@supalive/core 1.3.0 → 1.5.0

package/dist/src/exports/storage.d.ts

@@ -1,4 +1,4 @@
-import { i as PresignedUpload, n as CreateUploadUrlOptions, r as ObjectStorage, t as CreateDownloadUrlOptions } from "../../object-storage-4t7JvpuK.js";
+import { i as PresignedUpload, n as CreateUploadUrlOptions, r as ObjectStorage, t as CreateDownloadUrlOptions } from "../../object-storage-354KU6Mj.js";
 
 //#region src/storage/s3-storage.d.ts
 /**
@@ -7,11 +7,32 @@ import { i as PresignedUpload, n as CreateUploadUrlOptions, r as ObjectStorage,
  * for its types costs nothing. Only constructing {@link S3CompatibleStorage}
  * requires the SDK to be installed by the consuming app.
  */
+/** Per-bucket settings. A bucket with a `publicBaseUrl` is served publicly. */
+interface S3BucketConfig {
+  /**
+   * Public base URL for this bucket (an R2 public-bucket domain or custom
+   * domain, no trailing slash). Its presence marks the bucket PUBLIC:
+   * {@link ObjectStorage.publicUrl} returns a stable, non-expiring link. Omit to
+   * keep the bucket private (reads go through presigned download URLs).
+   */
+  publicBaseUrl?: string;
+}
 interface S3StorageOptions {
-  /** Bucket the objects live in. */
-  bucket: string;
   accessKeyId: string;
   secretAccessKey: string;
+  /**
+   * The buckets this storage can address, keyed by bucket name. Register every
+   * bucket you upload to / read from; give the public ones a `publicBaseUrl` and
+   * leave the private ones as `{}`. Supports many public buckets, each on its
+   * own domain.
+   *
+   * @example
+   * buckets: {
+   *   "mygifty":     {},                                          // private
+   *   "mygifty-pub": { publicBaseUrl: "https://r2p.mygiftyapp.com" }, // public
+   * }
+   */
+  buckets: Record<string, S3BucketConfig>;
   /**
    * S3 endpoint. Omit for AWS S3; for Cloudflare R2 use
    * `https://<accountid>.r2.cloudflarestorage.com`.
@@ -24,12 +45,6 @@ interface S3StorageOptions {
    * virtual-hosted (`bucket.endpoint/key`). Handy for MinIO / some R2 setups.
    */
   forcePathStyle?: boolean;
-  /**
-   * Public base URL for {@link ObjectStorage.publicUrl} (R2 public bucket domain
-   * or a custom domain, no trailing slash). When unset, reads fall back to
-   * presigned download URLs.
-   */
-  publicBaseUrl?: string;
   /** Default upload-URL validity, seconds (default 900 = 15 min). */
   uploadExpiresIn?: number;
   /** Default download-URL validity, seconds (default 3600 * 24 * 7 = 7 days). */
@@ -42,15 +57,17 @@ interface S3StorageOptions {
  */
 declare class S3CompatibleStorage implements ObjectStorage {
   private readonly client;
-  private readonly bucket;
-  private readonly publicBaseUrl;
+  /** bucket name → normalized public base URL (null when the bucket is private). */
+  private readonly buckets;
   private readonly uploadExpiresIn;
   private readonly downloadExpiresIn;
   constructor(opts: S3StorageOptions);
+  /** Guard that a bucket was registered, so typos fail loudly at call time. */
+  private assertBucket;
   createUploadUrl(opts: CreateUploadUrlOptions): Promise<PresignedUpload>;
   createDownloadUrl(opts: CreateDownloadUrlOptions): Promise<string>;
-  publicUrl(key: string): string | null;
+  publicUrl(bucket: string, key: string): string | null;
 }
 //#endregion
-export { type CreateDownloadUrlOptions, type CreateUploadUrlOptions, type ObjectStorage, type PresignedUpload, S3CompatibleStorage, type S3StorageOptions };
+export { type CreateDownloadUrlOptions, type CreateUploadUrlOptions, type ObjectStorage, type PresignedUpload, type S3BucketConfig, S3CompatibleStorage, type S3StorageOptions };
 //# sourceMappingURL=storage.d.ts.map

package/dist/src/exports/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","names":[],"sources":["../../../src/storage/s3-storage.ts"],"mappings":";;;;;AAeA;;;;UAAiB,gBAAA;EAGf;EADA,MAAA;EACA,WAAA;EACA,eAAA;EAYA;;;;EAPA,QAAA;EAiBiB;EAfjB,MAAA;EAuB+B;;;;EAlB/B,cAAA;EAyCqD;;;;;EAnCrD,aAAA;EAY0C;EAV1C,eAAA;EAYiB;EAVjB,iBAAA;AAAA;;;;;;cAQW,mBAAA,YAA+B,aAAA;EAAA,iBACzB,MAAA;EAAA,iBACA,MAAA;EAAA,iBACA,aAAA;EAAA,iBACA,eAAA;EAAA,iBACA,iBAAA;cAEL,IAAA,EAAM,gBAAA;EAgBZ,eAAA,CAAgB,IAAA,EAAM,sBAAA,GAAyB,OAAA,CAAQ,eAAA;EAoBvD,iBAAA,CAAkB,IAAA,EAAM,wBAAA,GAA2B,OAAA;EAQzD,SAAA,CAAU,GAAA;AAAA"}
+{"version":3,"file":"storage.d.ts","names":[],"sources":["../../../src/storage/s3-storage.ts"],"mappings":";;;;;AAgBA;;;;AAOe;AAAA,UAPE,cAAA;EAUgB;;;;;;EAH/B,aAAa;AAAA;AAAA,UAGE,gBAAA;EACf,WAAA;EACA,eAAA;EA2BA;;;AAEiB;AAQnB;;;;;;;;EAxBE,OAAA,EAAS,MAAM,SAAS,cAAA;EAwBkB;;;;EAnB1C,QAAA;EAsBiB;EApBjB,MAAA;EAsBiB;;;;EAjBjB,cAAA;EAoDM;EAlDN,eAAA;EAkDsB;EAhDtB,iBAAA;AAAA;;;;;;cAQW,mBAAA,YAA+B,aAAA;EAAA,iBACzB,MAAA;EAsEoB;EAAA,iBApEpB,OAAA;EAAA,iBACA,eAAA;EAAA,iBACA,iBAAA;cAEL,IAAA,EAAM,gBAAA;;UAwBV,YAAA;EASF,eAAA,CAAgB,IAAA,EAAM,sBAAA,GAAyB,OAAA,CAAQ,eAAA;EAsBvD,iBAAA,CAAkB,IAAA,EAAM,wBAAA,GAA2B,OAAA;EASzD,SAAA,CAAU,MAAA,UAAgB,GAAA;AAAA"}

package/dist/src/exports/storage.js

@@ -8,8 +8,8 @@ import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
 */
 var S3CompatibleStorage = class {
 	client;
-	bucket;
-	publicBaseUrl;
+	/** bucket name → normalized public base URL (null when the bucket is private). */
+	buckets;
 	uploadExpiresIn;
 	downloadExpiresIn;
 	constructor(opts) {
@@ -22,20 +22,28 @@ var S3CompatibleStorage = class {
 				secretAccessKey: opts.secretAccessKey
 			}
 		});
-		this.bucket = opts.bucket;
-		this.publicBaseUrl = opts.publicBaseUrl?.replace(/\/+$/, "") ?? null;
+		this.buckets = new Map(Object.entries(opts.buckets).map(([name, cfg]) => {
+			const base = cfg.publicBaseUrl?.trim().replace(/\/+$/, "");
+			return [name, base ? base : null];
+		}));
 		this.uploadExpiresIn = opts.uploadExpiresIn ?? 900;
 		this.downloadExpiresIn = opts.downloadExpiresIn ?? 3600 * 24 * 7;
 	}
+	/** Guard that a bucket was registered, so typos fail loudly at call time. */
+	assertBucket(bucket) {
+		if (!this.buckets.has(bucket)) throw new Error(`Unknown storage bucket "${bucket}". Configured buckets: ${[...this.buckets.keys()].join(", ") || "(none)"}.`);
+	}
 	async createUploadUrl(opts) {
+		this.assertBucket(opts.bucket);
 		const expiresIn = opts.expiresIn ?? this.uploadExpiresIn;
 		const command = new PutObjectCommand({
-			Bucket: this.bucket,
+			Bucket: opts.bucket,
 			Key: opts.key,
 			ContentType: opts.contentType
 		});
 		const uploadUrl = await getSignedUrl(this.client, command, { expiresIn });
 		return {
+			bucket: opts.bucket,
 			key: opts.key,
 			uploadUrl,
 			method: "PUT",
@@ -44,16 +52,17 @@ var S3CompatibleStorage = class {
 		};
 	}
 	async createDownloadUrl(opts) {
+		this.assertBucket(opts.bucket);
 		const command = new GetObjectCommand({
-			Bucket: this.bucket,
+			Bucket: opts.bucket,
 			Key: opts.key
 		});
 		return getSignedUrl(this.client, command, { expiresIn: opts.expiresIn ?? this.downloadExpiresIn });
 	}
-	publicUrl(key) {
-		if (!this.publicBaseUrl) return null;
-		const encoded = key.split("/").map(encodeURIComponent).join("/");
-		return `${this.publicBaseUrl}/${encoded}`;
+	publicUrl(bucket, key) {
+		const base = this.buckets.get(bucket);
+		if (!base) return null;
+		return `${base}/${key.split("/").map(encodeURIComponent).join("/")}`;
 	}
 };
 //#endregion

package/dist/src/exports/storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.js","names":[],"sources":["../../../src/storage/s3-storage.ts"],"sourcesContent":["import { S3Client, PutObjectCommand, GetObjectCommand } from \"@aws-sdk/client-s3\";\nimport { getSignedUrl } from \"@aws-sdk/s3-request-presigner\";\nimport type {\n  ObjectStorage,\n  PresignedUpload,\n  CreateUploadUrlOptions,\n  CreateDownloadUrlOptions,\n} from \"./object-storage\";\n\n/**\n * `@aws-sdk/*` is an OPTIONAL peer dependency: the interface in\n * `./object-storage` has no dependency on it, so importing the storage module\n * for its types costs nothing. Only constructing {@link S3CompatibleStorage}\n * requires the SDK to be installed by the consuming app.\n */\nexport interface S3StorageOptions {\n  /** Bucket the objects live in. */\n  bucket: string;\n  accessKeyId: string;\n  secretAccessKey: string;\n  /**\n   * S3 endpoint. Omit for AWS S3; for Cloudflare R2 use\n   * `https://<accountid>.r2.cloudflarestorage.com`.\n   */\n  endpoint?: string;\n  /** Region. Use `\"auto\"` for R2 (the default). */\n  region?: string;\n  /**\n   * Force path-style addressing (`endpoint/bucket/key`) instead of\n   * virtual-hosted (`bucket.endpoint/key`). Handy for MinIO / some R2 setups.\n   */\n  forcePathStyle?: boolean;\n  /**\n   * Public base URL for {@link ObjectStorage.publicUrl} (R2 public bucket domain\n   * or a custom domain, no trailing slash). When unset, reads fall back to\n   * presigned download URLs.\n   */\n  publicBaseUrl?: string;\n  /** Default upload-URL validity, seconds (default 900 = 15 min). */\n  uploadExpiresIn?: number;\n  /** Default download-URL validity, seconds (default 3600 * 24 * 7 = 7 days). */\n  downloadExpiresIn?: number;\n}\n\n/**\n * {@link ObjectStorage} backed by any S3-compatible provider (AWS S3,\n * Cloudflare R2, MinIO). Presigns upload (PUT) and download (GET) URLs with\n * SigV4 via the AWS SDK; the app server never handles the file bytes itself.\n */\nexport class S3CompatibleStorage implements ObjectStorage {\n  private readonly client: S3Client;\n  private readonly bucket: string;\n  private readonly publicBaseUrl: string | null;\n  private readonly uploadExpiresIn: number;\n  private readonly downloadExpiresIn: number;\n\n  constructor(opts: S3StorageOptions) {\n    this.client = new S3Client({\n      region: opts.region ?? \"auto\",\n      endpoint: opts.endpoint,\n      forcePathStyle: opts.forcePathStyle ?? false,\n      credentials: {\n        accessKeyId: opts.accessKeyId,\n        secretAccessKey: opts.secretAccessKey,\n      },\n    });\n    this.bucket = opts.bucket;\n    this.publicBaseUrl = opts.publicBaseUrl?.replace(/\\/+$/, \"\") ?? null;\n    this.uploadExpiresIn = opts.uploadExpiresIn ?? 900;\n    this.downloadExpiresIn = opts.downloadExpiresIn ?? 3600 * 24 * 7;\n  }\n\n  async createUploadUrl(opts: CreateUploadUrlOptions): Promise<PresignedUpload> {\n    const expiresIn = opts.expiresIn ?? this.uploadExpiresIn;\n    const command = new PutObjectCommand({\n      Bucket: this.bucket,\n      Key: opts.key,\n      ContentType: opts.contentType,\n    });\n    const uploadUrl = await getSignedUrl(this.client, command, { expiresIn });\n\n    return {\n      key: opts.key,\n      uploadUrl,\n      method: \"PUT\",\n      // The client must echo the exact Content-Type that was signed, or the\n      // upload is rejected with a signature mismatch.\n      headers: opts.contentType ? { \"Content-Type\": opts.contentType } : {},\n      expiresAt: new Date(Date.now() + expiresIn * 1000),\n    };\n  }\n\n  async createDownloadUrl(opts: CreateDownloadUrlOptions): Promise<string> {\n    const command = new GetObjectCommand({ Bucket: this.bucket, Key: opts.key });\n\n    return getSignedUrl(this.client, command, {\n      expiresIn: opts.expiresIn ?? this.downloadExpiresIn,\n    });\n  }\n\n  publicUrl(key: string): string | null {\n    if (!this.publicBaseUrl) return null;\n    \n    const encoded = key.split(\"/\").map(encodeURIComponent).join(\"/\");\n    return `${this.publicBaseUrl}/${encoded}`;\n  }\n}\n"],"mappings":";;;;;;;;AAiDA,IAAa,sBAAb,MAA0D;CACxD;CACA;CACA;CACA;CACA;CAEA,YAAY,MAAwB;EAClC,KAAK,SAAS,IAAI,SAAS;GACzB,QAAQ,KAAK,UAAU;GACvB,UAAU,KAAK;GACf,gBAAgB,KAAK,kBAAkB;GACvC,aAAa;IACX,aAAa,KAAK;IAClB,iBAAiB,KAAK;GACxB;EACF,CAAC;EACD,KAAK,SAAS,KAAK;EACnB,KAAK,gBAAgB,KAAK,eAAe,QAAQ,QAAQ,EAAE,KAAK;EAChE,KAAK,kBAAkB,KAAK,mBAAmB;EAC/C,KAAK,oBAAoB,KAAK,qBAAqB,OAAO,KAAK;CACjE;CAEA,MAAM,gBAAgB,MAAwD;EAC5E,MAAM,YAAY,KAAK,aAAa,KAAK;EACzC,MAAM,UAAU,IAAI,iBAAiB;GACnC,QAAQ,KAAK;GACb,KAAK,KAAK;GACV,aAAa,KAAK;EACpB,CAAC;EACD,MAAM,YAAY,MAAM,aAAa,KAAK,QAAQ,SAAS,EAAE,UAAU,CAAC;EAExE,OAAO;GACL,KAAK,KAAK;GACV;GACA,QAAQ;GAGR,SAAS,KAAK,cAAc,EAAE,gBAAgB,KAAK,YAAY,IAAI,CAAC;GACpE,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,GAAI;EACnD;CACF;CAEA,MAAM,kBAAkB,MAAiD;EACvE,MAAM,UAAU,IAAI,iBAAiB;GAAE,QAAQ,KAAK;GAAQ,KAAK,KAAK;EAAI,CAAC;EAE3E,OAAO,aAAa,KAAK,QAAQ,SAAS,EACxC,WAAW,KAAK,aAAa,KAAK,kBACpC,CAAC;CACH;CAEA,UAAU,KAA4B;EACpC,IAAI,CAAC,KAAK,eAAe,OAAO;EAEhC,MAAM,UAAU,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;EAC/D,OAAO,GAAG,KAAK,cAAc,GAAG;CAClC;AACF"}
+{"version":3,"file":"storage.js","names":[],"sources":["../../../src/storage/s3-storage.ts"],"sourcesContent":["import { S3Client, PutObjectCommand, GetObjectCommand } from \"@aws-sdk/client-s3\";\nimport { getSignedUrl } from \"@aws-sdk/s3-request-presigner\";\nimport type {\n  ObjectStorage,\n  PresignedUpload,\n  CreateUploadUrlOptions,\n  CreateDownloadUrlOptions,\n} from \"./object-storage\";\n\n/**\n * `@aws-sdk/*` is an OPTIONAL peer dependency: the interface in\n * `./object-storage` has no dependency on it, so importing the storage module\n * for its types costs nothing. Only constructing {@link S3CompatibleStorage}\n * requires the SDK to be installed by the consuming app.\n */\n/** Per-bucket settings. A bucket with a `publicBaseUrl` is served publicly. */\nexport interface S3BucketConfig {\n  /**\n   * Public base URL for this bucket (an R2 public-bucket domain or custom\n   * domain, no trailing slash). Its presence marks the bucket PUBLIC:\n   * {@link ObjectStorage.publicUrl} returns a stable, non-expiring link. Omit to\n   * keep the bucket private (reads go through presigned download URLs).\n   */\n  publicBaseUrl?: string;\n}\n\nexport interface S3StorageOptions {\n  accessKeyId: string;\n  secretAccessKey: string;\n  /**\n   * The buckets this storage can address, keyed by bucket name. Register every\n   * bucket you upload to / read from; give the public ones a `publicBaseUrl` and\n   * leave the private ones as `{}`. Supports many public buckets, each on its\n   * own domain.\n   *\n   * @example\n   * buckets: {\n   *   \"mygifty\":     {},                                          // private\n   *   \"mygifty-pub\": { publicBaseUrl: \"https://r2p.mygiftyapp.com\" }, // public\n   * }\n   */\n  buckets: Record<string, S3BucketConfig>;\n  /**\n   * S3 endpoint. Omit for AWS S3; for Cloudflare R2 use\n   * `https://<accountid>.r2.cloudflarestorage.com`.\n   */\n  endpoint?: string;\n  /** Region. Use `\"auto\"` for R2 (the default). */\n  region?: string;\n  /**\n   * Force path-style addressing (`endpoint/bucket/key`) instead of\n   * virtual-hosted (`bucket.endpoint/key`). Handy for MinIO / some R2 setups.\n   */\n  forcePathStyle?: boolean;\n  /** Default upload-URL validity, seconds (default 900 = 15 min). */\n  uploadExpiresIn?: number;\n  /** Default download-URL validity, seconds (default 3600 * 24 * 7 = 7 days). */\n  downloadExpiresIn?: number;\n}\n\n/**\n * {@link ObjectStorage} backed by any S3-compatible provider (AWS S3,\n * Cloudflare R2, MinIO). Presigns upload (PUT) and download (GET) URLs with\n * SigV4 via the AWS SDK; the app server never handles the file bytes itself.\n */\nexport class S3CompatibleStorage implements ObjectStorage {\n  private readonly client: S3Client;\n  /** bucket name → normalized public base URL (null when the bucket is private). */\n  private readonly buckets: Map<string, string | null>;\n  private readonly uploadExpiresIn: number;\n  private readonly downloadExpiresIn: number;\n\n  constructor(opts: S3StorageOptions) {\n    this.client = new S3Client({\n      region: opts.region ?? \"auto\",\n      endpoint: opts.endpoint,\n      forcePathStyle: opts.forcePathStyle ?? false,\n      credentials: {\n        accessKeyId: opts.accessKeyId,\n        secretAccessKey: opts.secretAccessKey,\n      },\n    });\n    this.buckets = new Map(\n      Object.entries(opts.buckets).map(([name, cfg]) => {\n        // Treat null / undefined / empty / whitespace-only as \"no public base\"\n        // (private bucket) — otherwise an empty string would make the bucket\n        // look public and produce broken `/key` URLs.\n        const base = cfg.publicBaseUrl?.trim().replace(/\\/+$/, \"\");\n        return [name, base ? base : null];\n      }),\n    );\n    this.uploadExpiresIn = opts.uploadExpiresIn ?? 900;\n    this.downloadExpiresIn = opts.downloadExpiresIn ?? 3600 * 24 * 7;\n  }\n\n  /** Guard that a bucket was registered, so typos fail loudly at call time. */\n  private assertBucket(bucket: string): void {\n    if (!this.buckets.has(bucket)) {\n      throw new Error(\n        `Unknown storage bucket \"${bucket}\". Configured buckets: ` +\n          `${[...this.buckets.keys()].join(\", \") || \"(none)\"}.`,\n      );\n    }\n  }\n\n  async createUploadUrl(opts: CreateUploadUrlOptions): Promise<PresignedUpload> {\n    this.assertBucket(opts.bucket);\n    const expiresIn = opts.expiresIn ?? this.uploadExpiresIn;\n    const command = new PutObjectCommand({\n      Bucket: opts.bucket,\n      Key: opts.key,\n      ContentType: opts.contentType,\n    });\n    const uploadUrl = await getSignedUrl(this.client, command, { expiresIn });\n\n    return {\n      bucket: opts.bucket,\n      key: opts.key,\n      uploadUrl,\n      method: \"PUT\",\n      // The client must echo the exact Content-Type that was signed, or the\n      // upload is rejected with a signature mismatch.\n      headers: opts.contentType ? { \"Content-Type\": opts.contentType } : {},\n      expiresAt: new Date(Date.now() + expiresIn * 1000),\n    };\n  }\n\n  async createDownloadUrl(opts: CreateDownloadUrlOptions): Promise<string> {\n    this.assertBucket(opts.bucket);\n    const command = new GetObjectCommand({ Bucket: opts.bucket, Key: opts.key });\n\n    return getSignedUrl(this.client, command, {\n      expiresIn: opts.expiresIn ?? this.downloadExpiresIn,\n    });\n  }\n\n  publicUrl(bucket: string, key: string): string | null {\n    const base = this.buckets.get(bucket);\n    if (!base) return null; // unknown bucket or a private one → no public URL\n\n    const encoded = key.split(\"/\").map(encodeURIComponent).join(\"/\");\n    return `${base}/${encoded}`;\n  }\n}\n"],"mappings":";;;;;;;;AAiEA,IAAa,sBAAb,MAA0D;CACxD;;CAEA;CACA;CACA;CAEA,YAAY,MAAwB;EAClC,KAAK,SAAS,IAAI,SAAS;GACzB,QAAQ,KAAK,UAAU;GACvB,UAAU,KAAK;GACf,gBAAgB,KAAK,kBAAkB;GACvC,aAAa;IACX,aAAa,KAAK;IAClB,iBAAiB,KAAK;GACxB;EACF,CAAC;EACD,KAAK,UAAU,IAAI,IACjB,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,SAAS;GAIhD,MAAM,OAAO,IAAI,eAAe,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACzD,OAAO,CAAC,MAAM,OAAO,OAAO,IAAI;EAClC,CAAC,CACH;EACA,KAAK,kBAAkB,KAAK,mBAAmB;EAC/C,KAAK,oBAAoB,KAAK,qBAAqB,OAAO,KAAK;CACjE;;CAGA,aAAqB,QAAsB;EACzC,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,GAC1B,MAAM,IAAI,MACR,2BAA2B,OAAO,yBAC7B,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,SAAS,EACvD;CAEJ;CAEA,MAAM,gBAAgB,MAAwD;EAC5E,KAAK,aAAa,KAAK,MAAM;EAC7B,MAAM,YAAY,KAAK,aAAa,KAAK;EACzC,MAAM,UAAU,IAAI,iBAAiB;GACnC,QAAQ,KAAK;GACb,KAAK,KAAK;GACV,aAAa,KAAK;EACpB,CAAC;EACD,MAAM,YAAY,MAAM,aAAa,KAAK,QAAQ,SAAS,EAAE,UAAU,CAAC;EAExE,OAAO;GACL,QAAQ,KAAK;GACb,KAAK,KAAK;GACV;GACA,QAAQ;GAGR,SAAS,KAAK,cAAc,EAAE,gBAAgB,KAAK,YAAY,IAAI,CAAC;GACpE,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,GAAI;EACnD;CACF;CAEA,MAAM,kBAAkB,MAAiD;EACvE,KAAK,aAAa,KAAK,MAAM;EAC7B,MAAM,UAAU,IAAI,iBAAiB;GAAE,QAAQ,KAAK;GAAQ,KAAK,KAAK;EAAI,CAAC;EAE3E,OAAO,aAAa,KAAK,QAAQ,SAAS,EACxC,WAAW,KAAK,aAAa,KAAK,kBACpC,CAAC;CACH;CAEA,UAAU,QAAgB,KAA4B;EACpD,MAAM,OAAO,KAAK,QAAQ,IAAI,MAAM;EACpC,IAAI,CAAC,MAAM,OAAO;EAGlB,OAAO,GAAG,KAAK,GADC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GACpC;CAC1B;AACF"}

package/dist/src/exports/types.d.ts

@@ -1,4 +1,4 @@
-import { $r as normalizeIdToBytes, A as ResponseMessageSchema, Ar as Predicate, B as SubscriptionUpdateMessageSchema, Br as RawPointReadSchema, C as ClientMessageSchema, Cr as NO_RETRY, D as ErrorMessage, Dr as OrPredicateSchema, E as Context, Er as OrPredicate, F as SubscribeMessage, Fr as QueryCacheMetadataSchema, Gr as ReadEntry, H as UnsubscribeMessageSchema, Hr as RawRangeReadSchema, I as SubscribeMessageSchema, Ir as QuerySpec, Jr as WriteEntry, Kr as ReadEntrySchema, L as SubscriptionGoneMessage, Lr as RangeRead, M as ServerMessageSchema, Mr as QueryCacheEntry, N as ServerPingMessage, Nr as QueryCacheEntrySchema, O as IsInternal, Or as PointRead, P as ServerPingMessageSchema, Pr as QueryCacheMetadata, Qr as bytesFromJson, R as SubscriptionGoneMessageSchema, Rr as RangeReadSchema, S as ClientMessage, Sr as MutationResult, T as ConnectedMessageSchema, Tr as OccConflictError, Ur as RawReadEntry, V as UnsubscribeMessage, Vr as RawRangeRead, Wr as RawReadEntrySchema, Xr as WriteOp, Yr as WriteEntrySchema, Zr as WriteOpSchema, _ as AuthSuccessMessage, _r as CompareOperatorSchema, b as CallMessage, br as LeafPredicateSchema, dr as BigIntSchema, ei as normalizeToBytes, fr as CachedPgMetadata, g as AuthMessageSchema, gr as CompareOperator, h as AuthMessage, hr as CommitTs, j as ServerMessage, jr as PredicateSchema, k as ResponseMessage, kr as PointReadSchema, lr as AndPredicate, m as AuthFailedMessageSchema, mr as CommitLogEntry, p as AuthFailedMessage, pr as CachedPgMetadataSchema, qr as RetryConfig, ur as AndPredicateSchema, v as AuthSuccessMessageSchema, vr as DEFAULT_RETRY, w as ConnectedMessage, wr as OccAbortError, x as CallMessageSchema, xr as LiveResult, y as AuthenticationError, yr as LeafPredicate, z as SubscriptionUpdateMessage, zr as RawPointRead } from "../../index-DDK9ZIYb.js";
+import { $r as normalizeIdToBytes, A as ResponseMessageSchema, Ar as Predicate, B as SubscriptionUpdateMessageSchema, Br as RawPointReadSchema, C as ClientMessageSchema, Cr as NO_RETRY, D as ErrorMessage, Dr as OrPredicateSchema, E as Context, Er as OrPredicate, F as SubscribeMessage, Fr as QueryCacheMetadataSchema, Gr as ReadEntry, H as UnsubscribeMessageSchema, Hr as RawRangeReadSchema, I as SubscribeMessageSchema, Ir as QuerySpec, Jr as WriteEntry, Kr as ReadEntrySchema, L as SubscriptionGoneMessage, Lr as RangeRead, M as ServerMessageSchema, Mr as QueryCacheEntry, N as ServerPingMessage, Nr as QueryCacheEntrySchema, O as IsInternal, Or as PointRead, P as ServerPingMessageSchema, Pr as QueryCacheMetadata, Qr as bytesFromJson, R as SubscriptionGoneMessageSchema, Rr as RangeReadSchema, S as ClientMessage, Sr as MutationResult, T as ConnectedMessageSchema, Tr as OccConflictError, Ur as RawReadEntry, V as UnsubscribeMessage, Vr as RawRangeRead, Wr as RawReadEntrySchema, Xr as WriteOp, Yr as WriteEntrySchema, Zr as WriteOpSchema, _ as AuthSuccessMessage, _r as CompareOperatorSchema, b as CallMessage, br as LeafPredicateSchema, dr as BigIntSchema, ei as normalizeToBytes, fr as CachedPgMetadata, g as AuthMessageSchema, gr as CompareOperator, h as AuthMessage, hr as CommitTs, j as ServerMessage, jr as PredicateSchema, k as ResponseMessage, kr as PointReadSchema, lr as AndPredicate, m as AuthFailedMessageSchema, mr as CommitLogEntry, p as AuthFailedMessage, pr as CachedPgMetadataSchema, qr as RetryConfig, ur as AndPredicateSchema, v as AuthSuccessMessageSchema, vr as DEFAULT_RETRY, w as ConnectedMessage, wr as OccAbortError, x as CallMessageSchema, xr as LiveResult, y as AuthenticationError, yr as LeafPredicate, z as SubscriptionUpdateMessage, zr as RawPointRead } from "../../index-DTNBHQPY.js";
 import { n as stableStringify, r as supaliveStringify, t as groupByToMap } from "../../helper-CiacMqje.js";
-import { _ as RpcRateLimitConfig, a as RemoteSubscriptionMessage, b as UpstashConfig, c as RemoteSubscriptionUpdateSchema, d as SubscriptionEntry, f as DatabaseConfig, g as RpcCorsConfig, h as RpcConfig, i as RemoteRecomputeRaceSchema, l as Session, m as PostgresConfig, n as PendingMutation, o as RemoteSubscriptionMessageSchema, p as MySQLConfig, r as RemoteRecomputeRace, s as RemoteSubscriptionUpdate, t as InstanceId, u as SubId, v as SubscriptionManagerConfig, y as SupaliveServerConfig } from "../../types_server-C9owgeSs.js";
+import { _ as RpcRateLimitConfig, a as RemoteSubscriptionMessage, b as UpstashConfig, c as RemoteSubscriptionUpdateSchema, d as SubscriptionEntry, f as DatabaseConfig, g as RpcCorsConfig, h as RpcConfig, i as RemoteRecomputeRaceSchema, l as Session, m as PostgresConfig, n as PendingMutation, o as RemoteSubscriptionMessageSchema, p as MySQLConfig, r as RemoteRecomputeRace, s as RemoteSubscriptionUpdate, t as InstanceId, u as SubId, v as SubscriptionManagerConfig, y as SupaliveServerConfig } from "../../types_server-CDu9dPnG.js";
 export { AndPredicate, AndPredicateSchema, AuthFailedMessage, AuthFailedMessageSchema, AuthMessage, AuthMessageSchema, AuthSuccessMessage, AuthSuccessMessageSchema, AuthenticationError, BigIntSchema, CachedPgMetadata, CachedPgMetadataSchema, CallMessage, CallMessageSchema, ClientMessage, ClientMessageSchema, CommitLogEntry, CommitTs, CompareOperator, CompareOperatorSchema, ConnectedMessage, ConnectedMessageSchema, Context, DEFAULT_RETRY, DatabaseConfig, ErrorMessage, InstanceId, IsInternal, LeafPredicate, LeafPredicateSchema, LiveResult, MutationResult, MySQLConfig, NO_RETRY, OccAbortError, OccConflictError, OrPredicate, OrPredicateSchema, PendingMutation, PointRead, PointReadSchema, PostgresConfig, Predicate, PredicateSchema, QueryCacheEntry, QueryCacheEntrySchema, QueryCacheMetadata, QueryCacheMetadataSchema, QuerySpec, RangeRead, RangeReadSchema, RawPointRead, RawPointReadSchema, RawRangeRead, RawRangeReadSchema, RawReadEntry, RawReadEntrySchema, ReadEntry, ReadEntrySchema, RemoteRecomputeRace, RemoteRecomputeRaceSchema, RemoteSubscriptionMessage, RemoteSubscriptionMessageSchema, RemoteSubscriptionUpdate, RemoteSubscriptionUpdateSchema, ResponseMessage, ResponseMessageSchema, RetryConfig, RpcConfig, RpcCorsConfig, RpcRateLimitConfig, ServerMessage, ServerMessageSchema, ServerPingMessage, ServerPingMessageSchema, Session, SubId, SubscribeMessage, SubscribeMessageSchema, SubscriptionEntry, SubscriptionGoneMessage, SubscriptionGoneMessageSchema, SubscriptionManagerConfig, SubscriptionUpdateMessage, SubscriptionUpdateMessageSchema, SupaliveServerConfig, UnsubscribeMessage, UnsubscribeMessageSchema, UpstashConfig, WriteEntry, WriteEntrySchema, WriteOp, WriteOpSchema, bytesFromJson, groupByToMap, normalizeIdToBytes, normalizeToBytes, stableStringify, supaliveStringify };

package/dist/types_server-BXn_YC0a.d.ts

@@ -0,0 +1,301 @@
+import { Bt as SupaliveDb, Ft as JobScheduler, Sr as MutationResult, nt as RegisteredProcedure, qn as CacheLayer } from "./index-CbYOjwGh.js";
+import { r as ObjectStorage } from "./object-storage-hhZSz8qM.js";
+import z from "zod";
+import { IncomingMessage } from "http";
+import { WebSocket } from "ws";
+import { Level } from "pino";
+import { Redis } from "ioredis";
+
+//#region src/config.d.ts
+/** CORS policy for the HTTP RPC endpoint. */
+interface RpcCorsConfig {
+  /**
+   * Allowed origins. `"*"` sends `Access-Control-Allow-Origin: *`; a list
+   * echoes back a request's `Origin` only when it matches (and sets `Vary`).
+   * Omit `cors` entirely to send no CORS headers (same-origin only).
+   */
+  origins: string[] | "*";
+}
+/** Rate-limit policy for the HTTP RPC endpoint (fixed window, per instance). */
+interface RpcRateLimitConfig {
+  /** Window length in ms. Default 60000. */
+  windowMs?: number;
+  /** Max requests per window per key. Default 120. */
+  max?: number;
+  /**
+   * Derive the limiter key from the request. Default: client IP
+   * (`X-Forwarded-For` first hop, else socket address). Return a stable string.
+   */
+  keyBy?: (req: IncomingMessage) => string;
+}
+/**
+ * Enables a one-shot HTTP RPC transport for `query`/`mutation`/`action`
+ * (no subscriptions — those stay WebSocket-only). Lets clients that don't need
+ * live queries call procedures without holding a socket open. Omit to disable
+ * the endpoint entirely.
+ */
+interface RpcConfig<TContext = unknown> {
+  /**
+   * URL path prefix. Default `/_rpc`. A procedure `foo` is called as
+   * `POST {path}/foo`. Keep this distinct from `jobPath`.
+   */
+  path?: string;
+  /**
+   * Map an HTTP request to the auth `data` handed to `verifyAuth` (the same
+   * callback the WebSocket path uses). Default: `Authorization: Bearer <token>`
+   * → `{ token }`. Return `undefined` for an anonymous request.
+   */
+  auth?: (req: IncomingMessage) => Record<string, unknown> | undefined;
+  /** CORS policy. Omit for same-origin only (no CORS headers). */
+  cors?: RpcCorsConfig;
+  /** Rate limiting. Omit for defaults (120/min per IP); set `false` to disable. */
+  rateLimit?: RpcRateLimitConfig | false;
+}
+interface UpstashConfig {
+  url: string;
+  token: string;
+  redisUrl: string;
+}
+/** Database configuration for PostgreSQL */
+interface PostgresConfig {
+  type: "postgres";
+  connectionString: string;
+  /** Optional max connections for the Postgres connection pool. Defaults to 10.*/
+  maxConnections?: number;
+  /** Optional min connections for the Postgres connection pool. Defaults to 1.*/
+  minConnections?: number;
+  /** Optional idle timeout for Postgres connections in milliseconds. Defaults to 30000 (30 seconds). */
+  idleTimeoutMillis?: number;
+  /** Optional connection timeout for acquiring Postgres connections in milliseconds. Defaults to 7000 (7 seconds). */
+  connectionTimeoutMillis?: number;
+}
+/** Database configuration for MySQL */
+interface MySQLConfig {
+  type: "mysql";
+  connectionString: string;
+  /** Optional max connections for the MySQL connection pool. Defaults to 20.*/
+  maxConnections?: number;
+  /** Optional min connections for the MySQL connection pool. Defaults to 1.*/
+  minConnections?: number;
+  /** Optional idle timeout for MySQL connections in milliseconds. Defaults to 30000 (30 seconds). */
+  idleTimeoutMillis?: number;
+  /** Optional connection timeout for acquiring MySQL connections in milliseconds. Defaults to 7000 (7 seconds). */
+  connectionTimeoutMillis?: number;
+  /** Optional flag to queue connection requests when pool is exhausted. Defaults to true (queue requests). */
+  queueLimit?: number;
+}
+type DatabaseConfig = PostgresConfig | MySQLConfig;
+/**
+ * Configuration for the Supalive WebSocket server.
+ */
+interface SupaliveServerConfig<TContext = Record<string, unknown>> {
+  /** Server port (default: 3000) */
+  port?: number;
+  /** Server host (default: "0.0.0.0") */
+  host?: string;
+  cacheLayer: CacheLayer;
+  redisSubClient: Redis;
+  /**
+   * Subscription Manager WebSocket URL for RPC communication.
+   * A single sub-manager process owns all subscription state for this
+   * deployment. Internally it spawns N logical workers (configured on the
+   * sub-manager side) and routes by hash(subId) to spread CPU across them.
+   */
+  subManagerUrl: string;
+  /** Database instance */
+  database: SupaliveDb;
+  /**
+   * Optional authentication callback.
+   * Called when client sends auth message.
+   * Return null to reject authentication.
+   */
+  verifyAuth?: (data: Record<string, unknown>, sessionId: string) => Promise<TContext | null>;
+  /**
+   * Server context name for procedure routing.
+   * Must match the router's contextName.
+   */
+  contextName?: string;
+  /**
+   * Session TTL in seconds (default: 3600 = 1 hour).
+   * Sessions are kept alive while connected and expire after disconnect.
+   */
+  sessionTtlSeconds?: number;
+  /**
+   * Enable detailed logging.
+   */
+  logLevel?: Level;
+  /**
+   * Extract user ID from context for cache key generation.
+   * If not provided, caching is disabled (each sub recomputes independently).
+   */
+  getUserId?: (ctx: TContext | undefined) => string | null;
+  /**
+   * Cache TTL in seconds (default: 3600).
+   * How long query results are cached in Redis.
+   */
+  cacheTtlSeconds?: number;
+  /**
+   * Scheduler backing the job system. When provided, the server exposes an
+   * HTTP endpoint (`{jobPath}/<jobName>`) that the scheduler POSTs to, and
+   * syncs every registered recurring (cron) job at startup. Omit to disable
+   * jobs entirely. Use `DevScheduler` locally and `QStashScheduler` in prod.
+   */
+  scheduler: JobScheduler;
+  /**
+   * Builds the system server context handed to a job handler's `serverCtx`.
+   * Jobs run without a client, so this is where a deployment injects its
+   * "system"/service identity. Called per job invocation.
+   */
+  jobContext?: () => TContext | Promise<TContext>;
+  /**
+   * Absolute, externally-reachable base URL of this server (no trailing
+   * slash), e.g. `https://api.example.com` in prod or `http://127.0.0.1:3000`
+   * in dev. Used to build the job endpoint the scheduler calls.
+   */
+  publicUrl: string;
+  /**
+   * URL path prefix for the job webhook endpoint. Default `/_jobs`. The full
+   * endpoint for a job is `{publicUrl}{jobPath}/<jobName>`.
+   */
+  jobPath?: string;
+  /**
+   * Enable the one-shot HTTP RPC transport (query/mutation/action over
+   * `POST {rpc.path}/<name>`). Uses the same `verifyAuth` as the WebSocket
+   * path. Omit to disable. See {@link RpcConfig}.
+   */
+  rpc?: RpcConfig<TContext>;
+  /**
+   * Object storage, exposed to every procedure as `ctx.storage`. When set,
+   * query/mutation/action/job handlers can presign uploads/downloads and
+   * resolve public URLs without reaching for a module-level singleton. Omit
+   * to leave `ctx.storage` undefined (handlers should treat uploads as
+   * unconfigured). Build one with `S3CompatibleStorage` from
+   * `@supalive/core/storage`.
+   */
+  storage: ObjectStorage;
+}
+interface SubscriptionManagerConfig {
+  port: number;
+  upstash: {
+    url: string;
+    token: string;
+    redisUrl: string;
+  };
+  database: DatabaseConfig;
+  cacheTTLSeconds: number;
+  /**
+   * Number of logical workers inside the sub-manager process.
+   *
+   * Subscriptions are routed by FNV-1a(subId) % workers so that all operations
+   * for a given subId always land on the same worker (preserving the existing
+   * `instances: Set<string>` dedup). Each worker owns an independent
+   * subscriptions Map; on invalidate, all workers scan their own slice in
+   * parallel (logically — JS still runs one at a time inside one event loop,
+   * but per-worker scans are smaller so total work is split N ways).
+   *
+   * Defaults to `SUPALIVE_SUB_MANAGER_WORKERS` env var if set, else 1.
+   */
+  workers?: number;
+  /**
+   * Connection pool size *per worker*. If omitted, falls back to
+   * `floor(database.maxConnections / workers)` (min 1) so the total pool
+   * size stays close to the legacy single-worker configuration.
+   */
+  maxConnectionsPerWorker?: number;
+}
+//#endregion
+//#region src/server/types_server.d.ts
+type InstanceId = string;
+type SubId = string;
+/** Local tracking of an active subscription (per-session) */
+interface SubscriptionEntry {
+  subId: SubId;
+  cacheKey: string;
+  subscribedTimes: number;
+}
+/**
+ * A mutation that has been validated and parked on the per-session FIFO
+ * queue, waiting for the in-flight mutation on this socket to finish. Each
+ * `handleCall` for a mutation owns one of these and awaits its own
+ * resolve/reject so it can send the response.
+ */
+interface PendingMutation<TContext = Record<string, unknown>> {
+  procedure: RegisteredProcedure<TContext>;
+  validatedInput: unknown;
+  resolve: (result: MutationResult<unknown>) => void;
+  reject: (err: unknown) => void;
+}
+/** WebSocket session (runtime, with WebSocket) */
+interface Session<TContext = Record<string, unknown>> {
+  id: string;
+  ws: WebSocket;
+  /** Auth context from verifyAuth callback */
+  serverCtx?: TContext;
+  subIds: Set<string>;
+  /**
+   * Per-socket FIFO mutation queue. at most one mutation
+   * drains at a time so a single client cannot saturate the OCC retry
+   * loop or fan out concurrent commits that race the same rows.
+   */
+  mutationQueue: PendingMutation<TContext>[];
+  mutationInFlight: boolean;
+  /** Per-socket count of currently executing actions. */
+  actionInFlight: number;
+  /**
+   * Wall-clock of the last inbound frame (text message, ws-ping, or ws-pong).
+   * Used by the per-session heartbeat to terminate sockets that have gone
+   * silent past `CLIENT_TIMEOUT_MS`.
+   */
+  lastReceivedAt: number;
+  /**
+   * Wall-clock of the last outbound frame. Gates the idle-only app-level
+   * ping so a busy session (frequent sub:updates etc.) doesn't emit a
+   * redundant `{type:"ping"}` on every heartbeat tick.
+   */
+  lastSentAt: number;
+  /**
+   * Per-session combined heartbeat. Single `setInterval` that handles
+   * both dead-TCP detection (ws-ping or terminate) and client-watchdog
+   * refresh (idle-only app-level ping) on each tick.
+   */
+  heartbeatTimer: ReturnType<typeof setInterval> | null;
+}
+declare const RemoteSubscriptionUpdateSchema: z.ZodObject<{
+  type: z.ZodLiteral<"update">;
+  subId: z.ZodString;
+  data: z.ZodUnknown;
+  dataHash: z.ZodString;
+  originInstance: z.ZodString;
+}, z.core.$strip>;
+type RemoteSubscriptionUpdate = z.infer<typeof RemoteSubscriptionUpdateSchema>;
+declare const RemoteRecomputeRaceSchema: z.ZodObject<{
+  type: z.ZodLiteral<"recompute-race">;
+  subId: z.ZodString;
+  cacheKey: z.ZodString;
+  queryName: z.ZodString;
+  args: z.ZodUnknown;
+  notifyInstances: z.ZodArray<z.ZodString>;
+  commitTs: z.ZodString;
+  originInstance: z.ZodString;
+}, z.core.$strip>;
+type RemoteRecomputeRace = z.infer<typeof RemoteRecomputeRaceSchema>;
+declare const RemoteSubscriptionMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  type: z.ZodLiteral<"update">;
+  subId: z.ZodString;
+  data: z.ZodUnknown;
+  dataHash: z.ZodString;
+  originInstance: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  type: z.ZodLiteral<"recompute-race">;
+  subId: z.ZodString;
+  cacheKey: z.ZodString;
+  queryName: z.ZodString;
+  args: z.ZodUnknown;
+  notifyInstances: z.ZodArray<z.ZodString>;
+  commitTs: z.ZodString;
+  originInstance: z.ZodString;
+}, z.core.$strip>], "type">;
+type RemoteSubscriptionMessage = z.infer<typeof RemoteSubscriptionMessageSchema>;
+//#endregion
+export { RpcRateLimitConfig as _, RemoteSubscriptionMessage as a, UpstashConfig as b, RemoteSubscriptionUpdateSchema as c, SubscriptionEntry as d, DatabaseConfig as f, RpcCorsConfig as g, RpcConfig as h, RemoteRecomputeRaceSchema as i, Session as l, PostgresConfig as m, PendingMutation as n, RemoteSubscriptionMessageSchema as o, MySQLConfig as p, RemoteRecomputeRace as r, RemoteSubscriptionUpdate as s, InstanceId as t, SubId as u, SubscriptionManagerConfig as v, SupaliveServerConfig as y };
+//# sourceMappingURL=types_server-BXn_YC0a.d.ts.map

package/dist/types_server-BXn_YC0a.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types_server-BXn_YC0a.d.ts","names":[],"sources":["../src/config.ts","../src/server/types_server.ts"],"mappings":";;;;;;;;;;UASiB,aAAA;EAAA;;;;AAMR;EAAP,OAAO;AAAA;;UAIQ,kBAAA;EAEf;EAAA,QAAA;EAOA;EALA,GAAA;EAKS;;AAAoB;AAS/B;EATE,KAAA,IAAS,GAAA,EAAK,eAAe;AAAA;;;;;;;UASd,SAAA;EAKf;;;;EAAA,IAAA;EAQA;;;;;EAFA,IAAA,IAAQ,GAAA,EAAK,eAAA,KAAoB,MAAA;EAOlB;EALf,IAAA,GAAO,aAAA;;EAEP,SAAA,GAAY,kBAAA;AAAA;AAAA,UAGG,aAAA;EACb,GAAA;EACA,KAAA;EACA,QAAA;AAAA;;UAIa,cAAA;EACb,IAAA;EACA,gBAAA;EAAA;EAEA,cAAA;EAGA;EAAA,cAAA;EAMA;EAHA,iBAAA;EAGuB;EAAvB,uBAAA;AAAA;;UAIa,WAAA;EACb,IAAA;EACA,gBAAA;EAEA;EAAA,cAAA;EAMA;EAHA,cAAA;EASA;EANA,iBAAA;EAMU;EAHV,uBAAA;EAMsB;EAHtB,UAAA;AAAA;AAAA,KAGQ,cAAA,GAAiB,cAAA,GAAiB,WAAW;AAKzD;;;AAAA,UAAiB,oBAAA,YAAgC,MAAA;EAUjC;EARZ,IAAA;EAuBU;EApBV,IAAA;EAKA,UAAA,EAAY,UAAA;EAIZ,cAAA,EAAgB,KAAA;EAsCL;;;;;;EA9BX,aAAA;EA6EM;EA1EN,QAAA,EAAU,UAAA;EAoFY;;;;;EA7EtB,UAAA,IACI,IAAA,EAAM,MAAA,mBACN,SAAA,aACC,OAAA,CAAQ,QAAA;EAzBb;;;;EA+BA,WAAA;EAhBA;;;;EAsBA,iBAAA;EAbI;;;EAkBJ,QAAA,GAAW,KAAA;EALX;;;;EAWA,SAAA,IAAa,GAAA,EAAK,QAAA;EAAL;;;;EAMb,eAAA;EAemB;;;;;;EAPnB,SAAA,EAAW,YAAA;EA2BK;;;;AAUM;EA9BtB,UAAA,SAAmB,QAAA,GAAW,OAAA,CAAQ,QAAA;EAiCA;;;;;EA1BtC,SAAA;EA4BwB;;;;EAtBxB,OAAA;EAqCA;;;AAMuB;;EApCvB,GAAA,GAAM,SAAA,CAAU,QAAA;;ACnMpB;;;;AAAsB;AAEtB;;ED2MI,OAAA,EAAS,aAAA;AAAA;AAAA,UAGI,yBAAA;EACb,IAAA;EACA,OAAA;IAAW,GAAA;IAAa,KAAA;IAAe,QAAA;EAAA;EACvC,QAAA,EAAU,cAAc;EACxB,eAAA;EC5Ma;AAAA;AASjB;;;;;;;;;;EDgNI,OAAA;EC/MF;;;;;EDqNE,uBAAA;AAAA;;;KCvOQ,UAAA;AAAA,KAEA,KAAA;;UAGK,iBAAA;EACf,KAAA,EAAO,KAAK;EACZ,QAAA;EACA,eAAA;AAAA;;ADAO;AAIT;;;;UCKiB,eAAA,YAA2B,MAAA;EAC1C,SAAA,EAAW,mBAAA,CAAoB,QAAA;EAC/B,cAAA;EACA,OAAA,GAAU,MAAA,EAAQ,cAAA;EAClB,MAAA,GAAS,GAAA;AAAA;ADAoB;AAAA,UCId,OAAA,YAAmB,MAAA;EAClC,EAAA;EACA,EAAA,EAAI,SAAA;EDcS;ECZb,SAAA,GAAY,QAAA;EACZ,MAAA,EAAQ,GAAA;EDeI;;;;;ECTZ,aAAA,EAAe,eAAA,CAAgB,QAAA;EAC/B,gBAAA;EDIQ;ECFR,cAAA;EDIA;;;;;ECEA,cAAA;EDGe;;;;;ECGf,UAAA;EDAE;;AAAQ;AAIZ;;ECEE,cAAA,EAAgB,UAAA,QAAkB,WAAA;AAAA;AAAA,cAgBvB,8BAAA,EAA8B,CAAA,CAAA,SAAA;;;;;;;KAO/B,wBAAA,GAA2B,CAAA,CAAE,KAAK,QAAQ,8BAAA;AAAA,cAEzC,yBAAA,EAAyB,CAAA,CAAA,SAAA;;;;;;;;;;KAU1B,mBAAA,GAAsB,CAAA,CAAE,KAAK,QAAQ,yBAAA;AAAA,cAEpC,+BAAA,EAA+B,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;KAIhC,yBAAA,GAA4B,CAAA,CAAE,KAAK,QAAQ,+BAAA"}