@raybase/core 0.0.2 → 0.3.3

package/dist/app-manifest.js

@@ -0,0 +1,372 @@
+export const raybaseAppManifestVersion = 1;
+export function parseRaybaseAppManifest(value, expectedProduct) {
+    if (!isRecord(value))
+        throw new Error("Raybase app manifest must be a JSON object.");
+    if (value.manifestVersion !== raybaseAppManifestVersion) {
+        throw new Error(`Raybase app manifest manifestVersion must be ${raybaseAppManifestVersion}.`);
+    }
+    if (typeof value.product !== "string" || !value.product)
+        throw new Error("Raybase app manifest product must be a non-empty string.");
+    if (expectedProduct && value.product !== expectedProduct) {
+        throw new Error(`Raybase app manifest product must be ${JSON.stringify(expectedProduct)}.`);
+    }
+    if (typeof value.generatedAt !== "string" || !Number.isFinite(Date.parse(value.generatedAt))) {
+        throw new Error("Raybase app manifest generatedAt must be an ISO timestamp.");
+    }
+    if (!isRecord(value.app))
+        throw new Error("Raybase app manifest app must be an object.");
+    if (value.app.appName !== undefined && typeof value.app.appName !== "string")
+        throw new Error("Raybase app manifest app.appName must be a string.");
+    requireStringArray(value.roles, "roles");
+    requireStringArray(value.routes, "routes", (route, index) => {
+        if (!isRecord(route) || typeof route.path !== "string" || typeof route.source !== "string") {
+            throw new Error(`Raybase app manifest routes[${index}] must contain string path and source fields.`);
+        }
+    });
+    requireStringArray(value.devUsers, "devUsers", (persona, index) => {
+        if (!isRecord(persona) || typeof persona.name !== "string" || typeof persona.email !== "string" || typeof persona.role !== "string") {
+            throw new Error(`Raybase app manifest devUsers[${index}] must contain string name, email, and role fields.`);
+        }
+    });
+    if (!isRecord(value.tables))
+        throw new Error("Raybase app manifest tables must be an object.");
+    for (const [key, rawTable] of Object.entries(value.tables))
+        validateTable(key, rawTable);
+    if (!isRecord(value.runtime))
+        throw new Error("Raybase app manifest runtime must be an object.");
+    if (typeof value.runtime.hasAppMigrations !== "boolean" || typeof value.runtime.hasStorage !== "boolean") {
+        throw new Error("Raybase app manifest runtime flags must be booleans.");
+    }
+    requireStringArray(value.runtime.expectedBindings, "runtime.expectedBindings");
+    if (!isRecord(value.actions))
+        throw new Error("Raybase app manifest actions must be an object.");
+    requireStringArray(value.actions.names, "actions.names");
+    validateActionDescriptors(value.actions.descriptors, "actions.descriptors");
+    for (const field of ["agents", "agentSkills", "modules"]) {
+        if (!Array.isArray(value[field]))
+            throw new Error(`Raybase app manifest ${field} must be an array.`);
+    }
+    for (const field of ["api", "mcp", "remoteMcp", "jobs", "notifications", "retrieval", "search", "ai"]) {
+        if (!isRecord(value[field]))
+            throw new Error(`Raybase app manifest ${field} must be an object.`);
+    }
+    validateActionRoutes(value.api.actionRoutes);
+    validateMcpActionTools(value.mcp.actionTools);
+    value.agents.forEach(validateAgent);
+    value.agentSkills.forEach(validateAgentSkill);
+    validateRemoteMcp(value.remoteMcp);
+    requireStringArray(value.jobs.names, "jobs.names");
+    if (typeof value.jobs.hasSchedules !== "boolean")
+        throw new Error("Raybase app manifest jobs.hasSchedules must be a boolean.");
+    if (value.jobs.limits !== undefined)
+        validateJobLimits(value.jobs.limits);
+    if (typeof value.notifications.enabled !== "boolean")
+        throw new Error("Raybase app manifest notifications.enabled must be a boolean.");
+    requireStringArray(value.notifications.channelNames, "notifications.channelNames");
+    requireStringArray(value.notifications.inboundNames, "notifications.inboundNames");
+    requireStringArray(value.retrieval.indexNames, "retrieval.indexNames");
+    requireStringArray(value.search.indexNames, "search.indexNames");
+    if (value.ai.selectedProvider !== null && typeof value.ai.selectedProvider !== "string") {
+        throw new Error("Raybase app manifest ai.selectedProvider must be a string or null.");
+    }
+    if (!Array.isArray(value.ai.inferenceProviders))
+        throw new Error("Raybase app manifest ai.inferenceProviders must be an array.");
+    if (value.guide !== undefined)
+        validateGuide(value.guide);
+    return value;
+}
+export function decodeRaybaseDevManifest(encoded, expectedProduct) {
+    if (typeof encoded !== "string" || !encoded)
+        throw new Error("RAYBASE_DEV_MANIFEST is missing.");
+    let bytes;
+    try {
+        if (!/^[A-Za-z0-9_-]+$/.test(encoded))
+            throw new Error("invalid alphabet");
+        const base64 = encoded.replaceAll("-", "+").replaceAll("_", "/").padEnd(Math.ceil(encoded.length / 4) * 4, "=");
+        const binary = atob(base64);
+        bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    }
+    catch (error) {
+        throw new Error(`RAYBASE_DEV_MANIFEST is not valid base64url: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    let json;
+    try {
+        json = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch (error) {
+        throw new Error(`RAYBASE_DEV_MANIFEST is not valid UTF-8: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(json);
+    }
+    catch (error) {
+        throw new Error(`RAYBASE_DEV_MANIFEST is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return parseRaybaseAppManifest(parsed, expectedProduct);
+}
+function validateTable(key, value) {
+    if (!isRecord(value) || typeof value.name !== "string")
+        throw new Error(`Raybase app manifest tables.${key} must be a table object.`);
+    if (!isRecord(value.columns))
+        throw new Error(`Raybase app manifest tables.${key}.columns must be an object.`);
+    for (const [columnName, rawColumn] of Object.entries(value.columns)) {
+        if (!isRecord(rawColumn) || !["id", "text", "longText", "integer", "real", "boolean", "datetime", "date", "json", "ref", "secret"].includes(rawColumn.kind)) {
+            throw new Error(`Raybase app manifest tables.${key}.columns.${columnName} is invalid.`);
+        }
+        for (const flag of ["required", "primaryKey", "unique"]) {
+            if (typeof rawColumn[flag] !== "boolean")
+                throw new Error(`Raybase app manifest tables.${key}.columns.${columnName}.${flag} must be a boolean.`);
+        }
+        if (rawColumn.enumValues !== undefined)
+            requireStringArray(rawColumn.enumValues, `tables.${key}.columns.${columnName}.enumValues`);
+        if (rawColumn.reference !== undefined && typeof rawColumn.reference !== "string")
+            throw new Error(`Raybase app manifest tables.${key}.columns.${columnName}.reference must be a string.`);
+        if (rawColumn.lifecycle !== undefined)
+            validateLifecycle(key, columnName, rawColumn.lifecycle);
+    }
+    if (!isRecord(value.policies))
+        throw new Error(`Raybase app manifest tables.${key}.policies must be an object.`);
+    for (const [action, policy] of Object.entries(value.policies)) {
+        if (!["read", "create", "update", "delete"].includes(action) || !validPolicy(policy)) {
+            throw new Error(`Raybase app manifest tables.${key}.policies.${action} is invalid.`);
+        }
+    }
+    requireStringArray(value.invariants, `tables.${key}.invariants`);
+}
+function validateLifecycle(table, column, value) {
+    if (!isRecord(value))
+        throw new Error(`Raybase app manifest tables.${table}.columns.${column}.lifecycle must be an object.`);
+    requireStringArray(value.states, `tables.${table}.columns.${column}.lifecycle.states`);
+    if (value.states.length === 0 || new Set(value.states).size !== value.states.length)
+        throw new Error(`Raybase app manifest tables.${table}.columns.${column}.lifecycle.states must be non-empty and unique.`);
+    if (typeof value.initial !== "string" || !value.states.includes(value.initial))
+        throw new Error(`Raybase app manifest tables.${table}.columns.${column}.lifecycle.initial is invalid.`);
+    if (!isRecord(value.transitions))
+        throw new Error(`Raybase app manifest tables.${table}.columns.${column}.lifecycle.transitions must be an object.`);
+    const states = value.states;
+    if (Object.keys(value.transitions).some((state) => !states.includes(state))) {
+        throw new Error(`Raybase app manifest tables.${table}.columns.${column}.lifecycle.transitions contains an undeclared source.`);
+    }
+    for (const state of states) {
+        requireStringArray(value.transitions[state], `tables.${table}.columns.${column}.lifecycle.transitions.${state}`);
+        if (value.transitions[state].some((target) => !states.includes(target))) {
+            throw new Error(`Raybase app manifest tables.${table}.columns.${column}.lifecycle.transitions.${state} contains an undeclared target.`);
+        }
+    }
+}
+function validPolicy(value) {
+    if (!isRecord(value) || typeof value.kind !== "string")
+        return false;
+    if (["allowAll", "denyAll", "operator"].includes(value.kind))
+        return true;
+    if (value.kind === "role")
+        return typeof value.role === "string";
+    if (value.kind === "owns")
+        return typeof value.column === "string";
+    if (value.kind === "servicePrincipal")
+        return typeof value.service === "string";
+    if (value.kind === "anyOf" || value.kind === "allOf")
+        return Array.isArray(value.policies) && value.policies.every(validPolicy);
+    if (value.kind === "not")
+        return validPolicy(value.policy);
+    return false;
+}
+function validateActionDescriptors(value, field) {
+    if (!Array.isArray(value) || !value.every(validActionDescriptor)) {
+        throw new Error(`Raybase app manifest ${field} must be an array of action descriptor objects.`);
+    }
+}
+function validActionDescriptor(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.name !== undefined && typeof value.name !== "string")
+        return false;
+    if (value.policy !== undefined && !validPolicy(value.policy))
+        return false;
+    if (value.requiredInputKeys !== undefined && !isStringArray(value.requiredInputKeys))
+        return false;
+    if (value.hasOutputSchema !== undefined && typeof value.hasOutputSchema !== "boolean")
+        return false;
+    if (value.annotations !== undefined && !isRecord(value.annotations))
+        return false;
+    if (value.resource !== undefined) {
+        if (!isRecord(value.resource))
+            return false;
+        if (value.resource.name !== undefined && typeof value.resource.name !== "string")
+            return false;
+        if (value.resource.operation !== undefined && typeof value.resource.operation !== "string")
+            return false;
+        if (value.resource.inputRefs !== undefined) {
+            if (!isRecord(value.resource.inputRefs))
+                return false;
+            for (const reference of Object.values(value.resource.inputRefs)) {
+                if (!isRecord(reference))
+                    return false;
+                if (reference.resource !== undefined && typeof reference.resource !== "string")
+                    return false;
+                if (reference.kind !== undefined && typeof reference.kind !== "string")
+                    return false;
+                if (reference.required !== undefined && typeof reference.required !== "boolean")
+                    return false;
+            }
+        }
+    }
+    return true;
+}
+function validateActionRoutes(value) {
+    if (!Array.isArray(value))
+        throw new Error("Raybase app manifest api.actionRoutes must be an array.");
+    value.forEach((route, index) => {
+        if (!isRecord(route) || typeof route.path !== "string" || typeof route.actionName !== "string") {
+            throw new Error(`Raybase app manifest api.actionRoutes[${index}] must contain string path and actionName fields.`);
+        }
+        if (route.hasOutputSchema !== undefined && typeof route.hasOutputSchema !== "boolean")
+            throw new Error(`Raybase app manifest api.actionRoutes[${index}].hasOutputSchema must be a boolean.`);
+        if (route.policy !== undefined && !validPolicy(route.policy))
+            throw new Error(`Raybase app manifest api.actionRoutes[${index}].policy must be a policy expression.`);
+        if (route.audience !== undefined && typeof route.audience !== "string" && !isStringArray(route.audience))
+            throw new Error(`Raybase app manifest api.actionRoutes[${index}].audience must be a string or array.`);
+        if (route.rowAuthorization !== undefined) {
+            if (!isRecord(route.rowAuthorization) || typeof route.rowAuthorization.table !== "string" || !["read", "create", "update", "delete"].includes(route.rowAuthorization.action)) {
+                throw new Error(`Raybase app manifest api.actionRoutes[${index}].rowAuthorization is invalid.`);
+            }
+        }
+    });
+}
+function validateMcpActionTools(value) {
+    if (!Array.isArray(value))
+        throw new Error("Raybase app manifest mcp.actionTools must be an array.");
+    value.forEach((tool, index) => {
+        if (!isRecord(tool) || typeof tool.toolName !== "string" || !validActionDescriptor(tool.action)) {
+            throw new Error(`Raybase app manifest mcp.actionTools[${index}] is invalid.`);
+        }
+    });
+}
+function validateAgent(value, index) {
+    if (!isRecord(value))
+        throw new Error(`Raybase app manifest agents[${index}] must be an object.`);
+    for (const field of ["name", "title", "moduleId"]) {
+        if (value[field] !== undefined && typeof value[field] !== "string")
+            throw new Error(`Raybase app manifest agents[${index}].${field} must be a string.`);
+    }
+    for (const field of ["skillNames", "actionNames"]) {
+        if (value[field] !== undefined && !isStringArray(value[field]))
+            throw new Error(`Raybase app manifest agents[${index}].${field} must be an array.`);
+    }
+    if (value.actionDescriptors !== undefined)
+        validateActionDescriptors(value.actionDescriptors, `agents[${index}].actionDescriptors`);
+    if (value.promptHeadMaxChars !== undefined && (!Number.isInteger(value.promptHeadMaxChars) || Number(value.promptHeadMaxChars) < 1)) {
+        throw new Error(`Raybase app manifest agents[${index}].promptHeadMaxChars must be a positive integer.`);
+    }
+    for (const field of ["promptHeadStaticChars", "promptBandCount"]) {
+        if (value[field] !== undefined && (!Number.isInteger(value[field]) || Number(value[field]) < 0)) {
+            throw new Error(`Raybase app manifest agents[${index}].${field} must be a non-negative integer.`);
+        }
+    }
+    if (value.promptHeadMaxCharsExplicit !== undefined && typeof value.promptHeadMaxCharsExplicit !== "boolean") {
+        throw new Error(`Raybase app manifest agents[${index}].promptHeadMaxCharsExplicit must be a boolean.`);
+    }
+    if (value.promptHeadOnOverflow !== undefined && value.promptHeadOnOverflow !== "truncate" && value.promptHeadOnOverflow !== "error") {
+        throw new Error(`Raybase app manifest agents[${index}].promptHeadOnOverflow is invalid.`);
+    }
+    if (value.retention !== undefined && !isRecord(value.retention))
+        throw new Error(`Raybase app manifest agents[${index}].retention must be an object.`);
+    if (isRecord(value.retention)) {
+        if (value.retention.onExpiry !== undefined && !["archive", "delete"].includes(value.retention.onExpiry))
+            throw new Error(`Raybase app manifest agents[${index}].retention.onExpiry is invalid.`);
+        if (value.retention.transcripts !== undefined && !["archive", "discard", "keep-hot"].includes(value.retention.transcripts))
+            throw new Error(`Raybase app manifest agents[${index}].retention.transcripts is invalid.`);
+    }
+}
+function validateAgentSkill(value, index) {
+    if (!isRecord(value))
+        throw new Error(`Raybase app manifest agentSkills[${index}] must be an object.`);
+    for (const field of ["name", "namespace", "title"]) {
+        if (value[field] !== undefined && typeof value[field] !== "string")
+            throw new Error(`Raybase app manifest agentSkills[${index}].${field} must be a string.`);
+    }
+    for (const field of ["hasGuidance", "ephemeral"]) {
+        if (value[field] !== undefined && typeof value[field] !== "boolean")
+            throw new Error(`Raybase app manifest agentSkills[${index}].${field} must be a boolean.`);
+    }
+    if (value.maxChars !== undefined && (typeof value.maxChars !== "number" || !Number.isFinite(value.maxChars) || value.maxChars <= 0))
+        throw new Error(`Raybase app manifest agentSkills[${index}].maxChars must be a positive number.`);
+    if (value.actionNames !== undefined && !isStringArray(value.actionNames))
+        throw new Error(`Raybase app manifest agentSkills[${index}].actionNames must be an array.`);
+    if (value.limits !== undefined && !isRecord(value.limits))
+        throw new Error(`Raybase app manifest agentSkills[${index}].limits must be an object.`);
+}
+function validateRemoteMcp(value) {
+    for (const field of ["servers", "agentBindings"]) {
+        if (!Array.isArray(value[field]))
+            throw new Error(`Raybase app manifest remoteMcp.${field} must be an array.`);
+    }
+    value.servers.forEach((server, index) => {
+        if (!isRecord(server))
+            throw new Error(`Raybase app manifest remoteMcp.servers[${index}] must be an object.`);
+        for (const field of ["name", "endpointHost"])
+            if (server[field] !== undefined && typeof server[field] !== "string")
+                throw new Error(`Raybase app manifest remoteMcp.servers[${index}].${field} must be a string.`);
+        for (const field of ["toolNames", "credentialRefs"])
+            if (server[field] !== undefined && !isStringArray(server[field]))
+                throw new Error(`Raybase app manifest remoteMcp.servers[${index}].${field} must be an array.`);
+    });
+    value.agentBindings.forEach((binding, index) => {
+        if (!isRecord(binding))
+            throw new Error(`Raybase app manifest remoteMcp.agentBindings[${index}] must be an object.`);
+        for (const field of ["agentName", "serverName"])
+            if (binding[field] !== undefined && typeof binding[field] !== "string")
+                throw new Error(`Raybase app manifest remoteMcp.agentBindings[${index}].${field} must be a string.`);
+        for (const field of ["toolNames", "modelToolNames"])
+            if (binding[field] !== undefined && !isStringArray(binding[field]))
+                throw new Error(`Raybase app manifest remoteMcp.agentBindings[${index}].${field} must be an array.`);
+    });
+}
+function validateGuide(value) {
+    if (!isRecord(value))
+        throw new Error("Raybase app manifest guide must be an object.");
+    for (const field of ["enabled", "hasExplicitCorpus"])
+        if (value[field] !== undefined && typeof value[field] !== "boolean")
+            throw new Error(`Raybase app manifest guide.${field} must be a boolean.`);
+    if (value.corpusDocumentCount !== undefined && typeof value.corpusDocumentCount !== "number")
+        throw new Error("Raybase app manifest guide.corpusDocumentCount must be a number.");
+    if (value.agentName !== undefined && typeof value.agentName !== "string")
+        throw new Error("Raybase app manifest guide.agentName must be a string.");
+    if (value.mode !== undefined && !["actions", "knowledge-only", "implicit"].includes(value.mode))
+        throw new Error("Raybase app manifest guide.mode is invalid.");
+    for (const field of ["actionNames", "explicitActionNames"])
+        if (value[field] !== undefined && !isStringArray(value[field]))
+            throw new Error(`Raybase app manifest guide.${field} must be an array.`);
+}
+function validateJobLimits(value) {
+    if (!Array.isArray(value))
+        throw new Error("Raybase app manifest jobs.limits must be an array.");
+    value.forEach((entry, index) => {
+        const isCount = (count) => count === undefined || (typeof count === "number" && Number.isInteger(count) && count > 0);
+        if (!isRecord(entry) || typeof entry.name !== "string" || !isCount(entry.max) || !isCount(entry.perKeyMax)) {
+            throw new Error(`Raybase app manifest jobs.limits[${index}] must contain a string name and positive integer max/perKeyMax.`);
+        }
+        const rate = entry.rateLimit;
+        if (rate !== undefined && (!isRecord(rate) || typeof rate.perSecond !== "number" || !isCount(rate.burst) || typeof rate.keyed !== "boolean")) {
+            throw new Error(`Raybase app manifest jobs.limits[${index}].rateLimit must contain perSecond, burst, and keyed.`);
+        }
+    });
+}
+function requireStringArray(value, field, itemValidator) {
+    if (!Array.isArray(value))
+        throw new Error(`Raybase app manifest ${field} must be an array.`);
+    if (itemValidator) {
+        value.forEach(itemValidator);
+        return;
+    }
+    if (!value.every((item) => typeof item === "string"))
+        throw new Error(`Raybase app manifest ${field} must contain only strings.`);
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+//# sourceMappingURL=app-manifest.js.map

package/dist/app-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-manifest.js","sourceRoot":"","sources":["../src/app-manifest.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AAyLpD,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,eAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,eAAe,KAAK,yBAAyB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,gDAAgD,yBAAyB,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACrI,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACzF,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpJ,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,+CAA+C,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAChE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpI,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,qDAAqD,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjG,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACzD,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC5E,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAU,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,oBAAoB,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAU,EAAE,CAAC;QAC/G,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,qBAAqB,CAAC,CAAC;IACnG,CAAC;IACD,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7C,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9C,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/H,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,OAAO,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACvI,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IACnF,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;IACnF,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACvE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,EAAE,CAAC,gBAAgB,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACjI,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,KAAwC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAkC,OAAe,EAAE,eAAyB;IAClH,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACjG,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAChH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,KAAc;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,0BAA0B,CAAC,CAAC;IACtI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,6BAA6B,CAAC,CAAC;IAC/G,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5J,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,YAAY,UAAU,cAAc,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAU,EAAE,CAAC;YACjE,IAAI,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,YAAY,UAAU,IAAI,IAAI,qBAAqB,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS;YAAE,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,YAAY,UAAU,aAAa,CAAC,CAAC;QACnI,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,YAAY,UAAU,8BAA8B,CAAC,CAAC;QAC1L,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;YAAE,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,8BAA8B,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,aAAa,MAAM,cAAc,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,aAAa,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAc,EAAE,KAAc;IACtE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,YAAY,MAAM,+BAA+B,CAAC,CAAC;IAC7H,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,KAAK,YAAY,MAAM,mBAAmB,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,YAAY,MAAM,iDAAiD,CAAC,CAAC;IAC9M,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAE,KAAK,CAAC,MAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,YAAY,MAAM,gCAAgC,CAAC,CAAC;IACtM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,YAAY,MAAM,2CAA2C,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAkB,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,YAAY,MAAM,uDAAuD,CAAC,CAAC;IACjI,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,YAAY,MAAM,0BAA0B,KAAK,EAAE,CAAC,CAAC;QACjH,IAAK,KAAK,CAAC,WAAW,CAAC,KAAK,CAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,YAAY,MAAM,0BAA0B,KAAK,iCAAiC,CAAC,CAAC;QAC1I,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;IACnE,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;IAChF,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc,EAAE,KAAa;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,iDAAiD,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,KAAK,CAAC;IACnG,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpG,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/F,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzG,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACvC,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC7F,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACrF,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;YAChG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACtG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,mDAAmD,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,sCAAsC,CAAC,CAAC;QAC7L,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,uCAAuC,CAAC,CAAC;QACrK,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,uCAAuC,CAAC,CAAC;QACjN,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7K,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,gCAAgC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACrG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,eAAe,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,sBAAsB,CAAC,CAAC;IAClG,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAU,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;IAC1J,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,CAAU,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;IACtJ,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS;QAAE,yBAAyB,CAAC,KAAK,CAAC,iBAAiB,EAAE,UAAU,KAAK,qBAAqB,CAAC,CAAC;IACpI,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpI,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,kDAAkD,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,CAAU,EAAE,CAAC;QAC1E,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,KAAK,KAAK,kCAAkC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,0BAA0B,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,iDAAiD,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,KAAK,CAAC,oBAAoB,KAAK,UAAU,IAAI,KAAK,CAAC,oBAAoB,KAAK,OAAO,EAAE,CAAC;QACpI,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,oCAAoC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,gCAAgC,CAAC,CAAC;IACvJ,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,kCAAkC,CAAC,CAAC;QACjM,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,qCAAqC,CAAC,CAAC;IACzN,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,sBAAsB,CAAC,CAAC;IACvG,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAU,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;IAC/J,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,WAAW,CAAU,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,KAAK,KAAK,qBAAqB,CAAC,CAAC;IACjK,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,uCAAuC,CAAC,CAAC;IACvO,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,iCAAiC,CAAC,CAAC;IACtK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,6BAA6B,CAAC,CAAC;AACrJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA0B;IACnD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,CAAU,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,oBAAoB,CAAC,CAAC;IACjH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAe,EAAE,KAAa,EAAE,EAAE;QACvD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,sBAAsB,CAAC,CAAC;QAC9G,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,cAAc,CAAU;YAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;QAC5N,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAU;YAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;IACjO,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,OAAgB,EAAE,KAAa,EAAE,EAAE;QAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,sBAAsB,CAAC,CAAC;QACrH,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,YAAY,CAAU;YAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;QACvO,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAU;YAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,KAAK,KAAK,oBAAoB,CAAC,CAAC;IACzO,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACvF,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAU;QAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,qBAAqB,CAAC,CAAC;IAC9M,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClL,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACpJ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChK,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAU;QAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,oBAAoB,CAAC,CAAC;AAChN,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACjG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/H,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,kEAAkE,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YAC7I,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,uDAAuD,CAAC,CAAC;QACpH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa,EAAE,aAAuD;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,oBAAoB,CAAC,CAAC;IAC9F,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,6BAA6B,CAAC,CAAC;AACpI,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/app-users.d.ts

@@ -0,0 +1,30 @@
+import type { SqlExecutor } from "./db.js";
+import type { RaybaseRole } from "./policies.js";
+export type RaybaseAppUser = {
+    id: string;
+    name: string;
+    email: string;
+    appRoles: RaybaseRole[];
+    disabled: boolean;
+};
+export type ListAppUsersOptions = {
+    appRoles?: RaybaseRole | readonly RaybaseRole[];
+    search?: string;
+    limit?: number;
+    offset?: number;
+    includeDisabled?: boolean;
+};
+export type ListAppUsersResult = {
+    users: RaybaseAppUser[];
+    total: number;
+    limit: number;
+    offset: number;
+};
+export type GetAppUserOptions = {
+    appRoles?: RaybaseRole | readonly RaybaseRole[];
+    includeDisabled?: boolean;
+};
+export declare function listAppUsers(db: SqlExecutor, options?: ListAppUsersOptions): Promise<ListAppUsersResult>;
+export declare function getAppUserById(db: SqlExecutor, id: string, options?: GetAppUserOptions): Promise<RaybaseAppUser | null>;
+export declare function getAppUserByEmail(db: SqlExecutor, email: string, options?: GetAppUserOptions): Promise<RaybaseAppUser | null>;
+//# sourceMappingURL=app-users.d.ts.map

package/dist/app-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.d.ts","sourceRoot":"","sources":["../src/app-users.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGjD,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,CAAC;IAChD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAuEF,wBAAsB,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmBlH;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAKjI;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAKvI"}

package/dist/app-users.js

@@ -0,0 +1,91 @@
+import { parseStoredAppRoles } from "./auth.js";
+import { isHostUserId } from "./host-user.js";
+const defaultAppUserLimit = 20;
+const maxAppUserLimit = 100;
+function clampLimit(value) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return defaultAppUserLimit;
+    return Math.min(maxAppUserLimit, Math.max(1, Math.trunc(value)));
+}
+function clampOffset(value) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return 0;
+    return Math.max(0, Math.trunc(value));
+}
+function requestedAppRoles(appRoles) {
+    if (!appRoles)
+        return [];
+    const raw = Array.isArray(appRoles) ? appRoles : [appRoles];
+    const roles = raw.map((role) => String(role ?? "").trim()).filter(Boolean);
+    return Array.from(new Set(roles));
+}
+function hasRequestedAppRole(user, appRoles) {
+    return appRoles.length === 0 || appRoles.some((role) => user.appRoles.includes(role));
+}
+function isDisabled(value) {
+    if (value === true || value === 1)
+        return true;
+    if (typeof value === "string") {
+        const normalized = value.trim().toLowerCase();
+        return normalized === "1" || normalized === "true";
+    }
+    return false;
+}
+function appUserFromRow(row) {
+    return {
+        id: String(row.id),
+        name: String(row.name ?? row.email ?? ""),
+        email: String(row.email ?? ""),
+        // Host users always hold the plain user role, whatever the row says.
+        appRoles: isHostUserId(row.id) ? ["user"] : parseStoredAppRoles(row.appRoles),
+        disabled: isDisabled(row.banned)
+    };
+}
+function visibleAppUser(user, options) {
+    if (!options.includeDisabled && user.disabled)
+        return false;
+    return hasRequestedAppRole(user, options.appRoles);
+}
+function sqlLikePattern(value) {
+    return `%${value.replace(/[\\%_]/g, (char) => `\\${char}`)}%`;
+}
+function searchWhere(search, params) {
+    const term = String(search ?? "").trim();
+    if (!term)
+        return "";
+    const pattern = sqlLikePattern(term);
+    params.push(pattern, pattern);
+    return ` WHERE (LOWER("name") LIKE LOWER(?) ESCAPE '\\' OR LOWER("email") LIKE LOWER(?) ESCAPE '\\')`;
+}
+export async function listAppUsers(db, options = {}) {
+    const limit = clampLimit(options.limit);
+    const offset = clampOffset(options.offset);
+    const params = [];
+    const where = searchWhere(options.search, params);
+    const appRoles = requestedAppRoles(options.appRoles);
+    const rows = await db.all(`SELECT "id", "name", "email", "appRoles", "banned" FROM "_auth_users"${where} ORDER BY LOWER("name") ASC, LOWER("email") ASC, "id" ASC`, params);
+    const users = rows
+        .map(appUserFromRow)
+        .filter((user) => visibleAppUser(user, { appRoles, includeDisabled: options.includeDisabled }));
+    return {
+        users: users.slice(offset, offset + limit),
+        total: users.length,
+        limit,
+        offset
+    };
+}
+export async function getAppUserById(db, id, options = {}) {
+    const row = await db.first(`SELECT "id", "name", "email", "appRoles", "banned" FROM "_auth_users" WHERE "id" = ?`, [id]);
+    if (!row)
+        return null;
+    const user = appUserFromRow(row);
+    return visibleAppUser(user, { appRoles: requestedAppRoles(options.appRoles), includeDisabled: options.includeDisabled }) ? user : null;
+}
+export async function getAppUserByEmail(db, email, options = {}) {
+    const row = await db.first(`SELECT "id", "name", "email", "appRoles", "banned" FROM "_auth_users" WHERE LOWER("email") = LOWER(?)`, [email]);
+    if (!row)
+        return null;
+    const user = appUserFromRow(row);
+    return visibleAppUser(user, { appRoles: requestedAppRoles(options.appRoles), includeDisabled: options.includeDisabled }) ? user : null;
+}
+//# sourceMappingURL=app-users.js.map

package/dist/app-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.js","sourceRoot":"","sources":["../src/app-users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAyC9C,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACrF,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0D;IACnF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAkB,CAAC;IAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAoB,EAAE,QAAuB;IACxE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,UAAU,CAAC,KAA2B;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,GAAe;IACrC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,qEAAqE;QACrE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7E,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAoB,EAAE,OAA+D;IAC3G,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B,EAAE,MAAkB;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,8FAA8F,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAe,EAAE,UAA+B,EAAE;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CACvB,wEAAwE,KAAK,2DAA2D,EACxI,MAAM,CACP,CAAC;IACF,MAAM,KAAK,GAAG,IAAI;SACf,GAAG,CAAC,cAAc,CAAC;SACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAClG,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;QAC1C,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAe,EAAE,EAAU,EAAE,UAA6B,EAAE;IAC/F,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAa,sFAAsF,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACrI,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAe,EAAE,KAAa,EAAE,UAA6B,EAAE;IACrG,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAa,uGAAuG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzJ,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzI,CAAC"}

package/dist/audit-archive.d.ts

@@ -0,0 +1,85 @@
+import type { RaybaseAuthEnv } from "./auth.js";
+export { sha256Hex } from "./internal.js";
+export declare const auditArchiveContentType = "application/x-ndjson; charset=utf-8";
+export type AuditArchiveRow = {
+    id: string;
+    actorId: string | null;
+    action: string;
+    targetType: string;
+    targetId: string | null;
+    metadata: string | null;
+    createdAt: string;
+};
+export type AuditArchiveMetadata = {
+    windowStart: string;
+    windowEnd: string;
+    objectKey: string;
+    rowCount: number;
+    firstCreatedAt: string | null;
+    lastCreatedAt: string | null;
+    sha256: string;
+};
+export type PrepareAuditArchiveInput = {
+    windowStart: string;
+    windowEnd: string;
+    limitBytes?: number;
+};
+export type PreparedAuditArchive = {
+    empty: true;
+    windowStart: string;
+    windowEnd: string;
+} | ({
+    empty: false;
+    body?: string;
+    alreadyArchived?: true;
+} & AuditArchiveMetadata);
+export type ConfirmAuditArchiveInput = AuditArchiveMetadata;
+export type PruneAuditArchiveInput = {
+    windowStart: string;
+    windowEnd: string;
+    objectKey: string;
+    sha256: string;
+};
+export type AuditArchiveRunResult = {
+    ok: true;
+    skipped: true;
+    reason: "disabled" | "missing-r2-binding" | "no-eligible-window" | "empty-window";
+    archived: false;
+    pruned: false;
+} | ({
+    ok: true;
+    skipped: false;
+    archived: true;
+    pruned: true;
+} & AuditArchiveMetadata);
+export type RaybaseAuditArchiveEnv = RaybaseAuthEnv & {
+    RAYBASE_AUDIT_ARCHIVE?: R2Bucket;
+    RAYBASE_AUDIT_ARCHIVE_ENABLED?: string;
+    RAYBASE_AUDIT_HOT_DAYS?: string;
+};
+type ArchiveWindow = {
+    windowStart: string;
+    windowEnd: string;
+};
+type AuditArchiveStub = {
+    first<T extends Record<string, unknown> = Record<string, unknown>>(sql: string, params?: unknown[]): Promise<T | null>;
+    prepareAuditArchive(input: PrepareAuditArchiveInput): Promise<PreparedAuditArchive>;
+    confirmAuditArchive(input: ConfirmAuditArchiveInput): Promise<{
+        ok: true;
+    }>;
+    pruneAuditArchive(input: PruneAuditArchiveInput): Promise<{
+        ok: true;
+    }>;
+};
+export declare function validateAuditArchiveWindow(input: {
+    windowStart: string;
+    windowEnd: string;
+}, now?: Date): ArchiveWindow;
+export declare function auditArchiveObjectKey(windowStart: string): string;
+export declare function isoToSqliteTimestamp(value: string): string;
+export declare function serializeAuditArchiveRows(rows: readonly AuditArchiveRow[]): string;
+export declare function auditArchiveEnabled(value: string | undefined): boolean;
+export declare function parseAuditHotDays(value: string | undefined): number;
+export declare function nextAuditArchiveWindow(stub: Pick<AuditArchiveStub, "first">, now?: Date, hotDays?: number): Promise<ArchiveWindow | null>;
+export declare function archiveAuditToR2(env: RaybaseAuditArchiveEnv): Promise<AuditArchiveRunResult>;
+//# sourceMappingURL=audit-archive.d.ts.map

package/dist/audit-archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-archive.d.ts","sourceRoot":"","sources":["../src/audit-archive.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAK1C,eAAO,MAAM,uBAAuB,wCAAwC,CAAC;AAE7E,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC5B;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD,CAAC;IACC,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,IAAI,CAAC;CACxB,GAAG,oBAAoB,CAAC,CAAC;AAE9B,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAE5D,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,UAAU,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,cAAc,CAAC;IAClF,QAAQ,EAAE,KAAK,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;CACf,GACD,CAAC;IACC,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;IACf,QAAQ,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,IAAI,CAAC;CACd,GAAG,oBAAoB,CAAC,CAAC;AAE9B,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG;IACpD,qBAAqB,CAAC,EAAE,QAAQ,CAAC;IACjC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvH,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACpF,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC5E,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;CACzE,CAAC;AAoCF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,IAAiB,GAAG,aAAa,CAUnI;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAMjE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAelF;AAGD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGtE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAOnE;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EACrC,GAAG,GAAE,IAAiB,EACtB,OAAO,SAAI,GACV,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAY/B;AAqBD,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA8DlG"}