@raybase/core 0.0.2 → 0.3.3

package/dist/pitr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pitr.d.ts","sourceRoot":"","sources":["../src/pitr.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEzD,eAAO,MAAM,eAAe,QAA2B,CAAC;AACxD,eAAO,MAAM,2BAA2B,8GAAyG,CAAC;AAElJ,qBAAa,aAAc,SAAQ,KAAK;aAGpB,MAAM;gBADtB,OAAO,EAAE,MAAM,EACC,MAAM,SAAM;CAK/B;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAI7E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAMvG;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,IAAI,CAAC,yBAAyB,EAAE,qBAAqB,GAAG,aAAa,GAAG,oBAAoB,CAAC,CAAC;IACpG,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,EAAE,CAAC,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClI,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBnF;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,EAC1D,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GAC7E,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;GAKG;AACH,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,IAAI,EAAE,IAAI,CACR,yBAAyB,EACvB,qBAAqB,GACrB,oCAAoC,GACpC,aAAa,GACb,oBAAoB,CACvB,CAAC;CACH,GAAG,OAAO,CAAC;IACV,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC,CAyBD"}

package/dist/pitr.js

@@ -0,0 +1,94 @@
+export const pitrRetentionMs = 30 * 24 * 60 * 60 * 1000;
+export const localPitrUnavailableMessage = "Point-in-time restore is only available in production — local development has no durable change log.";
+export class PitrHttpError extends Error {
+    status;
+    constructor(message, status = 400) {
+        super(message);
+        this.status = status;
+        this.name = "PitrHttpError";
+    }
+}
+export function pitrUnavailableReason(env) {
+    if (env.RAYBASE_ENV === "local")
+        return localPitrUnavailableMessage;
+    if (!env.RAYBASE_DATA)
+        return "RAYBASE_DATA Durable Object binding is missing";
+    return null;
+}
+export function validatePitrTimestamp(input, now = Date.now()) {
+    const epochMs = new Date(input).getTime();
+    if (!Number.isFinite(epochMs))
+        throw new PitrHttpError("Restore timestamp is required");
+    if (epochMs > now)
+        throw new PitrHttpError("Restore time cannot be in the future.");
+    if (epochMs < now - pitrRetentionMs)
+        throw new PitrHttpError("Restore points are only available for the last 30 days.");
+    return { epochMs, iso: new Date(epochMs).toISOString() };
+}
+export async function applyPitrRestore(input) {
+    const undoCandidate = await input.stub.pitrCurrentBookmark();
+    const restoredAt = (input.now ?? (() => new Date()))().toISOString();
+    const state = {
+        undoBookmark: undoCandidate,
+        restoredTo: input.restoredTo,
+        restoredAt,
+        actorId: input.actorId,
+        bookmark: input.bookmark
+    };
+    await input.saveState(state);
+    await input.audit({
+        bookmark: input.bookmark,
+        restoredTo: input.restoredTo,
+        undoBookmark: undoCandidate,
+        undoOf: input.undoOf
+    });
+    const undoBookmark = await input.stub.pitrRestore(input.bookmark);
+    await input.saveState({ ...state, undoBookmark });
+    await input.stub.pitrRestartToApply().catch(() => undefined);
+    return { undoBookmark, restoredTo: input.restoredTo, restoredAt };
+}
+export async function waitForPitrRestart(stubFactory, options = {}) {
+    try {
+        await stubFactory().ping();
+        return;
+    }
+    catch {
+        await (options.delay ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms))))(options.retryDelayMs ?? 500);
+    }
+    try {
+        await stubFactory().ping();
+    }
+    catch {
+        throw new PitrHttpError("Restore was applied but the database has not come back yet — refresh in a few seconds.", 502);
+    }
+}
+/**
+ * Recover an interrupted multi-batch format-2 restore from its pre-apply PITR
+ * bookmark. Marking the journal first makes every crash boundary idempotent:
+ * a subsequent maintenance entry repeats the same bookmark request while
+ * normal reads and writes remain gated.
+ */
+export async function recoverInterruptedBackupRestore(input) {
+    const status = await input.stub.backupRestoreStatus();
+    if (!status.active) {
+        return {
+            recoveryRequested: false,
+            operationId: status.operationId,
+            undoBookmark: status.undoBookmark
+        };
+    }
+    if (!status.operationId || !status.undoBookmark) {
+        throw new PitrHttpError("Restore maintenance is active but its PITR undo bookmark is missing.", 503);
+    }
+    await input.stub.markBackupRestoreRollbackRequested({
+        operationId: status.operationId
+    });
+    await input.stub.pitrRestore(status.undoBookmark);
+    await input.stub.pitrRestartToApply().catch(() => undefined);
+    return {
+        recoveryRequested: true,
+        operationId: status.operationId,
+        undoBookmark: status.undoBookmark
+    };
+}
+//# sourceMappingURL=pitr.js.map

package/dist/pitr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pitr.js","sourceRoot":"","sources":["../src/pitr.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,2BAA2B,GAAG,sGAAsG,CAAC;AAElJ,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IAFlB,YACE,OAAe,EACC,SAAS,GAAG;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAM;QAG5B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAeD,MAAM,UAAU,qBAAqB,CAAC,GAAwB;IAC5D,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO;QAAE,OAAO,2BAA2B,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,gDAAgD,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnE,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;IACxF,IAAI,OAAO,GAAG,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;IACpF,IAAI,OAAO,GAAG,GAAG,GAAG,eAAe;QAAE,MAAM,IAAI,aAAa,CAAC,yDAAyD,CAAC,CAAC;IACxH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAStC;IACC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,KAAK,GAAqB;QAC9B,YAAY,EAAE,aAAa;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;IAEF,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,KAAK,CAAC,KAAK,CAAC;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,aAAa;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAA0D,EAC1D,UAA4E,EAAE;IAE9E,IAAI,CAAC;QACH,MAAM,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC;IACpH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,wFAAwF,EAAE,GAAG,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAQrD;IAKC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,IAAI,aAAa,CACrB,sEAAsE,EACtE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC;QAClD,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7D,OAAO;QACL,iBAAiB,EAAE,IAAI;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC;AACJ,CAAC"}

package/dist/platform.d.ts

@@ -0,0 +1,199 @@
+import type { DataContext } from "./data-client.js";
+import type { DoMigration, RaybaseDatabaseObjectStub, RaybaseDatabaseRuntime, RaybaseDbEnv } from "./db.js";
+import type { RaybaseUser } from "./policies.js";
+import type { ResolvedRealtimeConfig } from "./realtime.js";
+import type { RaybaseSchema, RaybaseSystemTable } from "./schema.js";
+import type { RaybaseDevPersona } from "./local-dev-personas.js";
+import type { RaybaseHostIdentity } from "./host-auth.js";
+export declare class RaybaseRuntimeProfileConfigurationError extends Error {
+    readonly code: "RAYBASE_RUNTIME_PROFILE_CONFIGURATION";
+    constructor(message: string);
+}
+export type RaybaseRuntimeClaims = {
+    scopeId?: string | null;
+    identityId?: string | null;
+    policySubjectId?: string | null;
+    membershipId?: string | null;
+    organizationId?: string | null;
+    appId?: string | null;
+    [key: string]: unknown;
+};
+export type RaybasePersistedRuntimeClaims = Record<string, unknown> & {
+    scopeId?: string;
+    organizationId?: string;
+    appId?: string;
+};
+export type RaybaseRuntimeSubjects = {
+    identityId: string;
+    policySubjectId: string;
+    membershipId?: string | null;
+};
+export type RaybaseRuntimeScope = {
+    scopeId: string;
+    subjects?: RaybaseRuntimeSubjects;
+    organizationId?: string | null;
+    appId?: string | null;
+    claims?: RaybaseRuntimeClaims;
+};
+export type RaybaseResourcePurpose = "files" | "agent-transcript" | "backup" | "audit" | "retrieval" | "agent-history" | (string & {});
+export type RaybaseResourceAddress = {
+    purpose: RaybaseResourcePurpose;
+    scope?: RaybaseRuntimeScope | null;
+    segments?: readonly string[];
+};
+export type RaybaseRuntimeResourceProfile = {
+    objectKey?(address: RaybaseResourceAddress): string;
+    assertObjectKey?(address: RaybaseResourceAddress & {
+        key: string;
+    }): void;
+    vectorizeNamespace?(address: Omit<RaybaseResourceAddress, "segments">): string | Promise<string>;
+};
+export type RaybaseRuntimeSubjectProfile = {
+    identitySubjectId?(user: RaybaseUser): string;
+    policySubjectId?(user: RaybaseUser): string;
+};
+export type RaybaseRuntimeRecipient = {
+    subjectId: string;
+    email?: string | null;
+    name?: string | null;
+    role?: string | null;
+};
+export type RaybaseRuntimeRecipientQuery = {
+    kind: "user";
+    subjectId: string;
+} | {
+    kind: "role";
+    role: string;
+} | {
+    kind: "operator";
+    role?: string | null;
+};
+export type RaybaseEnsureLocalDevPersona<Env extends object = object> = (persona: RaybaseDevPersona, request: Request, env: Env, scope: RaybaseRuntimeScope | null) => Promise<RaybaseUser>;
+export type RaybaseRuntimeDirectoryProfile<Env extends object = object> = {
+    /**
+     * Local-development-only directory operation. First-party layered runtimes
+     * provision/project the configured persona in their identity owner without
+     * mutating the selected app store. Implementations must be idempotent for the
+     * same persona and opaque runtime scope.
+     */
+    ensureLocalDevPersona?: RaybaseEnsureLocalDevPersona<Env>;
+    resolvePolicySubject?(subjectId: string, env: Env, scope?: RaybaseRuntimeScope | null): Promise<RaybaseUser | null>;
+    notificationRecipients?(query: RaybaseRuntimeRecipientQuery, env: Env, scope?: RaybaseRuntimeScope | null): Promise<RaybaseRuntimeRecipient[]>;
+};
+export type RaybaseRuntimeScopeResolver<Env extends object = object> = {
+    fromRequest?(request: Request, env: Env, input?: {
+        user?: RaybaseUser | null;
+        session?: unknown;
+    }): RaybaseRuntimeScope | null | Promise<RaybaseRuntimeScope | null>;
+    fromClaims?(env: Env, claims: RaybaseRuntimeClaims): RaybaseRuntimeScope | null | Promise<RaybaseRuntimeScope | null>;
+    /**
+     * Projects the current runtime scope into persisted work. Core deliberately
+     * leaves queue payloads unchanged; first-party layered runtimes stamp the
+     * immutable scope needed to reconstruct the same store at consume time.
+     */
+    toClaims?(env: Env, scope: RaybaseRuntimeScope): RaybaseRuntimeClaims;
+    /**
+     * Enumerates scopes for requestless scheduled work. Core has one default
+     * scope; layered runtimes may resolve their own immutable scope IDs.
+     */
+    scheduled?(env: Env): Iterable<RaybaseRuntimeScope> | AsyncIterable<RaybaseRuntimeScope> | Promise<Iterable<RaybaseRuntimeScope> | AsyncIterable<RaybaseRuntimeScope>>;
+};
+export type RaybaseRuntimeSession = {
+    user: RaybaseUser;
+    session: Record<string, unknown>;
+    headers?: Headers;
+};
+export type RaybaseRuntimeSessionProfile<Env extends object = object> = {
+    resolve(request: Request, env: Env, input?: {
+        scope?: RaybaseRuntimeScope | null;
+    }): RaybaseRuntimeSession | null | Promise<RaybaseRuntimeSession | null>;
+    /**
+     * Turns a person the app's `hostAuth` vouched for into this runtime's
+     * session. Core calls it only where it would use `hostAuth` itself: on agent
+     * routes, after the app's `resolve` hook returned an identity and `resolve`
+     * above found no session. A profile that resolves its own sessions but
+     * leaves this out ignores `hostAuth`, because it owns identity and Core's
+     * own host users would mean nothing to it.
+     */
+    host?(input: {
+        request: Request;
+        env: Env;
+        scope: RaybaseRuntimeScope | null;
+        provider: string;
+        identity: RaybaseHostIdentity;
+    }): RaybaseRuntimeSession | null | Promise<RaybaseRuntimeSession | null>;
+};
+export type RaybaseRuntimeDatabaseProfile = {
+    create<const Schema extends RaybaseSchema>(env: RaybaseDbEnv, schema: Schema, appMigrations?: DoMigration[], options?: {
+        realtime?: ResolvedRealtimeConfig;
+        afterMutation?: DataContext["afterMutation"];
+        systemTables?: RaybaseSystemTable[];
+        controlSystemTables?: RaybaseSystemTable[];
+    }): RaybaseDatabaseRuntime<Schema>;
+    dataStub?(env: RaybaseDbEnv): RaybaseDatabaseObjectStub;
+};
+export type RaybaseRuntimeDurableObjectProfile = {
+    /**
+     * Resolves the stable name passed to the Agent chat namespace. Core returns
+     * the existing instance key byte-for-byte.
+     */
+    agentConversationName?(input: {
+        scope?: RaybaseRuntimeScope | null;
+        instanceKey: string;
+        agentName: string;
+        conversationId: string;
+    }): string;
+};
+export type RaybaseRuntimeProfile<Env extends object = object> = {
+    name: string;
+    database?: RaybaseRuntimeDatabaseProfile;
+    durableObjects?: RaybaseRuntimeDurableObjectProfile;
+    resources?: RaybaseRuntimeResourceProfile;
+    subjects?: RaybaseRuntimeSubjectProfile;
+    directory?: RaybaseRuntimeDirectoryProfile<Env>;
+    scope?: RaybaseRuntimeScopeResolver<Env>;
+    session?: RaybaseRuntimeSessionProfile<Env>;
+    /** First-party scoped distributions may expose a scoped settings layer. */
+    settings?: {
+        allowScopedDefinitions?: boolean;
+        appId?(env: Env): string;
+    };
+    /** Lets a first-party shell own fleet-wide maintenance orchestration. */
+    maintenance?: {
+        auditArchive?: boolean;
+        backups?: boolean;
+    };
+};
+/** Closed single-tenant runtime used by the normal Core app constructor. */
+export declare const raybaseCoreRuntimeProfile: RaybaseRuntimeProfile<object>;
+export declare function bindRaybaseRuntimeProfile<Env extends object>(env: Env, profile: RaybaseRuntimeProfile<Env>): Env;
+export declare function raybaseRuntimeProfile(env: unknown): RaybaseRuntimeProfile | null;
+export declare function raybaseRuntimeSettingsAppId<Env extends object>(env: Env): string;
+export declare function bindRaybaseRuntimeScope<Env extends object>(env: Env, scope: RaybaseRuntimeScope): Env;
+/** Records the runtime env a data Durable Object executor was built for. */
+export declare function bindRaybaseExecutorEnv<Executor extends object>(executor: Executor, env: object): Executor;
+/**
+ * The runtime env a store executor such as an action's `ctx.control` was built
+ * for, so a first-party layer can tell which scope it belongs to.
+ */
+export declare function raybaseExecutorEnv(executor: unknown): object | null;
+export declare function raybaseRuntimeScope(env: unknown): RaybaseRuntimeScope | null;
+export declare function createRaybaseRuntimeEnv<Env extends object>(env: Env, profile: RaybaseRuntimeProfile<Env>, scope?: RaybaseRuntimeScope | null): Env;
+export declare function identitySubjectId(user: RaybaseUser): string;
+export declare function runtimeIdentitySubjectId(env: unknown, user: RaybaseUser): string;
+export declare function runtimePolicySubjectId(env: unknown, user: RaybaseUser): string;
+export declare function resolveRaybaseRuntimeScopeFromClaims<Env extends object>(env: Env, claims: RaybaseRuntimeClaims): Promise<RaybaseRuntimeScope>;
+export declare function raybaseRuntimeScopeClaims(env: unknown): RaybasePersistedRuntimeClaims;
+export declare function mergeRaybaseRuntimeClaims<T extends Record<string, unknown>>(message: T, claims: RaybaseRuntimeClaims): T & RaybasePersistedRuntimeClaims;
+export declare function withRaybaseRuntimeClaims<T extends Record<string, unknown>>(env: unknown, message: T): T & RaybasePersistedRuntimeClaims;
+export declare function raybaseVectorizeNamespace(env: unknown, purpose: RaybaseResourcePurpose, scope?: RaybaseRuntimeScope | null, fallback?: string): Promise<string>;
+export declare function raybaseObjectKey(env: unknown, purpose: RaybaseResourcePurpose, segments: readonly string[], scope?: RaybaseRuntimeScope | null, fallback?: () => string): string;
+export declare function assertRaybaseObjectKey(env: unknown, purpose: RaybaseResourcePurpose, key: string, scope?: RaybaseRuntimeScope | null): void;
+export declare function raybaseAddressSegment(value: string): string;
+export declare function raybaseAgentConversationName(env: unknown, input: {
+    instanceKey: string;
+    agentName: string;
+    conversationId: string;
+    scope?: RaybaseRuntimeScope | null;
+}): string;
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EACV,WAAW,EACX,yBAAyB,EACzB,sBAAsB,EACtB,YAAY,EACb,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,qBAAa,uCAAwC,SAAQ,KAAK;IAChE,QAAQ,CAAC,IAAI,EAAG,uCAAuC,CAAU;gBAErD,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B,OAAO,GACP,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,WAAW,GACX,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,sBAAsB,CAAC;IAChC,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAAC;IACpD,eAAe,CAAC,CAAC,OAAO,EAAE,sBAAsB,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,kBAAkB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,UAAU,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClG,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,iBAAiB,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAC9C,eAAe,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE/C,MAAM,MAAM,4BAA4B,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,IAAI,CACtE,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,mBAAmB,GAAG,IAAI,KAC9B,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B,MAAM,MAAM,8BAA8B,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,IAAI;IACxE;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC1D,oBAAoB,CAAC,CACnB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,GAAG,EACR,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,GACjC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC/B,sBAAsB,CAAC,CACrB,KAAK,EAAE,4BAA4B,EACnC,GAAG,EAAE,GAAG,EACR,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,GACjC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,2BAA2B,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,IAAI;IACrE,WAAW,CAAC,CACV,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GACvD,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACpE,UAAU,CAAC,CACT,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,oBAAoB,GAC3B,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACpE;;;;OAIG;IACH,QAAQ,CAAC,CACP,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,mBAAmB,GACzB,oBAAoB,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,QAAQ,CAAC,mBAAmB,CAAC,GAAG,aAAa,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC;CACxK,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,4BAA4B,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,IAAI;IACtE,OAAO,CACL,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;KAAE,GAC7C,qBAAqB,GAAG,IAAI,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACxE;;;;;;;OAOG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,GAAG,CAAC;QACT,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,mBAAmB,CAAC;KAC/B,GAAG,qBAAqB,GAAG,IAAI,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CAC1E,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,aAAa,EACvC,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,WAAW,EAAE,EAC7B,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,sBAAsB,CAAC;QAClC,aAAa,CAAC,EAAE,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7C,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACpC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;KAC5C,GACA,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,CAAC,CAAC,GAAG,EAAE,YAAY,GAAG,yBAAyB,CAAC;CACzD,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C;;;OAGG;IACH,qBAAqB,CAAC,CAAC,KAAK,EAAE;QAC5B,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,IAAI;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,6BAA6B,CAAC;IACzC,cAAc,CAAC,EAAE,kCAAkC,CAAC;IACpD,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,8BAA8B,CAAC,GAAG,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,EAAE;QACT,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC;KAC1B,CAAC;IACF,yEAAyE;IACzE,WAAW,CAAC,EAAE;QACZ,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;CACH,CAAC;AASF,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,EAAE,qBAAqB,CAAC,MAAM,CAuBnE,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,GAAG,SAAS,MAAM,EAC1D,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,GAClC,GAAG,CAWL;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,GAAG,IAAI,CAKhF;AAED,wBAAgB,2BAA2B,CAAC,GAAG,SAAS,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAGhF;AAED,wBAAgB,uBAAuB,CAAC,GAAG,SAAS,MAAM,EACxD,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,mBAAmB,GACzB,GAAG,CAOL;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,QAAQ,SAAS,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAIzG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAKnE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAK5E;AAED,wBAAgB,uBAAuB,CAAC,GAAG,SAAS,MAAM,EACxD,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,EACnC,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,GACjC,GAAG,CAiBL;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAE3D;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAEhF;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,CAE9E;AAED,wBAAsB,oCAAoC,CAAC,GAAG,SAAS,MAAM,EAC3E,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAoB9B;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,6BAA6B,CAQrF;AAED,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzE,OAAO,EAAE,CAAC,EACV,MAAM,EAAE,oBAAoB,GAC3B,CAAC,GAAG,6BAA6B,CAkBnC;AAED,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxE,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,CAAC,GACT,CAAC,GAAG,6BAA6B,CAEnC;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,sBAAsB,EAC/B,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,EAClC,QAAQ,SAAY,GACnB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,EAClC,QAAQ,CAAC,EAAE,MAAM,MAAM,GACtB,MAAM,CAMR;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,sBAAsB,EAC/B,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,GACjC,IAAI,CAEN;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE;IACL,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACpC,GACA,MAAM,CAMR"}

package/dist/platform.js

@@ -0,0 +1,196 @@
+import { defaultSettingsAppId } from "./settings.js";
+export class RaybaseRuntimeProfileConfigurationError extends Error {
+    code = "RAYBASE_RUNTIME_PROFILE_CONFIGURATION";
+    constructor(message) {
+        super(message);
+        this.name = "RaybaseRuntimeProfileConfigurationError";
+    }
+}
+const runtimeProfiles = new WeakMap();
+const runtimeScopes = new WeakMap();
+const executorEnvs = new WeakMap();
+const runtimeProfileSymbol = Symbol.for("@raybase/core.runtime-profile");
+const runtimeScopeSymbol = Symbol.for("@raybase/core.runtime-scope");
+const executorEnvSymbol = Symbol.for("@raybase/core.executor-env");
+/** Closed single-tenant runtime used by the normal Core app constructor. */
+export const raybaseCoreRuntimeProfile = {
+    name: "raybase-core",
+    scope: {
+        fromRequest() {
+            return { scopeId: "default" };
+        },
+        fromClaims(_env, claims) {
+            return { scopeId: "default", claims };
+        },
+        scheduled() {
+            return [{ scopeId: "default" }];
+        }
+    },
+    durableObjects: {
+        agentConversationName({ instanceKey }) {
+            return instanceKey;
+        }
+    },
+    settings: {
+        appId() {
+            return defaultSettingsAppId;
+        }
+    }
+};
+export function bindRaybaseRuntimeProfile(env, profile) {
+    const current = runtimeProfiles.get(env);
+    if (current && current !== profile && current.name !== profile.name) {
+        throw new Error(`Raybase runtime environment is already bound to profile ${current.name}`);
+    }
+    runtimeProfiles.set(env, profile);
+    Object.defineProperty(env, runtimeProfileSymbol, {
+        configurable: true,
+        value: profile
+    });
+    return env;
+}
+export function raybaseRuntimeProfile(env) {
+    if (!env || typeof env !== "object")
+        return null;
+    return runtimeProfiles.get(env)
+        ?? env[runtimeProfileSymbol]
+        ?? null;
+}
+export function raybaseRuntimeSettingsAppId(env) {
+    const profile = raybaseRuntimeProfile(env);
+    return profile?.settings?.appId?.(env) ?? defaultSettingsAppId;
+}
+export function bindRaybaseRuntimeScope(env, scope) {
+    runtimeScopes.set(env, scope);
+    Object.defineProperty(env, runtimeScopeSymbol, {
+        configurable: true,
+        value: scope
+    });
+    return env;
+}
+/** Records the runtime env a data Durable Object executor was built for. */
+export function bindRaybaseExecutorEnv(executor, env) {
+    executorEnvs.set(executor, env);
+    Object.defineProperty(executor, executorEnvSymbol, { configurable: true, value: env });
+    return executor;
+}
+/**
+ * The runtime env a store executor such as an action's `ctx.control` was built
+ * for, so a first-party layer can tell which scope it belongs to.
+ */
+export function raybaseExecutorEnv(executor) {
+    if (!executor || typeof executor !== "object")
+        return null;
+    return executorEnvs.get(executor)
+        ?? executor[executorEnvSymbol]
+        ?? null;
+}
+export function raybaseRuntimeScope(env) {
+    if (!env || typeof env !== "object")
+        return null;
+    return runtimeScopes.get(env)
+        ?? env[runtimeScopeSymbol]
+        ?? null;
+}
+export function createRaybaseRuntimeEnv(env, profile, scope) {
+    const scoped = Object.create(env);
+    bindRaybaseRuntimeProfile(scoped, profile);
+    // Explicit null means "new root entry point": do not inherit a stale scope
+    // from an environment object reused by a Worker test/runtime. Omitting the
+    // argument preserves scope through nested first-party composition.
+    const inheritedScope = arguments.length >= 3 ? scope : raybaseRuntimeScope(env);
+    if (inheritedScope) {
+        bindRaybaseRuntimeScope(scoped, inheritedScope);
+    }
+    else if (arguments.length >= 3) {
+        // Shadow any scope symbol inherited through Object.create(env).
+        Object.defineProperty(scoped, runtimeScopeSymbol, {
+            configurable: true,
+            value: null
+        });
+    }
+    return scoped;
+}
+export function identitySubjectId(user) {
+    return user.id;
+}
+export function runtimeIdentitySubjectId(env, user) {
+    return raybaseRuntimeProfile(env)?.subjects?.identitySubjectId?.(user) ?? identitySubjectId(user);
+}
+export function runtimePolicySubjectId(env, user) {
+    return raybaseRuntimeProfile(env)?.subjects?.policySubjectId?.(user) ?? user.id;
+}
+export async function resolveRaybaseRuntimeScopeFromClaims(env, claims) {
+    const profile = raybaseRuntimeProfile(env);
+    const resolved = await profile?.scope?.fromClaims?.(env, claims);
+    if (resolved)
+        return resolved;
+    const scopeId = claims.scopeId ?? claims.organizationId ?? "default";
+    return {
+        scopeId,
+        organizationId: claims.organizationId ?? null,
+        appId: claims.appId ?? null,
+        claims,
+        ...(claims.identityId && claims.policySubjectId
+            ? {
+                subjects: {
+                    identityId: claims.identityId,
+                    policySubjectId: claims.policySubjectId,
+                    membershipId: claims.membershipId ?? null
+                }
+            }
+            : {})
+    };
+}
+export function raybaseRuntimeScopeClaims(env) {
+    const scope = raybaseRuntimeScope(env);
+    const resolver = raybaseRuntimeProfile(env)?.scope;
+    if (!scope || !resolver?.toClaims || !env || typeof env !== "object")
+        return {};
+    return Object.fromEntries(Object.entries(resolver.toClaims(env, scope))
+        .filter(([, value]) => value !== null && value !== undefined));
+}
+export function mergeRaybaseRuntimeClaims(message, claims) {
+    for (const key of ["scopeId", "organizationId", "appId"]) {
+        const messageValue = message[key];
+        const claimValue = claims[key];
+        if (messageValue !== undefined
+            && messageValue !== null
+            && claimValue !== undefined
+            && claimValue !== null
+            && messageValue !== claimValue) {
+            throw new Error(`Refusing to enqueue Raybase work for a different runtime ${key}`);
+        }
+    }
+    const persistedClaims = Object.fromEntries(Object.entries(claims).filter(([, value]) => value !== null && value !== undefined));
+    return { ...message, ...persistedClaims };
+}
+export function withRaybaseRuntimeClaims(env, message) {
+    return mergeRaybaseRuntimeClaims(message, raybaseRuntimeScopeClaims(env));
+}
+export async function raybaseVectorizeNamespace(env, purpose, scope, fallback = "default") {
+    return await raybaseRuntimeProfile(env)?.resources?.vectorizeNamespace?.({ purpose, scope }) ?? fallback;
+}
+export function raybaseObjectKey(env, purpose, segments, scope, fallback) {
+    const address = { purpose, scope, segments };
+    const resolved = raybaseRuntimeProfile(env)?.resources?.objectKey?.(address);
+    if (resolved)
+        return resolved;
+    if (fallback)
+        return fallback();
+    return segments.map(raybaseAddressSegment).join("/");
+}
+export function assertRaybaseObjectKey(env, purpose, key, scope) {
+    raybaseRuntimeProfile(env)?.resources?.assertObjectKey?.({ purpose, scope, key });
+}
+export function raybaseAddressSegment(value) {
+    return encodeURIComponent(value);
+}
+export function raybaseAgentConversationName(env, input) {
+    const scope = input.scope === undefined ? raybaseRuntimeScope(env) : input.scope;
+    return raybaseRuntimeProfile(env)?.durableObjects?.agentConversationName?.({
+        ...input,
+        scope
+    }) ?? input.instanceKey;
+}
+//# sourceMappingURL=platform.js.map

package/dist/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,OAAO,uCAAwC,SAAQ,KAAK;IACvD,IAAI,GAAG,uCAAgD,CAAC;IAEjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yCAAyC,CAAC;IACxD,CAAC;CACF;AAyMD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAiC,CAAC;AACrE,MAAM,aAAa,GAAG,IAAI,OAAO,EAA+B,CAAC;AACjE,MAAM,YAAY,GAAG,IAAI,OAAO,EAAkB,CAAC;AACnD,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AACzE,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEnE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAkC;IACtE,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE;QACL,WAAW;YACT,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAChC,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,MAAM;YACrB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QACD,SAAS;YACP,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAClC,CAAC;KACF;IACD,cAAc,EAAE;QACd,qBAAqB,CAAC,EAAE,WAAW,EAAE;YACnC,OAAO,WAAW,CAAC;QACrB,CAAC;KACF;IACD,QAAQ,EAAE;QACR,KAAK;YACH,OAAO,oBAAoB,CAAC;QAC9B,CAAC;KACF;CACF,CAAC;AAEF,MAAM,UAAU,yBAAyB,CACvC,GAAQ,EACR,OAAmC;IAEnC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,2DAA2D,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,OAAgC,CAAC,CAAC;IAC3D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,oBAAoB,EAAE;QAC/C,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,eAAe,CAAC,GAAG,CAAC,GAAa,CAAC;WACnC,GAAyD,CAAC,oBAAoB,CAAC;WAChF,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAqB,GAAQ;IACtE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAsC,CAAC;IAChF,OAAO,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAAQ,EACR,KAA0B;IAE1B,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,kBAAkB,EAAE;QAC7C,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAA0B,QAAkB,EAAE,GAAW;IAC7F,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;WAC3B,QAA+C,CAAC,iBAAiB,CAAC;WACnE,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,aAAa,CAAC,GAAG,CAAC,GAAa,CAAC;WACjC,GAAuD,CAAC,kBAAkB,CAAC;WAC5E,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAAQ,EACR,OAAmC,EACnC,KAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAQ,CAAC;IACzC,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAChF,IAAI,cAAc,EAAE,CAAC;QACnB,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACjC,gEAAgE;QAChE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE;YAChD,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAiB;IACjD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY,EAAE,IAAiB;IACtE,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,IAAiB;IACpE,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,GAAQ,EACR,MAA4B;IAE5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAsC,CAAC;IAChF,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC;IACrE,OAAO;QACL,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;QAC7C,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;QAC3B,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe;YAC7C,CAAC,CAAC;gBACE,QAAQ,EAAE;oBACR,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;iBAC1C;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAChF,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAC/B,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAU,EACV,MAA4B;IAE5B,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAU,EAAE,CAAC;QAClE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IACE,YAAY,KAAK,SAAS;eACvB,YAAY,KAAK,IAAI;eACrB,UAAU,KAAK,SAAS;eACxB,UAAU,KAAK,IAAI;eACnB,YAAY,KAAK,UAAU,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,GAAG,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CACnD,CAAC;IACnC,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,GAAY,EACZ,OAAU;IAEV,OAAO,yBAAyB,CAAC,OAAO,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAY,EACZ,OAA+B,EAC/B,KAAkC,EAClC,QAAQ,GAAG,SAAS;IAEpB,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,QAAQ,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAY,EACZ,OAA+B,EAC/B,QAA2B,EAC3B,KAAkC,EAClC,QAAuB;IAEvB,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,QAAQ;QAAE,OAAO,QAAQ,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,OAA+B,EAC/B,GAAW,EACX,KAAkC;IAElC,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,GAAY,EACZ,KAKC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACjF,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;QACzE,GAAG,KAAK;QACR,KAAK;KACN,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC;AAC1B,CAAC"}

package/dist/policies.d.ts

@@ -0,0 +1,115 @@
+import type { RaybaseAdminRole } from "./admin-role.js";
+import type { RaybasePrincipal } from "./principal.js";
+export type BuiltInRole = "user";
+export type RaybaseRole = BuiltInRole | (string & {});
+export type RaybaseDefinedRoles<Roles extends readonly string[] = readonly string[]> = Roles & {
+    readonly __raybaseRolesBrand: unique symbol;
+};
+export type RaybaseDefinedRoleName<Roles extends readonly string[]> = BuiltInRole | Roles[number];
+export type RaybaseUser = {
+    /** Policy subject. Core users omit membershipId, so this remains the user id. */
+    id: string;
+    /** Stable person/identity subject. First-party layered runtimes may project it explicitly. */
+    identityId?: string;
+    /** Scoped policy subject. Core leaves this unset; Pro supplies its membership id. */
+    membershipId?: string;
+    /** Opaque runtime scope metadata. Core leaves this unset. */
+    organizationId?: string;
+    email: string;
+    name: string;
+    operatorRole?: RaybaseAdminRole;
+    /** First-party layered runtimes may retain their shell-level role projection. */
+    role?: RaybaseRole;
+    /** First-party layered runtimes may expose an operator grant without changing Core auth. */
+    operatorGrant?: "owner" | "operator";
+    appRoles?: RaybaseRole[];
+    emailVerified?: boolean;
+    disabled?: boolean;
+};
+export declare function policySubjectId(user: RaybaseUser): string;
+export type PolicyContext = {
+    user: RaybaseUser;
+    /** Server-owned acting principal. Browser clients can never construct this context. */
+    principal?: RaybasePrincipal;
+    row?: Record<string, unknown> | null;
+    newRow?: Record<string, unknown> | null;
+    action: "read" | "create" | "update" | "delete";
+    adminOverride?: boolean;
+};
+export type PolicyExpression = {
+    kind: "allowAll";
+} | {
+    kind: "denyAll";
+} | {
+    kind: "role";
+    role: RaybaseRole;
+} | {
+    kind: "owns";
+    column: string;
+} | {
+    kind: "servicePrincipal";
+    service: string;
+} | {
+    kind: "operator";
+} | {
+    kind: "anyOf";
+    policies: PolicyExpression[];
+} | {
+    kind: "allOf";
+    policies: PolicyExpression[];
+} | {
+    kind: "not";
+    policy: PolicyExpression;
+};
+export type ReadPolicyScope = "allowed" | "denied" | "row_dependent";
+export type SerializedPolicyExpression = {
+    kind: "allowAll";
+} | {
+    kind: "denyAll";
+} | {
+    kind: "role";
+    role: RaybaseRole;
+} | {
+    kind: "owns";
+    column: string;
+} | {
+    kind: "servicePrincipal";
+    service: string;
+} | {
+    kind: "operator";
+} | {
+    kind: "anyOf";
+    policies: SerializedPolicyExpression[];
+} | {
+    kind: "allOf";
+    policies: SerializedPolicyExpression[];
+} | {
+    kind: "not";
+    policy: SerializedPolicyExpression;
+};
+export declare function defineRoles<const Roles extends readonly string[]>(roles: Roles): RaybaseDefinedRoles<Roles>;
+export declare function role<const Roles extends readonly string[]>(roles: RaybaseDefinedRoles<Roles>, roleName: RaybaseDefinedRoleName<Roles>): PolicyExpression;
+export declare function role(roleName: RaybaseRole): PolicyExpression;
+export declare function owns(column: string): PolicyExpression;
+export declare function fromService(service: string): PolicyExpression;
+export declare function operator(): PolicyExpression;
+export declare function anyOf(...policies: PolicyExpression[]): PolicyExpression;
+export declare function allOf(...policies: PolicyExpression[]): PolicyExpression;
+export declare function not(policy: PolicyExpression): PolicyExpression;
+export declare const allowAll: Readonly<{
+    readonly kind: "allowAll";
+}>;
+export declare const denyAll: Readonly<{
+    readonly kind: "denyAll";
+}>;
+export declare function serializePolicyExpression(policy: PolicyExpression | undefined): SerializedPolicyExpression | undefined;
+export declare function roleAllows(userRole: RaybaseRole, required: RaybaseRole): boolean;
+export declare function evaluatePolicy(policy: PolicyExpression | undefined, ctx: PolicyContext): boolean;
+/**
+ * Reduce a read policy using only principal-level context. This deliberately
+ * does not inspect a row: `row_dependent` means the normal row policy still
+ * needs to be applied by the caller.
+ */
+export declare function classifyReadPolicy(policy: PolicyExpression | undefined, ctx: Pick<PolicyContext, "user" | "principal" | "adminOverride">): ReadPolicyScope;
+export declare function describePolicy(policy: PolicyExpression | undefined): string;
+//# sourceMappingURL=policies.d.ts.map

package/dist/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../src/policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AACjC,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AACtD,MAAM,MAAM,mBAAmB,CAAC,KAAK,SAAS,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,IAAI,KAAK,GAAG;IAC7F,QAAQ,CAAC,mBAAmB,EAAE,OAAO,MAAM,CAAC;CAC7C,CAAC;AACF,MAAM,MAAM,sBAAsB,CAAC,KAAK,SAAS,SAAS,MAAM,EAAE,IAAI,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAElG,MAAM,MAAM,WAAW,GAAG;IACxB,iFAAiF;IACjF,EAAE,EAAE,MAAM,CAAC;IACX,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iFAAiF;IACjF,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAEzD;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,uFAAuF;IACvF,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAChD,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,eAAe,CAAC;AAErE,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,0BAA0B,EAAE,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,0BAA0B,EAAE,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAA;CAAE,CAAC;AAExD,wBAAgB,WAAW,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAE3G;AAED,wBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,sBAAsB,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC;AAC1J,wBAAgB,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,gBAAgB,CAAC;AAO9D,wBAAgB,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAErD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAE7D;AAED,wBAAgB,QAAQ,IAAI,gBAAgB,CAE3C;AAED,wBAAgB,KAAK,CAAC,GAAG,QAAQ,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,CAEvE;AAED,wBAAgB,KAAK,CAAC,GAAG,QAAQ,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,CAEvE;AAED,wBAAgB,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAE9D;AAED,eAAO,MAAM,QAAQ;;EAA+C,CAAC;AACrE,eAAO,MAAM,OAAO;;EAA8C,CAAC;AAEnE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,0BAA0B,GAAG,SAAS,CAmBtH;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAEhF;AAOD,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CA0BhG;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,CAAC,GAC/D,eAAe,CAmCjB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAsB3E"}