@onetype/stack-api-kit 1.0.0

package/dist/index.js

@@ -0,0 +1,381 @@
+import { database, limiter, createKernel } from './chunk-UCWOCNTI.js';
+export { Answered, KernelFault, MigrationFault, Refusal, answer, createKernel, database, defineCommand, defineListener, defineParticipant, definePlugin, defineRoute, limiter, narrowing, outbox, same, schedule } from './chunk-UCWOCNTI.js';
+import { Hono } from 'hono';
+
+// src/plugins/http/internal/headers.ts
+var always = {
+  "x-content-type-options": "nosniff",
+  "x-frame-options": "DENY",
+  "referrer-policy": "no-referrer",
+  "cache-control": "no-store",
+  "content-security-policy": "default-src 'none'; frame-ancestors 'none'"
+};
+
+// src/plugins/http/internal/origin.ts
+function cors(allowing, origin) {
+  if (origin === void 0 || !allowing.origins.includes(origin)) {
+    return { vary: "Origin" };
+  }
+  return {
+    "access-control-allow-origin": origin,
+    "access-control-allow-credentials": "true",
+    "access-control-allow-methods": allowing.methods.join(", "),
+    "access-control-allow-headers": allowing.headers.join(", "),
+    "access-control-max-age": String(allowing.maxAge),
+    vary: "Origin"
+  };
+}
+
+// src/plugins/http/internal/input.ts
+var UNSAFE = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+function input(carried) {
+  const merged = {};
+  if (carried.body !== null && typeof carried.body === "object" && !Array.isArray(carried.body)) {
+    for (const [key, value] of Object.entries(carried.body)) {
+      if (UNSAFE.has(key)) {
+        continue;
+      }
+      merged[key] = value;
+    }
+  }
+  for (const [key, values] of Object.entries(carried.query)) {
+    if (UNSAFE.has(key)) {
+      continue;
+    }
+    merged[key] = values.length === 1 ? values[0] : values;
+  }
+  for (const [key, value] of Object.entries(carried.params)) {
+    if (UNSAFE.has(key)) {
+      continue;
+    }
+    merged[key] = value;
+  }
+  return merged;
+}
+
+// src/plugins/http/internal/serve.ts
+var CARRIES = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+function identifier(sent) {
+  return sent !== void 0 && /^[A-Za-z0-9_-]{1,64}$/.test(sent) ? sent : crypto.randomUUID();
+}
+function named(c, reads) {
+  const reading = {};
+  for (const name of reads) {
+    const value = c.req.header(name);
+    if (value !== void 0) {
+      reading[name] = value;
+    }
+  }
+  return reading;
+}
+function matching(answering, path) {
+  const direct = answering.get(path);
+  if (direct !== void 0) {
+    return direct;
+  }
+  const asked = path.split("/");
+  for (const [declared, methods] of answering) {
+    const parts = declared.split("/");
+    if (parts.length !== asked.length) {
+      continue;
+    }
+    if (parts.every((part, at) => part.startsWith(":") || part === asked[at])) {
+      return methods;
+    }
+  }
+  return void 0;
+}
+function serve(serving) {
+  const app = new Hono();
+  const bodyBytes = serving.bodyBytes ?? 1e6;
+  const allowing = {
+    origins: serving.origins ?? [],
+    methods: serving.methods ?? ["GET", "POST", "PUT", "PATCH", "DELETE"],
+    headers: serving.headers ?? ["content-type", "authorization"],
+    maxAge: serving.maxAge ?? 600
+  };
+  const requestIds = /* @__PURE__ */ new WeakMap();
+  app.use("*", async (c, next) => {
+    const requestId = identifier(c.req.header("x-request-id"));
+    requestIds.set(c.req.raw, requestId);
+    await next();
+    for (const [name, value] of Object.entries(always)) {
+      c.header(name, value);
+    }
+    for (const [name, value] of Object.entries(cors(allowing, c.req.header("origin")))) {
+      if (name === "access-control-allow-methods" && c.req.method === "OPTIONS" && c.res.headers.has(name)) {
+        continue;
+      }
+      c.header(name, value);
+    }
+    c.header("x-request-id", requestId);
+  });
+  const answering = /* @__PURE__ */ new Map();
+  app.get("/live", (c) => c.json({ live: true }));
+  app.get("/ready", (c) => {
+    const ready = serving.kernel.started();
+    return c.json({ ready }, ready ? 200 : 503);
+  });
+  for (const route of serving.kernel.routes()) {
+    const methods = answering.get(route.path) ?? /* @__PURE__ */ new Set();
+    methods.add(route.method);
+    answering.set(route.path, methods);
+  }
+  app.options("*", (c) => {
+    const methods = matching(answering, c.req.path);
+    if (methods === void 0) {
+      return c.json({ code: "NOT_FOUND", message: "No such route." }, 404);
+    }
+    c.header("access-control-allow-methods", [...methods].sort().join(", "));
+    return c.body(null, 204);
+  });
+  for (const route of serving.kernel.routes()) {
+    const path = route.path.replace(/:([a-z0-9-]+)/g, ":$1");
+    app.on(route.method, path, async (c) => {
+      const requestId = requestIds.get(c.req.raw) ?? "";
+      let caller;
+      try {
+        caller = await serving.identify?.(c);
+      } catch (cause) {
+        serving.log?.("warn", "identify threw", { requestId, error: cause instanceof Error ? cause.message : String(cause) });
+        return c.json({ code: "UNAUTHENTICATED", message: "This request needs to be signed in." }, 401);
+      }
+      let body;
+      if (CARRIES.has(route.method)) {
+        const claimed = Number(c.req.header("content-length") ?? "0");
+        if (Number.isFinite(claimed) && claimed > bodyBytes) {
+          return c.json({ code: "TOO_LARGE", message: "The request body is too large." }, 413);
+        }
+        const raw = new Uint8Array(await c.req.arrayBuffer());
+        if (raw.byteLength > bodyBytes) {
+          return c.json({ code: "TOO_LARGE", message: "The request body is too large." }, 413);
+        }
+        if (raw.byteLength > 0) {
+          try {
+            body = JSON.parse(new TextDecoder().decode(raw));
+          } catch {
+            return c.json({ code: "INVALID_JSON", message: "The request body is not valid JSON." }, 400);
+          }
+        }
+      }
+      const answer2 = await serving.kernel.handle({
+        method: route.method,
+        path: route.path,
+        input: input({ params: c.req.param(), query: c.req.queries(), body }),
+        caller,
+        headers: named(c, route.reads),
+        ...serving.from !== void 0 && { from: serving.from(c) }
+      });
+      if (answer2.status >= 500) {
+        serving.log?.("error", `${route.method} ${route.path} failed`, { requestId, plugin: route.plugin });
+      }
+      for (const [name, value] of Object.entries(answer2.headers ?? {})) {
+        c.header(name, value);
+      }
+      return c.json(answer2.body, answer2.status);
+    });
+  }
+  app.notFound((c) => {
+    return c.json({ code: "NOT_FOUND", message: "No such route." }, 404);
+  });
+  app.onError((cause, c) => {
+    serving.log?.("error", "the server threw outside a route", {
+      requestId: requestIds.get(c.req.raw) ?? "",
+      error: cause instanceof Error ? cause.message : String(cause),
+      ...cause instanceof Error && cause.stack !== void 0 && { stack: cause.stack }
+    });
+    return c.json({ code: "INTERNAL", message: "The request could not be completed." }, 500);
+  });
+  return app;
+}
+
+// src/plugins/outbound/internal/dial.ts
+var OutboundFault = class extends Error {
+  code;
+  status;
+  constructor(code, message, status, cause) {
+    super(message, cause === void 0 ? void 0 : { cause });
+    this.name = "OutboundFault";
+    this.code = code;
+    this.status = status;
+  }
+};
+function binary(body) {
+  return body instanceof Uint8Array || body instanceof ArrayBuffer || body instanceof Blob || body instanceof FormData || body instanceof URLSearchParams;
+}
+function sendable(body) {
+  return binary(body) ? body : JSON.stringify(body);
+}
+function dial(dialing = {}) {
+  const timeoutMs = dialing.timeoutMs ?? 1e4;
+  const maxBytes = dialing.maxBytes ?? 5e6;
+  return async (call) => {
+    const stopper = new AbortController();
+    const timer = setTimeout(() => stopper.abort(), timeoutMs);
+    const cancel = () => {
+      stopper.abort();
+    };
+    call.signal?.addEventListener("abort", cancel);
+    try {
+      const response = await fetch(call.url, {
+        method: call.method,
+        signal: stopper.signal,
+        // A redirect is how a permitted host hands a request to one
+        // that was never declared, so the whitelist has to hold here
+        // too: the kernel only saw the first url.
+        redirect: "error",
+        headers: {
+          accept: "application/json",
+          ...call.body !== void 0 && !binary(call.body) && { "content-type": "application/json" },
+          ...dialing.headers?.(),
+          ...call.headers
+        },
+        ...call.body !== void 0 && { body: sendable(call.body) }
+      });
+      const text = await read(response, maxBytes);
+      if (!response.ok) {
+        throw new OutboundFault("STATUS", `The call was refused with status ${response.status}.`, response.status);
+      }
+      if (text === "") {
+        return void 0;
+      }
+      try {
+        return JSON.parse(text);
+      } catch (cause) {
+        throw new OutboundFault("MALFORMED", "The answer was not valid JSON.", response.status, cause);
+      }
+    } catch (cause) {
+      throw shape(cause, call, stopper, timeoutMs);
+    } finally {
+      clearTimeout(timer);
+      call.signal?.removeEventListener("abort", cancel);
+    }
+  };
+}
+async function read(response, maxBytes) {
+  const reader = response.body?.getReader();
+  if (reader === void 0) {
+    return "";
+  }
+  const chunks = [];
+  let size = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) {
+      break;
+    }
+    size += value.length;
+    if (size > maxBytes) {
+      await reader.cancel();
+      throw new OutboundFault("TOO_LARGE", `The answer went past ${maxBytes} bytes.`);
+    }
+    chunks.push(value);
+  }
+  return new TextDecoder().decode(join(chunks, size));
+}
+function join(chunks, size) {
+  const whole = new Uint8Array(size);
+  let at = 0;
+  for (const chunk of chunks) {
+    whole.set(chunk, at);
+    at += chunk.length;
+  }
+  return whole;
+}
+function shape(cause, call, stopper, timeoutMs) {
+  if (cause instanceof OutboundFault) {
+    return cause;
+  }
+  if (call.signal?.aborted === true) {
+    return new OutboundFault("ABORTED", "The call was cancelled by the caller.", void 0, cause);
+  }
+  if (stopper.signal.aborted) {
+    return new OutboundFault("TIMEOUT", `The call did not answer within ${timeoutMs}ms.`, void 0, cause);
+  }
+  return new OutboundFault("NETWORK", "The call could not reach the host.", void 0, cause);
+}
+
+// src/plugins/mount/internal/discover.ts
+function discover(found) {
+  return Object.entries(found).map(([path, module]) => {
+    if (module.default === void 0) {
+      throw new Error(`${path} must default-export a definePlugin(...) result.`);
+    }
+    return module.default;
+  }).sort((first, second) => first.name.localeCompare(second.name));
+}
+
+// src/plugins/mount/internal/start.ts
+async function start(starting) {
+  const log = starting.log;
+  const given = starting.database;
+  const ready = typeof given.tx === "function";
+  const store = ready ? given : database({
+    ...given,
+    tables: Object.fromEntries(
+      starting.plugins.filter((plugin) => plugin.definition.tables !== void 0).map((plugin) => [plugin.name, plugin.definition.tables])
+    )
+  });
+  const migrations = starting.plugins.filter((plugin) => plugin.definition.migrations !== void 0).map((plugin) => ({ plugin: plugin.name, from: plugin.definition.migrations }));
+  if (typeof store.migrate !== "function" || typeof store.close !== "function") {
+    throw new TypeError(
+      "The store given to start() answers tx and of, but not migrate and close. start() owns the whole lifetime of a database, so it needs both: migrate before any plugin runs, close after every one has stopped. Add them, or build the kernel yourself with createKernel, which asks only for tx and of."
+    );
+  }
+  const ran = store.migrate(migrations);
+  if (ran.length > 0) {
+    log?.info("migrations applied", { count: ran.length, steps: ran.map((step) => `${step.plugin}/${step.name}`) });
+  }
+  const counting = starting.budget === void 0 ? limiter() : void 0;
+  const budget = starting.budget ?? counting ?? limiter();
+  const sweeping = counting === void 0 ? void 0 : setInterval(() => void counting.sweep(), 6e4);
+  sweeping?.unref?.();
+  const keeping = starting.outbox === true ? store.outbox?.() : void 0;
+  const later = starting.schedule === true ? store.schedule?.() : void 0;
+  const scoping = starting.plugins.some((plugin) => plugin.definition.scope !== void 0);
+  const kernel = createKernel({
+    plugins: starting.plugins,
+    db: store,
+    ...keeping !== void 0 && { outbox: keeping },
+    ...later !== void 0 && { schedule: later },
+    ...scoping && store.narrowing !== void 0 && { narrow: store.narrowing() },
+    budget,
+    dial: typeof starting.outbound === "function" ? starting.outbound : dial(starting.outbound ?? {}),
+    ...starting.config !== void 0 && { config: starting.config },
+    ...log !== void 0 && {
+      log: (level, plugin, line, about) => {
+        log[level](`${plugin}: ${line}`, about);
+      }
+    }
+  });
+  await kernel.start();
+  log?.info("kernel started", { plugins: starting.plugins.length, routes: kernel.routes().length });
+  const identify = starting.identify?.(kernel);
+  const app = serve({
+    kernel,
+    ...identify !== void 0 && { identify },
+    ...starting.http ?? {},
+    ...log !== void 0 && {
+      log: (level, line, about) => {
+        log[level](line, about);
+      }
+    }
+  });
+  return {
+    kernel,
+    store,
+    app,
+    fetch: app.fetch,
+    stop: async () => {
+      if (sweeping !== void 0) {
+        clearInterval(sweeping);
+      }
+      await kernel.stop();
+      store.close();
+    }
+  };
+}
+
+export { OutboundFault, always, dial, discover, identifier, serve, start };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/plugins/http/internal/headers.ts","../src/plugins/http/internal/origin.ts","../src/plugins/http/internal/input.ts","../src/plugins/http/internal/serve.ts","../src/plugins/outbound/internal/dial.ts","../src/plugins/mount/internal/discover.ts","../src/plugins/mount/internal/start.ts"],"names":["answer"],"mappings":";;;;;AAeO,IAAM,MAAA,GAA2C;AAAA,EACpD,wBAAA,EAA0B,SAAA;AAAA,EAC1B,iBAAA,EAAmB,MAAA;AAAA,EACnB,iBAAA,EAAmB,aAAA;AAAA,EACnB,eAAA,EAAiB,UAAA;AAAA,EACjB,yBAAA,EAA2B;AAC/B;;;ACAO,SAAS,IAAA,CAAK,UAAoB,MAAA,EACzC;AACI,EAAA,IAAI,WAAW,MAAA,IAAa,CAAC,SAAS,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,EAC7D;AACI,IAAA,OAAO,EAAE,MAAM,QAAA,EAAS;AAAA,EAC5B;AAEA,EAAA,OAAO;AAAA,IACH,6BAAA,EAA+B,MAAA;AAAA,IAC/B,kCAAA,EAAoC,MAAA;AAAA,IACpC,8BAAA,EAAgC,QAAA,CAAS,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AAAA,IAC1D,8BAAA,EAAgC,QAAA,CAAS,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AAAA,IAC1D,wBAAA,EAA0B,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AAAA,IAChD,IAAA,EAAM;AAAA,GACV;AACJ;;;AC7BA,IAAM,yBAA8B,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,aAAA,EAAe,WAAW,CAAC,CAAA;AAe9E,SAAS,MAAM,OAAA,EACtB;AACI,EAAA,MAAM,SAAkC,EAAC;AAEzC,EAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,IAAA,IAAQ,OAAO,OAAA,CAAQ,IAAA,KAAS,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA,EAC5F;AACI,IAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,IAA+B,CAAA,EACjF;AAII,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,EAClB;AACI,QAAA;AAAA,MACJ;AAEA,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAAA,IAClB;AAAA,EACJ;AAMA,EAAA,KAAA,MAAW,CAAC,KAAK,MAAM,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAA,EACxD;AACI,IAAA,IAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,EAClB;AACI,MAAA;AAAA,IACJ;AAEA,IAAA,MAAA,CAAO,GAAG,CAAA,GAAI,MAAA,CAAO,WAAW,CAAA,GAAI,MAAA,CAAO,CAAC,CAAA,GAAI,MAAA;AAAA,EACpD;AAEA,EAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA,EACxD;AACI,IAAA,IAAI,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA,EAClB;AACI,MAAA;AAAA,IACJ;AAEA,IAAA,MAAA,CAAO,GAAG,CAAA,GAAI,KAAA;AAAA,EAClB;AAEA,EAAA,OAAO,MAAA;AACX;;;AC1BA,IAAM,OAAA,uBAAmC,GAAA,CAAI,CAAC,QAAQ,KAAA,EAAO,OAAA,EAAS,QAAQ,CAAC,CAAA;AAKxE,SAAS,WAAW,IAAA,EAC3B;AACI,EAAA,OAAO,IAAA,KAAS,UAAa,uBAAA,CAAwB,IAAA,CAAK,IAAI,CAAA,GAAI,IAAA,GAAO,OAAO,UAAA,EAAW;AAC/F;AAUA,SAAS,KAAA,CAAM,GAAgB,KAAA,EAC/B;AACI,EAAA,MAAM,UAAkC,EAAC;AAEzC,EAAA,KAAA,MAAW,QAAQ,KAAA,EACnB;AACI,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA;AAE/B,IAAA,IAAI,UAAU,MAAA,EACd;AACI,MAAA,OAAA,CAAQ,IAAI,CAAA,GAAI,KAAA;AAAA,IACpB;AAAA,EACJ;AAEA,EAAA,OAAO,OAAA;AACX;AAGA,SAAS,QAAA,CAAS,WAA6C,IAAA,EAC/D;AACI,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAEjC,EAAA,IAAI,WAAW,MAAA,EACf;AACI,IAAA,OAAO,MAAA;AAAA,EACX;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAE5B,EAAA,KAAA,MAAW,CAAC,QAAA,EAAU,OAAO,CAAA,IAAK,SAAA,EAClC;AACI,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA;AAEhC,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,KAAA,CAAM,MAAA,EAC3B;AACI,MAAA;AAAA,IACJ;AAEA,IAAA,IAAI,KAAA,CAAM,KAAA,CAAM,CAAC,IAAA,EAAM,EAAA,KAAO,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,KAAS,KAAA,CAAM,EAAE,CAAC,CAAA,EACxE;AACI,MAAA,OAAO,OAAA;AAAA,IACX;AAAA,EACJ;AAEA,EAAA,OAAO,MAAA;AACX;AAEO,SAAS,MAAM,OAAA,EACtB;AACI,EAAA,MAAM,GAAA,GAAM,IAAI,IAAA,EAAK;AACrB,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,GAAA;AACvC,EAAA,MAAM,QAAA,GAAqB;AAAA,IACvB,OAAA,EAAS,OAAA,CAAQ,OAAA,IAAW,EAAC;AAAA,IAC7B,OAAA,EAAS,QAAQ,OAAA,IAAW,CAAC,OAAO,MAAA,EAAQ,KAAA,EAAO,SAAS,QAAQ,CAAA;AAAA,IACpE,OAAA,EAAS,OAAA,CAAQ,OAAA,IAAW,CAAC,gBAAgB,eAAe,CAAA;AAAA,IAC5D,MAAA,EAAQ,QAAQ,MAAA,IAAU;AAAA,GAC9B;AAEA,EAAA,MAAM,UAAA,uBAAiB,OAAA,EAAyB;AAEhD,EAAA,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,EAAG,IAAA,KACvB;AACI,IAAA,MAAM,YAAY,UAAA,CAAW,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,cAAc,CAAC,CAAA;AAEzD,IAAA,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,GAAA,EAAK,SAAS,CAAA;AAEnC,IAAA,MAAM,IAAA,EAAK;AAEX,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EACjD;AACI,MAAA,CAAA,CAAE,MAAA,CAAO,MAAM,KAAK,CAAA;AAAA,IACxB;AAEA,IAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,IAAA,CAAK,QAAA,EAAU,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,QAAQ,CAAC,CAAC,CAAA,EACjF;AAEI,MAAA,IAAI,IAAA,KAAS,8BAAA,IAAkC,CAAA,CAAE,GAAA,CAAI,MAAA,KAAW,SAAA,IAAa,CAAA,CAAE,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA,EACnG;AACI,QAAA;AAAA,MACJ;AAEA,MAAA,CAAA,CAAE,MAAA,CAAO,MAAM,KAAK,CAAA;AAAA,IACxB;AAEA,IAAA,CAAA,CAAE,MAAA,CAAO,gBAAgB,SAAS,CAAA;AAAA,EACtC,CAAC,CAAA;AAMD,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAyB;AAQ/C,EAAA,GAAA,CAAI,GAAA,CAAI,OAAA,EAAS,CAAC,CAAA,KAAM,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA;AAE9C,EAAA,GAAA,CAAI,GAAA,CAAI,QAAA,EAAU,CAAC,CAAA,KACnB;AACI,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAA,CAAO,OAAA,EAAQ;AAErC,IAAA,OAAO,EAAE,IAAA,CAAK,EAAE,OAAM,EAAG,KAAA,GAAQ,MAAM,GAAG,CAAA;AAAA,EAC9C,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,KAAA,IAAS,OAAA,CAAQ,MAAA,CAAO,MAAA,EAAO,EAC1C;AACI,IAAA,MAAM,UAAU,SAAA,CAAU,GAAA,CAAI,MAAM,IAAI,CAAA,wBAAS,GAAA,EAAY;AAE7D,IAAA,OAAA,CAAQ,GAAA,CAAI,MAAM,MAAM,CAAA;AACxB,IAAA,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,IAAA,EAAM,OAAO,CAAA;AAAA,EACrC;AAEA,EAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,EAAK,CAAC,CAAA,KAClB;AACI,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,SAAA,EAAW,CAAA,CAAE,IAAI,IAAI,CAAA;AAE9C,IAAA,IAAI,YAAY,MAAA,EAChB;AACI,MAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,aAAa,OAAA,EAAS,gBAAA,IAAoB,GAAG,CAAA;AAAA,IACvE;AAEA,IAAA,CAAA,CAAE,MAAA,CAAO,8BAAA,EAAgC,CAAC,GAAG,OAAO,EAAE,IAAA,EAAK,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAEvE,IAAA,OAAO,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,GAAG,CAAA;AAAA,EAC3B,CAAC,CAAA;AAED,EAAA,KAAA,MAAW,KAAA,IAAS,OAAA,CAAQ,MAAA,CAAO,MAAA,EAAO,EAC1C;AACI,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,kBAAkB,KAAK,CAAA;AAEvD,IAAA,GAAA,CAAI,EAAA,CAAG,KAAA,CAAM,MAAA,EAAQ,IAAA,EAAM,OAAO,CAAA,KAClC;AACI,MAAA,MAAM,YAAY,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,IAAK,EAAA;AAE/C,MAAA,IAAI,MAAA;AAEJ,MAAA,IACA;AACI,QAAA,MAAA,GAAS,MAAM,OAAA,CAAQ,QAAA,GAAW,CAAC,CAAA;AAAA,MACvC,SACO,KAAA,EACP;AAII,QAAA,OAAA,CAAQ,GAAA,GAAM,MAAA,EAAQ,gBAAA,EAAkB,EAAE,SAAA,EAAW,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,GAAG,CAAA;AAEpH,QAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,mBAAmB,OAAA,EAAS,qCAAA,IAAyC,GAAG,CAAA;AAAA,MAClG;AAEA,MAAA,IAAI,IAAA;AAEJ,MAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,MAAM,CAAA,EAC5B;AACI,QAAA,MAAM,UAAU,MAAA,CAAO,CAAA,CAAE,IAAI,MAAA,CAAO,gBAAgB,KAAK,GAAG,CAAA;AAE5D,QAAA,IAAI,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,IAAK,UAAU,SAAA,EAC1C;AACI,UAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,aAAa,OAAA,EAAS,gCAAA,IAAoC,GAAG,CAAA;AAAA,QACvF;AAOA,QAAA,MAAM,MAAM,IAAI,UAAA,CAAW,MAAM,CAAA,CAAE,GAAA,CAAI,aAAa,CAAA;AAEpD,QAAA,IAAI,GAAA,CAAI,aAAa,SAAA,EACrB;AACI,UAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,aAAa,OAAA,EAAS,gCAAA,IAAoC,GAAG,CAAA;AAAA,QACvF;AAEA,QAAA,IAAI,GAAA,CAAI,aAAa,CAAA,EACrB;AACI,UAAA,IACA;AACI,YAAA,IAAA,GAAO,KAAK,KAAA,CAAM,IAAI,aAAY,CAAE,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,UACnD,CAAA,CAAA,MAEA;AACI,YAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,gBAAgB,OAAA,EAAS,qCAAA,IAAyC,GAAG,CAAA;AAAA,UAC/F;AAAA,QACJ;AAAA,MACJ;AAEA,MAAA,MAAMA,OAAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO;AAAA,QACvC,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,KAAA,EAAO,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,GAAA,CAAI,KAAA,EAAM,EAAG,KAAA,EAAO,CAAA,CAAE,GAAA,CAAI,OAAA,EAAQ,EAA+B,MAAM,CAAA;AAAA,QAChG,MAAA;AAAA,QACA,OAAA,EAAS,KAAA,CAAM,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA;AAAA,QAC7B,GAAI,QAAQ,IAAA,KAAS,MAAA,IAAa,EAAE,IAAA,EAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AAAE,OAC7D,CAAA;AAED,MAAA,IAAIA,OAAAA,CAAO,UAAU,GAAA,EACrB;AACI,QAAA,OAAA,CAAQ,GAAA,GAAM,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,OAAA,CAAA,EAAW,EAAE,SAAA,EAAW,MAAA,EAAQ,KAAA,CAAM,QAAQ,CAAA;AAAA,MACtG;AAEA,MAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,CAAA,IAAK,MAAA,CAAO,QAAQA,OAAAA,CAAO,OAAA,IAAW,EAAE,CAAA,EAC/D;AACI,QAAA,CAAA,CAAE,MAAA,CAAO,MAAM,KAAK,CAAA;AAAA,MACxB;AAEA,MAAA,OAAO,CAAA,CAAE,IAAA,CAAKA,OAAAA,CAAO,IAAA,EAAiCA,QAAO,MAAa,CAAA;AAAA,IAC9E,CAAC,CAAA;AAAA,EACL;AAEA,EAAA,GAAA,CAAI,QAAA,CAAS,CAAC,CAAA,KACd;AACI,IAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,aAAa,OAAA,EAAS,gBAAA,IAAoB,GAAG,CAAA;AAAA,EACvE,CAAC,CAAA;AAED,EAAA,GAAA,CAAI,OAAA,CAAQ,CAAC,KAAA,EAAO,CAAA,KACpB;AACI,IAAA,OAAA,CAAQ,GAAA,GAAM,SAAS,kCAAA,EAAoC;AAAA,MACvD,WAAW,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,IAAK,EAAA;AAAA,MACxC,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAAA,MAC5D,GAAI,iBAAiB,KAAA,IAAS,KAAA,CAAM,UAAU,MAAA,IAAa,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA;AAAM,KACnF,CAAA;AAED,IAAA,OAAO,CAAA,CAAE,KAAK,EAAE,IAAA,EAAM,YAAY,OAAA,EAAS,qCAAA,IAAyC,GAAG,CAAA;AAAA,EAC3F,CAAC,CAAA;AAED,EAAA,OAAO,GAAA;AACX;;;ACzRO,IAAM,aAAA,GAAN,cAA4B,KAAA,CACnC;AAAA,EACa,IAAA;AAAA,EAEA,MAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAA6B,OAAA,EAAiB,MAAA,EAAiB,KAAA,EAC3E;AACI,IAAA,KAAA,CAAM,SAAS,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,EAAE,OAAO,CAAA;AAE1D,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAClB;AACJ;AASA,SAAS,OAAO,IAAA,EAChB;AACI,EAAA,OAAO,IAAA,YAAgB,cAChB,IAAA,YAAgB,WAAA,IAChB,gBAAgB,IAAA,IAChB,IAAA,YAAgB,YAChB,IAAA,YAAgB,eAAA;AAC3B;AAGA,SAAS,SAAS,IAAA,EAClB;AACI,EAAA,OAAO,OAAO,IAAI,CAAA,GAAI,IAAA,GAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AACpD;AAIO,SAAS,IAAA,CAAK,OAAA,GAAmB,EAAC,EACzC;AACI,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,GAAA;AACvC,EAAA,MAAM,QAAA,GAAW,QAAQ,QAAA,IAAY,GAAA;AAErC,EAAA,OAAO,OAAO,IAAA,KACd;AACI,IAAA,MAAM,OAAA,GAAU,IAAI,eAAA,EAAgB;AACpC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,OAAA,CAAQ,KAAA,IAAS,SAAS,CAAA;AACzD,IAAA,MAAM,SAAS,MACf;AACI,MAAA,OAAA,CAAQ,KAAA,EAAM;AAAA,IAClB,CAAA;AAEA,IAAA,IAAA,CAAK,MAAA,EAAQ,gBAAA,CAAiB,OAAA,EAAS,MAAM,CAAA;AAE7C,IAAA,IACA;AACI,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,EAAK;AAAA,QACnC,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,QAAQ,OAAA,CAAQ,MAAA;AAAA;AAAA;AAAA;AAAA,QAKhB,QAAA,EAAU,OAAA;AAAA,QAEV,OAAA,EAAS;AAAA,UACL,MAAA,EAAQ,kBAAA;AAAA,UACR,GAAI,IAAA,CAAK,IAAA,KAAS,KAAA,CAAA,IAAa,CAAC,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,IAAK,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,UAC1F,GAAG,QAAQ,OAAA,IAAU;AAAA,UACrB,GAAG,IAAA,CAAK;AAAA,SACZ;AAAA,QACA,GAAI,KAAK,IAAA,KAAS,KAAA,CAAA,IAAa,EAAE,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA;AAAE,OAC9D,CAAA;AAED,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,QAAA,EAAU,QAAQ,CAAA;AAE1C,MAAA,IAAI,CAAC,SAAS,EAAA,EACd;AACI,QAAA,MAAM,IAAI,cAAc,QAAA,EAAU,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,CAAA,CAAA,EAAK,SAAS,MAAM,CAAA;AAAA,MAC7G;AAEA,MAAA,IAAI,SAAS,EAAA,EACb;AACI,QAAA,OAAO,KAAA,CAAA;AAAA,MACX;AAEA,MAAA,IACA;AACI,QAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,MAC1B,SACO,KAAA,EACP;AACI,QAAA,MAAM,IAAI,aAAA,CAAc,WAAA,EAAa,gCAAA,EAAkC,QAAA,CAAS,QAAQ,KAAK,CAAA;AAAA,MACjG;AAAA,IACJ,SACO,KAAA,EACP;AACI,MAAA,MAAM,KAAA,CAAM,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS,SAAS,CAAA;AAAA,IAC/C,CAAA,SACA;AAEI,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,IAAA,CAAK,MAAA,EAAQ,mBAAA,CAAoB,OAAA,EAAS,MAAM,CAAA;AAAA,IACpD;AAAA,EACJ,CAAA;AACJ;AAKA,eAAe,IAAA,CAAK,UAAoB,QAAA,EACxC;AACI,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,EAAM,SAAA,EAAU;AAExC,EAAA,IAAI,WAAW,MAAA,EACf;AACI,IAAA,OAAO,EAAA;AAAA,EACX;AAEA,EAAA,MAAM,SAAuB,EAAC;AAE9B,EAAA,IAAI,IAAA,GAAO,CAAA;AAEX,EAAA,WACA;AACI,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAE1C,IAAA,IAAI,IAAA,EACJ;AACI,MAAA;AAAA,IACJ;AAEA,IAAA,IAAA,IAAQ,KAAA,CAAM,MAAA;AAEd,IAAA,IAAI,OAAO,QAAA,EACX;AACI,MAAA,MAAM,OAAO,MAAA,EAAO;AAEpB,MAAA,MAAM,IAAI,aAAA,CAAc,WAAA,EAAa,CAAA,qBAAA,EAAwB,QAAQ,CAAA,OAAA,CAAS,CAAA;AAAA,IAClF;AAEA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACrB;AAEA,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,OAAO,IAAA,CAAK,MAAA,EAAQ,IAAI,CAAC,CAAA;AACtD;AAEA,SAAS,IAAA,CAAK,QAA+B,IAAA,EAC7C;AACI,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,IAAI,CAAA;AAEjC,EAAA,IAAI,EAAA,GAAK,CAAA;AAET,EAAA,KAAA,MAAW,SAAS,MAAA,EACpB;AACI,IAAA,KAAA,CAAM,GAAA,CAAI,OAAO,EAAE,CAAA;AACnB,IAAA,EAAA,IAAM,KAAA,CAAM,MAAA;AAAA,EAChB;AAEA,EAAA,OAAO,KAAA;AACX;AAIA,SAAS,KAAA,CAAM,KAAA,EAAgB,IAAA,EAAgB,OAAA,EAA0B,SAAA,EACzE;AACI,EAAA,IAAI,iBAAiB,aAAA,EACrB;AACI,IAAA,OAAO,KAAA;AAAA,EACX;AAEA,EAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,OAAA,KAAY,IAAA,EAC7B;AACI,IAAA,OAAO,IAAI,aAAA,CAAc,SAAA,EAAW,uCAAA,EAAyC,QAAW,KAAK,CAAA;AAAA,EACjG;AAEA,EAAA,IAAI,OAAA,CAAQ,OAAO,OAAA,EACnB;AACI,IAAA,OAAO,IAAI,aAAA,CAAc,SAAA,EAAW,kCAAkC,SAAS,CAAA,GAAA,CAAA,EAAO,QAAW,KAAK,CAAA;AAAA,EAC1G;AAEA,EAAA,OAAO,IAAI,aAAA,CAAc,SAAA,EAAW,oCAAA,EAAsC,QAAW,KAAK,CAAA;AAC9F;;;ACzLO,SAAS,SAAS,KAAA,EACzB;AACI,EAAA,OAAO,MAAA,CAAO,QAAQ,KAAK,CAAA,CACtB,IAAI,CAAC,CAAC,IAAA,EAAM,MAAM,CAAA,KACnB;AACI,IAAA,IAAI,MAAA,CAAO,YAAY,MAAA,EACvB;AACI,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,gDAAA,CAAkD,CAAA;AAAA,IAC7E;AAEA,IAAA,OAAO,MAAA,CAAO,OAAA;AAAA,EAClB,CAAC,CAAA,CACA,IAAA,CAAK,CAAC,KAAA,EAAO,MAAA,KAAW,KAAA,CAAM,IAAA,CAAK,aAAA,CAAc,MAAA,CAAO,IAAI,CAAC,CAAA;AACtE;;;ACTA,eAAsB,MAAM,QAAA,EAC5B;AACI,EAAA,MAAM,MAAM,QAAA,CAAS,GAAA;AAKrB,EAAA,MAAM,QAAQ,QAAA,CAAS,QAAA;AACvB,EAAA,MAAM,KAAA,GAAQ,OAAQ,KAAA,CAA2B,EAAA,KAAO,UAAA;AAExD,EAAA,MAAM,KAAA,GAAQ,KAAA,GACR,KAAA,GACA,QAAA,CAAS;AAAA,IACP,GAAG,KAAA;AAAA,IACH,QAAQ,MAAA,CAAO,WAAA;AAAA,MACX,SAAS,OAAA,CACJ,MAAA,CAAO,CAAC,MAAA,KAAW,MAAA,CAAO,WAAW,MAAA,KAAW,MAAS,EACzD,GAAA,CAAI,CAAC,WAAW,CAAC,MAAA,CAAO,MAAM,MAAA,CAAO,UAAA,CAAW,MAA2C,CAAC;AAAA;AACrG,GACH,CAAA;AAEL,EAAA,MAAM,UAAA,GAAa,SAAS,OAAA,CACvB,MAAA,CAAO,CAAC,MAAA,KAAW,MAAA,CAAO,UAAA,CAAW,UAAA,KAAe,MAAS,CAAA,CAC7D,IAAI,CAAC,MAAA,MAAY,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAM,IAAA,EAAM,MAAA,CAAO,UAAA,CAAW,UAAA,EAAqB,CAAE,CAAA;AAE5F,EAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,cAAc,OAAO,KAAA,CAAM,UAAU,UAAA,EAClE;AACI,IAAA,MAAM,IAAI,SAAA;AAAA,MACN;AAAA,KACJ;AAAA,EACJ;AAEA,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA;AAEpC,EAAA,IAAI,GAAA,CAAI,SAAS,CAAA,EACjB;AACI,IAAA,GAAA,EAAK,KAAK,oBAAA,EAAsB,EAAE,OAAO,GAAA,CAAI,MAAA,EAAQ,OAAO,GAAA,CAAI,GAAA,CAAI,CAAC,IAAA,KAAS,CAAA,EAAG,KAAK,MAAM,CAAA,CAAA,EAAI,KAAK,IAAI,CAAA,CAAE,GAAG,CAAA;AAAA,EAClH;AAOA,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,MAAA,KAAW,MAAA,GAAY,SAAQ,GAAI,MAAA;AAC7D,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,MAAA,IAAU,QAAA,IAAY,OAAA,EAAQ;AAEtD,EAAA,MAAM,QAAA,GAAW,QAAA,KAAa,MAAA,GAAY,MAAA,GAAY,WAAA,CAAY,MAAM,KAAK,QAAA,CAAS,KAAA,EAAM,EAAG,GAAM,CAAA;AAErG,EAAA,QAAA,EAAU,KAAA,IAAQ;AAIlB,EAAA,MAAM,UAAU,QAAA,CAAS,MAAA,KAAW,IAAA,GAAO,KAAA,CAAM,UAAS,GAAI,MAAA;AAC9D,EAAA,MAAM,QAAQ,QAAA,CAAS,QAAA,KAAa,IAAA,GAAO,KAAA,CAAM,YAAW,GAAI,MAAA;AAKhE,EAAA,MAAM,OAAA,GAAU,SAAS,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,UAAA,CAAW,KAAA,KAAU,MAAS,CAAA;AAEvF,EAAA,MAAM,SAAS,YAAA,CAAa;AAAA,IACxB,SAAS,QAAA,CAAS,OAAA;AAAA,IAClB,EAAA,EAAI,KAAA;AAAA,IACJ,GAAI,OAAA,KAAY,MAAA,IAAa,EAAE,QAAQ,OAAA,EAAQ;AAAA,IAC/C,GAAI,KAAA,KAAU,MAAA,IAAa,EAAE,UAAU,KAAA,EAAM;AAAA,IAC7C,GAAI,WAAW,KAAA,CAAM,SAAA,KAAc,UAAa,EAAE,MAAA,EAAQ,KAAA,CAAM,SAAA,EAAU,EAAE;AAAA,IAC5E,MAAA;AAAA,IACA,IAAA,EAAM,OAAO,QAAA,CAAS,QAAA,KAAa,UAAA,GAAa,QAAA,CAAS,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,QAAA,IAAY,EAAE,CAAA;AAAA,IAChG,GAAI,QAAA,CAAS,MAAA,KAAW,UAAa,EAAE,MAAA,EAAQ,SAAS,MAAA,EAAO;AAAA,IAC/D,GAAI,QAAQ,MAAA,IAAa;AAAA,MACrB,GAAA,EAAK,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAM,KAAA,KAC3B;AACI,QAAA,GAAA,CAAI,KAAK,CAAA,CAAE,CAAA,EAAG,MAAM,CAAA,EAAA,EAAK,IAAI,IAAI,KAAK,CAAA;AAAA,MAC1C;AAAA;AACJ,GACH,CAAA;AAED,EAAA,MAAM,OAAO,KAAA,EAAM;AAEnB,EAAA,GAAA,EAAK,IAAA,CAAK,gBAAA,EAAkB,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAO,CAAE,MAAA,EAAQ,CAAA;AAIhG,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,QAAA,GAAW,MAAM,CAAA;AAE3C,EAAA,MAAM,MAAM,KAAA,CAAM;AAAA,IACd,MAAA;AAAA,IACA,GAAI,QAAA,KAAa,MAAA,IAAa,EAAE,QAAA,EAAS;AAAA,IACzC,GAAI,QAAA,CAAS,IAAA,IAAQ,EAAC;AAAA,IACtB,GAAI,QAAQ,MAAA,IAAa;AAAA,MACrB,GAAA,EAAK,CAAC,KAAA,EAAO,IAAA,EAAM,KAAA,KACnB;AACI,QAAA,GAAA,CAAI,KAAK,CAAA,CAAE,IAAA,EAAM,KAAK,CAAA;AAAA,MAC1B;AAAA;AACJ,GACH,CAAA;AAED,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,KAAA;AAAA,IACA,GAAA;AAAA,IACA,OAAO,GAAA,CAAI,KAAA;AAAA,IAEX,MAAM,YACN;AACI,MAAA,IAAI,aAAa,MAAA,EACjB;AACI,QAAA,aAAA,CAAc,QAAQ,CAAA;AAAA,MAC1B;AAEA,MAAA,MAAM,OAAO,IAAA,EAAK;AAClB,MAAA,KAAA,CAAM,KAAA,EAAM;AAAA,IAChB;AAAA,GACJ;AACJ","file":"index.js","sourcesContent":["/**\n * What every response carries, whatever it answers.\n *\n * An API serves data, not documents, so these are the ones that still mean\n * something: the browser protections that matter for a page are set by\n * whatever serves the page.\n *\n * - nosniff stops a browser guessing a content type it was already told.\n * - DENY in frame-options and frame-ancestors 'none' keeps an error page out\n *   of someone else's iframe.\n * - no-store keeps an authenticated answer out of a shared cache. An API\n *   response is per-caller, and a cache that kept one would hand it to the\n *   next.\n * - no-referrer keeps a path with an id in it from reaching another origin.\n */\nexport const always: Readonly<Record<string, string>> = {\n    \"x-content-type-options\": \"nosniff\",\n    \"x-frame-options\": \"DENY\",\n    \"referrer-policy\": \"no-referrer\",\n    \"cache-control\": \"no-store\",\n    \"content-security-policy\": \"default-src 'none'; frame-ancestors 'none'\",\n};\n","/**\n * Which cross-origin callers are answered, and what they are allowed.\n *\n * A whitelist rather than a reflection: echoing back whatever Origin arrived,\n * which is what `*` with credentials amounts to, is every site the caller has\n * open being allowed to spend their session.\n */\nexport type Allowing = {\n    origins: readonly string[];\n    methods: readonly string[];\n    headers: readonly string[];\n    maxAge: number;\n};\n\n/**\n * The CORS headers for one request.\n *\n * `vary` is set whether or not the origin is allowed: the answer differs by\n * Origin either way, and a cache keyed without it would hand one site's\n * allowance to another.\n */\nexport function cors(allowing: Allowing, origin: string | undefined): Readonly<Record<string, string>>\n{\n    if (origin === undefined || !allowing.origins.includes(origin))\n    {\n        return { vary: \"Origin\" };\n    }\n\n    return {\n        \"access-control-allow-origin\": origin,\n        \"access-control-allow-credentials\": \"true\",\n        \"access-control-allow-methods\": allowing.methods.join(\", \"),\n        \"access-control-allow-headers\": allowing.headers.join(\", \"),\n        \"access-control-max-age\": String(allowing.maxAge),\n        vary: \"Origin\",\n    };\n}\n","/** What one request carries, before any schema has looked at it. */\nexport type Carried = {\n    params: Readonly<Record<string, string>>;\n    query: Readonly<Record<string, string[]>>;\n    body: unknown;\n};\n\nconst UNSAFE: ReadonlySet<string> = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\n/**\n * One object for a route's input schema to judge.\n *\n * Path parameters win over query, and query over body, because a path\n * parameter is the one part of a request a router already matched: a body\n * claiming a different `id` than the path it was sent to is either confused\n * or deliberate, and either way the path is the request.\n *\n * Nothing is coerced here. A schema saying a page is a number is the thing\n * that turns \"2\" into 2, and it is the only thing that should: a converter\n * ahead of the schema decides what \"0x10\" or \"\" mean before the schema that\n * owns the field gets a say.\n */\nexport function input(carried: Carried): Record<string, unknown>\n{\n    const merged: Record<string, unknown> = {};\n\n    if (carried.body !== null && typeof carried.body === \"object\" && !Array.isArray(carried.body))\n    {\n        for (const [key, value] of Object.entries(carried.body as Record<string, unknown>))\n        {\n            // Prototype pollution: a body naming __proto__ reaches\n            // Object.prototype through a plain assignment, and every object\n            // in the process changes shape.\n            if (UNSAFE.has(key))\n            {\n                continue;\n            }\n\n            merged[key] = value;\n        }\n    }\n\n    // A query parameter arrives as a list, because a caller may repeat it.\n    // One value is handed over as that value: a schema saying `z.string()`\n    // could otherwise never match `?q=hello`, which made every query\n    // parameter unusable unless its schema expected an array.\n    for (const [key, values] of Object.entries(carried.query))\n    {\n        if (UNSAFE.has(key))\n        {\n            continue;\n        }\n\n        merged[key] = values.length === 1 ? values[0] : values;\n    }\n\n    for (const [key, value] of Object.entries(carried.params))\n    {\n        if (UNSAFE.has(key))\n        {\n            continue;\n        }\n\n        merged[key] = value;\n    }\n\n    return merged;\n}\n","import { Hono } from \"hono\";\nimport type { Context as HonoContext } from \"hono\";\n\nimport type { Caller, Kernel, Method } from \"../../kernel/api\";\nimport { always } from \"./headers\";\nimport { cors, type Allowing } from \"./origin\";\nimport { input } from \"./input\";\n\n/** What serving needs to know. */\nexport type Serving = {\n    kernel: Kernel;\n\n    /**\n     * Who is calling. The project owns this entirely: a cookie, a bearer\n     * token, a header, whatever it decided a session is.\n     *\n     * Throwing answers 401. Returning undefined is an anonymous caller, which\n     * only a public route accepts.\n     */\n    identify?: ((c: HonoContext) => Caller | undefined | Promise<Caller | undefined>) | undefined;\n\n    /**\n     * What to count an anonymous caller by, for a rate limit: an address, an\n     * api key, whatever the deployment can trust. Reading a forwarded header\n     * blindly lets anyone spend anyone's budget, so the project decides.\n     */\n    from?: ((c: HonoContext) => string) | undefined;\n\n    origins?: readonly string[];\n    methods?: readonly string[];\n    headers?: readonly string[];\n    maxAge?: number;\n\n    /** The largest body accepted, before it is parsed. */\n    bodyBytes?: number;\n\n    /** Where a line goes. */\n    log?: ((level: \"info\" | \"warn\" | \"error\", line: string, about?: Readonly<Record<string, unknown>>) => void) | undefined;\n};\n\n/** Which methods a caller may send a body with, and we will read one from. */\nconst CARRIES: ReadonlySet<string> = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n// Kept only when it is safe to write down: an id carrying a newline is how\n// one request writes a second line into the log and calls it whatever it\n// likes.\nexport function identifier(sent: string | undefined): string\n{\n    return sent !== undefined && /^[A-Za-z0-9_-]{1,64}$/.test(sent) ? sent : crypto.randomUUID();\n}\n\n/**\n * Builds the Hono app the kernel's routes are mounted on.\n *\n * Everything crossing into the process crosses here, which is why the limits\n * live here: a plugin that had to remember to bound a body is one that will\n * forget once.\n */\n/** The headers a route declared, read off the request in lowercase. */\nfunction named(c: HonoContext, reads: readonly string[]): Readonly<Record<string, string>>\n{\n    const reading: Record<string, string> = {};\n\n    for (const name of reads)\n    {\n        const value = c.req.header(name);\n\n        if (value !== undefined)\n        {\n            reading[name] = value;\n        }\n    }\n\n    return reading;\n}\n\n/** Which methods a declared path answers, matching `:param` segments. */\nfunction matching(answering: ReadonlyMap<string, Set<string>>, path: string): Set<string> | undefined\n{\n    const direct = answering.get(path);\n\n    if (direct !== undefined)\n    {\n        return direct;\n    }\n\n    const asked = path.split(\"/\");\n\n    for (const [declared, methods] of answering)\n    {\n        const parts = declared.split(\"/\");\n\n        if (parts.length !== asked.length)\n        {\n            continue;\n        }\n\n        if (parts.every((part, at) => part.startsWith(\":\") || part === asked[at]))\n        {\n            return methods;\n        }\n    }\n\n    return undefined;\n}\n\nexport function serve(serving: Serving): Hono\n{\n    const app = new Hono();\n    const bodyBytes = serving.bodyBytes ?? 1_000_000;\n    const allowing: Allowing = {\n        origins: serving.origins ?? [],\n        methods: serving.methods ?? [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"],\n        headers: serving.headers ?? [\"content-type\", \"authorization\"],\n        maxAge: serving.maxAge ?? 600,\n    };\n\n    const requestIds = new WeakMap<Request, string>();\n\n    app.use(\"*\", async (c, next) =>\n    {\n        const requestId = identifier(c.req.header(\"x-request-id\"));\n\n        requestIds.set(c.req.raw, requestId);\n\n        await next();\n\n        for (const [name, value] of Object.entries(always))\n        {\n            c.header(name, value);\n        }\n\n        for (const [name, value] of Object.entries(cors(allowing, c.req.header(\"origin\"))))\n        {\n            // A preflight already said which methods its own path answers.\n            if (name === \"access-control-allow-methods\" && c.req.method === \"OPTIONS\" && c.res.headers.has(name))\n            {\n                continue;\n            }\n\n            c.header(name, value);\n        }\n\n        c.header(\"x-request-id\", requestId);\n    });\n\n    // A preflight is answered only for a path some route declared, and only\n    // for the methods that path actually answers: approving one for a route\n    // that does not exist tells a browser it may send what nothing will take,\n    // and maps out the surface for anyone asking.\n    const answering = new Map<string, Set<string>>();\n\n    // Two questions a deployment asks, and they are not the same one. Live\n    // says the process is up, which is what decides a restart. Ready says the\n    // kernel started, its migrations ran and its plugins are up, which is\n    // what decides whether traffic may arrive. A process that answers live\n    // but not ready is one that should be left alone to finish starting,\n    // never killed and never sent a request.\n    app.get(\"/live\", (c) => c.json({ live: true }));\n\n    app.get(\"/ready\", (c) =>\n    {\n        const ready = serving.kernel.started();\n\n        return c.json({ ready }, ready ? 200 : 503);\n    });\n\n    for (const route of serving.kernel.routes())\n    {\n        const methods = answering.get(route.path) ?? new Set<string>();\n\n        methods.add(route.method);\n        answering.set(route.path, methods);\n    }\n\n    app.options(\"*\", (c) =>\n    {\n        const methods = matching(answering, c.req.path);\n\n        if (methods === undefined)\n        {\n            return c.json({ code: \"NOT_FOUND\", message: \"No such route.\" }, 404);\n        }\n\n        c.header(\"access-control-allow-methods\", [...methods].sort().join(\", \"));\n\n        return c.body(null, 204);\n    });\n\n    for (const route of serving.kernel.routes())\n    {\n        const path = route.path.replace(/:([a-z0-9-]+)/g, \":$1\");\n\n        app.on(route.method, path, async (c) =>\n        {\n            const requestId = requestIds.get(c.req.raw) ?? \"\";\n\n            let caller: Caller | undefined;\n\n            try\n            {\n                caller = await serving.identify?.(c);\n            }\n            catch (cause)\n            {\n                // Whatever went wrong reading a session, the caller is not\n                // signed in. A 500 here would turn an expired token into an\n                // outage, and tell whoever sent it that it was interesting.\n                serving.log?.(\"warn\", \"identify threw\", { requestId, error: cause instanceof Error ? cause.message : String(cause) });\n\n                return c.json({ code: \"UNAUTHENTICATED\", message: \"This request needs to be signed in.\" }, 401);\n            }\n\n            let body: unknown;\n\n            if (CARRIES.has(route.method))\n            {\n                const claimed = Number(c.req.header(\"content-length\") ?? \"0\");\n\n                if (Number.isFinite(claimed) && claimed > bodyBytes)\n                {\n                    return c.json({ code: \"TOO_LARGE\", message: \"The request body is too large.\" }, 413);\n                }\n\n                // Read as bytes, and counted as bytes. `content-length` is\n                // what the caller claimed and a chunked request sends none;\n                // measuring the decoded string instead counts UTF-16 units,\n                // so a body of Japanese passes a limit three times smaller\n                // than what actually arrived.\n                const raw = new Uint8Array(await c.req.arrayBuffer());\n\n                if (raw.byteLength > bodyBytes)\n                {\n                    return c.json({ code: \"TOO_LARGE\", message: \"The request body is too large.\" }, 413);\n                }\n\n                if (raw.byteLength > 0)\n                {\n                    try\n                    {\n                        body = JSON.parse(new TextDecoder().decode(raw));\n                    }\n                    catch\n                    {\n                        return c.json({ code: \"INVALID_JSON\", message: \"The request body is not valid JSON.\" }, 400);\n                    }\n                }\n            }\n\n            const answer = await serving.kernel.handle({\n                method: route.method as Method,\n                path: route.path,\n                input: input({ params: c.req.param(), query: c.req.queries() as Record<string, string[]>, body }),\n                caller,\n                headers: named(c, route.reads),\n                ...(serving.from !== undefined && { from: serving.from(c) }),\n            });\n\n            if (answer.status >= 500)\n            {\n                serving.log?.(\"error\", `${route.method} ${route.path} failed`, { requestId, plugin: route.plugin });\n            }\n\n            for (const [name, value] of Object.entries(answer.headers ?? {}))\n            {\n                c.header(name, value);\n            }\n\n            return c.json(answer.body as Record<string, unknown>, answer.status as 200);\n        });\n    }\n\n    app.notFound((c) =>\n    {\n        return c.json({ code: \"NOT_FOUND\", message: \"No such route.\" }, 404);\n    });\n\n    app.onError((cause, c) =>\n    {\n        serving.log?.(\"error\", \"the server threw outside a route\", {\n            requestId: requestIds.get(c.req.raw) ?? \"\",\n            error: cause instanceof Error ? cause.message : String(cause),\n            ...(cause instanceof Error && cause.stack !== undefined && { stack: cause.stack }),\n        });\n\n        return c.json({ code: \"INTERNAL\", message: \"The request could not be completed.\" }, 500);\n    });\n\n    return app;\n}\n","import type { Outbound } from \"../../kernel/api\";\n\nexport type Dialing = {\n    timeoutMs?: number;\n    maxBytes?: number;\n    headers?: (() => Readonly<Record<string, string>>) | undefined;\n};\n\nexport class OutboundFault extends Error\n{\n    readonly code: \"TIMEOUT\" | \"ABORTED\" | \"NETWORK\" | \"TOO_LARGE\" | \"MALFORMED\" | \"STATUS\";\n\n    readonly status: number | undefined;\n\n    constructor(code: OutboundFault[\"code\"], message: string, status?: number, cause?: unknown)\n    {\n        super(message, cause === undefined ? undefined : { cause });\n\n        this.name = \"OutboundFault\";\n        this.code = code;\n        this.status = status;\n    }\n}\n\n/**\n * Whether a body is already bytes.\n *\n * JSON.stringify turns a Uint8Array into {\"0\":1,\"1\":2}, which is neither what\n * the caller wrote nor anything a binary protocol accepts, and it does it\n * silently. A protobuf frame reaches the wire as a frame.\n */\nfunction binary(body: unknown): body is Uint8Array | ArrayBuffer | Blob | FormData | URLSearchParams\n{\n    return body instanceof Uint8Array\n        || body instanceof ArrayBuffer\n        || body instanceof Blob\n        || body instanceof FormData\n        || body instanceof URLSearchParams;\n}\n\n/** What goes on the wire: bytes as they are, everything else as JSON. */\nfunction sendable(body: unknown): Uint8Array | ArrayBuffer | Blob | FormData | URLSearchParams | string\n{\n    return binary(body) ? body : JSON.stringify(body);\n}\n\n// The kernel checks the host against what the plugin declared; this only\n// carries the call out, and bounds what comes back.\nexport function dial(dialing: Dialing = {})\n{\n    const timeoutMs = dialing.timeoutMs ?? 10_000;\n    const maxBytes = dialing.maxBytes ?? 5_000_000;\n\n    return async (call: Outbound): Promise<unknown> =>\n    {\n        const stopper = new AbortController();\n        const timer = setTimeout(() => stopper.abort(), timeoutMs);\n        const cancel = (): void =>\n        {\n            stopper.abort();\n        };\n\n        call.signal?.addEventListener(\"abort\", cancel);\n\n        try\n        {\n            const response = await fetch(call.url, {\n                method: call.method,\n                signal: stopper.signal,\n\n                // A redirect is how a permitted host hands a request to one\n                // that was never declared, so the whitelist has to hold here\n                // too: the kernel only saw the first url.\n                redirect: \"error\",\n\n                headers: {\n                    accept: \"application/json\",\n                    ...(call.body !== undefined && !binary(call.body) && { \"content-type\": \"application/json\" }),\n                    ...dialing.headers?.(),\n                    ...call.headers,\n                },\n                ...(call.body !== undefined && { body: sendable(call.body) }),\n            });\n\n            const text = await read(response, maxBytes);\n\n            if (!response.ok)\n            {\n                throw new OutboundFault(\"STATUS\", `The call was refused with status ${response.status}.`, response.status);\n            }\n\n            if (text === \"\")\n            {\n                return undefined;\n            }\n\n            try\n            {\n                return JSON.parse(text);\n            }\n            catch (cause)\n            {\n                throw new OutboundFault(\"MALFORMED\", \"The answer was not valid JSON.\", response.status, cause);\n            }\n        }\n        catch (cause)\n        {\n            throw shape(cause, call, stopper, timeoutMs);\n        }\n        finally\n        {\n            clearTimeout(timer);\n            call.signal?.removeEventListener(\"abort\", cancel);\n        }\n    };\n}\n\n// Read in chunks rather than at once: content-length is what the other side\n// claimed, and a body that keeps arriving is how one call takes the process\n// down.\nasync function read(response: Response, maxBytes: number): Promise<string>\n{\n    const reader = response.body?.getReader();\n\n    if (reader === undefined)\n    {\n        return \"\";\n    }\n\n    const chunks: Uint8Array[] = [];\n\n    let size = 0;\n\n    for (;;)\n    {\n        const { done, value } = await reader.read();\n\n        if (done)\n        {\n            break;\n        }\n\n        size += value.length;\n\n        if (size > maxBytes)\n        {\n            await reader.cancel();\n\n            throw new OutboundFault(\"TOO_LARGE\", `The answer went past ${maxBytes} bytes.`);\n        }\n\n        chunks.push(value);\n    }\n\n    return new TextDecoder().decode(join(chunks, size));\n}\n\nfunction join(chunks: readonly Uint8Array[], size: number): Uint8Array\n{\n    const whole = new Uint8Array(size);\n\n    let at = 0;\n\n    for (const chunk of chunks)\n    {\n        whole.set(chunk, at);\n        at += chunk.length;\n    }\n\n    return whole;\n}\n\n// The caller's own abort and our timeout both surface as one AbortError, and\n// they are not the same event.\nfunction shape(cause: unknown, call: Outbound, stopper: AbortController, timeoutMs: number): unknown\n{\n    if (cause instanceof OutboundFault)\n    {\n        return cause;\n    }\n\n    if (call.signal?.aborted === true)\n    {\n        return new OutboundFault(\"ABORTED\", \"The call was cancelled by the caller.\", undefined, cause);\n    }\n\n    if (stopper.signal.aborted)\n    {\n        return new OutboundFault(\"TIMEOUT\", `The call did not answer within ${timeoutMs}ms.`, undefined, cause);\n    }\n\n    return new OutboundFault(\"NETWORK\", \"The call could not reach the host.\", undefined, cause);\n}\n","import type { Plugin } from \"../../kernel/api\";\n\nexport type Found = Readonly<Record<string, { default?: Plugin }>>;\n\n// Discovery from the filesystem with no list to maintain: adding a plugin is\n// a folder, and forgetting to register it is not a failure mode. Sorted so\n// one set is always one order, whatever the loader walked first.\nexport function discover(found: Found): Plugin[]\n{\n    return Object.entries(found)\n        .map(([path, module]) =>\n        {\n            if (module.default === undefined)\n            {\n                throw new Error(`${path} must default-export a definePlugin(...) result.`);\n            }\n\n            return module.default;\n        })\n        .sort((first, second) => first.name.localeCompare(second.name));\n}\n","import { database } from \"../../database/api\";\nimport { limiter } from \"../../guard/api\";\nimport { createKernel } from \"../../kernel/api\";\nimport { dial } from \"../../outbound/api\";\nimport { serve } from \"../../http/api\";\nimport type { Opening, Store } from \"../../database/api\";\nimport type { Started, Starting } from \"../api\";\n\n// The order is the point: the database opens and migrates before any plugin\n// runs, the kernel validates before any plugin acts, and the server is built\n// last, from routes that are already known to be sound.\nexport async function start(starting: Starting): Promise<Started>\n{\n    const log = starting.log;\n\n    // A store the project built, or one opened here from a path. Told apart\n    // by what it answers to, not by a flag: a Store has methods, an Opening\n    // has a file.\n    const given = starting.database;\n    const ready = typeof (given as { tx?: unknown }).tx === \"function\";\n\n    const store = ready\n        ? given as Store\n        : database({\n            ...given as Opening,\n            tables: Object.fromEntries(\n                starting.plugins\n                    .filter((plugin) => plugin.definition.tables !== undefined)\n                    .map((plugin) => [plugin.name, plugin.definition.tables as Readonly<Record<string, unknown>>]),\n            ),\n        });\n\n    const migrations = starting.plugins\n        .filter((plugin) => plugin.definition.migrations !== undefined)\n        .map((plugin) => ({ plugin: plugin.name, from: plugin.definition.migrations as string }));\n\n    if (typeof store.migrate !== \"function\" || typeof store.close !== \"function\")\n    {\n        throw new TypeError(\n            \"The store given to start() answers tx and of, but not migrate and close. start() owns the whole lifetime of a database, so it needs both: migrate before any plugin runs, close after every one has stopped. Add them, or build the kernel yourself with createKernel, which asks only for tx and of.\",\n        );\n    }\n\n    const ran = store.migrate(migrations);\n\n    if (ran.length > 0)\n    {\n        log?.info(\"migrations applied\", { count: ran.length, steps: ran.map((step) => `${step.plugin}/${step.name}`) });\n    }\n\n    // Every route's declared limit is enforced by this one, so a plugin\n    // cannot turn off its own: it never holds it.\n    // A budget the project passed counts wherever it likes, which is what a\n    // deployment of more than one process needs. The kit's own counts here,\n    // and only what it counted can it sweep.\n    const counting = starting.budget === undefined ? limiter() : undefined;\n    const budget = starting.budget ?? counting ?? limiter();\n\n    const sweeping = counting === undefined ? undefined : setInterval(() => void counting.sweep(), 60_000);\n\n    sweeping?.unref?.();\n\n    // Reached through the store's own connection, so a kept event and the\n    // work it announces are written by one transaction.\n    const keeping = starting.outbox === true ? store.outbox?.() : undefined;\n    const later = starting.schedule === true ? store.schedule?.() : undefined;\n\n    // Given whenever any plugin declares a scope: the kernel refuses to\n    // narrow without it, and a plugin declaring one and finding nothing to\n    // narrow by would be a scope that does not scope.\n    const scoping = starting.plugins.some((plugin) => plugin.definition.scope !== undefined);\n\n    const kernel = createKernel({\n        plugins: starting.plugins,\n        db: store,\n        ...(keeping !== undefined && { outbox: keeping }),\n        ...(later !== undefined && { schedule: later }),\n        ...(scoping && store.narrowing !== undefined && { narrow: store.narrowing() }),\n        budget,\n        dial: typeof starting.outbound === \"function\" ? starting.outbound : dial(starting.outbound ?? {}),\n        ...(starting.config !== undefined && { config: starting.config }),\n        ...(log !== undefined && {\n            log: (level, plugin, line, about) =>\n            {\n                log[level](`${plugin}: ${line}`, about);\n            },\n        }),\n    });\n\n    await kernel.start();\n\n    log?.info(\"kernel started\", { plugins: starting.plugins.length, routes: kernel.routes().length });\n\n    // Built after the kernel started, so what identifies a caller can reach\n    // the plugin holding the sessions.\n    const identify = starting.identify?.(kernel);\n\n    const app = serve({\n        kernel,\n        ...(identify !== undefined && { identify }),\n        ...(starting.http ?? {}),\n        ...(log !== undefined && {\n            log: (level, line, about) =>\n            {\n                log[level](line, about);\n            },\n        }),\n    });\n\n    return {\n        kernel,\n        store,\n        app,\n        fetch: app.fetch,\n\n        stop: async (): Promise<void> =>\n        {\n            if (sweeping !== undefined)\n            {\n                clearInterval(sweeping);\n            }\n\n            await kernel.stop();\n            store.close();\n        },\n    };\n}\n"]}

package/dist/testing.d.ts

@@ -0,0 +1,165 @@
+import { K as Kernel, e as Store, H as Handle, b as Plugin, d as Outbound, c as Caller } from './api-BZrn0c9T.js';
+import 'zod';
+import 'drizzle-orm/better-sqlite3';
+
+type Said = {
+    level: string;
+    plugin: string;
+    line: string;
+} & Readonly<Record<string, unknown>>;
+/** One outbound call, as a test sees it. */
+type Called = {
+    method: string;
+    url: string;
+    body: unknown;
+    headers: Readonly<Record<string, string>> | undefined;
+};
+/** One event, as a test sees it. */
+type Heard = {
+    plugin: string;
+    event: string;
+    payload: unknown;
+};
+type Booted = {
+    kernel: Kernel;
+    store: Store<Handle>;
+    said: Said[];
+    called: () => Called[];
+    /**
+     * Every event emitted since boot, in order.
+     *
+     * A plugin with no listener still emits, and proving that it did would
+     * otherwise mean writing a plugin whose only purpose is to hear. This
+     * listens to everything declared, so a test asserts on the emit itself.
+     */
+    heard: () => Heard[];
+    /**
+     * Waits until every listener an emit started has finished.
+     *
+     * `emit` returns void and a listener runs after the caller, so a test
+     * that reads straight after emitting reads the state from before it.
+     * Nothing in a plugin ever needs this; a test that asserts on what a
+     * listener did always does.
+     */
+    settled: () => Promise<void>;
+    /**
+     * Runs whatever the schedule says is due, once.
+     *
+     * A test moves its own clock forward and asks, rather than waiting for a
+     * beat: what is being proved is that the work runs at its moment, not
+     * that an interval fired.
+     */
+    due: () => Promise<void>;
+    stop: () => Promise<void>;
+};
+type Booting = {
+    plugins: readonly Plugin[];
+    config?: Readonly<Record<string, unknown>>;
+    answers?: (call: Outbound) => unknown;
+    /**
+     * Whether events are kept until a listener has heard them, as
+     * `start({ outbox: true })` does.
+     *
+     * A test proving a listener survives hearing the same event twice needs
+     * the same machinery the deployment runs, or it is proving something
+     * else.
+     */
+    outbox?: boolean;
+    /**
+     * Whether a plugin may ask for work later, as `start({ schedule: true })`.
+     *
+     * A test drives it with `due()` rather than a beat: waiting a real second
+     * to watch a job run is a slow test that fails on a busy machine.
+     */
+    schedule?: boolean;
+    /** What the clock answers, so a test can reach tomorrow. */
+    now?: () => number;
+};
+declare const Booting: {
+    tables: (plugins: readonly Plugin[]) => Readonly<Record<string, Readonly<Record<string, unknown>>>>;
+    migrations: (plugins: readonly Plugin[]) => {
+        plugin: string;
+        from: string;
+    }[];
+};
+declare function booting(given: Booting): Promise<Booted>;
+/**
+ * A caller a test controls.
+ *
+ * `claims` is what the project decided a caller carries: a tenant, a role, a
+ * plan. The kernel never reads it, so a test proving that one tenant cannot
+ * reach another's rows has to be able to say who this caller belongs to.
+ */
+declare function calling(permissions?: readonly string[], id?: string, claims?: Readonly<Record<string, unknown>>): Caller;
+
+type Crossing = {
+    from: string;
+    to: string;
+    specifier: string;
+};
+type Wrong$1 = {
+    rule: "undeclared" | "deep" | "cycle" | "contract";
+    message: string;
+};
+declare function boundaries(root: string): Wrong$1[];
+
+type Oversized = {
+    path: string;
+    size: number;
+};
+type Undocumented = {
+    key: string;
+};
+declare function oversized(root: string, limit?: number): Oversized[];
+declare function missing(root: string, required: readonly string[]): string[];
+/**
+ * Plugins that describe themselves nowhere.
+ *
+ * A plugin is a capability someone else has to understand before they can
+ * depend on it, and its contract says what crosses the boundary rather than
+ * why anyone would want it. A folder with no `usage.md` is one nobody can
+ * decide about without reading its source.
+ */
+declare function unexplained(plugins: string): string[];
+declare function undocumented(contract: string, procedure: string): string[];
+
+type Wrong = {
+    check: "boundaries" | "wiring" | "oversized" | "missing" | "unexplained" | "undocumented";
+    message: string;
+};
+type Checking = {
+    root?: string;
+    plugins?: string;
+    /** Where pure code shared between plugins lives. */
+    utils?: string;
+    docs?: string;
+    required?: readonly string[];
+    procedure?: string;
+    limit?: number;
+};
+declare const Project: {
+    required: readonly ["#docs/usage.md", "#docs/stack.md", "#docs/architecture.md", "README.md"];
+    checks: (checking?: Checking) => Wrong[];
+    boundaries: (at: string) => Wrong[];
+    wiring: (at: string, apart?: boolean) => Wrong[];
+    unexplained: (at: string) => Wrong[];
+    docs: (root: string, at: string, required: readonly string[], limit: number) => Wrong[];
+    contract: (procedure: string) => Wrong[];
+};
+
+type Unread = {
+    file: string;
+    shape: string;
+    field: string;
+};
+/**
+ * Fields a contract declares that nothing in production reads.
+ *
+ * Tests and comments are excluded from what counts as a read. Counting them
+ * is what made this check certify rather than check: a field kept alive by a
+ * fixture is a field the document promises and no code honours, which is the
+ * defect this exists to catch.
+ */
+declare function wiring(root: string, apart?: boolean): Unread[];
+
+export { type Booted, Booting, Booting as Boots, type Called, Caller, type Checking, type Wrong$1 as Crossed, type Crossing, Outbound, type Oversized, Project, type Said, type Undocumented, type Unread, type Wrong, booting, boundaries, calling, missing, oversized, undocumented, unexplained, wiring };