bunderstack 0.25.0 → 0.25.1

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to `bunderstack` will be documented in this file.
 
+## [0.25.1] — 2026-09-25
+
+### Fixed
+
+- Apps whose schema declares no Better Auth `user` and `session` tables no
+  longer build or run a Better Auth instance. With better-auth 1.7.6 or later,
+  such apps failed every request, or failed to start with `openapi: true`,
+  with `BetterAuthError: Drizzle schema mismatch`. They now serve no
+  `/api/auth/*` routes and no auth OpenAPI paths. `app.auth` and `ctx.auth`
+  still build the instance on first use.
+
+### Changed
+
+- The repository tests against better-auth 1.7.6.
+
 ## [0.25.0] — 2026-09-25
 
 ### Added

package/dist/auth.d.ts

@@ -30,6 +30,15 @@ export declare function createAuth<TConfig extends BetterAuthConfig = BetterAuth
  * minted by another local app arrives here too — would break every request.
  */
 export declare function missingAuthModels(schema: Record<string, unknown>, cfg: BetterAuthConfig): string[];
+/**
+ * Defer building better-auth until someone touches the instance. From 1.7.6 on,
+ * constructing it starts a schema check that logs, and every `auth.api` call
+ * throws, when the auth tables are missing. An app without auth models never
+ * builds one, yet `app.auth` / `ctx.auth` still work for code that reaches for
+ * it on purpose. A proxy, not a getter: oRPC middleware and access scopes
+ * spread the context, which would read a getter on every request.
+ */
+export declare function lazyAuth<TAuth extends object>(create: () => TAuth): TAuth;
 /**
  * Adapt the raw better-auth instance to our internal {@link AuthSessionResolver}
  * contract. better-auth's `getSession` has a union return (a bare session, or a

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,IAAI,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAE7C,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EAElB,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1C,KAAK,qBAAqB,CAAC,OAAO,SAAS,gBAAgB,IAAI,OAAO,SAAS;IAC7E,OAAO,EAAE,MAAM,QAAQ,SAAS,SAAS,gBAAgB,EAAE,CAAA;CAC5D,GACG,QAAQ,GACR,EAAE,CAAA;AAEN,KAAK,2BAA2B,CAAC,OAAO,SAAS,gBAAgB,IAAI,IAAI,CACvE,gBAAgB,EAChB,SAAS,CACV,GACC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG;IACzB,OAAO,EAAE,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAA;CACzE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,CACzB,OAAO,SAAS,gBAAgB,GAAG,gBAAgB,IACjD,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAA;AAE9C;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,SAAS,gBAAgB,GAAG,gBAAgB,EAC5E,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,eAAe,CAAC,OAAO,CAAC,CAY1B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,gBAAgB,GACpB,MAAM,EAAE,CAMV;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAE7D,IAAI,EAAE,IAAI,EACV,WAAW,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,GACtC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,cAAc,CAAC,CAAC,CA4CzD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,WAAW,EAClB,eAAe,EAAE,OAAO,GACvB,gBAAgB,CAkClB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,IAAI,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAE7C,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EAElB,MAAM,UAAU,CAAA;AACjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1C,KAAK,qBAAqB,CAAC,OAAO,SAAS,gBAAgB,IAAI,OAAO,SAAS;IAC7E,OAAO,EAAE,MAAM,QAAQ,SAAS,SAAS,gBAAgB,EAAE,CAAA;CAC5D,GACG,QAAQ,GACR,EAAE,CAAA;AAEN,KAAK,2BAA2B,CAAC,OAAO,SAAS,gBAAgB,IAAI,IAAI,CACvE,gBAAgB,EAChB,SAAS,CACV,GACC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG;IACzB,OAAO,EAAE,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAA;CACzE,CAAA;AAEH;;;;GAIG;AACH,MAAM,MAAM,eAAe,CACzB,OAAO,SAAS,gBAAgB,GAAG,gBAAgB,IACjD,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAA;AAE9C;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,SAAS,gBAAgB,GAAG,gBAAgB,EAC5E,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,eAAe,CAAC,OAAO,CAAC,CAY1B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,GAAG,EAAE,gBAAgB,GACpB,MAAM,EAAE,CAMV;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,KAAK,CAezE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAE7D,IAAI,EAAE,IAAI,EACV,WAAW,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,GACtC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,cAAc,CAAC,CAAC,CA4CzD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,WAAW,EAClB,eAAe,EAAE,OAAO,GACvB,gBAAgB,CAkClB"}

package/dist/auth.js

@@ -33,6 +33,30 @@ export function missingAuthModels(schema, cfg) {
     ];
     return models.filter((model) => !schema[model]);
 }
+/**
+ * Defer building better-auth until someone touches the instance. From 1.7.6 on,
+ * constructing it starts a schema check that logs, and every `auth.api` call
+ * throws, when the auth tables are missing. An app without auth models never
+ * builds one, yet `app.auth` / `ctx.auth` still work for code that reaches for
+ * it on purpose. A proxy, not a getter: oRPC middleware and access scopes
+ * spread the context, which would read a getter on every request.
+ */
+export function lazyAuth(create) {
+    let instance;
+    const resolve = () => {
+        instance ??= create();
+        return instance;
+    };
+    return new Proxy({}, {
+        get: (_, key) => Reflect.get(resolve(), key),
+        has: (_, key) => Reflect.has(resolve(), key),
+        ownKeys: () => Reflect.ownKeys(resolve()),
+        getOwnPropertyDescriptor: (_, key) => {
+            const descriptor = Reflect.getOwnPropertyDescriptor(resolve(), key);
+            return descriptor ? { ...descriptor, configurable: true } : undefined;
+        },
+    });
+}
 /**
  * Adapt the raw better-auth instance to our internal {@link AuthSessionResolver}
  * contract. better-auth's `getSession` has a union return (a bare session, or a
@@ -58,7 +82,7 @@ export function toAuthSessionResolver(auth, sessionUser) {
                         : undefined;
                     const emailVerified = 'emailVerified' in result.user && result.user.emailVerified === true;
                     const mapped = sessionUser?.mapUser(result.user);
-                    const extras = { ...(mapped ?? {}) };
+                    const extras = { ...mapped };
                     delete extras.id;
                     delete extras.email;
                     delete extras.emailVerified;

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,UAAU,EAAoC,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAmC7C;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,EAAS,EACT,GAAqB,EACrB,OAAgB,EAChB,UAAoC;IAEpC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAE9E,OAAO,UAAU,CAAC;QAChB,GAAG,GAAG;QACN,OAAO;QACP,QAAQ,EAAE,cAAc,CAAC,EAA0C,EAAE;YACnE,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAC5C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;KACH,CAAwC,CAAA;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAC/B,GAAqB;IAErB,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM;QAC7B,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,SAAS;KACpC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAGnC,IAAU,EACV,WAAuC;IAEvC,OAAO;QACL,GAAG,EAAE;YACH,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;gBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;gBACrD,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;oBAC3D,MAAM,oBAAoB,GACxB,OAAO;wBACP,sBAAsB,IAAI,OAAO;wBACjC,OAAO,OAAO,CAAC,oBAAoB,KAAK,QAAQ;wBAC9C,CAAC,CAAC,OAAO,CAAC,oBAAoB;wBAC9B,CAAC,CAAC,IAAI,CAAA;oBACV,MAAM,IAAI,GACR,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;wBAC3D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;wBAClB,CAAC,CAAC,SAAS,CAAA;oBACf,MAAM,aAAa,GACjB,eAAe,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAA;oBACtE,MAAM,MAAM,GAAG,WAAW,EAAE,OAAO,CACjC,MAAM,CAAC,IAAyB,CACM,CAAA;oBACxC,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAA;oBACpC,OAAO,MAAM,CAAC,EAAE,CAAA;oBAChB,OAAO,MAAM,CAAC,KAAK,CAAA;oBACnB,OAAO,MAAM,CAAC,aAAa,CAAA;oBAC3B,OAAO,MAAM,CAAC,IAAI,CAAA;oBAClB,OAAO,MAAM,CAAC,IAAI,CAAA;oBAClB,OAAO;wBACL,IAAI,EAAE;4BACJ,GAAG,MAAM;4BACT,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;4BAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;4BACxB,aAAa;4BACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;4BACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC1B;wBACD,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI;qBACnD,CAAA;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;SACF;KACyD,CAAA;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAqB,EACrB,KAAkB,EAClB,eAAwB;IAExB,IAAI,CAAC,eAAe;QAAE,OAAO,GAAG,CAAA;IAChC,MAAM,GAAG,GAAqB,EAAE,GAAG,GAAG,EAAE,CAAA;IAExC,IACE,GAAG,CAAC,gBAAgB,EAAE,OAAO;QAC7B,CAAC,GAAG,CAAC,gBAAgB,CAAC,iBAAiB,EACvC,CAAC;QACD,GAAG,CAAC,gBAAgB,GAAG;YACrB,GAAG,GAAG,CAAC,gBAAgB;YACvB,iBAAiB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;gBACzC,MAAM,KAAK,CAAC,IAAI,CAAC;oBACf,EAAE,EAAE,IAAI,CAAC,KAAK;oBACd,OAAO,EAAE,qBAAqB;oBAC9B,IAAI,EAAE,6CAA6C,GAAG,4DAA4D;iBACnH,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,CAAC;QAClD,GAAG,CAAC,iBAAiB,GAAG;YACtB,GAAG,GAAG,CAAC,iBAAiB;YACxB,qBAAqB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC7C,MAAM,KAAK,CAAC,IAAI,CAAC;oBACf,EAAE,EAAE,IAAI,CAAC,KAAK;oBACd,OAAO,EAAE,mBAAmB;oBAC5B,IAAI,EAAE,mDAAmD,GAAG,EAAE;iBAC/D,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;IACH,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC","sourcesContent":["// src/auth.ts\nimport { betterAuth, type Auth, type BetterAuthPlugin } from 'better-auth'\nimport { drizzleAdapter } from 'better-auth/adapters/drizzle'\nimport { openAPI } from 'better-auth/plugins'\n\nimport type {\n  AccessUserBase,\n  AuthSessionResolver,\n  SessionUserConfig,\n  SessionUserSource,\n} from './access'\nimport type { BetterAuthConfig } from './config'\nimport type { AnyDb, Dialect } from './dialect'\nimport type { EmailFacade } from './email'\n\ntype ConfiguredAuthPlugins<TConfig extends BetterAuthConfig> = TConfig extends {\n  plugins: infer TPlugins extends readonly BetterAuthPlugin[]\n}\n  ? TPlugins\n  : []\n\ntype WithBunderstackAuthDefaults<TConfig extends BetterAuthConfig> = Omit<\n  BetterAuthConfig,\n  'plugins'\n> &\n  Omit<TConfig, 'plugins'> & {\n    plugins: [...ConfiguredAuthPlugins<TConfig>, ReturnType<typeof openAPI>]\n  }\n\n/**\n * The public Better Auth instance retains every endpoint and model field from\n * the declared config. Bunderstack always installs OpenAPI at runtime, so its\n * endpoints are part of the public type even when the app omitted the plugin.\n */\nexport type BunderstackAuth<\n  TConfig extends BetterAuthConfig = BetterAuthConfig,\n> = Auth<WithBunderstackAuthDefaults<TConfig>>\n\n/**\n * Build Better Auth while exposing its named plugin-aware public type. The\n * implementation accepts the resolved runtime config, while `TConfig` carries\n * the declaration that produced it; their relationship is asserted once here.\n */\nexport function createAuth<TConfig extends BetterAuthConfig = BetterAuthConfig>(\n  db: AnyDb,\n  cfg: BetterAuthConfig,\n  dialect: Dialect,\n  userSchema?: Record<string, unknown>,\n): BunderstackAuth<TConfig> {\n  const hasOpenApi = cfg.plugins?.some((p: any) => p.id === 'open-api')\n  const plugins = hasOpenApi ? cfg.plugins : [...(cfg.plugins || []), openAPI()]\n\n  return betterAuth({\n    ...cfg,\n    plugins,\n    database: drizzleAdapter(db as Parameters<typeof drizzleAdapter>[0], {\n      provider: dialect === 'pg' ? 'pg' : 'sqlite',\n      ...(userSchema ? { schema: userSchema } : {}),\n    }),\n  }) as unknown as BunderstackAuth<TConfig>\n}\n\n/**\n * better-auth resolves its models out of the app's own schema, so an app that\n * declares none has no auth at all. Session resolution must then short-circuit\n * to null: the drizzle adapter throws on a missing model, and any session\n * cookie for the host — a browser keeps those per host, not per port, so one\n * minted by another local app arrives here too — would break every request.\n */\nexport function missingAuthModels(\n  schema: Record<string, unknown>,\n  cfg: BetterAuthConfig,\n): string[] {\n  const models = [\n    cfg.user?.modelName ?? 'user',\n    cfg.session?.modelName ?? 'session',\n  ]\n  return models.filter((model) => !schema[model])\n}\n\n/**\n * Adapt the raw better-auth instance to our internal {@link AuthSessionResolver}\n * contract. better-auth's `getSession` has a union return (a bare session, or a\n * `{ headers, response }` wrapper when `returnHeaders` is set); we only ever\n * call the bare form, so we narrow on `'user' in result` and map to our shape.\n * Keeping this adapter here means internal modules never depend on better-auth's\n * evolving types.\n */\nexport function toAuthSessionResolver<\n  TExtra extends Record<string, unknown> = Record<never, never>,\n>(\n  auth: Auth,\n  sessionUser?: SessionUserConfig<TExtra>,\n): AuthSessionResolver<Omit<TExtra, keyof AccessUserBase>> {\n  return {\n    api: {\n      async getSession({ headers }) {\n        const result = await auth.api.getSession({ headers })\n        if (result && 'user' in result && result.user) {\n          const session = 'session' in result ? result.session : null\n          const activeOrganizationId =\n            session &&\n            'activeOrganizationId' in session &&\n            typeof session.activeOrganizationId === 'string'\n              ? session.activeOrganizationId\n              : null\n          const role =\n            'role' in result.user && typeof result.user.role === 'string'\n              ? result.user.role\n              : undefined\n          const emailVerified =\n            'emailVerified' in result.user && result.user.emailVerified === true\n          const mapped = sessionUser?.mapUser(\n            result.user as SessionUserSource,\n          ) as Record<string, unknown> | undefined\n          const extras = { ...(mapped ?? {}) }\n          delete extras.id\n          delete extras.email\n          delete extras.emailVerified\n          delete extras.name\n          delete extras.role\n          return {\n            user: {\n              ...extras,\n              id: result.user.id,\n              email: result.user.email,\n              emailVerified,\n              name: result.user.name,\n              ...(role ? { role } : {}),\n            },\n            session: session ? { activeOrganizationId } : null,\n          }\n        }\n        return null\n      },\n    },\n  } as AuthSessionResolver<Omit<TExtra, keyof AccessUserBase>>\n}\n\n/**\n * Fill better-auth's email hooks from the bunderstack email facade. Only fills\n * gaps: user-supplied handlers always win, and nothing is injected when email\n * isn't configured. emailAndPassword is only touched when the user enabled it\n * (injecting it unasked would enable the feature).\n */\nexport function withEmailAuthDefaults(\n  cfg: BetterAuthConfig,\n  email: EmailFacade,\n  emailConfigured: boolean,\n): BetterAuthConfig {\n  if (!emailConfigured) return cfg\n  const out: BetterAuthConfig = { ...cfg }\n\n  if (\n    cfg.emailAndPassword?.enabled &&\n    !cfg.emailAndPassword.sendResetPassword\n  ) {\n    out.emailAndPassword = {\n      ...cfg.emailAndPassword,\n      sendResetPassword: async ({ user, url }) => {\n        await email.send({\n          to: user.email,\n          subject: 'Reset your password',\n          text: `Click the link to reset your password:\\n\\n${url}\\n\\nIf you didn't request this, you can ignore this email.`,\n        })\n      },\n    }\n  }\n\n  if (!cfg.emailVerification?.sendVerificationEmail) {\n    out.emailVerification = {\n      ...cfg.emailVerification,\n      sendVerificationEmail: async ({ user, url }) => {\n        await email.send({\n          to: user.email,\n          subject: 'Verify your email',\n          text: `Click the link to verify your email address:\\n\\n${url}`,\n        })\n      },\n    }\n  }\n\n  return out\n}\n"]}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,UAAU,EAAoC,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAmC7C;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,EAAS,EACT,GAAqB,EACrB,OAAgB,EAChB,UAAoC;IAEpC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAE9E,OAAO,UAAU,CAAC;QAChB,GAAG,GAAG;QACN,OAAO;QACP,QAAQ,EAAE,cAAc,CAAC,EAA0C,EAAE;YACnE,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAC5C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;KACH,CAAwC,CAAA;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA+B,EAC/B,GAAqB;IAErB,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM;QAC7B,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,SAAS;KACpC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAuB,MAAmB;IAChE,IAAI,QAA2B,CAAA;IAC/B,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,QAAQ,KAAK,MAAM,EAAE,CAAA;QACrB,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,IAAI,KAAK,CAAC,EAAW,EAAE;QAC5B,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC;QAC5C,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC;QAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,wBAAwB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACnC,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;YACnE,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QACvE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAGnC,IAAU,EACV,WAAuC;IAEvC,OAAO;QACL,GAAG,EAAE;YACH,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;gBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;gBACrD,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;oBAC3D,MAAM,oBAAoB,GACxB,OAAO;wBACP,sBAAsB,IAAI,OAAO;wBACjC,OAAO,OAAO,CAAC,oBAAoB,KAAK,QAAQ;wBAC9C,CAAC,CAAC,OAAO,CAAC,oBAAoB;wBAC9B,CAAC,CAAC,IAAI,CAAA;oBACV,MAAM,IAAI,GACR,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;wBAC3D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;wBAClB,CAAC,CAAC,SAAS,CAAA;oBACf,MAAM,aAAa,GACjB,eAAe,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAA;oBACtE,MAAM,MAAM,GAAG,WAAW,EAAE,OAAO,CACjC,MAAM,CAAC,IAAyB,CACM,CAAA;oBACxC,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;oBAC5B,OAAO,MAAM,CAAC,EAAE,CAAA;oBAChB,OAAO,MAAM,CAAC,KAAK,CAAA;oBACnB,OAAO,MAAM,CAAC,aAAa,CAAA;oBAC3B,OAAO,MAAM,CAAC,IAAI,CAAA;oBAClB,OAAO,MAAM,CAAC,IAAI,CAAA;oBAClB,OAAO;wBACL,IAAI,EAAE;4BACJ,GAAG,MAAM;4BACT,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;4BAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;4BACxB,aAAa;4BACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;4BACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC1B;wBACD,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,IAAI;qBACnD,CAAA;gBACH,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;SACF;KACyD,CAAA;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAqB,EACrB,KAAkB,EAClB,eAAwB;IAExB,IAAI,CAAC,eAAe;QAAE,OAAO,GAAG,CAAA;IAChC,MAAM,GAAG,GAAqB,EAAE,GAAG,GAAG,EAAE,CAAA;IAExC,IACE,GAAG,CAAC,gBAAgB,EAAE,OAAO;QAC7B,CAAC,GAAG,CAAC,gBAAgB,CAAC,iBAAiB,EACvC,CAAC;QACD,GAAG,CAAC,gBAAgB,GAAG;YACrB,GAAG,GAAG,CAAC,gBAAgB;YACvB,iBAAiB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;gBACzC,MAAM,KAAK,CAAC,IAAI,CAAC;oBACf,EAAE,EAAE,IAAI,CAAC,KAAK;oBACd,OAAO,EAAE,qBAAqB;oBAC9B,IAAI,EAAE,6CAA6C,GAAG,4DAA4D;iBACnH,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,CAAC;QAClD,GAAG,CAAC,iBAAiB,GAAG;YACtB,GAAG,GAAG,CAAC,iBAAiB;YACxB,qBAAqB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC7C,MAAM,KAAK,CAAC,IAAI,CAAC;oBACf,EAAE,EAAE,IAAI,CAAC,KAAK;oBACd,OAAO,EAAE,mBAAmB;oBAC5B,IAAI,EAAE,mDAAmD,GAAG,EAAE;iBAC/D,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;IACH,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC","sourcesContent":["// src/auth.ts\nimport { betterAuth, type Auth, type BetterAuthPlugin } from 'better-auth'\nimport { drizzleAdapter } from 'better-auth/adapters/drizzle'\nimport { openAPI } from 'better-auth/plugins'\n\nimport type {\n  AccessUserBase,\n  AuthSessionResolver,\n  SessionUserConfig,\n  SessionUserSource,\n} from './access'\nimport type { BetterAuthConfig } from './config'\nimport type { AnyDb, Dialect } from './dialect'\nimport type { EmailFacade } from './email'\n\ntype ConfiguredAuthPlugins<TConfig extends BetterAuthConfig> = TConfig extends {\n  plugins: infer TPlugins extends readonly BetterAuthPlugin[]\n}\n  ? TPlugins\n  : []\n\ntype WithBunderstackAuthDefaults<TConfig extends BetterAuthConfig> = Omit<\n  BetterAuthConfig,\n  'plugins'\n> &\n  Omit<TConfig, 'plugins'> & {\n    plugins: [...ConfiguredAuthPlugins<TConfig>, ReturnType<typeof openAPI>]\n  }\n\n/**\n * The public Better Auth instance retains every endpoint and model field from\n * the declared config. Bunderstack always installs OpenAPI at runtime, so its\n * endpoints are part of the public type even when the app omitted the plugin.\n */\nexport type BunderstackAuth<\n  TConfig extends BetterAuthConfig = BetterAuthConfig,\n> = Auth<WithBunderstackAuthDefaults<TConfig>>\n\n/**\n * Build Better Auth while exposing its named plugin-aware public type. The\n * implementation accepts the resolved runtime config, while `TConfig` carries\n * the declaration that produced it; their relationship is asserted once here.\n */\nexport function createAuth<TConfig extends BetterAuthConfig = BetterAuthConfig>(\n  db: AnyDb,\n  cfg: BetterAuthConfig,\n  dialect: Dialect,\n  userSchema?: Record<string, unknown>,\n): BunderstackAuth<TConfig> {\n  const hasOpenApi = cfg.plugins?.some((p: any) => p.id === 'open-api')\n  const plugins = hasOpenApi ? cfg.plugins : [...(cfg.plugins || []), openAPI()]\n\n  return betterAuth({\n    ...cfg,\n    plugins,\n    database: drizzleAdapter(db as Parameters<typeof drizzleAdapter>[0], {\n      provider: dialect === 'pg' ? 'pg' : 'sqlite',\n      ...(userSchema ? { schema: userSchema } : {}),\n    }),\n  }) as unknown as BunderstackAuth<TConfig>\n}\n\n/**\n * better-auth resolves its models out of the app's own schema, so an app that\n * declares none has no auth at all. Session resolution must then short-circuit\n * to null: the drizzle adapter throws on a missing model, and any session\n * cookie for the host — a browser keeps those per host, not per port, so one\n * minted by another local app arrives here too — would break every request.\n */\nexport function missingAuthModels(\n  schema: Record<string, unknown>,\n  cfg: BetterAuthConfig,\n): string[] {\n  const models = [\n    cfg.user?.modelName ?? 'user',\n    cfg.session?.modelName ?? 'session',\n  ]\n  return models.filter((model) => !schema[model])\n}\n\n/**\n * Defer building better-auth until someone touches the instance. From 1.7.6 on,\n * constructing it starts a schema check that logs, and every `auth.api` call\n * throws, when the auth tables are missing. An app without auth models never\n * builds one, yet `app.auth` / `ctx.auth` still work for code that reaches for\n * it on purpose. A proxy, not a getter: oRPC middleware and access scopes\n * spread the context, which would read a getter on every request.\n */\nexport function lazyAuth<TAuth extends object>(create: () => TAuth): TAuth {\n  let instance: TAuth | undefined\n  const resolve = () => {\n    instance ??= create()\n    return instance\n  }\n  return new Proxy({} as TAuth, {\n    get: (_, key) => Reflect.get(resolve(), key),\n    has: (_, key) => Reflect.has(resolve(), key),\n    ownKeys: () => Reflect.ownKeys(resolve()),\n    getOwnPropertyDescriptor: (_, key) => {\n      const descriptor = Reflect.getOwnPropertyDescriptor(resolve(), key)\n      return descriptor ? { ...descriptor, configurable: true } : undefined\n    },\n  })\n}\n\n/**\n * Adapt the raw better-auth instance to our internal {@link AuthSessionResolver}\n * contract. better-auth's `getSession` has a union return (a bare session, or a\n * `{ headers, response }` wrapper when `returnHeaders` is set); we only ever\n * call the bare form, so we narrow on `'user' in result` and map to our shape.\n * Keeping this adapter here means internal modules never depend on better-auth's\n * evolving types.\n */\nexport function toAuthSessionResolver<\n  TExtra extends Record<string, unknown> = Record<never, never>,\n>(\n  auth: Auth,\n  sessionUser?: SessionUserConfig<TExtra>,\n): AuthSessionResolver<Omit<TExtra, keyof AccessUserBase>> {\n  return {\n    api: {\n      async getSession({ headers }) {\n        const result = await auth.api.getSession({ headers })\n        if (result && 'user' in result && result.user) {\n          const session = 'session' in result ? result.session : null\n          const activeOrganizationId =\n            session &&\n            'activeOrganizationId' in session &&\n            typeof session.activeOrganizationId === 'string'\n              ? session.activeOrganizationId\n              : null\n          const role =\n            'role' in result.user && typeof result.user.role === 'string'\n              ? result.user.role\n              : undefined\n          const emailVerified =\n            'emailVerified' in result.user && result.user.emailVerified === true\n          const mapped = sessionUser?.mapUser(\n            result.user as SessionUserSource,\n          ) as Record<string, unknown> | undefined\n          const extras = { ...mapped }\n          delete extras.id\n          delete extras.email\n          delete extras.emailVerified\n          delete extras.name\n          delete extras.role\n          return {\n            user: {\n              ...extras,\n              id: result.user.id,\n              email: result.user.email,\n              emailVerified,\n              name: result.user.name,\n              ...(role ? { role } : {}),\n            },\n            session: session ? { activeOrganizationId } : null,\n          }\n        }\n        return null\n      },\n    },\n  } as AuthSessionResolver<Omit<TExtra, keyof AccessUserBase>>\n}\n\n/**\n * Fill better-auth's email hooks from the bunderstack email facade. Only fills\n * gaps: user-supplied handlers always win, and nothing is injected when email\n * isn't configured. emailAndPassword is only touched when the user enabled it\n * (injecting it unasked would enable the feature).\n */\nexport function withEmailAuthDefaults(\n  cfg: BetterAuthConfig,\n  email: EmailFacade,\n  emailConfigured: boolean,\n): BetterAuthConfig {\n  if (!emailConfigured) return cfg\n  const out: BetterAuthConfig = { ...cfg }\n\n  if (\n    cfg.emailAndPassword?.enabled &&\n    !cfg.emailAndPassword.sendResetPassword\n  ) {\n    out.emailAndPassword = {\n      ...cfg.emailAndPassword,\n      sendResetPassword: async ({ user, url }) => {\n        await email.send({\n          to: user.email,\n          subject: 'Reset your password',\n          text: `Click the link to reset your password:\\n\\n${url}\\n\\nIf you didn't request this, you can ignore this email.`,\n        })\n      },\n    }\n  }\n\n  if (!cfg.emailVerification?.sendVerificationEmail) {\n    out.emailVerification = {\n      ...cfg.emailVerification,\n      sendVerificationEmail: async ({ user, url }) => {\n        await email.send({\n          to: user.email,\n          subject: 'Verify your email',\n          text: `Click the link to verify your email address:\\n\\n${url}`,\n        })\n      },\n    }\n  }\n\n  return out\n}\n"]}

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAQvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAEjC,OAAO,KAAK,EACV,sBAAsB,EAEtB,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,YAAY,EACb,MAAM,cAAc,CAAA;AACrB,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAUrD,OAAO,EAEL,KAAK,eAAe,EAIrB,MAAM,QAAQ,CAAA;AACf,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,UAAU,CAAA;AAIjB,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,OAAO,CAAA;AAS9D,OAAO,EAAa,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAQjE,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,mBAAmB,CAAA;AAe1B,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAA;AAE/B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,eAAe,CAAC,EAAE,sBAAsB,CAAA;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACpD,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,mBAAmB,CAAC,EAAE,KAAK,CAAA;IAC3B,YAAY,CAAC,EAAE,mBAAmB,CAAA;IAClC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAA;CAC9D,CAAA;AA2BD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IAChD;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C;;;OAGG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,MAAM,CAAC,CAAA;IAClB;;;;OAIG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAAG,UAAU,EAC9B,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;AAC9E,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG;IACxD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;CACpC,CAAA;AACD,2EAA2E;AAC3E,MAAM,MAAM,aAAa,CAAC,QAAQ,IAAI,QAAQ,SAAS;IACrD,OAAO,EAAE,MAAM,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjD,GACG,MAAM,CAAC,GAAG,MAAM,GAChB,MAAM,CAAA;AAEV,MAAM,MAAM,cAAc,CACxB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAAG,SAAS,EACxE,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACnD,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EAClD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,SAAS,GAAG,SAAS,EACrB,UAAU,SAAS,eAAe,GAAG,SAAS,GAAG,SAAS,EAC1D,WAAW,SAAS,gBAAgB,GAAG,gBAAgB,IACrD;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,gFAAgF;IAChF,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;IACvB,4DAA4D;IAC5D,SAAS,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAC1C,qFAAqF;IACrF,IAAI,EAAE,UAAU,CACd,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC7D,OAAO,CACR,CAAA;IACD,8EAA8E;IAC9E,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;IACjC,WAAW,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACnE,oEAAoE;IACpE,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,kEAAkE;IAClE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,MAAM,EAAE,OAAO,CAAA;QACf,MAAM,EAAE,OAAO,CAAA;QACf,OAAO,EAAE,QAAQ,CAAA;QACjB,GAAG,EAAE,mBAAmB,CACtB,gBAAgB,CACd,gBAAgB,CACd,OAAO,EACP,OAAO,EACP;YAAC,SAAS;SAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,KAAK,GAAG,IAAI,CACvD,EACD,gBAAgB,CACjB,EACD;YAAC,SAAS;SAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,iBAAiB,CACjE,CAAA;KACF,CAAA;CACF,CAAA;AAED,wBAAgB,sBAAsB,CACpC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAChE,SAAS,EACX,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACjE,KAAK,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACzD,KAAK,CAAC,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EACxD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,KAAK,CAAC,SAAS,SAAS,iBAAiB,CACvC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,CACjB,CAAC,UAAU,CAAC,GAAG,SAAS,EACzB,KAAK,CAAC,UAAU,SAAS,eAAe,GAAG,SAAS,GAAG,SAAS,EAChE,KAAK,CAAC,WAAW,SAAS,gBAAgB,GAAG,gBAAgB,EAC7D,KAAK,CAAC,QAAQ,SACV,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC1C,SAAS,GAAG,SAAS,EAEzB,OAAO,EAAE,iBAAiB,CACxB,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,EAChB,WAAW,EACX,QAAQ,CACT,GAAG;IACF,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,UAAU,CAAA;IACtB,IAAI,CAAC,EACD,SAAS,GACT,CAAC,CACC,CAAC,EAAE,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,KAC/D,SAAS,CAAC,CAAA;CACpB,EACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC1C,SAAS,CAAC,EAAE,gBAAgB,EAC5B,GAAG,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,GACvB,OAAO,CACR,cAAc,CACZ,OAAO,EACP,OAAO,EACP,aAAa,CAAC,QAAQ,CAAC,EACvB,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,WAAW,CACZ,CACF,CAAA;AAynBD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACvE,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACrE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAE1B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC3D,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAGtE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAQvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAEjC,OAAO,KAAK,EACV,sBAAsB,EAEtB,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,YAAY,EACb,MAAM,cAAc,CAAA;AACrB,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAUrD,OAAO,EAEL,KAAK,eAAe,EAKrB,MAAM,QAAQ,CAAA;AACf,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,UAAU,CAAA;AAIjB,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,OAAO,CAAA;AAS9D,OAAO,EAAa,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAQjE,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,mBAAmB,CAAA;AAe1B,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAA;AAE/B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,eAAe,CAAC,EAAE,sBAAsB,CAAA;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACpD,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,mBAAmB,CAAC,EAAE,KAAK,CAAA;IAC3B,YAAY,CAAC,EAAE,mBAAmB,CAAA;IAClC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAA;CAC9D,CAAA;AA2BD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IAChD;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C;;;OAGG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,MAAM,CAAC,CAAA;IAClB;;;;OAIG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAAG,UAAU,EAC9B,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;AAC9E,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG;IACxD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;CACpC,CAAA;AACD,2EAA2E;AAC3E,MAAM,MAAM,aAAa,CAAC,QAAQ,IAAI,QAAQ,SAAS;IACrD,OAAO,EAAE,MAAM,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjD,GACG,MAAM,CAAC,GAAG,MAAM,GAChB,MAAM,CAAA;AAEV,MAAM,MAAM,cAAc,CACxB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAAG,SAAS,EACxE,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACnD,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EAClD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,SAAS,GAAG,SAAS,EACrB,UAAU,SAAS,eAAe,GAAG,SAAS,GAAG,SAAS,EAC1D,WAAW,SAAS,gBAAgB,GAAG,gBAAgB,IACrD;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,gFAAgF;IAChF,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;IACvB,4DAA4D;IAC5D,SAAS,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAC1C,qFAAqF;IACrF,IAAI,EAAE,UAAU,CACd,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC7D,OAAO,CACR,CAAA;IACD,8EAA8E;IAC9E,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;IACjC,WAAW,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACnE,oEAAoE;IACpE,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,kEAAkE;IAClE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,MAAM,EAAE,OAAO,CAAA;QACf,MAAM,EAAE,OAAO,CAAA;QACf,OAAO,EAAE,QAAQ,CAAA;QACjB,GAAG,EAAE,mBAAmB,CACtB,gBAAgB,CACd,gBAAgB,CACd,OAAO,EACP,OAAO,EACP;YAAC,SAAS;SAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,KAAK,GAAG,IAAI,CACvD,EACD,gBAAgB,CACjB,EACD;YAAC,SAAS;SAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,iBAAiB,CACjE,CAAA;KACF,CAAA;CACF,CAAA;AAED,wBAAgB,sBAAsB,CACpC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAChE,SAAS,EACX,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACjE,KAAK,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACzD,KAAK,CAAC,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EACxD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,KAAK,CAAC,SAAS,SAAS,iBAAiB,CACvC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,CACjB,CAAC,UAAU,CAAC,GAAG,SAAS,EACzB,KAAK,CAAC,UAAU,SAAS,eAAe,GAAG,SAAS,GAAG,SAAS,EAChE,KAAK,CAAC,WAAW,SAAS,gBAAgB,GAAG,gBAAgB,EAC7D,KAAK,CAAC,QAAQ,SACV,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC1C,SAAS,GAAG,SAAS,EAEzB,OAAO,EAAE,iBAAiB,CACxB,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,EAChB,WAAW,EACX,QAAQ,CACT,GAAG;IACF,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,UAAU,CAAA;IACtB,IAAI,CAAC,EACD,SAAS,GACT,CAAC,CACC,CAAC,EAAE,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,KAC/D,SAAS,CAAC,CAAA;CACpB,EACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC1C,SAAS,CAAC,EAAE,gBAAgB,EAC5B,GAAG,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,GACvB,OAAO,CACR,cAAc,CACZ,OAAO,EACP,OAAO,EACP,aAAa,CAAC,QAAQ,CAAC,EACvB,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,WAAW,CACZ,CACF,CAAA;AA8nBD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACvE,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACrE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACb,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAE1B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC3D,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAGtE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}

package/dist/runtime.js

@@ -11,7 +11,7 @@ import { buildRealtimeApiRouter } from './api/realtime-router.js';
 import { buildApiRegistry, normalizeForeignOpenAPISpec } from './api/registry.js';
 import { buildApiRouter } from './api/router.js';
 import { buildStorageApiRouter } from './api/storage-router.js';
-import { createAuth, missingAuthModels, toAuthSessionResolver, withEmailAuthDefaults, } from './auth.js';
+import { createAuth, lazyAuth, missingAuthModels, toAuthSessionResolver, withEmailAuthDefaults, } from './auth.js';
 import { resolveConfig, } from './config.js';
 import { resolveAuthConfig, resolveRealtimeRedisUrl } from './config.js';
 import { createDb } from './db.js';
@@ -101,21 +101,24 @@ export async function materializeBunderstack(options, source, overrides = {}, in
         const authEmail = options.messaging?.email?.kind === 'email'
             ? messaging.email
             : undefined;
-        const auth = createAuth(db, withEmailAuthDefaults(authConfig, authEmail ?? { send: async () => ({}) }, Boolean(authEmail)), dialect, options.schema);
+        const buildAuth = () => createAuth(db, withEmailAuthDefaults(authConfig, authEmail ?? { send: async () => ({}) }, Boolean(authEmail)), dialect, options.schema);
         // Internal routers consume the narrow AuthSessionResolver contract, not the
         // raw better-auth instance. app.auth still exposes `auth` unchanged. An app
-        // whose schema declares no better-auth models gets no resolver at all, so
-        // every session resolves to null instead of hitting the drizzle adapter.
+        // whose schema declares no better-auth models runs no better-auth at all: no
+        // resolver (every session is null), no `/api/auth` routes, no auth OpenAPI,
+        // and the instance behind `app.auth` is only built if something touches it.
         const missingModels = missingAuthModels(options.schema, authConfig);
-        if (missingModels.length > 0 && options.auth !== undefined) {
+        const authEnabled = missingModels.length === 0;
+        if (!authEnabled && options.auth !== undefined) {
             logger.warn(`[bunderstack] auth is configured, but the schema is ` +
                 `missing better-auth tables: ${missingModels
                     .map((model) => `\`${model}\``)
-                    .join(', ')}. Every session resolves to null until they are ` +
-                `part of the schema.`);
+                    .join(', ')}. Every session resolves to null and /api/auth is ` +
+                `not served until they are part of the schema.`);
         }
+        const auth = authEnabled ? buildAuth() : lazyAuth(buildAuth);
         const declaredAuthResolver = options.authResolver ??
-            (missingModels.length === 0
+            (authEnabled
                 ? toAuthSessionResolver(auth, options.session)
                 : undefined);
         const authResolver = overrides.authResolver
@@ -341,6 +344,7 @@ export async function materializeBunderstack(options, source, overrides = {}, in
             readiness,
         });
         const authOpenAPISpecRaw = options.openapi &&
+            authEnabled &&
             auth.api &&
             'generateOpenAPISchema' in auth.api &&
             typeof auth.api.generateOpenAPISchema === 'function'
@@ -462,7 +466,7 @@ export async function materializeBunderstack(options, source, overrides = {}, in
             return null;
         };
         const handler = buildHandler({
-            authHandler: (req) => auth.handler(req),
+            authHandler: authEnabled ? (req) => auth.handler(req) : undefined,
             apiHandler,
             rateLimit: options.rateLimit,
         });

package/dist/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AA8B5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EACL,UAAU,EAEV,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,QAAQ,CAAA;AACf,OAAO,EACL,aAAa,GAGd,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAA;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAA0C,MAAM,OAAO,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EACL,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,SAAS,EAAwB,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,aAAa,EAA0B,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EACL,oBAAoB,GAGrB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAiB9C,SAAS,qBAAqB,CAC5B,MAAmB,EACnB,uBAAgC;IAEhC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzC,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;gBACtC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACzC,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,IAAI,uBAAuB,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAC5B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAA;AAqK1C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAoB1C,OAgBC,EACD,MAA0C,EAC1C,YAA8B,EAAE,EAChC,YAAiC;IAcjC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,aAAa,CAAA;IAChD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA4B,CAAA;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAA;IACxB,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG;QACb,GAAG,cAAc;QACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC1B,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE;YACvD,CAAC,CAAC,cAAc,CAAC,QAAQ;QAC3B,OAAO,EAAE,SAAS,CAAC,eAAe,IAAI,cAAc,CAAC,OAAO;KAC7D,CAAA;IACD,wEAAwE;IACxE,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACvD,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAA;IACjC,MAAM,EACJ,EAAE,EACF,MAAM,EACN,KAAK,EAAE,aAAa,GACrB,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE;QAC/B,GAAG,MAAM,CAAC,QAAQ;QAClB,OAAO;KACR,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,eAAe,CAC/B,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAoB,EAC5C;QACE,GAAG;QACH,EAAE;QACF,gBAAgB,EAAE,SAAS,CAAC,iBAAiB;KAC9C,CACiC,CAAA;IACpC,IAAI,aAAa;QAAE,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,wEAAwE;QACxE,oEAAoE;QACpE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,EAA+B,CAAA;QAC9C,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACtE,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO;YACxC,CAAC,CAAG,SAAqC,CAAC,KAAqB;YAC/D,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,IAAI,GAAG,UAAU,CACrB,EAAE,EACF,qBAAqB,CACnB,UAAU,EACV,SAAS,IAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAyB,EAC/D,OAAO,CAAC,SAAS,CAAC,CACnB,EACD,OAAO,EACP,OAAO,CAAC,MAAiC,CAC1C,CAAA;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,aAAa,GAAG,iBAAiB,CACrC,OAAO,CAAC,MAAiC,EACzC,UAAU,CACX,CAAA;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CACT,sDAAsD;gBACpD,+BAA+B,aAAa;qBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;qBAC9B,IAAI,CAAC,IAAI,CAAC,kDAAkD;gBAC/D,qBAAqB,CACxB,CAAA;QACH,CAAC;QACD,MAAM,oBAAoB,GACxB,OAAO,CAAC,YAAY;YACpB,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;gBACzB,CAAC,CAAC,qBAAqB,CAAC,IAAuB,EAAE,OAAO,CAAC,OAAO,CAAC;gBACjE,CAAC,CAAC,SAAS,CAAC,CAAA;QAChB,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY;YACzC,CAAC,CAAC;gBACE,GAAG,EAAE;oBACH,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAwB;wBAChD,OAAO,CACL,CAAC,MAAM,SAAS,CAAC,YAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;4BAC3D,CAAC,MAAM,oBAAoB,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;4BACzD,IAAI,CACL,CAAA;oBACH,CAAC;iBACF;aACF;YACH,CAAC,CAAC,oBAAoB,CAAA;QACxB,MAAM,cAAc,GAAG,wBAAwB,CAC7C,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,CACf,CAAA;QACD,MAAM,kBAAkB,GACtB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU;YAC5B,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,qBAAqB,GACzB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa;YAC/B,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ;YACxC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;YACvD,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,mBAAmB;YAC5C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kBAAkB,CAAA;QACtB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ;YAC/B,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,CAAC,GAAG,EAAE;oBACJ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;oBAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;oBACpC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;wBACvB,KAAK,CAAC,KAAK,EAAE,CACZ;wBAAA,CAAC,MAAM,UAAU,CAAC,CAAC,KAAK,EAAE,CAAA;oBAC7B,CAAC,CAAC,CAAA;oBACF,OAAO,4BAA4B,CAAC,KAAK,EAAE,UAAU,EAAE;wBACrD,MAAM,EAAE,MAAM,CAAC,2BAA2B,IAAI,cAAc;wBAC5D,iBAAiB,EAAE,kBAAkB;wBACrC,aAAa,EAAE,qBAAqB;qBACrC,CAAC,CAAA;gBACJ,CAAC,CAAC,EAAE;gBACN,CAAC,CAAC,6BAA6B,CAAC;oBAC5B,iBAAiB,EAAE,kBAAkB;oBACrC,aAAa,EAAE,qBAAqB;iBACrC,CAAC;YACN,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,wBAAwB,GAAsB,CAAC,SAAS;YAC5D,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,QAAQ,CAAA;QACd,MAAM,QAAQ,GAAG,oBAAoB,CACnC,SAAS,EACT,wBAAwB,EACxB,OAAO,CAAC,MAAM,CACf,CAAA;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;YAChD,QAAQ;YACR,EAAE;SACH,CAAC,CAAA;QACF,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QAC3E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAkB;YAC7B,KAAK,CAAC,MAAM,CAAC,MAAM;gBACjB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBACtC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;gBAC5D,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBACrC,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI;gBACT,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;YACpC,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,sBAAsB;gBACxC,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;YAChD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE;gBACzB,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAA;gBAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;gBACjD,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;oBACxB,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE;wBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBAClC,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAO,cAAc,GAAG,EAAE,CAAA;YAC5B,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE;gBAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;gBACjD,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAA;gBAC9D,MAAM,EAAE,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;gBACnE,MAAM,GAAG,GAAgB,EAAE,CAAC,MAAM,CAAC,KAAK,CACtC,EAAE,CAAC,UAAU,EACb,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CACf,CAAA;gBAChB,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;gBAC3C,MAAM,eAAe,CAAC,EAAE,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;oBAC7B,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;oBACxD,WAAW;oBACX,IAAI,EAAE,GAAG,CAAC,UAAU;iBACrB,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClD,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,YAAY,GAAyB,iBAAiB;YAC1D,CAAC,CAAC;gBACE,GAAG,QAAQ;gBACX,CAAC,sBAAsB,CAAC,EAAE;oBACxB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,sBAAsB;oBAChC,OAAO,EAAE,KAAK,IAAI,EAAE;wBAClB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;oBACvB,CAAC;iBACF;aACF;YACH,CAAC,CAAC,QAAQ,CAAA;QAEZ,MAAM,SAAS,GAAG,YAAY;YAC5B,CAAC,CAAC,eAAe,CAAC;gBACd,EAAE;gBACF,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACtD,MAAM;aACP,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,UAA8B,CAAA;QAClC,MAAM,IAAI,GAAG;YACX,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAe,EAAE,IAAqB;gBAChE,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAA;gBACH,CAAC;gBACD,MAAM,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,IAAI,IAAI,EAAE,CAAA;gBAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EACrB,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,cAAc,EACd,UAAU,CACX,CAAA;gBACD,OAAO,MAAM,CAAA;YACf,CAAC;YACD,IAAI,CAAC,GAAY;gBACf,OAAO,SAAS;oBACd,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YACxD,CAAC;SACF,CAAA;QACD,IAAI,SAAS;YAAE,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC5C,SAAS,CAAC,oBAAoB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,GAAG;gBACZ,MAAM,QAAQ,GAAG,UAAU,CAAA;gBAC3B,UAAU,GAAG,GAAG,CAAA;gBAChB,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7B,CAAC;wBAAS,CAAC;oBACT,UAAU,GAAG,QAAQ,CAAA;gBACvB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACf,SAAS;gBACP,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SAC7D,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,KAAK,EACvB,UAAiC,EAAE,EACZ,EAAE;YACzB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC3D,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YAClE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;gBAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC,CAAC,SAAS,CAAC,MAAM,CAAA;YACpB,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,GAAG,OAAO;gBACV,MAAM;gBACN,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAClC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE;aAC/B,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YACtD,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACtC,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QACD,MAAM,SAAS,GAAG,KAAK,EACrB,UAA+B,EAAE,EAClB,EAAE;YACjB,IACE,QAAQ,CAAC,SAAS,KAAK,QAAQ;gBAC/B,CAAC,OAAO,CAAC,yBAAyB,EAClC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mPAAmP,CACpP,CAAA;YACH,CAAC;YACD,MAAM,EACJ,yBAAyB,EAAE,0BAA0B,EACrD,GAAG,aAAa,EACjB,GAAG,OAAO,CAAA;YACX,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAA;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM;oBACjC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC3D,CAAC,CAAC,SAAS,CAAC,MAAM,CAAA;gBACpB,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC5D,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACpB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;YACzB,CAAC;QACH,CAAC,CAAA;QACD,MAAM,aAAa,GAAG,kBAAkB,CAItC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;YACxB,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ;YACR,aAAa,EAAE,SAAS;SACzB,CAAC,CAAA;QAEF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAmC,CAAA;QAEnE,MAAM,eAAe,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAC9D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAC5B,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,oBAAoB,CAAC;YACnB,GAAG,eAAe;YAClB,iBAAiB;YACjB,GAAG,CAAC,GAAG,CAAC,oBAAoB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC;SAC5C,CAAC,CAAA;QAEJ,MAAM,YAAY,GAAG,cAAc,CAAC;YAClC,IAAI,EAAE,aAAwC;YAC9C,OAAO,EAAE,gBAA2C;YACpD,QAAQ,EAAE,iBAAwD;YAClE,MAAM,EAAE,eAAsD;YAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS;SACV,CAAQ,CAAA;QAET,MAAM,kBAAkB,GACtB,OAAO,CAAC,OAAO;YACf,IAAI,CAAC,GAAG;YACR,uBAAuB,IAAI,IAAI,CAAC,GAAG;YACnC,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,KAAK,UAAU;YAClD,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE;YACxC,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,eAAe,GAAG,kBAAkB;YACxC,CAAC,CAAC,2BAA2B,CAAC,kBAAkB,EAAE;gBAC9C,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,MAAM;aACf,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,gBAAgB,CAAC;YACrB,YAAY;YACZ,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;YACtD,mBAAmB,EAAE,IAAI,GAAG,CAAC;gBAC3B,QAAQ;gBACR,WAAW;gBACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC;oBACE,eAAe;oBACf,QAAQ;oBACR,eAAe;oBACf,UAAU;oBACV,QAAQ;iBACT,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAC,CACnD;aACF,CAAC;SACH,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,IAAI,4BAA4B,EAAE,CAAA;QAE3D,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO;YACzC,CAAC,CAAC,iBAAiB,CAAC;gBAChB,UAAU,EAAE,MAAM,IAAI,gBAAgB,CAAC;oBACrC,UAAU,EAAE;wBACV,gBAAgB;wBAChB;4BACE,SAAS,EAAE,CAAC,MAAW,EAAE,EAAE,CACzB,OAAO,CACL,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,CACzD;4BACH,OAAO,EAAE,CAAC,MAAW,EAAE,EAAE;gCACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,SAAS,CAAA;gCACzD,MAAM,IAAI,qBAAqB,CAC7B,sEAAsE,MAAM,GAAG,CAChF,CAAA;4BACH,CAAC;yBACF;qBACF;iBACF,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzB,QAAQ,EAAE,eAAe;aAC1B,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,YAAY,EAAE;YACtD,sEAAsE;YACtE,uEAAuE;YACvE,gEAAgE;YAChE,OAAO,EAAE;gBACP,IAAI,0BAA0B,CAAC,EAAE,UAAU,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;aACnE;YACD,8BAA8B,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7C,IACE,KAAK,EAAE,IAAI,KAAK,uBAAuB;oBACvC,CAAC,KAAK,EAAE,MAAM;oBACd,KAAK,CAAC,MAAM,IAAI,GAAG,EACnB,CAAC;oBACD,MAAM,CAAC,KAAK,CACV,8CAA8C,EAC9C,KAAK,EAAE,KAAK,IAAI,KAAK,CACtB,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI;oBACpC,uEAAuE;oBACvE,iEAAiE;oBACjE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;wBACjC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS;4BAChC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;4BAChC,CAAC,CAAC,EAAE,CAAC;iBACV,CAAA;YACH,CAAC;YACD,YAAY,EAAE;gBACZ,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;oBAChC,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;wBAC/B,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAC1D,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CACrB,CAAA;oBACH,CAAC;oBACD,OAAO,GAAG,CAAA;gBACZ,CAAC;aACF;SACF,CAAC,CAAA;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAA;QAE/C,MAAM,UAAU,GAAG,KAAK,EAAE,GAAY,EAA4B,EAAE;YAClE,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAA;YACrE,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAA;YAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;YAClD,IACE,mBAAmB;gBACnB,GAAG,CAAC,QAAQ,KAAK,mBAAmB;gBACpC,GAAG,CAAC,MAAM,KAAK,KAAK,EACpB,CAAC;gBACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE;oBACvD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAC7B;gBACE,EAAE,EAAE,MAAM;gBACV,GAAG;gBACH,OAAO;gBACP,SAAS;gBACT,IAAI;gBACJ,QAAQ;gBACR,IAAI,EAAE,IAA+B;gBACrC,YAAY;gBACZ,MAAM;aACP,EACD,GAAG,CACJ,CAAA;YAED,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;oBACvC,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAA;gBACF,IAAI,GAAG,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,QAAQ,CAAA;YACtC,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YACxE,IAAI,UAAU,CAAC,OAAO;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAA;YAElD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;QAED,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YACvC,UAAU;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAA;QAEF,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,eAAe,GACnB,GAAG,CAAC,gBAAgB,KAAK,KAAK,IAAI,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAA;QACrE,MAAM,SAAS,GACb,SAAS,CAAC,mBAAmB,KAAK,KAAK;YACrC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS;gBAC9B,CAAC,eAAe,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC,CAAA;QACtD,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,EAAE,CAAA;YACnB,iBAAiB,GAAG,IAAI,CAAA;QAC1B,CAAC;QAED,MAAM,GAAG,GAUL;YACF,OAAO;YACP,0EAA0E;YAC1E,EAAE,EAAE,MAAM;YACV,IAAI;YACJ,OAAO;YACP,GAAG;YACH,SAAS;YACT,QAAQ;YACR,yEAAyE;YACzE,2EAA2E;YAC3E,qBAAqB;YACrB,IAAI,EAAE,IAAa;YACnB,WAAW;YACX,SAAS;YACT,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE;YAC9B,iBAAiB;YACjB,IAAI,MAAM;gBACR,OAAO,SAAS,CAAC,MAAM,CAAA;YACzB,CAAC;YACD,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAKA;QAAC,GAA8B,CAAC,mBAAmB,CAAC,GAAG;YACtD,EAAE;YACF,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;YAChC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YAC5C,OAAO;YACP,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAA;QAED,OAAO,GAAG,CAAA;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,YAAY,CAAC,EACrB,oEAAoE,CACrE,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AASvE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEzE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAGzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAuBhD,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AAWjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AAgBjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAOxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAY3D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["import type { AnyRouter as AnyORPCRouter } from '@orpc/server'\n// src/runtime.ts\nimport type { Auth } from 'better-auth'\n\nimport { SmartCoercionHandlerPlugin } from '@orpc/json-schema'\nimport { OpenAPIGenerator, OpenAPIGeneratorError } from '@orpc/openapi'\nimport { OpenAPIHandler } from '@orpc/openapi/fetch'\nimport { RPCHandler } from '@orpc/server/fetch'\nimport { ValibotToJsonSchemaConverter } from '@orpc/valibot'\n\nimport type { AuthSessionResolver, SessionUserConfig } from './access'\nimport type { TableAccessInput } from './access'\nimport type { RealtimeApiRouter } from './api/realtime-router'\nimport type {\n  CrudApiRouterFor,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nimport type { RuntimeTestingHandle } from './backend-internals'\nimport type { DatabaseConnection } from './database/adapter'\nimport type { DbFor } from './db'\nimport type { EmailFacade } from './email'\nimport type {\n  BunderstackJobsBuilder,\n  EnqueueOptions,\n  JobsDefs,\n  JobsFacade,\n  StartWorkerOptions,\n  WorkerHandle,\n} from './jobs/index'\nimport type { MessagingConfig, MessagingFacadesFor } from './messaging'\nimport type { MessagingAdapter } from './messaging/runtime'\nimport type {\n  ResolvedStorageBuckets,\n  StorageConfigInput,\n} from './storage/buckets'\nimport type { StorageAdapter } from './storage/index'\n\nimport { validateAndResolveAccess } from './access'\nimport { createApiContext } from './api/context'\nimport { buildCrudApiRouter } from './api/crud-router'\nimport { mergeOpenAPISpecs } from './api/openapi'\nimport { buildRealtimeApiRouter } from './api/realtime-router'\nimport { buildApiRegistry, normalizeForeignOpenAPISpec } from './api/registry'\nimport { buildApiRouter } from './api/router'\nimport { buildStorageApiRouter } from './api/storage-router'\nimport {\n  createAuth,\n  type BunderstackAuth,\n  missingAuthModels,\n  toAuthSessionResolver,\n  withEmailAuthDefaults,\n} from './auth'\nimport {\n  resolveConfig,\n  type BetterAuthConfig,\n  type BunderstackConfig,\n} from './config'\nimport { resolveAuthConfig, resolveRealtimeRedisUrl } from './config'\nimport { createDb } from './db'\nimport { detectDialect } from './dialect'\nimport { type EnvConfigInput, type ValidatedEnv } from './env'\nimport { buildHandler } from './handler'\nimport { withInternalTables } from './internal-tables'\nimport {\n  createJobRunner,\n  enqueueJob,\n  enqueueTarget,\n  startJobWorker,\n} from './jobs/index'\nimport { Lifecycle, type LifecycleStatus } from './lifecycle'\nimport { consoleLogger, type BunderstackLogger } from './logging'\nimport { createMessaging } from './messaging/runtime'\nimport {\n  PROVISION_INTERNALS,\n  type WithProvisionInternals,\n} from './provision-internals'\nimport { buildReadinessReport } from './readiness'\nimport { createReadinessProbes } from './readiness-probes'\nimport {\n  createRealtimeFacade,\n  type RealtimeFacade,\n  type RealtimeTransport,\n} from './realtime/facade'\nimport {\n  createMemoryRealtimePublisher,\n  createRedisRealtimePublisher,\n} from './realtime/publisher'\nimport {\n  STORAGE_SWEEP_JOB_NAME,\n  STORAGE_SWEEP_SCHEDULE,\n} from './storage/background'\nimport { deleteFileWithDerivatives } from './storage/delete'\nimport { deleteFileMetaRow, insertReadyFile } from './storage/file-meta'\nimport { createStorageOperations } from './storage/operations'\nimport { createBucketStorages } from './storage/registry'\nimport { sweepOrphans } from './storage/sweep'\n\n/** Base Better Auth contract used by framework internals and API context. */\nexport type AuthInstance = Auth\n\nexport type RuntimeOverrides = {\n  database?: DatabaseConnection\n  resolvedStorage?: ResolvedStorageBuckets\n  messagingAdapters?: Record<string, MessagingAdapter>\n  forceMemoryRealtime?: boolean\n  backgroundAutoStart?: false\n  authResolver?: AuthSessionResolver\n  logger?: BunderstackLogger\n  /** Private callback used by backend.test(); never exposed on the app. */\n  captureTestingHandle?: (handle: RuntimeTestingHandle) => void\n}\n\nfunction waitForWorkerShutdown(\n  signal: AbortSignal,\n  installProcessListeners: boolean,\n): Promise<void> {\n  if (signal.aborted) return Promise.resolve()\n\n  return new Promise((resolve) => {\n    const done = () => {\n      signal.removeEventListener('abort', done)\n      if (installProcessListeners) {\n        process.removeListener('SIGINT', done)\n        process.removeListener('SIGTERM', done)\n      }\n      resolve()\n    }\n    signal.addEventListener('abort', done, { once: true })\n    if (installProcessListeners) {\n      process.once('SIGINT', done)\n      process.once('SIGTERM', done)\n    }\n  })\n}\n\n/** Default age before an unconfirmed `pending` file is treated as an orphan. */\nconst DEFAULT_PENDING_TTL_MS = 30 * 60_000\n/**\n * Public storage facade exposed as `app.storage`. Object-level operations live\n * on the per-bucket adapters; this surface offers the app-wide deletes that\n * must also clean the file-meta row.\n */\nexport interface StorageFacade {\n  /** Delete a file row and purge all underlying storage derivatives. */\n  delete(fileId: string): Promise<void>\n  /** Low-level access to the underlying storage adapter for a bucket. */\n  bucket(name: string): StorageAdapter | undefined\n  /**\n   * Reap stale `pending` uploads older than `olderThanMs` (default 30m). Runs\n   * only when explicitly invoked by the host or local scheduler. Returns\n   * the count reaped.\n   */\n  sweep(olderThanMs?: number): Promise<number>\n  /**\n   * Get a public or presigned download URL for a file key.\n   * Returns a presigned S3 URL when S3 is configured, or local proxy route `/api/files/...` in development.\n   */\n  getUrl(\n    key: string,\n    opts?: { bucket?: string; expiresIn?: number },\n  ): Promise<string>\n  /**\n   * Upload bytes as a ready file and register it in file_meta so it is\n   * accessible via `GET /api/files/<key>`. Use this for server-generated\n   * files (e.g. generated PDFs) that are not uploaded by end-users.\n   */\n  upload(\n    key: string,\n    body: ArrayBuffer | Uint8Array,\n    contentType: string,\n    opts?: { ownerId?: string; filename?: string },\n  ): Promise<void>\n}\n\nexport type AppStartWorkerOptions = Omit<StartWorkerOptions, 'tick' | 'drain'>\nexport type AppRunWorkerOptions = AppStartWorkerOptions & {\n  /**\n   * Permit process-local realtime in a standalone worker.\n   *\n   * Use only when job handlers never call ctx.realtime.publish(). Publications\n   * made through the memory broker cannot reach SSE clients in another process.\n   */\n  allowProcessLocalRealtime?: boolean\n}\n/** Bucket names declared in a storage config; `string` when unknowable. */\nexport type BucketNamesOf<TStorage> = TStorage extends {\n  buckets: infer B extends Record<string, unknown>\n}\n  ? keyof B & string\n  : string\n\nexport type BunderstackApp<\n  TSchema extends Record<string, unknown>,\n  TAccess extends Record<string, TableAccessInput> | undefined = undefined,\n  TBuckets extends string = string,\n  TEnv extends EnvConfigInput | undefined = undefined,\n  TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  TRealtime = undefined,\n  TMessaging extends MessagingConfig | undefined = undefined,\n  TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n> = {\n  handler: (req: Request) => Promise<Response>\n  db: DbFor<TSchema>\n  auth: BunderstackAuth<TAuthConfig>\n  storage: StorageFacade\n  /** Validated env: bunderstack's base vars plus the config's `env` extension. */\n  env: ValidatedEnv<TEnv>\n  /** Named, provider-specific outbound messaging channels. */\n  messaging: MessagingFacadesFor<TMessaging>\n  /** Job queue facade; always present — enqueue throws when jobs aren't configured. */\n  jobs: JobsFacade<\n    TJobsDefs extends JobsDefs ? TJobsDefs : Record<never, never>,\n    TSchema\n  >\n  /** Typed custom row publication; enabled=false/no-op when realtime is off. */\n  realtime: RealtimeFacade<TSchema>\n  startWorker(options?: AppStartWorkerOptions): Promise<WorkerHandle>\n  /** Run a queue worker until aborted, then close the application. */\n  runWorker(options?: AppRunWorkerOptions): Promise<void>\n  close(): Promise<void>\n  /** True when this process is running the background tick loop. */\n  readonly backgroundRunning: boolean\n  readonly status: LifecycleStatus\n  readonly signal: AbortSignal\n  /**\n   * Type-only carrier for client inference (`createClient<typeof app>()`).\n   * Never assigned at runtime.\n   */\n  readonly $inferClient?: {\n    schema: TSchema\n    access: TAccess\n    buckets: TBuckets\n    api: MergeApiRouterTypes<\n      UnifiedApiRouter<\n        CrudApiRouterFor<\n          TSchema,\n          TAccess,\n          [TRealtime] extends [false | undefined] ? false : true\n        >,\n        TCustomApiRouter\n      >,\n      [TRealtime] extends [false | undefined] ? {} : RealtimeApiRouter\n    >\n  }\n}\n\nexport function materializeBunderstack<\n  TSchema extends Record<string, unknown>,\n  const TAccess extends Record<string, TableAccessInput> | undefined =\n    undefined,\n  const TStorage extends StorageConfigInput | undefined = undefined,\n  const TEnv extends EnvConfigInput | undefined = undefined,\n  const TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  const TRealtime extends BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter\n  >['realtime'] = undefined,\n  const TMessaging extends MessagingConfig | undefined = undefined,\n  const TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n  const TSession extends\n    | SessionUserConfig<Record<string, unknown>>\n    | undefined = undefined,\n>(\n  options: BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter,\n    TAuthConfig,\n    TSession\n  > & {\n    realtime?: TRealtime\n    messaging?: TMessaging\n    jobs?:\n      | TJobsDefs\n      | ((\n          j: BunderstackJobsBuilder<TSchema, ValidatedEnv<TEnv>, TMessaging>,\n        ) => TJobsDefs)\n  },\n  source: Record<string, string | undefined>,\n  overrides?: RuntimeOverrides,\n  env?: ValidatedEnv<TEnv>,\n): Promise<\n  BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime,\n    TMessaging,\n    TAuthConfig\n  >\n>\nexport async function materializeBunderstack<\n  TSchema extends Record<string, unknown>,\n  const TAccess extends Record<string, TableAccessInput> | undefined =\n    undefined,\n  const TStorage extends StorageConfigInput | undefined = undefined,\n  const TEnv extends EnvConfigInput | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  const TRealtime extends BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter\n  >['realtime'] = undefined,\n  const TMessaging extends MessagingConfig | undefined = undefined,\n  const TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n  const TSession extends\n    | SessionUserConfig<Record<string, unknown>>\n    | undefined = undefined,\n>(\n  options: BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter,\n    TAuthConfig,\n    TSession\n  > & {\n    realtime?: TRealtime\n    messaging?: TMessaging\n    jobs?:\n      | JobsDefs\n      | ((\n          j: BunderstackJobsBuilder<TSchema, ValidatedEnv<TEnv>, TMessaging>,\n        ) => JobsDefs)\n  },\n  source: Record<string, string | undefined>,\n  overrides: RuntimeOverrides = {},\n  inspectedEnv?: ValidatedEnv<TEnv>,\n): Promise<\n  BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    JobsDefs | undefined,\n    TCustomApiRouter,\n    TRealtime,\n    TMessaging,\n    TAuthConfig\n  >\n> {\n  const logger = overrides.logger ?? consoleLogger\n  const dialect = detectDialect(options.schema)\n  const jobsDefs = options.jobs as JobsDefs | undefined\n  if (!inspectedEnv) {\n    throw new Error('[bunderstack] runtime requires an inspected environment')\n  }\n  const env = inspectedEnv\n  const resolvedConfig = resolveConfig(options, env, source)\n  const config = {\n    ...resolvedConfig,\n    database: overrides.database\n      ? { ...resolvedConfig.database, ...overrides.database }\n      : resolvedConfig.database,\n    storage: overrides.resolvedStorage ?? resolvedConfig.storage,\n  }\n  // Merge bunderstack's internal tables (file-meta, idempotency) into the\n  // schema used for the db client + provisioning. CRUD/access stay on the USER\n  // schema so internal tables never get a CRUD route.\n  const mergedSchema = withInternalTables(options.schema)\n  const lifecycle = new Lifecycle()\n  const {\n    db,\n    driver,\n    close: closeDatabase,\n  } = await createDb(mergedSchema, {\n    ...config.database,\n    dialect,\n  })\n  const messaging = createMessaging(\n    (options.messaging ?? {}) as MessagingConfig,\n    {\n      env,\n      db,\n      adapterOverrides: overrides.messagingAdapters,\n    },\n  ) as MessagingFacadesFor<TMessaging>\n  if (closeDatabase) lifecycle.add(closeDatabase)\n  try {\n    // `db` is typed with the merged schema (user tables + internal tables) so the\n    // storage/idempotency code can query the internal tables. The public surface\n    // and CRUD only expose the USER schema. TS can widen the merged-schema db type\n    // on its own (storage/auth pass `db` directly), but it can't *narrow* a\n    // generic schema view, so this single intentional cast produces the\n    // user-facing, per-dialect db type. See `app.db` / crud below.\n    const userDb = db as unknown as DbFor<TSchema>\n    // An `auth` builder gets the user-facing db, so better-auth hooks in another\n    // file can write through the app's own connection without importing the app.\n    const authConfig = resolveAuthConfig(config.auth, { db: userDb, env })\n    const authEmail =\n      options.messaging?.email?.kind === 'email'\n        ? ((messaging as Record<string, unknown>).email as EmailFacade)\n        : undefined\n    const auth = createAuth<TAuthConfig>(\n      db,\n      withEmailAuthDefaults(\n        authConfig,\n        authEmail ?? ({ send: async () => ({}) } satisfies EmailFacade),\n        Boolean(authEmail),\n      ),\n      dialect,\n      options.schema as Record<string, unknown>,\n    )\n    // Internal routers consume the narrow AuthSessionResolver contract, not the\n    // raw better-auth instance. app.auth still exposes `auth` unchanged. An app\n    // whose schema declares no better-auth models gets no resolver at all, so\n    // every session resolves to null instead of hitting the drizzle adapter.\n    const missingModels = missingAuthModels(\n      options.schema as Record<string, unknown>,\n      authConfig,\n    )\n    if (missingModels.length > 0 && options.auth !== undefined) {\n      logger.warn(\n        `[bunderstack] auth is configured, but the schema is ` +\n          `missing better-auth tables: ${missingModels\n            .map((model) => `\\`${model}\\``)\n            .join(', ')}. Every session resolves to null until they are ` +\n          `part of the schema.`,\n      )\n    }\n    const declaredAuthResolver =\n      options.authResolver ??\n      (missingModels.length === 0\n        ? toAuthSessionResolver(auth as unknown as Auth, options.session)\n        : undefined)\n    const authResolver = overrides.authResolver\n      ? {\n          api: {\n            async getSession({ headers }: { headers: Headers }) {\n              return (\n                (await overrides.authResolver!.api.getSession({ headers })) ??\n                (await declaredAuthResolver?.api.getSession({ headers })) ??\n                null\n              )\n            },\n          },\n        }\n      : declaredAuthResolver\n    const resolvedAccess = validateAndResolveAccess(\n      options.schema,\n      options.access,\n    )\n    const realtimeBufferSize =\n      typeof config.realtime === 'object'\n        ? config.realtime.bufferSize\n        : undefined\n    const realtimeResumeSeconds =\n      typeof config.realtime === 'object'\n        ? config.realtime.resumeSeconds\n        : undefined\n    const configuredRedisUrl = config.realtime\n      ? resolveRealtimeRedisUrl(config.realtime, env, source)\n      : undefined\n    const redisUrl = overrides.forceMemoryRealtime\n      ? undefined\n      : configuredRedisUrl\n    const publisher = config.realtime\n      ? redisUrl\n        ? (() => {\n            const redis = new Bun.RedisClient(redisUrl)\n            const subscriber = redis.duplicate()\n            lifecycle.add(async () => {\n              redis.close()\n              ;(await subscriber).close()\n            })\n            return createRedisRealtimePublisher(redis, subscriber, {\n              prefix: source.BUNDERSTACK_REALTIME_PREFIX ?? 'bunderstack:',\n              maxBufferedEvents: realtimeBufferSize,\n              resumeSeconds: realtimeResumeSeconds,\n            })\n          })()\n        : createMemoryRealtimePublisher({\n            maxBufferedEvents: realtimeBufferSize,\n            resumeSeconds: realtimeResumeSeconds,\n          })\n      : undefined\n    const runtimeRealtimeTransport: RealtimeTransport = !publisher\n      ? 'disabled'\n      : redisUrl\n        ? 'redis'\n        : 'memory'\n    const realtime = createRealtimeFacade<TSchema>(\n      publisher,\n      runtimeRealtimeTransport,\n      options.schema,\n    )\n    const registry = createBucketStorages(config.storage)\n    const storageOperations = createStorageOperations({\n      registry,\n      db,\n    })\n    const storageApiRouter = buildStorageApiRouter(registry, storageOperations)\n    const realtimeApiRouter = buildRealtimeApiRouter(publisher, resolvedAccess)\n    const storage: StorageFacade = {\n      async delete(fileId) {\n        const bucketName = fileId.split('/')[0] ?? ''\n        const entry = registry.get(bucketName)\n        if (entry) {\n          await deleteFileWithDerivatives(entry.adapter, db, fileId)\n        } else {\n          // Unknown bucket: no adapter to clean, but still drop the meta row.\n          await deleteFileMetaRow(db, fileId)\n        }\n      },\n      bucket(name) {\n        return registry.get(name)?.adapter\n      },\n      sweep(olderThanMs = DEFAULT_PENDING_TTL_MS) {\n        return sweepOrphans(registry, db, olderThanMs)\n      },\n      async getUrl(key, opts = {}) {\n        const bucketName =\n          opts.bucket ?? key.split('/')[0] ?? config.storage.defaultBucket\n        const adapter = registry.get(bucketName)?.adapter\n        if (adapter?.presignGet) {\n          return adapter.presignGet(key, {\n            expiresIn: opts.expiresIn ?? 3600,\n          })\n        }\n        return `/api/files/${key}`\n      },\n      async upload(key, body, contentType, opts = {}) {\n        const bucketName = key.split('/')[0] ?? ''\n        const adapter = registry.get(bucketName)?.adapter\n        if (!adapter) throw new Error(`Unknown bucket: ${bucketName}`)\n        const u8 = body instanceof Uint8Array ? body : new Uint8Array(body)\n        const buf: ArrayBuffer = u8.buffer.slice(\n          u8.byteOffset,\n          u8.byteOffset + u8.byteLength,\n        ) as ArrayBuffer\n        await adapter.upload(key, buf, contentType)\n        await insertReadyFile(db, {\n          fileId: key,\n          bucket: bucketName,\n          ownerId: opts.ownerId ?? null,\n          scopeJson: null,\n          filename: opts.filename ?? key.split('/').at(-1) ?? null,\n          contentType,\n          size: buf.byteLength,\n        })\n      },\n    }\n    const storageConfigured = Boolean(options.storage)\n    // The storage sweep used to be a hardcoded maintenance route. It is an\n    // ordinary cron now, so it inherits retries, timeout and onFailed.\n    const resolvedDefs: JobsDefs | undefined = storageConfigured\n      ? {\n          ...jobsDefs,\n          [STORAGE_SWEEP_JOB_NAME]: {\n            kind: 'cron',\n            schedule: STORAGE_SWEEP_SCHEDULE,\n            handler: async () => {\n              await storage.sweep()\n            },\n          },\n        }\n      : jobsDefs\n\n    const jobRunner = resolvedDefs\n      ? createJobRunner({\n          db,\n          defs: resolvedDefs,\n          ctx: { db: userDb, env, messaging, storage, realtime },\n          logger,\n        })\n      : undefined\n    let enqueueNow: number | undefined\n    const jobs = {\n      async enqueue(name: string, input?: unknown, opts?: EnqueueOptions) {\n        if (!resolvedDefs) {\n          throw new Error(\n            '[bunderstack] no jobs configured — add a `jobs` key to bunderstack',\n          )\n        }\n        const { tx, ...enqueueOptions } = opts ?? {}\n        const result = await enqueueJob(\n          enqueueTarget(db, tx),\n          resolvedDefs,\n          name,\n          input,\n          enqueueOptions,\n          enqueueNow,\n        )\n        return result\n      },\n      tick(now?: number) {\n        return jobRunner\n          ? jobRunner.tick(now)\n          : Promise.resolve({ claimed: 0, ran: 0, failed: 0 })\n      },\n    }\n    if (jobRunner) jobRunner.setJobsFacade(jobs)\n    overrides.captureTestingHandle?.({\n      async tick(now) {\n        const previous = enqueueNow\n        enqueueNow = now\n        try {\n          return await jobs.tick(now)\n        } finally {\n          enqueueNow = previous\n        }\n      },\n      inspect: (now) =>\n        jobRunner\n          ? jobRunner.inspect(now)\n          : Promise.resolve({ runnable: 0, failed: [], jobs: [] }),\n    })\n    const startWorker = async (\n      options: AppStartWorkerOptions = {},\n    ): Promise<WorkerHandle> => {\n      if (!jobRunner) {\n        throw new Error('[bunderstack] no queue jobs configured')\n      }\n      if (lifecycle.status !== 'ready') {\n        throw new Error('[bunderstack] application lifecycle is closed')\n      }\n      const signal = options.signal\n        ? AbortSignal.any([lifecycle.signal, options.signal])\n        : lifecycle.signal\n      const handle = startJobWorker({\n        ...options,\n        signal,\n        tick: (now) => jobRunner.pump(now),\n        drain: () => jobRunner.drain(),\n      })\n      const unregister = lifecycle.add(() => handle.close())\n      void handle.closed.finally(unregister)\n      return handle\n    }\n    const runWorker = async (\n      options: AppRunWorkerOptions = {},\n    ): Promise<void> => {\n      if (\n        realtime.transport === 'memory' &&\n        !options.allowProcessLocalRealtime\n      ) {\n        throw new Error(\n          '[bunderstack] runWorker() cannot deliver realtime events through the in-memory broker. Configure REDIS_URL or realtime.redis, embed the worker with startWorker(), or pass allowProcessLocalRealtime: true only when jobs never publish realtime.',\n        )\n      }\n      const {\n        allowProcessLocalRealtime: _allowProcessLocalRealtime,\n        ...workerOptions\n      } = options\n      const handle = await startWorker(workerOptions)\n      try {\n        const signal = workerOptions.signal\n          ? AbortSignal.any([lifecycle.signal, workerOptions.signal])\n          : lifecycle.signal\n        await waitForWorkerShutdown(signal, !workerOptions.signal)\n      } finally {\n        await handle.close()\n        await lifecycle.close()\n      }\n    }\n    const crudApiRouter = buildCrudApiRouter<\n      TSchema,\n      TAccess,\n      [TRealtime] extends [false | undefined] ? false : true\n    >(options.schema, userDb, {\n      access: resolvedAccess,\n      idempotency: options.idempotency,\n      realtime,\n      livePublisher: publisher,\n    })\n\n    const customApiRouter = options.api as TCustomApiRouter | undefined\n\n    const readinessProbes = createReadinessProbes(userDb)\n    const queueJobsDeclared = Object.values(options.jobs ?? {}).some(\n      (def) => def.kind === 'job',\n    )\n    const readiness = () =>\n      buildReadinessReport({\n        ...readinessProbes,\n        queueJobsDeclared,\n        ...(env.BUNDERSTACK_REVISION === undefined\n          ? {}\n          : { revision: env.BUNDERSTACK_REVISION }),\n      })\n\n    const nativeRouter = buildApiRouter({\n      crud: crudApiRouter as Record<string, unknown>,\n      storage: storageApiRouter as Record<string, unknown>,\n      realtime: realtimeApiRouter as Record<string, unknown> | undefined,\n      custom: customApiRouter as Record<string, unknown> | undefined,\n      middleware: options.middleware,\n      readiness,\n    }) as any\n\n    const authOpenAPISpecRaw =\n      options.openapi &&\n      auth.api &&\n      'generateOpenAPISchema' in auth.api &&\n      typeof auth.api.generateOpenAPISchema === 'function'\n        ? await auth.api.generateOpenAPISchema()\n        : undefined\n\n    const authOpenAPISpec = authOpenAPISpecRaw\n      ? normalizeForeignOpenAPISpec(authOpenAPISpecRaw, {\n          prefix: '/api/auth',\n          source: 'auth',\n        })\n      : undefined\n\n    await buildApiRegistry({\n      nativeRouter,\n      foreignSpecs: authOpenAPISpec ? [authOpenAPISpec] : [],\n      reservedCoreHandles: new Set([\n        'health',\n        'readiness',\n        ...(publisher ? ['realtime.changes'] : []),\n        ...[...registry.keys()].flatMap((name) =>\n          [\n            'prepareUpload',\n            'upload',\n            'confirmUpload',\n            'download',\n            'delete',\n          ].map((operation) => `files.${name}.${operation}`),\n        ),\n      ]),\n    })\n\n    const valibotConverter = new ValibotToJsonSchemaConverter()\n\n    const combinedOpenAPISpec = options.openapi\n      ? mergeOpenAPISpecs({\n          nativeSpec: await new OpenAPIGenerator({\n            converters: [\n              valibotConverter,\n              {\n                condition: (schema: any) =>\n                  Boolean(\n                    schema?.['~standard'] && !schema['~standard'].jsonSchema,\n                  ),\n                convert: (schema: any) => {\n                  const vendor = schema?.['~standard']?.vendor ?? 'unknown'\n                  throw new OpenAPIGeneratorError(\n                    `No JSON Schema converter is configured for Standard Schema vendor \"${vendor}\"`,\n                  )\n                },\n              },\n            ],\n          }).generate(nativeRouter),\n          authSpec: authOpenAPISpec,\n        })\n      : undefined\n\n    const openapiHandler = new OpenAPIHandler(nativeRouter, {\n      // Query strings and form bodies are strings; this coerces them to the\n      // types each procedure's input schema declares, so schemas stay honest\n      // (`v.number()`, not a string-union pipe) and REST matches RPC.\n      plugins: [\n        new SmartCoercionHandlerPlugin({ converters: [valibotConverter] }),\n      ],\n      customErrorResponseBodyEncoder: (error: any) => {\n        if (\n          error?.code === 'INTERNAL_SERVER_ERROR' ||\n          !error?.status ||\n          error.status >= 500\n        ) {\n          logger.error(\n            '[bunderstack-api] 500 Internal Server Error:',\n            error?.cause ?? error,\n          )\n        }\n        return {\n          error: error.message,\n          code: error.data?.code ?? error.code,\n          // oRPC reports schema failures as `data.issues`; forwarding them tells\n          // the client which field was rejected instead of just \"invalid\".\n          ...(error.data?.details !== undefined\n            ? { details: error.data.details }\n            : error.data?.issues !== undefined\n              ? { details: error.data.issues }\n              : {}),\n        }\n      },\n      interceptors: [\n        async (options) => {\n          const res = await options.next()\n          if (options.context.resHeaders) {\n            options.context.resHeaders.forEach((v: string, k: string) =>\n              (res.headers[k] = v),\n            )\n          }\n          return res\n        },\n      ],\n    })\n    // No custom error encoding here: the RPC protocol owns its error body, and\n    // `mapBunderstackErrors` already logs unhandled procedure errors for every\n    // transport before rethrowing them.\n    const rpcHandler = new RPCHandler(nativeRouter)\n\n    const apiHandler = async (req: Request): Promise<Response | null> => {\n      const urlString = typeof req === 'string' ? (req as string) : req.url\n      if (!urlString) return null\n      const url = new URL(urlString, 'http://localhost')\n      if (\n        combinedOpenAPISpec &&\n        url.pathname === '/api/openapi.json' &&\n        req.method === 'GET'\n      ) {\n        return new Response(JSON.stringify(combinedOpenAPISpec), {\n          headers: { 'Content-Type': 'application/json' },\n        })\n      }\n\n      const apiCtx = createApiContext(\n        {\n          db: userDb,\n          env,\n          storage,\n          messaging,\n          jobs,\n          realtime,\n          auth: auth as unknown as AuthInstance,\n          authResolver,\n          logger,\n        },\n        req,\n      )\n\n      if (url.pathname.startsWith('/api/rpc')) {\n        const res = await rpcHandler.handle(req, {\n          prefix: '/api/rpc',\n          context: apiCtx,\n        })\n        if (res.matched) return res.response\n      }\n\n      const openapiRes = await openapiHandler.handle(req, { context: apiCtx })\n      if (openapiRes.matched) return openapiRes.response\n\n      return null\n    }\n\n    const handler = buildHandler({\n      authHandler: (req) => auth.handler(req),\n      apiHandler,\n      rateLimit: options.rateLimit,\n    })\n\n    // Topology is a deployment concern: the role decides whether this process\n    // runs background work, so application code never has to.\n    const roleWantsWorker =\n      env.BUNDERSTACK_ROLE === 'all' || env.BUNDERSTACK_ROLE === 'worker'\n    const autoStart =\n      overrides.backgroundAutoStart === false\n        ? false\n        : (options.background?.autoStart ??\n          (roleWantsWorker && resolvedDefs !== undefined))\n    let backgroundRunning = false\n    if (autoStart) {\n      await startWorker()\n      backgroundRunning = true\n    }\n\n    const app: BunderstackApp<\n      TSchema,\n      TAccess,\n      BucketNamesOf<TStorage>,\n      TEnv,\n      JobsDefs | undefined,\n      TCustomApiRouter,\n      TRealtime,\n      TMessaging,\n      TAuthConfig\n    > = {\n      handler,\n      // Internal tables live on the runtime db but stay out of the public type.\n      db: userDb,\n      auth,\n      storage,\n      env,\n      messaging,\n      realtime,\n      // Runtime facade is untyped (JobsRuntimeFacade); the generic-typed field\n      // narrows `enqueue` per-app from the declared job defs — same relationship\n      // as `userDb` above.\n      jobs: jobs as never,\n      startWorker,\n      runWorker,\n      close: () => lifecycle.close(),\n      backgroundRunning,\n      get status() {\n        return lifecycle.status\n      },\n      signal: lifecycle.signal,\n    }\n\n    // Hidden handle for the optional `bunderstack/provision` entry. Kept off the\n    // public type so provisioning stays opt-in (and drizzle-kit out of this\n    // module graph).\n    ;(app as WithProvisionInternals)[PROVISION_INTERNALS] = {\n      db,\n      schema: mergedSchema,\n      databaseUrl: config.database.url,\n      migrationsFolder: config.database.migrations,\n      dialect,\n      driver,\n      adapter: config.database.adapter,\n    }\n\n    return app\n  } catch (cause) {\n    try {\n      await lifecycle.close()\n    } catch (cleanupCause) {\n      throw new AggregateError(\n        [cause, cleanupCause],\n        '[bunderstack] application initialization failed and cleanup failed',\n      )\n    }\n    throw cause\n  }\n}\n\nexport { listSpec } from './api/list-spec'\nexport type { ListSpecOptions } from './api/list-spec'\nexport type { BunderstackDb, BunderstackTx } from './db'\nexport { MAX_LIST_LIMIT } from './list-query'\nexport { BunderstackError } from './errors'\nexport type { BunderstackErrorCode } from './errors'\nexport { resolveConfig, resolveAuthConfig, defineAuth } from './config'\nexport type {\n  AuthConfigContext,\n  AuthConfigFactory,\n  AuthConfigInput,\n  BetterAuthConfig,\n  BunderstackConfig,\n  ResolvedConfig,\n} from './config'\nexport { validateEnv, createClientEnv, BunderstackEnvError } from './env'\nexport type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env'\nexport { buildManifest, parseManifest } from './manifest'\nexport type { BunderstackManifest, ManifestEnvVar } from './manifest'\nexport type { EmailMessage, EmailAdapter } from './email'\nexport { createJobsBuilder } from './jobs/index'\nexport type {\n  BunderstackJobContext,\n  BunderstackJobsBuilder,\n  BackgroundDefinition,\n  BackgroundDefs,\n  CronDefinition,\n  CronInvocation,\n  DedupeUntil,\n  EnqueueOptions,\n  EnqueueTransaction,\n  JobContext,\n  JobDefinition,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n  QueueJobDefinition,\n  QueueJobKeys,\n  TypedEnqueueOptions,\n  RunWorkerOptions,\n  StartWorkerOptions,\n  WorkerHandle,\n} from './jobs/index'\nexport {\n  defineSessionUser,\n  defineAccess,\n  validateAndResolveAccess,\n  checkAccess,\n  AUTH_TABLE_NAMES,\n} from './access'\nexport type {\n  TableAccessInput,\n  OperationRule,\n  AccessContext,\n  AccessUser,\n  AccessUserBase,\n  SessionUserConfig,\n  SessionUserExtraOf,\n  SessionUserSource,\n} from './access'\nexport {\n  typeid,\n  generate as generateTypeId,\n  parse as parseTypeId,\n  asTypeId,\n} from './typeid'\nexport type { TypeId } from './typeid'\nexport type {\n  DatabaseAdapter,\n  DatabaseConnection,\n  DatabaseConnectionResult,\n} from './database/adapter'\nexport type { StorageAdapter } from './storage/index'\nexport type {\n  StorageConfigInput,\n  BucketConfigInput,\n  ResolvedBucket,\n} from './storage/buckets'\n// StorageFacade is declared+exported inline above.\nexport type { TransformSpec } from './storage/thumbnails'\nexport type { RealtimeAction } from './realtime/publisher'\nexport { createRealtimeFacade } from './realtime/facade'\nexport type {\n  RealtimeFacade,\n  RealtimeTransport,\n  SchemaTable,\n} from './realtime/facade'\n\nexport { createApiBuilder, defineApi } from './api/builder'\nexport type { BunderstackApiBuilder, ApiFactory } from './api/builder'\n// Needed to declare shared middleware over the app's context, e.g.\n// `os.$context<ApiContext<typeof schema>>().middleware(...)`.\nexport type { ApiContext } from './api/context'\nexport type {\n  CrudApiRouterFor,\n  ExposedApiTables,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nexport type { TableCrudProcedures } from './api/crud-router'\nexport {\n  buildApiRegistry,\n  mergeApiRoutersStrict,\n  normalizeApiPath,\n  normalizeForeignOpenAPISpec,\n} from './api/registry'\nexport { mergeOpenAPISpecs } from './api/openapi'\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AA8B5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EACL,UAAU,EAEV,QAAQ,EACR,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,QAAQ,CAAA;AACf,OAAO,EACL,aAAa,GAGd,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAA;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAA0C,MAAM,OAAO,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EACL,eAAe,EACf,UAAU,EACV,aAAa,EACb,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,SAAS,EAAwB,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,aAAa,EAA0B,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EACL,oBAAoB,GAGrB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAiB9C,SAAS,qBAAqB,CAC5B,MAAmB,EACnB,uBAAgC;IAEhC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzC,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;gBACtC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YACzC,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,IAAI,uBAAuB,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAC5B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAA;AAqK1C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAoB1C,OAgBC,EACD,MAA0C,EAC1C,YAA8B,EAAE,EAChC,YAAiC;IAcjC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,aAAa,CAAA;IAChD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAA4B,CAAA;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAA;IACxB,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG;QACb,GAAG,cAAc;QACjB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC1B,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE;YACvD,CAAC,CAAC,cAAc,CAAC,QAAQ;QAC3B,OAAO,EAAE,SAAS,CAAC,eAAe,IAAI,cAAc,CAAC,OAAO;KAC7D,CAAA;IACD,wEAAwE;IACxE,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACvD,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAA;IACjC,MAAM,EACJ,EAAE,EACF,MAAM,EACN,KAAK,EAAE,aAAa,GACrB,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE;QAC/B,GAAG,MAAM,CAAC,QAAQ;QAClB,OAAO;KACR,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,eAAe,CAC/B,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAoB,EAC5C;QACE,GAAG;QACH,EAAE;QACF,gBAAgB,EAAE,SAAS,CAAC,iBAAiB;KAC9C,CACiC,CAAA;IACpC,IAAI,aAAa;QAAE,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,wEAAwE;QACxE,oEAAoE;QACpE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,EAA+B,CAAA;QAC9C,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACtE,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO;YACxC,CAAC,CAAG,SAAqC,CAAC,KAAqB;YAC/D,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,UAAU,CACR,EAAE,EACF,qBAAqB,CACnB,UAAU,EACV,SAAS,IAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAyB,EAC/D,OAAO,CAAC,SAAS,CAAC,CACnB,EACD,OAAO,EACP,OAAO,CAAC,MAAiC,CAC1C,CAAA;QACH,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,aAAa,GAAG,iBAAiB,CACrC,OAAO,CAAC,MAAiC,EACzC,UAAU,CACX,CAAA;QACD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAA;QAC9C,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CACT,sDAAsD;gBACpD,+BAA+B,aAAa;qBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;qBAC9B,IAAI,CAAC,IAAI,CAAC,oDAAoD;gBACjE,+CAA+C,CAClD,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAC5D,MAAM,oBAAoB,GACxB,OAAO,CAAC,YAAY;YACpB,CAAC,WAAW;gBACV,CAAC,CAAC,qBAAqB,CAAC,IAAuB,EAAE,OAAO,CAAC,OAAO,CAAC;gBACjE,CAAC,CAAC,SAAS,CAAC,CAAA;QAChB,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY;YACzC,CAAC,CAAC;gBACE,GAAG,EAAE;oBACH,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAwB;wBAChD,OAAO,CACL,CAAC,MAAM,SAAS,CAAC,YAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;4BAC3D,CAAC,MAAM,oBAAoB,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;4BACzD,IAAI,CACL,CAAA;oBACH,CAAC;iBACF;aACF;YACH,CAAC,CAAC,oBAAoB,CAAA;QACxB,MAAM,cAAc,GAAG,wBAAwB,CAC7C,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,CACf,CAAA;QACD,MAAM,kBAAkB,GACtB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU;YAC5B,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,qBAAqB,GACzB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa;YAC/B,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ;YACxC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;YACvD,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,QAAQ,GAAG,SAAS,CAAC,mBAAmB;YAC5C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kBAAkB,CAAA;QACtB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ;YAC/B,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,CAAC,GAAG,EAAE;oBACJ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;oBAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;oBACpC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;wBACvB,KAAK,CAAC,KAAK,EAAE,CACZ;wBAAA,CAAC,MAAM,UAAU,CAAC,CAAC,KAAK,EAAE,CAAA;oBAC7B,CAAC,CAAC,CAAA;oBACF,OAAO,4BAA4B,CAAC,KAAK,EAAE,UAAU,EAAE;wBACrD,MAAM,EAAE,MAAM,CAAC,2BAA2B,IAAI,cAAc;wBAC5D,iBAAiB,EAAE,kBAAkB;wBACrC,aAAa,EAAE,qBAAqB;qBACrC,CAAC,CAAA;gBACJ,CAAC,CAAC,EAAE;gBACN,CAAC,CAAC,6BAA6B,CAAC;oBAC5B,iBAAiB,EAAE,kBAAkB;oBACrC,aAAa,EAAE,qBAAqB;iBACrC,CAAC;YACN,CAAC,CAAC,SAAS,CAAA;QACb,MAAM,wBAAwB,GAAsB,CAAC,SAAS;YAC5D,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,QAAQ,CAAA;QACd,MAAM,QAAQ,GAAG,oBAAoB,CACnC,SAAS,EACT,wBAAwB,EACxB,OAAO,CAAC,MAAM,CACf,CAAA;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;YAChD,QAAQ;YACR,EAAE;SACH,CAAC,CAAA;QACF,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QAC3E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAkB;YAC7B,KAAK,CAAC,MAAM,CAAC,MAAM;gBACjB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBACtC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;gBAC5D,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBACrC,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI;gBACT,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;YACpC,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,sBAAsB;gBACxC,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,CAAC,CAAA;YAChD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE;gBACzB,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAA;gBAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;gBACjD,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;oBACxB,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE;wBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;qBAClC,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAO,cAAc,GAAG,EAAE,CAAA;YAC5B,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE;gBAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;gBACjD,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAA;gBAC9D,MAAM,EAAE,GAAG,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;gBACnE,MAAM,GAAG,GAAgB,EAAE,CAAC,MAAM,CAAC,KAAK,CACtC,EAAE,CAAC,UAAU,EACb,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CACf,CAAA;gBAChB,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;gBAC3C,MAAM,eAAe,CAAC,EAAE,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;oBAC7B,SAAS,EAAE,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;oBACxD,WAAW;oBACX,IAAI,EAAE,GAAG,CAAC,UAAU;iBACrB,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClD,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,YAAY,GAAyB,iBAAiB;YAC1D,CAAC,CAAC;gBACE,GAAG,QAAQ;gBACX,CAAC,sBAAsB,CAAC,EAAE;oBACxB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,sBAAsB;oBAChC,OAAO,EAAE,KAAK,IAAI,EAAE;wBAClB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;oBACvB,CAAC;iBACF;aACF;YACH,CAAC,CAAC,QAAQ,CAAA;QAEZ,MAAM,SAAS,GAAG,YAAY;YAC5B,CAAC,CAAC,eAAe,CAAC;gBACd,EAAE;gBACF,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACtD,MAAM;aACP,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QACb,IAAI,UAA8B,CAAA;QAClC,MAAM,IAAI,GAAG;YACX,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAe,EAAE,IAAqB;gBAChE,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAA;gBACH,CAAC;gBACD,MAAM,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,IAAI,IAAI,EAAE,CAAA;gBAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EACrB,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,cAAc,EACd,UAAU,CACX,CAAA;gBACD,OAAO,MAAM,CAAA;YACf,CAAC;YACD,IAAI,CAAC,GAAY;gBACf,OAAO,SAAS;oBACd,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;YACxD,CAAC;SACF,CAAA;QACD,IAAI,SAAS;YAAE,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC5C,SAAS,CAAC,oBAAoB,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,GAAG;gBACZ,MAAM,QAAQ,GAAG,UAAU,CAAA;gBAC3B,UAAU,GAAG,GAAG,CAAA;gBAChB,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7B,CAAC;wBAAS,CAAC;oBACT,UAAU,GAAG,QAAQ,CAAA;gBACvB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACf,SAAS;gBACP,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SAC7D,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,KAAK,EACvB,UAAiC,EAAE,EACZ,EAAE;YACzB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC3D,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YAClE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;gBAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC,CAAC,SAAS,CAAC,MAAM,CAAA;YACpB,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,GAAG,OAAO;gBACV,MAAM;gBACN,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAClC,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE;aAC/B,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YACtD,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACtC,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QACD,MAAM,SAAS,GAAG,KAAK,EACrB,UAA+B,EAAE,EAClB,EAAE;YACjB,IACE,QAAQ,CAAC,SAAS,KAAK,QAAQ;gBAC/B,CAAC,OAAO,CAAC,yBAAyB,EAClC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mPAAmP,CACpP,CAAA;YACH,CAAC;YACD,MAAM,EACJ,yBAAyB,EAAE,0BAA0B,EACrD,GAAG,aAAa,EACjB,GAAG,OAAO,CAAA;YACX,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,CAAA;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM;oBACjC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC3D,CAAC,CAAC,SAAS,CAAC,MAAM,CAAA;gBACpB,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC5D,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;gBACpB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;YACzB,CAAC;QACH,CAAC,CAAA;QACD,MAAM,aAAa,GAAG,kBAAkB,CAItC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;YACxB,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ;YACR,aAAa,EAAE,SAAS;SACzB,CAAC,CAAA;QAEF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAmC,CAAA;QAEnE,MAAM,eAAe,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAC9D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAC5B,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,oBAAoB,CAAC;YACnB,GAAG,eAAe;YAClB,iBAAiB;YACjB,GAAG,CAAC,GAAG,CAAC,oBAAoB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC;SAC5C,CAAC,CAAA;QAEJ,MAAM,YAAY,GAAG,cAAc,CAAC;YAClC,IAAI,EAAE,aAAwC;YAC9C,OAAO,EAAE,gBAA2C;YACpD,QAAQ,EAAE,iBAAwD;YAClE,MAAM,EAAE,eAAsD;YAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS;SACV,CAAQ,CAAA;QAET,MAAM,kBAAkB,GACtB,OAAO,CAAC,OAAO;YACf,WAAW;YACX,IAAI,CAAC,GAAG;YACR,uBAAuB,IAAI,IAAI,CAAC,GAAG;YACnC,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,KAAK,UAAU;YAClD,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE;YACxC,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,eAAe,GAAG,kBAAkB;YACxC,CAAC,CAAC,2BAA2B,CAAC,kBAAkB,EAAE;gBAC9C,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,MAAM;aACf,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,gBAAgB,CAAC;YACrB,YAAY;YACZ,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;YACtD,mBAAmB,EAAE,IAAI,GAAG,CAAC;gBAC3B,QAAQ;gBACR,WAAW;gBACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC;oBACE,eAAe;oBACf,QAAQ;oBACR,eAAe;oBACf,UAAU;oBACV,QAAQ;iBACT,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,SAAS,EAAE,CAAC,CACnD;aACF,CAAC;SACH,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,IAAI,4BAA4B,EAAE,CAAA;QAE3D,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO;YACzC,CAAC,CAAC,iBAAiB,CAAC;gBAChB,UAAU,EAAE,MAAM,IAAI,gBAAgB,CAAC;oBACrC,UAAU,EAAE;wBACV,gBAAgB;wBAChB;4BACE,SAAS,EAAE,CAAC,MAAW,EAAE,EAAE,CACzB,OAAO,CACL,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,CACzD;4BACH,OAAO,EAAE,CAAC,MAAW,EAAE,EAAE;gCACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,SAAS,CAAA;gCACzD,MAAM,IAAI,qBAAqB,CAC7B,sEAAsE,MAAM,GAAG,CAChF,CAAA;4BACH,CAAC;yBACF;qBACF;iBACF,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzB,QAAQ,EAAE,eAAe;aAC1B,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QAEb,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,YAAY,EAAE;YACtD,sEAAsE;YACtE,uEAAuE;YACvE,gEAAgE;YAChE,OAAO,EAAE;gBACP,IAAI,0BAA0B,CAAC,EAAE,UAAU,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;aACnE;YACD,8BAA8B,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7C,IACE,KAAK,EAAE,IAAI,KAAK,uBAAuB;oBACvC,CAAC,KAAK,EAAE,MAAM;oBACd,KAAK,CAAC,MAAM,IAAI,GAAG,EACnB,CAAC;oBACD,MAAM,CAAC,KAAK,CACV,8CAA8C,EAC9C,KAAK,EAAE,KAAK,IAAI,KAAK,CACtB,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI;oBACpC,uEAAuE;oBACvE,iEAAiE;oBACjE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;wBACjC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS;4BAChC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;4BAChC,CAAC,CAAC,EAAE,CAAC;iBACV,CAAA;YACH,CAAC;YACD,YAAY,EAAE;gBACZ,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;oBAChC,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;wBAC/B,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAChC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAC/C,CAAA;oBACH,CAAC;oBACD,OAAO,GAAG,CAAA;gBACZ,CAAC;aACF;SACF,CAAC,CAAA;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAA;QAE/C,MAAM,UAAU,GAAG,KAAK,EAAE,GAAY,EAA4B,EAAE;YAClE,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAA;YACrE,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAA;YAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAA;YAClD,IACE,mBAAmB;gBACnB,GAAG,CAAC,QAAQ,KAAK,mBAAmB;gBACpC,GAAG,CAAC,MAAM,KAAK,KAAK,EACpB,CAAC;gBACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE;oBACvD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAC7B;gBACE,EAAE,EAAE,MAAM;gBACV,GAAG;gBACH,OAAO;gBACP,SAAS;gBACT,IAAI;gBACJ,QAAQ;gBACR,IAAI,EAAE,IAA+B;gBACrC,YAAY;gBACZ,MAAM;aACP,EACD,GAAG,CACJ,CAAA;YAED,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;oBACvC,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAA;gBACF,IAAI,GAAG,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,QAAQ,CAAA;YACtC,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YACxE,IAAI,UAAU,CAAC,OAAO;gBAAE,OAAO,UAAU,CAAC,QAAQ,CAAA;YAElD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;QAED,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,UAAU;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAA;QAEF,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,eAAe,GACnB,GAAG,CAAC,gBAAgB,KAAK,KAAK,IAAI,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAA;QACrE,MAAM,SAAS,GACb,SAAS,CAAC,mBAAmB,KAAK,KAAK;YACrC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS;gBAC9B,CAAC,eAAe,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC,CAAA;QACtD,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,EAAE,CAAA;YACnB,iBAAiB,GAAG,IAAI,CAAA;QAC1B,CAAC;QAED,MAAM,GAAG,GAUL;YACF,OAAO;YACP,0EAA0E;YAC1E,EAAE,EAAE,MAAM;YACV,IAAI;YACJ,OAAO;YACP,GAAG;YACH,SAAS;YACT,QAAQ;YACR,yEAAyE;YACzE,2EAA2E;YAC3E,qBAAqB;YACrB,IAAI,EAAE,IAAa;YACnB,WAAW;YACX,SAAS;YACT,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE;YAC9B,iBAAiB;YACjB,IAAI,MAAM;gBACR,OAAO,SAAS,CAAC,MAAM,CAAA;YACzB,CAAC;YACD,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAKA;QAAC,GAA8B,CAAC,mBAAmB,CAAC,GAAG;YACtD,EAAE;YACF,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;YAChC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YAC5C,OAAO;YACP,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAA;QAED,OAAO,GAAG,CAAA;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,YAAY,CAAC,EACrB,oEAAoE,CACrE,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AASvE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AAEzE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAGzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAuBhD,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AAWjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AAgBjB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAOxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAY3D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA","sourcesContent":["import type { AnyRouter as AnyORPCRouter } from '@orpc/server'\n// src/runtime.ts\nimport type { Auth } from 'better-auth'\n\nimport { SmartCoercionHandlerPlugin } from '@orpc/json-schema'\nimport { OpenAPIGenerator, OpenAPIGeneratorError } from '@orpc/openapi'\nimport { OpenAPIHandler } from '@orpc/openapi/fetch'\nimport { RPCHandler } from '@orpc/server/fetch'\nimport { ValibotToJsonSchemaConverter } from '@orpc/valibot'\n\nimport type { AuthSessionResolver, SessionUserConfig } from './access'\nimport type { TableAccessInput } from './access'\nimport type { RealtimeApiRouter } from './api/realtime-router'\nimport type {\n  CrudApiRouterFor,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nimport type { RuntimeTestingHandle } from './backend-internals'\nimport type { DatabaseConnection } from './database/adapter'\nimport type { DbFor } from './db'\nimport type { EmailFacade } from './email'\nimport type {\n  BunderstackJobsBuilder,\n  EnqueueOptions,\n  JobsDefs,\n  JobsFacade,\n  StartWorkerOptions,\n  WorkerHandle,\n} from './jobs/index'\nimport type { MessagingConfig, MessagingFacadesFor } from './messaging'\nimport type { MessagingAdapter } from './messaging/runtime'\nimport type {\n  ResolvedStorageBuckets,\n  StorageConfigInput,\n} from './storage/buckets'\nimport type { StorageAdapter } from './storage/index'\n\nimport { validateAndResolveAccess } from './access'\nimport { createApiContext } from './api/context'\nimport { buildCrudApiRouter } from './api/crud-router'\nimport { mergeOpenAPISpecs } from './api/openapi'\nimport { buildRealtimeApiRouter } from './api/realtime-router'\nimport { buildApiRegistry, normalizeForeignOpenAPISpec } from './api/registry'\nimport { buildApiRouter } from './api/router'\nimport { buildStorageApiRouter } from './api/storage-router'\nimport {\n  createAuth,\n  type BunderstackAuth,\n  lazyAuth,\n  missingAuthModels,\n  toAuthSessionResolver,\n  withEmailAuthDefaults,\n} from './auth'\nimport {\n  resolveConfig,\n  type BetterAuthConfig,\n  type BunderstackConfig,\n} from './config'\nimport { resolveAuthConfig, resolveRealtimeRedisUrl } from './config'\nimport { createDb } from './db'\nimport { detectDialect } from './dialect'\nimport { type EnvConfigInput, type ValidatedEnv } from './env'\nimport { buildHandler } from './handler'\nimport { withInternalTables } from './internal-tables'\nimport {\n  createJobRunner,\n  enqueueJob,\n  enqueueTarget,\n  startJobWorker,\n} from './jobs/index'\nimport { Lifecycle, type LifecycleStatus } from './lifecycle'\nimport { consoleLogger, type BunderstackLogger } from './logging'\nimport { createMessaging } from './messaging/runtime'\nimport {\n  PROVISION_INTERNALS,\n  type WithProvisionInternals,\n} from './provision-internals'\nimport { buildReadinessReport } from './readiness'\nimport { createReadinessProbes } from './readiness-probes'\nimport {\n  createRealtimeFacade,\n  type RealtimeFacade,\n  type RealtimeTransport,\n} from './realtime/facade'\nimport {\n  createMemoryRealtimePublisher,\n  createRedisRealtimePublisher,\n} from './realtime/publisher'\nimport {\n  STORAGE_SWEEP_JOB_NAME,\n  STORAGE_SWEEP_SCHEDULE,\n} from './storage/background'\nimport { deleteFileWithDerivatives } from './storage/delete'\nimport { deleteFileMetaRow, insertReadyFile } from './storage/file-meta'\nimport { createStorageOperations } from './storage/operations'\nimport { createBucketStorages } from './storage/registry'\nimport { sweepOrphans } from './storage/sweep'\n\n/** Base Better Auth contract used by framework internals and API context. */\nexport type AuthInstance = Auth\n\nexport type RuntimeOverrides = {\n  database?: DatabaseConnection\n  resolvedStorage?: ResolvedStorageBuckets\n  messagingAdapters?: Record<string, MessagingAdapter>\n  forceMemoryRealtime?: boolean\n  backgroundAutoStart?: false\n  authResolver?: AuthSessionResolver\n  logger?: BunderstackLogger\n  /** Private callback used by backend.test(); never exposed on the app. */\n  captureTestingHandle?: (handle: RuntimeTestingHandle) => void\n}\n\nfunction waitForWorkerShutdown(\n  signal: AbortSignal,\n  installProcessListeners: boolean,\n): Promise<void> {\n  if (signal.aborted) return Promise.resolve()\n\n  return new Promise((resolve) => {\n    const done = () => {\n      signal.removeEventListener('abort', done)\n      if (installProcessListeners) {\n        process.removeListener('SIGINT', done)\n        process.removeListener('SIGTERM', done)\n      }\n      resolve()\n    }\n    signal.addEventListener('abort', done, { once: true })\n    if (installProcessListeners) {\n      process.once('SIGINT', done)\n      process.once('SIGTERM', done)\n    }\n  })\n}\n\n/** Default age before an unconfirmed `pending` file is treated as an orphan. */\nconst DEFAULT_PENDING_TTL_MS = 30 * 60_000\n/**\n * Public storage facade exposed as `app.storage`. Object-level operations live\n * on the per-bucket adapters; this surface offers the app-wide deletes that\n * must also clean the file-meta row.\n */\nexport interface StorageFacade {\n  /** Delete a file row and purge all underlying storage derivatives. */\n  delete(fileId: string): Promise<void>\n  /** Low-level access to the underlying storage adapter for a bucket. */\n  bucket(name: string): StorageAdapter | undefined\n  /**\n   * Reap stale `pending` uploads older than `olderThanMs` (default 30m). Runs\n   * only when explicitly invoked by the host or local scheduler. Returns\n   * the count reaped.\n   */\n  sweep(olderThanMs?: number): Promise<number>\n  /**\n   * Get a public or presigned download URL for a file key.\n   * Returns a presigned S3 URL when S3 is configured, or local proxy route `/api/files/...` in development.\n   */\n  getUrl(\n    key: string,\n    opts?: { bucket?: string; expiresIn?: number },\n  ): Promise<string>\n  /**\n   * Upload bytes as a ready file and register it in file_meta so it is\n   * accessible via `GET /api/files/<key>`. Use this for server-generated\n   * files (e.g. generated PDFs) that are not uploaded by end-users.\n   */\n  upload(\n    key: string,\n    body: ArrayBuffer | Uint8Array,\n    contentType: string,\n    opts?: { ownerId?: string; filename?: string },\n  ): Promise<void>\n}\n\nexport type AppStartWorkerOptions = Omit<StartWorkerOptions, 'tick' | 'drain'>\nexport type AppRunWorkerOptions = AppStartWorkerOptions & {\n  /**\n   * Permit process-local realtime in a standalone worker.\n   *\n   * Use only when job handlers never call ctx.realtime.publish(). Publications\n   * made through the memory broker cannot reach SSE clients in another process.\n   */\n  allowProcessLocalRealtime?: boolean\n}\n/** Bucket names declared in a storage config; `string` when unknowable. */\nexport type BucketNamesOf<TStorage> = TStorage extends {\n  buckets: infer B extends Record<string, unknown>\n}\n  ? keyof B & string\n  : string\n\nexport type BunderstackApp<\n  TSchema extends Record<string, unknown>,\n  TAccess extends Record<string, TableAccessInput> | undefined = undefined,\n  TBuckets extends string = string,\n  TEnv extends EnvConfigInput | undefined = undefined,\n  TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  TRealtime = undefined,\n  TMessaging extends MessagingConfig | undefined = undefined,\n  TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n> = {\n  handler: (req: Request) => Promise<Response>\n  db: DbFor<TSchema>\n  auth: BunderstackAuth<TAuthConfig>\n  storage: StorageFacade\n  /** Validated env: bunderstack's base vars plus the config's `env` extension. */\n  env: ValidatedEnv<TEnv>\n  /** Named, provider-specific outbound messaging channels. */\n  messaging: MessagingFacadesFor<TMessaging>\n  /** Job queue facade; always present — enqueue throws when jobs aren't configured. */\n  jobs: JobsFacade<\n    TJobsDefs extends JobsDefs ? TJobsDefs : Record<never, never>,\n    TSchema\n  >\n  /** Typed custom row publication; enabled=false/no-op when realtime is off. */\n  realtime: RealtimeFacade<TSchema>\n  startWorker(options?: AppStartWorkerOptions): Promise<WorkerHandle>\n  /** Run a queue worker until aborted, then close the application. */\n  runWorker(options?: AppRunWorkerOptions): Promise<void>\n  close(): Promise<void>\n  /** True when this process is running the background tick loop. */\n  readonly backgroundRunning: boolean\n  readonly status: LifecycleStatus\n  readonly signal: AbortSignal\n  /**\n   * Type-only carrier for client inference (`createClient<typeof app>()`).\n   * Never assigned at runtime.\n   */\n  readonly $inferClient?: {\n    schema: TSchema\n    access: TAccess\n    buckets: TBuckets\n    api: MergeApiRouterTypes<\n      UnifiedApiRouter<\n        CrudApiRouterFor<\n          TSchema,\n          TAccess,\n          [TRealtime] extends [false | undefined] ? false : true\n        >,\n        TCustomApiRouter\n      >,\n      [TRealtime] extends [false | undefined] ? {} : RealtimeApiRouter\n    >\n  }\n}\n\nexport function materializeBunderstack<\n  TSchema extends Record<string, unknown>,\n  const TAccess extends Record<string, TableAccessInput> | undefined =\n    undefined,\n  const TStorage extends StorageConfigInput | undefined = undefined,\n  const TEnv extends EnvConfigInput | undefined = undefined,\n  const TJobsDefs extends JobsDefs | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  const TRealtime extends BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter\n  >['realtime'] = undefined,\n  const TMessaging extends MessagingConfig | undefined = undefined,\n  const TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n  const TSession extends\n    | SessionUserConfig<Record<string, unknown>>\n    | undefined = undefined,\n>(\n  options: BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter,\n    TAuthConfig,\n    TSession\n  > & {\n    realtime?: TRealtime\n    messaging?: TMessaging\n    jobs?:\n      | TJobsDefs\n      | ((\n          j: BunderstackJobsBuilder<TSchema, ValidatedEnv<TEnv>, TMessaging>,\n        ) => TJobsDefs)\n  },\n  source: Record<string, string | undefined>,\n  overrides?: RuntimeOverrides,\n  env?: ValidatedEnv<TEnv>,\n): Promise<\n  BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    TJobsDefs,\n    TCustomApiRouter,\n    TRealtime,\n    TMessaging,\n    TAuthConfig\n  >\n>\nexport async function materializeBunderstack<\n  TSchema extends Record<string, unknown>,\n  const TAccess extends Record<string, TableAccessInput> | undefined =\n    undefined,\n  const TStorage extends StorageConfigInput | undefined = undefined,\n  const TEnv extends EnvConfigInput | undefined = undefined,\n  TCustomApiRouter extends AnyORPCRouter | undefined = undefined,\n  const TRealtime extends BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter\n  >['realtime'] = undefined,\n  const TMessaging extends MessagingConfig | undefined = undefined,\n  const TAuthConfig extends BetterAuthConfig = BetterAuthConfig,\n  const TSession extends\n    | SessionUserConfig<Record<string, unknown>>\n    | undefined = undefined,\n>(\n  options: BunderstackConfig<\n    TSchema,\n    TAccess,\n    TStorage,\n    TEnv,\n    TCustomApiRouter,\n    TAuthConfig,\n    TSession\n  > & {\n    realtime?: TRealtime\n    messaging?: TMessaging\n    jobs?:\n      | JobsDefs\n      | ((\n          j: BunderstackJobsBuilder<TSchema, ValidatedEnv<TEnv>, TMessaging>,\n        ) => JobsDefs)\n  },\n  source: Record<string, string | undefined>,\n  overrides: RuntimeOverrides = {},\n  inspectedEnv?: ValidatedEnv<TEnv>,\n): Promise<\n  BunderstackApp<\n    TSchema,\n    TAccess,\n    BucketNamesOf<TStorage>,\n    TEnv,\n    JobsDefs | undefined,\n    TCustomApiRouter,\n    TRealtime,\n    TMessaging,\n    TAuthConfig\n  >\n> {\n  const logger = overrides.logger ?? consoleLogger\n  const dialect = detectDialect(options.schema)\n  const jobsDefs = options.jobs as JobsDefs | undefined\n  if (!inspectedEnv) {\n    throw new Error('[bunderstack] runtime requires an inspected environment')\n  }\n  const env = inspectedEnv\n  const resolvedConfig = resolveConfig(options, env, source)\n  const config = {\n    ...resolvedConfig,\n    database: overrides.database\n      ? { ...resolvedConfig.database, ...overrides.database }\n      : resolvedConfig.database,\n    storage: overrides.resolvedStorage ?? resolvedConfig.storage,\n  }\n  // Merge bunderstack's internal tables (file-meta, idempotency) into the\n  // schema used for the db client + provisioning. CRUD/access stay on the USER\n  // schema so internal tables never get a CRUD route.\n  const mergedSchema = withInternalTables(options.schema)\n  const lifecycle = new Lifecycle()\n  const {\n    db,\n    driver,\n    close: closeDatabase,\n  } = await createDb(mergedSchema, {\n    ...config.database,\n    dialect,\n  })\n  const messaging = createMessaging(\n    (options.messaging ?? {}) as MessagingConfig,\n    {\n      env,\n      db,\n      adapterOverrides: overrides.messagingAdapters,\n    },\n  ) as MessagingFacadesFor<TMessaging>\n  if (closeDatabase) lifecycle.add(closeDatabase)\n  try {\n    // `db` is typed with the merged schema (user tables + internal tables) so the\n    // storage/idempotency code can query the internal tables. The public surface\n    // and CRUD only expose the USER schema. TS can widen the merged-schema db type\n    // on its own (storage/auth pass `db` directly), but it can't *narrow* a\n    // generic schema view, so this single intentional cast produces the\n    // user-facing, per-dialect db type. See `app.db` / crud below.\n    const userDb = db as unknown as DbFor<TSchema>\n    // An `auth` builder gets the user-facing db, so better-auth hooks in another\n    // file can write through the app's own connection without importing the app.\n    const authConfig = resolveAuthConfig(config.auth, { db: userDb, env })\n    const authEmail =\n      options.messaging?.email?.kind === 'email'\n        ? ((messaging as Record<string, unknown>).email as EmailFacade)\n        : undefined\n    const buildAuth = () =>\n      createAuth<TAuthConfig>(\n        db,\n        withEmailAuthDefaults(\n          authConfig,\n          authEmail ?? ({ send: async () => ({}) } satisfies EmailFacade),\n          Boolean(authEmail),\n        ),\n        dialect,\n        options.schema as Record<string, unknown>,\n      )\n    // Internal routers consume the narrow AuthSessionResolver contract, not the\n    // raw better-auth instance. app.auth still exposes `auth` unchanged. An app\n    // whose schema declares no better-auth models runs no better-auth at all: no\n    // resolver (every session is null), no `/api/auth` routes, no auth OpenAPI,\n    // and the instance behind `app.auth` is only built if something touches it.\n    const missingModels = missingAuthModels(\n      options.schema as Record<string, unknown>,\n      authConfig,\n    )\n    const authEnabled = missingModels.length === 0\n    if (!authEnabled && options.auth !== undefined) {\n      logger.warn(\n        `[bunderstack] auth is configured, but the schema is ` +\n          `missing better-auth tables: ${missingModels\n            .map((model) => `\\`${model}\\``)\n            .join(', ')}. Every session resolves to null and /api/auth is ` +\n          `not served until they are part of the schema.`,\n      )\n    }\n    const auth = authEnabled ? buildAuth() : lazyAuth(buildAuth)\n    const declaredAuthResolver =\n      options.authResolver ??\n      (authEnabled\n        ? toAuthSessionResolver(auth as unknown as Auth, options.session)\n        : undefined)\n    const authResolver = overrides.authResolver\n      ? {\n          api: {\n            async getSession({ headers }: { headers: Headers }) {\n              return (\n                (await overrides.authResolver!.api.getSession({ headers })) ??\n                (await declaredAuthResolver?.api.getSession({ headers })) ??\n                null\n              )\n            },\n          },\n        }\n      : declaredAuthResolver\n    const resolvedAccess = validateAndResolveAccess(\n      options.schema,\n      options.access,\n    )\n    const realtimeBufferSize =\n      typeof config.realtime === 'object'\n        ? config.realtime.bufferSize\n        : undefined\n    const realtimeResumeSeconds =\n      typeof config.realtime === 'object'\n        ? config.realtime.resumeSeconds\n        : undefined\n    const configuredRedisUrl = config.realtime\n      ? resolveRealtimeRedisUrl(config.realtime, env, source)\n      : undefined\n    const redisUrl = overrides.forceMemoryRealtime\n      ? undefined\n      : configuredRedisUrl\n    const publisher = config.realtime\n      ? redisUrl\n        ? (() => {\n            const redis = new Bun.RedisClient(redisUrl)\n            const subscriber = redis.duplicate()\n            lifecycle.add(async () => {\n              redis.close()\n              ;(await subscriber).close()\n            })\n            return createRedisRealtimePublisher(redis, subscriber, {\n              prefix: source.BUNDERSTACK_REALTIME_PREFIX ?? 'bunderstack:',\n              maxBufferedEvents: realtimeBufferSize,\n              resumeSeconds: realtimeResumeSeconds,\n            })\n          })()\n        : createMemoryRealtimePublisher({\n            maxBufferedEvents: realtimeBufferSize,\n            resumeSeconds: realtimeResumeSeconds,\n          })\n      : undefined\n    const runtimeRealtimeTransport: RealtimeTransport = !publisher\n      ? 'disabled'\n      : redisUrl\n        ? 'redis'\n        : 'memory'\n    const realtime = createRealtimeFacade<TSchema>(\n      publisher,\n      runtimeRealtimeTransport,\n      options.schema,\n    )\n    const registry = createBucketStorages(config.storage)\n    const storageOperations = createStorageOperations({\n      registry,\n      db,\n    })\n    const storageApiRouter = buildStorageApiRouter(registry, storageOperations)\n    const realtimeApiRouter = buildRealtimeApiRouter(publisher, resolvedAccess)\n    const storage: StorageFacade = {\n      async delete(fileId) {\n        const bucketName = fileId.split('/')[0] ?? ''\n        const entry = registry.get(bucketName)\n        if (entry) {\n          await deleteFileWithDerivatives(entry.adapter, db, fileId)\n        } else {\n          // Unknown bucket: no adapter to clean, but still drop the meta row.\n          await deleteFileMetaRow(db, fileId)\n        }\n      },\n      bucket(name) {\n        return registry.get(name)?.adapter\n      },\n      sweep(olderThanMs = DEFAULT_PENDING_TTL_MS) {\n        return sweepOrphans(registry, db, olderThanMs)\n      },\n      async getUrl(key, opts = {}) {\n        const bucketName =\n          opts.bucket ?? key.split('/')[0] ?? config.storage.defaultBucket\n        const adapter = registry.get(bucketName)?.adapter\n        if (adapter?.presignGet) {\n          return adapter.presignGet(key, {\n            expiresIn: opts.expiresIn ?? 3600,\n          })\n        }\n        return `/api/files/${key}`\n      },\n      async upload(key, body, contentType, opts = {}) {\n        const bucketName = key.split('/')[0] ?? ''\n        const adapter = registry.get(bucketName)?.adapter\n        if (!adapter) throw new Error(`Unknown bucket: ${bucketName}`)\n        const u8 = body instanceof Uint8Array ? body : new Uint8Array(body)\n        const buf: ArrayBuffer = u8.buffer.slice(\n          u8.byteOffset,\n          u8.byteOffset + u8.byteLength,\n        ) as ArrayBuffer\n        await adapter.upload(key, buf, contentType)\n        await insertReadyFile(db, {\n          fileId: key,\n          bucket: bucketName,\n          ownerId: opts.ownerId ?? null,\n          scopeJson: null,\n          filename: opts.filename ?? key.split('/').at(-1) ?? null,\n          contentType,\n          size: buf.byteLength,\n        })\n      },\n    }\n    const storageConfigured = Boolean(options.storage)\n    // The storage sweep used to be a hardcoded maintenance route. It is an\n    // ordinary cron now, so it inherits retries, timeout and onFailed.\n    const resolvedDefs: JobsDefs | undefined = storageConfigured\n      ? {\n          ...jobsDefs,\n          [STORAGE_SWEEP_JOB_NAME]: {\n            kind: 'cron',\n            schedule: STORAGE_SWEEP_SCHEDULE,\n            handler: async () => {\n              await storage.sweep()\n            },\n          },\n        }\n      : jobsDefs\n\n    const jobRunner = resolvedDefs\n      ? createJobRunner({\n          db,\n          defs: resolvedDefs,\n          ctx: { db: userDb, env, messaging, storage, realtime },\n          logger,\n        })\n      : undefined\n    let enqueueNow: number | undefined\n    const jobs = {\n      async enqueue(name: string, input?: unknown, opts?: EnqueueOptions) {\n        if (!resolvedDefs) {\n          throw new Error(\n            '[bunderstack] no jobs configured — add a `jobs` key to bunderstack',\n          )\n        }\n        const { tx, ...enqueueOptions } = opts ?? {}\n        const result = await enqueueJob(\n          enqueueTarget(db, tx),\n          resolvedDefs,\n          name,\n          input,\n          enqueueOptions,\n          enqueueNow,\n        )\n        return result\n      },\n      tick(now?: number) {\n        return jobRunner\n          ? jobRunner.tick(now)\n          : Promise.resolve({ claimed: 0, ran: 0, failed: 0 })\n      },\n    }\n    if (jobRunner) jobRunner.setJobsFacade(jobs)\n    overrides.captureTestingHandle?.({\n      async tick(now) {\n        const previous = enqueueNow\n        enqueueNow = now\n        try {\n          return await jobs.tick(now)\n        } finally {\n          enqueueNow = previous\n        }\n      },\n      inspect: (now) =>\n        jobRunner\n          ? jobRunner.inspect(now)\n          : Promise.resolve({ runnable: 0, failed: [], jobs: [] }),\n    })\n    const startWorker = async (\n      options: AppStartWorkerOptions = {},\n    ): Promise<WorkerHandle> => {\n      if (!jobRunner) {\n        throw new Error('[bunderstack] no queue jobs configured')\n      }\n      if (lifecycle.status !== 'ready') {\n        throw new Error('[bunderstack] application lifecycle is closed')\n      }\n      const signal = options.signal\n        ? AbortSignal.any([lifecycle.signal, options.signal])\n        : lifecycle.signal\n      const handle = startJobWorker({\n        ...options,\n        signal,\n        tick: (now) => jobRunner.pump(now),\n        drain: () => jobRunner.drain(),\n      })\n      const unregister = lifecycle.add(() => handle.close())\n      void handle.closed.finally(unregister)\n      return handle\n    }\n    const runWorker = async (\n      options: AppRunWorkerOptions = {},\n    ): Promise<void> => {\n      if (\n        realtime.transport === 'memory' &&\n        !options.allowProcessLocalRealtime\n      ) {\n        throw new Error(\n          '[bunderstack] runWorker() cannot deliver realtime events through the in-memory broker. Configure REDIS_URL or realtime.redis, embed the worker with startWorker(), or pass allowProcessLocalRealtime: true only when jobs never publish realtime.',\n        )\n      }\n      const {\n        allowProcessLocalRealtime: _allowProcessLocalRealtime,\n        ...workerOptions\n      } = options\n      const handle = await startWorker(workerOptions)\n      try {\n        const signal = workerOptions.signal\n          ? AbortSignal.any([lifecycle.signal, workerOptions.signal])\n          : lifecycle.signal\n        await waitForWorkerShutdown(signal, !workerOptions.signal)\n      } finally {\n        await handle.close()\n        await lifecycle.close()\n      }\n    }\n    const crudApiRouter = buildCrudApiRouter<\n      TSchema,\n      TAccess,\n      [TRealtime] extends [false | undefined] ? false : true\n    >(options.schema, userDb, {\n      access: resolvedAccess,\n      idempotency: options.idempotency,\n      realtime,\n      livePublisher: publisher,\n    })\n\n    const customApiRouter = options.api as TCustomApiRouter | undefined\n\n    const readinessProbes = createReadinessProbes(userDb)\n    const queueJobsDeclared = Object.values(options.jobs ?? {}).some(\n      (def) => def.kind === 'job',\n    )\n    const readiness = () =>\n      buildReadinessReport({\n        ...readinessProbes,\n        queueJobsDeclared,\n        ...(env.BUNDERSTACK_REVISION === undefined\n          ? {}\n          : { revision: env.BUNDERSTACK_REVISION }),\n      })\n\n    const nativeRouter = buildApiRouter({\n      crud: crudApiRouter as Record<string, unknown>,\n      storage: storageApiRouter as Record<string, unknown>,\n      realtime: realtimeApiRouter as Record<string, unknown> | undefined,\n      custom: customApiRouter as Record<string, unknown> | undefined,\n      middleware: options.middleware,\n      readiness,\n    }) as any\n\n    const authOpenAPISpecRaw =\n      options.openapi &&\n      authEnabled &&\n      auth.api &&\n      'generateOpenAPISchema' in auth.api &&\n      typeof auth.api.generateOpenAPISchema === 'function'\n        ? await auth.api.generateOpenAPISchema()\n        : undefined\n\n    const authOpenAPISpec = authOpenAPISpecRaw\n      ? normalizeForeignOpenAPISpec(authOpenAPISpecRaw, {\n          prefix: '/api/auth',\n          source: 'auth',\n        })\n      : undefined\n\n    await buildApiRegistry({\n      nativeRouter,\n      foreignSpecs: authOpenAPISpec ? [authOpenAPISpec] : [],\n      reservedCoreHandles: new Set([\n        'health',\n        'readiness',\n        ...(publisher ? ['realtime.changes'] : []),\n        ...[...registry.keys()].flatMap((name) =>\n          [\n            'prepareUpload',\n            'upload',\n            'confirmUpload',\n            'download',\n            'delete',\n          ].map((operation) => `files.${name}.${operation}`),\n        ),\n      ]),\n    })\n\n    const valibotConverter = new ValibotToJsonSchemaConverter()\n\n    const combinedOpenAPISpec = options.openapi\n      ? mergeOpenAPISpecs({\n          nativeSpec: await new OpenAPIGenerator({\n            converters: [\n              valibotConverter,\n              {\n                condition: (schema: any) =>\n                  Boolean(\n                    schema?.['~standard'] && !schema['~standard'].jsonSchema,\n                  ),\n                convert: (schema: any) => {\n                  const vendor = schema?.['~standard']?.vendor ?? 'unknown'\n                  throw new OpenAPIGeneratorError(\n                    `No JSON Schema converter is configured for Standard Schema vendor \"${vendor}\"`,\n                  )\n                },\n              },\n            ],\n          }).generate(nativeRouter),\n          authSpec: authOpenAPISpec,\n        })\n      : undefined\n\n    const openapiHandler = new OpenAPIHandler(nativeRouter, {\n      // Query strings and form bodies are strings; this coerces them to the\n      // types each procedure's input schema declares, so schemas stay honest\n      // (`v.number()`, not a string-union pipe) and REST matches RPC.\n      plugins: [\n        new SmartCoercionHandlerPlugin({ converters: [valibotConverter] }),\n      ],\n      customErrorResponseBodyEncoder: (error: any) => {\n        if (\n          error?.code === 'INTERNAL_SERVER_ERROR' ||\n          !error?.status ||\n          error.status >= 500\n        ) {\n          logger.error(\n            '[bunderstack-api] 500 Internal Server Error:',\n            error?.cause ?? error,\n          )\n        }\n        return {\n          error: error.message,\n          code: error.data?.code ?? error.code,\n          // oRPC reports schema failures as `data.issues`; forwarding them tells\n          // the client which field was rejected instead of just \"invalid\".\n          ...(error.data?.details !== undefined\n            ? { details: error.data.details }\n            : error.data?.issues !== undefined\n              ? { details: error.data.issues }\n              : {}),\n        }\n      },\n      interceptors: [\n        async (options) => {\n          const res = await options.next()\n          if (options.context.resHeaders) {\n            options.context.resHeaders.forEach(\n              (v: string, k: string) => (res.headers[k] = v),\n            )\n          }\n          return res\n        },\n      ],\n    })\n    // No custom error encoding here: the RPC protocol owns its error body, and\n    // `mapBunderstackErrors` already logs unhandled procedure errors for every\n    // transport before rethrowing them.\n    const rpcHandler = new RPCHandler(nativeRouter)\n\n    const apiHandler = async (req: Request): Promise<Response | null> => {\n      const urlString = typeof req === 'string' ? (req as string) : req.url\n      if (!urlString) return null\n      const url = new URL(urlString, 'http://localhost')\n      if (\n        combinedOpenAPISpec &&\n        url.pathname === '/api/openapi.json' &&\n        req.method === 'GET'\n      ) {\n        return new Response(JSON.stringify(combinedOpenAPISpec), {\n          headers: { 'Content-Type': 'application/json' },\n        })\n      }\n\n      const apiCtx = createApiContext(\n        {\n          db: userDb,\n          env,\n          storage,\n          messaging,\n          jobs,\n          realtime,\n          auth: auth as unknown as AuthInstance,\n          authResolver,\n          logger,\n        },\n        req,\n      )\n\n      if (url.pathname.startsWith('/api/rpc')) {\n        const res = await rpcHandler.handle(req, {\n          prefix: '/api/rpc',\n          context: apiCtx,\n        })\n        if (res.matched) return res.response\n      }\n\n      const openapiRes = await openapiHandler.handle(req, { context: apiCtx })\n      if (openapiRes.matched) return openapiRes.response\n\n      return null\n    }\n\n    const handler = buildHandler({\n      authHandler: authEnabled ? (req) => auth.handler(req) : undefined,\n      apiHandler,\n      rateLimit: options.rateLimit,\n    })\n\n    // Topology is a deployment concern: the role decides whether this process\n    // runs background work, so application code never has to.\n    const roleWantsWorker =\n      env.BUNDERSTACK_ROLE === 'all' || env.BUNDERSTACK_ROLE === 'worker'\n    const autoStart =\n      overrides.backgroundAutoStart === false\n        ? false\n        : (options.background?.autoStart ??\n          (roleWantsWorker && resolvedDefs !== undefined))\n    let backgroundRunning = false\n    if (autoStart) {\n      await startWorker()\n      backgroundRunning = true\n    }\n\n    const app: BunderstackApp<\n      TSchema,\n      TAccess,\n      BucketNamesOf<TStorage>,\n      TEnv,\n      JobsDefs | undefined,\n      TCustomApiRouter,\n      TRealtime,\n      TMessaging,\n      TAuthConfig\n    > = {\n      handler,\n      // Internal tables live on the runtime db but stay out of the public type.\n      db: userDb,\n      auth,\n      storage,\n      env,\n      messaging,\n      realtime,\n      // Runtime facade is untyped (JobsRuntimeFacade); the generic-typed field\n      // narrows `enqueue` per-app from the declared job defs — same relationship\n      // as `userDb` above.\n      jobs: jobs as never,\n      startWorker,\n      runWorker,\n      close: () => lifecycle.close(),\n      backgroundRunning,\n      get status() {\n        return lifecycle.status\n      },\n      signal: lifecycle.signal,\n    }\n\n    // Hidden handle for the optional `bunderstack/provision` entry. Kept off the\n    // public type so provisioning stays opt-in (and drizzle-kit out of this\n    // module graph).\n    ;(app as WithProvisionInternals)[PROVISION_INTERNALS] = {\n      db,\n      schema: mergedSchema,\n      databaseUrl: config.database.url,\n      migrationsFolder: config.database.migrations,\n      dialect,\n      driver,\n      adapter: config.database.adapter,\n    }\n\n    return app\n  } catch (cause) {\n    try {\n      await lifecycle.close()\n    } catch (cleanupCause) {\n      throw new AggregateError(\n        [cause, cleanupCause],\n        '[bunderstack] application initialization failed and cleanup failed',\n      )\n    }\n    throw cause\n  }\n}\n\nexport { listSpec } from './api/list-spec'\nexport type { ListSpecOptions } from './api/list-spec'\nexport type { BunderstackDb, BunderstackTx } from './db'\nexport { MAX_LIST_LIMIT } from './list-query'\nexport { BunderstackError } from './errors'\nexport type { BunderstackErrorCode } from './errors'\nexport { resolveConfig, resolveAuthConfig, defineAuth } from './config'\nexport type {\n  AuthConfigContext,\n  AuthConfigFactory,\n  AuthConfigInput,\n  BetterAuthConfig,\n  BunderstackConfig,\n  ResolvedConfig,\n} from './config'\nexport { validateEnv, createClientEnv, BunderstackEnvError } from './env'\nexport type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env'\nexport { buildManifest, parseManifest } from './manifest'\nexport type { BunderstackManifest, ManifestEnvVar } from './manifest'\nexport type { EmailMessage, EmailAdapter } from './email'\nexport { createJobsBuilder } from './jobs/index'\nexport type {\n  BunderstackJobContext,\n  BunderstackJobsBuilder,\n  BackgroundDefinition,\n  BackgroundDefs,\n  CronDefinition,\n  CronInvocation,\n  DedupeUntil,\n  EnqueueOptions,\n  EnqueueTransaction,\n  JobContext,\n  JobDefinition,\n  JobsDefs,\n  JobsFacade,\n  JobsRuntimeFacade,\n  QueueJobDefinition,\n  QueueJobKeys,\n  TypedEnqueueOptions,\n  RunWorkerOptions,\n  StartWorkerOptions,\n  WorkerHandle,\n} from './jobs/index'\nexport {\n  defineSessionUser,\n  defineAccess,\n  validateAndResolveAccess,\n  checkAccess,\n  AUTH_TABLE_NAMES,\n} from './access'\nexport type {\n  TableAccessInput,\n  OperationRule,\n  AccessContext,\n  AccessUser,\n  AccessUserBase,\n  SessionUserConfig,\n  SessionUserExtraOf,\n  SessionUserSource,\n} from './access'\nexport {\n  typeid,\n  generate as generateTypeId,\n  parse as parseTypeId,\n  asTypeId,\n} from './typeid'\nexport type { TypeId } from './typeid'\nexport type {\n  DatabaseAdapter,\n  DatabaseConnection,\n  DatabaseConnectionResult,\n} from './database/adapter'\nexport type { StorageAdapter } from './storage/index'\nexport type {\n  StorageConfigInput,\n  BucketConfigInput,\n  ResolvedBucket,\n} from './storage/buckets'\n// StorageFacade is declared+exported inline above.\nexport type { TransformSpec } from './storage/thumbnails'\nexport type { RealtimeAction } from './realtime/publisher'\nexport { createRealtimeFacade } from './realtime/facade'\nexport type {\n  RealtimeFacade,\n  RealtimeTransport,\n  SchemaTable,\n} from './realtime/facade'\n\nexport { createApiBuilder, defineApi } from './api/builder'\nexport type { BunderstackApiBuilder, ApiFactory } from './api/builder'\n// Needed to declare shared middleware over the app's context, e.g.\n// `os.$context<ApiContext<typeof schema>>().middleware(...)`.\nexport type { ApiContext } from './api/context'\nexport type {\n  CrudApiRouterFor,\n  ExposedApiTables,\n  MergeApiRouterTypes,\n  UnifiedApiRouter,\n} from './api/types'\nexport type { TableCrudProcedures } from './api/crud-router'\nexport {\n  buildApiRegistry,\n  mergeApiRoutersStrict,\n  normalizeApiPath,\n  normalizeForeignOpenAPISpec,\n} from './api/registry'\nexport { mergeOpenAPISpecs } from './api/openapi'\n"]}

package/llms-full.txt

@@ -742,6 +742,11 @@ latest captured verification link for that user's email.
 Include `user`, `session`, `account`, `verification` from BetterAuth in your schema.
 Copy full definitions from `examples/standalone/schema.ts`.
 
+An app whose schema has no `user` and `session` tables runs without Better Auth:
+every session resolves to `null`, `/api/auth/*` answers 404, and the OpenAPI
+document has no auth paths. Declaring `auth` without those tables logs a
+warning at startup.
+
 BACKGROUND JOBS AND CRON
 
 Everything in the background is a row in one table. A job is a type, a payload,

package/llms.txt

@@ -307,7 +307,9 @@ AUTH
 auth takes Better Auth options directly, or defineAuth(schema, ({ db, env }) =>
 options) when database hooks need the app's own connection. Better Auth owns
 /api/auth/*. context.user carries id, email, name, and role. authResolver
-replaces session reading with your own implementation.
+replaces session reading with your own implementation. Without user and
+session tables in the schema, the app runs no Better Auth: sessions are null
+and /api/auth/* answers 404.
 
 BACKGROUND JOBS
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bunderstack",
-  "version": "0.25.0",
+  "version": "0.25.1",
   "description": "Batteries-included backend framework for Bun: type-safe oRPC APIs, auth, storage, realtime, jobs, messaging, and validated env from one declaration.",
   "keywords": [
     "backend",
@@ -204,7 +204,7 @@
     "@tanstack/react-start": "^1.168.26",
     "@types/nodemailer": "^6",
     "@types/react": "^19.0.0",
-    "better-auth": "^1.0.0",
+    "better-auth": "^1.7.6",
     "drizzle-kit": "^0.30.0",
     "drizzle-orm": "^0.45.0",
     "drizzle-valibot": "0.4.2",