@semics-tech/mongolite 1.2.0 → 1.4.0

package/dist/index.js

@@ -3,9 +3,11 @@ import { MongoLite as MongoLiteBase } from './mongo-client.js';
 export { MongoLiteCollection } from './collection.js';
 export * from './types.js';
 export { ChangeStream } from './changeStream.js';
-export { CloudflareDurableObjectAdapter, } from './adapters/cloudflare.js';
+export { CloudflareDurableObjectAdapter } from './adapters/cloudflare.js';
 export { BrowserSqliteAdapter } from './adapters/browser.js';
 export { NodeSqliteAdapter } from './adapters/node-sqlite.js';
+import { HttpUpstreamSink, MongoUpstreamSink } from './sync/index.js';
+export { SyncReplicator, SyncOutbox, SyncShadow, MongoUpstreamSink, HttpUpstreamSink, SyncRequestRejected, SYNC_PROTOCOL_VERSION, buildWriteCommand, computeDiff, applyDiff, isEmptyDiff, projectToLocalShape, } from './sync/index.js';
 /**
  * MongoLite class is the main entry point for interacting with the SQLite-backed database.
  *
@@ -39,5 +41,98 @@ export class MongoLite extends MongoLiteBase {
             super(new NodeSqliteAdapter(dbPathOrOptions), options);
         }
     }
+    /**
+     * Replicates every insert, update and delete in this database to an upstream
+     * MongoDB deployment.
+     *
+     * Changes are captured by SQLite triggers into a durable outbox inside this
+     * database, in the same transaction as the write itself, then streamed
+     * upstream in batches. Replication survives process restarts and upstream
+     * outages: the outbox holds the backlog and a checkpoint records exactly how
+     * far it got.
+     *
+     * Requires the optional `mongodb` peer dependency.
+     *
+     * @example
+     * ```typescript
+     * const sync = client.syncToMongo({
+     *   connectionString: 'mongodb+srv://user:pass@cluster.example.com/app',
+     *   collections: ['users', 'orders'],
+     * });
+     *
+     * sync.on('error', (err) => console.error('replication degraded:', err));
+     * await sync.start();
+     *
+     * // …later, on shutdown
+     * await sync.stop({ flush: true });
+     * ```
+     */
+    syncToMongo(options) {
+        const { connectionString, database, writeConcern, driverOptions, driver, authSource, authMechanism, authMechanismProperties, username, password, tls, tlsCAFile, tlsCertificateKeyFile, tlsCertificateKeyFilePassword, tlsCRLFile, tlsAllowInvalidHostnames, tlsAllowInvalidCertificates, ...syncOptions } = options;
+        const sink = new MongoUpstreamSink({
+            connectionString,
+            database,
+            writeConcern,
+            driverOptions,
+            driver,
+            authSource,
+            authMechanism,
+            authMechanismProperties,
+            username,
+            password,
+            tls,
+            tlsCAFile,
+            tlsCertificateKeyFile,
+            tlsCertificateKeyFilePassword,
+            tlsCRLFile,
+            tlsAllowInvalidHostnames,
+            tlsAllowInvalidCertificates,
+            idMapping: syncOptions.idMapping,
+            // The sink builds the conditional writes, so it needs the same answer the
+            // replicator uses when deciding whether to track shadows at all.
+            versioning: syncOptions.versioning,
+        });
+        return this.createSync(sink, syncOptions);
+    }
+    /**
+     * Replicates changes to a remote HTTP API, which applies them to MongoDB on this
+     * client's behalf. For deployments where the local instance cannot reach the database
+     * directly.
+     *
+     * The wire format carries MongoDB-shaped commands along with the version predicates,
+     * so replication behaves the same as over a direct connection — the upstream stays the
+     * source of truth and concurrent writers are still detected. Mount
+     * `@semics-tech/mongolite/server` on the API to receive the messages.
+     *
+     * @example
+     * ```typescript
+     * const sync = client.syncToHttp({
+     *   baseUrl: 'https://api.example.com',
+     *   database: 'app',
+     *   headers: { 'luna-environment': 'prod' },
+     *   getAuthHeaders: async () => ({ Authorization: `Bearer ${await getAccessToken()}` }),
+     * });
+     *
+     * await sync.start();
+     * ```
+     */
+    syncToHttp(options) {
+        const { baseUrl, database, pathPrefix, getAuthHeaders, headers, cookies, fetch: fetchImpl, timeoutMs, includeCommands, ...syncOptions } = options;
+        const sink = new HttpUpstreamSink({
+            baseUrl,
+            database,
+            pathPrefix,
+            getAuthHeaders,
+            headers,
+            cookies,
+            fetch: fetchImpl,
+            timeoutMs,
+            includeCommands,
+            idMapping: syncOptions.idMapping,
+            versioning: syncOptions.versioning,
+            replicator: syncOptions.name,
+        });
+        return this.createSync(sink, syncOptions);
+    }
 }
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAE,SAAS,IAAI,aAAa,EAAwB,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAOjD,OAAO,EACL,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAMlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAI9D;;;;;;;;;;GAUG;AACH,MAAM,OAAO,SAAU,SAAQ,aAAa;IAC1C;;;;OAIG;IACH,YACE,eAAmE,EACnE,UAAgC,EAAE;QAElC,IACE,eAAe;YACf,OAAO,eAAe,KAAK,QAAQ;YACnC,OAAQ,eAAoC,CAAC,OAAO,KAAK,UAAU;YACnE,OAAQ,eAAoC,CAAC,GAAG,KAAK,UAAU;YAC/D,OAAQ,eAAoC,CAAC,GAAG,KAAK,UAAU;YAC/D,OAAQ,eAAoC,CAAC,GAAG,KAAK,UAAU;YAC/D,OAAQ,eAAoC,CAAC,IAAI,KAAK,UAAU;YAChE,OAAQ,eAAoC,CAAC,KAAK,KAAK,UAAU,EACjE,CAAC;YACD,uDAAuD;YACvD,KAAK,CAAC,eAAmC,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,iBAAiB,CAAC,eAAkD,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAE,SAAS,IAAI,aAAa,EAAwB,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAOjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAkB,MAAM,iBAAiB,CAAC;AAGtF,OAAO,EACL,cAAc,EACd,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,WAAW,EACX,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AA2CzB;;;;;;;;;;GAUG;AACH,MAAM,OAAO,SAAU,SAAQ,aAAa;IAC1C;;;;OAIG;IACH,YACE,eAAmE,EACnE,UAAgC,EAAE;QAElC,IACE,eAAe;YACf,OAAO,eAAe,KAAK,QAAQ;YACnC,OAAQ,eAAoC,CAAC,OAAO,KAAK,UAAU;YACnE,OAAQ,eAAoC,CAAC,GAAG,KAAK,UAAU;YAC/D,OAAQ,eAAoC,CAAC,GAAG,KAAK,UAAU;YAC/D,OAAQ,eAAoC,CAAC,GAAG,KAAK,UAAU;YAC/D,OAAQ,eAAoC,CAAC,IAAI,KAAK,UAAU;YAChE,OAAQ,eAAoC,CAAC,KAAK,KAAK,UAAU,EACjE,CAAC;YACD,uDAAuD;YACvD,KAAK,CAAC,eAAmC,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,iBAAiB,CAAC,eAAkD,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,WAAW,CAAC,OAAyB;QACnC,MAAM,EACJ,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,MAAM,EACN,UAAU,EACV,aAAa,EACb,uBAAuB,EACvB,QAAQ,EACR,QAAQ,EACR,GAAG,EACH,SAAS,EACT,qBAAqB,EACrB,6BAA6B,EAC7B,UAAU,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,GAAG,WAAW,EACf,GAAG,OAAO,CAAC;QAEZ,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,gBAAgB;YAChB,QAAQ;YACR,YAAY;YACZ,aAAa;YACb,MAAM;YACN,UAAU;YACV,aAAa;YACb,uBAAuB;YACvB,QAAQ;YACR,QAAQ;YACR,GAAG;YACH,SAAS;YACT,qBAAqB;YACrB,6BAA6B;YAC7B,UAAU;YACV,wBAAwB;YACxB,2BAA2B;YAC3B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,0EAA0E;YAC1E,iEAAiE;YACjE,UAAU,EAAE,WAAW,CAAC,UAAU;SACnC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,CAAC,OAAwB;QACjC,MAAM,EACJ,OAAO,EACP,QAAQ,EACR,UAAU,EACV,cAAc,EACd,OAAO,EACP,OAAO,EACP,KAAK,EAAE,SAAS,EAChB,SAAS,EACT,eAAe,EACf,GAAG,WAAW,EACf,GAAG,OAAO,CAAC;QAEZ,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC;YAChC,OAAO;YACP,QAAQ;YACR,UAAU;YACV,cAAc;YACd,OAAO;YACP,OAAO;YACP,KAAK,EAAE,SAAS;YAChB,SAAS;YACT,eAAe;YACf,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,UAAU,EAAE,WAAW,CAAC,IAAI;SAC7B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/mongo-client.d.ts

@@ -11,6 +11,8 @@
 import type { IDatabaseAdapter } from './db.js';
 import { MongoLiteCollection } from './collection.js';
 import { DocumentWithId } from './types.js';
+import { SyncReplicator } from './sync/replicator.js';
+import type { SyncOptions, SyncSink } from './sync/types.js';
 export type { IDatabaseAdapter };
 export type MongoLiteBaseOptions = {
     verbose?: boolean;
@@ -48,6 +50,17 @@ export declare class MongoLite {
     listCollections(): {
         toArray: () => Promise<string[]>;
     };
+    /**
+     * Starts replicating this database's changes to an upstream {@link SyncSink}.
+     *
+     * Node.js users replicating to MongoDB should prefer the `syncToMongo`
+     * overload on the package-root `MongoLite`, which takes a connection string
+     * directly. This method is the backend-agnostic form — pass any sink to
+     * replicate over HTTP, into a queue, or to a test double.
+     *
+     * The returned replicator is **not** started; call `start()` on it.
+     */
+    createSync(sink: SyncSink, options?: SyncOptions): SyncReplicator;
     /**
      * Returns a typed collection handle.
      * @param name The collection (table) name.

package/dist/mongo-client.js

@@ -1,4 +1,5 @@
 import { MongoLiteCollection } from './collection.js';
+import { SyncReplicator } from './sync/replicator.js';
 /**
  * Core MongoLite client. Accepts any `IDatabaseAdapter` implementation.
  *
@@ -39,11 +40,27 @@ export class MongoLite {
     listCollections() {
         return {
             toArray: async () => {
-                const result = await this.db.all(`SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`);
+                // `__mongolite*` tables are internal bookkeeping (change log, sync
+                // outbox and checkpoints), not user collections.
+                const result = await this.db.all(`SELECT name FROM sqlite_master
+           WHERE type='table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '__mongolite%'`);
                 return result.map((row) => row.name);
             },
         };
     }
+    /**
+     * Starts replicating this database's changes to an upstream {@link SyncSink}.
+     *
+     * Node.js users replicating to MongoDB should prefer the `syncToMongo`
+     * overload on the package-root `MongoLite`, which takes a connection string
+     * directly. This method is the backend-agnostic form — pass any sink to
+     * replicate over HTTP, into a queue, or to a test double.
+     *
+     * The returned replicator is **not** started; call `start()` on it.
+     */
+    createSync(sink, options = {}) {
+        return new SyncReplicator(this.db, sink, { verbose: this.options.verbose, ...options });
+    }
     /**
      * Returns a typed collection handle.
      * @param name The collection (table) name.

package/dist/mongo-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"mongo-client.js","sourceRoot":"","sources":["../src/mongo-client.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAStD;;;;;;;GAOG;AACH,MAAM,OAAO,SAAS;IAIpB,YAAY,OAAyB,EAAE,UAAgC,EAAE;QACvE,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,OAAO;YACL,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC9B,gFAAgF,CACjF,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,UAAU,CAA4C,IAAY;QAChE,OAAO,IAAI,mBAAmB,CAAI,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;CACF"}
+{"version":3,"file":"mongo-client.js","sourceRoot":"","sources":["../src/mongo-client.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAStD;;;;;;;GAOG;AACH,MAAM,OAAO,SAAS;IAIpB,YAAY,OAAyB,EAAE,UAAgC,EAAE;QACvE,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,OAAO;YACL,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,mEAAmE;gBACnE,iDAAiD;gBACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC9B;4FACkF,CACnF,CAAC;gBACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU,CAAC,IAAc,EAAE,UAAuB,EAAE;QAClD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED;;;OAGG;IACH,UAAU,CAA4C,IAAY;QAChE,OAAO,IAAI,mBAAmB,CAAI,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/server.d.ts

@@ -0,0 +1,97 @@
+import type { MongoClientLike, SyncIdMapping } from './sync/types.js';
+export { SYNC_PROTOCOL_VERSION, SyncProtocolError } from './sync/protocol.js';
+export type { SyncApplyRequest, SyncApplyResponse, SyncFetchRequest, SyncFetchResponse, WireOperation, } from './sync/protocol.js';
+export type { SyncApplyConflict, SyncApplyFailure, SyncOperation } from './sync/types.js';
+/** Context handed to {@link SyncReceiverOptions.verifyRequest}. */
+export interface SyncRequestContext {
+    /** Replicator name the client reported. Advisory — clients choose it themselves. */
+    replicator: string;
+    /** Collections this batch touches, after validation. */
+    collections: string[];
+    /** Number of operations in the batch. */
+    operationCount: number;
+}
+export interface SyncReceiverOptions {
+    /** A connected MongoDB client. The receiver never opens or closes it. */
+    client: MongoClientLike;
+    /** Target database. Defaults to the client's default database. */
+    database?: string;
+    /**
+     * Collections a client is permitted to write.
+     *
+     * Strongly recommended. Without it, any client that can reach this endpoint can write
+     * to **every** collection in the database, including ones sync was never meant to
+     * touch.
+     */
+    allowedCollections?: string[];
+    /**
+     * Authorise a request before anything is applied. Throw, or return `false`, to reject
+     * it with 403.
+     *
+     * This is the receiver's own hook; it does not replace whatever authentication the
+     * surrounding API already performs.
+     */
+    verifyRequest?: (context: SyncRequestContext) => Promise<boolean | void> | boolean | void;
+    /**
+     * Execute the command the client sent rather than rebuilding it locally.
+     * Defaults to `false`, and should stay that way on any endpoint reachable by a
+     * client you do not fully control.
+     *
+     * A receiver that forwards client-supplied command documents to MongoDB will execute
+     * whatever it is given — an update with arbitrary operators, a filter matching far
+     * more than one document. Rebuilding from the operation's fields produces an identical
+     * command for well-behaved clients while making the abusive case unrepresentable.
+     */
+    trustClientCommands?: boolean;
+    /** Maximum operations accepted in one batch. Defaults to `1000`. */
+    maxOperations?: number;
+    /** See {@link SyncIdMapping}. Must match the client. Defaults to `'auto'`. */
+    idMapping?: SyncIdMapping;
+    /** Conditional writes against `_v`. Must match the client. Defaults to `true`. */
+    versioning?: boolean;
+    /** Write concern for applied batches. Defaults to `{ w: 'majority' }`. */
+    writeConcern?: Record<string, unknown>;
+    /**
+     * `ObjectId` implementation, normally the one from the `mongodb` driver you are
+     * already using so BSON instances match the connection. Defaults to `bson`'s.
+     */
+    ObjectId?: {
+        new (id: string): unknown;
+        isValid(id: string): boolean;
+    };
+}
+/** A response ready to be written to the wire. */
+export interface SyncHttpResponse {
+    status: number;
+    /** Canonical Extended JSON. */
+    body: string;
+    headers: Record<string, string>;
+}
+export declare class SyncReceiver {
+    private readonly options;
+    private readonly db;
+    constructor(options: SyncReceiverOptions);
+    /**
+     * Applies a batch of operations.
+     *
+     * @param body The raw request body — a string, or an already-parsed object.
+     * @returns Status and Extended JSON body to send back.
+     */
+    apply(body: string | Record<string, unknown>): Promise<SyncHttpResponse>;
+    /** Reads documents back by `_id`, so a client can refresh its shadow after a conflict. */
+    fetch(body: string | Record<string, unknown>): Promise<SyncHttpResponse>;
+    /**
+     * Produces the command to execute for an operation.
+     *
+     * By default this **rebuilds** the command from the operation's own fields rather than
+     * using whatever the client sent. For a well-behaved client the two are identical;
+     * for a hostile one the difference is the whole security boundary.
+     */
+    private commandFor;
+    private assertCollectionsAllowed;
+    private authorise;
+    private ok;
+    private error;
+}
+/** Creates a receiver for sync messages posted by a MongoLite client. */
+export declare function createSyncReceiver(options: SyncReceiverOptions): SyncReceiver;

package/dist/server.js

@@ -0,0 +1,158 @@
+/**
+ * Server-side entry point: receives sync messages from a MongoLite client and applies
+ * them to MongoDB.
+ *
+ * Install this on the API that sits in front of your database, for deployments where
+ * the local instance cannot reach MongoDB directly.
+ *
+ * ```ts
+ * import { MongoClient } from 'mongodb';
+ * import { createSyncReceiver } from '@semics-tech/mongolite/server';
+ *
+ * const mongo = await new MongoClient(process.env.MONGO_URL!).connect();
+ * const receiver = createSyncReceiver({
+ *   client: mongo,
+ *   database: 'app',
+ *   allowedCollections: ['users', 'orders'],
+ * });
+ *
+ * app.post('/sync/app/_sync', async (req, res) => {
+ *   const result = await receiver.apply(req.body);
+ *   res.status(result.status).type('application/json').send(result.body);
+ * });
+ * ```
+ *
+ * This module imports nothing SQLite-related, so it is safe to install on a server that
+ * has no local database of its own.
+ */
+import { buildWriteCommand } from './sync/commands.js';
+import { executeWrites, fetchDocuments } from './sync/mongoExecutor.js';
+import { SYNC_PROTOCOL_VERSION, SyncProtocolError, decodeBody, encodeBody, parseApplyRequest, parseFetchRequest, } from './sync/protocol.js';
+export { SYNC_PROTOCOL_VERSION, SyncProtocolError } from './sync/protocol.js';
+const JSON_HEADERS = { 'content-type': 'application/json' };
+export class SyncReceiver {
+    constructor(options) {
+        this.options = options;
+        if (!options.client)
+            throw new Error('createSyncReceiver requires a connected `client`.');
+        this.db = options.client.db(options.database);
+    }
+    /**
+     * Applies a batch of operations.
+     *
+     * @param body The raw request body — a string, or an already-parsed object.
+     * @returns Status and Extended JSON body to send back.
+     */
+    async apply(body) {
+        try {
+            const decoded = decodeBody(body);
+            const { replicator, operations } = parseApplyRequest(decoded);
+            const maxOperations = this.options.maxOperations ?? 1000;
+            if (operations.length > maxOperations) {
+                throw new SyncProtocolError(`Batch of ${operations.length} exceeds the limit of ${maxOperations}`, 413);
+            }
+            const collections = [...new Set(operations.map((op) => op.collection))];
+            this.assertCollectionsAllowed(collections);
+            await this.authorise({ replicator, collections, operationCount: operations.length });
+            const writes = operations.map((op, index) => ({
+                index,
+                op,
+                command: this.commandFor(op, decoded, index),
+            }));
+            const result = await executeWrites(this.db, writes, {
+                writeConcern: this.options.writeConcern ?? { w: 'majority' },
+                versioning: this.options.versioning ?? true,
+                idMapping: this.options.idMapping,
+                ObjectId: this.options.ObjectId,
+            });
+            return this.ok({
+                protocol: SYNC_PROTOCOL_VERSION,
+                applied: result.applied,
+                failures: result.failures,
+                conflicts: result.conflicts,
+            });
+        }
+        catch (err) {
+            return this.error(err);
+        }
+    }
+    /** Reads documents back by `_id`, so a client can refresh its shadow after a conflict. */
+    async fetch(body) {
+        try {
+            const { collection, documentIds } = parseFetchRequest(decodeBody(body));
+            this.assertCollectionsAllowed([collection]);
+            await this.authorise({
+                replicator: 'fetch',
+                collections: [collection],
+                operationCount: documentIds.length,
+            });
+            const documents = await fetchDocuments(this.db, collection, documentIds, this.options.idMapping, this.options.ObjectId);
+            return this.ok({ protocol: SYNC_PROTOCOL_VERSION, documents });
+        }
+        catch (err) {
+            return this.error(err);
+        }
+    }
+    // ---------------------------------------------------------------- internals
+    /**
+     * Produces the command to execute for an operation.
+     *
+     * By default this **rebuilds** the command from the operation's own fields rather than
+     * using whatever the client sent. For a well-behaved client the two are identical;
+     * for a hostile one the difference is the whole security boundary.
+     */
+    commandFor(op, decoded, index) {
+        if (this.options.trustClientCommands) {
+            const wire = decoded.operations?.[index];
+            const command = wire?.command;
+            if (command && typeof command === 'object')
+                return command;
+        }
+        return buildWriteCommand(op, {
+            idMapping: this.options.idMapping,
+            versioning: this.options.versioning ?? true,
+            ObjectId: this.options.ObjectId,
+        });
+    }
+    assertCollectionsAllowed(collections) {
+        const allowed = this.options.allowedCollections;
+        if (!allowed)
+            return;
+        const permitted = new Set(allowed);
+        for (const collection of collections) {
+            if (!permitted.has(collection)) {
+                throw new SyncProtocolError(`Collection "${collection}" is not permitted`, 403);
+            }
+        }
+    }
+    async authorise(context) {
+        if (!this.options.verifyRequest)
+            return;
+        const verdict = await this.options.verifyRequest(context);
+        if (verdict === false) {
+            throw new SyncProtocolError('Request rejected', 403);
+        }
+    }
+    ok(payload) {
+        return { status: 200, body: encodeBody(payload), headers: JSON_HEADERS };
+    }
+    error(err) {
+        const status = err instanceof SyncProtocolError ? err.status : 500;
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            status,
+            // 5xx bodies stay vague: an unexpected error can carry connection strings or
+            // document contents, and this response goes to a client.
+            body: encodeBody({
+                protocol: SYNC_PROTOCOL_VERSION,
+                error: status >= 500 ? 'Internal error applying sync batch' : message,
+            }),
+            headers: JSON_HEADERS,
+        };
+    }
+}
+/** Creates a receiver for sync messages posted by a MongoLite client. */
+export function createSyncReceiver(options) {
+    return new SyncReceiver(options);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAExE,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAoF9E,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;AAE5D,MAAM,OAAO,YAAY;IAGvB,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1F,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,IAAsC;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAA0B,IAAI,CAAC,CAAC;YAC1D,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE9D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;YACzD,IAAI,UAAU,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;gBACtC,MAAM,IAAI,iBAAiB,CACzB,YAAY,UAAU,CAAC,MAAM,yBAAyB,aAAa,EAAE,EACrE,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;YAE3C,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAErF,MAAM,MAAM,GAAoB,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7D,KAAK;gBACL,EAAE;gBACF,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC;aAC7C,CAAC,CAAC,CAAC;YAEJ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE;gBAClD,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE;gBAC5D,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI;gBAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;aAChC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,EAAE,CAAC;gBACb,QAAQ,EAAE,qBAAqB;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,KAAK,CAAC,IAAsC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,iBAAiB,CACnD,UAAU,CAA0B,IAAI,CAAC,CAC1C,CAAC;YAEF,IAAI,CAAC,wBAAwB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,CAAC,UAAU,CAAC;gBACzB,cAAc,EAAE,WAAW,CAAC,MAAM;aACnC,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,WAAW,EACX,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,CACtB,CAAC;YAEF,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACK,UAAU,CAChB,EAAiB,EACjB,OAAgC,EAChC,KAAa;QAEb,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACrC,MAAM,IAAI,GAAI,OAAO,CAAC,UAAyD,EAAE,CAAC,KAAK,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;YAC9B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,OAA4B,CAAC;QAClF,CAAC;QAED,OAAO,iBAAiB,CAAC,EAAE,EAAE;YAC3B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI;YAC3C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,wBAAwB,CAAC,WAAqB;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,iBAAiB,CAAC,eAAe,UAAU,oBAAoB,EAAE,GAAG,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAA2B;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa;YAAE,OAAO;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAEO,EAAE,CAAC,OAAgB;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,GAAY;QACxB,MAAM,MAAM,GAAG,GAAG,YAAY,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QACnE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEjE,OAAO;YACL,MAAM;YACN,6EAA6E;YAC7E,yDAAyD;YACzD,IAAI,EAAE,UAAU,CAAC;gBACf,QAAQ,EAAE,qBAAqB;gBAC/B,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,OAAO;aACtE,CAAC;YACF,OAAO,EAAE,YAAY;SACtB,CAAC;IACJ,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/dist/sync/commands.d.ts

@@ -0,0 +1,49 @@
+import type { SyncIdMapping, SyncOperation } from './types.js';
+/** Field carrying the optimistic-concurrency version on upstream documents. */
+export declare const VERSION_FIELD = "_v";
+/** Field carrying the server-stamped last-write time on upstream documents. */
+export declare const UPDATED_AT_FIELD = "_updatedAt";
+/** A single entry in a `bulkWrite` array. */
+export type MongoWriteCommand = Record<string, unknown>;
+/** Constructs an upstream `_id` value from MongoLite's string id. */
+export interface ObjectIdFactory {
+    new (id: string): unknown;
+    isValid(id: string): boolean;
+}
+export interface BuildCommandOptions {
+    /** See {@link SyncIdMapping}. Defaults to `'auto'`. */
+    idMapping?: SyncIdMapping;
+    /** Guard writes with a conditional update against `_v`. Defaults to `true`. */
+    versioning?: boolean;
+    /**
+     * `ObjectId` implementation to use. The direct sink passes the driver's so BSON
+     * instances match the connection that will serialise them; the HTTP sink uses the
+     * one from `bson`, which Extended JSON encodes as `{"$oid": …}` for the wire.
+     */
+    ObjectId?: ObjectIdFactory;
+}
+/** True when this operation asserts a specific upstream revision. */
+export declare function isConditional(op: SyncOperation): boolean;
+/** `_id` is the identity; `_v`/`_updatedAt` are managed by the update itself. */
+export declare function isReservedPath(path: string): boolean;
+export declare function stripReservedFields(value: Record<string, unknown>): Record<string, unknown>;
+/** Reads `_v` off an upstream document, tolerating its absence. */
+export declare function readVersion(document: Record<string, unknown> | undefined): number | null;
+/**
+ * MongoLite stores `_id` as a string. Converting ObjectId-shaped ids back to real
+ * `ObjectId`s keeps replicated documents indistinguishable from ones written by a
+ * native MongoDB client.
+ */
+export declare function toUpstreamId(documentId: string, idMapping?: SyncIdMapping, ObjectId?: ObjectIdFactory): unknown;
+/**
+ * Builds the upstream write for one operation.
+ *
+ * Every form is idempotent by `_id`, which is what makes at-least-once delivery safe:
+ * replaying a batch reproduces the same upstream state.
+ *
+ * With versioning on, writes are additionally *conditional* on the document still being
+ * at the version we last saw. That is the difference between "my change is newer, so it
+ * wins" — which cannot detect a lost update — and "I am replacing exactly the revision
+ * I read", which can.
+ */
+export declare function buildWriteCommand(op: SyncOperation, options?: BuildCommandOptions): MongoWriteCommand;

package/dist/sync/commands.js

@@ -0,0 +1,118 @@
+/**
+ * Builds the MongoDB write commands that realise a {@link SyncOperation}.
+ *
+ * This lives on its own because three places must agree on it byte for byte: the
+ * direct MongoDB sink, the HTTP sink that ships commands to a remote API, and the
+ * receiver on the far side that applies them. If any of the three built its own
+ * commands they would drift, and the drift would show up as data loss rather than as a
+ * test failure.
+ */
+import { ObjectId as BsonObjectId } from 'bson';
+/** Field carrying the optimistic-concurrency version on upstream documents. */
+export const VERSION_FIELD = '_v';
+/** Field carrying the server-stamped last-write time on upstream documents. */
+export const UPDATED_AT_FIELD = '_updatedAt';
+/** True when this operation asserts a specific upstream revision. */
+export function isConditional(op) {
+    return op.baseVersion !== null && op.baseVersion !== undefined;
+}
+/** `_id` is the identity; `_v`/`_updatedAt` are managed by the update itself. */
+export function isReservedPath(path) {
+    const root = path.split('.')[0];
+    return root === '_id' || root === VERSION_FIELD || root === UPDATED_AT_FIELD;
+}
+export function stripReservedFields(value) {
+    return Object.fromEntries(Object.entries(value).filter(([key]) => !isReservedPath(key)));
+}
+/** Reads `_v` off an upstream document, tolerating its absence. */
+export function readVersion(document) {
+    if (!document)
+        return null;
+    const raw = document[VERSION_FIELD];
+    return typeof raw === 'number' ? raw : null;
+}
+/**
+ * MongoLite stores `_id` as a string. Converting ObjectId-shaped ids back to real
+ * `ObjectId`s keeps replicated documents indistinguishable from ones written by a
+ * native MongoDB client.
+ */
+export function toUpstreamId(documentId, idMapping = 'auto', ObjectId = BsonObjectId) {
+    if (idMapping === 'string')
+        return documentId;
+    try {
+        return ObjectId.isValid(documentId) && /^[0-9a-fA-F]{24}$/.test(documentId)
+            ? new ObjectId(documentId)
+            : documentId;
+    }
+    catch {
+        return documentId;
+    }
+}
+/**
+ * Builds the upstream write for one operation.
+ *
+ * Every form is idempotent by `_id`, which is what makes at-least-once delivery safe:
+ * replaying a batch reproduces the same upstream state.
+ *
+ * With versioning on, writes are additionally *conditional* on the document still being
+ * at the version we last saw. That is the difference between "my change is newer, so it
+ * wins" — which cannot detect a lost update — and "I am replacing exactly the revision
+ * I read", which can.
+ */
+export function buildWriteCommand(op, options = {}) {
+    const { idMapping = 'auto', versioning = true, ObjectId } = options;
+    const _id = toUpstreamId(op.documentId, idMapping, ObjectId);
+    if (op.type === 'delete') {
+        const filter = isConditional(op) ? { _id, [VERSION_FIELD]: op.baseVersion } : { _id };
+        return { deleteOne: { filter } };
+    }
+    if (!versioning) {
+        // The local database is treated as authoritative: replace wholesale, so a field
+        // deleted locally disappears upstream too.
+        return {
+            replaceOne: { filter: { _id }, replacement: { ...(op.document ?? {}), _id }, upsert: true },
+        };
+    }
+    // Never been upstream: create it, and let a duplicate key tell us we lost the race to
+    // create. `$setOnInsert` alone means an existing document is left untouched.
+    if (!isConditional(op)) {
+        const document = stripReservedFields(op.document ?? {});
+        return {
+            updateOne: {
+                filter: { _id },
+                update: {
+                    $setOnInsert: { ...document, [VERSION_FIELD]: 1 },
+                    $currentDate: { [UPDATED_AT_FIELD]: true },
+                },
+                upsert: true,
+            },
+        };
+    }
+    // Known revision: apply only what changed, conditional on that revision.
+    const update = {
+        $inc: { [VERSION_FIELD]: 1 },
+        $currentDate: { [UPDATED_AT_FIELD]: true },
+    };
+    const diff = op.diff;
+    if (diff) {
+        const set = stripReservedFields(diff.set);
+        const unset = diff.unset.filter((path) => !isReservedPath(path));
+        if (Object.keys(set).length > 0)
+            update.$set = set;
+        if (unset.length > 0) {
+            update.$unset = Object.fromEntries(unset.map((path) => [path, '']));
+        }
+    }
+    else {
+        // No shadow to diff against — fall back to writing the whole document, minus the
+        // bookkeeping fields the update itself manages.
+        update.$set = stripReservedFields(op.document ?? {});
+    }
+    return {
+        updateOne: {
+            filter: { _id, [VERSION_FIELD]: op.baseVersion },
+            update,
+        },
+    };
+}
+//# sourceMappingURL=commands.js.map

package/dist/sync/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/sync/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,MAAM,CAAC;AAGhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAwB7C,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,EAAiB;IAC7C,OAAO,EAAE,CAAC,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS,CAAC;AACjE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,gBAAgB,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA8B;IAChE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,QAA6C;IACvE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,YAA2B,MAAM,EACjC,WAA4B,YAA0C;IAEtE,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;YACzE,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAiB,EACjB,UAA+B,EAAE;IAEjC,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,UAAU,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE7D,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACtF,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,gFAAgF;QAChF,2CAA2C;QAC3C,OAAO;YACL,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,sFAAsF;IACtF,6EAA6E;IAC7E,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO;YACL,SAAS,EAAE;gBACT,MAAM,EAAE,EAAE,GAAG,EAAE;gBACf,MAAM,EAAE;oBACN,YAAY,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE;oBACjD,YAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE;iBAC3C;gBACD,MAAM,EAAE,IAAI;aACb;SACF,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,MAAM,MAAM,GAA4B;QACtC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE;QAC5B,YAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE;KAC3C,CAAC;IAEF,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACrB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iFAAiF;QACjF,gDAAgD;QAChD,MAAM,CAAC,IAAI,GAAG,mBAAmB,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,SAAS,EAAE;YACT,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE;YAChD,MAAM;SACP;KACF,CAAC;AACJ,CAAC"}