easy-ping 0.3.0 → 0.4.0

package/dist/chunk-DG3ZL5NP.js

@@ -0,0 +1,315 @@
+import { encodeBase64Url, decodeBase64UrlBytes, decodeBase64Url } from './chunk-PTGHMCCG.js';
+
+// src/core/tokens.ts
+var encoder = new TextEncoder();
+var KEY_SALT = encoder.encode("easy-ping/tokens/v1");
+async function hmacKey(secret, purpose) {
+  const master = await crypto.subtle.importKey("raw", encoder.encode(secret), "HKDF", false, [
+    "deriveKey"
+  ]);
+  return crypto.subtle.deriveKey(
+    { name: "HKDF", hash: "SHA-256", salt: KEY_SALT, info: encoder.encode(purpose) },
+    master,
+    { name: "HMAC", hash: "SHA-256", length: 256 },
+    false,
+    ["sign", "verify"]
+  );
+}
+async function signToken(secret, claims, now = /* @__PURE__ */ new Date()) {
+  const stamped = { ...claims, iat: claims.iat ?? Math.floor(now.getTime() / 1e3) };
+  const body = encodeBase64Url(JSON.stringify(stamped));
+  const signature = await crypto.subtle.sign(
+    "HMAC",
+    await hmacKey(secret, claims.purpose),
+    encoder.encode(body)
+  );
+  return `${body}.${encodeBase64Url(new Uint8Array(signature))}`;
+}
+async function verifyToken(secret, token, purpose, now = /* @__PURE__ */ new Date()) {
+  const separator = token.lastIndexOf(".");
+  if (separator <= 0) return null;
+  const body = token.slice(0, separator);
+  const signature = decodeBase64UrlBytes(token.slice(separator + 1));
+  if (!signature) return null;
+  const valid = await crypto.subtle.verify(
+    "HMAC",
+    await hmacKey(secret, purpose),
+    signature,
+    encoder.encode(body)
+  );
+  if (!valid) return null;
+  const decoded = decodeBase64Url(body);
+  if (!decoded) return null;
+  let claims;
+  try {
+    claims = JSON.parse(decoded);
+  } catch {
+    return null;
+  }
+  if (typeof claims?.uid !== "string" || typeof claims.exp !== "number") return null;
+  if (claims.purpose !== purpose) return null;
+  if (claims.exp * 1e3 <= now.getTime()) return null;
+  if (claims.iat !== void 0 && typeof claims.iat !== "number") return null;
+  if (claims.data !== void 0) {
+    if (typeof claims.data !== "object" || claims.data === null || Array.isArray(claims.data)) {
+      return null;
+    }
+    for (const value of Object.values(claims.data)) {
+      if (typeof value !== "string") return null;
+    }
+  }
+  return claims;
+}
+var DEFAULT_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;
+var MAX_TOKEN_TTL_SECONDS = 90 * 24 * 60 * 60;
+var expiresIn = (seconds, now = /* @__PURE__ */ new Date()) => Math.floor(now.getTime() / 1e3) + Math.min(Math.max(seconds, 0), MAX_TOKEN_TTL_SECONDS);
+function createScopedSigner(secret, pluginId, purposes, onViolation) {
+  return (request) => {
+    if (!purposes.has(request.purpose)) {
+      throw onViolation(
+        `plugin "${pluginId}" tried to sign a token for purpose "${request.purpose}", which none of its signed routes declare.`
+      );
+    }
+    return signToken(secret, {
+      uid: request.uid,
+      purpose: request.purpose,
+      exp: expiresIn(request.ttlSeconds ?? DEFAULT_TOKEN_TTL_SECONDS),
+      ...request.data ? { data: request.data } : {}
+    });
+  };
+}
+
+// src/core/handler.ts
+var MAX_BODY_BYTES = 64 * 1024;
+var MAX_READ_IDS = 200;
+var PRIVATE_HEADERS = {
+  "cache-control": "private, no-store",
+  "x-content-type-options": "nosniff"
+};
+var json = (body, status = 200) => new Response(JSON.stringify(body), {
+  status,
+  headers: { "content-type": "application/json", ...PRIVATE_HEADERS }
+});
+var empty = (status) => new Response(null, { status, headers: PRIVATE_HEADERS });
+function harden(response) {
+  const headers = new Headers(response.headers);
+  for (const [name, value] of Object.entries(PRIVATE_HEADERS)) {
+    if (!headers.has(name)) headers.set(name, value);
+  }
+  return new Response(response.body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers
+  });
+}
+var encoder2 = new TextEncoder();
+async function timingSafeEqual(a, b) {
+  const [left, right] = await Promise.all(
+    [a, b].map(
+      async (value) => new Uint8Array(await crypto.subtle.digest("SHA-256", encoder2.encode(value)))
+    )
+  );
+  let diff = 0;
+  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);
+  return diff === 0;
+}
+function routePath(url, basePath) {
+  const { pathname } = url;
+  if (pathname === basePath) return "/";
+  if (pathname.startsWith(`${basePath}/`)) return pathname.slice(basePath.length);
+  return pathname;
+}
+async function readJsonBody(request, maxBytes = MAX_BODY_BYTES) {
+  const tooLarge = () => ({ error: json({ error: `body exceeds ${maxBytes} bytes` }, 413) });
+  const declared = Number(request.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > maxBytes) return tooLarge();
+  if (!request.body) return { body: {} };
+  const reader = request.body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > maxBytes) {
+      await reader.cancel();
+      return tooLarge();
+    }
+    chunks.push(value);
+  }
+  const bytes = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  const text = new TextDecoder().decode(bytes);
+  if (text.trim() === "") return { body: {} };
+  try {
+    const parsed = JSON.parse(text);
+    return {
+      body: parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {}
+    };
+  } catch {
+    return { error: json({ error: "body must be a JSON object" }, 400) };
+  }
+}
+var isJsonContentType = (request) => /^application\/json\s*(;|$)/i.test((request.headers.get("content-type") ?? "").trim());
+function originAllowed(origin, url, request, trusted) {
+  let host;
+  try {
+    host = new URL(origin).host;
+  } catch {
+    return false;
+  }
+  if (host === url.host) return true;
+  const forwarded = request.headers.get("x-forwarded-host")?.split(",")[0]?.trim();
+  if (forwarded && host === forwarded) return true;
+  return trusted.some(
+    (entry) => entry.startsWith("*.") ? host.endsWith(entry.slice(1)) : entry === origin
+  );
+}
+function csrfCheck(request, url, trusted) {
+  if (!isJsonContentType(request)) {
+    return json({ error: "content-type must be application/json" }, 415);
+  }
+  const origin = request.headers.get("origin");
+  if (origin === null) return null;
+  if (origin === "null" || !originAllowed(origin, url, request, trusted)) return empty(403);
+  return null;
+}
+function createHandler(deps) {
+  const trustedOrigins = deps.trustedOrigins ?? [];
+  const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;
+  async function resolveUserId(request) {
+    try {
+      return await deps.session.getUserId(request);
+    } catch (error) {
+      deps.logger.error("session.getUserId threw", { error });
+      return "error";
+    }
+  }
+  async function bearerMatches(request, secret) {
+    if (!secret) return false;
+    const header = request.headers.get("authorization") ?? "";
+    const presented = header.startsWith("Bearer ") ? header.slice(7) : header;
+    return timingSafeEqual(presented, secret);
+  }
+  async function handleCron(request) {
+    if (!deps.cronSecret) return empty(404);
+    if (!await bearerMatches(request, deps.cronSecret)) return empty(401);
+    const result = await deps.runner.drain(
+      deps.cronMaxSweeps === void 0 ? {} : { maxSweeps: deps.cronMaxSweeps }
+    );
+    return json(result);
+  }
+  async function handlePluginRoute(route2, request, url) {
+    if (route2.scope.type === "user") {
+      if (request.method === "POST") {
+        const rejected = csrfCheck(request, url, trustedOrigins);
+        if (rejected) return rejected;
+      }
+      const userId = await resolveUserId(request);
+      if (userId === "error") return empty(500);
+      if (userId === null) return empty(401);
+      return harden(await route2.handler({ request, userId, claims: null, params: {} }));
+    }
+    if (route2.scope.type === "machine") {
+      if (!deps.machineSecret) return empty(404);
+      if (!await bearerMatches(request, deps.machineSecret)) return empty(401);
+      return harden(await route2.handler({ request, userId: null, claims: null, params: {} }));
+    }
+    if (route2.scope.type === "signed") {
+      const token = url.searchParams.get("token") ?? (request.headers.get("authorization") ?? "").replace(/^Bearer /, "");
+      const claims = await verifyToken(deps.secret, token, route2.scope.purpose);
+      if (!claims) return empty(400);
+      return harden(await route2.handler({ request, userId: claims.uid, claims, params: {} }));
+    }
+    return harden(await route2.handler({ request, userId: null, claims: null, params: {} }));
+  }
+  async function route(request) {
+    const url = new URL(request.url);
+    const path = routePath(url, deps.basePath);
+    if (deps.onRequest) {
+      const early = await deps.onRequest(request);
+      if (early instanceof Response) return early;
+    }
+    if (deps.rateLimit) {
+      const limited = deps.rateLimit(request);
+      if (limited) return limited;
+    }
+    if (path === "/cron") {
+      if (request.method !== "POST") return empty(405);
+      return handleCron(request);
+    }
+    const pluginRoute = deps.pluginRoutes?.find(
+      (candidate) => candidate.path === path && candidate.method === request.method
+    );
+    if (pluginRoute) return handlePluginRoute(pluginRoute, request, url);
+    if (request.method === "POST") {
+      const rejected = csrfCheck(request, url, trustedOrigins);
+      if (rejected) return rejected;
+    }
+    const userId = await resolveUserId(request);
+    if (userId === "error") return empty(500);
+    if (userId === null) return empty(401);
+    if (request.method === "GET" && path === "/") {
+      const limitParam = Number(url.searchParams.get("limit") ?? 20);
+      const limit = Number.isFinite(limitParam) ? Math.min(Math.max(limitParam, 1), 100) : 20;
+      const cursor = url.searchParams.get("cursor");
+      const [page, unseenCount] = await Promise.all([
+        deps.adapter.listNotifications({
+          userId,
+          limit,
+          ...cursor ? { cursor } : {},
+          ...url.searchParams.get("unreadOnly") === "true" ? { unreadOnly: true } : {}
+        }),
+        cursor ? Promise.resolve(null) : deps.adapter.countUnseen(userId)
+      ]);
+      return json(unseenCount === null ? page : { ...page, unseenCount });
+    }
+    if (request.method === "GET" && path === "/count") {
+      return json({ unseen: await deps.adapter.countUnseen(userId) });
+    }
+    if (request.method === "POST" && path === "/seen") {
+      const parsed = await readJsonBody(request, maxBodyBytes);
+      if ("error" in parsed) return parsed.error;
+      const before = typeof parsed.body.before === "string" ? new Date(parsed.body.before) : null;
+      const cutoff = before && !Number.isNaN(before.getTime()) ? new Date(before.getTime() + 1) : /* @__PURE__ */ new Date();
+      await deps.adapter.markSeen(userId, cutoff);
+      return json({ ok: true });
+    }
+    if (request.method === "POST" && path === "/read") {
+      const parsed = await readJsonBody(request, maxBodyBytes);
+      if ("error" in parsed) return parsed.error;
+      const ids = Array.isArray(parsed.body.ids) ? parsed.body.ids.filter((id) => typeof id === "string") : [];
+      if (ids.length === 0) return json({ error: "ids must be a non-empty string array" }, 400);
+      if (ids.length > MAX_READ_IDS) {
+        return json({ error: `at most ${MAX_READ_IDS} ids per request` }, 400);
+      }
+      const updated = await deps.adapter.markRead(userId, ids);
+      return updated === 0 ? empty(404) : json({ updated });
+    }
+    if (request.method === "POST" && path === "/read-all") {
+      return json({ updated: await deps.adapter.markAllRead(userId) });
+    }
+    return empty(404);
+  }
+  async function handle(request) {
+    try {
+      return await route(request);
+    } catch (error) {
+      deps.logger.error("request failed", { url: request.url, error });
+      return empty(500);
+    }
+  }
+  return {
+    handle,
+    GET: handle,
+    POST: handle
+  };
+}
+
+export { DEFAULT_TOKEN_TTL_SECONDS, MAX_BODY_BYTES, MAX_TOKEN_TTL_SECONDS, createHandler, createScopedSigner, expiresIn, readJsonBody, signToken, verifyToken };
+//# sourceMappingURL=chunk-DG3ZL5NP.js.map
+//# sourceMappingURL=chunk-DG3ZL5NP.js.map

package/dist/chunk-DG3ZL5NP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/tokens.ts","../src/core/handler.ts"],"names":["encoder","route"],"mappings":";;;AAeA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAGhC,IAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,CAAO,qBAAqB,CAAA;AAOrD,eAAe,OAAA,CAAQ,QAAgB,OAAA,EAAqC;AAC1E,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,EAAG,MAAA,EAAQ,KAAA,EAAO;AAAA,IACzF;AAAA,GACD,CAAA;AACD,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAE;AAAA,IAC/E,MAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,QAAQ,GAAA,EAAI;AAAA,IAC7C,KAAA;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,GACnB;AACF;AAEA,eAAsB,UACpB,MAAA,EACA,MAAA,EACA,GAAA,mBAAY,IAAI,MAAK,EACJ;AACjB,EAAA,MAAM,OAAA,GAAuB,EAAE,GAAG,MAAA,EAAQ,GAAA,EAAK,MAAA,CAAO,GAAA,IAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,EAAQ,GAAI,GAAI,CAAA,EAAE;AAC9F,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACpD,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA;AAAA,IACpC,MAAA;AAAA,IACA,MAAM,OAAA,CAAQ,MAAA,EAAQ,MAAA,CAAO,OAAO,CAAA;AAAA,IACpC,OAAA,CAAQ,OAAO,IAAI;AAAA,GACrB;AACA,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,eAAA,CAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AAC9D;AAGA,eAAsB,YACpB,MAAA,EACA,KAAA,EACA,SACA,GAAA,mBAAY,IAAI,MAAK,EACQ;AAC7B,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,WAAA,CAAY,GAAG,CAAA;AACvC,EAAA,IAAI,SAAA,IAAa,GAAG,OAAO,IAAA;AAE3B,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,SAAS,CAAA;AACrC,EAAA,MAAM,YAAY,oBAAA,CAAqB,KAAA,CAAM,KAAA,CAAM,SAAA,GAAY,CAAC,CAAC,CAAA;AACjE,EAAA,IAAI,CAAC,WAAW,OAAO,IAAA;AAKvB,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA;AAAA,IAChC,MAAA;AAAA,IACA,MAAM,OAAA,CAAQ,MAAA,EAAQ,OAAO,CAAA;AAAA,IAC7B,SAAA;AAAA,IACA,OAAA,CAAQ,OAAO,IAAI;AAAA,GACrB;AACA,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAEnB,EAAA,MAAM,OAAA,GAAU,gBAAgB,IAAI,CAAA;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,QAAQ,GAAA,KAAQ,QAAA,IAAY,OAAO,MAAA,CAAO,GAAA,KAAQ,UAAU,OAAO,IAAA;AAC9E,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,OAAA,EAAS,OAAO,IAAA;AACvC,EAAA,IAAI,OAAO,GAAA,GAAM,GAAA,IAAQ,GAAA,CAAI,OAAA,IAAW,OAAO,IAAA;AAC/C,EAAA,IAAI,OAAO,GAAA,KAAQ,MAAA,IAAa,OAAO,MAAA,CAAO,GAAA,KAAQ,UAAU,OAAO,IAAA;AAEvE,EAAA,IAAI,MAAA,CAAO,SAAS,MAAA,EAAW;AAC7B,IAAA,IAAI,OAAO,MAAA,CAAO,IAAA,KAAS,QAAA,IAAY,MAAA,CAAO,IAAA,KAAS,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAA,EAAG;AACzF,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,EAAG;AAC9C,MAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,IAAA;AAAA,IACxC;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAEO,IAAM,yBAAA,GAA4B,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK;AAEjD,IAAM,qBAAA,GAAwB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK;AAE7C,IAAM,SAAA,GAAY,CAAC,OAAA,EAAiB,GAAA,uBAAgB,IAAA,EAAK,KAC9D,KAAK,KAAA,CAAM,GAAA,CAAI,SAAQ,GAAI,GAAI,IAAI,IAAA,CAAK,GAAA,CAAI,KAAK,GAAA,CAAI,OAAA,EAAS,CAAC,CAAA,EAAG,qBAAqB;AAclF,SAAS,kBAAA,CACd,MAAA,EACA,QAAA,EACA,QAAA,EACA,WAAA,EAC2C;AAC3C,EAAA,OAAO,CAAC,OAAA,KAAY;AAClB,IAAA,IAAI,CAAC,QAAA,CAAS,GAAA,CAAI,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClC,MAAA,MAAM,WAAA;AAAA,QACJ,CAAA,QAAA,EAAW,QAAQ,CAAA,qCAAA,EAAwC,OAAA,CAAQ,OAAO,CAAA,2CAAA;AAAA,OAE5E;AAAA,IACF;AACA,IAAA,OAAO,UAAU,MAAA,EAAQ;AAAA,MACvB,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,GAAA,EAAK,SAAA,CAAU,OAAA,CAAQ,UAAA,IAAc,yBAAyB,CAAA;AAAA,MAC9D,GAAI,QAAQ,IAAA,GAAO,EAAE,MAAM,OAAA,CAAQ,IAAA,KAAS;AAAC,KAC9C,CAAA;AAAA,EACH,CAAA;AACF;;;AClHO,IAAM,iBAAiB,EAAA,GAAK;AAEnC,IAAM,YAAA,GAAe,GAAA;AAIrB,IAAM,eAAA,GAA0C;AAAA,EAC9C,eAAA,EAAiB,mBAAA;AAAA,EACjB,wBAAA,EAA0B;AAC5B,CAAA;AAEA,IAAM,IAAA,GAAO,CAAC,IAAA,EAAe,MAAA,GAAS,GAAA,KACpC,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG;AAAA,EACjC,MAAA;AAAA,EACA,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,GAAG,eAAA;AACpD,CAAC,CAAA;AAEH,IAAM,KAAA,GAAQ,CAAC,MAAA,KAAmB,IAAI,QAAA,CAAS,MAAM,EAAE,MAAA,EAAQ,OAAA,EAAS,eAAA,EAAiB,CAAA;AAGzF,SAAS,OAAO,QAAA,EAA8B;AAC5C,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AAC5C,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,eAAe,CAAA,EAAG;AAC3D,IAAA,IAAI,CAAC,QAAQ,GAAA,CAAI,IAAI,GAAG,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,EACjD;AACA,EAAA,OAAO,IAAI,QAAA,CAAS,QAAA,CAAS,IAAA,EAAM;AAAA,IACjC,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB;AAAA,GACD,CAAA;AACH;AAEA,IAAMA,QAAAA,GAAU,IAAI,WAAA,EAAY;AAOhC,eAAe,eAAA,CAAgB,GAAW,CAAA,EAA6B;AACrE,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA;AAAA,IAClC,CAAC,CAAA,EAAG,CAAC,CAAA,CAAE,GAAA;AAAA,MACL,OAAO,KAAA,KAAU,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,SAAA,EAAWA,QAAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAC;AAAA;AAC9F,GACF;AACA,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,IAAK,CAAA,EAAG,IAAA,IAAA,CAAS,IAAA,GAAO,CAAC,CAAA,IAAK,CAAA,KAAM,KAAA,GAAQ,CAAC,CAAA,IAAK,CAAA,CAAA;AAC1E,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAGA,SAAS,SAAA,CAAU,KAAU,QAAA,EAA0B;AACrD,EAAA,MAAM,EAAE,UAAS,GAAI,GAAA;AACrB,EAAA,IAAI,QAAA,KAAa,UAAU,OAAO,GAAA;AAClC,EAAA,IAAI,QAAA,CAAS,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAA,CAAA,CAAG,GAAG,OAAO,QAAA,CAAS,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AAC9E,EAAA,OAAO,QAAA;AACT;AAUA,eAAsB,YAAA,CACpB,OAAA,EACA,QAAA,GAAmB,cAAA,EACA;AACnB,EAAA,MAAM,QAAA,GAAW,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,aAAA,EAAgB,QAAQ,CAAA,MAAA,CAAA,EAAS,EAAG,GAAG,CAAA,EAAE,CAAA;AAExF,EAAA,MAAM,WAAW,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAC,CAAA;AAC7D,EAAA,IAAI,OAAO,QAAA,CAAS,QAAQ,KAAK,QAAA,GAAW,QAAA,SAAiB,QAAA,EAAS;AACtE,EAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,SAAa,EAAE,IAAA,EAAM,EAAC,EAAE;AAErC,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAU;AACtC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,WAAS;AACP,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,KAAA,IAAS,KAAA,CAAM,UAAA;AACf,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,MAAM,OAAO,MAAA,EAAO;AACpB,MAAA,OAAO,QAAA,EAAS;AAAA,IAClB;AACA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,KAAK,CAAA;AAClC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,KAAA,CAAM,GAAA,CAAI,OAAO,MAAM,CAAA;AACvB,IAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAAA,EAClB;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,MAAK,KAAM,EAAA,SAAW,EAAE,IAAA,EAAM,EAAC,EAAE;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACvC,IAAA,OAAO;AAAA,MACL,IAAA,EACE,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GACxD,MAAA,GACD;AAAC,KACT;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,OAAO,IAAA,CAAK,EAAE,OAAO,4BAAA,EAA6B,EAAG,GAAG,CAAA,EAAE;AAAA,EACrE;AACF;AAEA,IAAM,iBAAA,GAAoB,CAAC,OAAA,KACzB,6BAAA,CAA8B,IAAA,CAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,EAAA,EAAI,IAAA,EAAM,CAAA;AAEvF,SAAS,aAAA,CAAc,MAAA,EAAgB,GAAA,EAAU,OAAA,EAAkB,OAAA,EAA4B;AAC7F,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,IAAA,KAAS,GAAA,CAAI,IAAA,EAAM,OAAO,IAAA;AAE9B,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA,EAAK;AAC/E,EAAA,IAAI,SAAA,IAAa,IAAA,KAAS,SAAA,EAAW,OAAO,IAAA;AAE5C,EAAA,OAAO,OAAA,CAAQ,IAAA;AAAA,IAAK,CAAC,KAAA,KACnB,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,GAAI,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,CAAC,CAAC,IAAI,KAAA,KAAU;AAAA,GACrE;AACF;AAQA,SAAS,SAAA,CAAU,OAAA,EAAkB,GAAA,EAAU,OAAA,EAA6C;AAC1F,EAAA,IAAI,CAAC,iBAAA,CAAkB,OAAO,CAAA,EAAG;AAC/B,IAAA,OAAO,IAAA,CAAK,EAAE,KAAA,EAAO,uCAAA,IAA2C,GAAG,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAC3C,EAAA,IAAI,MAAA,KAAW,MAAM,OAAO,IAAA;AAC5B,EAAA,IAAI,MAAA,KAAW,MAAA,IAAU,CAAC,aAAA,CAAc,MAAA,EAAQ,GAAA,EAAK,OAAA,EAAS,OAAO,CAAA,EAAG,OAAO,KAAA,CAAM,GAAG,CAAA;AAExF,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,cAAc,IAAA,EAAmB;AAC/C,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,cAAA,IAAkB,EAAC;AAC/C,EAAA,MAAM,YAAA,GAAe,KAAK,YAAA,IAAgB,cAAA;AAE1C,EAAA,eAAe,cAAc,OAAA,EAAoD;AAC/E,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,SAAA,CAAU,OAAO,CAAA;AAAA,IAC7C,SAAS,KAAA,EAAO;AAGd,MAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,yBAAA,EAA2B,EAAE,OAAO,CAAA;AACtD,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,eAAe,aAAA,CAAc,SAAkB,MAAA,EAA8C;AAC3F,IAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AACpB,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK,EAAA;AACvD,IAAA,MAAM,SAAA,GAAY,OAAO,UAAA,CAAW,SAAS,IAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA;AACnE,IAAA,OAAO,eAAA,CAAgB,WAAW,MAAM,CAAA;AAAA,EAC1C;AAEA,EAAA,eAAe,WAAW,OAAA,EAAqC;AAC7D,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,EAAY,OAAO,MAAM,GAAG,CAAA;AACtC,IAAA,IAAI,CAAE,MAAM,aAAA,CAAc,OAAA,EAAS,KAAK,UAAU,CAAA,EAAI,OAAO,KAAA,CAAM,GAAG,CAAA;AAItE,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MAC/B,IAAA,CAAK,kBAAkB,MAAA,GAAY,KAAK,EAAE,SAAA,EAAW,KAAK,aAAA;AAAc,KAC1E;AACA,IAAA,OAAO,KAAK,MAAM,CAAA;AAAA,EACpB;AAOA,EAAA,eAAe,iBAAA,CACbC,MAAAA,EACA,OAAA,EACA,GAAA,EACmB;AACnB,IAAA,IAAIA,MAAAA,CAAM,KAAA,CAAM,IAAA,KAAS,MAAA,EAAQ;AAC/B,MAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAQ;AAC7B,QAAA,MAAM,QAAA,GAAW,SAAA,CAAU,OAAA,EAAS,GAAA,EAAK,cAAc,CAAA;AACvD,QAAA,IAAI,UAAU,OAAO,QAAA;AAAA,MACvB;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,OAAO,CAAA;AAC1C,MAAA,IAAI,MAAA,KAAW,OAAA,EAAS,OAAO,KAAA,CAAM,GAAG,CAAA;AACxC,MAAA,IAAI,MAAA,KAAW,IAAA,EAAM,OAAO,KAAA,CAAM,GAAG,CAAA;AACrC,MAAA,OAAO,MAAA,CAAO,MAAMA,MAAAA,CAAM,OAAA,CAAQ,EAAE,OAAA,EAAS,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,EAAC,EAAG,CAAC,CAAA;AAAA,IAClF;AAEA,IAAA,IAAIA,MAAAA,CAAM,KAAA,CAAM,IAAA,KAAS,SAAA,EAAW;AAClC,MAAA,IAAI,CAAC,IAAA,CAAK,aAAA,EAAe,OAAO,MAAM,GAAG,CAAA;AACzC,MAAA,IAAI,CAAE,MAAM,aAAA,CAAc,OAAA,EAAS,KAAK,aAAa,CAAA,EAAI,OAAO,KAAA,CAAM,GAAG,CAAA;AACzE,MAAA,OAAO,MAAA,CAAO,MAAMA,MAAAA,CAAM,OAAA,CAAQ,EAAE,OAAA,EAAS,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,EAAC,EAAG,CAAC,CAAA;AAAA,IACxF;AAEA,IAAA,IAAIA,MAAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,EAAU;AACjC,MAAA,MAAM,KAAA,GACJ,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA,IAAA,CAC3B,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK,EAAA,EAAI,OAAA,CAAQ,YAAY,EAAE,CAAA;AAErE,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAA,EAAOA,MAAAA,CAAM,MAAM,OAAO,CAAA;AAGxE,MAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,KAAA,CAAM,GAAG,CAAA;AAE7B,MAAA,OAAO,MAAA,CAAO,MAAMA,MAAAA,CAAM,OAAA,CAAQ,EAAE,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,EAAC,EAAG,CAAC,CAAA;AAAA,IACxF;AAEA,IAAA,OAAO,MAAA,CAAO,MAAMA,MAAAA,CAAM,OAAA,CAAQ,EAAE,OAAA,EAAS,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,EAAC,EAAG,CAAC,CAAA;AAAA,EACxF;AAEA,EAAA,eAAe,MAAM,OAAA,EAAqC;AACxD,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,SAAA,CAAU,GAAA,EAAK,IAAA,CAAK,QAAQ,CAAA;AAEzC,IAAA,IAAI,KAAK,SAAA,EAAW;AAClB,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAC1C,MAAA,IAAI,KAAA,YAAiB,UAAU,OAAO,KAAA;AAAA,IACxC;AAEA,IAAA,IAAI,KAAK,SAAA,EAAW;AAClB,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AACtC,MAAA,IAAI,SAAS,OAAO,OAAA;AAAA,IACtB;AAEA,IAAA,IAAI,SAAS,OAAA,EAAS;AACpB,MAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,EAAQ,OAAO,MAAM,GAAG,CAAA;AAC/C,MAAA,OAAO,WAAW,OAAO,CAAA;AAAA,IAC3B;AAEA,IAAA,MAAM,WAAA,GAAc,KAAK,YAAA,EAAc,IAAA;AAAA,MACrC,CAAC,SAAA,KAAc,SAAA,CAAU,SAAS,IAAA,IAAQ,SAAA,CAAU,WAAW,OAAA,CAAQ;AAAA,KACzE;AACA,IAAA,IAAI,WAAA,EAAa,OAAO,iBAAA,CAAkB,WAAA,EAAa,SAAS,GAAG,CAAA;AAEnE,IAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAQ;AAC7B,MAAA,MAAM,QAAA,GAAW,SAAA,CAAU,OAAA,EAAS,GAAA,EAAK,cAAc,CAAA;AACvD,MAAA,IAAI,UAAU,OAAO,QAAA;AAAA,IACvB;AAEA,IAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,OAAO,CAAA;AAC1C,IAAA,IAAI,MAAA,KAAW,OAAA,EAAS,OAAO,KAAA,CAAM,GAAG,CAAA;AACxC,IAAA,IAAI,MAAA,KAAW,IAAA,EAAM,OAAO,KAAA,CAAM,GAAG,CAAA;AAErC,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,IAAA,KAAS,GAAA,EAAK;AAC5C,MAAA,MAAM,aAAa,MAAA,CAAO,GAAA,CAAI,aAAa,GAAA,CAAI,OAAO,KAAK,EAAE,CAAA;AAC7D,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,QAAA,CAAS,UAAU,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,UAAA,EAAY,CAAC,CAAA,EAAG,GAAG,CAAA,GAAI,EAAA;AACrF,MAAA,MAAM,MAAA,GAAS,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA;AAK5C,MAAA,MAAM,CAAC,IAAA,EAAM,WAAW,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,QAC5C,IAAA,CAAK,QAAQ,iBAAA,CAAkB;AAAA,UAC7B,MAAA;AAAA,UACA,KAAA;AAAA,UACA,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW,EAAC;AAAA,UAC3B,GAAI,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,YAAY,CAAA,KAAM,MAAA,GAAS,EAAE,UAAA,EAAY,IAAA,EAAK,GAAI;AAAC,SAC7E,CAAA;AAAA,QACD,MAAA,GAAS,QAAQ,OAAA,CAAQ,IAAI,IAAI,IAAA,CAAK,OAAA,CAAQ,YAAY,MAAM;AAAA,OACjE,CAAA;AAED,MAAA,OAAO,IAAA,CAAK,gBAAgB,IAAA,GAAO,IAAA,GAAO,EAAE,GAAG,IAAA,EAAM,aAAa,CAAA;AAAA,IACpE;AAEA,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,IAAA,KAAS,QAAA,EAAU;AACjD,MAAA,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAM,KAAK,OAAA,CAAQ,WAAA,CAAY,MAAM,CAAA,EAAG,CAAA;AAAA,IAChE;AAEA,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAU,IAAA,KAAS,OAAA,EAAS;AACjD,MAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAA,EAAS,YAAY,CAAA;AACvD,MAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,MAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,IAAA,CAAK,MAAA,KAAW,QAAA,GAAW,IAAI,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,GAAI,IAAA;AAUvF,MAAA,MAAM,SACJ,MAAA,IAAU,CAAC,MAAA,CAAO,KAAA,CAAM,OAAO,OAAA,EAAS,CAAA,GAAI,IAAI,KAAK,MAAA,CAAO,OAAA,KAAY,CAAC,CAAA,uBAAQ,IAAA,EAAK;AAExF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,QAAA,CAAS,MAAA,EAAQ,MAAM,CAAA;AAC1C,MAAA,OAAO,IAAA,CAAK,EAAE,EAAA,EAAI,IAAA,EAAM,CAAA;AAAA,IAC1B;AAEA,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAU,IAAA,KAAS,OAAA,EAAS;AACjD,MAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAA,EAAS,YAAY,CAAA;AACvD,MAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,MAAA,MAAM,MAAM,KAAA,CAAM,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,GACrC,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,OAAO,CAAC,EAAA,KAAqB,OAAO,EAAA,KAAO,QAAQ,IACnE,EAAC;AACL,MAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG,OAAO,KAAK,EAAE,KAAA,EAAO,sCAAA,EAAuC,EAAG,GAAG,CAAA;AAIxF,MAAA,IAAI,GAAA,CAAI,SAAS,YAAA,EAAc;AAC7B,QAAA,OAAO,KAAK,EAAE,KAAA,EAAO,WAAW,YAAY,CAAA,gBAAA,CAAA,IAAsB,GAAG,CAAA;AAAA,MACvE;AAIA,MAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,QAAA,CAAS,QAAQ,GAAG,CAAA;AACvD,MAAA,OAAO,OAAA,KAAY,IAAI,KAAA,CAAM,GAAG,IAAI,IAAA,CAAK,EAAE,SAAS,CAAA;AAAA,IACtD;AAEA,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAU,IAAA,KAAS,WAAA,EAAa;AACrD,MAAA,OAAO,IAAA,CAAK,EAAE,OAAA,EAAS,MAAM,KAAK,OAAA,CAAQ,WAAA,CAAY,MAAM,CAAA,EAAG,CAAA;AAAA,IACjE;AAEA,IAAA,OAAO,MAAM,GAAG,CAAA;AAAA,EAClB;AAEA,EAAA,eAAe,OAAO,OAAA,EAAqC;AACzD,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,MAAM,OAAO,CAAA;AAAA,IAC5B,SAAS,KAAA,EAAO;AAGd,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,gBAAA,EAAkB,EAAE,KAAK,OAAA,CAAQ,GAAA,EAAK,OAAO,CAAA;AAC/D,MAAA,OAAO,MAAM,GAAG,CAAA;AAAA,IAClB;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,GAAA,EAAK,MAAA;AAAA,IACL,IAAA,EAAM;AAAA,GACR;AACF","file":"chunk-DG3ZL5NP.js","sourcesContent":["import { decodeBase64Url, decodeBase64UrlBytes, encodeBase64Url } from \"./base64url\";\n\nexport type TokenClaims = {\n  /** Subject — the user the token acts for. */\n  uid: string;\n  /** What the token is allowed to do. Verification requires an exact match. */\n  purpose: string;\n  /** Expiry, epoch seconds. */\n  exp: number;\n  /** Issued at, epoch seconds. Set by signToken; lets a route refuse a token older than a later change. */\n  iat?: number;\n  /** Free-form, purpose-specific. */\n  data?: Record<string, string>;\n};\n\nconst encoder = new TextEncoder();\n\n// Changing this invalidates every outstanding token. Bump it on purpose only.\nconst KEY_SALT = encoder.encode(\"easy-ping/tokens/v1\");\n\n/**\n * One HMAC key per purpose, derived from the master secret with HKDF. A key\n * that can sign unsubscribe links cannot sign anything else, so a plugin\n * handed the unsubscribe key gets exactly that and no more.\n */\nasync function hmacKey(secret: string, purpose: string): Promise<CryptoKey> {\n  const master = await crypto.subtle.importKey(\"raw\", encoder.encode(secret), \"HKDF\", false, [\n    \"deriveKey\",\n  ]);\n  return crypto.subtle.deriveKey(\n    { name: \"HKDF\", hash: \"SHA-256\", salt: KEY_SALT, info: encoder.encode(purpose) },\n    master,\n    { name: \"HMAC\", hash: \"SHA-256\", length: 256 },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\nexport async function signToken(\n  secret: string,\n  claims: TokenClaims,\n  now: Date = new Date(),\n): Promise<string> {\n  const stamped: TokenClaims = { ...claims, iat: claims.iat ?? Math.floor(now.getTime() / 1000) };\n  const body = encodeBase64Url(JSON.stringify(stamped));\n  const signature = await crypto.subtle.sign(\n    \"HMAC\",\n    await hmacKey(secret, claims.purpose),\n    encoder.encode(body),\n  );\n  return `${body}.${encodeBase64Url(new Uint8Array(signature))}`;\n}\n\n/** null for every failure mode. Distinguishing them tells an attacker which part to fix. */\nexport async function verifyToken(\n  secret: string,\n  token: string,\n  purpose: string,\n  now: Date = new Date(),\n): Promise<TokenClaims | null> {\n  const separator = token.lastIndexOf(\".\");\n  if (separator <= 0) return null;\n\n  const body = token.slice(0, separator);\n  const signature = decodeBase64UrlBytes(token.slice(separator + 1));\n  if (!signature) return null;\n\n  // Verified under the key for the purpose this route expects, before the\n  // body is even parsed. A token minted for another purpose fails here.\n  // crypto.subtle.verify is constant-time.\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    await hmacKey(secret, purpose),\n    signature,\n    encoder.encode(body),\n  );\n  if (!valid) return null;\n\n  const decoded = decodeBase64Url(body);\n  if (!decoded) return null;\n\n  let claims: TokenClaims;\n  try {\n    claims = JSON.parse(decoded) as TokenClaims;\n  } catch {\n    return null;\n  }\n\n  if (typeof claims?.uid !== \"string\" || typeof claims.exp !== \"number\") return null;\n  if (claims.purpose !== purpose) return null;\n  if (claims.exp * 1000 <= now.getTime()) return null;\n  if (claims.iat !== undefined && typeof claims.iat !== \"number\") return null;\n\n  if (claims.data !== undefined) {\n    if (typeof claims.data !== \"object\" || claims.data === null || Array.isArray(claims.data)) {\n      return null;\n    }\n    for (const value of Object.values(claims.data)) {\n      if (typeof value !== \"string\") return null;\n    }\n  }\n\n  return claims;\n}\n\nexport const DEFAULT_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;\n/** Ninety days. A link that must outlive this should be re-issued, not made immortal. */\nexport const MAX_TOKEN_TTL_SECONDS = 90 * 24 * 60 * 60;\n\nexport const expiresIn = (seconds: number, now: Date = new Date()): number =>\n  Math.floor(now.getTime() / 1000) + Math.min(Math.max(seconds, 0), MAX_TOKEN_TTL_SECONDS);\n\nexport type SignRequest = {\n  uid: string;\n  purpose: string;\n  data?: Record<string, string>;\n  /** Defaults to 30 days, capped at 90. */\n  ttlSeconds?: number;\n};\n\n/**\n * What a plugin gets instead of the secret: a signer that only mints tokens\n * for the purposes its own `signed` routes declared.\n */\nexport function createScopedSigner(\n  secret: string,\n  pluginId: string,\n  purposes: ReadonlySet<string>,\n  onViolation: (message: string) => Error,\n): (request: SignRequest) => Promise<string> {\n  return (request) => {\n    if (!purposes.has(request.purpose)) {\n      throw onViolation(\n        `plugin \"${pluginId}\" tried to sign a token for purpose \"${request.purpose}\", ` +\n          \"which none of its signed routes declare.\",\n      );\n    }\n    return signToken(secret, {\n      uid: request.uid,\n      purpose: request.purpose,\n      exp: expiresIn(request.ttlSeconds ?? DEFAULT_TOKEN_TTL_SECONDS),\n      ...(request.data ? { data: request.data } : {}),\n    });\n  };\n}\n","import type { DatabaseAdapter } from \"./adapter\";\nimport type { SessionConfig } from \"./config\";\nimport type { Logger } from \"./errors\";\nimport type { Promisable, RouteDefinition } from \"./plugin\";\nimport type { Runner } from \"./runner\";\nimport { verifyToken } from \"./tokens\";\n\nexport type HandlerDeps = {\n  adapter: DatabaseAdapter;\n  session: SessionConfig;\n  runner: Runner;\n  logger: Logger;\n  basePath: string;\n  secret: string;\n  cronSecret?: string | undefined;\n  /** Guards plugin machine routes. The instance defaults it to cronSecret. */\n  machineSecret?: string | undefined;\n  cronMaxSweeps?: number | undefined;\n  pluginRoutes?: readonly RouteDefinition[] | undefined;\n  /** Returns a 429 to send, or null to proceed. Runs after onRequest, before routing. */\n  rateLimit?: ((request: Request) => Response | null) | undefined;\n  /** Origins other than the request's own host that may POST. `*.example.com` allowed. */\n  trustedOrigins?: readonly string[] | undefined;\n  /** Runs before routing. Returning a Response short-circuits; use it for rate limiting. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: ((request: Request) => Promisable<Response | undefined | void>) | undefined;\n  maxBodyBytes?: number | undefined;\n};\n\n/** Every JSON body is capped here. Nothing legitimate the routes accept is bigger. */\nexport const MAX_BODY_BYTES = 64 * 1024;\n\nconst MAX_READ_IDS = 200;\n\n// The inbox is per-user data: never let a shared cache keep it, never let a\n// browser sniff it into something executable.\nconst PRIVATE_HEADERS: Record<string, string> = {\n  \"cache-control\": \"private, no-store\",\n  \"x-content-type-options\": \"nosniff\",\n};\n\nconst json = (body: unknown, status = 200) =>\n  new Response(JSON.stringify(body), {\n    status,\n    headers: { \"content-type\": \"application/json\", ...PRIVATE_HEADERS },\n  });\n\nconst empty = (status: number) => new Response(null, { status, headers: PRIVATE_HEADERS });\n\n/** Plugin responses get the same headers, without touching their body. */\nfunction harden(response: Response): Response {\n  const headers = new Headers(response.headers);\n  for (const [name, value] of Object.entries(PRIVATE_HEADERS)) {\n    if (!headers.has(name)) headers.set(name, value);\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n\nconst encoder = new TextEncoder();\n\n/**\n * Constant-time comparison over SHA-256 digests. Node's timingSafeEqual is\n * unavailable on edge runtimes, `===` leaks through timing, and comparing the\n * raw strings would still reveal the secret's length.\n */\nasync function timingSafeEqual(a: string, b: string): Promise<boolean> {\n  const [left, right] = await Promise.all(\n    [a, b].map(\n      async (value) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", encoder.encode(value))),\n    ),\n  );\n  let diff = 0;\n  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);\n  return diff === 0;\n}\n\n/** Anchored at a segment boundary: `/foo/api/notifications/cron` is not a cron request. */\nfunction routePath(url: URL, basePath: string): string {\n  const { pathname } = url;\n  if (pathname === basePath) return \"/\";\n  if (pathname.startsWith(`${basePath}/`)) return pathname.slice(basePath.length);\n  return pathname;\n}\n\nexport type JsonBody = { body: Record<string, unknown> } | { error: Response };\n\n/**\n * Reads a JSON object body with a byte cap enforced while streaming, so an\n * oversized body is refused before it is buffered. Malformed JSON is 400; an\n * empty body is `{}`. Plugin routes should use this rather than\n * `request.json()`, which has no limit.\n */\nexport async function readJsonBody(\n  request: Request,\n  maxBytes: number = MAX_BODY_BYTES,\n): Promise<JsonBody> {\n  const tooLarge = () => ({ error: json({ error: `body exceeds ${maxBytes} bytes` }, 413) });\n\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > maxBytes) return tooLarge();\n  if (!request.body) return { body: {} };\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      return tooLarge();\n    }\n    chunks.push(value);\n  }\n\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  const text = new TextDecoder().decode(bytes);\n  if (text.trim() === \"\") return { body: {} };\n\n  try {\n    const parsed: unknown = JSON.parse(text);\n    return {\n      body:\n        parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : {},\n    };\n  } catch {\n    return { error: json({ error: \"body must be a JSON object\" }, 400) };\n  }\n}\n\nconst isJsonContentType = (request: Request) =>\n  /^application\\/json\\s*(;|$)/i.test((request.headers.get(\"content-type\") ?? \"\").trim());\n\nfunction originAllowed(origin: string, url: URL, request: Request, trusted: readonly string[]) {\n  let host: string;\n  try {\n    host = new URL(origin).host;\n  } catch {\n    return false;\n  }\n\n  if (host === url.host) return true;\n  // Behind a proxy that rewrites Host, the public host arrives here instead.\n  const forwarded = request.headers.get(\"x-forwarded-host\")?.split(\",\")[0]?.trim();\n  if (forwarded && host === forwarded) return true;\n\n  return trusted.some((entry) =>\n    entry.startsWith(\"*.\") ? host.endsWith(entry.slice(1)) : entry === origin,\n  );\n}\n\n/**\n * Two cheap CSRF defences for cookie-authenticated POSTs. A cross-site form\n * cannot send `application/json` without a preflight the browser will fail,\n * and it cannot forge `Origin`. Neither depends on the host app's SameSite\n * policy, which the library cannot see.\n */\nfunction csrfCheck(request: Request, url: URL, trusted: readonly string[]): Response | null {\n  if (!isJsonContentType(request)) {\n    return json({ error: \"content-type must be application/json\" }, 415);\n  }\n\n  const origin = request.headers.get(\"origin\");\n  if (origin === null) return null;\n  if (origin === \"null\" || !originAllowed(origin, url, request, trusted)) return empty(403);\n\n  return null;\n}\n\nexport function createHandler(deps: HandlerDeps) {\n  const trustedOrigins = deps.trustedOrigins ?? [];\n  const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;\n\n  async function resolveUserId(request: Request): Promise<string | null | \"error\"> {\n    try {\n      return await deps.session.getUserId(request);\n    } catch (error) {\n      // A broken session lookup is a 500, never a 401. Collapsing them makes\n      // an outage look like a mass logout. RFC 0002 §1.\n      deps.logger.error(\"session.getUserId threw\", { error });\n      return \"error\";\n    }\n  }\n\n  async function bearerMatches(request: Request, secret: string | undefined): Promise<boolean> {\n    if (!secret) return false;\n    const header = request.headers.get(\"authorization\") ?? \"\";\n    const presented = header.startsWith(\"Bearer \") ? header.slice(7) : header;\n    return timingSafeEqual(presented, secret);\n  }\n\n  async function handleCron(request: Request): Promise<Response> {\n    if (!deps.cronSecret) return empty(404);\n    if (!(await bearerMatches(request, deps.cronSecret))) return empty(401);\n\n    // Bounded: an overlapping scheduler must not hold a request open for as\n    // long as the backlog lasts.\n    const result = await deps.runner.drain(\n      deps.cronMaxSweeps === undefined ? {} : { maxSweeps: deps.cronMaxSweeps },\n    );\n    return json(result);\n  }\n\n  /**\n   * Plugin routes are dispatched before core ones and carry their scope with\n   * them. Authentication happens here rather than in the plugin handler, so a\n   * plugin physically cannot forget to check a signature or scope a query.\n   */\n  async function handlePluginRoute(\n    route: RouteDefinition,\n    request: Request,\n    url: URL,\n  ): Promise<Response> {\n    if (route.scope.type === \"user\") {\n      if (request.method === \"POST\") {\n        const rejected = csrfCheck(request, url, trustedOrigins);\n        if (rejected) return rejected;\n      }\n\n      const userId = await resolveUserId(request);\n      if (userId === \"error\") return empty(500);\n      if (userId === null) return empty(401);\n      return harden(await route.handler({ request, userId, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"machine\") {\n      if (!deps.machineSecret) return empty(404);\n      if (!(await bearerMatches(request, deps.machineSecret))) return empty(401);\n      return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"signed\") {\n      const token =\n        url.searchParams.get(\"token\") ??\n        (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer /, \"\");\n\n      const claims = await verifyToken(deps.secret, token, route.scope.purpose);\n      // One response for every failure mode. Distinguishing expired from\n      // forged tells an attacker which part to fix. RFC 0002 §5.\n      if (!claims) return empty(400);\n\n      return harden(await route.handler({ request, userId: claims.uid, claims, params: {} }));\n    }\n\n    return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n  }\n\n  async function route(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = routePath(url, deps.basePath);\n\n    if (deps.onRequest) {\n      const early = await deps.onRequest(request);\n      if (early instanceof Response) return early;\n    }\n\n    if (deps.rateLimit) {\n      const limited = deps.rateLimit(request);\n      if (limited) return limited;\n    }\n\n    if (path === \"/cron\") {\n      if (request.method !== \"POST\") return empty(405);\n      return handleCron(request);\n    }\n\n    const pluginRoute = deps.pluginRoutes?.find(\n      (candidate) => candidate.path === path && candidate.method === request.method,\n    );\n    if (pluginRoute) return handlePluginRoute(pluginRoute, request, url);\n\n    if (request.method === \"POST\") {\n      const rejected = csrfCheck(request, url, trustedOrigins);\n      if (rejected) return rejected;\n    }\n\n    const userId = await resolveUserId(request);\n    if (userId === \"error\") return empty(500);\n    if (userId === null) return empty(401);\n\n    if (request.method === \"GET\" && path === \"/\") {\n      const limitParam = Number(url.searchParams.get(\"limit\") ?? 20);\n      const limit = Number.isFinite(limitParam) ? Math.min(Math.max(limitParam, 1), 100) : 20;\n      const cursor = url.searchParams.get(\"cursor\");\n\n      // The badge count rides along with the first page, so a polling client\n      // needs one request per tick instead of two. Paginating past the first\n      // page omits it: a cursor request is scrollback, not a poll.\n      const [page, unseenCount] = await Promise.all([\n        deps.adapter.listNotifications({\n          userId,\n          limit,\n          ...(cursor ? { cursor } : {}),\n          ...(url.searchParams.get(\"unreadOnly\") === \"true\" ? { unreadOnly: true } : {}),\n        }),\n        cursor ? Promise.resolve(null) : deps.adapter.countUnseen(userId),\n      ]);\n\n      return json(unseenCount === null ? page : { ...page, unseenCount });\n    }\n\n    if (request.method === \"GET\" && path === \"/count\") {\n      return json({ unseen: await deps.adapter.countUnseen(userId) });\n    }\n\n    if (request.method === \"POST\" && path === \"/seen\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const before = typeof parsed.body.before === \"string\" ? new Date(parsed.body.before) : null;\n\n      // Defaults to now, but a client should send the timestamp of the newest\n      // notification it has actually rendered. Otherwise anything that arrived\n      // between the last poll and the click is marked seen without ever having\n      // produced a badge — the user silently misses it.\n      //\n      // +1ms because Postgres keeps microseconds while an ISO string carries\n      // only milliseconds. Without it the truncated cutoff falls *before* the\n      // very row it was taken from, and markSeen matches nothing at all.\n      const cutoff =\n        before && !Number.isNaN(before.getTime()) ? new Date(before.getTime() + 1) : new Date();\n\n      await deps.adapter.markSeen(userId, cutoff);\n      return json({ ok: true });\n    }\n\n    if (request.method === \"POST\" && path === \"/read\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const ids = Array.isArray(parsed.body.ids)\n        ? parsed.body.ids.filter((id): id is string => typeof id === \"string\")\n        : [];\n      if (ids.length === 0) return json({ error: \"ids must be a non-empty string array\" }, 400);\n\n      // Unbounded, this builds a query with as many bind parameters as the\n      // caller cares to send. Postgres caps at 65535 and degrades long before.\n      if (ids.length > MAX_READ_IDS) {\n        return json({ error: `at most ${MAX_READ_IDS} ids per request` }, 400);\n      }\n\n      // Scoped by userId in the adapter. A miss is 404, not 403 — a 403 would\n      // confirm the row exists and belongs to someone else. RFC 0002 §2.\n      const updated = await deps.adapter.markRead(userId, ids);\n      return updated === 0 ? empty(404) : json({ updated });\n    }\n\n    if (request.method === \"POST\" && path === \"/read-all\") {\n      return json({ updated: await deps.adapter.markAllRead(userId) });\n    }\n\n    return empty(404);\n  }\n\n  async function handle(request: Request): Promise<Response> {\n    try {\n      return await route(request);\n    } catch (error) {\n      // Never let a driver error escape: on Node it becomes an unhandled\n      // rejection, on other hosts a stack trace in the response body.\n      deps.logger.error(\"request failed\", { url: request.url, error });\n      return empty(500);\n    }\n  }\n\n  return {\n    handle,\n    GET: handle,\n    POST: handle,\n  };\n}\n"]}

package/dist/{chunk-NYDVNMKG.js → chunk-PSJHXZPR.js}

@@ -51,12 +51,13 @@ var coreSchema = {
       type: { type: "string", required: true },
       channel: { type: "string", required: true },
       enabled: { type: "boolean", required: true, default: true },
-      frequency: { type: "string", required: true, default: "instant" }
+      frequency: { type: "string", required: true, default: "instant" },
+      updatedAt: { type: "date", required: true, defaultNow: true }
     },
     primaryKey: ["userId", "type", "channel"]
   }
 };
 
 export { coreSchema, toSnakeCase };
-//# sourceMappingURL=chunk-NYDVNMKG.js.map
-//# sourceMappingURL=chunk-NYDVNMKG.js.map
+//# sourceMappingURL=chunk-PSJHXZPR.js.map
+//# sourceMappingURL=chunk-PSJHXZPR.js.map

package/dist/chunk-PSJHXZPR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema/declaration.ts"],"names":[],"mappings":";AAEO,IAAM,WAAA,GAAc,CAAC,KAAA,KAAkB,KAAA,CAAM,OAAA,CAAQ,QAAA,EAAU,CAAC,CAAA,KAAM,CAAA,CAAA,EAAI,CAAA,CAAE,WAAA,EAAa,CAAA,CAAE;AAO3F,IAAM,UAAA,GAAa;AAAA,EACxB,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,cAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACvC,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAU,IAAA,EAAK;AAAA,MACxC,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC1B,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC3B,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC5B,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACvB,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACvB,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MAC3B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,UAAU,WAAW,CAAA,EAAG,MAAM,uBAAA,EAAwB;AAAA,MAC7D,EAAE,EAAA,EAAI,CAAC,UAAU,UAAU,CAAA,EAAG,MAAM,wBAAA,EAAyB;AAAA,MAC7D,EAAE,IAAI,CAAC,QAAA,EAAU,WAAW,CAAA,EAAG,MAAA,EAAQ,IAAA,EAAM,IAAA,EAAM,yBAAA;AAA0B;AAC/E,GACF;AAAA,EAEA,oBAAA,EAAsB;AAAA,IACpB,SAAA,EAAW,uBAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,cAAA,EAAgB,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACjD,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC1C,QAAQ,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,SAAA,EAAU;AAAA,MAC7D,UAAU,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,CAAA,EAAE;AAAA,MACvD,aAAa,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,CAAA,EAAE;AAAA,MAC1D,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,SAAA,EAAW,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MAC1B,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC5B,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC5B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,UAAU,WAAW,CAAA,EAAG,MAAM,oBAAA,EAAqB;AAAA,MAC1D,EAAE,EAAA,EAAI,CAAC,gBAAgB,CAAA,EAAG,MAAM,2BAAA;AAA4B;AAC9D,GACF;AAAA,EAEA,sBAAA,EAAwB;AAAA,IACtB,SAAA,EAAW,yBAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACvC,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC1C,SAAS,EAAE,IAAA,EAAM,WAAW,QAAA,EAAU,IAAA,EAAM,SAAS,IAAA,EAAK;AAAA,MAC1D,WAAW,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,SAAA,EAAU;AAAA,MAChE,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,QAAA,EAAU,MAAA,EAAQ,SAAS;AAAA;AAE5C","file":"chunk-PSJHXZPR.js","sourcesContent":["import type { SchemaDeclaration } from \"../core/plugin\";\n\nexport const toSnakeCase = (value: string) => value.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);\n\n/**\n * Core tables in the format plugins use. Less expressive than the hand-written\n * Drizzle schema (no partial indexes, ordering or cascade) — a drift test\n * asserts the two agree on the fields they share.\n */\nexport const coreSchema = {\n  notification: {\n    tableName: \"notification\",\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      type: { type: \"string\", required: true },\n      payload: { type: \"json\", required: true },\n      actorId: { type: \"string\" },\n      groupKey: { type: \"string\" },\n      dedupeKey: { type: \"string\" },\n      seenAt: { type: \"date\" },\n      readAt: { type: \"date\" },\n      archivedAt: { type: \"date\" },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\", \"createdAt\"], name: \"notification_feed_idx\" },\n      { on: [\"userId\", \"groupKey\"], name: \"notification_group_idx\" },\n      { on: [\"userId\", \"dedupeKey\"], unique: true, name: \"notification_dedupe_idx\" },\n    ],\n  },\n\n  notificationDelivery: {\n    tableName: \"notification_delivery\",\n    fields: {\n      id: { type: \"string\", required: true },\n      notificationId: { type: \"string\", required: true },\n      channel: { type: \"string\", required: true },\n      status: { type: \"string\", required: true, default: \"pending\" },\n      attempts: { type: \"number\", required: true, default: 0 },\n      maxAttempts: { type: \"number\", required: true, default: 5 },\n      notBefore: { type: \"date\", required: true, defaultNow: true },\n      claimedAt: { type: \"date\" },\n      claimedBy: { type: \"string\" },\n      lastError: { type: \"string\" },\n      updatedAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"status\", \"notBefore\"], name: \"delivery_claim_idx\" },\n      { on: [\"notificationId\"], name: \"delivery_notification_idx\" },\n    ],\n  },\n\n  notificationPreference: {\n    tableName: \"notification_preference\",\n    fields: {\n      userId: { type: \"string\", required: true },\n      type: { type: \"string\", required: true },\n      channel: { type: \"string\", required: true },\n      enabled: { type: \"boolean\", required: true, default: true },\n      frequency: { type: \"string\", required: true, default: \"instant\" },\n      updatedAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"userId\", \"type\", \"channel\"],\n  },\n} satisfies SchemaDeclaration;\n"]}

package/dist/{chunk-BV3U542P.js → chunk-W6I3B2CI.js}

@@ -7,5 +7,5 @@ function defineClientPlugin(plugin) {
 }
 
 export { defineClientPlugin, definePlugin };
-//# sourceMappingURL=chunk-BV3U542P.js.map
-//# sourceMappingURL=chunk-BV3U542P.js.map
+//# sourceMappingURL=chunk-W6I3B2CI.js.map
+//# sourceMappingURL=chunk-W6I3B2CI.js.map

package/dist/chunk-W6I3B2CI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/plugin.ts"],"names":[],"mappings":";AAuLO,SAAS,aACd,MAAA,EAC8B;AAC9B,EAAA,OAAO,MAAA;AACT;AAgBO,SAAS,mBACd,MAAA,EAC6B;AAC7B,EAAA,OAAO,MAAA;AACT","file":"chunk-W6I3B2CI.js","sourcesContent":["import type { DeliveryOutcome } from \"./adapter\";\nimport type { Logger } from \"./errors\";\nimport type { PluginStore } from \"./store\";\nimport type { SignRequest, TokenClaims } from \"./tokens\";\nimport type { Channel, Recipient } from \"./types\";\n\nexport type Promisable<T> = T | Promise<T>;\n\nexport type PrepareContext = {\n  type: string;\n  recipients: readonly Recipient[];\n};\n\nexport type BeforeSendContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  actorId: string | null;\n  dedupeKey: string | null;\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type BeforeSendResult =\n  | { action: \"continue\"; payload?: unknown; dedupeKey?: string }\n  | { action: \"cancel\"; reason: string };\n\nexport type ChannelDecision = {\n  channel: Channel;\n  action: \"send\" | \"skip\" | \"defer\";\n  /** defer only. Written to notification_delivery.not_before. */\n  notBefore?: Date | undefined;\n};\n\nexport type ResolveChannelsContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  decisions: readonly ChannelDecision[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type DeliverContext = {\n  channel: Channel;\n  deliveryId: string;\n  attempt: number;\n  recipient: Recipient;\n  notification: { id: string; userId: string; type: string; payload: unknown };\n  /** Aborted on the runner's timeout. */\n  signal: AbortSignal;\n};\n\nexport type AfterSendContext = {\n  type: string;\n  payload: unknown;\n  /** Committed rows. Ids exist only at this point. */\n  notifications: readonly { id: string; userId: string }[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type AfterDeliverContext = {\n  deliveryId: string;\n  notificationId: string;\n  userId: string;\n  channel: Channel;\n  outcome: DeliveryOutcome;\n  attempt: number;\n  isTerminal: boolean;\n};\n\n/** beforeSend and resolveChannels fail closed; afterDeliver fails open. */\nexport type PluginHooks = {\n  /** Once per send, for bulk loading — the per-recipient hooks would be an N+1. */\n  prepare?: (ctx: PrepareContext) => Promisable<unknown>;\n  beforeSend?: (ctx: BeforeSendContext) => Promisable<BeforeSendResult>;\n  resolveChannels?: (ctx: ResolveChannelsContext) => Promisable<readonly ChannelDecision[]>;\n  /**\n   * Once per send, after the rows are committed. The only hook that sees\n   * notification ids, which digests needs to bucket an entry against one.\n   * Fails open: the notification is already written.\n   */\n  afterSend?: (ctx: AfterSendContext) => Promisable<void>;\n  /**\n   * Delivers one of the plugin's declared `channels`. Core carries inApp and\n   * email; everything else arrives here, which is how push, sms and slack are\n   * added without core learning about them.\n   */\n  deliver?: (ctx: DeliverContext) => Promisable<DeliveryOutcome>;\n  afterDeliver?: (ctx: AfterDeliverContext) => Promisable<void>;\n};\n\nexport type FieldType = \"string\" | \"number\" | \"boolean\" | \"date\" | \"json\";\n\nexport type FieldDeclaration = {\n  type: FieldType;\n  required?: boolean;\n  default?: string | number | boolean;\n  /** date fields only. Renders as defaultNow() / CURRENT_TIMESTAMP. */\n  defaultNow?: boolean;\n};\n\nexport type IndexDeclaration = {\n  on: readonly string[];\n  unique?: boolean;\n  name?: string;\n};\n\nexport type TableDeclaration = {\n  tableName: string;\n  fields: Record<string, FieldDeclaration>;\n  primaryKey?: readonly string[];\n  indexes?: readonly IndexDeclaration[];\n};\n\nexport type SchemaDeclaration = Record<string, TableDeclaration>;\n\nexport type RouteScope =\n  | { type: \"user\" }\n  | { type: \"machine\" }\n  | { type: \"signed\"; purpose: string }\n  | { type: \"custom\"; justification: string };\n\nexport type RouteContext = {\n  request: Request;\n  /** Resolved for user-scoped routes, so a handler cannot forget to scope. */\n  userId: string | null;\n  /** Verified before dispatch, so a handler cannot forget to check. */\n  claims: TokenClaims | null;\n  params: Record<string, string>;\n};\n\nexport type RouteDefinition = {\n  path: string;\n  method: \"GET\" | \"POST\";\n  scope: RouteScope;\n  handler: (ctx: RouteContext) => Promise<Response>;\n};\n\n/** Handed to a plugin at startup so it need not be given the database twice. */\nexport type PluginInitContext = {\n  /** Scoped to the tables this plugin declares in schema(). */\n  store: PluginStore;\n  /**\n   * Mints tokens for this plugin's own `signed` routes and nothing else. The\n   * master secret itself is never handed out: a plugin cannot forge another\n   * plugin's links, or anything a future signed flow relies on.\n   */\n  sign: (request: SignRequest) => Promise<string>;\n  logger: Logger;\n  /** Configured notification names, so a route can refuse to store rows for types that do not exist. */\n  notificationTypes: readonly string[];\n  /** The app's resolver, for plugins that need timezones or addresses. */\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  /**\n   * The instance's own send(). A plugin composing a message (a digest, say)\n   * routes it back through the pipeline rather than reaching for a provider,\n   * so it inherits retry, backoff and idempotency for free.\n   */\n  send: (\n    type: string,\n    args: { to: string | readonly string[]; payload: unknown; dedupeKey?: string },\n  ) => Promise<unknown>;\n};\n\nexport type EasyPingPlugin<\n  TId extends string = string,\n  TSchema extends SchemaDeclaration = SchemaDeclaration,\n> = {\n  id: TId;\n  dependsOn?: readonly string[];\n  schema?: TSchema;\n  routes?: readonly RouteDefinition[];\n  hooks?: PluginHooks;\n  /** Channels this plugin delivers. Makes them usable in a notification. */\n  channels?: readonly Channel[];\n  /** Called once by easyPing() before any hook or route can run. */\n  init?: (ctx: PluginInitContext) => void;\n};\n\nexport type AnyPlugin = EasyPingPlugin<string, SchemaDeclaration>;\n\nexport function definePlugin<TId extends string, TSchema extends SchemaDeclaration>(\n  plugin: EasyPingPlugin<TId, TSchema>,\n): EasyPingPlugin<TId, TSchema> {\n  return plugin;\n}\n\nexport type ClientFetch = (path: string, init?: RequestInit) => Promise<unknown>;\n\nexport type ClientPlugin<\n  TId extends string = string,\n  TActions extends Record<string, unknown> = Record<string, unknown>,\n> = {\n  id: TId;\n  /** Phantom. Links client types to the server plugin so a mismatch is a type error. */\n  $InferServerPlugin?: AnyPlugin;\n  actions: (fetch: ClientFetch) => TActions;\n};\n\nexport type AnyClientPlugin = ClientPlugin<string, Record<string, unknown>>;\n\nexport function defineClientPlugin<TId extends string, TActions extends Record<string, unknown>>(\n  plugin: ClientPlugin<TId, TActions>,\n): ClientPlugin<TId, TActions> {\n  return plugin;\n}\n\nexport type UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (\n  k: infer I,\n) => void\n  ? I\n  : never;\n\n/** Naked type parameter, so the conditional distributes over the union. */\ntype ExtractActions<TPlugin> = TPlugin extends { actions: (fetch: never) => infer TActions }\n  ? TActions\n  : never;\n\n/** Indexes the tuple rather than recursing: a fold blows the instantiation depth limit. */\nexport type ActionsOf<TPlugins extends readonly AnyClientPlugin[]> = UnionToIntersection<\n  ExtractActions<TPlugins[number]>\n>;\n"]}

package/dist/{chunk-RBDW4S6F.js → chunk-YEMRRMJQ.js}

@@ -1,4 +1,4 @@
-import { toSnakeCase } from './chunk-NYDVNMKG.js';
+import { toSnakeCase } from './chunk-PSJHXZPR.js';
 
 // src/schema/render-sql.ts
 var SQL_TYPE = {
@@ -195,5 +195,5 @@ ${body}
 }
 
 export { INTROSPECT_SQL, planPostgresMigration, renderDrizzleSchema, renderPostgresDdl };
-//# sourceMappingURL=chunk-RBDW4S6F.js.map
-//# sourceMappingURL=chunk-RBDW4S6F.js.map
+//# sourceMappingURL=chunk-YEMRRMJQ.js.map
+//# sourceMappingURL=chunk-YEMRRMJQ.js.map

package/dist/{chunk-RBDW4S6F.js.map → chunk-YEMRRMJQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/schema/render-sql.ts","../src/schema/migrate-sql.ts","../src/schema/render-drizzle.ts"],"names":["indexName","columns","SQL_TYPE","quote","defaultClause"],"mappings":";;;AAGA,IAAM,QAAA,GAAqD;AAAA,EACzD,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,aAAA;AAAA,EACN,IAAA,EAAM;AACR,CAAA;AAEA,IAAM,KAAA,GAAQ,CAAC,KAAA,KAAkB,CAAA,CAAA,EAAI,MAAM,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAE9D,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAoC;AACzD,EAAA,IAAI,KAAA,CAAM,YAAY,OAAO,gBAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,EAAW,OAAO,EAAA;AACxC,EAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,EAAU,OAAO,CAAA,UAAA,EAAa,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAC5F,EAAA,OAAO,CAAA,SAAA,EAAY,MAAM,OAAO,CAAA,CAAA;AAClC,CAAA;AAGO,SAAS,iBAAA,CAAkB,MAAA,EAA2B,MAAA,GAAS,EAAA,EAAc;AAClF,EAAA,MAAM,aAAuB,EAAC;AAE9B,EAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,EAAG;AACzC,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,MAAA,GAAS,KAAA,CAAM,SAAS,CAAA;AAE3C,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,KAAA,EAAO,IAAI,CAAA,KAAM;AAClE,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,GAAW,WAAA,GAAc,EAAA;AAClD,MAAA,OAAO,KAAK,KAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAA,EAAI,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,WAAW,CAAA,EAAG,aAAA,CAAc,IAAI,CAAC,CAAA,CAAA;AAAA,IAClG,CAAC,CAAA;AAED,IAAA,IAAI,KAAA,CAAM,YAAY,MAAA,EAAQ;AAC5B,MAAA,MAAM,GAAA,GAAM,KAAA,CAAM,UAAA,CAAW,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AAChF,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IACvC;AAEA,IAAA,UAAA,CAAW,IAAA,CAAK,8BAA8B,IAAI,CAAA;AAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAC;AAAA,CAAA,CAAK,CAAA;AAEjF,IAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,MAAA,MAAMA,UAAAA,GAAY,KAAA;AAAA,QAChB,MAAA,IAAU,WAAA,CAAY,IAAA,IAAQ,CAAA,EAAG,KAAA,CAAM,SAAS,CAAA,CAAA,EAAI,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAC,CAAA,IAAA,CAAA;AAAA,OAC9E;AACA,MAAA,MAAMC,QAAAA,GAAU,WAAA,CAAY,EAAA,CAAG,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AAClF,MAAA,MAAM,MAAA,GAAS,WAAA,CAAY,MAAA,GAAS,SAAA,GAAY,EAAA;AAChD,MAAA,UAAA,CAAW,IAAA,CAAK,UAAU,MAAM,CAAA,oBAAA,EAAuBD,UAAS,CAAA,IAAA,EAAO,IAAI,CAAA,EAAA,EAAKC,QAAO,CAAA,CAAA,CAAG,CAAA;AAAA,IAC5F;AAAA,EACF;AAEA,EAAA,OAAO,UAAA;AACT;;;ACjCA,IAAMC,SAAAA,GAAqD;AAAA,EACzD,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,aAAA;AAAA,EACN,IAAA,EAAM;AACR,CAAA;AAGA,IAAM,SAAA,GAAiE;AAAA,EACrE,MAAA,EAAQ,CAAC,MAAA,EAAQ,mBAAA,EAAqB,WAAW,CAAA;AAAA,EACjD,MAAA,EAAQ,CAAC,SAAA,EAAW,QAAA,EAAU,UAAU,CAAA;AAAA,EACxC,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA,EACnB,IAAA,EAAM,CAAC,0BAAA,EAA4B,6BAA6B,CAAA;AAAA,EAChE,IAAA,EAAM,CAAC,OAAA,EAAS,MAAM;AACxB,CAAA;AAEA,IAAMC,MAAAA,GAAQ,CAAC,KAAA,KAAkB,CAAA,CAAA,EAAI,MAAM,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAE9D,IAAMC,cAAAA,GAAgB,CAAC,KAAA,KAAoC;AACzD,EAAA,IAAI,KAAA,CAAM,YAAY,OAAO,gBAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,EAAW,OAAO,EAAA;AACxC,EAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,EAAU,OAAO,CAAA,UAAA,EAAa,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAC5F,EAAA,OAAO,CAAA,SAAA,EAAY,MAAM,OAAO,CAAA,CAAA;AAClC,CAAA;AAEA,IAAM,SAAA,GAAY,CAChB,KAAA,EACA,WAAA,KACG,YAAY,IAAA,IAAQ,CAAA,EAAG,KAAA,CAAM,SAAS,CAAA,CAAA,EAAI,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAC,CAAA,IAAA,CAAA;AAoBhE,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;AAM9B,eAAsB,qBAAA,CACpB,UAAA,EACA,MAAA,EACA,MAAA,GAAS,EAAA,EACe;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,UAAA,EAAW;AAE9B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAqC;AACzD,EAAA,KAAA,MAAW,UAAU,IAAA,EAAM;AACzB,IAAA,MAAM,UAAU,OAAA,CAAQ,GAAA,CAAI,OAAO,KAAK,CAAA,wBAAS,GAAA,EAAwB;AACzE,IAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AACjC,IAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,OAAO,CAAA;AAAA,EACnC;AAEA,EAAA,MAAM,aAAuB,EAAC;AAC9B,EAAA,MAAM,cAAwB,EAAC;AAC/B,EAAA,MAAM,gBAA0B,EAAC;AAEjC,EAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,EAAG;AACzC,IAAA,MAAM,SAAA,GAAY,SAAS,KAAA,CAAM,SAAA;AACjC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AAGtC,IAAA,IAAI,CAAC,QAAA,IAAY,QAAA,CAAS,IAAA,KAAS,CAAA,EAAG;AACpC,MAAA,aAAA,CAAc,KAAK,SAAS,CAAA;AAC5B,MAAA,UAAA,CAAW,IAAA,CAAK,GAAG,iBAAA,CAAkB,EAAE,CAAC,KAAA,CAAM,SAAS,GAAG,KAAA,EAAM,EAAG,MAAM,CAAC,CAAA;AAC1E,MAAA;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,CAAC,OAAO,IAAI,CAAA,IAAK,OAAO,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,EAAG;AACxD,MAAA,MAAM,MAAA,GAAS,YAAY,KAAK,CAAA;AAChC,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAEjC,MAAA,IAAI,CAAC,KAAA,EAAO;AAGV,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,IAAc,IAAA,CAAK,OAAA,KAAY,MAAA;AACpD,QAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,IAAY,OAAA,GAAU,WAAA,GAAc,EAAA;AAE7D,QAAA,UAAA,CAAW,IAAA;AAAA,UACT,eAAeD,MAAAA,CAAM,SAAS,CAAC,CAAA,0BAAA,EAC1BA,MAAAA,CAAM,MAAM,CAAC,CAAA,CAAA,EAAID,SAAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,WAAW,CAAA,EAAGE,cAAAA,CAAc,IAAI,CAAC,CAAA;AAAA,SAC/E;AAEA,QAAA,IAAI,IAAA,CAAK,QAAA,IAAY,CAAC,OAAA,EAAS;AAC7B,UAAA,WAAA,CAAY,IAAA;AAAA,YACV,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,MAAM,CAAA,mHAAA;AAAA,WAExB;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,UAAU,IAAA,CAAK,IAAI,EAAE,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EAAG;AAC9C,QAAA,WAAA,CAAY,IAAA;AAAA,UACV,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,MAAM,OAAO,KAAA,CAAM,IAAI,CAAA,KAAA,EAAQ,IAAA,CAAK,IAAI,CAAA,cAAA,EAClDF,SAAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,8DAAA;AAAA,SAC3B;AAAA,MACF;AAAA,IACF;AAGA,IAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,MAAA,MAAM,OAAOC,MAAAA,CAAM,MAAA,GAAS,SAAA,CAAU,KAAA,EAAO,WAAW,CAAC,CAAA;AACzD,MAAA,MAAM,OAAA,GAAU,WAAA,CAAY,EAAA,CAAG,GAAA,CAAI,CAAC,KAAA,KAAUA,MAAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AAClF,MAAA,UAAA,CAAW,IAAA;AAAA,QACT,CAAA,OAAA,EAAU,WAAA,CAAY,MAAA,GAAS,SAAA,GAAY,EAAE,CAAA,oBAAA,EAAuB,IAAI,CAAA,IAAA,EAChEA,MAAAA,CAAM,SAAS,CAAC,CAAA,EAAA,EAAK,OAAO,CAAA,CAAA;AAAA,OACtC;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,MAAA,IAAU,QAAA,CAAS,IAAA,EAAK,EAAG;AACpC,MAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,KAAU,WAAA,CAAY,KAAK,CAAA,KAAM,MAAM,CAAA;AACxF,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,WAAA,CAAY,IAAA;AAAA,UACV,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,MAAM,CAAA,mGAAA;AAAA,SAExB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,UAAA,EAAY,WAAA,EAAa,aAAA,EAAc;AAClD;;;ACxJA,IAAM,cAAA,GAA2D;AAAA,EAC/D,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,WAAA;AAAA,EACN,IAAA,EAAM;AACR,CAAA;AAEA,IAAM,OAAA,GAAU,CAAC,KAAA,KACf,OAAO,KAAA,KAAU,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAElE,SAAS,YAAA,CAAa,IAAA,EAAc,KAAA,EAAyB,UAAA,EAA6B;AACxF,EAAA,MAAM,OAAA,GAAU,cAAA,CAAe,KAAA,CAAM,IAAI,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,YAAY,IAAI,CAAA;AAE/B,EAAA,IAAI,aACF,KAAA,CAAM,IAAA,KAAS,SACX,CAAA,EAAG,OAAO,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,8BACpC,CAAA,EAAG,OAAO,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA,CAAA,CAAA;AAE1C,EAAA,IAAI,UAAA,EAAY,OAAO,CAAA,IAAA,EAAO,IAAI,KAAK,UAAU,CAAA,cAAA,CAAA;AAEjD,EAAA,IAAI,KAAA,CAAM,UAAU,UAAA,IAAc,YAAA;AAClC,EAAA,IAAI,KAAA,CAAM,YAAY,UAAA,IAAc,eAAA;AAAA,OAAA,IAC3B,KAAA,CAAM,YAAY,MAAA,EAAW,UAAA,IAAc,YAAY,OAAA,CAAQ,KAAA,CAAM,OAAO,CAAC,CAAA,CAAA,CAAA;AAEtF,EAAA,OAAO,CAAA,IAAA,EAAO,IAAI,CAAA,EAAA,EAAK,UAAU,CAAA,CAAA,CAAA;AACnC;AAEA,SAAS,WAAA,CAAY,GAAA,EAAa,KAAA,EAAyB,MAAA,EAAwB;AACjF,EAAA,MAAM,WAAA,GAAA,CAAe,KAAA,CAAM,UAAA,EAAY,MAAA,IAAU,CAAA,IAAK,CAAA;AACtD,EAAA,MAAM,WAAW,CAAC,WAAA,GAAc,KAAA,CAAM,UAAA,GAAa,CAAC,CAAA,GAAI,MAAA;AAExD,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,CACxC,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,KAAK,CAAA,KAAM,YAAA,CAAa,MAAM,KAAA,EAAO,IAAA,KAAS,QAAQ,CAAC,CAAA,CACnE,KAAK,IAAI,CAAA;AAEZ,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,MAAA,GAAS,aAAA,GAAgB,OAAA;AACrD,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,IAAA,IAAQ,CAAA,EAAG,KAAA,CAAM,SAAS,CAAA,CAAA,EAAI,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAC,CAAA,IAAA,CAAA;AAC/E,IAAA,MAAMF,QAAAA,GAAU,WAAA,CAAY,EAAA,CAAG,GAAA,CAAI,CAAC,KAAA,KAAU,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AACzE,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,IAAA,EAAO,OAAO,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,IAAI,CAAC,CAAA,KAAA,EAAQA,QAAO,CAAA,EAAA,CAAI,CAAA;AAAA,EAChF;AAEA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAMA,QAAAA,GAAAA,CAAW,KAAA,CAAM,UAAA,IAAc,EAAC,EAAG,GAAA,CAAI,CAAC,KAAA,KAAU,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AACnF,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,2BAAA,EAA8BA,QAAO,CAAA,KAAA,CAAO,CAAA;AAAA,EAC1D;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAO,MAAA,GAAS,CAAA;AAAA;AAAA,EAAsB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC;AAAA,GAAA,CAAA,GAAU,EAAA;AAE/E,EAAA,OAAO,gBAAgB,GAAG,CAAA;AAAA,EAAA,EAAkB,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,KAAA,CAAM,SAAS,CAAC,CAAA;AAAA;AAAA,EAAW,OAAO;AAAA,GAAA,EAAQ,KAAK,CAAA;AAAA,EAAA,CAAA;AACrH;AAGO,SAAS,mBAAA,CAAoB,MAAA,EAA2B,MAAA,GAAS,EAAA,EAAY;AAClF,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA;AAEpC,EAAA,MAAM,IAAA,mBAAO,IAAI,GAAA,CAAY,CAAC,SAAS,CAAC,CAAA;AACxC,EAAA,KAAA,MAAW,GAAG,KAAK,CAAA,IAAK,MAAA,EAAQ;AAC9B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,cAAA,CAAe,KAAA,CAAM,IAAI,CAAC,CAAA;AACpF,IAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,MAAA,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,MAAA,GAAS,aAAA,GAAgB,OAAO,CAAA;AAAA,IACvD;AACA,IAAA,IAAA,CAAK,MAAM,UAAA,EAAY,MAAA,IAAU,KAAK,CAAA,EAAG,IAAA,CAAK,IAAI,YAAY,CAAA;AAAA,EAChE;AAEA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAG,IAAI,EAAE,IAAA,EAAK,CAAE,KAAK,IAAI,CAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM,WAAA,CAAY,KAAK,KAAA,EAAO,MAAM,CAAC,CAAA,CAAE,KAAK,MAAM,CAAA;AAEtF,EAAA,OAAO,CAAA;AAAA,SAAA,EAA6D,OAAO,CAAA;;AAAA,EAAqC,IAAI;AAAA,CAAA;AACtH","file":"chunk-RBDW4S6F.js","sourcesContent":["import type { FieldDeclaration, SchemaDeclaration } from \"../core/plugin\";\nimport { toSnakeCase } from \"./declaration\";\n\nconst SQL_TYPE: Record<FieldDeclaration[\"type\"], string> = {\n  string: \"text\",\n  number: \"integer\",\n  boolean: \"boolean\",\n  date: \"timestamptz\",\n  json: \"jsonb\",\n};\n\nconst quote = (value: string) => `\"${value.replace(/\"/g, '\"\"')}\"`;\n\nconst defaultClause = (field: FieldDeclaration): string => {\n  if (field.defaultNow) return \" DEFAULT now()\";\n  if (field.default === undefined) return \"\";\n  if (typeof field.default === \"string\") return ` DEFAULT '${field.default.replace(/'/g, \"''\")}'`;\n  return ` DEFAULT ${field.default}`;\n};\n\n/** SchemaDeclaration to Postgres DDL, from the same source as the Drizzle renderer. */\nexport function renderPostgresDdl(schema: SchemaDeclaration, prefix = \"\"): string[] {\n  const statements: string[] = [];\n\n  for (const table of Object.values(schema)) {\n    const name = quote(prefix + table.tableName);\n\n    const columns = Object.entries(table.fields).map(([field, spec]) => {\n      const nullability = spec.required ? \" NOT NULL\" : \"\";\n      return `  ${quote(toSnakeCase(field))} ${SQL_TYPE[spec.type]}${nullability}${defaultClause(spec)}`;\n    });\n\n    if (table.primaryKey?.length) {\n      const key = table.primaryKey.map((field) => quote(toSnakeCase(field))).join(\", \");\n      columns.push(`  PRIMARY KEY (${key})`);\n    }\n\n    statements.push(`CREATE TABLE IF NOT EXISTS ${name} (\\n${columns.join(\",\\n\")}\\n)`);\n\n    for (const declaration of table.indexes ?? []) {\n      const indexName = quote(\n        prefix + (declaration.name ?? `${table.tableName}_${declaration.on.join(\"_\")}_idx`),\n      );\n      const columns = declaration.on.map((field) => quote(toSnakeCase(field))).join(\", \");\n      const unique = declaration.unique ? \"UNIQUE \" : \"\";\n      statements.push(`CREATE ${unique}INDEX IF NOT EXISTS ${indexName} ON ${name} (${columns})`);\n    }\n  }\n\n  return statements;\n}\n","import type { FieldDeclaration, SchemaDeclaration, TableDeclaration } from \"../core/plugin\";\nimport { toSnakeCase } from \"./declaration\";\nimport { renderPostgresDdl } from \"./render-sql\";\n\n/**\n * Introspects a live Postgres schema and emits only what is missing.\n *\n * renderPostgresDdl emits CREATE TABLE IF NOT EXISTS, which is correct exactly\n * once. On an existing database it is a silent no-op, so an adopter who\n * bootstrapped with raw SQL had no way to pick up a column a later version\n * added — their app broke at runtime with \"column does not exist\" instead.\n *\n * Additive only, on purpose. Dropping a column or changing a type is\n * destructive and context-dependent, so those are reported in `unsupported`\n * rather than guessed at.\n */\n\nconst SQL_TYPE: Record<FieldDeclaration[\"type\"], string> = {\n  string: \"text\",\n  number: \"integer\",\n  boolean: \"boolean\",\n  date: \"timestamptz\",\n  json: \"jsonb\",\n};\n\n/** What information_schema reports for each of our declared types. */\nconst LIVE_TYPE: Record<FieldDeclaration[\"type\"], readonly string[]> = {\n  string: [\"text\", \"character varying\", \"character\"],\n  number: [\"integer\", \"bigint\", \"smallint\"],\n  boolean: [\"boolean\"],\n  date: [\"timestamp with time zone\", \"timestamp without time zone\"],\n  json: [\"jsonb\", \"json\"],\n};\n\nconst quote = (value: string) => `\"${value.replace(/\"/g, '\"\"')}\"`;\n\nconst defaultClause = (field: FieldDeclaration): string => {\n  if (field.defaultNow) return \" DEFAULT now()\";\n  if (field.default === undefined) return \"\";\n  if (typeof field.default === \"string\") return ` DEFAULT '${field.default.replace(/'/g, \"''\")}'`;\n  return ` DEFAULT ${field.default}`;\n};\n\nconst indexName = (\n  table: TableDeclaration,\n  declaration: { on: readonly string[]; name?: string },\n) => declaration.name ?? `${table.tableName}_${declaration.on.join(\"_\")}_idx`;\n\nexport type LiveColumn = { table: string; column: string; type: string; nullable: boolean };\n\nexport type MigrationPlan = {\n  /** Run in order. Empty means the live schema already matches. */\n  statements: readonly string[];\n  /** Differences this cannot express safely. Read them; they need a human. */\n  unsupported: readonly string[];\n  /** Tables that do not exist yet — these get a full CREATE TABLE. */\n  createdTables: readonly string[];\n};\n\n/**\n * Reads the live column list. Pass a function that runs the query — this\n * module stays driver-agnostic, as the rest of the schema tooling does.\n */\nexport type Introspector = () => Promise<readonly LiveColumn[]>;\n\n/** The query an Introspector should run. Exported so callers need not retype it. */\nexport const INTROSPECT_SQL = `\n  SELECT table_name, column_name, data_type, is_nullable\n  FROM information_schema.columns\n  WHERE table_schema = current_schema()\n`;\n\nexport async function planPostgresMigration(\n  introspect: Introspector,\n  schema: SchemaDeclaration,\n  prefix = \"\",\n): Promise<MigrationPlan> {\n  const live = await introspect();\n\n  const byTable = new Map<string, Map<string, LiveColumn>>();\n  for (const column of live) {\n    const columns = byTable.get(column.table) ?? new Map<string, LiveColumn>();\n    columns.set(column.column, column);\n    byTable.set(column.table, columns);\n  }\n\n  const statements: string[] = [];\n  const unsupported: string[] = [];\n  const createdTables: string[] = [];\n\n  for (const table of Object.values(schema)) {\n    const qualified = prefix + table.tableName;\n    const existing = byTable.get(qualified);\n\n    // Absent entirely: the ordinary bootstrap path still applies.\n    if (!existing || existing.size === 0) {\n      createdTables.push(qualified);\n      statements.push(...renderPostgresDdl({ [table.tableName]: table }, prefix));\n      continue;\n    }\n\n    for (const [field, spec] of Object.entries(table.fields)) {\n      const column = toSnakeCase(field);\n      const found = existing.get(column);\n\n      if (!found) {\n        // NOT NULL on a populated table fails without a default, so a required\n        // column that cannot fill itself is added nullable and flagged.\n        const canFill = spec.defaultNow || spec.default !== undefined;\n        const nullability = spec.required && canFill ? \" NOT NULL\" : \"\";\n\n        statements.push(\n          `ALTER TABLE ${quote(qualified)} ADD COLUMN IF NOT EXISTS ` +\n            `${quote(column)} ${SQL_TYPE[spec.type]}${nullability}${defaultClause(spec)}`,\n        );\n\n        if (spec.required && !canFill) {\n          unsupported.push(\n            `${qualified}.${column} is declared required but has no default; ` +\n              \"it was added nullable. Backfill it, then ALTER ... SET NOT NULL yourself.\",\n          );\n        }\n        continue;\n      }\n\n      if (!LIVE_TYPE[spec.type].includes(found.type)) {\n        unsupported.push(\n          `${qualified}.${column} is ${found.type} but ${spec.type} is declared ` +\n            `(${SQL_TYPE[spec.type]}). Changing a column type can lose data — do it yourself.`,\n        );\n      }\n    }\n\n    // Indexes are cheap and idempotent, so they are re-issued unconditionally.\n    for (const declaration of table.indexes ?? []) {\n      const name = quote(prefix + indexName(table, declaration));\n      const columns = declaration.on.map((field) => quote(toSnakeCase(field))).join(\", \");\n      statements.push(\n        `CREATE ${declaration.unique ? \"UNIQUE \" : \"\"}INDEX IF NOT EXISTS ${name} ` +\n          `ON ${quote(qualified)} (${columns})`,\n      );\n    }\n\n    for (const column of existing.keys()) {\n      const declared = Object.keys(table.fields).some((field) => toSnakeCase(field) === column);\n      if (!declared) {\n        unsupported.push(\n          `${qualified}.${column} exists but is not declared. Left alone — ` +\n            \"drop it yourself if it is ours and no longer needed.\",\n        );\n      }\n    }\n  }\n\n  return { statements, unsupported, createdTables };\n}\n","import type { FieldDeclaration, SchemaDeclaration, TableDeclaration } from \"../core/plugin\";\nimport { toSnakeCase } from \"./declaration\";\n\nconst COLUMN_BUILDER: Record<FieldDeclaration[\"type\"], string> = {\n  string: \"text\",\n  number: \"integer\",\n  boolean: \"boolean\",\n  date: \"timestamp\",\n  json: \"jsonb\",\n};\n\nconst literal = (value: string | number | boolean) =>\n  typeof value === \"string\" ? JSON.stringify(value) : String(value);\n\nfunction renderColumn(name: string, field: FieldDeclaration, isSinglePk: boolean): string {\n  const builder = COLUMN_BUILDER[field.type];\n  const column = toSnakeCase(name);\n\n  let expression =\n    field.type === \"date\"\n      ? `${builder}(${JSON.stringify(column)}, { withTimezone: true })`\n      : `${builder}(${JSON.stringify(column)})`;\n\n  if (isSinglePk) return `    ${name}: ${expression}.primaryKey(),`;\n\n  if (field.required) expression += \".notNull()\";\n  if (field.defaultNow) expression += \".defaultNow()\";\n  else if (field.default !== undefined) expression += `.default(${literal(field.default)})`;\n\n  return `    ${name}: ${expression},`;\n}\n\nfunction renderTable(key: string, table: TableDeclaration, prefix: string): string {\n  const compositePk = (table.primaryKey?.length ?? 0) > 1;\n  const singlePk = !compositePk ? table.primaryKey?.[0] : undefined;\n\n  const columns = Object.entries(table.fields)\n    .map(([name, field]) => renderColumn(name, field, name === singlePk))\n    .join(\"\\n\");\n\n  const extras: string[] = [];\n\n  for (const declaration of table.indexes ?? []) {\n    const builder = declaration.unique ? \"uniqueIndex\" : \"index\";\n    const name = declaration.name ?? `${table.tableName}_${declaration.on.join(\"_\")}_idx`;\n    const columns = declaration.on.map((field) => `table.${field}`).join(\", \");\n    extras.push(`    ${builder}(${JSON.stringify(prefix + name)}).on(${columns}),`);\n  }\n\n  if (compositePk) {\n    const columns = (table.primaryKey ?? []).map((field) => `table.${field}`).join(\", \");\n    extras.push(`    primaryKey({ columns: [${columns}] }),`);\n  }\n\n  const third = extras.length ? `,\\n  (table) => [\\n${extras.join(\"\\n\")}\\n  ]` : \"\";\n\n  return `export const ${key} = pgTable(\\n  ${JSON.stringify(prefix + table.tableName)},\\n  {\\n${columns}\\n  }${third},\\n);`;\n}\n\n/** Renders a SchemaDeclaration to Drizzle pg-core source. */\nexport function renderDrizzleSchema(schema: SchemaDeclaration, prefix = \"\"): string {\n  const tables = Object.entries(schema);\n\n  const used = new Set<string>([\"pgTable\"]);\n  for (const [, table] of tables) {\n    for (const field of Object.values(table.fields)) used.add(COLUMN_BUILDER[field.type]);\n    for (const declaration of table.indexes ?? []) {\n      used.add(declaration.unique ? \"uniqueIndex\" : \"index\");\n    }\n    if ((table.primaryKey?.length ?? 0) > 1) used.add(\"primaryKey\");\n  }\n\n  const imports = [...used].sort().join(\", \");\n  const body = tables.map(([key, table]) => renderTable(key, table, prefix)).join(\"\\n\\n\");\n\n  return `// Generated by easy-ping. Do not edit by hand.\\nimport { ${imports} } from \"drizzle-orm/pg-core\";\\n\\n${body}\\n`;\n}\n"]}
+{"version":3,"sources":["../src/schema/render-sql.ts","../src/schema/migrate-sql.ts","../src/schema/render-drizzle.ts"],"names":["indexName","columns","SQL_TYPE","quote","defaultClause"],"mappings":";;;AAGA,IAAM,QAAA,GAAqD;AAAA,EACzD,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,aAAA;AAAA,EACN,IAAA,EAAM;AACR,CAAA;AAEA,IAAM,KAAA,GAAQ,CAAC,KAAA,KAAkB,CAAA,CAAA,EAAI,MAAM,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAE9D,IAAM,aAAA,GAAgB,CAAC,KAAA,KAAoC;AACzD,EAAA,IAAI,KAAA,CAAM,YAAY,OAAO,gBAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,EAAW,OAAO,EAAA;AACxC,EAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,EAAU,OAAO,CAAA,UAAA,EAAa,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAC5F,EAAA,OAAO,CAAA,SAAA,EAAY,MAAM,OAAO,CAAA,CAAA;AAClC,CAAA;AAGO,SAAS,iBAAA,CAAkB,MAAA,EAA2B,MAAA,GAAS,EAAA,EAAc;AAClF,EAAA,MAAM,aAAuB,EAAC;AAE9B,EAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,EAAG;AACzC,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,MAAA,GAAS,KAAA,CAAM,SAAS,CAAA;AAE3C,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,KAAA,EAAO,IAAI,CAAA,KAAM;AAClE,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,GAAW,WAAA,GAAc,EAAA;AAClD,MAAA,OAAO,KAAK,KAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAA,EAAI,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,WAAW,CAAA,EAAG,aAAA,CAAc,IAAI,CAAC,CAAA,CAAA;AAAA,IAClG,CAAC,CAAA;AAED,IAAA,IAAI,KAAA,CAAM,YAAY,MAAA,EAAQ;AAC5B,MAAA,MAAM,GAAA,GAAM,KAAA,CAAM,UAAA,CAAW,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AAChF,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IACvC;AAEA,IAAA,UAAA,CAAW,IAAA,CAAK,8BAA8B,IAAI,CAAA;AAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAC;AAAA,CAAA,CAAK,CAAA;AAEjF,IAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,MAAA,MAAMA,UAAAA,GAAY,KAAA;AAAA,QAChB,MAAA,IAAU,WAAA,CAAY,IAAA,IAAQ,CAAA,EAAG,KAAA,CAAM,SAAS,CAAA,CAAA,EAAI,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAC,CAAA,IAAA,CAAA;AAAA,OAC9E;AACA,MAAA,MAAMC,QAAAA,GAAU,WAAA,CAAY,EAAA,CAAG,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AAClF,MAAA,MAAM,MAAA,GAAS,WAAA,CAAY,MAAA,GAAS,SAAA,GAAY,EAAA;AAChD,MAAA,UAAA,CAAW,IAAA,CAAK,UAAU,MAAM,CAAA,oBAAA,EAAuBD,UAAS,CAAA,IAAA,EAAO,IAAI,CAAA,EAAA,EAAKC,QAAO,CAAA,CAAA,CAAG,CAAA;AAAA,IAC5F;AAAA,EACF;AAEA,EAAA,OAAO,UAAA;AACT;;;ACjCA,IAAMC,SAAAA,GAAqD;AAAA,EACzD,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,aAAA;AAAA,EACN,IAAA,EAAM;AACR,CAAA;AAGA,IAAM,SAAA,GAAiE;AAAA,EACrE,MAAA,EAAQ,CAAC,MAAA,EAAQ,mBAAA,EAAqB,WAAW,CAAA;AAAA,EACjD,MAAA,EAAQ,CAAC,SAAA,EAAW,QAAA,EAAU,UAAU,CAAA;AAAA,EACxC,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA,EACnB,IAAA,EAAM,CAAC,0BAAA,EAA4B,6BAA6B,CAAA;AAAA,EAChE,IAAA,EAAM,CAAC,OAAA,EAAS,MAAM;AACxB,CAAA;AAEA,IAAMC,MAAAA,GAAQ,CAAC,KAAA,KAAkB,CAAA,CAAA,EAAI,MAAM,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAE9D,IAAMC,cAAAA,GAAgB,CAAC,KAAA,KAAoC;AACzD,EAAA,IAAI,KAAA,CAAM,YAAY,OAAO,gBAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,OAAA,KAAY,MAAA,EAAW,OAAO,EAAA;AACxC,EAAA,IAAI,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,EAAU,OAAO,CAAA,UAAA,EAAa,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAC,CAAA,CAAA,CAAA;AAC5F,EAAA,OAAO,CAAA,SAAA,EAAY,MAAM,OAAO,CAAA,CAAA;AAClC,CAAA;AAEA,IAAM,SAAA,GAAY,CAChB,KAAA,EACA,WAAA,KACG,YAAY,IAAA,IAAQ,CAAA,EAAG,KAAA,CAAM,SAAS,CAAA,CAAA,EAAI,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAC,CAAA,IAAA,CAAA;AAoBhE,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;AAM9B,eAAsB,qBAAA,CACpB,UAAA,EACA,MAAA,EACA,MAAA,GAAS,EAAA,EACe;AACxB,EAAA,MAAM,IAAA,GAAO,MAAM,UAAA,EAAW;AAE9B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAqC;AACzD,EAAA,KAAA,MAAW,UAAU,IAAA,EAAM;AACzB,IAAA,MAAM,UAAU,OAAA,CAAQ,GAAA,CAAI,OAAO,KAAK,CAAA,wBAAS,GAAA,EAAwB;AACzE,IAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AACjC,IAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,OAAO,CAAA;AAAA,EACnC;AAEA,EAAA,MAAM,aAAuB,EAAC;AAC9B,EAAA,MAAM,cAAwB,EAAC;AAC/B,EAAA,MAAM,gBAA0B,EAAC;AAEjC,EAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,EAAG;AACzC,IAAA,MAAM,SAAA,GAAY,SAAS,KAAA,CAAM,SAAA;AACjC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AAGtC,IAAA,IAAI,CAAC,QAAA,IAAY,QAAA,CAAS,IAAA,KAAS,CAAA,EAAG;AACpC,MAAA,aAAA,CAAc,KAAK,SAAS,CAAA;AAC5B,MAAA,UAAA,CAAW,IAAA,CAAK,GAAG,iBAAA,CAAkB,EAAE,CAAC,KAAA,CAAM,SAAS,GAAG,KAAA,EAAM,EAAG,MAAM,CAAC,CAAA;AAC1E,MAAA;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,CAAC,OAAO,IAAI,CAAA,IAAK,OAAO,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,EAAG;AACxD,MAAA,MAAM,MAAA,GAAS,YAAY,KAAK,CAAA;AAChC,MAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAEjC,MAAA,IAAI,CAAC,KAAA,EAAO;AAGV,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,IAAc,IAAA,CAAK,OAAA,KAAY,MAAA;AACpD,QAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,IAAY,OAAA,GAAU,WAAA,GAAc,EAAA;AAE7D,QAAA,UAAA,CAAW,IAAA;AAAA,UACT,eAAeD,MAAAA,CAAM,SAAS,CAAC,CAAA,0BAAA,EAC1BA,MAAAA,CAAM,MAAM,CAAC,CAAA,CAAA,EAAID,SAAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,EAAG,WAAW,CAAA,EAAGE,cAAAA,CAAc,IAAI,CAAC,CAAA;AAAA,SAC/E;AAEA,QAAA,IAAI,IAAA,CAAK,QAAA,IAAY,CAAC,OAAA,EAAS;AAC7B,UAAA,WAAA,CAAY,IAAA;AAAA,YACV,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,MAAM,CAAA,mHAAA;AAAA,WAExB;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,UAAU,IAAA,CAAK,IAAI,EAAE,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EAAG;AAC9C,QAAA,WAAA,CAAY,IAAA;AAAA,UACV,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,MAAM,OAAO,KAAA,CAAM,IAAI,CAAA,KAAA,EAAQ,IAAA,CAAK,IAAI,CAAA,cAAA,EAClDF,SAAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,8DAAA;AAAA,SAC3B;AAAA,MACF;AAAA,IACF;AAGA,IAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,MAAA,MAAM,OAAOC,MAAAA,CAAM,MAAA,GAAS,SAAA,CAAU,KAAA,EAAO,WAAW,CAAC,CAAA;AACzD,MAAA,MAAM,OAAA,GAAU,WAAA,CAAY,EAAA,CAAG,GAAA,CAAI,CAAC,KAAA,KAAUA,MAAAA,CAAM,WAAA,CAAY,KAAK,CAAC,CAAC,CAAA,CAAE,KAAK,IAAI,CAAA;AAClF,MAAA,UAAA,CAAW,IAAA;AAAA,QACT,CAAA,OAAA,EAAU,WAAA,CAAY,MAAA,GAAS,SAAA,GAAY,EAAE,CAAA,oBAAA,EAAuB,IAAI,CAAA,IAAA,EAChEA,MAAAA,CAAM,SAAS,CAAC,CAAA,EAAA,EAAK,OAAO,CAAA,CAAA;AAAA,OACtC;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,MAAA,IAAU,QAAA,CAAS,IAAA,EAAK,EAAG;AACpC,MAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,KAAA,KAAU,WAAA,CAAY,KAAK,CAAA,KAAM,MAAM,CAAA;AACxF,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,WAAA,CAAY,IAAA;AAAA,UACV,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,MAAM,CAAA,mGAAA;AAAA,SAExB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,UAAA,EAAY,WAAA,EAAa,aAAA,EAAc;AAClD;;;ACxJA,IAAM,cAAA,GAA2D;AAAA,EAC/D,MAAA,EAAQ,MAAA;AAAA,EACR,MAAA,EAAQ,SAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,IAAA,EAAM,WAAA;AAAA,EACN,IAAA,EAAM;AACR,CAAA;AAEA,IAAM,OAAA,GAAU,CAAC,KAAA,KACf,OAAO,KAAA,KAAU,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAElE,SAAS,YAAA,CAAa,IAAA,EAAc,KAAA,EAAyB,UAAA,EAA6B;AACxF,EAAA,MAAM,OAAA,GAAU,cAAA,CAAe,KAAA,CAAM,IAAI,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,YAAY,IAAI,CAAA;AAE/B,EAAA,IAAI,aACF,KAAA,CAAM,IAAA,KAAS,SACX,CAAA,EAAG,OAAO,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,8BACpC,CAAA,EAAG,OAAO,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA,CAAA,CAAA;AAE1C,EAAA,IAAI,UAAA,EAAY,OAAO,CAAA,IAAA,EAAO,IAAI,KAAK,UAAU,CAAA,cAAA,CAAA;AAEjD,EAAA,IAAI,KAAA,CAAM,UAAU,UAAA,IAAc,YAAA;AAClC,EAAA,IAAI,KAAA,CAAM,YAAY,UAAA,IAAc,eAAA;AAAA,OAAA,IAC3B,KAAA,CAAM,YAAY,MAAA,EAAW,UAAA,IAAc,YAAY,OAAA,CAAQ,KAAA,CAAM,OAAO,CAAC,CAAA,CAAA,CAAA;AAEtF,EAAA,OAAO,CAAA,IAAA,EAAO,IAAI,CAAA,EAAA,EAAK,UAAU,CAAA,CAAA,CAAA;AACnC;AAEA,SAAS,WAAA,CAAY,GAAA,EAAa,KAAA,EAAyB,MAAA,EAAwB;AACjF,EAAA,MAAM,WAAA,GAAA,CAAe,KAAA,CAAM,UAAA,EAAY,MAAA,IAAU,CAAA,IAAK,CAAA;AACtD,EAAA,MAAM,WAAW,CAAC,WAAA,GAAc,KAAA,CAAM,UAAA,GAAa,CAAC,CAAA,GAAI,MAAA;AAExD,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,CACxC,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,KAAK,CAAA,KAAM,YAAA,CAAa,MAAM,KAAA,EAAO,IAAA,KAAS,QAAQ,CAAC,CAAA,CACnE,KAAK,IAAI,CAAA;AAEZ,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,MAAA,GAAS,aAAA,GAAgB,OAAA;AACrD,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,IAAA,IAAQ,CAAA,EAAG,KAAA,CAAM,SAAS,CAAA,CAAA,EAAI,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAC,CAAA,IAAA,CAAA;AAC/E,IAAA,MAAMF,QAAAA,GAAU,WAAA,CAAY,EAAA,CAAG,GAAA,CAAI,CAAC,KAAA,KAAU,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AACzE,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,IAAA,EAAO,OAAO,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,IAAI,CAAC,CAAA,KAAA,EAAQA,QAAO,CAAA,EAAA,CAAI,CAAA;AAAA,EAChF;AAEA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAMA,QAAAA,GAAAA,CAAW,KAAA,CAAM,UAAA,IAAc,EAAC,EAAG,GAAA,CAAI,CAAC,KAAA,KAAU,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AACnF,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,2BAAA,EAA8BA,QAAO,CAAA,KAAA,CAAO,CAAA;AAAA,EAC1D;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAO,MAAA,GAAS,CAAA;AAAA;AAAA,EAAsB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC;AAAA,GAAA,CAAA,GAAU,EAAA;AAE/E,EAAA,OAAO,gBAAgB,GAAG,CAAA;AAAA,EAAA,EAAkB,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,KAAA,CAAM,SAAS,CAAC,CAAA;AAAA;AAAA,EAAW,OAAO;AAAA,GAAA,EAAQ,KAAK,CAAA;AAAA,EAAA,CAAA;AACrH;AAGO,SAAS,mBAAA,CAAoB,MAAA,EAA2B,MAAA,GAAS,EAAA,EAAY;AAClF,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA;AAEpC,EAAA,MAAM,IAAA,mBAAO,IAAI,GAAA,CAAY,CAAC,SAAS,CAAC,CAAA;AACxC,EAAA,KAAA,MAAW,GAAG,KAAK,CAAA,IAAK,MAAA,EAAQ;AAC9B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,cAAA,CAAe,KAAA,CAAM,IAAI,CAAC,CAAA;AACpF,IAAA,KAAA,MAAW,WAAA,IAAe,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG;AAC7C,MAAA,IAAA,CAAK,GAAA,CAAI,WAAA,CAAY,MAAA,GAAS,aAAA,GAAgB,OAAO,CAAA;AAAA,IACvD;AACA,IAAA,IAAA,CAAK,MAAM,UAAA,EAAY,MAAA,IAAU,KAAK,CAAA,EAAG,IAAA,CAAK,IAAI,YAAY,CAAA;AAAA,EAChE;AAEA,EAAA,MAAM,OAAA,GAAU,CAAC,GAAG,IAAI,EAAE,IAAA,EAAK,CAAE,KAAK,IAAI,CAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM,WAAA,CAAY,KAAK,KAAA,EAAO,MAAM,CAAC,CAAA,CAAE,KAAK,MAAM,CAAA;AAEtF,EAAA,OAAO,CAAA;AAAA,SAAA,EAA6D,OAAO,CAAA;;AAAA,EAAqC,IAAI;AAAA,CAAA;AACtH","file":"chunk-YEMRRMJQ.js","sourcesContent":["import type { FieldDeclaration, SchemaDeclaration } from \"../core/plugin\";\nimport { toSnakeCase } from \"./declaration\";\n\nconst SQL_TYPE: Record<FieldDeclaration[\"type\"], string> = {\n  string: \"text\",\n  number: \"integer\",\n  boolean: \"boolean\",\n  date: \"timestamptz\",\n  json: \"jsonb\",\n};\n\nconst quote = (value: string) => `\"${value.replace(/\"/g, '\"\"')}\"`;\n\nconst defaultClause = (field: FieldDeclaration): string => {\n  if (field.defaultNow) return \" DEFAULT now()\";\n  if (field.default === undefined) return \"\";\n  if (typeof field.default === \"string\") return ` DEFAULT '${field.default.replace(/'/g, \"''\")}'`;\n  return ` DEFAULT ${field.default}`;\n};\n\n/** SchemaDeclaration to Postgres DDL, from the same source as the Drizzle renderer. */\nexport function renderPostgresDdl(schema: SchemaDeclaration, prefix = \"\"): string[] {\n  const statements: string[] = [];\n\n  for (const table of Object.values(schema)) {\n    const name = quote(prefix + table.tableName);\n\n    const columns = Object.entries(table.fields).map(([field, spec]) => {\n      const nullability = spec.required ? \" NOT NULL\" : \"\";\n      return `  ${quote(toSnakeCase(field))} ${SQL_TYPE[spec.type]}${nullability}${defaultClause(spec)}`;\n    });\n\n    if (table.primaryKey?.length) {\n      const key = table.primaryKey.map((field) => quote(toSnakeCase(field))).join(\", \");\n      columns.push(`  PRIMARY KEY (${key})`);\n    }\n\n    statements.push(`CREATE TABLE IF NOT EXISTS ${name} (\\n${columns.join(\",\\n\")}\\n)`);\n\n    for (const declaration of table.indexes ?? []) {\n      const indexName = quote(\n        prefix + (declaration.name ?? `${table.tableName}_${declaration.on.join(\"_\")}_idx`),\n      );\n      const columns = declaration.on.map((field) => quote(toSnakeCase(field))).join(\", \");\n      const unique = declaration.unique ? \"UNIQUE \" : \"\";\n      statements.push(`CREATE ${unique}INDEX IF NOT EXISTS ${indexName} ON ${name} (${columns})`);\n    }\n  }\n\n  return statements;\n}\n","import type { FieldDeclaration, SchemaDeclaration, TableDeclaration } from \"../core/plugin\";\nimport { toSnakeCase } from \"./declaration\";\nimport { renderPostgresDdl } from \"./render-sql\";\n\n/**\n * Introspects a live Postgres schema and emits only what is missing.\n *\n * renderPostgresDdl emits CREATE TABLE IF NOT EXISTS, which is correct exactly\n * once. On an existing database it is a silent no-op, so an adopter who\n * bootstrapped with raw SQL had no way to pick up a column a later version\n * added — their app broke at runtime with \"column does not exist\" instead.\n *\n * Additive only, on purpose. Dropping a column or changing a type is\n * destructive and context-dependent, so those are reported in `unsupported`\n * rather than guessed at.\n */\n\nconst SQL_TYPE: Record<FieldDeclaration[\"type\"], string> = {\n  string: \"text\",\n  number: \"integer\",\n  boolean: \"boolean\",\n  date: \"timestamptz\",\n  json: \"jsonb\",\n};\n\n/** What information_schema reports for each of our declared types. */\nconst LIVE_TYPE: Record<FieldDeclaration[\"type\"], readonly string[]> = {\n  string: [\"text\", \"character varying\", \"character\"],\n  number: [\"integer\", \"bigint\", \"smallint\"],\n  boolean: [\"boolean\"],\n  date: [\"timestamp with time zone\", \"timestamp without time zone\"],\n  json: [\"jsonb\", \"json\"],\n};\n\nconst quote = (value: string) => `\"${value.replace(/\"/g, '\"\"')}\"`;\n\nconst defaultClause = (field: FieldDeclaration): string => {\n  if (field.defaultNow) return \" DEFAULT now()\";\n  if (field.default === undefined) return \"\";\n  if (typeof field.default === \"string\") return ` DEFAULT '${field.default.replace(/'/g, \"''\")}'`;\n  return ` DEFAULT ${field.default}`;\n};\n\nconst indexName = (\n  table: TableDeclaration,\n  declaration: { on: readonly string[]; name?: string },\n) => declaration.name ?? `${table.tableName}_${declaration.on.join(\"_\")}_idx`;\n\nexport type LiveColumn = { table: string; column: string; type: string; nullable: boolean };\n\nexport type MigrationPlan = {\n  /** Run in order. Empty means the live schema already matches. */\n  statements: readonly string[];\n  /** Differences this cannot express safely. Read them; they need a human. */\n  unsupported: readonly string[];\n  /** Tables that do not exist yet — these get a full CREATE TABLE. */\n  createdTables: readonly string[];\n};\n\n/**\n * Reads the live column list. Pass a function that runs the query — this\n * module stays driver-agnostic, as the rest of the schema tooling does.\n */\nexport type Introspector = () => Promise<readonly LiveColumn[]>;\n\n/** The query an Introspector should run. Exported so callers need not retype it. */\nexport const INTROSPECT_SQL = `\n  SELECT table_name, column_name, data_type, is_nullable\n  FROM information_schema.columns\n  WHERE table_schema = current_schema()\n`;\n\nexport async function planPostgresMigration(\n  introspect: Introspector,\n  schema: SchemaDeclaration,\n  prefix = \"\",\n): Promise<MigrationPlan> {\n  const live = await introspect();\n\n  const byTable = new Map<string, Map<string, LiveColumn>>();\n  for (const column of live) {\n    const columns = byTable.get(column.table) ?? new Map<string, LiveColumn>();\n    columns.set(column.column, column);\n    byTable.set(column.table, columns);\n  }\n\n  const statements: string[] = [];\n  const unsupported: string[] = [];\n  const createdTables: string[] = [];\n\n  for (const table of Object.values(schema)) {\n    const qualified = prefix + table.tableName;\n    const existing = byTable.get(qualified);\n\n    // Absent entirely: the ordinary bootstrap path still applies.\n    if (!existing || existing.size === 0) {\n      createdTables.push(qualified);\n      statements.push(...renderPostgresDdl({ [table.tableName]: table }, prefix));\n      continue;\n    }\n\n    for (const [field, spec] of Object.entries(table.fields)) {\n      const column = toSnakeCase(field);\n      const found = existing.get(column);\n\n      if (!found) {\n        // NOT NULL on a populated table fails without a default, so a required\n        // column that cannot fill itself is added nullable and flagged.\n        const canFill = spec.defaultNow || spec.default !== undefined;\n        const nullability = spec.required && canFill ? \" NOT NULL\" : \"\";\n\n        statements.push(\n          `ALTER TABLE ${quote(qualified)} ADD COLUMN IF NOT EXISTS ` +\n            `${quote(column)} ${SQL_TYPE[spec.type]}${nullability}${defaultClause(spec)}`,\n        );\n\n        if (spec.required && !canFill) {\n          unsupported.push(\n            `${qualified}.${column} is declared required but has no default; ` +\n              \"it was added nullable. Backfill it, then ALTER ... SET NOT NULL yourself.\",\n          );\n        }\n        continue;\n      }\n\n      if (!LIVE_TYPE[spec.type].includes(found.type)) {\n        unsupported.push(\n          `${qualified}.${column} is ${found.type} but ${spec.type} is declared ` +\n            `(${SQL_TYPE[spec.type]}). Changing a column type can lose data — do it yourself.`,\n        );\n      }\n    }\n\n    // Indexes are cheap and idempotent, so they are re-issued unconditionally.\n    for (const declaration of table.indexes ?? []) {\n      const name = quote(prefix + indexName(table, declaration));\n      const columns = declaration.on.map((field) => quote(toSnakeCase(field))).join(\", \");\n      statements.push(\n        `CREATE ${declaration.unique ? \"UNIQUE \" : \"\"}INDEX IF NOT EXISTS ${name} ` +\n          `ON ${quote(qualified)} (${columns})`,\n      );\n    }\n\n    for (const column of existing.keys()) {\n      const declared = Object.keys(table.fields).some((field) => toSnakeCase(field) === column);\n      if (!declared) {\n        unsupported.push(\n          `${qualified}.${column} exists but is not declared. Left alone — ` +\n            \"drop it yourself if it is ours and no longer needed.\",\n        );\n      }\n    }\n  }\n\n  return { statements, unsupported, createdTables };\n}\n","import type { FieldDeclaration, SchemaDeclaration, TableDeclaration } from \"../core/plugin\";\nimport { toSnakeCase } from \"./declaration\";\n\nconst COLUMN_BUILDER: Record<FieldDeclaration[\"type\"], string> = {\n  string: \"text\",\n  number: \"integer\",\n  boolean: \"boolean\",\n  date: \"timestamp\",\n  json: \"jsonb\",\n};\n\nconst literal = (value: string | number | boolean) =>\n  typeof value === \"string\" ? JSON.stringify(value) : String(value);\n\nfunction renderColumn(name: string, field: FieldDeclaration, isSinglePk: boolean): string {\n  const builder = COLUMN_BUILDER[field.type];\n  const column = toSnakeCase(name);\n\n  let expression =\n    field.type === \"date\"\n      ? `${builder}(${JSON.stringify(column)}, { withTimezone: true })`\n      : `${builder}(${JSON.stringify(column)})`;\n\n  if (isSinglePk) return `    ${name}: ${expression}.primaryKey(),`;\n\n  if (field.required) expression += \".notNull()\";\n  if (field.defaultNow) expression += \".defaultNow()\";\n  else if (field.default !== undefined) expression += `.default(${literal(field.default)})`;\n\n  return `    ${name}: ${expression},`;\n}\n\nfunction renderTable(key: string, table: TableDeclaration, prefix: string): string {\n  const compositePk = (table.primaryKey?.length ?? 0) > 1;\n  const singlePk = !compositePk ? table.primaryKey?.[0] : undefined;\n\n  const columns = Object.entries(table.fields)\n    .map(([name, field]) => renderColumn(name, field, name === singlePk))\n    .join(\"\\n\");\n\n  const extras: string[] = [];\n\n  for (const declaration of table.indexes ?? []) {\n    const builder = declaration.unique ? \"uniqueIndex\" : \"index\";\n    const name = declaration.name ?? `${table.tableName}_${declaration.on.join(\"_\")}_idx`;\n    const columns = declaration.on.map((field) => `table.${field}`).join(\", \");\n    extras.push(`    ${builder}(${JSON.stringify(prefix + name)}).on(${columns}),`);\n  }\n\n  if (compositePk) {\n    const columns = (table.primaryKey ?? []).map((field) => `table.${field}`).join(\", \");\n    extras.push(`    primaryKey({ columns: [${columns}] }),`);\n  }\n\n  const third = extras.length ? `,\\n  (table) => [\\n${extras.join(\"\\n\")}\\n  ]` : \"\";\n\n  return `export const ${key} = pgTable(\\n  ${JSON.stringify(prefix + table.tableName)},\\n  {\\n${columns}\\n  }${third},\\n);`;\n}\n\n/** Renders a SchemaDeclaration to Drizzle pg-core source. */\nexport function renderDrizzleSchema(schema: SchemaDeclaration, prefix = \"\"): string {\n  const tables = Object.entries(schema);\n\n  const used = new Set<string>([\"pgTable\"]);\n  for (const [, table] of tables) {\n    for (const field of Object.values(table.fields)) used.add(COLUMN_BUILDER[field.type]);\n    for (const declaration of table.indexes ?? []) {\n      used.add(declaration.unique ? \"uniqueIndex\" : \"index\");\n    }\n    if ((table.primaryKey?.length ?? 0) > 1) used.add(\"primaryKey\");\n  }\n\n  const imports = [...used].sort().join(\", \");\n  const body = tables.map(([key, table]) => renderTable(key, table, prefix)).join(\"\\n\\n\");\n\n  return `// Generated by easy-ping. Do not edit by hand.\\nimport { ${imports} } from \"drizzle-orm/pg-core\";\\n\\n${body}\\n`;\n}\n"]}