;YACtC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACtC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACtF,IAAI,CAAC,CAAC,KAAK;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;YACzD,+EAA+E;YAC/E,4CAA4C;YAC5C,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;YACrE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAClC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC,CAAA;YAClG,MAAM,SAAS,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/D,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QACjG,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;gBACf,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW;gBACX,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;aACrB,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}