@ketvietlab/ketjs 0.1.2 → 0.1.5

package/dist/server/assets.js

@@ -0,0 +1,97 @@
+// Static assets a browser may keep.
+//
+// Every asset used to be served from its own name with `cache-control:
+// no-cache`, and no `ETag` or `Last-Modified` beside it. That pair is the worst
+// of both: `no-cache` tells a cache it must revalidate before reusing anything,
+// and with nothing to revalidate *against* the revalidation cannot answer 304 —
+// so every page load re-fetched every stylesheet and every island bundle in
+// full, and a CDN in front of it had nothing it was allowed to do.
+//
+// A file's own content is the only honest version of it, so that is what goes
+// in the URL. A build that changes nothing changes no URL; a build that changes
+// one bundle changes one URL, and the rest of a deployment's assets stay in
+// caches where they are.
+import { createHash } from 'node:crypto';
+import { readFile, readdir, stat } from 'node:fs/promises';
+import { join, relative } from 'node:path';
+/** How much of the digest goes in the path. Eight hex is 4 billion; a file is not adversarial. */
+const DIGEST = 8;
+/**
+ * The marker that says a path segment is a version rather than a directory.
+ *
+ * Explicit, because `assetMount` has to strip it back off to find the file on
+ * disk, and "the first segment, if it looks like hex" is a rule that breaks the
+ * day somebody ships a directory named `deadbeef`.
+ */
+export const VERSION_PREFIX = 'v';
+const versionSegment = /^v[0-9a-f]{8,}$/;
+/** Splits `v1a2b3c4d/live-doc.mjs` back into the file it names. */
+export const withoutVersion = (path) => {
+    const slash = path.indexOf('/');
+    if (slash <= 0)
+        return path;
+    return versionSegment.test(path.slice(0, slash)) ? path.slice(slash + 1) : path;
+};
+/** True when this request named a version, and so may be cached forever. */
+export const isVersioned = (path) => path.split('/').some((segment) => versionSegment.test(segment));
+const walk = async (dir, base = dir) => {
+    const found = [];
+    let entries;
+    try {
+        entries = await readdir(dir);
+    }
+    catch {
+        return found;
+    }
+    for (const entry of entries) {
+        const full = join(dir, entry);
+        const info = await stat(full).catch(() => null);
+        if (!info)
+            continue;
+        if (info.isDirectory())
+            found.push(...(await walk(full, base)));
+        else
+            found.push(relative(base, full));
+    }
+    return found;
+};
+/**
+ * Rewrites every asset URL in the manifest to carry its file's digest.
+ *
+ * Done at boot rather than in `compose`, which is synchronous and runs in tests
+ * that have no business reading a disk. A deployment that cannot read one of
+ * its own asset directories simply keeps the unversioned URL: the page still
+ * works, it just revalidates the way it always did.
+ */
+export async function fingerprintAssets(manifest) {
+    const versions = new Map();
+    await Promise.all(Object.entries(manifest.assets).map(async ([owner, dir]) => {
+        for (const file of await walk(dir)) {
+            const bytes = await readFile(join(dir, file)).catch(() => null);
+            if (!bytes)
+                continue;
+            const digest = createHash('sha256').update(bytes).digest('hex').slice(0, DIGEST);
+            versions.set(`${owner}/${file}`, `${VERSION_PREFIX}${digest}`);
+        }
+    }));
+    const versioned = (href) => {
+        const prefix = '/_ket/asset/';
+        if (!href.startsWith(prefix))
+            return href;
+        const rest = href.slice(prefix.length);
+        const version = versions.get(rest);
+        if (!version)
+            return href;
+        const slash = rest.indexOf('/');
+        return `${prefix}${rest.slice(0, slash)}/${version}/${rest.slice(slash + 1)}`;
+    };
+    for (const style of manifest.styles)
+        style.href = versioned(style.href);
+    for (const island of Object.values(manifest.islands)) {
+        const client = island.client;
+        if (client)
+            client.src = versioned(client.src);
+    }
+    return versions;
+}
+//# sourceMappingURL=assets.js.map

package/dist/server/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/assets.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,uEAAuE;AACvE,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,yBAAyB;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAG1C,kGAAkG;AAClG,MAAM,MAAM,GAAG,CAAC,CAAA;AAEhB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAA;AAEjC,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAExC,mEAAmE;AACnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACjF,CAAC,CAAA;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CACnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAEjE,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,IAAI,GAAG,GAAG,EAAqB,EAAE;IAChE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;;YAC1D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;QACzD,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC/D,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAChF,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,GAAG,cAAc,GAAG,MAAM,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE;QACzC,MAAM,MAAM,GAAG,cAAc,CAAA;QAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;IAC/E,CAAC,CAAA;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACvE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAI,MAAuC,CAAC,MAAM,CAAA;QAC9D,IAAI,MAAM;YAAE,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/server/boot.d.ts

@@ -1,17 +1,18 @@
 import type { MenuNode } from '../kernel/menu.ts';
 import type { Markup } from '@ketvietlab/ketjs-view';
 import type { Tenants, TenantSpec } from './tenants.ts';
-import type { AppInfo } from '../kernel/apps.ts';
 import type { SessionContext, Sessions, SessionOptions, SessionRecord } from './session.ts';
+import type { RatePolicy } from './ratelimit.ts';
+import type { Logger, OpenLog } from './log/index.ts';
 import type { RuntimeConfig, OpenStore } from './config.ts';
 import type { OpenStorage, Storage } from './storage/index.ts';
 import type { OpenTransport } from './transport/index.ts';
-import type { AppSpec } from '../kernel/workspace.ts';
-import type { AppRegistry } from '../kernel/apps.ts';
+import type { DeploymentSpec, NavigationSpec } from '../kernel/workspace.ts';
 import type { Translator } from '../kernel/i18n.ts';
 import type { Adapter, Manifest, Scope } from '../types.ts';
 import type { IncomingMessage } from 'node:http';
 import type { RouteParams } from '../kernel/routes.ts';
+import type { Streams, StreamStore } from './stream.ts';
 export type { Html, RouteResult } from './respond.ts';
 export { page, fragment, navigablePage, isNavigationRequest, text, bytes, streamed, raw, withHeaders, } from './respond.ts';
 export { json } from './respond.ts';
@@ -19,27 +20,27 @@ import type { Html, RouteResult } from './respond.ts';
 export type Route = (url: URL, req: IncomingMessage, params: RouteParams) => Promise<RouteResult> | RouteResult;
 /**
  * What a route needs that only the running server has. Handed to `serve.routes` so
- * an app's screens can read live state without reaching for module-level globals.
+ * deployment screens can read live state without reaching for module-level globals.
  */
 export type ServeContext = {
-    /** Everything this deployment ships, installed or not. */
+    /** The immutable manifest selected by this deployment. */
     manifest: Manifest;
-    /**
-     * Restricted to what is switched on for THIS request's tenant.
-     *
-     * It takes the request because the answer depends on it. Computing it once at
-     * boot is what would show one tenant the module set of another — and that does
-     * not fail, it answers wrongly, which is worse.
-     */
+    /** The authored deployment and its external-client compatibility policy. */
+    deploymentName: string;
+    clientCompatibility: ClientCompatibilityPolicy | null;
+    /** Same manifest for every tenant; request-shaped for convenient route composition. */
     live: (req: IncomingMessage) => Promise<Manifest>;
-    /** The app list for this request's tenant. The registry itself stays leased. */
-    appsOf: (req: IncomingMessage) => Promise<AppInfo[]>;
     config: RuntimeConfig;
     scopeOf: (url: URL, req: IncomingMessage) => Promise<Scope>;
     localeOf: (url: URL, req: IncomingMessage) => string;
     translate: (locale: string) => Translator;
     /** A function call carrying this request's tenant, live manifest and scope. */
-    call: (name: string, input: Record<string, unknown>, url: URL, req: IncomingMessage) => Promise<unknown>;
+    call: (name: string, input: Record<string, unknown>, url: URL, req: IncomingMessage, options?: {
+        idempotencyKey?: string | null;
+        idempotencyNamespace?: string | null;
+        idempotencyDigest?: string | null;
+        correlationId?: string | null;
+    }) => Promise<unknown>;
     /**
      * The same call with the permission check off.
      *
@@ -48,7 +49,32 @@ export type ServeContext = {
      * a permission resolver that went through the check would be asking permission
      * to find out whether it has permission. Nothing else has that excuse.
      */
-    callUnchecked: (name: string, input: Record<string, unknown>, url: URL, req: IncomingMessage) => Promise<unknown>;
+    callUnchecked: (name: string, input: Record<string, unknown>, url: URL, req: IncomingMessage, options?: {
+        idempotencyKey?: string | null;
+        idempotencyNamespace?: string | null;
+        idempotencyDigest?: string | null;
+        correlationId?: string | null;
+    }) => Promise<unknown>;
+    /**
+     * Call inside exactly one company after this route has authenticated an
+     * external credential that is bound to that company.
+     *
+     * This is intentionally separate from `callUnchecked`: provider callbacks
+     * arrive without a staff session, so their request scope cannot select the
+     * legal entity. The company id must come from verified credential material,
+     * never from an unsigned path, query, header, or body field alone. The call
+     * remains in the request's tenant and cannot widen to another company.
+     */
+    callUncheckedForVerifiedCompany: (name: string, input: Record<string, unknown>, companyId: string, url: URL, req: IncomingMessage, options?: {
+        idempotencyKey?: string | null;
+        idempotencyNamespace?: string | null;
+        idempotencyDigest?: string | null;
+        correlationId?: string | null;
+    }) => Promise<unknown>;
+    /** Whether this request's effective allow-list contains one exact function key. */
+    allows: (name: string, url: URL, req: IncomingMessage) => Promise<boolean>;
+    /** What this deployment declared its navigation to mean. Null when it declared nothing. */
+    navigation: NavigationSpec | null;
     /** The document every screen sits in. Markup, not a string — see respond.ts. */
     document: (o: {
         lang: string;
@@ -56,23 +82,24 @@ export type ServeContext = {
         head?: Html;
         body: Html;
     }) => Html;
-    /** Installed modules' stylesheets for this tenant, in dependency order. */
+    /** Composed modules' stylesheets for this tenant, in dependency order. */
     styles: (req: IncomingMessage) => Promise<Html>;
     /**
-     * Render an extension point: every installed module's fills, in dependency
+     * Render an extension point: every composed module's fills, in dependency
      * order, as markup a template inserts verbatim.
      *
-     * Empty when nobody fills it, and empty when an installed module omitted it.
+     * Empty when nobody fills it, and empty when a composed module omitted it.
      */
     joint: (url: URL, req: IncomingMessage, key: string, props?: Record<string, unknown>) => Promise<Markup>;
-    /** False when an installed module omitted this joint — see jointShows in screens. */
+    /** False when a composed module omitted this joint — see jointShows in screens. */
     jointShows: (url: URL, req: IncomingMessage, key: string) => Promise<boolean>;
     /**
-     * The navigation tree as this viewer sees it: what the deployment ships, what
-     * this database has switched on, and what this request may call — in that order,
-     * because each filter depends on the one before.
+     * The navigation tree as this viewer sees it: what the deployment composes and
+     * what this request may call.
      */
     menu: (url: URL, req: IncomingMessage) => Promise<MenuNode[]>;
+    /** Printable reports for a model whose read-only source this viewer may call. */
+    reportsOf: (url: URL, req: IncomingMessage, target: string) => Promise<import('../types.ts').ComposedReport[]>;
     /**
      * This request's sessions. A function because with subdomain tenants they live
      * in that tenant's database — one per tenant, not one per deployment.
@@ -93,6 +120,23 @@ export type PagesSpec = {
     resolve: string;
     /** Optional function taking `{ host }` and returning site id, title, locale and theme. */
     siteResolve?: string;
+    /**
+     * Optional function taking `{ siteId }` and returning the site's navigation.
+     * Its answer reaches a theme as `menu`; without it a theme that draws
+     * navigation draws nothing, which is a blank nav rather than an error.
+     */
+    menuResolve?: string;
+    /**
+     * Optional function taking `{ token }` and answering the same shape as
+     * `resolve`, for a draft nobody has published yet. Without it a deployment
+     * can mint preview links and has nowhere to spend them.
+     */
+    previewResolve?: string;
+    /**
+     * Where a preview link points. Defaults to `/_ket/preview`, inside the
+     * namespace the framework already owns, so no published page can claim it.
+     */
+    previewPath?: string;
     /** Theme region whose host carries the same data-ket-slot name. */
     region?: string;
     /** Message key for the title of a path that has no page. */
@@ -106,14 +150,34 @@ export type SessionResolveContext = {
     url: URL;
     req: IncomingMessage;
 };
+/**
+ * Identity established by infrastructure in front of the deployment.
+ *
+ * The resolver is the trust boundary: callers must verify the proxy credential
+ * (for example a short-lived signed assertion) before returning an identity.
+ * KetJS then applies the same actor, scope and permission pipeline used by a
+ * cookie session without persisting a second login session in the tenant DB.
+ */
+export type RequestIdentity = {
+    userId: string;
+    companies: string[];
+    company: string | null;
+    branch?: string | null;
+    branches?: string[] | null;
+    securityVersion?: number;
+};
+export type RequestIdentityResolveContext = {
+    adapter: Adapter;
+    manifest: Manifest;
+    url: URL;
+    req: IncomingMessage;
+};
 export type ServeSpec = {
     pages?: PagesSpec;
     assets?: {
         prefix: string;
         dir: string;
     };
-    /** Installed on an empty database so a first run has something to look at. */
-    bootstrap?: string[];
     routes?: (ctx: ServeContext) => Record<string, Route>;
     /** Anything other than SQLite; the framework cannot depend on a driver. */
     openStore?: OpenStore;
@@ -121,6 +185,46 @@ export type ServeSpec = {
     openStorage?: OpenStorage;
     /** Inject a deployment-owned outbound provider for durable worker jobs. */
     openTransport?: OpenTransport;
+    /**
+     * Send operational records somewhere the framework does not know how to reach.
+     *
+     * The built-ins need nothing but Node, so anything requiring a client library
+     * belongs here rather than in the framework — the same fence as `openStore`.
+     * Level filtering, redaction and failure isolation are applied around whatever
+     * this returns, so a sink cannot break the work it is describing.
+     *
+     * Return a fresh driver per call rather than one memoised instance. A process
+     * that runs both roles — `ket dev` — opens the sink once for HTTP and once for
+     * the worker and closes each with its own role; a shared instance is closed by
+     * whichever shuts down first, and the other role's last records are written to a
+     * handle that is already gone.
+     */
+    openLog?: OpenLog;
+    /** Version and maintenance policy published by profile bootstrap routes. */
+    clientCompatibility?: ClientCompatibilityPolicy;
+    /** Backing store for the built-in resumable stream transport. */
+    streamStore?: StreamStore;
+    /**
+     * Authorize a public stream id and map it to the exact tenant-namespaced topic
+     * used by `BootedDeployment.streams`. Absent or null keeps the endpoint closed.
+     */
+    resolveStream?: (ctx: ServeContext, id: string, url: URL, req: IncomingMessage) => string | null | Promise<string | null>;
+    /**
+     * How long a stream connection is held open, and how long its tail waits
+     * before reading again when nothing woke it. See `ServerOptions`.
+     */
+    streamTimeoutMs?: number;
+    streamPollMs?: number;
+    /** Maximum buffered body accepted by the generic JSON function transport. */
+    maxJsonBodyBytes?: number;
+    /**
+     * A ceiling on how often one caller may reach a route, or null for no ceiling.
+     *
+     * Per-request rather than global on purpose: a durable check costs a database
+     * round trip, so pointing it at everything hands an attacker a lever. Name the
+     * routes where repetition is the abuse.
+     */
+    rateLimit?: (ctx: ServeContext, url: URL, req: IncomingMessage) => RatePolicy | null;
     /**
      * Turn on sessions. Present means the X-Ket-Company shim is gone and identity
      * comes from a signed cookie; absent means the shim stays and the banner says so.
@@ -130,44 +234,76 @@ export type ServeSpec = {
     };
     /** Revalidate live account state and memberships before scope and permissions. */
     resolveSession?: (ctx: SessionResolveContext) => Promise<SessionContext | null>;
+    /** Verify and resolve identity asserted by a trusted gateway for this request. */
+    resolveIdentity?: (ctx: RequestIdentityResolveContext) => Promise<RequestIdentity | null>;
+    /** Classify non-staff credentials so the generic function transport can fail closed. */
+    resolveAudience?: (url: URL, req: IncomingMessage) => string | null | Promise<string | null>;
     /**
-     * Serve several tenants, one database each — Odoo's model, and the one that
-     * makes per-tenant module sets work. Absent, the app has a single datastore.
+     * Serve several tenants, one database each. Every tenant runs this same deployment.
      */
     tenants?: TenantSpec;
     /**
      * Which functions a signed-in user may call. Absent means no restriction, which
-     * is what an app without roles is. Returning a list restricts every call the
+     * is what a deployment without roles is. Returning a list restricts every call the
      * request makes, including the ones a route makes on its behalf.
+     *
+     * The request is handed over because answering the question almost always means
+     * asking the database, and which database that is comes from the request. A
+     * resolver that had to invent one could only reach the tenant a bare URL happens
+     * to resolve to — which is the wrong one for every tenant but the default.
      */
-    permissions?: (ctx: ServeContext, userId: string) => Promise<readonly string[] | null>;
+    permissions?: (ctx: ServeContext, userId: string, url: URL, req: IncomingMessage) => Promise<readonly string[] | null>;
     defaults?: Partial<RuntimeConfig>;
 };
-export type BootedApp = {
+export type ClientCompatibilityPolicy = {
+    minimumVersions: {
+        ios: string;
+        android: string;
+    };
+    recommendedVersions?: {
+        ios: string;
+        android: string;
+    };
+    maintenance?: {
+        enabled: boolean;
+        messages?: Record<string, string>;
+    };
+};
+export type BootedDeployment = {
     name: string;
     manifest: Manifest;
-    /** The datastore, when there is exactly one. Null when the app serves tenants. */
+    /** The datastore, when there is exactly one. Null when the deployment serves tenants. */
     adapter: Adapter | null;
-    /** Likewise: with tenants, "which apps" is a question about a tenant. */
-    apps: AppRegistry | null;
     /** Per-tenant access, and the only form that works in both modes. */
     tenants: Tenants;
     config: RuntimeConfig;
+    /** Writers for the same store served by the authorized stream endpoint. */
+    streams: Streams;
+    /**
+     * This deployment's logger, carrying its name and process role.
+     *
+     * A host that calls functions in process — a seeding script, a test harness —
+     * narrows it with `child` and hands it to `callFn`, so those calls are recorded
+     * the same way a served one is instead of silently escaping the pipeline.
+     */
+    logger: Logger;
     port: number;
     banner: () => Promise<string>;
     close: () => Promise<void>;
 };
-export type BootAppOptions = {
+export type BootDeploymentOptions = {
     env?: Record<string, string | undefined>;
     port?: number;
     /** Boot progress. Long-running serve keeps its banner separate. */
     log?: (line: string) => void;
+    /** Redirect this process's operational records, without editing the spec. */
+    openLog?: OpenLog;
 };
 /**
- * Opens, migrates, installs, serves. Returns before listening is announced so a
+ * Opens, migrates, and serves. Returns before listening is announced so a
  * caller can print its own banner, or a test can boot on port 0 and never print.
  */
-export declare function bootApp(spec: AppSpec, o?: BootAppOptions): Promise<BootedApp>;
-/** bootApp, plus the banner and the signal handling a long-running process wants. */
-export declare function serveApp(spec: AppSpec, o?: BootAppOptions): Promise<BootedApp>;
+export declare function bootDeployment(spec: DeploymentSpec, o?: BootDeploymentOptions): Promise<BootedDeployment>;
+/** bootDeployment, plus the banner and the signal handling a long-running process wants. */
+export declare function serveDeployment(spec: DeploymentSpec, o?: BootDeploymentOptions): Promise<BootedDeployment>;
 //# sourceMappingURL=boot.d.ts.map

package/dist/server/boot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/server/boot.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EAAkB,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAM3F,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEtD,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,GAAG,EACH,WAAW,GACZ,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACrD,MAAM,MAAM,KAAK,GAAG,CAClB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAA;AAEvC;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,0DAA0D;IAC1D,QAAQ,EAAE,QAAQ,CAAA;IAClB;;;;;;OAMG;IACH,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjD,gFAAgF;IAChF,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACpD,MAAM,EAAE,aAAa,CAAA;IACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3D,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IACpD,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAA;IACzC,+EAA+E;IAC/E,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACxG;;;;;;;OAOG;IACH,aAAa,EAAE,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,KACjB,OAAO,CAAC,OAAO,CAAC,CAAA;IACrB,gFAAgF;IAChF,QAAQ,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,KAAK,IAAI,CAAA;IAChF,2EAA2E;IAC3E,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxG,qFAAqF;IACrF,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7E;;;;OAIG;IACH,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC7D;;;OAGG;IACH,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACxE,sDAAsD;IACtD,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAChE,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,QAAQ,CAAA;IAClB,MAAM,EAAE,aAAa,CAAA;IACrB,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,eAAe,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACxC,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrD,2EAA2E;IAC3E,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;OAGG;IACH,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;IAC9E,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAC/E;;;OAGG;IACH,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC,CAAA;IACtF,QAAQ,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;IAClB,kFAAkF;IAClF,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,yEAAyE;IACzE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACxB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,aAAa,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mEAAmE;IACnE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,CAAA;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAkqBvF;AAED,qFAAqF;AACrF,wBAAsB,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CASxF"}
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/server/boot.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,KAAK,EAAkB,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAO3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEtD,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEvD,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,GAAG,EACH,WAAW,GACZ,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACrD,MAAM,MAAM,KAAK,GAAG,CAClB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAA;AAEvC;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,0DAA0D;IAC1D,QAAQ,EAAE,QAAQ,CAAA;IAClB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAA;IACtB,mBAAmB,EAAE,yBAAyB,GAAG,IAAI,CAAA;IACrD,uFAAuF;IACvF,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjD,MAAM,EAAE,aAAa,CAAA;IACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3D,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IACpD,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAA;IACzC,+EAA+E;IAC/E,IAAI,EAAE,CACJ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,EACpB,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC9B,KACE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrB;;;;;;;OAOG;IACH,aAAa,EAAE,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,EACpB,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC9B,KACE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrB;;;;;;;;;OASG;IACH,+BAA+B,EAAE,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,EACpB,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC9B,KACE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrB,mFAAmF;IACnF,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E,2FAA2F;IAC3F,UAAU,EAAE,cAAc,GAAG,IAAI,CAAA;IACjC,gFAAgF;IAChF,QAAQ,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,KAAK,IAAI,CAAA;IAChF,0EAA0E;IAC1E,MAAM,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxG,mFAAmF;IACnF,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7E;;;OAGG;IACH,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC7D,iFAAiF;IACjF,SAAS,EAAE,CACT,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,OAAO,aAAa,EAAE,cAAc,EAAE,CAAC,CAAA;IACpD;;;OAGG;IACH,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACxE,sDAAsD;IACtD,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAChE,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,QAAQ,CAAA;IAClB,MAAM,EAAE,aAAa,CAAA;IACrB,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,eAAe,CAAA;CACrB,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,QAAQ,CAAA;IAClB,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,EAAE,eAAe,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACxC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrD,2EAA2E;IAC3E,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,yBAAyB,CAAA;IAC/C,iEAAiE;IACjE,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,GAAG,EAAE,YAAY,EACjB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,KACjB,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC3C;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,UAAU,GAAG,IAAI,CAAA;IACpF;;;OAGG;IACH,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;IAC9E,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAC/E,kFAAkF;IAClF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,6BAA6B,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACzF,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5F;;OAEG;IACH,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,CACZ,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,eAAe,KACjB,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC,CAAA;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,mBAAmB,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACtD,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAA;CACtE,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;IAClB,yFAAyF;IACzF,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,aAAa,CAAA;IACrB,2EAA2E;IAC3E,OAAO,EAAE,OAAO,CAAA;IAChB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mEAAmE;IACnE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,CAAA;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,cAAc,EACpB,CAAC,GAAE,qBAA0B,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CA+8B3B;AAED,4FAA4F;AAC5F,wBAAsB,eAAe,CACnC,IAAI,EAAE,cAAc,EACpB,CAAC,GAAE,qBAA0B,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAS3B"}