@rocicorp/zero 0.25.0 → 0.26.0-canary.0

package/out/zero/src/zero-cache-dev.js

@@ -1,123 +1,157 @@
 #!/usr/bin/env node
 import "../../shared/src/dotenv.js";
-import { resolver } from '@rocicorp/resolver';
-import { watch } from 'chokidar';
-import { spawn } from 'node:child_process';
+import { resolver } from "@rocicorp/resolver";
+import { watch } from "chokidar";
+import { spawn } from "node:child_process";
 import { createLogContext } from "../../shared/src/logging.js";
 import { parseOptionsAdvanced } from "../../shared/src/options.js";
-import { ZERO_ENV_VAR_PREFIX, zeroOptions, } from "../../zero-cache/src/config/zero-config.js";
+import "../../shared/src/valita.js";
+import { ZERO_ENV_VAR_PREFIX, zeroOptions } from "../../zero-cache/src/config/zero-config.js";
 import { deployPermissionsOptions } from "../../zero-cache/src/scripts/permissions.js";
-const deployPermissionsScript = 'zero-deploy-permissions';
-const zeroCacheScript = 'zero-cache';
+import { string } from "@badrap/valita";
+const deployPermissionsScript = "zero-deploy-permissions";
+const zeroCacheScript = "zero-cache";
 function killProcess(childProcess) {
-    if (!childProcess || childProcess.exitCode !== null) {
-        return Promise.resolve();
-    }
-    const { resolve, promise } = resolver();
-    childProcess.on('exit', resolve);
-    // Use SIGQUIT in particular since this will cause
-    // a fast zero-cache shutdown instead of a graceful drain.
-    childProcess.kill('SIGQUIT');
-    return promise;
+  if (!childProcess || childProcess.exitCode !== null) {
+    return Promise.resolve();
+  }
+  const { resolve, promise } = resolver();
+  childProcess.on("exit", resolve);
+  childProcess.kill("SIGQUIT");
+  return promise;
 }
 async function main() {
-    const { config } = parseOptionsAdvanced({
-        ...deployPermissionsOptions,
-        ...zeroOptions,
-    }, {
-        envNamePrefix: ZERO_ENV_VAR_PREFIX,
-        // TODO: This may no longer be necessary since multi-tenant was removed.
-        allowPartial: true, // required by server/runner/config.ts
-    });
-    const lc = createLogContext(config);
-    process.on('unhandledRejection', reason => {
-        lc.error?.('Unexpected unhandled rejection.', reason);
-        lc.error?.('Exiting');
-        process.exit(-1);
-    });
-    // Parse options for each subprocess to get environment variables
-    const { env: deployPermissionsEnv } = parseOptionsAdvanced(deployPermissionsOptions, {
-        envNamePrefix: ZERO_ENV_VAR_PREFIX,
-        allowUnknown: true,
+  const { config } = parseOptionsAdvanced(
+    {
+      schema: {
+        path: {
+          type: string().optional(),
+          desc: ["Relative path to the file containing permissions."],
+          alias: "p",
+          deprecated: [
+            "Permissions are deprecated and will be removed in an upcoming release. See: https://zero.rocicorp.dev/docs/auth."
+          ]
+        }
+      },
+      ...zeroOptions
+    },
+    {
+      envNamePrefix: ZERO_ENV_VAR_PREFIX,
+      // TODO: This may no longer be necessary since multi-tenant was removed.
+      allowPartial: true
+      // required by server/runner/config.ts
+    }
+  );
+  const lc = createLogContext(config);
+  process.on("unhandledRejection", (reason) => {
+    lc.error?.("Unexpected unhandled rejection.", reason);
+    lc.error?.("Exiting");
+    process.exit(-1);
+  });
+  const { env: deployPermissionsEnv } = parseOptionsAdvanced(
+    deployPermissionsOptions,
+    {
+      envNamePrefix: ZERO_ENV_VAR_PREFIX,
+      allowUnknown: true,
+      includeDefaults: false
+    }
+  );
+  const { env: zeroCacheEnv } = parseOptionsAdvanced(zeroOptions, {
+    envNamePrefix: ZERO_ENV_VAR_PREFIX,
+    allowUnknown: true,
+    includeDefaults: false
+  });
+  let permissionsProcess;
+  let zeroCacheProcess;
+  process.on("exit", () => {
+    permissionsProcess?.kill("SIGQUIT");
+    zeroCacheProcess?.kill("SIGQUIT");
+  });
+  async function deployPermissions() {
+    if (config.upstream.type !== "pg") {
+      lc.warn?.(
+        `Skipping permissions deployment for ${config.upstream.type} upstream`
+      );
+      return true;
+    }
+    permissionsProcess?.removeAllListeners("exit");
+    await killProcess(permissionsProcess);
+    permissionsProcess = void 0;
+    lc.info?.(`Running ${deployPermissionsScript}.`);
+    permissionsProcess = spawn(deployPermissionsScript, [], {
+      env: { ...process.env, ...deployPermissionsEnv },
+      stdio: "inherit",
+      shell: true
     });
-    const { env: zeroCacheEnv } = parseOptionsAdvanced(zeroOptions, {
-        envNamePrefix: ZERO_ENV_VAR_PREFIX,
-        allowUnknown: true,
+    const { promise: code, resolve } = resolver();
+    permissionsProcess.on("exit", resolve);
+    if (await code === 0) {
+      lc.info?.(`${deployPermissionsScript} completed successfully.`);
+      return true;
+    }
+    lc.error?.(`Failed to deploy permissions from ${config.schema.path}.`);
+    return false;
+  }
+  async function startZeroCache() {
+    zeroCacheProcess?.removeAllListeners("exit");
+    await killProcess(zeroCacheProcess);
+    zeroCacheProcess = void 0;
+    lc.info?.(
+      `Running ${zeroCacheScript} at
+
+	http://localhost:${config.port}
+`
+    );
+    const env = {
+      // Set some low defaults so as to use fewer resources and not trip up,
+      // e.g. developers sharing a database.
+      ["ZERO_NUM_SYNC_WORKERS"]: "3",
+      ["ZERO_CVR_MAX_CONNS"]: "6",
+      ["ZERO_UPSTREAM_MAX_CONNS"]: "6",
+      // Default NODE_ENV to development mode.
+      // @ts-ignore NODE_ENV is not always set. Please ignore error.
+      ["NODE_ENV"]: "development",
+      // But let the developer override any of these dev defaults.
+      ...process.env,
+      ...zeroCacheEnv
+    };
+    zeroCacheProcess = spawn(zeroCacheScript, [], {
+      env,
+      stdio: "inherit",
+      shell: true
     });
-    const { path } = config.schema;
-    let permissionsProcess;
-    let zeroCacheProcess;
-    // Ensure child processes are killed when the main process exits
-    process.on('exit', () => {
-        permissionsProcess?.kill('SIGQUIT');
-        zeroCacheProcess?.kill('SIGQUIT');
+    zeroCacheProcess.on("exit", () => {
+      lc.error?.(`${zeroCacheScript} exited. Exiting.`);
+      process.exit(-1);
     });
-    async function deployPermissions() {
-        if (config.upstream.type !== 'pg') {
-            lc.warn?.(`Skipping permissions deployment for ${config.upstream.type} upstream`);
-            return true;
-        }
-        permissionsProcess?.removeAllListeners('exit');
-        await killProcess(permissionsProcess);
-        permissionsProcess = undefined;
-        lc.info?.(`Running ${deployPermissionsScript}.`);
-        permissionsProcess = spawn(deployPermissionsScript, [], {
-            env: { ...process.env, ...deployPermissionsEnv },
-            stdio: 'inherit',
-            shell: true,
-        });
-        const { promise: code, resolve } = resolver();
-        permissionsProcess.on('exit', resolve);
-        if ((await code) === 0) {
-            lc.info?.(`${deployPermissionsScript} completed successfully.`);
-            return true;
-        }
-        lc.error?.(`Failed to deploy permissions from ${path}.`);
-        return false;
+  }
+  async function deployPermissionsAndStartZeroCache() {
+    if (await deployPermissions()) {
+      await startZeroCache();
     }
-    async function deployPermissionsAndStartZeroCache() {
-        zeroCacheProcess?.removeAllListeners('exit');
-        await killProcess(zeroCacheProcess);
-        zeroCacheProcess = undefined;
-        if (await deployPermissions()) {
-            lc.info?.(`Running ${zeroCacheScript} at\n\n\thttp://localhost:${config.port}\n`);
-            const env = {
-                // Set some low defaults so as to use fewer resources and not trip up,
-                // e.g. developers sharing a database.
-                ['ZERO_NUM_SYNC_WORKERS']: '3',
-                ['ZERO_CVR_MAX_CONNS']: '6',
-                ['ZERO_UPSTREAM_MAX_CONNS']: '6',
-                // Default NODE_ENV to development mode.
-                // @ts-ignore NODE_ENV is not always set. Please ignore error.
-                ['NODE_ENV']: 'development',
-                // But let the developer override any of these dev defaults.
-                ...process.env,
-                ...zeroCacheEnv,
-            };
-            zeroCacheProcess = spawn(zeroCacheScript, [], {
-                env,
-                stdio: 'inherit',
-                shell: true,
-            });
-            zeroCacheProcess.on('exit', () => {
-                lc.error?.(`${zeroCacheScript} exited. Exiting.`);
-                process.exit(-1);
-            });
-        }
+  }
+  if (config.schema.path) {
+    if (config.query.url && config.mutate.url) {
+      lc.error?.(
+        "Cannot use -p/--path/ZERO_SCHEMA_PATH flag when using ZERO_MUTATE_URL and ZERO_QUERY_URL."
+      );
+      process.exit(-1);
     }
     await deployPermissionsAndStartZeroCache();
-    // Watch for file changes
-    const watcher = watch(path, {
-        ignoreInitial: true,
-        awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 },
+    const watcher = watch(config.schema.path, {
+      ignoreInitial: true,
+      awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 }
     });
     const onFileChange = async () => {
-        lc.info?.(`Detected ${path} change.`);
-        await deployPermissions();
+      lc.info?.(`Detected ${config.schema.path} change.`);
+      await deployPermissions();
     };
-    watcher.on('add', onFileChange);
-    watcher.on('change', onFileChange);
-    watcher.on('unlink', onFileChange);
+    watcher.on("add", onFileChange);
+    watcher.on("change", onFileChange);
+    watcher.on("unlink", onFileChange);
+  } else {
+    await startZeroCache();
+  }
 }
 void main();
-//# sourceMappingURL=zero-cache-dev.js.map
+//# sourceMappingURL=zero-cache-dev.js.map

package/out/zero/src/zero-cache-dev.js.map

@@ -1 +1 @@
-{"version":3,"file":"zero-cache-dev.js","sourceRoot":"","sources":["../../../src/zero-cache-dev.ts"],"names":[],"mappings":";AAEA,OAAO,4BAA4B,CAAC;AAEpC,OAAO,EAAC,QAAQ,EAAC,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAC,KAAK,EAAC,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAC,KAAK,EAAoB,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAC,gBAAgB,EAAC,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAC,oBAAoB,EAAC,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,WAAW,GACZ,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAC,wBAAwB,EAAC,MAAM,6CAA6C,CAAC;AAErF,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,SAAS,WAAW,CAAC,YAAsC;IACzD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,EAAC,OAAO,EAAE,OAAO,EAAC,GAAG,QAAQ,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,kDAAkD;IAClD,0DAA0D;IAC1D,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAC,MAAM,EAAC,GAAG,oBAAoB,CACnC;QACE,GAAG,wBAAwB;QAC3B,GAAG,WAAW;KACf,EACD;QACE,aAAa,EAAE,mBAAmB;QAClC,wEAAwE;QACxE,YAAY,EAAE,IAAI,EAAE,sCAAsC;KAC3D,CACF,CAAC;IAEF,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAAE;QACxC,EAAE,CAAC,KAAK,EAAE,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;QACtD,EAAE,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,EAAC,GAAG,EAAE,oBAAoB,EAAC,GAAG,oBAAoB,CACtD,wBAAwB,EACxB;QACE,aAAa,EAAE,mBAAmB;QAClC,YAAY,EAAE,IAAI;KACnB,CACF,CAAC;IACF,MAAM,EAAC,GAAG,EAAE,YAAY,EAAC,GAAG,oBAAoB,CAAC,WAAW,EAAE;QAC5D,aAAa,EAAE,mBAAmB;QAClC,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,MAAM,EAAC,IAAI,EAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,IAAI,kBAA4C,CAAC;IACjD,IAAI,gBAA0C,CAAC;IAE/C,gEAAgE;IAChE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,iBAAiB;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAClC,EAAE,CAAC,IAAI,EAAE,CACP,uCAAuC,MAAM,CAAC,QAAQ,CAAC,IAAI,WAAW,CACvE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kBAAkB,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC;QACtC,kBAAkB,GAAG,SAAS,CAAC;QAE/B,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,uBAAuB,GAAG,CAAC,CAAC;QACjD,kBAAkB,GAAG,KAAK,CAAC,uBAAuB,EAAE,EAAE,EAAE;YACtD,GAAG,EAAE,EAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAC;YAC9C,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,MAAM,EAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAC,GAAG,QAAQ,EAAU,CAAC;QACpD,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,uBAAuB,0BAA0B,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,EAAE,CAAC,KAAK,EAAE,CAAC,qCAAqC,IAAI,GAAG,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,kCAAkC;QAC/C,gBAAgB,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACpC,gBAAgB,GAAG,SAAS,CAAC;QAE7B,IAAI,MAAM,iBAAiB,EAAE,EAAE,CAAC;YAC9B,EAAE,CAAC,IAAI,EAAE,CACP,WAAW,eAAe,6BAA6B,MAAM,CAAC,IAAI,IAAI,CACvE,CAAC;YACF,MAAM,GAAG,GAAsB;gBAC7B,sEAAsE;gBACtE,sCAAsC;gBACtC,CAAC,uBAAuB,CAAC,EAAE,GAAG;gBAC9B,CAAC,oBAAoB,CAAC,EAAE,GAAG;gBAC3B,CAAC,yBAAyB,CAAC,EAAE,GAAG;gBAEhC,wCAAwC;gBACxC,8DAA8D;gBAC9D,CAAC,UAAU,CAAC,EAAE,aAAa;gBAE3B,4DAA4D;gBAC5D,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,YAAY;aAChB,CAAC;YACF,gBAAgB,GAAG,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE;gBAC5C,GAAG;gBACH,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,eAAe,mBAAmB,CAAC,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,kCAAkC,EAAE,CAAC;IAE3C,yBAAyB;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE;QAC1B,aAAa,EAAE,IAAI;QACnB,gBAAgB,EAAE,EAAC,kBAAkB,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAC;KAC/D,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;QAC9B,EAAE,CAAC,IAAI,EAAE,CAAC,YAAY,IAAI,UAAU,CAAC,CAAC;QACtC,MAAM,iBAAiB,EAAE,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,IAAI,EAAE,CAAC"}
+{"version":3,"file":"zero-cache-dev.js","sources":["../../../src/zero-cache-dev.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport '../../shared/src/dotenv.ts';\n\nimport {resolver} from '@rocicorp/resolver';\nimport {watch} from 'chokidar';\nimport {spawn, type ChildProcess} from 'node:child_process';\nimport {createLogContext} from '../../shared/src/logging.ts';\nimport {parseOptionsAdvanced} from '../../shared/src/options.ts';\nimport * as v from '../../shared/src/valita.ts';\nimport {\n  ZERO_ENV_VAR_PREFIX,\n  zeroOptions,\n} from '../../zero-cache/src/config/zero-config.ts';\nimport {deployPermissionsOptions} from '../../zero-cache/src/scripts/permissions.ts';\n\nconst deployPermissionsScript = 'zero-deploy-permissions';\nconst zeroCacheScript = 'zero-cache';\n\nfunction killProcess(childProcess: ChildProcess | undefined) {\n  if (!childProcess || childProcess.exitCode !== null) {\n    return Promise.resolve();\n  }\n  const {resolve, promise} = resolver();\n  childProcess.on('exit', resolve);\n  // Use SIGQUIT in particular since this will cause\n  // a fast zero-cache shutdown instead of a graceful drain.\n  childProcess.kill('SIGQUIT');\n  return promise;\n}\n\nasync function main() {\n  const {config} = parseOptionsAdvanced(\n    {\n      schema: {\n        path: {\n          type: v.string().optional(),\n          desc: ['Relative path to the file containing permissions.'],\n          alias: 'p',\n          deprecated: [\n            'Permissions are deprecated and will be removed in an upcoming release. See: https://zero.rocicorp.dev/docs/auth.',\n          ],\n        },\n      },\n      ...zeroOptions,\n    },\n    {\n      envNamePrefix: ZERO_ENV_VAR_PREFIX,\n      // TODO: This may no longer be necessary since multi-tenant was removed.\n      allowPartial: true, // required by server/runner/config.ts\n    },\n  );\n\n  const lc = createLogContext(config);\n\n  process.on('unhandledRejection', reason => {\n    lc.error?.('Unexpected unhandled rejection.', reason);\n    lc.error?.('Exiting');\n    process.exit(-1);\n  });\n\n  // Parse options for each subprocess to get environment variables\n  const {env: deployPermissionsEnv} = parseOptionsAdvanced(\n    deployPermissionsOptions,\n    {\n      envNamePrefix: ZERO_ENV_VAR_PREFIX,\n      allowUnknown: true,\n      includeDefaults: false,\n    },\n  );\n  const {env: zeroCacheEnv} = parseOptionsAdvanced(zeroOptions, {\n    envNamePrefix: ZERO_ENV_VAR_PREFIX,\n    allowUnknown: true,\n    includeDefaults: false,\n  });\n\n  let permissionsProcess: ChildProcess | undefined;\n  let zeroCacheProcess: ChildProcess | undefined;\n\n  // Ensure child processes are killed when the main process exits\n  process.on('exit', () => {\n    permissionsProcess?.kill('SIGQUIT');\n    zeroCacheProcess?.kill('SIGQUIT');\n  });\n\n  async function deployPermissions(): Promise<boolean> {\n    if (config.upstream.type !== 'pg') {\n      lc.warn?.(\n        `Skipping permissions deployment for ${config.upstream.type} upstream`,\n      );\n      return true;\n    }\n    permissionsProcess?.removeAllListeners('exit');\n    await killProcess(permissionsProcess);\n    permissionsProcess = undefined;\n\n    lc.info?.(`Running ${deployPermissionsScript}.`);\n    permissionsProcess = spawn(deployPermissionsScript, [], {\n      env: {...process.env, ...deployPermissionsEnv},\n      stdio: 'inherit',\n      shell: true,\n    });\n\n    const {promise: code, resolve} = resolver<number>();\n    permissionsProcess.on('exit', resolve);\n    if ((await code) === 0) {\n      lc.info?.(`${deployPermissionsScript} completed successfully.`);\n      return true;\n    }\n    lc.error?.(`Failed to deploy permissions from ${config.schema.path}.`);\n    return false;\n  }\n\n  async function startZeroCache() {\n    zeroCacheProcess?.removeAllListeners('exit');\n    await killProcess(zeroCacheProcess);\n    zeroCacheProcess = undefined;\n\n    lc.info?.(\n      `Running ${zeroCacheScript} at\\n\\n\\thttp://localhost:${config.port}\\n`,\n    );\n    const env: NodeJS.ProcessEnv = {\n      // Set some low defaults so as to use fewer resources and not trip up,\n      // e.g. developers sharing a database.\n      ['ZERO_NUM_SYNC_WORKERS']: '3',\n      ['ZERO_CVR_MAX_CONNS']: '6',\n      ['ZERO_UPSTREAM_MAX_CONNS']: '6',\n\n      // Default NODE_ENV to development mode.\n      // @ts-ignore NODE_ENV is not always set. Please ignore error.\n      ['NODE_ENV']: 'development',\n\n      // But let the developer override any of these dev defaults.\n      ...process.env,\n      ...zeroCacheEnv,\n    };\n    zeroCacheProcess = spawn(zeroCacheScript, [], {\n      env,\n      stdio: 'inherit',\n      shell: true,\n    });\n    zeroCacheProcess.on('exit', () => {\n      lc.error?.(`${zeroCacheScript} exited. Exiting.`);\n      process.exit(-1);\n    });\n  }\n\n  async function deployPermissionsAndStartZeroCache() {\n    if (await deployPermissions()) {\n      await startZeroCache();\n    }\n  }\n\n  if (config.schema.path) {\n    if (config.query.url && config.mutate.url) {\n      lc.error?.(\n        'Cannot use -p/--path/ZERO_SCHEMA_PATH flag when using ZERO_MUTATE_URL and ZERO_QUERY_URL.',\n      );\n      process.exit(-1);\n    }\n\n    await deployPermissionsAndStartZeroCache();\n\n    // Watch for file changes\n    const watcher = watch(config.schema.path, {\n      ignoreInitial: true,\n      awaitWriteFinish: {stabilityThreshold: 500, pollInterval: 100},\n    });\n    const onFileChange = async () => {\n      lc.info?.(`Detected ${config.schema.path} change.`);\n      await deployPermissions();\n    };\n    watcher.on('add', onFileChange);\n    watcher.on('change', onFileChange);\n    watcher.on('unlink', onFileChange);\n  } else {\n    await startZeroCache();\n  }\n}\n\nvoid main();\n"],"names":["v.string"],"mappings":";;;;;;;;;;;AAgBA,MAAM,0BAA0B;AAChC,MAAM,kBAAkB;AAExB,SAAS,YAAY,cAAwC;AAC3D,MAAI,CAAC,gBAAgB,aAAa,aAAa,MAAM;AACnD,WAAO,QAAQ,QAAA;AAAA,EACjB;AACA,QAAM,EAAC,SAAS,QAAA,IAAW,SAAA;AAC3B,eAAa,GAAG,QAAQ,OAAO;AAG/B,eAAa,KAAK,SAAS;AAC3B,SAAO;AACT;AAEA,eAAe,OAAO;AACpB,QAAM,EAAC,WAAU;AAAA,IACf;AAAA,MACE,QAAQ;AAAA,QACN,MAAM;AAAA,UACJ,MAAMA,OAAE,EAAS,SAAA;AAAA,UACjB,MAAM,CAAC,mDAAmD;AAAA,UAC1D,OAAO;AAAA,UACP,YAAY;AAAA,YACV;AAAA,UAAA;AAAA,QACF;AAAA,MACF;AAAA,MAEF,GAAG;AAAA,IAAA;AAAA,IAEL;AAAA,MACE,eAAe;AAAA;AAAA,MAEf,cAAc;AAAA;AAAA,IAAA;AAAA,EAChB;AAGF,QAAM,KAAK,iBAAiB,MAAM;AAElC,UAAQ,GAAG,sBAAsB,CAAA,WAAU;AACzC,OAAG,QAAQ,mCAAmC,MAAM;AACpD,OAAG,QAAQ,SAAS;AACpB,YAAQ,KAAK,EAAE;AAAA,EACjB,CAAC;AAGD,QAAM,EAAC,KAAK,qBAAA,IAAwB;AAAA,IAClC;AAAA,IACA;AAAA,MACE,eAAe;AAAA,MACf,cAAc;AAAA,MACd,iBAAiB;AAAA,IAAA;AAAA,EACnB;AAEF,QAAM,EAAC,KAAK,iBAAgB,qBAAqB,aAAa;AAAA,IAC5D,eAAe;AAAA,IACf,cAAc;AAAA,IACd,iBAAiB;AAAA,EAAA,CAClB;AAED,MAAI;AACJ,MAAI;AAGJ,UAAQ,GAAG,QAAQ,MAAM;AACvB,wBAAoB,KAAK,SAAS;AAClC,sBAAkB,KAAK,SAAS;AAAA,EAClC,CAAC;AAED,iBAAe,oBAAsC;AACnD,QAAI,OAAO,SAAS,SAAS,MAAM;AACjC,SAAG;AAAA,QACD,uCAAuC,OAAO,SAAS,IAAI;AAAA,MAAA;AAE7D,aAAO;AAAA,IACT;AACA,wBAAoB,mBAAmB,MAAM;AAC7C,UAAM,YAAY,kBAAkB;AACpC,yBAAqB;AAErB,OAAG,OAAO,WAAW,uBAAuB,GAAG;AAC/C,yBAAqB,MAAM,yBAAyB,IAAI;AAAA,MACtD,KAAK,EAAC,GAAG,QAAQ,KAAK,GAAG,qBAAA;AAAA,MACzB,OAAO;AAAA,MACP,OAAO;AAAA,IAAA,CACR;AAED,UAAM,EAAC,SAAS,MAAM,QAAA,IAAW,SAAA;AACjC,uBAAmB,GAAG,QAAQ,OAAO;AACrC,QAAK,MAAM,SAAU,GAAG;AACtB,SAAG,OAAO,GAAG,uBAAuB,0BAA0B;AAC9D,aAAO;AAAA,IACT;AACA,OAAG,QAAQ,qCAAqC,OAAO,OAAO,IAAI,GAAG;AACrE,WAAO;AAAA,EACT;AAEA,iBAAe,iBAAiB;AAC9B,sBAAkB,mBAAmB,MAAM;AAC3C,UAAM,YAAY,gBAAgB;AAClC,uBAAmB;AAEnB,OAAG;AAAA,MACD,WAAW,eAAe;AAAA;AAAA,oBAA6B,OAAO,IAAI;AAAA;AAAA,IAAA;AAEpE,UAAM,MAAyB;AAAA;AAAA;AAAA,MAG7B,CAAC,uBAAuB,GAAG;AAAA,MAC3B,CAAC,oBAAoB,GAAG;AAAA,MACxB,CAAC,yBAAyB,GAAG;AAAA;AAAA;AAAA,MAI7B,CAAC,UAAU,GAAG;AAAA;AAAA,MAGd,GAAG,QAAQ;AAAA,MACX,GAAG;AAAA,IAAA;AAEL,uBAAmB,MAAM,iBAAiB,IAAI;AAAA,MAC5C;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,IAAA,CACR;AACD,qBAAiB,GAAG,QAAQ,MAAM;AAChC,SAAG,QAAQ,GAAG,eAAe,mBAAmB;AAChD,cAAQ,KAAK,EAAE;AAAA,IACjB,CAAC;AAAA,EACH;AAEA,iBAAe,qCAAqC;AAClD,QAAI,MAAM,qBAAqB;AAC7B,YAAM,eAAA;AAAA,IACR;AAAA,EACF;AAEA,MAAI,OAAO,OAAO,MAAM;AACtB,QAAI,OAAO,MAAM,OAAO,OAAO,OAAO,KAAK;AACzC,SAAG;AAAA,QACD;AAAA,MAAA;AAEF,cAAQ,KAAK,EAAE;AAAA,IACjB;AAEA,UAAM,mCAAA;AAGN,UAAM,UAAU,MAAM,OAAO,OAAO,MAAM;AAAA,MACxC,eAAe;AAAA,MACf,kBAAkB,EAAC,oBAAoB,KAAK,cAAc,IAAA;AAAA,IAAG,CAC9D;AACD,UAAM,eAAe,YAAY;AAC/B,SAAG,OAAO,YAAY,OAAO,OAAO,IAAI,UAAU;AAClD,YAAM,kBAAA;AAAA,IACR;AACA,YAAQ,GAAG,OAAO,YAAY;AAC9B,YAAQ,GAAG,UAAU,YAAY;AACjC,YAAQ,GAAG,UAAU,YAAY;AAAA,EACnC,OAAO;AACL,UAAM,eAAA;AAAA,EACR;AACF;AAEA,KAAK,KAAA;"}

package/out/zero/src/zero-out.js

@@ -2,12 +2,12 @@
 import "../../shared/src/dotenv.js";
 import { createLogContext } from "../../shared/src/logging.js";
 import { parseOptions } from "../../shared/src/options.js";
-import { ZERO_ENV_VAR_PREFIX as envNamePrefix } from "../../zero-cache/src/config/zero-config.js";
-import { decommissionOptions, decommissionZero, } from "../../zero-cache/src/scripts/decommission.js";
+import { ZERO_ENV_VAR_PREFIX } from "../../zero-cache/src/config/zero-config.js";
+import { decommissionOptions, decommissionZero } from "../../zero-cache/src/scripts/decommission.js";
 async function main() {
-    const config = parseOptions(decommissionOptions, { envNamePrefix });
-    const lc = createLogContext(config);
-    await decommissionZero(lc, config);
+  const config = parseOptions(decommissionOptions, { envNamePrefix: ZERO_ENV_VAR_PREFIX });
+  const lc = createLogContext(config);
+  await decommissionZero(lc, config);
 }
 void main();
-//# sourceMappingURL=zero-out.js.map
+//# sourceMappingURL=zero-out.js.map

package/out/zero/src/zero-out.js.map

@@ -1 +1 @@
-{"version":3,"file":"zero-out.js","sourceRoot":"","sources":["../../../src/zero-out.ts"],"names":[],"mappings":";AAEA,OAAO,4BAA4B,CAAC;AAEpC,OAAO,EAAC,gBAAgB,EAAC,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAC,YAAY,EAAC,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAC,mBAAmB,IAAI,aAAa,EAAC,MAAM,4CAA4C,CAAC;AAChG,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,8CAA8C,CAAC;AAEtD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,EAAE,EAAC,aAAa,EAAC,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,IAAI,EAAE,CAAC"}
+{"version":3,"file":"zero-out.js","sources":["../../../src/zero-out.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport '../../shared/src/dotenv.ts';\n\nimport {createLogContext} from '../../shared/src/logging.ts';\nimport {parseOptions} from '../../shared/src/options.ts';\nimport {ZERO_ENV_VAR_PREFIX as envNamePrefix} from '../../zero-cache/src/config/zero-config.ts';\nimport {\n  decommissionOptions,\n  decommissionZero,\n} from '../../zero-cache/src/scripts/decommission.ts';\n\nasync function main() {\n  const config = parseOptions(decommissionOptions, {envNamePrefix});\n  const lc = createLogContext(config);\n  await decommissionZero(lc, config);\n}\n\nvoid main();\n"],"names":["envNamePrefix"],"mappings":";;;;;;AAYA,eAAe,OAAO;AACpB,QAAM,SAAS,aAAa,qBAAqB,EAAA,eAACA,qBAAc;AAChE,QAAM,KAAK,iBAAiB,MAAM;AAClC,QAAM,iBAAiB,IAAI,MAAM;AACnC;AAEA,KAAK,KAAA;"}

package/out/zero/src/zero.js

@@ -0,0 +1,71 @@
+import { getDefaultPuller } from "../../replicache/src/get-default-puller.js";
+import { IDBNotFoundError } from "../../replicache/src/kv/idb-store.js";
+import { makeIDBName } from "../../replicache/src/make-idb-name.js";
+import { dropAllDatabases, dropDatabase } from "../../replicache/src/persist/collect-idb-databases.js";
+import { TransactionClosedError } from "../../replicache/src/transaction-closed-error.js";
+import { ApplicationError } from "../../zero-protocol/src/application-error.js";
+import { transformRequestMessageSchema, transformResponseMessageSchema } from "../../zero-protocol/src/custom-queries.js";
+import { relationships } from "../../zero-schema/src/builder/relationship-builder.js";
+import { createSchema } from "../../zero-schema/src/builder/schema-builder.js";
+import { boolean, enumeration, json, number, string, table } from "../../zero-schema/src/builder/table-builder.js";
+import { ANYONE_CAN, ANYONE_CAN_DO_ANYTHING, NOBODY_CAN, definePermissions } from "../../zero-schema/src/permissions.js";
+import { defineMutators, defineMutatorsWithType, getMutator, isMutatorRegistry, mustGetMutator } from "../../zql/src/mutate/mutator-registry.js";
+import { defineMutator, defineMutatorWithType, isMutator, isMutatorDefinition } from "../../zql/src/mutate/mutator.js";
+import { createBuilder } from "../../zql/src/query/create-builder.js";
+import { escapeLike } from "../../zql/src/query/escape-like.js";
+import { syncedQuery, syncedQueryWithContext, withValidation } from "../../zql/src/query/named.js";
+import { defineQueries, defineQueriesWithType, defineQuery, defineQueryWithType, getQuery, isQuery, isQueryDefinition, isQueryRegistry, mustGetQuery } from "../../zql/src/query/query-registry.js";
+import "../../zero-protocol/src/ast.js";
+import * as connectionStatusEnum from "../../zero-client/src/client/connection-status-enum.js";
+import * as updateNeededReasonTypeEnum from "../../zero-client/src/client/update-needed-reason-type-enum.js";
+import { Zero } from "../../zero-client/src/client/zero.js";
+export {
+  ANYONE_CAN,
+  ANYONE_CAN_DO_ANYTHING,
+  ApplicationError,
+  connectionStatusEnum as ConnectionStatus,
+  IDBNotFoundError,
+  NOBODY_CAN,
+  TransactionClosedError,
+  updateNeededReasonTypeEnum as UpdateNeededReasonType,
+  Zero,
+  boolean,
+  createBuilder,
+  createSchema,
+  defineMutator,
+  defineMutatorWithType,
+  defineMutators,
+  defineMutatorsWithType,
+  definePermissions,
+  defineQueries,
+  defineQueriesWithType,
+  defineQuery,
+  defineQueryWithType,
+  dropAllDatabases,
+  dropDatabase,
+  enumeration,
+  escapeLike,
+  getDefaultPuller,
+  getMutator,
+  getQuery,
+  isMutator,
+  isMutatorDefinition,
+  isMutatorRegistry,
+  isQuery,
+  isQueryDefinition,
+  isQueryRegistry,
+  json,
+  makeIDBName,
+  mustGetMutator,
+  mustGetQuery,
+  number,
+  relationships,
+  string,
+  syncedQuery,
+  syncedQueryWithContext,
+  table,
+  transformRequestMessageSchema,
+  transformResponseMessageSchema,
+  withValidation
+};
+//# sourceMappingURL=zero.js.map

package/out/zero/src/zero.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;"}

package/out/zero/src/zqlite.js

@@ -1,3 +1,11 @@
-// oxlint-disable-next-line no-restricted-imports
-export * from "../../zqlite/src/mod.js";
-//# sourceMappingURL=zqlite.js.map
+import { defaultFormat } from "../../zero-types/src/format.js";
+import { QueryImpl } from "../../zql/src/query/query-impl.js";
+import { Database } from "../../zqlite/src/db.js";
+import { QueryDelegateImpl } from "../../zqlite/src/query-delegate.js";
+export {
+  Database,
+  QueryDelegateImpl as QueryDelegate,
+  QueryImpl,
+  defaultFormat
+};
+//# sourceMappingURL=zqlite.js.map

package/out/zero/src/zqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"zqlite.js","sourceRoot":"","sources":["../../../src/zqlite.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"zqlite.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;"}

package/out/zero-cache/src/auth/jwt.d.ts

@@ -1,9 +1,12 @@
 import { type JWK, type JWTClaimVerificationOptions, type JWTPayload } from 'jose';
 import type { AuthConfig } from '../config/zero-config.ts';
+/** @deprecated */
 export declare function createJwkPair(): Promise<{
     privateJwk: JWK;
     publicJwk: JWK;
 }>;
+/** @deprecated */
 export declare const tokenConfigOptions: (config: AuthConfig) => ("jwk" | "jwksUrl" | "secret")[];
+/** @deprecated */
 export declare function verifyToken(config: AuthConfig, token: string, verifyOptions: JWTClaimVerificationOptions): Promise<JWTPayload>;
 //# sourceMappingURL=jwt.d.ts.map

package/out/zero-cache/src/auth/jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../../zero-cache/src/auth/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,GAAG,EACR,KAAK,2BAA2B,EAChC,KAAK,UAAU,EAEhB,MAAM,MAAM,CAAC;AACd,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAGzD,wBAAsB,aAAa;;;GAelC;AAWD,eAAO,MAAM,kBAAkB,GAAI,QAAQ,UAAU,qCAMpD,CAAC;AAEF,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,2BAA2B,GACzC,OAAO,CAAC,UAAU,CAAC,CAiBrB"}
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../../zero-cache/src/auth/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,GAAG,EACR,KAAK,2BAA2B,EAChC,KAAK,UAAU,EAEhB,MAAM,MAAM,CAAC;AACd,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAEzD,kBAAkB;AAClB,wBAAsB,aAAa;;;GAelC;AAWD,kBAAkB;AAClB,eAAO,MAAM,kBAAkB,GAAI,QAAQ,UAAU,qCAMpD,CAAC;AAEF,kBAAkB;AAClB,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,2BAA2B,GACzC,OAAO,CAAC,UAAU,CAAC,CAiBrB"}

package/out/zero-cache/src/auth/jwt.js

@@ -1,49 +1,44 @@
-import { createRemoteJWKSet, jwtVerify, } from 'jose';
-import { exportJWK, generateKeyPair } from 'jose';
-export async function createJwkPair() {
-    const { publicKey, privateKey } = await generateKeyPair('PS256');
-    const privateJwk = await exportJWK(privateKey);
-    const publicJwk = await exportJWK(publicKey);
-    privateJwk.kid = 'key-2024-001';
-    privateJwk.use = 'sig';
-    privateJwk.alg = 'PS256';
-    publicJwk.kid = privateJwk.kid;
-    publicJwk.use = privateJwk.use;
-    publicJwk.alg = privateJwk.alg;
-    return { privateJwk, publicJwk };
-}
+import { jwtVerify, createRemoteJWKSet } from "jose";
 let remoteKeyset;
 function getRemoteKeyset(jwksUrl) {
-    if (remoteKeyset === undefined) {
-        remoteKeyset = createRemoteJWKSet(new URL(jwksUrl));
-    }
-    return remoteKeyset;
+  if (remoteKeyset === void 0) {
+    remoteKeyset = createRemoteJWKSet(new URL(jwksUrl));
+  }
+  return remoteKeyset;
 }
-export const tokenConfigOptions = (config) => {
-    const tokenOptions = ['jwk', 'secret', 'jwksUrl'].filter(key => config[key] !== undefined);
-    return tokenOptions;
+const tokenConfigOptions = (config) => {
+  const tokenOptions = ["jwk", "secret", "jwksUrl"].filter(
+    (key) => config[key] !== void 0
+  );
+  return tokenOptions;
 };
-export async function verifyToken(config, token, verifyOptions) {
-    if (config.jwk !== undefined) {
-        return verifyTokenImpl(token, loadJwk(config.jwk), verifyOptions);
-    }
-    if (config.secret !== undefined) {
-        return verifyTokenImpl(token, loadSecret(config.secret), verifyOptions);
-    }
-    if (config.jwksUrl !== undefined) {
-        const remoteKeyset = getRemoteKeyset(config.jwksUrl);
-        return (await jwtVerify(token, remoteKeyset, verifyOptions)).payload;
-    }
-    throw new Error('verifyToken was called but no auth options (one of: jwk, secret, jwksUrl) were configured.');
+async function verifyToken(config, token, verifyOptions) {
+  if (config.jwk !== void 0) {
+    return verifyTokenImpl(token, loadJwk(config.jwk), verifyOptions);
+  }
+  if (config.secret !== void 0) {
+    return verifyTokenImpl(token, loadSecret(config.secret), verifyOptions);
+  }
+  if (config.jwksUrl !== void 0) {
+    const remoteKeyset2 = getRemoteKeyset(config.jwksUrl);
+    return (await jwtVerify(token, remoteKeyset2, verifyOptions)).payload;
+  }
+  throw new Error(
+    "verifyToken was called but no auth options (one of: jwk, secret, jwksUrl) were configured."
+  );
 }
 function loadJwk(jwkString) {
-    return JSON.parse(jwkString);
+  return JSON.parse(jwkString);
 }
 function loadSecret(secret) {
-    return new TextEncoder().encode(secret);
+  return new TextEncoder().encode(secret);
 }
 async function verifyTokenImpl(token, verifyKey, verifyOptions) {
-    const { payload } = await jwtVerify(token, verifyKey, verifyOptions);
-    return payload;
+  const { payload } = await jwtVerify(token, verifyKey, verifyOptions);
+  return payload;
 }
-//# sourceMappingURL=jwt.js.map
+export {
+  tokenConfigOptions,
+  verifyToken
+};
+//# sourceMappingURL=jwt.js.map

package/out/zero-cache/src/auth/jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../../../zero-cache/src/auth/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,SAAS,GAKV,MAAM,MAAM,CAAC;AAEd,OAAO,EAAC,SAAS,EAAE,eAAe,EAAC,MAAM,MAAM,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,EAAC,SAAS,EAAE,UAAU,EAAC,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAE7C,UAAU,CAAC,GAAG,GAAG,cAAc,CAAC;IAChC,UAAU,CAAC,GAAG,GAAG,KAAK,CAAC;IACvB,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC;IAEzB,SAAS,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC/B,SAAS,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC/B,SAAS,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAE/B,OAAO,EAAC,UAAU,EAAE,SAAS,EAAC,CAAC;AACjC,CAAC;AAED,IAAI,YAA+D,CAAC;AACpE,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,YAAY,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAkB,EAAE,EAAE;IACvD,MAAM,YAAY,GAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAW,CAAC,MAAM,CACjE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CACjC,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAkB,EAClB,KAAa,EACb,aAA0C;IAE1C,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAQ,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAa,EACb,SAAqC,EACrC,aAA0C;IAE1C,MAAM,EAAC,OAAO,EAAC,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAEnE,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"jwt.js","sources":["../../../../../zero-cache/src/auth/jwt.ts"],"sourcesContent":["import {\n  createRemoteJWKSet,\n  exportJWK,\n  generateKeyPair,\n  jwtVerify,\n  type JWK,\n  type JWTClaimVerificationOptions,\n  type JWTPayload,\n  type KeyLike,\n} from 'jose';\nimport type {AuthConfig} from '../config/zero-config.ts';\n\n/** @deprecated */\nexport async function createJwkPair() {\n  const {publicKey, privateKey} = await generateKeyPair('PS256');\n\n  const privateJwk = await exportJWK(privateKey);\n  const publicJwk = await exportJWK(publicKey);\n\n  privateJwk.kid = 'key-2024-001';\n  privateJwk.use = 'sig';\n  privateJwk.alg = 'PS256';\n\n  publicJwk.kid = privateJwk.kid;\n  publicJwk.use = privateJwk.use;\n  publicJwk.alg = privateJwk.alg;\n\n  return {privateJwk, publicJwk};\n}\n\nlet remoteKeyset: ReturnType<typeof createRemoteJWKSet> | undefined;\nfunction getRemoteKeyset(jwksUrl: string) {\n  if (remoteKeyset === undefined) {\n    remoteKeyset = createRemoteJWKSet(new URL(jwksUrl));\n  }\n\n  return remoteKeyset;\n}\n\n/** @deprecated */\nexport const tokenConfigOptions = (config: AuthConfig) => {\n  const tokenOptions = (['jwk', 'secret', 'jwksUrl'] as const).filter(\n    key => config[key] !== undefined,\n  );\n\n  return tokenOptions;\n};\n\n/** @deprecated */\nexport async function verifyToken(\n  config: AuthConfig,\n  token: string,\n  verifyOptions: JWTClaimVerificationOptions,\n): Promise<JWTPayload> {\n  if (config.jwk !== undefined) {\n    return verifyTokenImpl(token, loadJwk(config.jwk), verifyOptions);\n  }\n\n  if (config.secret !== undefined) {\n    return verifyTokenImpl(token, loadSecret(config.secret), verifyOptions);\n  }\n\n  if (config.jwksUrl !== undefined) {\n    const remoteKeyset = getRemoteKeyset(config.jwksUrl);\n    return (await jwtVerify(token, remoteKeyset, verifyOptions)).payload;\n  }\n\n  throw new Error(\n    'verifyToken was called but no auth options (one of: jwk, secret, jwksUrl) were configured.',\n  );\n}\n\nfunction loadJwk(jwkString: string) {\n  return JSON.parse(jwkString) as JWK;\n}\n\nfunction loadSecret(secret: string) {\n  return new TextEncoder().encode(secret);\n}\n\nasync function verifyTokenImpl(\n  token: string,\n  verifyKey: Uint8Array | KeyLike | JWK,\n  verifyOptions: JWTClaimVerificationOptions,\n): Promise<JWTPayload> {\n  const {payload} = await jwtVerify(token, verifyKey, verifyOptions);\n\n  return payload;\n}\n"],"names":["remoteKeyset"],"mappings":";AA8BA,IAAI;AACJ,SAAS,gBAAgB,SAAiB;AACxC,MAAI,iBAAiB,QAAW;AAC9B,mBAAe,mBAAmB,IAAI,IAAI,OAAO,CAAC;AAAA,EACpD;AAEA,SAAO;AACT;AAGO,MAAM,qBAAqB,CAAC,WAAuB;AACxD,QAAM,eAAgB,CAAC,OAAO,UAAU,SAAS,EAAY;AAAA,IAC3D,CAAA,QAAO,OAAO,GAAG,MAAM;AAAA,EAAA;AAGzB,SAAO;AACT;AAGA,eAAsB,YACpB,QACA,OACA,eACqB;AACrB,MAAI,OAAO,QAAQ,QAAW;AAC5B,WAAO,gBAAgB,OAAO,QAAQ,OAAO,GAAG,GAAG,aAAa;AAAA,EAClE;AAEA,MAAI,OAAO,WAAW,QAAW;AAC/B,WAAO,gBAAgB,OAAO,WAAW,OAAO,MAAM,GAAG,aAAa;AAAA,EACxE;AAEA,MAAI,OAAO,YAAY,QAAW;AAChC,UAAMA,gBAAe,gBAAgB,OAAO,OAAO;AACnD,YAAQ,MAAM,UAAU,OAAOA,eAAc,aAAa,GAAG;AAAA,EAC/D;AAEA,QAAM,IAAI;AAAA,IACR;AAAA,EAAA;AAEJ;AAEA,SAAS,QAAQ,WAAmB;AAClC,SAAO,KAAK,MAAM,SAAS;AAC7B;AAEA,SAAS,WAAW,QAAgB;AAClC,SAAO,IAAI,YAAA,EAAc,OAAO,MAAM;AACxC;AAEA,eAAe,gBACb,OACA,WACA,eACqB;AACrB,QAAM,EAAC,QAAA,IAAW,MAAM,UAAU,OAAO,WAAW,aAAa;AAEjE,SAAO;AACT;"}

package/out/zero-cache/src/auth/load-permissions.d.ts

@@ -1,6 +1,6 @@
 import type { LogContext } from '@rocicorp/logger';
-import type { Schema } from '../../../zero-schema/src/builder/schema-builder.ts';
 import { type PermissionsConfig } from '../../../zero-schema/src/compiled-permissions.ts';
+import type { Schema } from '../../../zero-types/src/schema.ts';
 import type { Database } from '../../../zqlite/src/db.ts';
 import type { StatementRunner } from '../db/statements.ts';
 export type LoadedPermissions = {

package/out/zero-cache/src/auth/load-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-permissions.d.ts","sourceRoot":"","sources":["../../../../../zero-cache/src/auth/load-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAEjD,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,oDAAoD,CAAC;AAC/E,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,kDAAkD,CAAC;AAE1D,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,qBAAqB,CAAC;AAGzD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB,CAAC;AAEF,wBAAgB,eAAe,CAC7B,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,GACZ,iBAAiB,CA8BnB;AAED,wBAAgB,0BAA0B,CACxC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAQpD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,CAenE"}
+{"version":3,"file":"load-permissions.d.ts","sourceRoot":"","sources":["../../../../../zero-cache/src/auth/load-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,kDAAkD,CAAC;AAE1D,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,mCAAmC,CAAC;AAC9D,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,qBAAqB,CAAC;AAGzD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB,CAAC;AAEF,wBAAgB,eAAe,CAC7B,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,GACZ,iBAAiB,CA8BnB;AAED,wBAAgB,0BAA0B,CACxC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAC,CAQpD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,CAenE"}