npm - @knpkv/herdr-fleet - Versions diffs - 0.4.0 → 0.5.0 - Mend

@knpkv/herdr-fleet 0.4.0 → 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/README.md CHANGED Viewed

@@ -15,6 +15,11 @@ The package exports:
 - `JobStore`, the local SQLite persistence boundary
 - `makeFleetService`, the approval and execution state machine
 - typed validation, storage, approval, authorization, and operation errors
+- `@knpkv/herdr-fleet/sqlite`, the private on-disk database opener for the `node:sqlite` Herdr stores, and the path checks the orchestrator database reuses
+The `node:sqlite` stores (Fleet jobs, approvals, coordinator chat, Connect activity and relationships, Work) open their database through `openPrivateSqlite` from `@knpkv/herdr-fleet/sqlite`. The state directory and the database, `-wal` and `-shm` files are refused, unchanged, when they are symbolic links, the wrong type, or group/other writable; otherwise the directory is restricted to `0700` (created if missing) and the files to `0600`, and WAL is enabled after the store's schema step. Symlinked ancestors such as macOS `/var` are allowed. `preparePrivateDatabasePath` does the same file-system work for other clients.
+The coordinator's orchestrator database (`@effect/sql-sqlite-node`) keeps its own, different policy: it requires an existing state directory to be exactly `0700` and refuses it otherwise, refuses symbolic links through `verifyPrivatePathIdentity`, and then sets the files to `0600` with `securePrivateDatabaseFiles`. It does not refuse a group-writable database file; it restricts it.
 `HostConfiguration.pushAllowedOrigins` is the explicit exact-origin allowlist used by the approval runtime for browser push delivery. It has no implicit defaults; deployment configuration owns the accepted push services.

package/dist/service.d.ts CHANGED Viewed

@@ -74,20 +74,11 @@ type Options = {
 export declare const makeFleetService: (options: Options) => Effect.Effect<{
     submit: (request: {
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -214,6 +205,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
     }, actor: string, provenance?: SubmissionProvenance | undefined) => Effect.Effect<{
         readonly id: string;
@@ -230,20 +230,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -370,6 +361,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -407,20 +407,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -547,6 +538,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -584,20 +584,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -724,6 +715,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -761,20 +761,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -901,6 +892,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -938,20 +938,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -1078,6 +1069,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -1115,20 +1115,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -1255,6 +1246,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -1292,20 +1292,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -1432,6 +1423,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -1472,20 +1472,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -1612,6 +1603,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -1653,20 +1653,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expiredAt?: number | null;
             readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
             readonly payload: {
-                readonly kind: "nix.check";
-            } | {
-                readonly kind: "nix.apply";
-                readonly ref: string;
-            } | {
                 readonly kind: "agent.delegate";
                 readonly repository: string;
                 readonly prompt: string;
                 readonly mode: "consult" | "review" | "transition_summary" | "work";
                 readonly channel?: "coordinator_chat";
-            } | {
-                readonly kind: "agent.message";
-                readonly session: string;
-                readonly message: string;
             } | {
                 readonly kind: "work.reconcile";
                 readonly repository: string;
@@ -1793,6 +1784,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
                 readonly expectedGoalUpdatedAt: number;
             } | {
                 readonly kind: "browser.mcp.recover";
+            } | {
+                readonly kind: "nix.check";
+            } | {
+                readonly kind: "nix.apply";
+                readonly ref: string;
+            } | {
+                readonly kind: "agent.message";
+                readonly session: string;
+                readonly message: string;
             };
             readonly result: string | null;
             readonly acceptedReceipt?: string | null;
@@ -1839,20 +1839,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expiredAt?: number | null;
             readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
             readonly payload: {
-                readonly kind: "nix.check";
-            } | {
-                readonly kind: "nix.apply";
-                readonly ref: string;
-            } | {
                 readonly kind: "agent.delegate";
                 readonly repository: string;
                 readonly prompt: string;
                 readonly mode: "consult" | "review" | "transition_summary" | "work";
                 readonly channel?: "coordinator_chat";
-            } | {
-                readonly kind: "agent.message";
-                readonly session: string;
-                readonly message: string;
             } | {
                 readonly kind: "work.reconcile";
                 readonly repository: string;
@@ -1979,6 +1970,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
                 readonly expectedGoalUpdatedAt: number;
             } | {
                 readonly kind: "browser.mcp.recover";
+            } | {
+                readonly kind: "nix.check";
+            } | {
+                readonly kind: "nix.apply";
+                readonly ref: string;
+            } | {
+                readonly kind: "agent.message";
+                readonly session: string;
+                readonly message: string;
             };
             readonly result: string | null;
             readonly acceptedReceipt?: string | null;
@@ -2021,20 +2021,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -2161,6 +2152,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;
@@ -2250,20 +2250,11 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
         readonly expiredAt?: number | null;
         readonly status: "expired" | "failed" | "interrupted" | "pending_approval" | "queued" | "rejected" | "running" | "succeeded";
         readonly payload: {
-            readonly kind: "nix.check";
-        } | {
-            readonly kind: "nix.apply";
-            readonly ref: string;
-        } | {
             readonly kind: "agent.delegate";
             readonly repository: string;
             readonly prompt: string;
             readonly mode: "consult" | "review" | "transition_summary" | "work";
             readonly channel?: "coordinator_chat";
-        } | {
-            readonly kind: "agent.message";
-            readonly session: string;
-            readonly message: string;
         } | {
             readonly kind: "work.reconcile";
             readonly repository: string;
@@ -2390,6 +2381,15 @@ export declare const makeFleetService: (options: Options) => Effect.Effect<{
             readonly expectedGoalUpdatedAt: number;
         } | {
             readonly kind: "browser.mcp.recover";
+        } | {
+            readonly kind: "nix.check";
+        } | {
+            readonly kind: "nix.apply";
+            readonly ref: string;
+        } | {
+            readonly kind: "agent.message";
+            readonly session: string;
+            readonly message: string;
         };
         readonly result: string | null;
         readonly acceptedReceipt?: string | null;

package/dist/sqlite.d.ts ADDED Viewed

@@ -0,0 +1,86 @@
+/**
+ * Private on-disk SQLite databases for Herdr stores.
+ *
+ * **Mental model**
+ *
+ * - **Refuse, never repair.** A state directory or database file that other users
+ *   could write is refused, and left exactly as found. Repairing it would hide that
+ *   someone could already have changed it.
+ * - **Owner-only once accepted.** The state directory ends `0700` and the database
+ *   files `0600`; an existing directory is checked before it is restricted, so a
+ *   writable one is refused rather than quietly fixed.
+ * - **Only the last path component is checked for a symlink.** Symlinked ancestors
+ *   (macOS `/var`, a Nix-managed home) are normal and allowed; a database or state
+ *   directory that is itself a link is refused.
+ * - **Two layers.** {@link preparePrivateDatabasePath} and
+ *   {@link securePrivateDatabaseFiles} only touch the file system, so any SQLite
+ *   client can use them; {@link openPrivateSqlite} adds the `node:sqlite` connection.
+ *
+ * @example
+ * ```ts
+ * const opened = yield* openPrivateSqlite(path, {
+ *   initialize: (database) => database.exec("CREATE TABLE IF NOT EXISTS jobs (id TEXT PRIMARY KEY)")
+ * })
+ * // after each write, WAL may have created -wal/-shm:
+ * yield* opened.secureFiles
+ * ```
+ *
+ * @module
+ */
+import { Effect, FileSystem, Path, Schema } from "effect";
+import { DatabaseSync } from "node:sqlite";
+declare const PrivateDatabaseError_base: Schema.Class<PrivateDatabaseError, Schema.TaggedStruct<"PrivateDatabaseError", {
+    readonly operation: Schema.String;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+/** One step of opening or securing a private database failed; `operation` names the step. */
+export declare class PrivateDatabaseError extends PrivateDatabaseError_base {
+}
+/**
+ * Refuse `path` if it is itself a symlink or does not resolve to its real parent
+ * joined with its name; a missing component is checked through its parent.
+ * Failures carry `operation` (sub-steps append `.readlink`, `.exists`, …).
+ */
+export declare const verifyPrivatePathIdentity: (path: string, operation: string) => Effect.Effect<void, PrivateDatabaseError, FileSystem.FileSystem | Path.Path>;
+/**
+ * Make `path`'s directory and any existing database files safe to open, or refuse.
+ *
+ * Refuses a directory or file that is a symlink, the wrong type, or group/other
+ * writable, without changing it. Otherwise restricts the directory (created if
+ * missing) to `0700` and existing db/-wal/-shm files to `0600`.
+ */
+export declare const preparePrivateDatabasePath: (path: string) => Effect.Effect<undefined, PrivateDatabaseError, FileSystem.FileSystem | Path.Path>;
+/**
+ * Set the database file and its `-wal`/`-shm` siblings, whichever exist, to `0600`.
+ *
+ * SQLite creates the siblings lazily, so call this after writes as well as after
+ * opening. A sibling that has become a symlink is refused rather than followed.
+ */
+export declare const securePrivateDatabaseFiles: (path: string) => Effect.Effect<void, PrivateDatabaseError, FileSystem.FileSystem | Path.Path>;
+/** An open `node:sqlite` connection to a private database. */
+export interface PrivateSqlite {
+    readonly database: DatabaseSync;
+    /** {@link securePrivateDatabaseFiles} for this database; run after writes. */
+    readonly secureFiles: Effect.Effect<void, PrivateDatabaseError>;
+}
+export interface OpenPrivateSqliteOptions {
+    /**
+     * Creates or migrates the schema; a throw closes the connection. Runs before WAL
+     * is enabled, so a legacy rollback-journal database migrates in its own mode first
+     * (Work's legacy authority-table migration fails with "database is locked" otherwise).
+     */
+    readonly initialize: (database: DatabaseSync) => void;
+    /** Wait up to this long for another connection's lock instead of failing at once. */
+    readonly busyTimeoutMillis?: number;
+}
+/**
+ * Prepare `path` (see {@link preparePrivateDatabasePath}), open it in WAL mode,
+ * initialize the schema and secure the files. The caller owns the returned
+ * connection and must close it.
+ */
+export declare const openPrivateSqlite: (path: string, options: OpenPrivateSqliteOptions) => Effect.Effect<{
+    database: DatabaseSync;
+    secureFiles: Effect.Effect<void, PrivateDatabaseError, never>;
+}, PrivateDatabaseError, FileSystem.FileSystem | Path.Path>;
+export {};
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/sqlite.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;;;;;AAE1C,6FAA6F;AAC7F,qBAAa,oBAAqB,SAAQ,yBAMzC;CAAG;AA2CJ;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,mHAOpC,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,qGAwCrC,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,gGAcrC,CAAA;AAEF,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAA;IACrD,qFAAqF;IACrF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;2DA8B5B,CAAA"}

package/dist/sqlite.js ADDED Viewed

@@ -0,0 +1,148 @@
+/**
+ * Private on-disk SQLite databases for Herdr stores.
+ *
+ * **Mental model**
+ *
+ * - **Refuse, never repair.** A state directory or database file that other users
+ *   could write is refused, and left exactly as found. Repairing it would hide that
+ *   someone could already have changed it.
+ * - **Owner-only once accepted.** The state directory ends `0700` and the database
+ *   files `0600`; an existing directory is checked before it is restricted, so a
+ *   writable one is refused rather than quietly fixed.
+ * - **Only the last path component is checked for a symlink.** Symlinked ancestors
+ *   (macOS `/var`, a Nix-managed home) are normal and allowed; a database or state
+ *   directory that is itself a link is refused.
+ * - **Two layers.** {@link preparePrivateDatabasePath} and
+ *   {@link securePrivateDatabaseFiles} only touch the file system, so any SQLite
+ *   client can use them; {@link openPrivateSqlite} adds the `node:sqlite` connection.
+ *
+ * @example
+ * ```ts
+ * const opened = yield* openPrivateSqlite(path, {
+ *   initialize: (database) => database.exec("CREATE TABLE IF NOT EXISTS jobs (id TEXT PRIMARY KEY)")
+ * })
+ * // after each write, WAL may have created -wal/-shm:
+ * yield* opened.secureFiles
+ * ```
+ *
+ * @module
+ */
+import { Effect, FileSystem, Path, Schema } from "effect";
+import { DatabaseSync } from "node:sqlite";
+/** One step of opening or securing a private database failed; `operation` names the step. */
+export class PrivateDatabaseError extends Schema.TaggedError()("PrivateDatabaseError", {
+    operation: Schema.String,
+    cause: Schema.Defect()
+}) {
+}
+const failWith = (operation) => (cause) => new PrivateDatabaseError({ operation, cause });
+const groupOrOtherWritable = (paths, mode) => paths.sep === "/" && (mode & 0o022) !== 0;
+const databaseFiles = (path) => [path, `${path}-wal`, `${path}-shm`];
+// Refuses `path` when it is itself a symlink — including a dangling one — or when
+// its real path is not its real parent joined with its name. A component that does
+// not exist yet is checked through its parent.
+const verifyPathIdentity = (path, fileSystem, paths, operation) => fileSystem.readLink(path).pipe(Effect.matchEffect({
+    onFailure: (cause) => cause.reason._tag === "NotFound" || cause.reason._tag === "Unknown"
+        ? Effect.void
+        : Effect.fail(new PrivateDatabaseError({ cause, operation: `${operation}.readlink` })),
+    onSuccess: (target) => Effect.fail(new PrivateDatabaseError({ cause: { path, target }, operation }))
+}), Effect.andThen(fileSystem.exists(path).pipe(Effect.mapError(failWith(`${operation}.exists`)))), Effect.flatMap((exists) => {
+    const parent = paths.dirname(path);
+    if (!exists) {
+        return parent === path ? Effect.void : verifyPathIdentity(parent, fileSystem, paths, operation);
+    }
+    return Effect.all({
+        realPath: fileSystem.realPath(path).pipe(Effect.mapError(failWith(`${operation}.realpath`))),
+        realParentPath: fileSystem.realPath(parent).pipe(Effect.mapError(failWith(`${operation}.parent-realpath`)))
+    }).pipe(Effect.flatMap(({ realParentPath, realPath }) => {
+        const expectedPath = paths.join(realParentPath, paths.basename(path));
+        return realPath === expectedPath
+            ? Effect.void
+            : Effect.fail(new PrivateDatabaseError({ cause: { expectedPath, path, realPath }, operation }));
+    }));
+}));
+/**
+ * Refuse `path` if it is itself a symlink or does not resolve to its real parent
+ * joined with its name; a missing component is checked through its parent.
+ * Failures carry `operation` (sub-steps append `.readlink`, `.exists`, …).
+ */
+export const verifyPrivatePathIdentity = Effect.fn("PrivateDatabase.verifyPathIdentity")(function* (path, operation) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const paths = yield* Path.Path;
+    yield* verifyPathIdentity(path, fileSystem, paths, operation);
+});
+/**
+ * Make `path`'s directory and any existing database files safe to open, or refuse.
+ *
+ * Refuses a directory or file that is a symlink, the wrong type, or group/other
+ * writable, without changing it. Otherwise restricts the directory (created if
+ * missing) to `0700` and existing db/-wal/-shm files to `0600`.
+ */
+export const preparePrivateDatabasePath = Effect.fn("PrivateDatabase.prepare")(function* (path) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const paths = yield* Path.Path;
+    const directory = paths.dirname(path);
+    yield* fileSystem.makeDirectory(directory, { recursive: true, mode: 0o700 }).pipe(Effect.mapError(failWith("open.directory")));
+    const directoryInfo = yield* fileSystem.stat(directory).pipe(Effect.mapError(failWith("open.directory.stat")));
+    if (directoryInfo.type !== "Directory" || groupOrOtherWritable(paths, directoryInfo.mode)) {
+        return yield* new PrivateDatabaseError({
+            cause: { directory, mode: directoryInfo.mode, type: directoryInfo.type },
+            operation: "open.directory.unsafe"
+        });
+    }
+    yield* verifyPathIdentity(directory, fileSystem, paths, "open.directory.path-identity");
+    yield* fileSystem.chmod(directory, 0o700).pipe(Effect.mapError(failWith("open.secureDirectory")));
+    yield* Effect.forEach(databaseFiles(path), (file) => verifyPathIdentity(file, fileSystem, paths, "open.path-identity").pipe(Effect.andThen(fileSystem.exists(file).pipe(Effect.mapError(failWith("open.file.exists")))), Effect.flatMap((exists) => {
+        if (!exists)
+            return Effect.void;
+        return fileSystem.stat(file).pipe(Effect.mapError(failWith("open.file.stat")), Effect.flatMap((info) => info.type !== "File" || groupOrOtherWritable(paths, info.mode)
+            ? Effect.fail(new PrivateDatabaseError({
+                cause: { file, mode: info.mode, type: info.type },
+                operation: "open.file.unsafe"
+            }))
+            : fileSystem.chmod(file, 0o600).pipe(Effect.mapError(failWith("open.file.secure")))));
+    })), { discard: true });
+});
+/**
+ * Set the database file and its `-wal`/`-shm` siblings, whichever exist, to `0600`.
+ *
+ * SQLite creates the siblings lazily, so call this after writes as well as after
+ * opening. A sibling that has become a symlink is refused rather than followed.
+ */
+export const securePrivateDatabaseFiles = Effect.fn("PrivateDatabase.secureFiles")(function* (path) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const paths = yield* Path.Path;
+    yield* Effect.forEach(databaseFiles(path), (file) => verifyPathIdentity(file, fileSystem, paths, "secure.path-identity").pipe(Effect.andThen(fileSystem.exists(file).pipe(Effect.mapError(failWith("secure.exists")))), Effect.flatMap((exists) => exists ? fileSystem.chmod(file, 0o600).pipe(Effect.mapError(failWith("secure.chmod"))) : Effect.void)), { discard: true });
+});
+/**
+ * Prepare `path` (see {@link preparePrivateDatabasePath}), open it in WAL mode,
+ * initialize the schema and secure the files. The caller owns the returned
+ * connection and must close it.
+ */
+export const openPrivateSqlite = Effect.fn("PrivateDatabase.openSqlite")(function* (path, options) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const paths = yield* Path.Path;
+    yield* preparePrivateDatabasePath(path);
+    const database = yield* Effect.try({
+        try: () => {
+            const database = new DatabaseSync(path);
+            try {
+                if (options.busyTimeoutMillis !== undefined) {
+                    database.exec(`PRAGMA busy_timeout = ${options.busyTimeoutMillis}`);
+                }
+                options.initialize(database);
+                database.exec("PRAGMA journal_mode = WAL");
+                return database;
+            }
+            catch (error) {
+                database.close();
+                throw error;
+            }
+        },
+        catch: failWith("open.database")
+    });
+    const secureFiles = securePrivateDatabaseFiles(path).pipe(Effect.provideService(FileSystem.FileSystem, fileSystem), Effect.provideService(Path.Path, paths));
+    yield* secureFiles.pipe(Effect.onError(() => Effect.sync(() => database.close())));
+    return { database, secureFiles };
+});
+//# sourceMappingURL=sqlite.js.map

package/dist/sqlite.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,6FAA6F;AAC7F,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,WAAW,EAAwB,CAClF,sBAAsB,EACtB;IACE,SAAS,EAAE,MAAM,CAAC,MAAM;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CACF;CAAG;AAEJ,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAE1G,MAAM,oBAAoB,GAAG,CAAC,KAAgB,EAAE,IAAY,EAAW,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;AAEnH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAyB,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,CAAA;AAEnG,kFAAkF;AAClF,mFAAmF;AACnF,+CAA+C;AAC/C,MAAM,kBAAkB,GAAG,CACzB,IAAY,EACZ,UAAiC,EACjC,KAAgB,EAChB,SAAiB,EAC0B,EAAE,CAC7C,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAC5B,MAAM,CAAC,WAAW,CAAC;IACjB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;QACjE,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,WAAW,EAAE,CAAC,CAAC;IAC1F,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;CACrG,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,CAAC,EAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,WAAW,CAAC,CAAC,CAAC;QAC5F,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,kBAAkB,CAAC,CAAC,CAAC;KAC5G,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE;QACtD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QACrE,OAAO,QAAQ,KAAK,YAAY;YAC9B,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IACnG,CAAC,CAAC,CAAC,CAAA;AACL,CAAC,CAAC,CACH,CAAA;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAChG,IAAY,EACZ,SAAiB;IAEjB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC9B,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;AAC/D,CAAC,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;IACnG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAC5C,CAAA;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAC9G,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW,IAAI,oBAAoB,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC;YACrC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE;YACxE,SAAS,EAAE,uBAAuB;SACnC,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAA;IACvF,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;IACjG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,aAAa,CAAC,IAAI,CAAC,EACnB,CAAC,IAAI,EAAE,EAAE,CACP,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAC3F,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACxB,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAA;QAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;YAC5D,CAAC,CAAC,MAAM,CAAC,IAAI,CACX,IAAI,oBAAoB,CAAC;gBACvB,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBACjD,SAAS,EAAE,kBAAkB;aAC9B,CAAC,CACH;YACD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CACtF,CACF,CAAA;IACH,CAAC,CAAC,CACH,EACH,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;IACvG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC9B,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,aAAa,CAAC,IAAI,CAAC,EACnB,CAAC,IAAI,EAAE,EAAE,CACP,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EACxF,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACrG,CACF,EACH,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAA;AACH,CAAC,CAAC,CAAA;AAoBF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAChF,IAAY,EACZ,OAAiC;IAEjC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC9B,KAAK,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACjC,GAAG,EAAE,GAAG,EAAE;YACR,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;YACvC,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;oBAC5C,QAAQ,CAAC,IAAI,CAAC,yBAAyB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;gBACrE,CAAC;gBACD,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;gBAC5B,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;gBAC1C,OAAO,QAAQ,CAAA;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,KAAK,EAAE,CAAA;gBAChB,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QACD,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC;KACjC,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,EACxD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CACxC,CAAA;IACD,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;IAClF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAA0B,CAAA;AAC1D,CAAC,CAAC,CAAA"}

package/dist/store.d.ts CHANGED Viewed

@@ -1,10 +1,10 @@
-import { Effect, FileSystem, Path } from "effect";
+import { Effect } from "effect";
 import { FleetJobConflictError, FleetStoreError, FleetTransitionConflictError } from "./errors.js";
 export declare class JobStore {
     #private;
     readonly path: string;
     private constructor();
-    static readonly open: (path: string) => Effect.Effect<JobStore, FleetStoreError, FileSystem.FileSystem | Path.Path>;
+    static readonly open: (path: string) => Effect.Effect<JobStore, FleetStoreError, import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
     readonly put: (this: JobStore, record: {
         readonly id: string;
         readonly createdAt: number;

package/dist/store.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,~~EAAE,UAAU,EAAE,IAAI,~~EAAU,MAAM,QAAQ,CAAA;~~AAEzD~~,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;~~AAwBlG~~,qBAAa,QAAQ;;IAGnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,OAAO,~~eAuBN~~;IAED,MAAM,CAAC,QAAQ,CAAC,IAAI,~~gGAgBlB~~;IAEF,QAAQ,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uDAiBV;IAEF,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8DA6BjB;IAEF,QAAQ,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAcV;IAEF,QAAQ,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAaX;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA2ClB;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA6BlB;IAEF,QAAQ,CAAC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAsBtB;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA2BlB;IAEF,OAAO,CAAC,WAAW;~~IAoBnB~~,KAAK,IAAI,IAAI,CAEZ;CACF"}
1	+ {"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AAEvC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AA4BlG,qBAAa,QAAQ;;IAGnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,OAAO,eAIN;IAED,MAAM,CAAC,QAAQ,CAAC,IAAI,kIAkBlB;IAEF,QAAQ,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uDAiBV;IAEF,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8DA6BjB;IAEF,QAAQ,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAcV;IAEF,QAAQ,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAaX;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA2ClB;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA6BlB;IAEF,QAAQ,CAAC,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAsBtB;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA2BlB;IAEF,OAAO,CAAC,WAAW;IAInB,KAAK,IAAI,IAAI,CAEZ;CACF"}

package/dist/store.js CHANGED Viewed

@@ -1,8 +1,9 @@
-import { Effect, FileSystem, Path, Schema } from "effect";
-import { DatabaseSync } from "node:sqlite";
+import { Effect, Schema } from "effect";
 import { FleetJobConflictError, FleetStoreError, FleetTransitionConflictError } from "./errors.js";
 import { JobRecord } from "./model.js";
+import { openPrivateSqlite } from "./sqlite.js";
 const storeError = (operation) => (cause) => new FleetStoreError({ operation, detail: String(cause), cause });
+const fromPrivateDatabaseError = (error) => new FleetStoreError({ operation: error.operation, detail: String(error.cause), cause: error.cause });
 const decodeRecord = (text) => Effect.try({
     try: () => Schema.decodeUnknownSync(JobRecord)(JSON.parse(text)),
     catch: storeError("decode")
@@ -11,45 +12,30 @@ const encodeRecord = (record) => JSON.stringify(Schema.encodeSync(JobRecord)(rec
 const decodeRows = (operation, rows) => Effect.forEach(rows, (row) => Schema.decodeUnknownEffect(Schema.Struct({ record: Schema.String }))(row).pipe(Effect.mapError(storeError(operation)), Effect.flatMap(({ record }) => decodeRecord(record))));
 export class JobStore {
     #database;
-    #fileSystem;
+    #secureFiles;
     path;
-    constructor(path, fileSystem) {
+    constructor(path, opened) {
         this.path = path;
-        this.#fileSystem = fileSystem;
-        this.#database = new DatabaseSync(path);
-        try {
-            this.#database.exec(`
-        PRAGMA journal_mode = WAL;
-        CREATE TABLE IF NOT EXISTS jobs (
-          id TEXT PRIMARY KEY,
-          created_at INTEGER NOT NULL,
-          record TEXT NOT NULL
-        );
-        CREATE INDEX IF NOT EXISTS jobs_record_status_idx ON jobs (
-          CASE
-            WHEN json_valid(record)
-            THEN json_extract(record, '$.status')
-          END
-        );
-      `);
-        }
-        catch (error) {
-            this.#database.close();
-            throw error;
-        }
+        this.#database = opened.database;
+        this.#secureFiles = opened.secureFiles.pipe(Effect.mapError(fromPrivateDatabaseError));
     }
     static open = Effect.fn("JobStore.open")(function* (path) {
-        const fileSystem = yield* FileSystem.FileSystem;
-        const paths = yield* Path.Path;
-        const directory = paths.dirname(path);
-        yield* fileSystem.makeDirectory(directory, { recursive: true, mode: 0o700 }).pipe(Effect.mapError(storeError("open.makeDirectory")));
-        yield* fileSystem.chmod(directory, 0o700).pipe(Effect.mapError(storeError("open.secureDirectory")));
-        const store = yield* Effect.try({
-            try: () => new JobStore(path, fileSystem),
-            catch: storeError("open.database")
-        });
-        yield* store.secureFiles();
-        return store;
+        const opened = yield* openPrivateSqlite(path, {
+            initialize: (database) => database.exec(`
+          CREATE TABLE IF NOT EXISTS jobs (
+            id TEXT PRIMARY KEY,
+            created_at INTEGER NOT NULL,
+            record TEXT NOT NULL
+          );
+          CREATE INDEX IF NOT EXISTS jobs_record_status_idx ON jobs (
+            CASE
+              WHEN json_valid(record)
+              THEN json_extract(record, '$.status')
+            END
+          );
+        `)
+        }).pipe(Effect.mapError(fromPrivateDatabaseError));
+        return new JobStore(path, opened);
     });
     put = Effect.fn("JobStore.put")(function* (record) {
         const database = this.#database;
@@ -196,11 +182,7 @@ export class JobStore {
         return yield* decodeRows("listWorkers", rows);
     });
     secureFiles() {
-        const fileSystem = this.#fileSystem;
-        const files = [this.path, `${this.path}-wal`, `${this.path}-shm`];
-        return Effect.forEach(files, (path) => fileSystem.exists(path).pipe(Effect.mapError(storeError("secure.exists")), Effect.flatMap((exists) => exists
-            ? fileSystem.chmod(path, 0o600).pipe(Effect.mapError(storeError("secure.chmod")))
-            : Effect.void)), { discard: true });
+        return this.#secureFiles;
     }
     close() {
         this.#database.close();

package/dist/store.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,~~UAAU,EAAE,IAAI,EAAE,~~MAAM,EAAE,MAAM,QAAQ,CAAA;~~AACzD~~,OAAO,EAAE,~~YAAY,EAAuB,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,~~qBAAqB,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAClG,OAAO,EAAE,SAAS,EAA8B,MAAM,YAAY,CAAA;~~AAElE~~,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE,CAC3D,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AAElE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;CAC5B,CAAC,CAAA;AAEJ,MAAM,YAAY,GAAG,CAAC,MAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAEhG,MAAM,UAAU,GAAG,CACjB,SAAqF,EACrF,IAAmD,EACnD,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAC3B,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EACtC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CACrD,CAAC,CAAA;AAEN,MAAM,OAAO,QAAQ;IACV,SAAS,CAAc;IACvB,~~WAAW~~,~~CAAuB~~;~~IAClC~~,IAAI,CAAQ;IAErB,YAAoB,IAAY,EAAE,~~UAAiC~~;~~QACjE~~,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,~~WAAW,GAAG,UAAU,CAAA;QAC7B,IAAI,CAAC,~~SAAS,GAAG,~~IAAI~~,~~YAAY,~~CAAC,~~IAAI~~,~~CAAC,~~CAAA;~~QACvC~~,IAAI,CAAC~~;YACH~~,~~IAAI~~,CAAC,~~SAAS~~,CAAC,IAAI,CAAC~~;;;;;;;;;;;;;OAanB~~,~~CAAC~~,~~CAAA;QACJ,~~CAAC~~;QAAC~~,~~OAAO~~,~~KAAK,EAAE,~~CAAC~~;YACf~~,~~IAAI~~,CAAC,~~SAAS,~~CAAC,~~KAAK,EAAE,~~CAAA;~~YACtB~~,~~MAAM,KAAK,CAAA;QACb,~~CAAC;~~IACH,CAAC;~~IAED,MAAM,CAAU,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;QACtE,MAAM,~~UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;QAC/C,~~MAAM,~~KAAK,~~GAAG,KAAK,CAAC,CAAC,~~IAAI~~,CAAC,IAAI,~~CAAA~~;~~QAC9B~~,~~MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,KAAK,CAAC,CAAC,~~UAAU,~~CAAC~~,~~aAAa,~~CAAC,~~SAAS~~,EAAE,EAAE,~~SAAS~~,~~EAAE~~,~~IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,~~CAAC,~~CAAC,~~IAAI,~~CAC/E,MAAM,~~CAAC,~~QAAQ,~~CAAC~~,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAClD,CAAA~~;~~QACD~~,~~KAAK,~~CAAC,CAAC,~~UAAU~~,CAAC,~~KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,CAC5C,~~MAAM,CAAC,QAAQ,CAAC,~~UAAU~~,CAAC,~~sBAAsB,~~CAAC,~~CAAC,CACpD,~~CAAA;~~QACD~~,~~MAAM~~,~~KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,GAAG,EAAE,GAAG,EAAE,CAAC,~~IAAI,QAAQ,CAAC,IAAI,EAAE,~~UAAU~~,CAAC~~;YACzC~~,~~KAAK,EAAE,UAAU,CAAC,eAAe,CAAC;SACnC,CAAC,~~CAAA;~~QACF~~,~~KAAK,~~CAAC,CAAC,~~KAAK,CAAC,WAAW,EAAE,~~CAAA;~~QAC1B,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;~~IAEO,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAEhD,MAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACjC,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CAAC,sEAAsE,CAAC;iBAC/E,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACnE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;SACzB,CAAC,CAAA;QACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACzB,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;IAEO,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAE9D,OAAkB,EAClB,IAAe;QAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAChC,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CACN;;;;;aAKC,CACF;iBACA,GAAG,CACF,YAAY,CAAC,IAAI,CAAC,EAClB,OAAO,CAAC,EAAE,EACV,YAAY,CAAC,OAAO,CAAC,CACtB,CAAC,OAAO;YACb,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC;SAChC,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QACvE,CAAC;QACD,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IAEO,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAEhD,EAAU;QAEV,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC5B,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;SACzB,CAAC,CAAA;QACF,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC9C,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CACzC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC/C,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEO,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EAElD,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CAAC,0DAA0D,CAAC;iBACnE,GAAG,CAAC,KAAK,CAAC;YACf,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;SAC1B,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEO,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAEhE,MAAoC,EACpC,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;;;;;aASC,CACF,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC;gBAChC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;;;;;;aAUC,CACF,CAAC,GAAG,CACH,kBAAkB,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,EAAE,EACT,KAAK,CACN;YACL,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEO,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAEhE,MAAoC,EACpC,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;aAKC,CACF,CAAC,GAAG,CAAC,KAAK,CAAC;gBACZ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;;aAMC,CACF,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC;YAC/D,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEO,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC;QAGxE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CACN;;;;;;;;aAQC,CACF;iBACA,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,SAAS,CAAC;YACjD,KAAK,EAAE,UAAU,CAAC,iBAAiB,CAAC;SACrC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEO,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAEhE,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CACN;;;;;;;;;;;;aAYC,CACF;iBACA,GAAG,CAAC,KAAK,CAAC;YACf,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEM,WAAW;QACjB,~~MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,CAAA;QACjE,~~OAAO,~~MAAM,CAAC,OAAO,CACnB,KAAK,EACL,CAAC,~~IAAI,~~EAAE,EAAE,CACP,UAAU,~~CAAC,~~MAAM~~,CAAC,IAAI,CAAC,CAAC,IAAI,CAC1B,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM;YACJ,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAC5C;YACD,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,CACF,EACH,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAA;~~IACH~~,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;CACF"}
1	+ {"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEvC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAClG,OAAO,EAAE,SAAS,EAA8B,MAAM,YAAY,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAiD,MAAM,aAAa,CAAA;AAE9F,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE,CAC3D,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AAElE,MAAM,wBAAwB,GAAG,CAAC,KAA2B,EAAE,EAAE,CAC/D,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;AAEtG,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC;CAC5B,CAAC,CAAA;AAEJ,MAAM,YAAY,GAAG,CAAC,MAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAEhG,MAAM,UAAU,GAAG,CACjB,SAAqF,EACrF,IAAmD,EACnD,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAC3B,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EACtC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CACrD,CAAC,CAAA;AAEN,MAAM,OAAO,QAAQ;IACV,SAAS,CAAc;IACvB,YAAY,CAAsC;IAClD,IAAI,CAAQ;IAErB,YAAoB,IAAY,EAAE,MAAqB;QACrD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,MAAM,CAAU,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EAAC,IAAY;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE;YAC5C,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvB,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;SAYb,CAAC;SACL,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAA;QAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEO,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAEhD,MAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACjC,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CAAC,sEAAsE,CAAC;iBAC/E,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACnE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;SACzB,CAAC,CAAA;QACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACzB,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;IAEO,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAE9D,OAAkB,EAClB,IAAe;QAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAChC,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CACN;;;;;aAKC,CACF;iBACA,GAAG,CACF,YAAY,CAAC,IAAI,CAAC,EAClB,OAAO,CAAC,EAAE,EACV,YAAY,CAAC,OAAO,CAAC,CACtB,CAAC,OAAO;YACb,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC;SAChC,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QACvE,CAAC;QACD,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IAEO,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAEhD,EAAU;QAEV,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC5B,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;SACzB,CAAC,CAAA;QACF,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC9C,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CACzC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC/C,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEO,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,EAElD,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CAAC,0DAA0D,CAAC;iBACnE,GAAG,CAAC,KAAK,CAAC;YACf,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;SAC1B,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEO,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAEhE,MAAoC,EACpC,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;;;;;aASC,CACF,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC;gBAChC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;;;;;;aAUC,CACF,CAAC,GAAG,CACH,kBAAkB,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,EAAE,EACT,KAAK,CACN;YACL,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEO,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAEhE,MAAoC,EACpC,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,MAAM,KAAK,IAAI;gBACb,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;aAKC,CACF,CAAC,GAAG,CAAC,KAAK,CAAC;gBACZ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAChB;;;;;;aAMC,CACF,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC;YAC/D,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEO,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC;QAGxE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CACN;;;;;;;;aAQC,CACF;iBACA,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,SAAS,CAAC;YACjD,KAAK,EAAE,UAAU,CAAC,iBAAiB,CAAC;SACrC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEO,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAEhE,KAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ;iBACL,OAAO,CACN;;;;;;;;;;;;aAYC,CACF;iBACA,GAAG,CAAC,KAAK,CAAC;YACf,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC;SACjC,CAAC,CAAA;QACF,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEM,WAAW;QACjB,OAAO,IAAI,CAAC,YAAY,CAAA;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;CACF"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@knpkv/herdr-fleet",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Typed job protocol and local authority runtime for Herdr fleets",
   "license": "MIT",
   "author": "knpkv",
@@ -25,6 +25,10 @@
     "./response": {
       "types": "./dist/response.d.ts",
       "import": "./dist/response.js"
+    },
+    "./sqlite": {
+      "types": "./dist/sqlite.d.ts",
+      "import": "./dist/sqlite.js"
     }
   },
   "files": [