@raybase/core 0.0.2 → 0.3.3

package/dist/storage-client.js

@@ -0,0 +1,469 @@
+import { doExecutor } from "./db.js";
+import { sha256Hex } from "./internal.js";
+import { assertRaybaseObjectKey, raybaseObjectKey, raybaseRuntimeScope, runtimePolicySubjectId } from "./platform.js";
+import { evaluatePolicy } from "./policies.js";
+import { nowIso, q, randomId } from "./sql.js";
+import { ensureFilesTable, raybaseFilesTableName, storageHardMaxSizeBytes, validateStorageConfig } from "./storage.js";
+export class StorageError extends Error {
+    status;
+    constructor(message, status = 400) {
+        super(message);
+        this.status = status;
+    }
+}
+const hiddenStatuses = new Set(["uploading", "deleting", "deleted", "quarantined"]);
+function defaultBackend(env) {
+    const executor = doExecutor(env, { tables: {} });
+    return {
+        executorFor() {
+            return executor;
+        }
+    };
+}
+function executorFor(db, ctx) {
+    return "executorFor" in db ? db.executorFor(raybaseFilesTableName, ctx) : db;
+}
+function bucketFor(storage, bucketName) {
+    const bucket = storage.buckets[bucketName];
+    if (!bucket)
+        throw new StorageError(`Unknown file bucket: ${bucketName}`, 404);
+    return bucket;
+}
+function bucketMaxSize(bucket) {
+    if (!bucket.maxSizeBytes)
+        throw new StorageError(`Bucket ${bucket.name} must set maxSizeBytes`, 500);
+    return Math.min(bucket.maxSizeBytes, storageHardMaxSizeBytes);
+}
+function can(bucket, action, ctx, row, newRow) {
+    return evaluatePolicy(bucket.policies?.[action], {
+        user: ctx.user,
+        row,
+        newRow,
+        action,
+        adminOverride: ctx.adminOverride
+    });
+}
+function parseMetadata(value) {
+    if (!value)
+        return null;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return value;
+    }
+}
+function normalizeFile(row) {
+    return {
+        id: row.id,
+        bucket: row.bucket,
+        filename: row.filename,
+        contentType: row.contentType,
+        size: Number(row.size ?? 0),
+        etag: row.etag,
+        checksum: row.checksum,
+        status: row.status,
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+        deletedAt: row.deletedAt,
+        objectDeletedAt: row.objectDeletedAt,
+        deleteError: row.deleteError,
+        metadata: parseMetadata(row.metadata)
+    };
+}
+function normalizeForPolicy(row) {
+    return { ...normalizeFile(row), key: row.key };
+}
+function buildR2Key(bucketName, fileId) {
+    return `files/v1/${bucketName}/${fileId}`;
+}
+function safeFilename(value) {
+    const text = typeof value === "string" ? value.trim() : "";
+    const withoutControls = text.replace(/[\r\n]/g, " ").replace(/[/\\]/g, "_").trim();
+    return withoutControls || "file";
+}
+function filenameFromContentDisposition(value) {
+    if (!value)
+        return "";
+    const utf8 = value.match(/filename\*\s*=\s*UTF-8''([^;]+)/i)?.[1];
+    if (utf8) {
+        try {
+            return decodeURIComponent(utf8);
+        }
+        catch {
+            return utf8;
+        }
+    }
+    return value.match(/filename\s*=\s*"([^"]+)"/i)?.[1] ?? value.match(/filename\s*=\s*([^;]+)/i)?.[1]?.trim() ?? "";
+}
+async function parseRequestUpload(request) {
+    const contentType = request.headers.get("content-type") ?? "";
+    if (contentType.toLowerCase().includes("multipart/form-data")) {
+        const form = await request.formData();
+        const file = form.get("file");
+        if (!(file instanceof Blob))
+            throw new StorageError('multipart/form-data uploads require a "file" field');
+        const metadataValue = form.get("metadata");
+        let metadata = null;
+        if (typeof metadataValue === "string" && metadataValue.trim()) {
+            metadata = JSON.parse(metadataValue);
+        }
+        return {
+            body: file,
+            filename: safeFilename("name" in file ? file.name : "file"),
+            contentType: file.type || "application/octet-stream",
+            metadata
+        };
+    }
+    const filename = request.headers.get("x-raybase-filename") || filenameFromContentDisposition(request.headers.get("content-disposition")) || "file";
+    return {
+        body: request.body ?? new Uint8Array(),
+        filename: safeFilename(filename),
+        contentType: contentType.split(";")[0]?.trim() || "application/octet-stream",
+        metadata: null
+    };
+}
+async function parseUpload(input) {
+    if (input instanceof Request)
+        return parseRequestUpload(input);
+    if (input instanceof Blob) {
+        return {
+            body: input,
+            filename: safeFilename("name" in input ? input.name : "file"),
+            contentType: input.type || "application/octet-stream",
+            metadata: null
+        };
+    }
+    return {
+        body: input.body,
+        filename: safeFilename(input.filename),
+        contentType: input.contentType || (input.body instanceof Blob ? input.body.type : "") || "application/octet-stream",
+        metadata: input.metadata ?? null
+    };
+}
+function contentTypeAllowed(bucket, contentType) {
+    if (!bucket.accept?.length)
+        return true;
+    const normalized = contentType.toLowerCase();
+    return bucket.accept.some((entry) => {
+        const allowed = entry.toLowerCase();
+        if (allowed.endsWith("/*"))
+            return normalized.startsWith(allowed.slice(0, -1));
+        return normalized === allowed;
+    });
+}
+function uint8FromBufferSource(value) {
+    if (value instanceof ArrayBuffer)
+        return new Uint8Array(value);
+    return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+}
+async function readStreamAtMost(stream, maxBytes) {
+    const reader = stream.getReader();
+    const chunks = [];
+    let size = 0;
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            size += next.value.byteLength;
+            if (size > maxBytes)
+                throw new StorageError(`File exceeds the ${maxBytes} byte bucket limit`, 413);
+            chunks.push(next.value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const out = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return out;
+}
+async function readBodyAtMost(body, maxBytes) {
+    if (body instanceof ReadableStream)
+        return readStreamAtMost(body, maxBytes);
+    if (body instanceof Blob) {
+        if (body.size > maxBytes)
+            throw new StorageError(`File exceeds the ${maxBytes} byte bucket limit`, 413);
+        return new Uint8Array(await body.arrayBuffer());
+    }
+    if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) {
+        const bytes = uint8FromBufferSource(body);
+        if (bytes.byteLength > maxBytes)
+            throw new StorageError(`File exceeds the ${maxBytes} byte bucket limit`, 413);
+        return bytes;
+    }
+    if (typeof body === "string") {
+        const bytes = new TextEncoder().encode(body);
+        if (bytes.byteLength > maxBytes)
+            throw new StorageError(`File exceeds the ${maxBytes} byte bucket limit`, 413);
+        return bytes;
+    }
+    if (body instanceof URLSearchParams || body instanceof FormData) {
+        throw new StorageError("Structured body uploads must use a Request or Blob");
+    }
+    throw new StorageError("Unsupported file upload body");
+}
+function asciiFallbackFilename(filename) {
+    const fallback = filename
+        .replace(/[\r\n"\\/]/g, "_")
+        .replace(/[\x00-\x1F\x7F]/g, "")
+        .replace(/[^\x20-\x7E]/g, "_")
+        .trim();
+    return fallback || "download";
+}
+function encodeRfc5987(value) {
+    return encodeURIComponent(value).replace(/['()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+export function contentDispositionHeader(filename) {
+    const fallback = asciiFallbackFilename(filename);
+    return `attachment; filename="${fallback}"; filename*=UTF-8''${encodeRfc5987(filename || fallback)}`;
+}
+function assertR2(env) {
+    if (!env.RAYBASE_FILES)
+        throw new StorageError("RAYBASE_FILES R2 bucket binding is missing", 500);
+    return env.RAYBASE_FILES;
+}
+async function firstFile(db, bucketName, id) {
+    return db.first(`SELECT * FROM ${q(raybaseFilesTableName)} WHERE "bucket" = ? AND "id" = ?`, [bucketName, id]);
+}
+function visible(row, includeHidden) {
+    return includeHidden || !hiddenStatuses.has(row.status);
+}
+export function createRaybaseStorage(env, storage, db = defaultBackend(env)) {
+    validateStorageConfig(storage);
+    const bucket = assertR2(env);
+    return {
+        for(ctx) {
+            const executor = executorFor(db, ctx);
+            const runtimeScope = () => {
+                const current = raybaseRuntimeScope(env);
+                if (!ctx.adminOverride || !ctx.adminOrgId)
+                    return current;
+                return {
+                    ...current,
+                    scopeId: ctx.adminOrgId,
+                    organizationId: ctx.adminOrgId
+                };
+            };
+            let ensured = null;
+            const ensure = () => (ensured ??= ensureFilesTable(executor));
+            async function list(bucketName, options = {}) {
+                const bucketConfig = bucketFor(storage, bucketName);
+                await ensure();
+                const includeHidden = Boolean(options.includeHidden && ctx.adminOverride);
+                const limit = Math.min(Math.max(options.limit ?? 100, 1), 500);
+                const offset = Math.max(options.offset ?? 0, 0);
+                const where = includeHidden ? `"bucket" = ?` : `"bucket" = ? AND "status" = 'ready'`;
+                const rows = await executor.all(`SELECT * FROM ${q(raybaseFilesTableName)} WHERE ${where} ORDER BY "createdAt" DESC LIMIT ? OFFSET ?`, [bucketName, limit, offset]);
+                const files = rows
+                    .filter((row) => visible(row, includeHidden))
+                    .filter((row) => can(bucketConfig, "read", ctx, normalizeForPolicy(row)))
+                    .map(normalizeFile);
+                return { items: files, count: files.length };
+            }
+            async function get(bucketName, id, options = {}) {
+                const bucketConfig = bucketFor(storage, bucketName);
+                await ensure();
+                const row = await firstFile(executor, bucketName, id);
+                const includeHidden = Boolean(options.includeHidden && ctx.adminOverride);
+                if (!row || !visible(row, includeHidden))
+                    return null;
+                return can(bucketConfig, "read", ctx, normalizeForPolicy(row)) ? normalizeFile(row) : null;
+            }
+            async function create(bucketName, input) {
+                const bucketConfig = bucketFor(storage, bucketName);
+                await ensure();
+                const upload = await parseUpload(input);
+                const id = randomId("file");
+                const scope = runtimeScope();
+                const key = raybaseObjectKey(env, "files", [bucketName, id], scope, () => buildR2Key(bucketName, id));
+                const now = nowIso();
+                const createdBy = runtimePolicySubjectId(env, ctx.user);
+                const candidate = {
+                    id,
+                    bucket: bucketName,
+                    key,
+                    filename: upload.filename,
+                    contentType: upload.contentType,
+                    size: 0,
+                    etag: null,
+                    checksum: null,
+                    status: "uploading",
+                    createdBy,
+                    createdAt: now,
+                    updatedAt: now,
+                    deletedAt: null,
+                    objectDeletedAt: null,
+                    deleteError: null,
+                    metadata: JSON.stringify(upload.metadata ?? null)
+                };
+                if (!can(bucketConfig, "create", ctx, undefined, normalizeForPolicy(candidate))) {
+                    throw new StorageError(`Policy denied create on file bucket ${bucketName}`, 403);
+                }
+                await executor.run(`INSERT INTO ${q(raybaseFilesTableName)}
+           ("id", "bucket", "key", "filename", "contentType", "size", "etag", "checksum", "status", "createdBy", "createdAt", "updatedAt", "metadata")
+           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+                    candidate.id,
+                    candidate.bucket,
+                    candidate.key,
+                    candidate.filename,
+                    candidate.contentType,
+                    candidate.size,
+                    candidate.etag,
+                    candidate.checksum,
+                    candidate.status,
+                    candidate.createdBy,
+                    candidate.createdAt,
+                    candidate.updatedAt,
+                    candidate.metadata
+                ]);
+                if (!contentTypeAllowed(bucketConfig, upload.contentType)) {
+                    throw new StorageError(`Content type ${upload.contentType} is not accepted by bucket ${bucketName}`, 415);
+                }
+                const bytes = await readBodyAtMost(upload.body, bucketMaxSize(bucketConfig));
+                const checksum = await sha256Hex(bytes);
+                const object = await bucket.put(key, bytes, {
+                    httpMetadata: {
+                        contentType: upload.contentType,
+                        contentDisposition: contentDispositionHeader(upload.filename)
+                    },
+                    customMetadata: {
+                        bucket: bucketName,
+                        fileId: id
+                    }
+                });
+                const etag = object?.etag ?? object?.httpEtag ?? null;
+                const updatedAt = nowIso();
+                await executor.run(`UPDATE ${q(raybaseFilesTableName)}
+           SET "size" = ?, "etag" = ?, "checksum" = ?, "status" = 'ready', "updatedAt" = ?
+           WHERE "id" = ?`, [bytes.byteLength, etag, checksum, updatedAt, id]);
+                const ready = await firstFile(executor, bucketName, id);
+                if (!ready)
+                    throw new StorageError("File metadata disappeared after upload", 500);
+                await ctx.audit?.({
+                    action: ctx.adminOverride ? "admin.file.create" : "file.create",
+                    target: { type: bucketName, id },
+                    metadata: { filename: upload.filename, contentType: upload.contentType, size: bytes.byteLength, checksum }
+                });
+                return normalizeFile(ready);
+            }
+            async function download(bucketName, id) {
+                const bucketConfig = bucketFor(storage, bucketName);
+                await ensure();
+                const row = await firstFile(executor, bucketName, id);
+                if (!row || hiddenStatuses.has(row.status))
+                    throw new StorageError("Not found", 404);
+                if (!can(bucketConfig, "read", ctx, normalizeForPolicy(row)))
+                    throw new StorageError("Not found", 404);
+                assertRaybaseObjectKey(env, "files", row.key, runtimeScope());
+                const object = await bucket.get(row.key);
+                if (!object) {
+                    if (ctx.adminOverride) {
+                        await ctx.audit?.({
+                            action: "admin.file.missing_object",
+                            target: { type: bucketName, id },
+                            metadata: { key: row.key }
+                        });
+                    }
+                    throw new StorageError("File object is gone", 410);
+                }
+                if (ctx.adminOverride) {
+                    await ctx.audit?.({
+                        action: "admin.file.download",
+                        target: { type: bucketName, id },
+                        metadata: { filename: row.filename, size: row.size }
+                    });
+                }
+                const headers = new Headers();
+                headers.set("Content-Type", row.contentType || "application/octet-stream");
+                headers.set("Content-Length", String(row.size));
+                headers.set("Content-Disposition", contentDispositionHeader(row.filename));
+                headers.set("X-Content-Type-Options", "nosniff");
+                headers.set("Cache-Control", "private, no-store");
+                return new Response(object.body, { headers });
+            }
+            async function update(bucketName, id, input) {
+                const bucketConfig = bucketFor(storage, bucketName);
+                await ensure();
+                const row = await firstFile(executor, bucketName, id);
+                if (!row || hiddenStatuses.has(row.status))
+                    throw new StorageError("Not found", 404);
+                const current = normalizeForPolicy(row);
+                const next = {
+                    ...current,
+                    filename: input.filename !== undefined ? safeFilename(input.filename) : row.filename,
+                    metadata: input.metadata !== undefined ? input.metadata : parseMetadata(row.metadata)
+                };
+                if (!can(bucketConfig, "update", ctx, current, next)) {
+                    throw new StorageError(`Policy denied update on file bucket ${bucketName}`, 403);
+                }
+                const updates = [];
+                const params = [];
+                if (input.filename !== undefined) {
+                    updates.push(`"filename" = ?`);
+                    params.push(safeFilename(input.filename));
+                }
+                if (input.metadata !== undefined) {
+                    updates.push(`"metadata" = ?`);
+                    params.push(JSON.stringify(input.metadata));
+                }
+                updates.push(`"updatedAt" = ?`);
+                params.push(nowIso(), id);
+                await executor.run(`UPDATE ${q(raybaseFilesTableName)} SET ${updates.join(", ")} WHERE "id" = ?`, params);
+                await ctx.audit?.({
+                    action: ctx.adminOverride ? "admin.file.update" : "file.update",
+                    target: { type: bucketName, id },
+                    metadata: input
+                });
+                const updated = await firstFile(executor, bucketName, id);
+                if (!updated)
+                    throw new StorageError("File metadata disappeared after update", 500);
+                return normalizeFile(updated);
+            }
+            async function remove(bucketName, id) {
+                const bucketConfig = bucketFor(storage, bucketName);
+                await ensure();
+                const row = await firstFile(executor, bucketName, id);
+                if (!row || hiddenStatuses.has(row.status))
+                    throw new StorageError("Not found", 404);
+                if (!can(bucketConfig, "delete", ctx, normalizeForPolicy(row))) {
+                    throw new StorageError(`Policy denied delete on file bucket ${bucketName}`, 403);
+                }
+                const deletedAt = nowIso();
+                await executor.run(`UPDATE ${q(raybaseFilesTableName)} SET "status" = 'deleting', "deletedAt" = ?, "updatedAt" = ? WHERE "id" = ?`, [deletedAt, deletedAt, id]);
+                try {
+                    assertRaybaseObjectKey(env, "files", row.key, runtimeScope());
+                    await bucket.delete(row.key);
+                    const objectDeletedAt = nowIso();
+                    await executor.run(`UPDATE ${q(raybaseFilesTableName)}
+             SET "status" = 'deleted', "objectDeletedAt" = ?, "deleteError" = NULL, "updatedAt" = ?
+             WHERE "id" = ?`, [objectDeletedAt, objectDeletedAt, id]);
+                    await ctx.audit?.({
+                        action: ctx.adminOverride ? "admin.file.delete" : "file.delete",
+                        target: { type: bucketName, id },
+                        metadata: { filename: row.filename, size: row.size }
+                    });
+                    return { ok: true };
+                }
+                catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    await executor.run(`UPDATE ${q(raybaseFilesTableName)} SET "deleteError" = ?, "updatedAt" = ? WHERE "id" = ?`, [message, nowIso(), id]);
+                    await ctx.audit?.({
+                        action: ctx.adminOverride ? "admin.file.delete_failed" : "file.delete_failed",
+                        target: { type: bucketName, id },
+                        metadata: { error: message }
+                    });
+                    throw new StorageError(`R2 delete failed: ${message}`, 502);
+                }
+            }
+            return { list, get, create, download, update, delete: remove };
+        }
+    };
+}
+//# sourceMappingURL=storage-client.js.map

package/dist/storage-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-client.js","sourceRoot":"","sources":["../src/storage-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAyD,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAiB,MAAM,UAAU,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EAGtB,MAAM,cAAc,CAAC;AAyDtB,MAAM,OAAO,YAAa,SAAQ,KAAK;IAG1B;IAFX,YACE,OAAe,EACN,SAAS,GAAG;QAErB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAM;IAGvB,CAAC;CACF;AA4BD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAoB,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;AAEvG,SAAS,cAAc,CAAC,GAAiB;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO;QACL,WAAW;YACT,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,EAA6B,EAAE,GAAgB;IAClE,OAAO,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,OAA6B,EAAE,UAAkB;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB;IAC1C,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,MAAM,IAAI,YAAY,CAAC,UAAU,MAAM,CAAC,IAAI,wBAAwB,EAAE,GAAG,CAAC,CAAC;IACrG,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,GAAG,CACV,MAAqB,EACrB,MAA+C,EAC/C,GAAgB,EAChB,GAA6B,EAC7B,MAAgC;IAEhC,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;QAC/C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG;QACH,MAAM;QACN,MAAM;QACN,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAkB;IACvC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAkB;IAC5C,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,MAAc;IACpD,OAAO,YAAY,UAAU,IAAI,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,OAAO,eAAe,IAAI,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAoB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACpH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAgB;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,oDAAoD,CAAC,CAAC;QAC1G,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,QAAQ,GAAY,IAAI,CAAC;QAC7B,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9D,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3D,WAAW,EAAE,IAAI,CAAC,IAAI,IAAI,0BAA0B;YACpD,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,8BAA8B,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,MAAM,CAAC;IACnJ,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE;QACtC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;QAChC,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,0BAA0B;QAC5E,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAyB;IAClD,IAAI,KAAK,YAAY,OAAO;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7D,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,0BAA0B;YACrD,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,0BAA0B;QACnH,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAqB,EAAE,WAAmB;IACpE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,UAAU,KAAK,OAAO,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAoC;IACjE,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAkC,EAAE,QAAgB;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,IAAI,GAAG,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,QAAQ,oBAAoB,EAAE,GAAG,CAAC,CAAC;YACnG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAA0B,EAAE,QAAgB;IACxE,IAAI,IAAI,YAAY,cAAc;QAAE,OAAO,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,QAAQ,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACxG,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,QAAQ,oBAAoB,EAAE,GAAG,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,QAAQ,oBAAoB,EAAE,GAAG,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,YAAY,eAAe,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,YAAY,CAAC,oDAAoD,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,8BAA8B,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,QAAQ,GAAG,QAAQ;SACtB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,IAAI,EAAE,CAAC;IACV,OAAO,QAAQ,IAAI,UAAU,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,yBAAyB,QAAQ,uBAAuB,aAAa,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,SAAS,QAAQ,CAAC,GAAsB;IACtC,IAAI,CAAC,GAAG,CAAC,aAAa;QAAE,MAAM,IAAI,YAAY,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;IAClG,OAAO,GAAG,CAAC,aAAa,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAe,EAAE,UAAkB,EAAE,EAAU;IACtE,OAAO,EAAE,CAAC,KAAK,CAAgB,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,kCAAkC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;AAChI,CAAC;AAED,SAAS,OAAO,CAAC,GAAkB,EAAE,aAAsB;IACzD,OAAO,aAAa,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAsB,EAAE,OAA6B,EAAE,KAAgC,cAAc,CAAC,GAAG,CAAC;IAC7I,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE7B,OAAO;QACL,GAAG,CAAC,GAAgB;YAClB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,YAAY,GAAG,GAAG,EAAE;gBACxB,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,UAAU;oBAAE,OAAO,OAAO,CAAC;gBAC1D,OAAO;oBACL,GAAG,OAAO;oBACV,OAAO,EAAE,GAAG,CAAC,UAAU;oBACvB,cAAc,EAAE,GAAG,CAAC,UAAU;iBAC/B,CAAC;YACJ,CAAC,CAAC;YACF,IAAI,OAAO,GAAyB,IAAI,CAAC;YACzC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAE9D,KAAK,UAAU,IAAI,CAAC,UAAkB,EAAE,UAA8B,EAAE;gBACtE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,qCAAqC,CAAC;gBACrF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAC7B,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,UAAU,KAAK,6CAA6C,EACrG,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAC5B,CAAC;gBACF,MAAM,KAAK,GAAG,IAAI;qBACf,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;qBAC5C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;qBACxE,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/C,CAAC;YAED,KAAK,UAAU,GAAG,CAAC,UAAkB,EAAE,EAAU,EAAE,UAAuC,EAAE;gBAC1F,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACtD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC1E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACtD,OAAO,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7F,CAAC;YAED,KAAK,UAAU,MAAM,CAAC,UAAkB,EAAE,KAAyB;gBACjE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,gBAAgB,CAC1B,GAAG,EACH,OAAO,EACP,CAAC,UAAU,EAAE,EAAE,CAAC,EAChB,KAAK,EACL,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CACjC,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;gBACrB,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAkB;oBAC/B,EAAE;oBACF,MAAM,EAAE,UAAU;oBAClB,GAAG;oBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,WAAW;oBACnB,SAAS;oBACT,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;iBAClD,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAI,YAAY,CAAC,uCAAuC,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,QAAQ,CAAC,GAAG,CAChB,eAAe,CAAC,CAAC,qBAAqB,CAAC;;0DAES,EAChD;oBACE,SAAS,CAAC,EAAE;oBACZ,SAAS,CAAC,MAAM;oBAChB,SAAS,CAAC,GAAG;oBACb,SAAS,CAAC,QAAQ;oBAClB,SAAS,CAAC,WAAW;oBACrB,SAAS,CAAC,IAAI;oBACd,SAAS,CAAC,IAAI;oBACd,SAAS,CAAC,QAAQ;oBAClB,SAAS,CAAC,MAAM;oBAChB,SAAS,CAAC,SAAS;oBACnB,SAAS,CAAC,SAAS;oBACnB,SAAS,CAAC,SAAS;oBACnB,SAAS,CAAC,QAAQ;iBACnB,CACF,CAAC;gBAEF,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,YAAY,CAAC,gBAAgB,MAAM,CAAC,WAAW,8BAA8B,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5G,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE;oBAC1C,YAAY,EAAE;wBACZ,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,kBAAkB,EAAE,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC;qBAC9D;oBACD,cAAc,EAAE;wBACd,MAAM,EAAE,UAAU;wBAClB,MAAM,EAAE,EAAE;qBACX;iBACF,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC;gBACtD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,GAAG,CAChB,UAAU,CAAC,CAAC,qBAAqB,CAAC;;0BAElB,EAChB,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAClD,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACxD,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,YAAY,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;gBAClF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa;oBAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;oBAChC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE;iBAC3G,CAAC,CAAC;gBACH,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YAED,KAAK,UAAU,QAAQ,CAAC,UAAkB,EAAE,EAAU;gBACpD,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACtD,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACrF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACvG,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC9D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;wBACtB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;4BAChB,MAAM,EAAE,2BAA2B;4BACnC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;4BAChC,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;yBAC3B,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;gBACrD,CAAC;gBACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;oBACtB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;wBAChB,MAAM,EAAE,qBAAqB;wBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;wBAChC,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;qBACrD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,WAAW,IAAI,0BAA0B,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;gBAClD,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;YAED,KAAK,UAAU,MAAM,CAAC,UAAkB,EAAE,EAAU,EAAE,KAAyB;gBAC7E,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACtD,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACrF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG;oBACX,GAAG,OAAO;oBACV,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ;oBACpF,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;iBACtF,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,YAAY,CAAC,uCAAuC,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAe,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1B,MAAM,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBAC1G,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa;oBAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;oBAChC,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,YAAY,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;gBACpF,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YAED,KAAK,UAAU,MAAM,CAAC,UAAkB,EAAE,EAAU;gBAClD,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACpD,MAAM,MAAM,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACtD,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACrF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC/D,MAAM,IAAI,YAAY,CAAC,uCAAuC,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,6EAA6E,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;gBAChK,IAAI,CAAC;oBACH,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC9D,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7B,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC;oBACjC,MAAM,QAAQ,CAAC,GAAG,CAChB,UAAU,CAAC,CAAC,qBAAqB,CAAC;;4BAElB,EAChB,CAAC,eAAe,EAAE,eAAe,EAAE,EAAE,CAAC,CACvC,CAAC;oBACF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;wBAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa;wBAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;wBAChC,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;qBACrD,CAAC,CAAC;oBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,MAAM,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,wDAAwD,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACxI,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;wBAChB,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,oBAAoB;wBAC7E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;wBAChC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;qBAC7B,CAAC,CAAC;oBACH,MAAM,IAAI,YAAY,CAAC,qBAAqB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,21 @@
+import type { SqlExecutor } from "./db.js";
+import type { PolicyMap } from "./schema.js";
+export declare const raybaseFilesTableName = "_files";
+export declare const storageHardMaxSizeBytes: number;
+export type RaybaseBucket = {
+    name: string;
+    policies?: PolicyMap;
+    label?: string;
+    maxSizeBytes?: number;
+    accept?: string[];
+};
+export type RaybaseStorageConfig = {
+    buckets: Record<string, RaybaseBucket>;
+};
+export declare function raybaseBucket(name: string, options?: Omit<RaybaseBucket, "name">): RaybaseBucket;
+export declare function raybaseStorage(buckets: Record<string, RaybaseBucket>): RaybaseStorageConfig;
+export declare function requiredStoragePolicyActions(): Array<keyof PolicyMap>;
+export declare function validateStorageConfig(storage: RaybaseStorageConfig | undefined): void;
+export declare function validateBucketName(name: string): void;
+export declare function ensureFilesTable(db: SqlExecutor): Promise<void>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAC9C,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAExD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CACxC,CAAC;AAIF,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAM,GACxC,aAAa,CAiBf;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,oBAAoB,CAW3F;AAED,wBAAgB,4BAA4B,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC,CAErE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI,CAerF;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBrE"}

package/dist/storage.js

@@ -0,0 +1,82 @@
+export const raybaseFilesTableName = "_files";
+export const storageHardMaxSizeBytes = 25 * 1024 * 1024;
+const bucketNamePattern = /^[a-z][a-z0-9_]*$/;
+export function raybaseBucket(name, options = {}) {
+    validateBucketName(name);
+    if (options.maxSizeBytes !== undefined && (!Number.isFinite(options.maxSizeBytes) || options.maxSizeBytes <= 0)) {
+        throw new Error(`Bucket ${name} maxSizeBytes must be a positive number`);
+    }
+    if (options.accept !== undefined) {
+        for (const value of options.accept) {
+            if (!value || /[\r\n]/.test(value))
+                throw new Error(`Bucket ${name} has an invalid accept entry`);
+        }
+    }
+    return {
+        name,
+        policies: options.policies,
+        label: options.label,
+        maxSizeBytes: options.maxSizeBytes,
+        accept: options.accept
+    };
+}
+export function raybaseStorage(buckets) {
+    const output = {};
+    for (const [key, bucket] of Object.entries(buckets)) {
+        validateBucketName(key);
+        validateBucketName(bucket.name);
+        if (key !== bucket.name) {
+            throw new Error(`Storage bucket key "${key}" must match bucket name "${bucket.name}"`);
+        }
+        output[key] = bucket;
+    }
+    return { buckets: output };
+}
+export function requiredStoragePolicyActions() {
+    return ["read", "create", "update", "delete"];
+}
+export function validateStorageConfig(storage) {
+    if (!storage)
+        return;
+    for (const bucket of Object.values(storage.buckets)) {
+        validateBucketName(bucket.name);
+        const missing = requiredStoragePolicyActions().filter((action) => !bucket.policies?.[action]);
+        if (missing.length) {
+            throw new Error(`Bucket ${bucket.name} is missing policies for: ${missing.join(", ")}`);
+        }
+        if (!bucket.maxSizeBytes) {
+            throw new Error(`Bucket ${bucket.name} must set maxSizeBytes`);
+        }
+        if (bucket.maxSizeBytes > storageHardMaxSizeBytes) {
+            throw new Error(`Bucket ${bucket.name} maxSizeBytes exceeds the v1 hard cap of ${storageHardMaxSizeBytes} bytes`);
+        }
+    }
+}
+export function validateBucketName(name) {
+    if (!bucketNamePattern.test(name)) {
+        throw new Error(`Invalid storage bucket name: ${name}. Use lowercase letters, numbers, and underscores.`);
+    }
+}
+export async function ensureFilesTable(db) {
+    await db.run(`CREATE TABLE IF NOT EXISTS "_files" (
+      "id" TEXT PRIMARY KEY NOT NULL,
+      "bucket" TEXT NOT NULL,
+      "key" TEXT NOT NULL UNIQUE,
+      "filename" TEXT NOT NULL,
+      "contentType" TEXT NOT NULL,
+      "size" INTEGER NOT NULL,
+      "etag" TEXT,
+      "checksum" TEXT,
+      "status" TEXT NOT NULL,
+      "createdBy" TEXT NOT NULL,
+      "createdAt" TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+      "updatedAt" TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+      "deletedAt" TEXT,
+      "objectDeletedAt" TEXT,
+      "deleteError" TEXT,
+      "metadata" TEXT
+    )`);
+    await db.run(`CREATE INDEX IF NOT EXISTS "_files_bucket_created_at_idx" ON "_files" ("bucket", "createdAt")`);
+    await db.run(`CREATE INDEX IF NOT EXISTS "_files_bucket_created_by_idx" ON "_files" ("bucket", "createdBy")`);
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAcxD,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,UAAuC,EAAE;IAEzC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,yCAAyC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,8BAA8B,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAsC;IACnE,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,6BAA6B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAyC;IAC7E,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,4BAA4B,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,IAAI,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,IAAI,wBAAwB,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,GAAG,uBAAuB,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,IAAI,4CAA4C,uBAAuB,QAAQ,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,oDAAoD,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAe;IACpD,MAAM,EAAE,CAAC,GAAG,CACV;;;;;;;;;;;;;;;;;MAiBE,CACH,CAAC;IACF,MAAM,EAAE,CAAC,GAAG,CAAC,+FAA+F,CAAC,CAAC;IAC9G,MAAM,EAAE,CAAC,GAAG,CAAC,+FAA+F,CAAC,CAAC;AAChH,CAAC"}

package/dist/subject-domains.d.ts

@@ -0,0 +1,15 @@
+export type RaybaseSubjectDomain = "identity" | "policy";
+export type RaybasePersistedSubject = {
+    table: string;
+    column: string;
+    domain: RaybaseSubjectDomain;
+    qualifier?: string;
+};
+/**
+ * Persisted subject-bearing columns owned by the shared runtime. Settings is
+ * intentionally qualified because one physical column stores app constants,
+ * scoped IDs, and identity subjects according to its explicit `scope` value.
+ */
+export declare const raybaseSubjectDomainManifest: readonly RaybasePersistedSubject[];
+export declare function validateRaybaseSubjectDomainManifest(manifest?: readonly RaybasePersistedSubject[]): void;
+//# sourceMappingURL=subject-domains.d.ts.map

package/dist/subject-domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject-domains.d.ts","sourceRoot":"","sources":["../src/subject-domains.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEzD,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,uBAAuB,EAsBjE,CAAC;AAEX,wBAAgB,oCAAoC,CAClD,QAAQ,GAAE,SAAS,uBAAuB,EAAiC,GAC1E,IAAI,CAON"}