@plumix/core 0.1.0

package/dist/cli/schema-codegen.js

@@ -0,0 +1,21 @@
+export const CORE_SCHEMA_MODULE = "plumix/schema";
+export function generateSchemaSource(config) {
+    const modules = [CORE_SCHEMA_MODULE];
+    const seen = new Set(modules);
+    for (const plugin of config.plugins) {
+        const spec = plugin.schemaModule;
+        if (spec && !seen.has(spec)) {
+            seen.add(spec);
+            modules.push(spec);
+        }
+    }
+    const lines = [
+        "// Generated by plumix — do not edit.",
+        "// Regenerated from plumix.config.ts on each build.",
+        "",
+        ...modules.map((spec) => `export * from ${JSON.stringify(spec)};`),
+        "",
+    ];
+    return { source: lines.join("\n"), modules };
+}
+//# sourceMappingURL=schema-codegen.js.map

package/dist/cli/schema-codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-codegen.js","sourceRoot":"","sources":["../../src/cli/schema-codegen.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAOlD,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,OAAO,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;QACjC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,uCAAuC;QACvC,qDAAqD;QACrD,EAAE;QACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAClE,EAAE;KACH,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC"}

package/dist/cli/spawn.d.ts

@@ -0,0 +1,7 @@
+interface SpawnOptions {
+    readonly cwd: string;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}
+export declare function spawnInherit(command: string, args: readonly string[], options: SpawnOptions): Promise<void>;
+export {};
+//# sourceMappingURL=spawn.d.ts.map

package/dist/cli/spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/cli/spawn.ts"],"names":[],"mappings":"AAIA,UAAU,YAAY;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC7D;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/cli/spawn.js

@@ -0,0 +1,22 @@
+import { spawn } from "node:child_process";
+import { CliError } from "./errors.js";
+export function spawnInherit(command, args, options) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            env: { ...process.env, ...options.env },
+            stdio: "inherit",
+        });
+        child.once("error", (cause) => {
+            reject(CliError.spawnFailed({ command, cause }));
+        });
+        child.once("exit", (code, signal) => {
+            if (code === 0) {
+                resolve();
+                return;
+            }
+            reject(CliError.spawnNonzeroExit({ command, exitCode: code, signal }));
+        });
+    });
+}
+//# sourceMappingURL=spawn.js.map

package/dist/cli/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../src/cli/spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,IAAuB,EACvB,OAAqB;IAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACvC,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/worker-codegen.d.ts

@@ -0,0 +1,5 @@
+export interface WorkerSourceOptions {
+    readonly configModule: string;
+}
+export declare function generateWorkerSource({ configModule, }: WorkerSourceOptions): string;
+//# sourceMappingURL=worker-codegen.d.ts.map

package/dist/cli/worker-codegen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-codegen.d.ts","sourceRoot":"","sources":["../../src/cli/worker-codegen.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,EACnC,YAAY,GACb,EAAE,mBAAmB,GAAG,MAAM,CAuC9B"}

package/dist/cli/worker-codegen.js

@@ -0,0 +1,41 @@
+export function generateWorkerSource({ configModule, }) {
+    const lines = [
+        "// Generated by plumix — do not edit.",
+        "// Regenerated from plumix.config.ts on each build.",
+        "",
+        'import { buildApp } from "plumix";',
+        // The plumix Vite plugin resolves this virtual module — in dev it's
+        // `{}`; in build it's the parsed `.vite/manifest.json` Vite emitted
+        // for the client environment. The SSR renderer reads it to inject
+        // hashed `<link rel="stylesheet">` tags after the theme's `link[]`.
+        'import assetManifest from "virtual:plumix/asset-manifest";',
+        `import config from ${JSON.stringify(configModule)};`,
+        "",
+        // vite statically replaces `import.meta.env.DEV` (true under dev,
+        // false in production builds) — see RuntimeContext.devCsrfLocalhost.
+        // Fail-closed: a bundler that leaves `import.meta.env` intact yields
+        // undefined, which buildApp coerces to false.
+        "const appPromise = buildApp(config, {",
+        "  assetManifest,",
+        "  devCsrfLocalhost: import.meta.env.DEV,",
+        "});",
+        "let fetchHandler;",
+        "let scheduledHandler;",
+        "",
+        "export default {",
+        "  async fetch(request, env, ctx) {",
+        "    const app = await appPromise;",
+        "    fetchHandler ??= config.runtime.buildFetchHandler(app);",
+        "    return fetchHandler(request, env, ctx);",
+        "  },",
+        "  async scheduled(event, env, ctx) {",
+        "    const app = await appPromise;",
+        "    scheduledHandler ??= config.runtime.buildScheduledHandler?.(app);",
+        "    if (scheduledHandler) await scheduledHandler(event, env, ctx);",
+        "  },",
+        "};",
+        "",
+    ];
+    return lines.join("\n");
+}
+//# sourceMappingURL=worker-codegen.js.map

package/dist/cli/worker-codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-codegen.js","sourceRoot":"","sources":["../../src/cli/worker-codegen.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,oBAAoB,CAAC,EACnC,YAAY,GACQ;IACpB,MAAM,KAAK,GAAG;QACZ,uCAAuC;QACvC,qDAAqD;QACrD,EAAE;QACF,oCAAoC;QACpC,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,4DAA4D;QAC5D,sBAAsB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;QACrD,EAAE;QACF,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,8CAA8C;QAC9C,uCAAuC;QACvC,kBAAkB;QAClB,0CAA0C;QAC1C,KAAK;QACL,mBAAmB;QACnB,uBAAuB;QACvB,EAAE;QACF,kBAAkB;QAClB,oCAAoC;QACpC,mCAAmC;QACnC,6DAA6D;QAC7D,6CAA6C;QAC7C,MAAM;QACN,sCAAsC;QACtC,mCAAmC;QACnC,uEAAuE;QACvE,oEAAoE;QACpE,MAAM;QACN,IAAI;QACJ,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,141 @@
+import type { HtmlAllowlistOverride } from "@plumix/blocks";
+import type { RemotePattern } from "@plumix/blocks/renderer";
+import type { PlumixAuthConfig } from "./auth/config.js";
+import type { MailerInput } from "./auth/mailer/resolve.js";
+import type { I18nInput, ResolvedI18n } from "./i18n/locale-registry.js";
+import type { PluginDescriptor } from "./plugin/define.js";
+import type { RuntimeAdapter } from "./runtime/adapter.js";
+import type { CacheProvider, DatabaseAdapter, ImageDelivery, KV, ObjectStorage } from "./runtime/slots.js";
+import type { ThemeDescriptor } from "./theme.js";
+/**
+ * Re-exported from `./theme.js` so existing `import { Theme } from
+ * "@plumix/core"` call sites keep working. Prefer `ThemeDescriptor`
+ * directly in new code.
+ */
+export type Theme = ThemeDescriptor;
+export type AnyPluginDescriptor = PluginDescriptor<any>;
+export type AnyDatabaseAdapter = DatabaseAdapter<any>;
+/**
+ * Shared on/off switch for an external interface surface (MCP today, the
+ * REST API next). Default-off: a surface is mounted only when its config
+ * sets `enabled: true`, so the dispatcher can 404 before importing the
+ * surface's handler graph at all.
+ */
+export interface InterfaceToggle {
+    readonly enabled?: boolean;
+}
+export declare function interfaceEnabled(toggle: InterfaceToggle | undefined): boolean;
+/**
+ * Cross-origin policy for the REST API's anonymous reads. Default-closed: with
+ * no `cors`, no `Access-Control-Allow-Origin` is ever emitted. `origins: "*"`
+ * opens anonymous reads to any origin; an array allows only those. PAT-authed
+ * responses are never CORS-exposed regardless, so a token can't be abused from
+ * browser JS cross-origin.
+ */
+export interface ApiCorsConfig {
+    readonly origins?: readonly string[] | "*";
+}
+export interface ApiConfig extends InterfaceToggle {
+    readonly cors?: ApiCorsConfig;
+}
+export interface PlumixConfigInput {
+    readonly runtime: RuntimeAdapter;
+    readonly database: AnyDatabaseAdapter;
+    readonly auth: PlumixAuthConfig;
+    readonly storage?: ObjectStorage;
+    readonly imageDelivery?: ImageDelivery;
+    readonly kv?: KV;
+    /**
+     * Public read-through edge cache. Optional and default-off: with no `cache`
+     * slot, every public page renders live. The canonical provider is
+     * `edge({ ttl, staleWhileRevalidate })` from `@plumix/runtime-cloudflare`;
+     * it disables itself when the deploy lacks the zone credentials needed to
+     * cache safely (e.g. on `workers.dev`).
+     */
+    readonly cache?: CacheProvider;
+    /**
+     * Outbound email transport. Implementations conform to the `Mailer`
+     * interface from `@plumix/core` — one method, swap in any provider
+     * (Resend, Postmark, SES, SMTP). Shared by every feature that sends
+     * mail (magic-link today; future invite-email, password-reset,
+     * plugin-defined notifications), so plugin authors and operators
+     * configure the transport once at the top level. `consoleMailer()`
+     * is the dev default.
+     */
+    readonly mailer?: MailerInput;
+    /**
+     * The site's theme. Optional: a site that registers none falls back to
+     * the built-in {@link welcomeTheme}, which renders a self-contained
+     * welcome screen on the public site until a real theme is added.
+     */
+    readonly theme?: ThemeDescriptor;
+    readonly plugins?: readonly AnyPluginDescriptor[];
+    readonly i18n?: I18nInput;
+    /**
+     * Serve the whole site under a subdirectory (`example.com/custom-directory/*`)
+     * — set this when a reverse proxy mounts plumix below the domain root.
+     * Mirrors Next's `basePath` / Nuxt's `app.baseURL`: a leading-slash prefix
+     * with no trailing slash. Normalized leniently (`docs`, `/docs/` both work);
+     * the default `""` is a root deployment. Path-only — it never touches
+     * `auth.passkey.origin`, which stays scheme+host for WebAuthn.
+     */
+    readonly basePath?: string;
+    /**
+     * Model Context Protocol endpoint at `/_plumix/mcp`. Default-off; set
+     * `{ enabled: true }` to mount it.
+     */
+    readonly mcp?: InterfaceToggle;
+    /**
+     * Public REST API + OpenAPI spec at `/_plumix/api/v1/`. Default-off; set
+     * `{ enabled: true }` to mount it.
+     */
+    readonly api?: ApiConfig;
+    /**
+     * Block-system configuration. Today only exposes the operator-
+     * configurable `core/html` allowlist override; future block-level
+     * settings (per-block disable, etc.) slot in here too.
+     */
+    readonly blocks?: {
+        readonly htmlAllowlist?: HtmlAllowlistOverride;
+    };
+    /**
+     * Image handling for the `<Image>` theme component. `remotePatterns` is the
+     * allowlist of remote hosts `<Image>` may optimize; same-origin sources are
+     * always allowed, and unlisted remote sources render unoptimized.
+     */
+    readonly images?: {
+        readonly remotePatterns?: readonly RemotePattern[];
+    };
+    /**
+     * Passthrough merged with plumix's own Vite config via `mergeConfig`.
+     * Structural so core stays Vite-dep-free.
+     */
+    readonly vite?: Readonly<Record<string, unknown>>;
+}
+export interface PlumixConfig {
+    readonly runtime: RuntimeAdapter;
+    readonly database: AnyDatabaseAdapter;
+    readonly auth: PlumixAuthConfig;
+    readonly storage?: ObjectStorage;
+    readonly imageDelivery?: ImageDelivery;
+    readonly kv?: KV;
+    readonly cache?: CacheProvider;
+    readonly mailer?: MailerInput;
+    readonly theme: ThemeDescriptor;
+    readonly plugins: readonly AnyPluginDescriptor[];
+    readonly i18n: ResolvedI18n;
+    /** Normalized subdirectory prefix (`""` for a root deployment). */
+    readonly basePath: string;
+    readonly mcp?: InterfaceToggle;
+    readonly api?: ApiConfig;
+    readonly blocks?: {
+        readonly htmlAllowlist?: HtmlAllowlistOverride;
+    };
+    readonly images?: {
+        readonly remotePatterns?: readonly RemotePattern[];
+    };
+    readonly vite?: Readonly<Record<string, unknown>>;
+}
+export declare function plumix(config: PlumixConfigInput): PlumixConfig;
+export { plumix as defineConfig };
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EACf,aAAa,EACb,EAAE,EACF,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAMlD;;;;GAIG;AACH,MAAM,MAAM,KAAK,GAAG,eAAe,CAAC;AAKpC,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;AACxD,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;AAGtD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAE7E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC;CAC5C;AAED,MAAM,WAAW,SAAU,SAAQ,eAAe;IAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACjB;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;KAChD,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;KACpD,CAAC;IACF;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACjB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;KAChD,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;KACpD,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAED,wBAAgB,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,YAAY,CA4B9D;AAED,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}

package/dist/config.errors.d.ts

@@ -0,0 +1,13 @@
+type ConfigErrorCode = "magic_link_requires_mailer";
+/**
+ * Cross-field config invariant violated in {@link plumix} — surfaced at app
+ * build time rather than on the first request. Mirrors the named-error
+ * convention (umbrella #232).
+ */
+export declare class ConfigError extends Error {
+    readonly code: ConfigErrorCode;
+    private constructor();
+    static magicLinkRequiresMailer(): ConfigError;
+}
+export {};
+//# sourceMappingURL=config.errors.d.ts.map

package/dist/config.errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.errors.d.ts","sourceRoot":"","sources":["../src/config.errors.ts"],"names":[],"mappings":"AAAA,KAAK,eAAe,GAAG,4BAA4B,CAAC;AAEpD;;;;GAIG;AACH,qBAAa,WAAY,SAAQ,KAAK;IAKpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAE/B,OAAO;IAKP,MAAM,CAAC,uBAAuB,IAAI,WAAW;CAO9C"}

package/dist/config.errors.js

@@ -0,0 +1,20 @@
+/**
+ * Cross-field config invariant violated in {@link plumix} — surfaced at app
+ * build time rather than on the first request. Mirrors the named-error
+ * convention (umbrella #232).
+ */
+export class ConfigError extends Error {
+    static {
+        ConfigError.prototype.name = "ConfigError";
+    }
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+    static magicLinkRequiresMailer() {
+        return new ConfigError("magic_link_requires_mailer", "plumix(): `auth.magicLink` requires a top-level `mailer` " +
+            "(use `consoleMailer()` for dev or pass your own `Mailer`).");
+    }
+}
+//# sourceMappingURL=config.errors.js.map

package/dist/config.errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.errors.js","sourceRoot":"","sources":["../src/config.errors.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC;QACE,WAAW,CAAC,SAAS,CAAC,IAAI,GAAG,aAAa,CAAC;IAC7C,CAAC;IAEQ,IAAI,CAAkB;IAE/B,YAAoB,IAAqB,EAAE,OAAe;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,uBAAuB;QAC5B,OAAO,IAAI,WAAW,CACpB,4BAA4B,EAC5B,2DAA2D;YACzD,4DAA4D,CAC/D,CAAC;IACJ,CAAC;CACF"}

package/dist/config.js

@@ -0,0 +1,36 @@
+import { normalizeBasePath } from "./base-path.js";
+import { ConfigError } from "./config.errors.js";
+import { resolveLocales } from "./i18n/locale-registry.js";
+import { welcomeTheme } from "./welcome-theme.js";
+export function interfaceEnabled(toggle) {
+    return toggle?.enabled === true;
+}
+export function plumix(config) {
+    // Cross-field invariant: features that require email (magic-link
+    // today) need a configured mailer at the top level. Surface this at
+    // app build time rather than letting it crash on the first request.
+    if (config.auth.magicLink && !config.mailer) {
+        throw ConfigError.magicLinkRequiresMailer();
+    }
+    return {
+        runtime: config.runtime,
+        database: config.database,
+        auth: config.auth,
+        storage: config.storage,
+        imageDelivery: config.imageDelivery,
+        kv: config.kv,
+        cache: config.cache,
+        mailer: config.mailer,
+        theme: config.theme ?? welcomeTheme,
+        plugins: config.plugins ?? [],
+        i18n: resolveLocales(config.i18n ?? { defaultLocale: "en", locales: ["en"] }),
+        basePath: normalizeBasePath(config.basePath),
+        mcp: config.mcp,
+        api: config.api,
+        blocks: config.blocks,
+        images: config.images,
+        vite: config.vite,
+    };
+}
+export { plumix as defineConfig };
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA0BlD,MAAM,UAAU,gBAAgB,CAAC,MAAmC;IAClE,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAClC,CAAC;AAqHD,MAAM,UAAU,MAAM,CAAC,MAAyB;IAC9C,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC,uBAAuB,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,YAAY;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,IAAI,EAAE,cAAc,CAClB,MAAM,CAAC,IAAI,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CACxD;QACD,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5C,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC"}

package/dist/context/app.d.ts

@@ -0,0 +1,260 @@
+import type { BaseSQLiteDatabase } from "drizzle-orm/sqlite-core";
+import type { BlockRegistry, MarkSpec, ShortcodeRegistry } from "@plumix/blocks";
+import type { RemotePattern } from "@plumix/blocks/renderer";
+import type { RequestAuthenticator } from "../auth/authenticator.js";
+import type { MailerInput } from "../auth/mailer/resolve.js";
+import type { Mailer } from "../auth/mailer/types.js";
+import type { KnownCapability } from "../auth/rbac.js";
+import type * as coreSchema from "../db/schema/index.js";
+import type { UserRole } from "../db/schema/users.js";
+import type { HookExecutor } from "../hooks/registry.js";
+import type { ResolvedI18n, ResolvedLocale } from "../i18n/locale-registry.js";
+import type { PluginRegistry } from "../plugin/manifest.js";
+import type { ResolvedEntity } from "../route/current.js";
+import type { OAuthProviderSummary } from "../runtime/app.js";
+import type { PlumixEnv } from "../runtime/bindings.js";
+import type { AssetsBinding, ConnectedCache, ConnectedObjectStorage, ImageDelivery } from "../runtime/slots.js";
+export type CoreSchema = typeof coreSchema;
+export type Db<TSchema extends Record<string, unknown> = CoreSchema> = BaseSQLiteDatabase<"async" | "sync", unknown, TSchema>;
+export interface AuthenticatedUser {
+    readonly id: number;
+    readonly email: string;
+    /** Display name from `users.name`; null when the user never set one. */
+    readonly name?: string | null;
+    readonly role: UserRole;
+    readonly meta: Record<string, unknown>;
+}
+export interface Logger {
+    debug(message: string, meta?: Record<string, unknown>): void;
+    info(message: string, meta?: Record<string, unknown>): void;
+    warn(message: string, meta?: Record<string, unknown>): void;
+    error(message: string, meta?: Record<string, unknown>): void;
+}
+export interface AuthNamespace {
+    can(capability: KnownCapability | (string & {})): boolean;
+}
+/**
+ * Schedule fire-and-forget work whose result the caller doesn't await.
+ * Runtime adapters bind this to their platform primitive:
+ *
+ * - Cloudflare Workers: `executionCtx.waitUntil(promise)` — extends
+ *   the worker's lifetime past the response so background work
+ *   completes before the isolate is recycled.
+ * - Long-lived runtimes (Node, Bun): the default `void p.catch(...)`
+ *   shim in `createAppContext` — the event loop holds the promise;
+ *   rejections are caught and logged so an unhandled rejection
+ *   doesn't crash the process.
+ * - Test runtimes: a queue + `drainDeferred()` helper for harness
+ *   assertions on background work.
+ *
+ * `defer` itself never throws — pass any promise, log-and-forget is
+ * the contract. Rejection logging always routes through `ctx.logger`
+ * so an operator-wired logger sees deferred rejections regardless of
+ * which runtime is underneath.
+ */
+export type DeferFn = (promise: Promise<unknown>) => void;
+/**
+ * Declaration-merge target for plugin-contributed AppContext helpers.
+ * `extendAppContext(key, value)` registers an entry; the dispatcher
+ * merges entries onto each per-request `AppContext` so handlers (RPC,
+ * route, hook listeners) read them via `ctx.<key>`.
+ *
+ * Empty by default — plugins augment via TypeScript module merging,
+ * mirroring `PluginContextExtensions`.
+ */
+export interface AppContextExtensions {
+}
+export interface AppContextBase<TSchema extends Record<string, unknown> = CoreSchema> {
+    readonly db: Db<TSchema>;
+    readonly env: PlumixEnv;
+    readonly request: Request;
+    readonly user: AuthenticatedUser | null;
+    /**
+     * Per-request capability whitelist when the active authenticator
+     * narrowed it (e.g. an API token with `scopes: [...]`). null =
+     * unrestricted, the user's role caps apply verbatim. `auth.can()`
+     * intersects this with the role caps; every capability check in
+     * core + plugins reads through `auth.can`, so nothing escapes the
+     * narrowing.
+     */
+    readonly tokenScopes: readonly string[] | null;
+    readonly hooks: HookExecutor;
+    readonly plugins: PluginRegistry;
+    /**
+     * Merged block / mark registries — same instances `buildApp` built
+     * at boot. RPC procedures consume these for server-side content
+     * validation before persistence. Plugin route handlers can also read
+     * them to render entry content.
+     */
+    readonly blocks: BlockRegistry;
+    readonly marks: readonly MarkSpec[];
+    /**
+     * Merged shortcode registry (same instance `buildApp` built). The
+     * public render path reads it for entry-title and rich-text body
+     * expansion.
+     */
+    readonly shortcodes: ShortcodeRegistry;
+    readonly logger: Logger;
+    readonly auth: AuthNamespace;
+    /**
+     * Resolved request authenticator — same instance the dispatcher
+     * uses. RPC middleware (`authenticated`) reads it from here so a
+     * custom guard (e.g. CF Access JWT) gates RPC calls the same way it
+     * gates routes. Plugin route handlers read it for the same reason.
+     */
+    readonly authenticator: RequestAuthenticator;
+    /**
+     * Whether external signup flows (magic-link, OAuth, custom guards)
+     * are allowed to mint the very first admin. Derived from
+     * `auth.bootstrapVia`; defaults to false (passkey-only rail).
+     */
+    readonly bootstrapAllowed: boolean;
+    /**
+     * Configured OAuth providers — `{ key, label }` per entry. Empty when
+     * the deploy is passkey-only. Read by the login screen (via the
+     * `auth.oauthProviders` RPC) to render provider buttons; client
+     * credentials never reach this surface.
+     */
+    readonly oauthProviders: readonly OAuthProviderSummary[];
+    /**
+     * Extend work past the returned Response — see `DeferFn` for the
+     * full per-runtime contract. Default fallback (long-lived runtimes,
+     * tests with no adapter wired) catches rejections and logs them
+     * via `ctx.logger.error` so a fire-and-forget plugin task can't
+     * crash the process on an unhandled rejection.
+     */
+    readonly defer: DeferFn;
+    /**
+     * Platform asset serving, when the runtime exposes one. Populated by
+     * the CF adapter from `env.ASSETS`; undefined on runtimes without an
+     * asset layer. Consumed by the dispatcher to serve admin SPA deep-links.
+     */
+    readonly assets?: AssetsBinding;
+    /**
+     * Bound object storage for this request. Present when the config
+     * declared a `storage:` slot and the runtime adapter connected it.
+     * Plugin handlers (e.g. media upload finalization) read/write via
+     * this; core procedures don't use it today.
+     */
+    readonly storage?: ConnectedObjectStorage;
+    /**
+     * Bound edge cache for this request, when the config declared a `cache:`
+     * slot and the runtime connected it (zone credentials present). The
+     * dispatcher's public-route path reads/writes through this; `undefined`
+     * means caching is off and every public page renders live.
+     */
+    readonly cache?: ConnectedCache;
+    /**
+     * On-the-fly image delivery (resize / format / quality URLs). Present
+     * when the config declared an `imageDelivery:` slot. Pure URL math —
+     * `imageDelivery.url(src, opts)` returns the CDN-transformed URL.
+     * Plugins that render images (media plugin, themes) read this; core
+     * procedures don't use it today.
+     */
+    readonly imageDelivery?: ImageDelivery;
+    /** Remote-host allowlist for `<Image>` optimization (from `config.images.remotePatterns`). */
+    readonly imageRemotePatterns?: readonly RemotePattern[];
+    /**
+     * Configured outbound email transport. Present when the operator
+     * passed `mailer:` at the top of `plumix({...})`. Magic-link reads
+     * this; future invite-email / password-reset / plugin-defined
+     * notifications read the same instance — operators configure once,
+     * every feature reuses. Plugin handlers should null-check and
+     * degrade if mail is optional for their feature.
+     */
+    readonly mailer?: Mailer;
+    /**
+     * Canonical site origin (`https://cms.example.com`). Sourced from
+     * `auth.passkey.origin` at app build time. Magic-link, email-change,
+     * and any future flow that composes a verification URL reads this
+     * so URLs are stable across the deployment regardless of which
+     * worker / region serves the inbound request.
+     */
+    readonly origin: string;
+    /**
+     * Normalized subdirectory prefix the site is served under (`""` for a root
+     * deployment, `/custom-directory` otherwise). Sourced from `config.basePath`.
+     * The dispatcher strips it from the inbound path before routing; outbound URL
+     * builders (canonical, sitemap, feeds, permalinks, cookie `Path`) prepend it
+     * via `withBasePath` so links resolve under the subdirectory.
+     */
+    readonly basePath: string;
+    /**
+     * Operator-set site name from `auth.magicLink.siteName`, used as
+     * the human-friendly label in mailer subjects ("Confirm your email
+     * for {siteName}"). Undefined when magic-link isn't configured —
+     * RPC procedures that compose user-facing mail should refuse with
+     * a config-missing reason in that case.
+     */
+    readonly siteName?: string;
+    readonly i18n: ResolvedI18n;
+    readonly locale: ResolvedLocale;
+    /**
+     * Response headers writable from inside an RPC procedure. Populated by
+     * `@orpc/server/plugins`'s `ResponseHeadersPlugin` at handle-time, so
+     * outside the RPC path this is undefined. Procedures append `Set-Cookie`
+     * / custom headers here; the dispatcher folds them into the Response.
+     */
+    readonly resHeaders?: Headers;
+    /**
+     * Set by the public-route resolver after URL → entity matching;
+     * `null` for non-public routes (admin, RPC, etc.) and on cold-start.
+     * Consumers (breadcrumbs, canonical tags, menu plugin's `isCurrent`)
+     * read this to answer "is this the entity we're currently rendering."
+     * Mutable by design — the resolver writes once between cookie auth
+     * and response rendering, and read paths see the populated value.
+     */
+    resolvedEntity: ResolvedEntity | null;
+}
+export type AppContext<TSchema extends Record<string, unknown> = CoreSchema> = AppContextBase<TSchema> & AppContextExtensions;
+export type AuthenticatedAppContext<TSchema extends Record<string, unknown> = CoreSchema> = Omit<AppContext<TSchema>, "user"> & {
+    readonly user: AuthenticatedUser;
+};
+export interface CreateAppContextArgs<TSchema extends Record<string, unknown>> {
+    readonly db: Db<TSchema>;
+    readonly env: PlumixEnv;
+    readonly request: Request;
+    readonly hooks: HookExecutor;
+    readonly plugins: PluginRegistry;
+    /**
+     * Optional; defaults to an empty registry / mark list so call sites
+     * that don't exercise content validation (defer tests, narrow utility
+     * paths) can omit them. Production callers (`buildApp` + dispatcher)
+     * always pass real values.
+     */
+    readonly blocks?: BlockRegistry;
+    readonly marks?: readonly MarkSpec[];
+    readonly shortcodes?: ShortcodeRegistry;
+    readonly user?: AuthenticatedUser | null;
+    readonly tokenScopes?: readonly string[] | null;
+    readonly origin?: string;
+    readonly basePath?: string;
+    readonly siteName?: string;
+    readonly logger?: Logger;
+    readonly defer?: DeferFn;
+    readonly assets?: AssetsBinding;
+    readonly storage?: ConnectedObjectStorage;
+    readonly cache?: ConnectedCache;
+    readonly imageDelivery?: ImageDelivery;
+    readonly imageRemotePatterns?: readonly RemotePattern[];
+    /** Literal transport, or an `(env) => Mailer` resolver (resolved per-request
+     *  from `env`, memoized) for secrets that only exist at request time. */
+    readonly mailer?: MailerInput;
+    readonly i18n?: ResolvedI18n;
+    readonly oauthProviders?: readonly OAuthProviderSummary[];
+    readonly authenticator?: RequestAuthenticator;
+    readonly bootstrapAllowed?: boolean;
+    /**
+     * Plugin-contributed `extendAppContext` entries — usually piped
+     * directly from `installPlugins(...).appContextExtensions`. Each
+     * entry's `value` lands at `ctx[key]` so handlers and hook
+     * listeners read them as `ctx.<key>`.
+     */
+    readonly appContextExtensions?: ReadonlyMap<string, {
+        readonly value: unknown;
+    }>;
+}
+export declare function createAppContext<TSchema extends Record<string, unknown>>(args: CreateAppContextArgs<TSchema>): AppContext<TSchema>;
+export declare function withUser<TSchema extends Record<string, unknown>>(ctx: AppContext<TSchema>, user: AuthenticatedUser, tokenScopes?: readonly string[] | null): AuthenticatedAppContext<TSchema>;
+export declare const consoleLogger: Logger;
+//# sourceMappingURL=app.d.ts.map

package/dist/context/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/context/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,KAAK,UAAU,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAgB7B,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC;AAE3C,MAAM,MAAM,EAAE,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,IACjE,kBAAkB,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,aAAa;IAI5B,GAAG,CAAC,UAAU,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC;CAC3D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;AAE1D;;;;;;;;GAQG;AAEH,MAAM,WAAW,oBAAoB;CAAG;AAExC,MAAM,WAAW,cAAc,CAC7B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU;IAEpD,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACzD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,8FAA8F;IAC9F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACxD;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;OAOG;IACH,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,MAAM,UAAU,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,IACzE,cAAc,CAAC,OAAO,CAAC,GAAG,oBAAoB,CAAC;AAEjD,MAAM,MAAM,uBAAuB,CACjC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,IAClD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC,CAAC;AAEF,MAAM,WAAW,oBAAoB,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC3E,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACxD;6EACyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,WAAW,CACzC,MAAM,EACN;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAC5B,CAAC;CACH;AA4DD,wBAAgB,gBAAgB,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtE,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAClC,UAAU,CAAC,OAAO,CAAC,CA6DrB;AAED,wBAAgB,QAAQ,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9D,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,EACxB,IAAI,EAAE,iBAAiB,EACvB,WAAW,GAAE,SAAS,MAAM,EAAE,GAAG,IAAW,GAC3C,uBAAuB,CAAC,OAAO,CAAC,CAYlC;AAED,eAAO,MAAM,aAAa,EAAE,MAK3B,CAAC"}