cursedbelt 2.8.0 → 3.0.0

package/dist/server/services/systemService.js

@@ -1,403 +0,0 @@
-/**
- * `SystemService` (02 §1.5) — calendar, notifications, and Request Builder's
- * server-side send.
- *
- * `sendHttp` is the one that matters. The audit called the un-guarded version
- * "the single most dangerous finding" (§4.2): a caller-supplied URL handed to
- * `fetch` on the server reaches cloud metadata, the station on :4747, and every
- * internal admin endpoint. The route now guards the first hop — but a guard on
- * hop one is worthless if hop two is a redirect to `169.254.169.254`, which is
- * the classic bypass. So this implementation:
- *
- *   1. re-guards the URL it was handed (defense in depth — an ops path, a test,
- *      or a future caller may reach the service without the route);
- *   2. follows redirects MANUALLY, guarding every hop, with a hop ceiling;
- *   3. guards the RESOLVED address, not just the hostname, so a DNS name that
- *      points at a private IP is refused as well;
- *   4. caps the response body, because "fetch this URL for me" is also a memory
- *      amplification primitive if the answer can be 10GB.
- *
- * The SaaS profile must additionally enforce network-layer egress. That is
- * documented on `assertResolvedPublicUrl` and is not something a library can do.
- */
-import { budgetsRepo, clearOccurrenceMark, createCalendar, createCalendarEvent, deleteCalendar, deleteCalendarEvent, getCalendarEvent, listCalendarEvents, listCalendars, listNotifications, listOccurrenceMarks, markNotificationDone, scopedExec, setOccurrenceMark, timeoffRepo, updateCalendar, updateCalendarEvent, } from 'cwip/repositories';
-import { AppError } from '../errors';
-import { pruneUndefined } from './patch';
-import { assertResolvedPublicUrl } from '../net/outboundGuard';
-const scopeOf = (scope) => ({
-    tenantId: scope.claims.tenantId,
-    userId: scope.claims.userId,
-});
-/**
- * Headers a caller may NOT set. `host` and `content-length` are the transport's
- * to compute; the rest are how a request smuggles its way past a proxy or
- * impersonates an internal caller.
- */
-const FORBIDDEN_REQUEST_HEADERS = new Set([
-    'host',
-    'content-length',
-    'connection',
-    'transfer-encoding',
-    'upgrade',
-    'x-forwarded-for',
-    'x-forwarded-host',
-    'x-real-ip',
-]);
-const sanitizeHeaders = (headers) => {
-    const clean = {};
-    for (const [name, value] of Object.entries(headers ?? {})) {
-        if (FORBIDDEN_REQUEST_HEADERS.has(name.toLowerCase()))
-            continue;
-        clean[name] = value;
-    }
-    return clean;
-};
-export function createSystemService(options) {
-    const doFetch = options.fetchImpl ?? fetch;
-    const maxRedirects = options.maxRedirects ?? 5;
-    const maxResponseBytes = options.maxResponseBytes ?? 8 * 1024 * 1024;
-    const timeoutMs = options.timeoutMs ?? 15_000;
-    const domain = () => options.storage.domain('system');
-    return {
-        async listEvents(scope, range) {
-            const repoScope = scopeOf(scope);
-            const events = await scopedExec(domain(), repoScope, listCalendarEvents(repoScope, range));
-            return events.map((event) => ({
-                id: event.id,
-                title: event.title,
-                startsAt: event.startsAt,
-                endsAt: event.endsAt,
-            }));
-        },
-        async listNotifications(scope) {
-            const repoScope = scopeOf(scope);
-            const rows = await scopedExec(domain(), repoScope, listNotifications(repoScope));
-            return rows.map((row) => ({ id: row.id, title: row.title, body: row.body, done: row.done }));
-        },
-        async markNotificationDone(scope, id) {
-            const repoScope = scopeOf(scope);
-            return await scopedExec(domain(), repoScope, markNotificationDone(repoScope, id));
-        },
-        // Calendar CRUD + occurrence marks (§3 / §4). Same `system` domain accessor;
-        // a thin `scopedExec` over the flat `systemRepo` calendar ops.
-        calendar: createCalendarService(domain),
-        // Time-off, budgets and subscriptions (§3 / §4) — all in `system.db`, so they
-        // share the SAME domain accessor. Thin `scopedExec` wrappers over the
-        // `timeoffRepo`/`budgetsRepo` namespaces.
-        timeOff: createTimeOffService(domain),
-        budgets: createBudgetService(domain),
-        subscriptions: createSubscriptionService(domain),
-        async sendHttp(_scope, spec) {
-            // Hop 0. Re-guarded here even though the route already did: this method is
-            // reachable from the ops table too, and a guard that lives only at one
-            // caller is a guard with a second door.
-            let target = await assertResolvedPublicUrl(spec.url, options.outboundGuard);
-            const controller = new AbortController();
-            const timer = setTimeout(() => controller.abort(), timeoutMs);
-            const headers = sanitizeHeaders(spec.headers);
-            try {
-                for (let hop = 0; hop <= maxRedirects; hop++) {
-                    const response = await doFetch(target.toString(), {
-                        method: spec.method,
-                        headers,
-                        body: spec.body,
-                        // MANUAL: the platform's automatic redirect following would jump to
-                        // an unguarded host, which is the whole bypass.
-                        redirect: 'manual',
-                        signal: controller.signal,
-                    });
-                    const location = response.headers.get('location');
-                    const isRedirect = response.status >= 300 && response.status < 400 && location !== null;
-                    if (!isRedirect)
-                        return await readCappedResponse(response, maxResponseBytes);
-                    if (hop === maxRedirects)
-                        throw new AppError(`Outbound request exceeded ${maxRedirects} redirects.`, {
-                            code: 'OUTBOUND_REDIRECT_LIMIT',
-                            status: 502,
-                            category: 'security',
-                            context: { maxRedirects },
-                        });
-                    // Resolve relative Locations against the CURRENT hop, then guard the
-                    // result exactly as hop 0 was guarded.
-                    const next = new URL(location, target);
-                    target = await assertResolvedPublicUrl(next.toString(), options.outboundGuard);
-                }
-                // Unreachable: the loop either returns or throws.
-                throw new AppError('Outbound request terminated without a response.', {
-                    code: 'OUTBOUND_NO_RESPONSE',
-                    status: 502,
-                });
-            }
-            finally {
-                clearTimeout(timer);
-            }
-        },
-    };
-}
-/**
- * Read at most `limit` bytes. A fetched response is attacker-influenced size, so
- * `await response.text()` on it is an unbounded allocation the caller never
- * asked for.
- */
-const readCappedResponse = async (response, limit) => {
-    const headers = {};
-    response.headers.forEach((value, name) => {
-        headers[name] = value;
-    });
-    const reader = response.body?.getReader();
-    if (!reader)
-        return { status: response.status, headers, body: '' };
-    const decoder = new TextDecoder();
-    let body = '';
-    let read = 0;
-    try {
-        while (read < limit) {
-            const { value, done } = await reader.read();
-            if (done)
-                break;
-            read += value.byteLength;
-            body += decoder.decode(value, { stream: true });
-        }
-        body += decoder.decode();
-    }
-    finally {
-        await reader.cancel().catch(() => undefined);
-    }
-    return { status: response.status, headers, body: read > limit ? body.slice(0, limit) : body };
-};
-const toCalendarView = (calendar) => ({
-    id: calendar.id,
-    title: calendar.title,
-    color: calendar.color,
-    visible: calendar.visible,
-});
-const toEventView = (event) => ({
-    id: event.id,
-    calendarId: event.calendarId,
-    title: event.title,
-    bodyMd: event.bodyMd,
-    location: event.location,
-    startsAt: event.startsAt,
-    endsAt: event.endsAt,
-    allDay: event.allDay,
-    rrule: event.rrule,
-    kItemId: event.kItemId,
-});
-const toMarkView = (mark) => ({
-    eventId: mark.eventId,
-    occurredOn: mark.occurredOn,
-    state: mark.state,
-});
-/**
- * The calendar sub-service (§3 / §4). `cal_events`/`cal_done_marks` carry no
- * `tenant_id`; the repo re-earns tenancy through the FK chain to `cal_calendars`
- * on every write, so a foreign `calendarId`/`eventId` returns `null`/`false` and
- * the mixin turns that into a typed 404. Recurrence expansion is NOT here — it is
- * the pure `core/calendar` `expandEvent(rule, window)`, shared with the client.
- */
-function createCalendarService(domain) {
-    const run = (scope, op) => scopedExec(domain(), scopeOf(scope), op);
-    return {
-        async listCalendars(scope) {
-            return (await run(scope, listCalendars(scopeOf(scope)))).map(toCalendarView);
-        },
-        async createCalendar(scope, input) {
-            return toCalendarView(await run(scope, createCalendar(scopeOf(scope), input)));
-        },
-        async updateCalendar(scope, id, patch) {
-            const calendar = await run(scope, updateCalendar(scopeOf(scope), id, pruneUndefined(patch)));
-            return calendar ? toCalendarView(calendar) : null;
-        },
-        async removeCalendar(scope, id) {
-            return await run(scope, deleteCalendar(scopeOf(scope), id));
-        },
-        async getEvent(scope, id) {
-            const event = await run(scope, getCalendarEvent(scopeOf(scope), id));
-            return event ? toEventView(event) : null;
-        },
-        async createEvent(scope, input) {
-            const event = await run(scope, createCalendarEvent(scopeOf(scope), input));
-            return event ? toEventView(event) : null;
-        },
-        async updateEvent(scope, id, patch) {
-            const event = await run(scope, updateCalendarEvent(scopeOf(scope), id, pruneUndefined(patch)));
-            return event ? toEventView(event) : null;
-        },
-        async removeEvent(scope, id) {
-            return await run(scope, deleteCalendarEvent(scopeOf(scope), id));
-        },
-        async listMarks(scope, calendarId) {
-            return (await run(scope, listOccurrenceMarks(scopeOf(scope), calendarId))).map(toMarkView);
-        },
-        async setMark(scope, eventId, occurredOn, state) {
-            const mark = await run(scope, setOccurrenceMark(scopeOf(scope), eventId, occurredOn, state));
-            return mark ? toMarkView(mark) : null;
-        },
-        async clearMark(scope, eventId, occurredOn) {
-            return await run(scope, clearOccurrenceMark(scopeOf(scope), eventId, occurredOn));
-        },
-    };
-}
-const toPolicyView = (policy) => ({
-    id: policy.id,
-    title: policy.title,
-    accrualDays: policy.accrualDays,
-    carryoverMax: policy.carryoverMax,
-});
-const toRequestView = (request) => ({
-    id: request.id,
-    userId: request.userId,
-    policyId: request.policyId,
-    startsOn: request.startsOn,
-    endsOn: request.endsOn,
-    days: request.days,
-    status: request.status,
-    note: request.note,
-    createdAt: request.createdAt,
-    decidedAt: request.decidedAt,
-});
-const toLedgerView = (entry) => ({
-    id: entry.id,
-    userId: entry.userId,
-    policyId: entry.policyId,
-    requestId: entry.requestId,
-    deltaDays: entry.deltaDays,
-    reason: entry.reason,
-    at: entry.at,
-});
-/**
- * The time-off sub-service (§3 / §4). CRUD is `scopedExec` over the `timeoffRepo`
- * RepoOps; the three state-machine transitions (`approveRequest`/`denyRequest`/
- * `cancelRequest`) are the repo's transaction-composed PLAIN fns — they take a
- * `DomainHandle` directly (they open their own `scopedTransaction` to flip the
- * status AND move the ledger atomically), so they are called `fn(domain(), …)`
- * rather than through `scopedExec`.
- */
-function createTimeOffService(domain) {
-    const run = (scope, op) => scopedExec(domain(), scopeOf(scope), op);
-    return {
-        async listPolicies(scope) {
-            return (await run(scope, timeoffRepo.listPolicies(scopeOf(scope)))).map(toPolicyView);
-        },
-        async createPolicy(scope, input) {
-            return toPolicyView(await run(scope, timeoffRepo.createPolicy(scopeOf(scope), input)));
-        },
-        async updatePolicy(scope, id, patch) {
-            const policy = await run(scope, timeoffRepo.updatePolicy(scopeOf(scope), id, pruneUndefined(patch)));
-            return policy ? toPolicyView(policy) : null;
-        },
-        async removePolicy(scope, id) {
-            return await run(scope, timeoffRepo.deletePolicy(scopeOf(scope), id));
-        },
-        async listRequests(scope, opts) {
-            return (await run(scope, timeoffRepo.listRequests(scopeOf(scope), pruneUndefined(opts)))).map(toRequestView);
-        },
-        async getRequest(scope, id) {
-            const request = await run(scope, timeoffRepo.getRequest(scopeOf(scope), id));
-            return request ? toRequestView(request) : null;
-        },
-        async createRequest(scope, input) {
-            return toRequestView(await run(scope, timeoffRepo.createRequest(scopeOf(scope), input)));
-        },
-        async approveRequest(scope, id) {
-            const request = await timeoffRepo.approveRequest(domain(), scopeOf(scope), id);
-            return request ? toRequestView(request) : null;
-        },
-        async denyRequest(scope, id) {
-            const request = await timeoffRepo.denyRequest(domain(), scopeOf(scope), id);
-            return request ? toRequestView(request) : null;
-        },
-        async cancelRequest(scope, id) {
-            const request = await timeoffRepo.cancelRequest(domain(), scopeOf(scope), id);
-            return request ? toRequestView(request) : null;
-        },
-        async listLedger(scope, opts) {
-            return (await run(scope, timeoffRepo.listLedger(scopeOf(scope), pruneUndefined(opts)))).map(toLedgerView);
-        },
-        async balance(scope, policyId) {
-            return await run(scope, timeoffRepo.balance(scopeOf(scope), policyId));
-        },
-    };
-}
-const toBudgetView = (budget) => ({
-    id: budget.id,
-    title: budget.title,
-    period: budget.period,
-    amountCents: budget.amountCents,
-    currency: budget.currency,
-});
-const toBudgetEntryView = (entry) => ({
-    id: entry.id,
-    budgetId: entry.budgetId,
-    occurredOn: entry.occurredOn,
-    amountCents: entry.amountCents,
-    category: entry.category,
-    note: entry.note,
-});
-/** The budgets sub-service (§3 / §4). Thin `scopedExec` over `budgetsRepo`. */
-function createBudgetService(domain) {
-    const run = (scope, op) => scopedExec(domain(), scopeOf(scope), op);
-    return {
-        async list(scope) {
-            return (await run(scope, budgetsRepo.listBudgets(scopeOf(scope)))).map(toBudgetView);
-        },
-        async create(scope, input) {
-            return toBudgetView(await run(scope, budgetsRepo.createBudget(scopeOf(scope), input)));
-        },
-        async update(scope, id, patch) {
-            const budget = await run(scope, budgetsRepo.updateBudget(scopeOf(scope), id, pruneUndefined(patch)));
-            return budget ? toBudgetView(budget) : null;
-        },
-        async remove(scope, id) {
-            return await run(scope, budgetsRepo.deleteBudget(scopeOf(scope), id));
-        },
-        async listEntries(scope, budgetId, window) {
-            return (await run(scope, budgetsRepo.listEntries(scopeOf(scope), budgetId, pruneUndefined(window)))).map(toBudgetEntryView);
-        },
-        async createEntry(scope, budgetId, input) {
-            // null ⇒ the budget is not this caller's — the repo guards the parent in
-            // SQL, so a foreign `budgetId` writes nothing and the mixin reports 404.
-            const entry = await run(scope, budgetsRepo.createEntry(scopeOf(scope), budgetId, input));
-            return entry ? toBudgetEntryView(entry) : null;
-        },
-        async removeEntry(scope, id) {
-            return await run(scope, budgetsRepo.deleteEntry(scopeOf(scope), id));
-        },
-        async spend(scope, budgetId, window) {
-            return await run(scope, budgetsRepo.budgetSpend(scopeOf(scope), budgetId, pruneUndefined(window)));
-        },
-    };
-}
-const toSubscriptionView = (subscription) => ({
-    id: subscription.id,
-    title: subscription.title,
-    amountCents: subscription.amountCents,
-    currency: subscription.currency,
-    cadence: subscription.cadence,
-    nextDueOn: subscription.nextDueOn,
-    cancelledAt: subscription.cancelledAt,
-});
-/**
- * The subscriptions sub-service (§3 / §4). Lives in `budgetsRepo` beside budgets;
- * `cancel` is the idempotent state action (a second cancel returns `null`).
- */
-function createSubscriptionService(domain) {
-    const run = (scope, op) => scopedExec(domain(), scopeOf(scope), op);
-    return {
-        async list(scope, opts) {
-            return (await run(scope, budgetsRepo.listSubscriptions(scopeOf(scope), pruneUndefined(opts)))).map(toSubscriptionView);
-        },
-        async create(scope, input) {
-            return toSubscriptionView(await run(scope, budgetsRepo.createSubscription(scopeOf(scope), input)));
-        },
-        async update(scope, id, patch) {
-            const subscription = await run(scope, budgetsRepo.updateSubscription(scopeOf(scope), id, pruneUndefined(patch)));
-            return subscription ? toSubscriptionView(subscription) : null;
-        },
-        async cancel(scope, id) {
-            const subscription = await run(scope, budgetsRepo.cancelSubscription(scopeOf(scope), id));
-            return subscription ? toSubscriptionView(subscription) : null;
-        },
-    };
-}
-//# sourceMappingURL=systemService.js.map

package/dist/server/services/systemService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"systemService.js","sourceRoot":"","sources":["../../../src/server/services/systemService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,WAAW,EAGX,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EAGpB,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAoBzC,OAAO,EAAE,uBAAuB,EAA6B,MAAM,sBAAsB,CAAC;AAe1F,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAa,EAAE,CAAC,CAAC;IAChD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;IAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,mBAAmB;IACnB,SAAS;IACT,iBAAiB;IACjB,kBAAkB;IAClB,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,OAA2C,EAA0B,EAAE;IAC9F,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAChE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEtD,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3F,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC5B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACpF,CAAC;QAED,6EAA6E;QAC7E,+DAA+D;QAC/D,QAAQ,EAAE,qBAAqB,CAAC,MAAM,CAAC;QAEvC,8EAA8E;QAC9E,sEAAsE;QACtE,0CAA0C;QAC1C,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACpC,aAAa,EAAE,yBAAyB,CAAC,MAAM,CAAC;QAEhD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI;YACzB,2EAA2E;YAC3E,uEAAuE;YACvE,wCAAwC;YACxC,IAAI,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAE5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE9C,IAAI,CAAC;gBACH,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC;oBAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE;wBAChD,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,OAAO;wBACP,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,oEAAoE;wBACpE,gDAAgD;wBAChD,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;oBAEH,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC;oBACxF,IAAI,CAAC,UAAU;wBAAE,OAAO,MAAM,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;oBAE7E,IAAI,GAAG,KAAK,YAAY;wBACtB,MAAM,IAAI,QAAQ,CAAC,6BAA6B,YAAY,aAAa,EAAE;4BACzE,IAAI,EAAE,yBAAyB;4BAC/B,MAAM,EAAE,GAAG;4BACX,QAAQ,EAAE,UAAU;4BACpB,OAAO,EAAE,EAAE,YAAY,EAAE;yBAC1B,CAAC,CAAC;oBAEL,qEAAqE;oBACrE,uCAAuC;oBACvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACvC,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBACjF,CAAC;gBACD,kDAAkD;gBAClD,MAAM,IAAI,QAAQ,CAAC,iDAAiD,EAAE;oBACpE,IAAI,EAAE,sBAAsB;oBAC5B,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,KAAK,EAC9B,QAAkB,EAClB,KAAa,EAC+D,EAAE;IAC9E,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAEnE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YACzB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChG,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,QAAkB,EAAgB,EAAE,CAAC,CAAC;IAC5D,EAAE,EAAE,QAAQ,CAAC,EAAE;IACf,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;CAC1B,CAAC,CAAC;AACH,MAAM,WAAW,GAAG,CAAC,KAAoB,EAA2B,EAAE,CAAC,CAAC;IACtE,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,OAAO,EAAE,KAAK,CAAC,OAAO;CACvB,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,CAAC,IAAoB,EAAsB,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,UAAU,EAAE,IAAI,CAAC,UAAU;IAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;CAClB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,MAA0B;IACvD,MAAM,GAAG,GAAG,CAAI,KAAgB,EAAE,EAAa,EAAc,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK;YAC/B,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK;YACnC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7F,OAAO,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE;YAC5B,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK;YAC5B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK;YAChC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE;YACzB,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU;YAC/B,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK;YAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7F,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU;YACxC,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,MAAiC,EAAqB,EAAE,CAAC,CAAC;IAC9E,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,KAAK,EAAE,MAAM,CAAC,KAAK;IACnB,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;CAClC,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,OAAmC,EAAsB,EAAE,CAAC,CAAC;IAClF,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;CAC7B,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,CAAC,KAA8B,EAAqB,EAAE,CAAC,CAAC;IAC3E,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,EAAE,EAAE,KAAK,CAAC,EAAE;CACb,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,MAA0B;IACtD,MAAM,GAAG,GAAG,CAAI,KAAgB,EAAE,EAAa,EAAc,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK;YAC7B,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK;YACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrG,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE;YAC1B,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI;YAC5B,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/G,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE;YACxB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK;YAC9B,OAAO,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI;YAC1B,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5G,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ;YAC3B,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,MAA0B,EAAc,EAAE,CAAC,CAAC;IAChE,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,KAAK,EAAE,MAAM,CAAC,KAAK;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;CAC1B,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,CAAC,KAA8B,EAAmB,EAAE,CAAC,CAAC;IAC9E,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,UAAU,EAAE,KAAK,CAAC,UAAU;IAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;IAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,IAAI,EAAE,KAAK,CAAC,IAAI;CACjB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,SAAS,mBAAmB,CAAC,MAA0B;IACrD,MAAM,GAAG,GAAG,CAAI,KAAgB,EAAE,EAAa,EAAc,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK;YACvB,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK;YAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrG,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACpB,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM;YACvC,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CACtG,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK;YACtC,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE;YACzB,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM;YACjC,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,YAAsC,EAAoB,EAAE,CAAC,CAAC;IACxF,EAAE,EAAE,YAAY,CAAC,EAAE;IACnB,KAAK,EAAE,YAAY,CAAC,KAAK;IACzB,WAAW,EAAE,YAAY,CAAC,WAAW;IACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ;IAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;IAC7B,SAAS,EAAE,YAAY,CAAC,SAAS;IACjC,WAAW,EAAE,YAAY,CAAC,WAAW;CACtC,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,yBAAyB,CAAC,MAA0B;IAC3D,MAAM,GAAG,GAAG,CAAI,KAAgB,EAAE,EAAa,EAAc,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzG,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI;YACpB,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAChG,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK;YACvB,OAAO,kBAAkB,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK;YAC3B,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjH,OAAO,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1F,OAAO,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/services/vaultReaper.d.ts

@@ -1,61 +0,0 @@
-/**
- * The stale-upload reaper (05 §A2) — the safety net the vault replacement
- * regressed.
- *
- * `plugin-media-vault/src/store.ts` carried an `expires_at` sweep. The engine
- * model's `mv_uploads` staging table shipped with the same three states and NO
- * sweep, so every upload that died between `beginUpload` and `completeUpload` —
- * a killed process, a dropped socket, a DB error after the object settled — left
- * a row `processing` forever with an object behind it that no asset references.
- * The poll route reported those uploads as still in flight, and the bytes were
- * invisible to the storage meter (law #6).
- *
- * Three properties are the whole design:
- *
- *   * **It reclaims the OBJECT first, then marks the row.** A crash between the
- *     two leaves a `processing` row the next tick retries — recoverable. The
- *     other order leaves a `failed` row whose bytes nobody will ever look for.
- *   * **The tenants are NAMED by the caller, never discovered.** Enumerating
- *     tenants means an unscoped read, which is precisely what RLS forbids under
- *     saas and what a `tenant_id` predicate exists to prevent everywhere else.
- *     `bootEngineApp` passes `[LOCAL_TENANT_ID]` under the local profile — a
- *     fact about that profile, not a guess — and a saas host passes its own.
- *   * **A tick that throws does not kill the timer.** A reaper that stops on the
- *     first transient store error is a reaper that silently stops reaping.
- */
-import type { AssetService } from '../mixins/services';
-/** How often a tick runs when the caller does not say. Hourly: this is janitorial. */
-export declare const VAULT_REAP_INTERVAL_MS: number;
-export interface VaultUploadReaperOptions {
-    /** The service whose `reapStaleUploads` does the work. */
-    readonly assets: Pick<AssetService, 'reapStaleUploads'>;
-    /**
-     * The tenants to sweep, re-read every tick so a tenant created after boot is
-     * picked up without a restart. Never discovered from the table — see the
-     * header.
-     */
-    readonly tenants: () => readonly string[] | Promise<readonly string[]>;
-    /** Milliseconds between ticks. Default {@link VAULT_REAP_INTERVAL_MS}. */
-    readonly intervalMs?: number;
-    /** Rows a tick may reclaim per tenant. Default 100 — a page, not a backlog. */
-    readonly limit?: number;
-    /** How long `processing` is allowed to last. Default `VAULT_UPLOAD_STALE_MS`. */
-    readonly olderThanMs?: number;
-    /** A tick's failure. Absent ⇒ swallowed, which is the caller's choice to make. */
-    readonly onError?: (error: unknown, tenantId: string) => void;
-    /** Injected by tests; defaults to the global timer. */
-    readonly setInterval?: (fn: () => void, ms: number) => ReturnType<typeof setInterval>;
-    readonly clearInterval?: (handle: ReturnType<typeof setInterval>) => void;
-}
-export interface VaultUploadReaper {
-    /** Run one pass now — what the timer calls, and what a test drives directly. */
-    tick(): Promise<{
-        reaped: number;
-        objectsDeleted: number;
-    }>;
-    /** Stop the timer. Idempotent. */
-    stop(): void;
-}
-/** Start the reaper. The returned handle is stopped by `bootEngineApp`'s `stop()`. */
-export declare function createVaultUploadReaper(options: VaultUploadReaperOptions): VaultUploadReaper;
-//# sourceMappingURL=vaultReaper.d.ts.map

package/dist/server/services/vaultReaper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vaultReaper.d.ts","sourceRoot":"","sources":["../../../src/server/services/vaultReaper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAa,MAAM,oBAAoB,CAAC;AAElE,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAErD,MAAM,WAAW,wBAAwB;IACvC,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACvE,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9D,uDAAuD;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,KAAK,IAAI,CAAC;CAC3E;AAED,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,IAAI,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,kCAAkC;IAClC,IAAI,IAAI,IAAI,CAAC;CACd;AAuBD,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CA4C5F"}

package/dist/server/services/vaultReaper.js

@@ -1,69 +0,0 @@
-/** How often a tick runs when the caller does not say. Hourly: this is janitorial. */
-export const VAULT_REAP_INTERVAL_MS = 60 * 60 * 1000;
-/**
- * A CallScope for a maintenance sweep. The reaper acts as the tenant's own
- * system user: it touches only that tenant's rows, and every read it drives is
- * `tenant_id`-predicated in the repository regardless.
- */
-const sweepScope = (tenantId) => ({
-    instanceId: 'vault-reaper',
-    claims: {
-        tenantId,
-        userId: 'system',
-        role: 'OWNER',
-        permissions: [],
-        privateScope: false,
-        // The sweep never presents these to a verifier — no route is involved — but
-        // the claims type is `.strict()`, and a shape that only LOOKS like a session
-        // is how a maintenance path drifts from the real one.
-        exp: Math.floor(Date.now() / 1000) + 60,
-        jti: `vault-reaper:${tenantId}`,
-    },
-});
-/** Start the reaper. The returned handle is stopped by `bootEngineApp`'s `stop()`. */
-export function createVaultUploadReaper(options) {
-    const start = options.setInterval ?? setInterval;
-    const stopTimer = options.clearInterval ?? clearInterval;
-    let running = false;
-    const tick = async () => {
-        const total = { reaped: 0, objectsDeleted: 0 };
-        // A slow tick must not overlap the next one: two passes over the same page
-        // would each try to delete the same object and each count it.
-        if (running)
-            return total;
-        running = true;
-        try {
-            for (const tenantId of await options.tenants()) {
-                try {
-                    const result = await options.assets.reapStaleUploads(sweepScope(tenantId), {
-                        ...(options.olderThanMs === undefined ? {} : { olderThanMs: options.olderThanMs }),
-                        ...(options.limit === undefined ? {} : { limit: options.limit }),
-                    });
-                    total.reaped += result.reaped;
-                    total.objectsDeleted += result.objectsDeleted;
-                }
-                catch (error) {
-                    // One tenant's failure is not the sweep's failure.
-                    options.onError?.(error, tenantId);
-                }
-            }
-        }
-        finally {
-            running = false;
-        }
-        return total;
-    };
-    const handle = start(() => {
-        void tick();
-    }, options.intervalMs ?? VAULT_REAP_INTERVAL_MS);
-    // A janitor must never hold the process open — if the app is otherwise idle
-    // and shutting down, the sweep is not a reason to keep the event loop alive.
-    handle.unref?.();
-    return {
-        tick,
-        stop() {
-            stopTimer(handle);
-        },
-    };
-}
-//# sourceMappingURL=vaultReaper.js.map

package/dist/server/services/vaultReaper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vaultReaper.js","sourceRoot":"","sources":["../../../src/server/services/vaultReaper.ts"],"names":[],"mappings":"AA2BA,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA+BrD;;;;GAIG;AACH,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAa,EAAE,CAAC,CAAC;IACnD,UAAU,EAAE,cAAc;IAC1B,MAAM,EAAE;QACN,QAAQ;QACR,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,4EAA4E;QAC5E,6EAA6E;QAC7E,sDAAsD;QACtD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;QACvC,GAAG,EAAE,gBAAgB,QAAQ,EAAE;KAChC;CACF,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,IAAI,GAAG,KAAK,IAAyD,EAAE;QAC3E,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,8DAA8D;QAC9D,IAAI,OAAO;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,KAAK,MAAM,QAAQ,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;wBACzE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;wBAClF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;qBACjE,CAAC,CAAC;oBACH,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;oBAC9B,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC;gBAChD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,mDAAmD;oBACnD,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE;QACxB,KAAK,IAAI,EAAE,CAAC;IACd,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,sBAAsB,CAAC,CAAC;IACjD,4EAA4E;IAC5E,6EAA6E;IAC5E,MAAiC,CAAC,KAAK,EAAE,EAAE,CAAC;IAE7C,OAAO;QACL,IAAI;QACJ,IAAI;YACF,SAAS,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/sharing/index.d.ts

@@ -1,19 +0,0 @@
-/**
- * `cursedbelt/server/sharing` — the fleet's ONE per-record sharing/access model.
- *
- * The vocabulary is `cursedbelt/sharing` (pure), the panel is
- * `cursedbelt/react/sharing`, and this is the storage + resolver half. Read
- * `./store.ts`'s header for the five properties it guarantees and `./sql.ts` for
- * why the row filter is a SQL fragment rather than a list of ids.
- */
-export { SHARE_MIGRATIONS } from "./migrations";
-export { SHARE_EVENTS_TABLE, SHARE_GRANTS_TABLE, SHARE_GROUPS_TABLE, SHARE_GROUP_MEMBERS_TABLE, } from "./migrations";
-export { GROUP_SUBJECT_PREFIX, mountShareRoutes, parseSubjectParam, subjectParam, } from "./router";
-export type { ShareRouterOptions, ShareRouterViewer, ShareRoutesPayload } from "./router";
-export { sharedResourceSql, sqlColumn, sqlLiteral } from "./sql";
-export type { SharedResourceSqlOptions } from "./sql";
-export { createShareStore, group, user } from "./store";
-export type { GrantInput, RevokeInput, ShareEventQuery, ShareStore, ShareStoreOptions, ShareTarget, } from "./store";
-export { accessMeets, describeAccess, describeShareEvent, isShareAccess, isShareLevel, isShareSubjectType, levelsMeeting, normalizeSubject, normalizeSubjectId, resolveAccess, resourceKey, sameResource, sameSubject, SHARE_ACTIONS, strongerAccess, } from "../../core/sharing/model";
-export type { ShareAccess, ShareAction, ShareEvent, ShareGrant, ShareGroup, ShareGroupMember, ShareLevel, ShareResource, ShareSubject, ShareSubjectType, ShareViewer, } from "../../core/sharing/model";
-//# sourceMappingURL=index.d.ts.map

package/dist/server/sharing/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/sharing/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACZ,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACjE,YAAY,EAAE,wBAAwB,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AACxD,YAAY,EACX,UAAU,EACV,WAAW,EACX,eAAe,EACf,UAAU,EACV,iBAAiB,EACjB,WAAW,GACX,MAAM,SAAS,CAAC;AAGjB,OAAO,EACN,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,EACb,cAAc,GACd,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACX,WAAW,EACX,WAAW,EACX,UAAU,EACV,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,WAAW,GACX,MAAM,0BAA0B,CAAC"}

package/dist/server/sharing/index.js

@@ -1,17 +0,0 @@
-/**
- * `cursedbelt/server/sharing` — the fleet's ONE per-record sharing/access model.
- *
- * The vocabulary is `cursedbelt/sharing` (pure), the panel is
- * `cursedbelt/react/sharing`, and this is the storage + resolver half. Read
- * `./store.ts`'s header for the five properties it guarantees and `./sql.ts` for
- * why the row filter is a SQL fragment rather than a list of ids.
- */
-export { SHARE_MIGRATIONS } from "./migrations";
-export { SHARE_EVENTS_TABLE, SHARE_GRANTS_TABLE, SHARE_GROUPS_TABLE, SHARE_GROUP_MEMBERS_TABLE, } from "./migrations";
-export { GROUP_SUBJECT_PREFIX, mountShareRoutes, parseSubjectParam, subjectParam, } from "./router";
-export { sharedResourceSql, sqlColumn, sqlLiteral } from "./sql";
-export { createShareStore, group, user } from "./store";
-// Re-exported so a server consumer needs ONE import for the whole contract; the
-// pure entry (`cursedbelt/sharing`) stays available for a browser or a test.
-export { accessMeets, describeAccess, describeShareEvent, isShareAccess, isShareLevel, isShareSubjectType, levelsMeeting, normalizeSubject, normalizeSubjectId, resolveAccess, resourceKey, sameResource, sameSubject, SHARE_ACTIONS, strongerAccess, } from "../../core/sharing/model";
-//# sourceMappingURL=index.js.map

package/dist/server/sharing/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/sharing/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,GACZ,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEjE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AASxD,gFAAgF;AAChF,6EAA6E;AAC7E,OAAO,EACN,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,EACb,cAAc,GACd,MAAM,0BAA0B,CAAC"}

package/dist/server/sharing/migrations.d.ts

@@ -1,7 +0,0 @@
-import type { Migration } from "../migration/types";
-export declare const SHARE_GRANTS_TABLE = "share_grants";
-export declare const SHARE_GROUPS_TABLE = "share_groups";
-export declare const SHARE_GROUP_MEMBERS_TABLE = "share_group_members";
-export declare const SHARE_EVENTS_TABLE = "share_events";
-export declare const SHARE_MIGRATIONS: readonly Migration[];
-//# sourceMappingURL=migrations.d.ts.map

package/dist/server/sharing/migrations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/server/sharing/migrations.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AACjD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AACjD,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAC/D,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAEjD,eAAO,MAAM,gBAAgB,EAAE,SAAS,SAAS,EAuFhD,CAAC"}