@truto/ginger 1.0.0

package/dist/errors.js

@@ -0,0 +1,90 @@
+/**
+ * Base service error class
+ */
+export class ServiceError extends Error {
+    code;
+    statusCode;
+    details;
+    constructor(message, code, statusCode = 500, details) {
+        super(message);
+        this.name = this.constructor.name;
+        this.code = code;
+        this.statusCode = statusCode;
+        this.details = details;
+        // Restore prototype chain for instanceof checks
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/**
+ * Resource not found error
+ */
+export class NotFoundError extends ServiceError {
+    constructor(resource, id, details) {
+        super(`${resource} with id "${id}" not found`, 'NOT_FOUND', 404, details);
+    }
+}
+/**
+ * Validation error for schema validation failures
+ */
+export class ValidationError extends ServiceError {
+    constructor(message, details) {
+        super(message, 'VALIDATION_ERROR', 400, details);
+    }
+}
+/**
+ * Authorization error for access control failures
+ */
+export class AuthError extends ServiceError {
+    constructor(message = 'Access denied', details) {
+        super(message, 'AUTH_ERROR', 403, details);
+    }
+}
+/**
+ * Database operation error
+ */
+export class DatabaseError extends ServiceError {
+    constructor(message, details) {
+        super(message, 'DATABASE_ERROR', 500, details);
+    }
+}
+/**
+ * Encryption/decryption error
+ */
+export class EncryptionError extends ServiceError {
+    constructor(message, details) {
+        super(message, 'ENCRYPTION_ERROR', 500, details);
+    }
+}
+/**
+ * Hook execution error
+ */
+export class HookError extends ServiceError {
+    constructor(hookPhase, methodName, originalError, details) {
+        super(`Hook error in ${hookPhase} phase of ${methodName}: ${originalError.message}`, 'HOOK_ERROR', 500, details ? { originalError, ...details } : { originalError });
+    }
+}
+/**
+ * Pagination cursor error
+ */
+export class CursorError extends ServiceError {
+    constructor(message, details) {
+        super(message, 'CURSOR_ERROR', 400, details);
+    }
+}
+/**
+ * SQL builder error
+ */
+export class SqlBuilderError extends ServiceError {
+    constructor(message, details) {
+        super(message, 'SQL_BUILDER_ERROR', 500, details);
+    }
+}
+/**
+ * Dependency injection error
+ */
+export class DependencyError extends ServiceError {
+    constructor(message, details) {
+        super(message, 'DEPENDENCY_ERROR', 500, details);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrB,IAAI,CAAQ;IACZ,UAAU,CAAQ;IAClB,OAAO,CAAU;IAEjC,YACE,OAAe,EACf,IAAY,EACZ,aAAqB,GAAG,EACxB,OAAiB;QAEjB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,gDAAgD;QAChD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACnD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,QAAgB,EAAE,EAAmB,EAAE,OAAiB;QAClE,KAAK,CAAC,GAAG,QAAQ,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAC3E,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,YAAY;IACzC,YAAY,UAAkB,eAAe,EAAE,OAAiB;QAC9D,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAC5C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,YAAY;IACzC,YACE,SAAiB,EACjB,UAAkB,EAClB,aAAoB,EACpB,OAAiB;QAEjB,KAAK,CACH,iBAAiB,SAAS,aAAa,UAAU,KAAK,aAAa,CAAC,OAAO,EAAE,EAC7E,YAAY,EACZ,GAAG,EACH,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAC5D,CAAA;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,YAAY;IAC3C,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IACnD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;CACF"}

package/dist/example.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Complete example of using the Ginger library with:
+ * - Secret apiKey field
+ * - Join to teams table
+ * - Custom method withMembership
+ * - Hook that enforces tenant filtering via auth.user
+ */
+import { z } from './index.js';
+/**
+ * Factory function to create users service with tenant hooks and encryption keys
+ */
+export declare function createUsersService(db: any, encryptionKeys: Record<string, string>): import("./service.js").Service<z.ZodObject<{
+    id: z.ZodNumber;
+    name: z.ZodString;
+    email: z.ZodString;
+    apiKey: z.ZodString;
+    tenantId: z.ZodString;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    name: z.ZodString;
+    email: z.ZodString;
+    apiKey: z.ZodString;
+    tenantId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    apiKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, {
+    teams: {
+        kind: "many";
+        localPk: string;
+        through: {
+            table: string;
+            from: string;
+            to: string;
+        };
+        remote: {
+            table: string;
+            pk: string;
+            select: string[];
+            alias: string;
+        };
+        where: string;
+        schema: z.ZodObject<{
+            id: z.ZodNumber;
+            name: z.ZodString;
+            description: z.ZodString;
+        }, z.core.$strip>;
+    };
+}, readonly [{
+    readonly logicalName: "apiKey";
+    readonly columnName: "api_key_encrypted";
+    readonly keyId: "user-secrets";
+}]>;
+/**
+ * Example usage in a Cloudflare Worker
+ */
+declare const _default: {
+    fetch(_request: Request, env: any, _ctx: any): Promise<Response>;
+};
+export default _default;
+/**
+ * Cloudflare Worker Environment Setup:
+ *
+ * 1. Add these environment variables to your Cloudflare Worker:
+ *    - ENCRYPTION_KEY_DEFAULT: A base64-encoded 256-bit encryption key
+ *    - ENCRYPTION_KEY_USER_SECRETS: (Optional) A separate key for user secrets
+ *
+ * 2. Generate encryption keys using the library:
+ *    ```typescript
+ *    import { generateSecretKey } from './crypto.js'
+ *    const key = await generateSecretKey()
+ *    console.log('ENCRYPTION_KEY_DEFAULT=' + key)
+ *    ```
+ *
+ * 3. Bind your D1 database as "DB" in wrangler.toml:
+ *    ```toml
+ *    [[d1_databases]]
+ *    binding = "DB"
+ *    database_name = "your-database"
+ *    database_id = "your-database-id"
+ *    ```
+ */
+/**
+ * SQL schema for this example:
+ *
+ * ```sql
+ * CREATE TABLE users (
+ *   id INTEGER PRIMARY KEY AUTOINCREMENT,
+ *   name TEXT NOT NULL,
+ *   email TEXT NOT NULL UNIQUE,
+ *   api_key_encrypted TEXT NOT NULL,
+ *   tenant_id TEXT NOT NULL,
+ *   created_at TEXT NOT NULL,
+ *   updated_at TEXT NOT NULL
+ * );
+ *
+ * CREATE TABLE teams (
+ *   id INTEGER PRIMARY KEY AUTOINCREMENT,
+ *   name TEXT NOT NULL,
+ *   description TEXT,
+ *   tenant_id TEXT NOT NULL,
+ *   active INTEGER DEFAULT 1
+ * );
+ *
+ * CREATE TABLE user_teams (
+ *   user_id INTEGER NOT NULL,
+ *   team_id INTEGER NOT NULL,
+ *   PRIMARY KEY (user_id, team_id),
+ *   FOREIGN KEY (user_id) REFERENCES users(id),
+ *   FOREIGN KEY (team_id) REFERENCES teams(id)
+ * );
+ *
+ * CREATE INDEX idx_users_tenant_id ON users(tenant_id);
+ * CREATE INDEX idx_teams_tenant_id ON teams(tenant_id);
+ * ```
+ */
+//# sourceMappingURL=example.d.ts.map

package/dist/example.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"example.d.ts","sourceRoot":"","sources":["../src/example.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAiB,CAAC,EAAqC,MAAM,YAAY,CAAA;AAoEhF;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,GAAG,EACP,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4DvC;AAED;;GAEG;;oBAEqB,OAAO,OAAO,GAAG,QAAQ,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADxE,wBAyHC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG"}

package/dist/example.js

@@ -0,0 +1,297 @@
+/**
+ * Complete example of using the Ginger library with:
+ * - Secret apiKey field
+ * - Join to teams table
+ * - Custom method withMembership
+ * - Hook that enforces tenant filtering via auth.user
+ */
+import { createService, z } from './index.js';
+// Schema definitions
+const UserRowSchema = z.object({
+    id: z.number(),
+    name: z.string(),
+    email: z.string(),
+    apiKey: z.string(), // This will be encrypted
+    tenantId: z.string(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+});
+const UserCreateSchema = z.object({
+    name: z.string().min(1).max(255),
+    email: z.string().email().max(255),
+    apiKey: z.string().min(32).max(255),
+    tenantId: z.string().uuid(),
+});
+const UserUpdateSchema = z.object({
+    name: z.string().min(1).max(255).optional(),
+    email: z.string().email().max(255).optional(),
+    apiKey: z.string().min(32).max(255).optional(),
+});
+const TeamRowSchema = z.object({
+    id: z.number(),
+    name: z.string(),
+    description: z.string(),
+});
+// Join definitions
+// Note: Auth-based filtering (like tenant_id checks) should NOT be embedded in join definitions.
+// Instead, handle them through:
+// 1. Hooks that modify where clauses before queries
+// 2. Proper database design with foreign keys
+// 3. Service-level filtering logic
+// 4. Row-level security in the database
+const userJoins = {
+    teams: {
+        kind: 'many',
+        localPk: 'id',
+        through: {
+            table: 'user_teams',
+            from: 'user_id',
+            to: 'team_id',
+        },
+        remote: {
+            table: 'teams',
+            pk: 'id',
+            select: ['id', 'name', 'description'],
+            alias: 'team',
+        },
+        where: 'teams.active = 1',
+        schema: TeamRowSchema,
+    },
+};
+// Secret field definitions
+const userSecrets = [
+    {
+        logicalName: 'apiKey',
+        columnName: 'api_key_encrypted',
+        keyId: 'user-secrets',
+    },
+];
+/**
+ * Factory function to create users service with tenant hooks and encryption keys
+ */
+export function createUsersService(db, encryptionKeys) {
+    return createService({
+        table: 'users',
+        db,
+        rowSchema: UserRowSchema,
+        createSchema: UserCreateSchema,
+        updateSchema: UserUpdateSchema,
+        joins: userJoins,
+        secrets: userSecrets,
+        primaryKey: 'id',
+        defaultOrderBy: { column: 'created_at', direction: 'desc' },
+        encryptionKeys, // Pass encryption keys directly
+        hooks: {
+            // Enforce tenant filtering on all operations
+            list: {
+                before: async (ctx) => {
+                    if (!ctx.auth.user?.tenantId) {
+                        throw new Error('User must have a tenant ID');
+                    }
+                    // Add tenant filter to where clause
+                    if (!ctx.params.where) {
+                        ctx.params.where = {};
+                    }
+                    ctx.params.where.tenantId = ctx.auth.user.tenantId;
+                    // For joins that need tenant filtering, you can:
+                    // 1. Ensure proper foreign key relationships in your database schema
+                    // 2. Use additional where clauses on the main query
+                    // 3. Implement custom filtering logic in hooks
+                    // The join definitions remain clean and auth-agnostic
+                },
+            },
+            get: {
+                before: async (ctx) => {
+                    if (!ctx.auth.user?.tenantId) {
+                        throw new Error('User must have a tenant ID');
+                    }
+                    // This would be handled by ensuring the ID belongs to the tenant
+                    // In practice, you'd modify the query to include tenant check
+                },
+            },
+            create: {
+                before: async (ctx) => {
+                    if (!ctx.auth.user?.tenantId) {
+                        throw new Error('User must have a tenant ID');
+                    }
+                    // Ensure created records belong to the user's tenant
+                    ctx.data.tenantId = ctx.auth.user.tenantId;
+                    ctx.data.createdAt = new Date().toISOString();
+                    ctx.data.updatedAt = new Date().toISOString();
+                },
+            },
+            update: {
+                before: async (ctx) => {
+                    ctx.data.updatedAt = new Date().toISOString();
+                },
+            },
+        },
+    });
+}
+/**
+ * Example usage in a Cloudflare Worker
+ */
+export default {
+    async fetch(_request, env, _ctx) {
+        // Get encryption keys from Cloudflare environment variables/secrets
+        const encryptionKeys = {
+            default: env.ENCRYPTION_KEY_DEFAULT, // Store as base64 encoded key
+            'user-secrets': env.ENCRYPTION_KEY_USER_SECRETS || env.ENCRYPTION_KEY_DEFAULT,
+        };
+        // Initialize the service with the database binding and encryption keys
+        const usersService = createService({
+            table: 'users',
+            db: env.DB, // Cloudflare D1 binding
+            rowSchema: UserRowSchema,
+            createSchema: UserCreateSchema,
+            updateSchema: UserUpdateSchema,
+            joins: userJoins,
+            secrets: userSecrets,
+            encryptionKeys, // Pass encryption keys directly
+            hooks: {
+                // Enforce tenant filtering on all operations
+                list: {
+                    before: async (ctx) => {
+                        if (!ctx.auth.user?.tenantId) {
+                            throw new Error('User must have a tenant ID');
+                        }
+                        // Add tenant filter to where clause
+                        if (!ctx.params.where) {
+                            ctx.params.where = {};
+                        }
+                        ctx.params.where.tenantId = ctx.auth.user.tenantId;
+                        // For joins that need tenant filtering, you can:
+                        // 1. Ensure proper foreign key relationships in your database schema
+                        // 2. Use additional where clauses on the main query
+                        // 3. Implement custom filtering logic in hooks
+                        // The join definitions remain clean and auth-agnostic
+                    },
+                },
+                create: {
+                    before: async (ctx) => {
+                        if (!ctx.auth.user?.tenantId) {
+                            throw new Error('User must have a tenant ID');
+                        }
+                        // Ensure created records belong to the user's tenant
+                        ctx.data.tenantId = ctx.auth.user.tenantId;
+                        ctx.data.createdAt = new Date().toISOString();
+                        ctx.data.updatedAt = new Date().toISOString();
+                    },
+                },
+            },
+        });
+        try {
+            // Example: Create a new user
+            const newUser = await usersService.create({
+                name: 'John Doe',
+                email: 'john@example.com',
+                apiKey: 'sk_ex_abcdef1234567890abcdef1234567890',
+                tenantId: 'tenant-123',
+            }, {
+                auth: {
+                    user: {
+                        id: 'current-user-id',
+                        tenantId: 'tenant-123',
+                        roles: ['admin'],
+                    },
+                },
+            });
+            // Example: List users with pagination
+            const users = await usersService.list({
+                auth: {
+                    user: {
+                        id: 'current-user-id',
+                        tenantId: 'tenant-123',
+                        roles: ['admin'],
+                    },
+                },
+                limit: 10,
+                include: { teams: true },
+                orderBy: [{ column: 'created_at', direction: 'desc' }],
+            });
+            // Example: Get a user with secrets included
+            const userWithSecrets = await usersService.get(newUser.id, {
+                auth: {
+                    user: {
+                        id: 'current-user-id',
+                        tenantId: 'tenant-123',
+                        roles: ['admin'],
+                    },
+                },
+                includeSecrets: true, // This will decrypt the API key
+            });
+            return new Response(JSON.stringify({
+                newUser,
+                users,
+                userWithSecrets,
+            }), {
+                headers: { 'content-type': 'application/json' },
+            });
+        }
+        catch (error) {
+            return new Response(JSON.stringify({
+                error: error instanceof Error ? error.message : 'Unknown error',
+            }), {
+                status: 500,
+                headers: { 'content-type': 'application/json' },
+            });
+        }
+    },
+};
+/**
+ * Cloudflare Worker Environment Setup:
+ *
+ * 1. Add these environment variables to your Cloudflare Worker:
+ *    - ENCRYPTION_KEY_DEFAULT: A base64-encoded 256-bit encryption key
+ *    - ENCRYPTION_KEY_USER_SECRETS: (Optional) A separate key for user secrets
+ *
+ * 2. Generate encryption keys using the library:
+ *    ```typescript
+ *    import { generateSecretKey } from './crypto.js'
+ *    const key = await generateSecretKey()
+ *    console.log('ENCRYPTION_KEY_DEFAULT=' + key)
+ *    ```
+ *
+ * 3. Bind your D1 database as "DB" in wrangler.toml:
+ *    ```toml
+ *    [[d1_databases]]
+ *    binding = "DB"
+ *    database_name = "your-database"
+ *    database_id = "your-database-id"
+ *    ```
+ */
+/**
+ * SQL schema for this example:
+ *
+ * ```sql
+ * CREATE TABLE users (
+ *   id INTEGER PRIMARY KEY AUTOINCREMENT,
+ *   name TEXT NOT NULL,
+ *   email TEXT NOT NULL UNIQUE,
+ *   api_key_encrypted TEXT NOT NULL,
+ *   tenant_id TEXT NOT NULL,
+ *   created_at TEXT NOT NULL,
+ *   updated_at TEXT NOT NULL
+ * );
+ *
+ * CREATE TABLE teams (
+ *   id INTEGER PRIMARY KEY AUTOINCREMENT,
+ *   name TEXT NOT NULL,
+ *   description TEXT,
+ *   tenant_id TEXT NOT NULL,
+ *   active INTEGER DEFAULT 1
+ * );
+ *
+ * CREATE TABLE user_teams (
+ *   user_id INTEGER NOT NULL,
+ *   team_id INTEGER NOT NULL,
+ *   PRIMARY KEY (user_id, team_id),
+ *   FOREIGN KEY (user_id) REFERENCES users(id),
+ *   FOREIGN KEY (team_id) REFERENCES teams(id)
+ * );
+ *
+ * CREATE INDEX idx_users_tenant_id ON users(tenant_id);
+ * CREATE INDEX idx_teams_tenant_id ON teams(tenant_id);
+ * ```
+ */
+//# sourceMappingURL=example.js.map

package/dist/example.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"example.js","sourceRoot":"","sources":["../src/example.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,CAAC,EAAqC,MAAM,YAAY,CAAA;AAEhF,qBAAqB;AACrB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CAC5B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAA;AAEF,mBAAmB;AACnB,iGAAiG;AACjG,gCAAgC;AAChC,oDAAoD;AACpD,8CAA8C;AAC9C,mCAAmC;AACnC,wCAAwC;AACxC,MAAM,SAAS,GAAG;IAChB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,SAAS;YACf,EAAE,EAAE,SAAS;SACd;QACD,MAAM,EAAE;YACN,KAAK,EAAE,OAAO;YACd,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC;YACrC,KAAK,EAAE,MAAM;SACd;QACD,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,aAAa;KACtB;CACgC,CAAA;AAEnC,2BAA2B;AAC3B,MAAM,WAAW,GAAG;IAClB;QACE,WAAW,EAAE,QAAQ;QACrB,UAAU,EAAE,mBAAmB;QAC/B,KAAK,EAAE,cAAc;KACtB;CAC2C,CAAA;AAE9C;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAO,EACP,cAAsC;IAEtC,OAAO,aAAa,CAAC;QACnB,KAAK,EAAE,OAAO;QACd,EAAE;QACF,SAAS,EAAE,aAAa;QACxB,YAAY,EAAE,gBAAgB;QAC9B,YAAY,EAAE,gBAAgB;QAC9B,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAe,EAAE;QACpE,cAAc,EAAE,gCAAgC;QAChD,KAAK,EAAE;YACL,6CAA6C;YAC7C,IAAI,EAAE;gBACJ,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;oBACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;oBAC/C,CAAC;oBACD,oCAAoC;oBACpC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBACtB,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAA;oBACvB,CAAC;oBACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAA;oBAElD,iDAAiD;oBACjD,qEAAqE;oBACrE,oDAAoD;oBACpD,+CAA+C;oBAC/C,sDAAsD;gBACxD,CAAC;aACF;YACD,GAAG,EAAE;gBACH,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;oBACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;oBAC/C,CAAC;oBACD,iEAAiE;oBACjE,8DAA8D;gBAChE,CAAC;aACF;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;oBACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;oBAC/C,CAAC;oBACD,qDAAqD;oBACrD,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAA;oBAC1C,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;oBAC7C,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;gBAC/C,CAAC;aACF;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;oBACzB,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;gBAC/C,CAAC;aACF;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,eAAe;IACb,KAAK,CAAC,KAAK,CAAC,QAAiB,EAAE,GAAQ,EAAE,IAAS;QAChD,oEAAoE;QACpE,MAAM,cAAc,GAAG;YACrB,OAAO,EAAE,GAAG,CAAC,sBAAsB,EAAE,8BAA8B;YACnE,cAAc,EACZ,GAAG,CAAC,2BAA2B,IAAI,GAAG,CAAC,sBAAsB;SAChE,CAAA;QAED,uEAAuE;QACvE,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,KAAK,EAAE,OAAO;YACd,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,wBAAwB;YACpC,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,gBAAgB;YAC9B,YAAY,EAAE,gBAAgB;YAC9B,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,WAAW;YACpB,cAAc,EAAE,gCAAgC;YAChD,KAAK,EAAE;gBACL,6CAA6C;gBAC7C,IAAI,EAAE;oBACJ,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;wBACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;4BAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;wBAC/C,CAAC;wBACD,oCAAoC;wBACpC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;4BACtB,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAA;wBACvB,CAAC;wBACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAA;wBAElD,iDAAiD;wBACjD,qEAAqE;wBACrE,oDAAoD;wBACpD,+CAA+C;wBAC/C,sDAAsD;oBACxD,CAAC;iBACF;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;wBACzB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;4BAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;wBAC/C,CAAC;wBACD,qDAAqD;wBACrD,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAA;wBAC1C,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;wBAC7C,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;oBAC/C,CAAC;iBACF;aACF;SACF,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CACvC;gBACE,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,wCAAwC;gBAChD,QAAQ,EAAE,YAAY;aACvB,EACD;gBACE,IAAI,EAAE;oBACJ,IAAI,EAAE;wBACJ,EAAE,EAAE,iBAAiB;wBACrB,QAAQ,EAAE,YAAY;wBACtB,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB;iBACF;aACF,CACF,CAAA;YAED,sCAAsC;YACtC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC;gBACpC,IAAI,EAAE;oBACJ,IAAI,EAAE;wBACJ,EAAE,EAAE,iBAAiB;wBACrB,QAAQ,EAAE,YAAY;wBACtB,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB;iBACF;gBACD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;gBACxB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;aACvD,CAAC,CAAA;YAEF,4CAA4C;YAC5C,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;gBACzD,IAAI,EAAE;oBACJ,IAAI,EAAE;wBACJ,EAAE,EAAE,iBAAiB;wBACrB,QAAQ,EAAE,YAAY;wBACtB,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB;iBACF;gBACD,cAAc,EAAE,IAAI,EAAE,gCAAgC;aACvD,CAAC,CAAA;YAEF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO;gBACP,KAAK;gBACL,eAAe;aAChB,CAAC,EACF;gBACE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CACF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC,EACF;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CACF,CAAA;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG"}

package/dist/index.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Ginger — A type-safe SQLite data access layer
+ *
+ * Works with Cloudflare D1, Bun SQLite, and Durable Object SqlStorage.
+ *
+ * Features:
+ * - Cursor-based pagination
+ * - Type-safe joins with conditional inclusion
+ * - AES-256-GCM encryption for secret fields
+ * - Comprehensive hook system
+ * - Dependency injection
+ * - Safe SQL generation
+ */
+export { Service } from './service.js';
+export type { AuthContext, BaseCtx, BaseService, ComputeJoins, CountParams, CreateParams, CursorToken, Database, ExecResult, PreparedStatement, QueryResult, DeleteParams, ErrorCtx, GetParams, Hook, HookMap, HookPhase, JoinDef, JoinKind, KeyProvider, ListParams, ListResult, MethodName, MethodOptions, OrderBy, OrderDirection, QueryParams, SecretFieldDef, ServiceCreate, ServiceDeps, ServiceOptions, ServiceRow, ServiceUpdate, UpdateParams, } from './types.js';
+export { AuthError, CursorError, DatabaseError, DependencyError, EncryptionError, HookError, NotFoundError, ServiceError, SqlBuilderError, ValidationError, } from './errors.js';
+export { decrypt, decryptSecrets, DefaultKeyProvider, encrypt, encryptSecrets, generateSecretKey, getSecretColumns, getSecretLogicalNames, } from './crypto.js';
+export { buildCursorConditions, createCursor, decodeCursor, encodeCursor, getDefaultOrderBy, reverseOrderBy, validateOrderBy, } from './pagination.js';
+export { buildCount, buildDelete, buildInsert, buildSelect, buildSelectById, buildUpdate, escapeColumn, escapeTable, } from './sql-builder.js';
+export { fromBunSqlite, fromDurableObjectStorage } from './adapters/index.js';
+export type { BunSqliteDatabase, BunSqliteStatement, DurableObjectSqlStorage, SqlStorageCursor, } from './adapters/index.js';
+export * as z from 'zod/v4';
+/**
+ * Create a new service instance with the provided configuration
+ *
+ * @example
+ * ```typescript
+ * import { createService, z } from 'ginger'
+ *
+ * const userService = createService({
+ *   table: 'users',
+ *   db, // Database instance (D1 binding, fromBunSqlite, or fromDurableObjectStorage)
+ *   rowSchema: z.object({
+ *     id: z.number(),
+ *     name: z.string(),
+ *     email: z.string(),
+ *   }),
+ *   createSchema: z.object({
+ *     name: z.string(),
+ *     email: z.string(),
+ *   }),
+ *   updateSchema: z.object({
+ *     name: z.string().optional(),
+ *     email: z.string().optional(),
+ *   }),
+ * })
+ * ```
+ */
+export declare function createService<TRow extends import('zod/v4').ZodTypeAny, TCreate extends import('zod/v4').ZodTypeAny, TUpdate extends import('zod/v4').ZodTypeAny, TJoins extends Record<string, import('./types.js').JoinDef> = Record<string, never>, TSecrets extends readonly import('./types.js').SecretFieldDef[] | undefined = undefined>(options: import('./types.js').ServiceOptions<TRow, TCreate, TUpdate, TJoins, TSecrets>): import('./service.js').Service<TRow, TCreate, TUpdate, TJoins, TSecrets>;
+declare const _default: {
+    createService: typeof createService;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAItC,YAAY,EACV,WAAW,EACX,OAAO,EACP,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EAEX,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,OAAO,EACP,SAAS,EAET,OAAO,EACP,QAAQ,EACR,WAAW,EAEX,UAAU,EACV,UAAU,EACV,UAAU,EACV,aAAa,EACb,OAAO,EACP,cAAc,EACd,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,cAAc,EAEd,UAAU,EACV,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,SAAS,EACT,WAAW,EACX,aAAa,EACb,eAAe,EACf,eAAe,EACf,SAAS,EACT,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,eAAe,EACf,WAAW,EACX,YAAY,EACZ,WAAW,GACZ,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC7E,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAA;AAE3B;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,aAAa,CAC3B,IAAI,SAAS,OAAO,QAAQ,EAAE,UAAU,EACxC,OAAO,SAAS,OAAO,QAAQ,EAAE,UAAU,EAC3C,OAAO,SAAS,OAAO,QAAQ,EAAE,UAAU,EAC3C,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,YAAY,EAAE,OAAO,CAAC,GAAG,MAAM,CAClE,MAAM,EACN,KAAK,CACN,EACD,QAAQ,SACJ,SAAS,OAAO,YAAY,EAAE,cAAc,EAAE,GAC9C,SAAS,GAAG,SAAS,EAEzB,OAAO,EAAE,OAAO,YAAY,EAAE,cAAc,CAC1C,IAAI,EACJ,OAAO,EACP,OAAO,EACP,MAAM,EACN,QAAQ,CACT,GACA,OAAO,cAAc,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAE1E;;;;AAGD,wBAEC"}

package/dist/index.js

@@ -0,0 +1,62 @@
+/**
+ * Ginger — A type-safe SQLite data access layer
+ *
+ * Works with Cloudflare D1, Bun SQLite, and Durable Object SqlStorage.
+ *
+ * Features:
+ * - Cursor-based pagination
+ * - Type-safe joins with conditional inclusion
+ * - AES-256-GCM encryption for secret fields
+ * - Comprehensive hook system
+ * - Dependency injection
+ * - Safe SQL generation
+ */
+// Main Service class
+export { Service } from './service.js';
+import { Service } from './service.js';
+// Error classes
+export { AuthError, CursorError, DatabaseError, DependencyError, EncryptionError, HookError, NotFoundError, ServiceError, SqlBuilderError, ValidationError, } from './errors.js';
+// Encryption utilities
+export { decrypt, decryptSecrets, DefaultKeyProvider, encrypt, encryptSecrets, generateSecretKey, getSecretColumns, getSecretLogicalNames, } from './crypto.js';
+// Pagination utilities
+export { buildCursorConditions, createCursor, decodeCursor, encodeCursor, getDefaultOrderBy, reverseOrderBy, validateOrderBy, } from './pagination.js';
+// SQL builder utilities
+export { buildCount, buildDelete, buildInsert, buildSelect, buildSelectById, buildUpdate, escapeColumn, escapeTable, } from './sql-builder.js';
+// Database adapters
+export { fromBunSqlite, fromDurableObjectStorage } from './adapters/index.js';
+// Re-export zod v4 for convenience
+export * as z from 'zod/v4';
+/**
+ * Create a new service instance with the provided configuration
+ *
+ * @example
+ * ```typescript
+ * import { createService, z } from 'ginger'
+ *
+ * const userService = createService({
+ *   table: 'users',
+ *   db, // Database instance (D1 binding, fromBunSqlite, or fromDurableObjectStorage)
+ *   rowSchema: z.object({
+ *     id: z.number(),
+ *     name: z.string(),
+ *     email: z.string(),
+ *   }),
+ *   createSchema: z.object({
+ *     name: z.string(),
+ *     email: z.string(),
+ *   }),
+ *   updateSchema: z.object({
+ *     name: z.string().optional(),
+ *     email: z.string().optional(),
+ *   }),
+ * })
+ * ```
+ */
+export function createService(options) {
+    return new Service(options);
+}
+// Default export for convenience
+export default {
+    createService,
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,qBAAqB;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AA4CtC,gBAAgB;AAChB,OAAO,EACL,SAAS,EACT,WAAW,EACX,aAAa,EACb,eAAe,EACf,eAAe,EACf,SAAS,EACT,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAA;AAEpB,uBAAuB;AACvB,OAAO,EACL,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AAEpB,uBAAuB;AACvB,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,iBAAiB,CAAA;AAExB,wBAAwB;AACxB,OAAO,EACL,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,eAAe,EACf,WAAW,EACX,YAAY,EACZ,WAAW,GACZ,MAAM,kBAAkB,CAAA;AAEzB,oBAAoB;AACpB,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAQ7E,mCAAmC;AACnC,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAA;AAE3B;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,aAAa,CAY3B,OAMC;IAED,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;AAC7B,CAAC;AAED,iCAAiC;AACjC,eAAe;IACb,aAAa;CACd,CAAA"}