@syncular/server 0.1.2 → 0.2.0

package/dist/helpers/paginate.js

@@ -1,54 +0,0 @@
-/**
- * @syncular/server - Pagination helper
- *
- * Simplifies cursor-based pagination for snapshot queries.
- */
-/**
- * Apply cursor-based pagination to a Kysely query.
- *
- * This helper simplifies implementing snapshot pagination by:
- * - Applying cursor filter if provided
- * - Ordering by the cursor column
- * - Fetching limit + 1 to determine if there's a next page
- * - Computing the next cursor
- *
- * @example
- * ```typescript
- * const handler: ServerTableHandler = {
- *   table: 'tasks',
- *   async snapshot(ctx) {
- *     const query = ctx.db
- *       .selectFrom('tasks')
- *       .selectAll()
- *       .where('user_id', '=', ctx.actorId);
- *
- *     return paginate(query, {
- *       cursor: ctx.cursor,
- *       limit: ctx.limit,
- *     });
- *   },
- * };
- * ```
- */
-export async function paginate(query, options) {
-    const { cursor, limit, cursorColumn = 'id' } = options;
-    // Apply cursor filter if resuming from a previous page
-    let q = query;
-    if (cursor) {
-        q = q.where(cursorColumn, '>', cursor);
-    }
-    // Order by cursor column and fetch limit + 1 to check for more pages
-    const rows = await q
-        .orderBy(cursorColumn, 'asc')
-        .limit(limit + 1)
-        .execute();
-    // Determine if there are more pages
-    const hasMore = rows.length > limit;
-    const pageRows = hasMore ? rows.slice(0, limit) : rows;
-    // Compute next cursor from last row
-    const nextCursor = hasMore
-        ? (pageRows[pageRows.length - 1]?.[cursorColumn] ?? null)
-        : null;
-    return { rows: pageRows, nextCursor };
-}
-//# sourceMappingURL=paginate.js.map

package/dist/helpers/paginate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paginate.js","sourceRoot":"","sources":["../../src/helpers/paginate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAoBH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAsC,EACtC,OAAwB;IAExB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEvD,uDAAuD;IACvD,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,MAAM,EAAE,CAAC;QACX,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAa,CAAC;IACrD,CAAC;IAED,qEAAqE;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC;SACjB,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;SAC5B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;SAChB,OAAO,EAAE,CAAC;IAEb,oCAAoC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvD,oCAAoC;IACpC,MAAM,UAAU,GAAG,OAAO;QACxB,CAAC,CAAC,CAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAA6B,EAAE,CAC5D,YAAY,CACF,IAAI,IAAI,CAAC;QACvB,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC"}

package/dist/helpers/scope-authorization.d.ts

@@ -1,7 +0,0 @@
-import type { ScopeValues, StoredScopes } from '@syncular/core';
-export declare function rowScopesAllowed(args: {
-    rowScopes: StoredScopes;
-    allowedScopes: ScopeValues;
-    requiredScopeKeys: readonly string[];
-}): boolean;
-//# sourceMappingURL=scope-authorization.d.ts.map

package/dist/helpers/scope-authorization.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope-authorization.d.ts","sourceRoot":"","sources":["../../src/helpers/scope-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAWhE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,YAAY,CAAC;IACxB,aAAa,EAAE,WAAW,CAAC;IAC3B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,GAAG,OAAO,CAWV"}

package/dist/helpers/scope-authorization.js

@@ -1,19 +0,0 @@
-function scopeValueAllows(allowed, rowValue) {
-    if (allowed === undefined)
-        return false;
-    const allowedValues = Array.isArray(allowed) ? allowed : [allowed];
-    return allowedValues.includes('*') || allowedValues.includes(rowValue);
-}
-export function rowScopesAllowed(args) {
-    for (const key of args.requiredScopeKeys) {
-        const rowValue = args.rowScopes[key];
-        if (typeof rowValue !== 'string' || rowValue.length === 0) {
-            return false;
-        }
-        if (!scopeValueAllows(args.allowedScopes[key], rowValue)) {
-            return false;
-        }
-    }
-    return true;
-}
-//# sourceMappingURL=scope-authorization.js.map

package/dist/helpers/scope-authorization.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope-authorization.js","sourceRoot":"","sources":["../../src/helpers/scope-authorization.ts"],"names":[],"mappings":"AAEA,SAAS,gBAAgB,CACvB,OAAwC,EACxC,QAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnE,OAAO,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/helpers/scope-commit-index.d.ts

@@ -1,12 +0,0 @@
-import type { ScopeValues, StoredScopes } from '@syncular/core';
-export interface ScopeCommitIndexChange {
-    table: string;
-    scopes: ScopeValues | StoredScopes;
-}
-export interface ScopeCommitIndexEntry {
-    table: string;
-    scopeKey: string;
-}
-export declare function scopeKeysFromScopeValues(scopes: ScopeValues | StoredScopes | null | undefined): string[];
-export declare function createScopeCommitIndexEntries(changes: readonly ScopeCommitIndexChange[]): ScopeCommitIndexEntry[];
-//# sourceMappingURL=scope-commit-index.d.ts.map

package/dist/helpers/scope-commit-index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope-commit-index.d.ts","sourceRoot":"","sources":["../../src/helpers/scope-commit-index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,GAAG,YAAY,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,IAAI,GAAG,SAAS,GACpD,MAAM,EAAE,CAmBV;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,sBAAsB,EAAE,GACzC,qBAAqB,EAAE,CAczB"}

package/dist/helpers/scope-commit-index.js

@@ -1,35 +0,0 @@
-export function scopeKeysFromScopeValues(scopes) {
-    if (!scopes || typeof scopes !== 'object')
-        return [];
-    const keys = new Set();
-    for (const [key, rawValue] of Object.entries(scopes)) {
-        const prefix = key.replace(/_id$/, '');
-        const values = Array.isArray(rawValue) ? rawValue : [rawValue];
-        for (const value of values) {
-            if (typeof value === 'string') {
-                if (value.length > 0)
-                    keys.add(`${prefix}:${value}`);
-                continue;
-            }
-            if (typeof value === 'number' || typeof value === 'bigint') {
-                keys.add(`${prefix}:${String(value)}`);
-            }
-        }
-    }
-    return Array.from(keys);
-}
-export function createScopeCommitIndexEntries(changes) {
-    const entries = new Map();
-    for (const change of changes) {
-        if (!change.table)
-            continue;
-        for (const scopeKey of scopeKeysFromScopeValues(change.scopes)) {
-            const key = `${change.table}\u0000${scopeKey}`;
-            if (!entries.has(key)) {
-                entries.set(key, { table: change.table, scopeKey });
-            }
-        }
-    }
-    return Array.from(entries.values());
-}
-//# sourceMappingURL=scope-commit-index.js.map

package/dist/helpers/scope-commit-index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope-commit-index.js","sourceRoot":"","sources":["../../src/helpers/scope-commit-index.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,wBAAwB,CACtC,MAAqD;IAErD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;gBACrD,SAAS;YACX,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAA0C;IAE1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,SAAS;QAC5B,KAAK,MAAM,QAAQ,IAAI,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,SAAS,QAAQ,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/helpers/scope-strings.d.ts

@@ -1,74 +0,0 @@
-/**
- * @syncular/server - Scope string utilities
- *
- * Helpers for creating and parsing scope strings.
- * Scope strings identify partitions of data for sync subscriptions.
- */
-/**
- * Result from parsing a scope key
- */
-interface ParsedScopeKey {
-    /** The prefix (first segment) */
-    prefix: string;
-    /** The remaining values (segments after prefix) */
-    values: string[];
-}
-/**
- * Create a scope string from a prefix and values.
- *
- * Scope strings use colon separators: `prefix:value1:value2`
- *
- * @example
- * ```typescript
- * // Simple scope string
- * createScopeKey('user', 'alice')
- * // => 'user:alice'
- *
- * // Multi-value scope string
- * createScopeKey('user', 'alice', 'project', 'proj-1')
- * // => 'user:alice:project:proj-1'
- * ```
- */
-export declare function createScopeKey(prefix: string, ...values: string[]): string;
-/**
- * Parse a scope string into its prefix and values.
- *
- * Returns null if the key is invalid or doesn't match the expected prefix.
- *
- * @example
- * ```typescript
- * // Parse any scope string
- * parseScopeKey('user:alice')
- * // => { prefix: 'user', values: ['alice'] }
- *
- * // Parse with expected prefix
- * parseScopeKey('user:alice', 'user')
- * // => { prefix: 'user', values: ['alice'] }
- *
- * // Returns null if prefix doesn't match
- * parseScopeKey('user:alice', 'project')
- * // => null
- *
- * // Multi-value scope string
- * parseScopeKey('user:alice:project:proj-1')
- * // => { prefix: 'user', values: ['alice', 'project', 'proj-1'] }
- * ```
- */
-export declare function parseScopeKey(key: string, expectedPrefix?: string): ParsedScopeKey | null;
-/**
- * Extract a specific value from a scope string by index.
- *
- * @example
- * ```typescript
- * // Get first value after prefix
- * getScopeKeyValue('user:alice:project:proj-1', 0)
- * // => 'alice'
- *
- * // Get second value
- * getScopeKeyValue('user:alice:project:proj-1', 2)
- * // => 'proj-1'
- * ```
- */
-export declare function getScopeKeyValue(key: string, valueIndex: number): string | null;
-export type { ParsedScopeKey };
-//# sourceMappingURL=scope-strings.d.ts.map

package/dist/helpers/scope-strings.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope-strings.d.ts","sourceRoot":"","sources":["../../src/helpers/scope-strings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,UAAU,cAAc;IACtB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAE1E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,cAAc,CAAC,EAAE,MAAM,GACtB,cAAc,GAAG,IAAI,CAWvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAIf;AAED,YAAY,EAAE,cAAc,EAAE,CAAC"}

package/dist/helpers/scope-strings.js

@@ -1,82 +0,0 @@
-/**
- * @syncular/server - Scope string utilities
- *
- * Helpers for creating and parsing scope strings.
- * Scope strings identify partitions of data for sync subscriptions.
- */
-/**
- * Create a scope string from a prefix and values.
- *
- * Scope strings use colon separators: `prefix:value1:value2`
- *
- * @example
- * ```typescript
- * // Simple scope string
- * createScopeKey('user', 'alice')
- * // => 'user:alice'
- *
- * // Multi-value scope string
- * createScopeKey('user', 'alice', 'project', 'proj-1')
- * // => 'user:alice:project:proj-1'
- * ```
- */
-export function createScopeKey(prefix, ...values) {
-    return [prefix, ...values].join(':');
-}
-/**
- * Parse a scope string into its prefix and values.
- *
- * Returns null if the key is invalid or doesn't match the expected prefix.
- *
- * @example
- * ```typescript
- * // Parse any scope string
- * parseScopeKey('user:alice')
- * // => { prefix: 'user', values: ['alice'] }
- *
- * // Parse with expected prefix
- * parseScopeKey('user:alice', 'user')
- * // => { prefix: 'user', values: ['alice'] }
- *
- * // Returns null if prefix doesn't match
- * parseScopeKey('user:alice', 'project')
- * // => null
- *
- * // Multi-value scope string
- * parseScopeKey('user:alice:project:proj-1')
- * // => { prefix: 'user', values: ['alice', 'project', 'proj-1'] }
- * ```
- */
-export function parseScopeKey(key, expectedPrefix) {
-    const parts = key.split(':');
-    if (parts.length < 1)
-        return null;
-    const [prefix, ...values] = parts;
-    if (!prefix)
-        return null;
-    // Check expected prefix if provided
-    if (expectedPrefix && prefix !== expectedPrefix)
-        return null;
-    return { prefix, values };
-}
-/**
- * Extract a specific value from a scope string by index.
- *
- * @example
- * ```typescript
- * // Get first value after prefix
- * getScopeKeyValue('user:alice:project:proj-1', 0)
- * // => 'alice'
- *
- * // Get second value
- * getScopeKeyValue('user:alice:project:proj-1', 2)
- * // => 'proj-1'
- * ```
- */
-export function getScopeKeyValue(key, valueIndex) {
-    const parsed = parseScopeKey(key);
-    if (!parsed)
-        return null;
-    return parsed.values[valueIndex] ?? null;
-}
-//# sourceMappingURL=scope-strings.js.map

package/dist/helpers/scope-strings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope-strings.js","sourceRoot":"","sources":["../../src/helpers/scope-strings.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,GAAG,MAAgB;IAChE,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,cAAuB;IAEvB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,oCAAoC;IACpC,IAAI,cAAc,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,UAAkB;IAElB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC"}

package/dist/hono/api-key-auth.d.ts

@@ -1,49 +0,0 @@
-/**
- * @syncular/server/hono - API Key Authentication Helper
- *
- * Provides utilities for validating API keys in relay/proxy routes.
- */
-import type { ServerSyncDialect } from '@syncular/server';
-import type { Context } from 'hono';
-import { type Kysely } from 'kysely';
-import { type ApiKeyType } from './console/schemas';
-interface SyncApiKeysTable {
-    key_id: string;
-    key_hash: string;
-    key_prefix: string;
-    name: string;
-    key_type: string;
-    scope_keys: unknown | null;
-    actor_id: string | null;
-    created_at: string;
-    expires_at: string | null;
-    last_used_at: string | null;
-    revoked_at: string | null;
-}
-type ApiKeyDb = {
-    sync_api_keys: SyncApiKeysTable;
-};
-interface ValidateApiKeyResult {
-    keyId: string;
-    keyType: ApiKeyType;
-    actorId: string | null;
-    scopeKeys: string[];
-}
-/**
- * Validates an API key from Authorization header.
- * Updates last_used_at on successful validation.
- */
-export declare function validateApiKey<DB extends ApiKeyDb>(db: Kysely<DB>, dialect: ServerSyncDialect, authHeader: string | undefined): Promise<ValidateApiKeyResult | null>;
-/**
- * Creates an authenticator for relay/proxy routes.
- * Returns actorId from the API key if valid and allowed.
- */
-export declare function createApiKeyAuthenticator<DB extends ApiKeyDb>(db: Kysely<DB>, dialect: ServerSyncDialect, allowedTypes: ApiKeyType[]): (c: Context) => Promise<{
-    actorId: string;
-} | null>;
-/**
- * Middleware that validates API key and attaches result to context.
- */
-export declare function apiKeyAuthMiddleware<DB extends ApiKeyDb>(db: Kysely<DB>, dialect: ServerSyncDialect, allowedTypes: ApiKeyType[]): (c: Context, next: () => Promise<void>) => Promise<Response | undefined>;
-export {};
-//# sourceMappingURL=api-key-auth.d.ts.map

package/dist/hono/api-key-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-auth.d.ts","sourceRoot":"","sources":["../../src/hono/api-key-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,mBAAmB,CAAC;AAGtE,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,KAAK,QAAQ,GAAG;IACd,aAAa,EAAE,gBAAgB,CAAC;CACjC,CAAC;AAEF,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,EAAE,SAAS,QAAQ,EACtD,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACd,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAkEtC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,SAAS,QAAQ,EAC3D,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACd,OAAO,EAAE,iBAAiB,EAC1B,YAAY,EAAE,UAAU,EAAE,GACzB,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAmBrD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,SAAS,QAAQ,EACtD,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACd,OAAO,EAAE,iBAAiB,EAC1B,YAAY,EAAE,UAAU,EAAE,OAGrB,OAAO,QACJ,MAAM,OAAO,CAAC,IAAI,CAAC,KACxB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAiBjC"}

package/dist/hono/api-key-auth.js

@@ -1,108 +0,0 @@
-/**
- * @syncular/server/hono - API Key Authentication Helper
- *
- * Provides utilities for validating API keys in relay/proxy routes.
- */
-import { sha256Hex } from '@syncular/core';
-import { sql } from 'kysely';
-import { ApiKeyTypeSchema } from './console/schemas.js';
-import { syncError } from './errors.js';
-/**
- * Validates an API key from Authorization header.
- * Updates last_used_at on successful validation.
- */
-export async function validateApiKey(db, dialect, authHeader) {
-    if (!authHeader?.startsWith('Bearer ')) {
-        return null;
-    }
-    const secretKey = authHeader.slice(7);
-    if (!secretKey?.startsWith('sk_')) {
-        return null;
-    }
-    // Hash the provided key
-    const keyHash = await hashApiKey(secretKey);
-    // Look up key by hash
-    const rowResult = await sql `
-    select key_id, key_type, actor_id, scope_keys, expires_at, revoked_at
-    from ${sql.table('sync_api_keys')}
-    where key_hash = ${keyHash}
-    limit 1
-  `.execute(db);
-    const row = rowResult.rows[0];
-    if (!row) {
-        return null;
-    }
-    const parsedKeyType = ApiKeyTypeSchema.safeParse(row.key_type);
-    if (!parsedKeyType.success)
-        return null;
-    // Check if revoked
-    if (row.revoked_at) {
-        return null;
-    }
-    // Check if expired
-    if (row.expires_at) {
-        const expiresAt = new Date(row.expires_at);
-        if (expiresAt < new Date()) {
-            return null;
-        }
-    }
-    // Update last_used_at
-    const now = new Date().toISOString();
-    await sql `
-    update ${sql.table('sync_api_keys')}
-    set last_used_at = ${now}
-    where key_id = ${row.key_id}
-  `.execute(db);
-    // Parse scopes
-    const scopeKeys = dialect.dbToArray(row.scope_keys);
-    return {
-        keyId: row.key_id,
-        keyType: parsedKeyType.data,
-        actorId: row.actor_id,
-        scopeKeys,
-    };
-}
-/**
- * Creates an authenticator for relay/proxy routes.
- * Returns actorId from the API key if valid and allowed.
- */
-export function createApiKeyAuthenticator(db, dialect, allowedTypes) {
-    return async (c) => {
-        const authHeader = c.req.header('Authorization');
-        const result = await validateApiKey(db, dialect, authHeader);
-        if (!result) {
-            return null;
-        }
-        // Check if key type is allowed
-        if (!allowedTypes.includes(result.keyType)) {
-            return null;
-        }
-        // Return actorId (use key's actorId if set, otherwise use a default)
-        return {
-            actorId: result.actorId ?? `api-key:${result.keyId}`,
-        };
-    };
-}
-/**
- * Middleware that validates API key and attaches result to context.
- */
-export function apiKeyAuthMiddleware(db, dialect, allowedTypes) {
-    return async (c, next) => {
-        const authHeader = c.req.header('Authorization');
-        const result = await validateApiKey(db, dialect, authHeader);
-        if (!result) {
-            return syncError(c, 401, 'sync.auth_required');
-        }
-        if (!allowedTypes.includes(result.keyType)) {
-            return syncError(c, 403, 'sync.forbidden', 'Invalid key type');
-        }
-        // Attach to context for downstream handlers
-        c.set('apiKey', result);
-        await next();
-    };
-}
-// Hash function (same as in routes.ts)
-async function hashApiKey(secretKey) {
-    return sha256Hex(secretKey);
-}
-//# sourceMappingURL=api-key-auth.js.map

package/dist/hono/api-key-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-auth.js","sourceRoot":"","sources":["../../src/hono/api-key-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAe,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAmB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AA2BrC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAc,EACd,OAA0B,EAC1B,UAA8B;IAE9B,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAE5C,sBAAsB;IACtB,MAAM,SAAS,GAAG,MAAM,GAAG,CAOzB;;WAEO,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;uBACd,OAAO;;GAE3B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAExC,mBAAmB;IACnB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,CAAA;aACE,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;yBACd,GAAG;qBACP,GAAG,CAAC,MAAM;GAC5B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEd,eAAe;IACf,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEpD,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,OAAO,EAAE,aAAa,CAAC,IAAI;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAc,EACd,OAA0B,EAC1B,YAA0B;IAE1B,OAAO,KAAK,EAAE,CAAU,EAAE,EAAE;QAC1B,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qEAAqE;QACrE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,MAAM,CAAC,KAAK,EAAE;SACrD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAc,EACd,OAA0B,EAC1B,YAA0B;IAE1B,OAAO,KAAK,EACV,CAAU,EACV,IAAyB,EACM,EAAE;QACjC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACjE,CAAC;QAED,4CAA4C;QAC5C,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,KAAK,UAAU,UAAU,CAAC,SAAiB;IACzC,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC"}

package/dist/hono/audit-redaction.d.ts

@@ -1,20 +0,0 @@
-type AuditChangeKind = 'app_row' | 'delete' | 'blob_reference' | 'encrypted_field_envelope' | 'encrypted_crdt_update' | 'encrypted_crdt_checkpoint';
-interface AuditChangeRedaction {
-    payload: 'omitted';
-    reason: 'audit_redacted_by_default';
-}
-interface AuditChangeSummary {
-    changeKind: AuditChangeKind;
-    fields: string[];
-    scopeFields: string[];
-    sensitiveFields: string[];
-    redaction: AuditChangeRedaction;
-}
-export declare function summarizeAuditChange(args: {
-    table: string;
-    op: 'upsert' | 'delete';
-    rowJson: unknown | null;
-    scopes: unknown;
-}): AuditChangeSummary;
-export {};
-//# sourceMappingURL=audit-redaction.d.ts.map

package/dist/hono/audit-redaction.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-redaction.d.ts","sourceRoot":"","sources":["../../src/hono/audit-redaction.ts"],"names":[],"mappings":"AAMA,KAAK,eAAe,GAChB,SAAS,GACT,QAAQ,GACR,gBAAgB,GAChB,0BAA0B,GAC1B,uBAAuB,GACvB,2BAA2B,CAAC;AAEhC,UAAU,oBAAoB;IAC5B,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,2BAA2B,CAAC;CACrC;AAED,UAAU,kBAAkB;IAC1B,UAAU,EAAE,eAAe,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,oBAAoB,CAAC;CACjC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACxB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;CACjB,GAAG,kBAAkB,CAoBrB"}

package/dist/hono/audit-redaction.js

@@ -1,85 +0,0 @@
-import { parseJsonValue, SYNC_CRDT_CHECKPOINTS_TABLE, SYNC_CRDT_UPDATES_TABLE, } from '@syncular/server';
-export function summarizeAuditChange(args) {
-    const row = parseJsonRecord(args.rowJson);
-    const fields = Object.keys(row).sort();
-    const sensitiveFields = detectSensitiveFields(row);
-    return {
-        changeKind: classifyAuditChange({
-            table: args.table,
-            op: args.op,
-            row,
-            sensitiveFields,
-        }),
-        fields,
-        scopeFields: Object.keys(parseJsonRecord(args.scopes)).sort(),
-        sensitiveFields,
-        redaction: {
-            payload: 'omitted',
-            reason: 'audit_redacted_by_default',
-        },
-    };
-}
-function classifyAuditChange(args) {
-    if (args.table === SYNC_CRDT_UPDATES_TABLE) {
-        return 'encrypted_crdt_update';
-    }
-    if (args.table === SYNC_CRDT_CHECKPOINTS_TABLE) {
-        return 'encrypted_crdt_checkpoint';
-    }
-    if (args.op === 'delete') {
-        return 'delete';
-    }
-    if (args.sensitiveFields.some((field) => isEncryptedFieldName(field))) {
-        return 'encrypted_field_envelope';
-    }
-    if (args.sensitiveFields.length > 0) {
-        return 'blob_reference';
-    }
-    return 'app_row';
-}
-function detectSensitiveFields(row) {
-    const sensitive = new Set();
-    for (const [field, value] of Object.entries(row)) {
-        const parsed = parseJsonValue(value);
-        if (isEncryptedFieldName(field) || isEncryptedEnvelope(parsed)) {
-            sensitive.add(field);
-            continue;
-        }
-        if (isBlobRef(parsed)) {
-            sensitive.add(field);
-        }
-    }
-    return Array.from(sensitive).sort();
-}
-function parseJsonRecord(value) {
-    const parsed = parseJsonValue(value);
-    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-        return {};
-    }
-    return parsed;
-}
-function isBlobRef(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        return false;
-    }
-    const record = value;
-    return (typeof record.hash === 'string' &&
-        record.hash.length > 0 &&
-        (typeof record.size === 'number' || typeof record.size === 'bigint'));
-}
-function isEncryptedEnvelope(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        return false;
-    }
-    const record = value;
-    return (typeof record.ciphertext === 'string' &&
-        (typeof record.key_id === 'string' || typeof record.keyId === 'string'));
-}
-function isEncryptedFieldName(field) {
-    return (field === 'ciphertext' ||
-        field === 'key_id' ||
-        field === 'keyId' ||
-        field.endsWith('_encrypted') ||
-        field.endsWith('_ciphertext'));
-}
-//# sourceMappingURL=audit-redaction.js.map

package/dist/hono/audit-redaction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-redaction.js","sourceRoot":"","sources":["../../src/hono/audit-redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAuB1B,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,eAAe,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO;QACL,UAAU,EAAE,mBAAmB,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,GAAG;YACH,eAAe;SAChB,CAAC;QACF,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7D,eAAe;QACf,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,2BAA2B;SACpC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAK5B;IACC,IAAI,IAAI,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;QAC3C,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,2BAA2B,EAAE,CAAC;QAC/C,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA4B;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACL,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACL,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,CACL,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,QAAQ;QAClB,KAAK,KAAK,OAAO;QACjB,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAC9B,CAAC;AACJ,CAAC"}