gemi 0.116.0 → 0.117.0

package/dist/orm/schema.d.ts

@@ -31,7 +31,19 @@
  * `prisma generate`" — and the allowlist is what makes the failure loud rather
  * than silent if one ever slips past it.
  */
-export declare const SCHEMA_ARTIFACT_VERSION = 2;
+export declare const SCHEMA_ARTIFACT_VERSION = 3;
+/**
+ * Every artifact version this runtime reads. **3** added
+ * `FieldSchema.encrypted`, and is the version emitted only for a schema that
+ * uses it: a runtime that predates encrypted columns would ignore the flag and
+ * write those columns in plaintext, which is exactly the silent skew this
+ * version check exists to make loud. A schema without encrypted columns is
+ * still emitted as **2** — it is the same artifact — so regenerating does not
+ * force every teammate and deploy onto the new runtime for nothing.
+ */
+export declare const READABLE_ARTIFACT_VERSIONS: readonly number[];
+/** The version a generated artifact for these schemas is stamped with. */
+export declare function artifactVersionFor(schemas: readonly ModelSchema[]): number;
 /**
  * Prisma's scalar types, verbatim. Not SQL types — the mapping from these to a
  * column type is the dialect's business, and it differs (SQLite has no
@@ -121,6 +133,18 @@ export interface FieldSchema {
      */
     enum?: string;
     default?: DefaultSpec;
+    /**
+     * `/// @gemi.encrypted` on the field: stored as an encrypted envelope and
+     * decrypted on every read (`orm/encryption.ts`). Only on a non-list `String`
+     * that is not a key, has no default and is not a relation's foreign key —
+     * the generator refuses the rest.
+     *
+     * Absent rather than `false`, so an artifact without encrypted columns is
+     * byte-identical to one generated before this existed. An artifact *with*
+     * one is emitted as version 3, which a runtime that predates this refuses —
+     * see `SCHEMA_ARTIFACT_VERSION`.
+     */
+    encrypted?: true;
 }
 export interface RelationSchema {
     /** The field name on the owning model: `accounts`. */

package/dist/orm/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../orm/schema.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB,KAAK,GACL,QAAQ,GACR,UAAU,GACV,SAAS,GACT,OAAO,GACP,QAAQ,GACR,SAAS,GACT,MAAM,GACN,OAAO,CAAC;AAEZ;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,MAAM,GACN,MAAM,GACN,QAAQ,GACR,MAAM,GACN,KAAK,GACL,aAAa,GACb,OAAO,CAAC;AAEZ,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,2EAA2E;IAC3E,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV;;;;;;;;;;;;;;;;;WAiBG;QACH,WAAW,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC3C;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,KAAK,EAAE,MAAM;CAQ1B;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAIjE"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../orm/schema.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAAW,CAAC;AAEpE,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAK1E;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB,KAAK,GACL,QAAQ,GACR,UAAU,GACV,SAAS,GACT,OAAO,GACP,QAAQ,GACR,SAAS,GACT,MAAM,GACN,OAAO,CAAC;AAEZ;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GACnB,eAAe,GACf,MAAM,GACN,MAAM,GACN,QAAQ,GACR,MAAM,GACN,KAAK,GACL,aAAa,GACb,OAAO,CAAC;AAEZ,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,2EAA2E;IAC3E,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV;;;;;;;;;;;;;;;;;WAiBG;QACH,WAAW,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC3C;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,KAAK,EAAE,MAAM;CAS1B;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAIjE"}

package/dist/server/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{Ga as I}from"../chunk-5stgtwqw.js";import{Ha as W}from"../chunk-tw5kwbx4.js";import{ei as b,gi as V,hi as A,ii as H,ji as O}from"../chunk-zyt2w03d.js";import{ni as k}from"../chunk-1hr4xht1.js";import"../chunk-d9mar37g.js";import{ui as $}from"../chunk-vw8849ys.js";var X=Symbol.for("gemi.server.devGeneration"),L={graceMs:1e4,providerTimeoutMs:5000};class Q{app;inFlight=0;waiters=new Set;constructor(z){this.app=z}track(z){return async(B,J)=>{this.inFlight++;try{return await z(B,J)}finally{if(this.inFlight--,this.inFlight===0)this.wake()}}}get pending(){return this.inFlight}async retire({graceMs:z,providerTimeoutMs:B}){try{await this.idle(z),await Promise.resolve().then(()=>this.app.shutdown({timeoutMs:B}))}catch(J){Z(J)}}idle(z){if(this.inFlight===0)return Promise.resolve();return new Promise((B)=>{let J=()=>{clearTimeout(K),this.waiters.delete(J),B()},K=setTimeout(J,z);this.waiters.add(J)})}wake(){for(let z of this.waiters)z()}}function Y(z,B=L){let J=globalThis,K=J[X];if(J[X]=z,!K||K===z||typeof K.retire!=="function")return Promise.resolve();let _=K.retire.bind(K);return Promise.resolve().then(()=>_(B)).catch(Z)}function Z(z){console.error("[gemi] Shutting down the application a reload replaced failed:",z)}class P{app;instrumentation;handleSignals;server;stopping;settings;constructor(z){this.app=new W({kernel:z.kernel}),this.handleSignals=z.handleSignals??!0,this.instrumentation=H(z.instrumentation??((B,J)=>J(B)))}async start(){process.env.ROOT_DIR=k();let z=Bun.env.NODE_ENV==="production";if(z){if(this.handleSignals)O(()=>this.stop());this.settings=V()}try{await this.app.waitForBoot()}catch(B){if(!z)this.app.shutdown({timeoutMs:L.providerTimeoutMs});throw B}if(z){let{httpProd:B}=await import("../chunk-79xg42e7.js");this.server=await B(this.app,this.instrumentation.bind(this))}else{I();let{httpDev:B}=await import("../chunk-p91b8zcn.js"),J=new Q(this.app);this.server=await B(this.app,J.track(this.instrumentation.bind(this))),Y(J)}return this.server}stop(z={}){return this.stopping??=A({server:this.server,shutdownProviders:(B)=>this.app.shutdown(B),settings:{...this.settings??V(),...z}}),this.stopping}}export{b as isShuttingDown,P as Server};
+import{Ha as I}from"../chunk-2bja99cq.js";import{Ia as W}from"../chunk-gjy2qjcr.js";import{Ji as b,Li as V,Mi as A,Ni as H,Oi as O}from"../chunk-a32wfzdq.js";import{Si as k}from"../chunk-8gtc3s1y.js";import"../chunk-c2n6zdyd.js";import{Zi as $}from"../chunk-dcgvq79a.js";var X=Symbol.for("gemi.server.devGeneration"),L={graceMs:1e4,providerTimeoutMs:5000};class Q{app;inFlight=0;waiters=new Set;constructor(z){this.app=z}track(z){return async(B,J)=>{this.inFlight++;try{return await z(B,J)}finally{if(this.inFlight--,this.inFlight===0)this.wake()}}}get pending(){return this.inFlight}async retire({graceMs:z,providerTimeoutMs:B}){try{await this.idle(z),await Promise.resolve().then(()=>this.app.shutdown({timeoutMs:B}))}catch(J){Z(J)}}idle(z){if(this.inFlight===0)return Promise.resolve();return new Promise((B)=>{let J=()=>{clearTimeout(K),this.waiters.delete(J),B()},K=setTimeout(J,z);this.waiters.add(J)})}wake(){for(let z of this.waiters)z()}}function Y(z,B=L){let J=globalThis,K=J[X];if(J[X]=z,!K||K===z||typeof K.retire!=="function")return Promise.resolve();let _=K.retire.bind(K);return Promise.resolve().then(()=>_(B)).catch(Z)}function Z(z){console.error("[gemi] Shutting down the application a reload replaced failed:",z)}class P{app;instrumentation;handleSignals;server;stopping;settings;constructor(z){this.app=new W({kernel:z.kernel}),this.handleSignals=z.handleSignals??!0,this.instrumentation=H(z.instrumentation??((B,J)=>J(B)))}async start(){process.env.ROOT_DIR=k();let z=Bun.env.NODE_ENV==="production";if(z){if(this.handleSignals)O(()=>this.stop());this.settings=V()}try{await this.app.waitForBoot()}catch(B){if(!z)this.app.shutdown({timeoutMs:L.providerTimeoutMs});throw B}if(z){let{httpProd:B}=await import("../chunk-t87w4h84.js");this.server=await B(this.app,this.instrumentation.bind(this))}else{I();let{httpDev:B}=await import("../chunk-vtc23xpk.js"),J=new Q(this.app);this.server=await B(this.app,J.track(this.instrumentation.bind(this))),Y(J)}return this.server}stop(z={}){return this.stopping??=A({server:this.server,shutdownProviders:(B)=>this.app.shutdown(B),settings:{...this.settings??V(),...z}}),this.stopping}}export{b as isShuttingDown,P as Server};
 
-//# debugId=893DC0539C493A4C64756E2164756E21
+//# debugId=C9EA4C97C0BEFAC764756E2164756E21

package/dist/server/index.js.map

@@ -6,6 +6,6 @@
     "import { App } from \"../app\";\nimport { Kernel } from \"../kernel\";\nimport { projectRoot } from \"../support/discover\";\nimport { DevGeneration, devRetireDefaults, replaceDevGeneration } from \"./devReload\";\nimport {\n  drain,\n  installShutdownSignals,\n  serveForShutdown,\n  shutdownSettings,\n  type ShutdownSettings,\n} from \"./shutdown\";\nimport { Instrumentation } from \"./types\";\nimport { watchEnv } from \"./watchEnv\";\n\nexport class Server {\n  private app: App;\n  private instrumentation: Instrumentation;\n  private handleSignals: boolean;\n  private server: Bun.Server<unknown> | undefined;\n  private stopping: Promise<number> | undefined;\n  private settings: ShutdownSettings | undefined;\n\n  constructor(params: {\n    kernel: new () => Kernel;\n    instrumentation?: Instrumentation;\n    /**\n     * Drain on `SIGTERM`/`SIGINT` and exit — production only. `false` leaves\n     * the signals to the app, which can call `stop()` itself.\n     */\n    handleSignals?: boolean;\n  }) {\n    this.app = new App({ kernel: params.kernel });\n    this.handleSignals = params.handleSignals ?? true;\n    this.instrumentation = serveForShutdown(\n      params.instrumentation ??\n        ((req: Request, next: (req: Request) => Promise<Response>) => next(req)),\n    );\n  }\n\n  /**\n   * Boots the application and starts listening. Resolves with the `Bun.Server`\n   * once it is accepting requests.\n   */\n  async start(): Promise<Bun.Server<unknown>> {\n    // Before the boot, not after: `httpDev`/`httpProd` set this too, but they\n    // are imported below — after every provider's `boot()` has run — so a\n    // service that resolves a path during boot used to read `undefined`\n    // (`services/logging`, #423). Same rule `httpProd` computes it with, so\n    // the assignment it makes a moment later is the same value.\n    //\n    // It doubles as the marker for \"this process is serving\": nothing else\n    // sets `ROOT_DIR`, so a console command or a migration — which boot the\n    // same providers through `runConsole` — can tell that it is not one, and\n    // skip work that only a server should do at boot.\n    process.env.ROOT_DIR = projectRoot();\n\n    // Read once, ahead of the boot, so the signal handling below and the mode\n    // that starts after the boot cannot disagree: whatever a provider's\n    // `boot()` does to the environment, this process is the server it was\n    // started as.\n    const production = process.env.NODE_ENV === \"production\";\n\n    if (production) {\n      // Before the boot, not just before listening: the whole start-up is a\n      // window in which a signal can arrive, and the slow part of it is the\n      // boot — a connection pool, the config, the dictionaries. A rolling\n      // update that `SIGTERM`s a pod two seconds in finds no listener\n      // installed, and the default action for both signals is to kill the\n      // process on the spot: no provider's `shutdown()`, no pool closed,\n      // nothing flushed. Installing here makes that a drain like any other.\n      // `stop()` handles a server that does not exist yet (nothing to close,\n      // requests cannot be in flight) and `Application.shutdown` calls the\n      // hooks of providers that registered but never booted, swallowing\n      // whatever they throw — half a boot is exactly when a hook is most\n      // likely to trip over something it expected `boot()` to have made.\n      if (this.handleSignals) installShutdownSignals(() => this.stop());\n      // Read now, so a bad value is warned about while the operator is\n      // watching the deploy, not first at the shutdown it spoils — and so a\n      // signal during the boot drains on the configured budget rather than on\n      // whatever `stop()` reads at the time.\n      this.settings = shutdownSettings();\n    }\n\n    // Phase two of the boot. `new App({ kernel })` already ran every provider's\n    // synchronous `register()`; this awaits their `boot()` before the first\n    // request is served.\n    try {\n      await this.app.waitForBoot();\n    } catch (error) {\n      // A `bun --hot` reload whose boot threw: the previous application keeps\n      // serving, and this one never will, so whatever its providers opened\n      // before the throw (the feature flags' warm-up, when they are on, has\n      // opened the database pool by then) is closed now rather than left open\n      // for good (#652). Production exits on a failed boot, which closes\n      // everything anyway.\n      if (!production) void this.app.shutdown({ timeoutMs: devRetireDefaults.providerTimeoutMs });\n      throw error;\n    }\n\n    // Dynamic import so each mode only pulls in its own code: `httpDev` drags in\n    // Vite (dev-only) and `httpProd` reads the built `dist/` manifests — neither\n    // should load in the other environment.\n    if (production) {\n      const { httpProd } = await import(\"./httpProd.js\");\n      this.server = await httpProd(this.app, this.instrumentation.bind(this));\n    } else {\n      // Dev only: reload `.env` into process.env on change so config edits take\n      // effect without restarting the dev server (Bun reads `.env` only at\n      // startup, even under `--hot`). No signal handling here: `bun --hot`\n      // re-runs this on every reload, and a Ctrl+C in development should stop\n      // the server now, not after a drain.\n      watchEnv();\n      const { httpDev } = await import(\"./httpDev.js\");\n      const generation = new DevGeneration(this.app);\n      this.server = await httpDev(this.app, generation.track(this.instrumentation.bind(this)));\n      // Only now, with the new fetch handler live, has the application this\n      // reload replaced stopped receiving requests; it is shut down once the\n      // ones it is serving finish (#652). Not awaited, so the reload is not\n      // held up by it.\n      void replaceDevGeneration(generation);\n    }\n    return this.server;\n  }\n\n  /**\n   * Stops the server gracefully and resolves with the exit code it earned: 0\n   * when the in-flight requests drained and every provider shut down in time,\n   * 1 otherwise. Does not exit the process — the signal handler does that.\n   *\n   * The order is `drain` in `./shutdown`: `isShuttingDown()` turns true, the\n   * listener closes, in-flight requests finish under the grace period, then\n   * every provider's `shutdown()` runs in reverse registration order.\n   * Idempotent: a second call returns the first call's promise. Settings\n   * default to the `GEMI_SHUTDOWN_*` environment variables.\n   */\n  stop(settings: Partial<ShutdownSettings> = {}): Promise<number> {\n    this.stopping ??= drain({\n      server: this.server,\n      shutdownProviders: (options) => this.app.shutdown(options),\n      settings: { ...(this.settings ?? shutdownSettings()), ...settings },\n    });\n    return this.stopping;\n  }\n}\n"
   ],
   "mappings": ";wSAkBA,DAAM,HAAU,EAAO,DAAI,sBAA2B,EAmBzC,EAAmC,CAAE,QAAS,IAAQ,kBAAmB,IAAM,EAiBrF,MAAM,CAAc,CAII,IAHrB,SAAW,EACX,QAAU,IAAI,IAEtB,WAAW,CAAkB,EAAgB,CAAhB,WAG7B,KAAK,CAAC,EAAmD,CACvD,MAAO,OAAO,EAAK,IAAS,CAC1B,KAAK,WACL,GAAI,CACF,OAAO,MAAM,EAAgB,EAAK,CAAI,SACtC,CAEA,GADA,KAAK,WACD,KAAK,WAAa,EAAG,KAAK,KAAK,OAMrC,QAAO,EAAW,CACpB,OAAO,KAAK,cASR,OAAM,EAAG,UAAS,qBAAmD,CACzE,GAAI,CACF,MAAM,KAAK,KAAK,CAAO,EAEvB,MAAM,QAAQ,QAAQ,EAAE,KAAK,IAAM,KAAK,IAAI,SAAS,CAAE,UAAW,CAAkB,CAAC,CAAC,EACtF,MAAO,EAAO,CACd,EAAc,CAAK,GAIf,IAAI,CAAC,EAAkC,CAC7C,GAAI,KAAK,WAAa,EAAG,OAAO,QAAQ,QAAQ,EAChD,OAAO,IAAI,QAAQ,CAAC,IAAY,CAC9B,IAAM,EAAO,IAAM,CACjB,aAAa,CAAK,EAClB,KAAK,QAAQ,OAAO,CAAI,EACxB,EAAQ,GAEJ,EAAQ,WAAW,EAAM,CAAS,EACxC,KAAK,QAAQ,IAAI,CAAI,EACtB,EAGK,IAAI,EAAG,CAEb,QAAW,KAAQ,KAAK,QAAS,EAAK,EAE1C,CAYO,SAAS,CAAoB,CAClC,EACA,EAAyB,EACV,CACf,IAAM,EAAS,WACT,EAAW,EAAO,GAExB,GADA,EAAO,GAAW,EACd,CAAC,GAAY,IAAa,GAAQ,OAAO,EAAS,SAAW,WAC/D,OAAO,QAAQ,QAAQ,EAEzB,IAAM,EAAS,EAAS,OAAO,KAAK,CAAQ,EAE5C,OAAO,QAAQ,QAAQ,EACpB,KAAK,IAAM,EAAO,CAAO,CAAC,EAC1B,MAAM,CAAa,EAGxB,SAAS,CAAa,CAAC,EAAgB,CACrC,QAAQ,MAAM,iEAAkE,CAAK,EC/HhF,MAAM,CAAO,CACV,IACA,gBACA,cACA,OACA,SACA,SAER,WAAW,CAAC,EAQT,CACD,KAAK,IAAM,IAAI,EAAI,CAAE,OAAQ,EAAO,MAAO,CAAC,EAC5C,KAAK,cAAgB,EAAO,eAAiB,GAC7C,KAAK,gBAAkB,EACrB,EAAO,kBACJ,CAAC,EAAc,IAA8C,EAAK,CAAG,EAC1E,OAOI,MAAK,EAAiC,CAW1C,QAAQ,IAAI,SAAW,EAAY,EAMnC,IAAM,EAAa,mBAAyB,aAE5C,GAAI,EAAY,CAad,GAAI,KAAK,cAAe,EAAuB,IAAM,KAAK,KAAK,CAAC,EAKhE,KAAK,SAAW,EAAiB,EAMnC,GAAI,CACF,MAAM,KAAK,IAAI,YAAY,EAC3B,MAAO,EAAO,CAOd,GAAI,CAAC,EAAiB,KAAK,IAAI,SAAS,CAAE,UAAW,EAAkB,iBAAkB,CAAC,EAC1F,MAAM,EAMR,GAAI,EAAY,CACd,IAAQ,YAAa,KAAa,gCAClC,KAAK,OAAS,MAAM,EAAS,KAAK,IAAK,KAAK,gBAAgB,KAAK,IAAI,CAAC,EACjE,KAML,EAAS,EACT,IAAQ,WAAY,KAAa,gCAC3B,EAAa,IAAI,EAAc,KAAK,GAAG,EAC7C,KAAK,OAAS,MAAM,EAAQ,KAAK,IAAK,EAAW,MAAM,KAAK,gBAAgB,KAAK,IAAI,CAAC,CAAC,EAKlF,EAAqB,CAAU,EAEtC,OAAO,KAAK,OAcd,IAAI,CAAC,EAAsC,CAAC,EAAoB,CAM9D,OALA,KAAK,WAAa,EAAM,CACtB,OAAQ,KAAK,OACb,kBAAmB,CAAC,IAAY,KAAK,IAAI,SAAS,CAAO,EACzD,SAAU,IAAM,KAAK,UAAY,EAAiB,KAAO,CAAS,CACpE,CAAC,EACM,KAAK,SAEhB",
-  "debugId": "893DC0539C493A4C64756E2164756E21",
+  "debugId": "C9EA4C97C0BEFAC764756E2164756E21",
   "names": []
 }

package/dist/services/encryption/Encrypter.d.ts

@@ -0,0 +1,86 @@
+import type { EncryptionConfig } from "./config";
+/**
+ * Authenticated encryption for values at rest: encrypted columns
+ * (`/// @gemi.encrypted` in the Prisma schema) and the `Crypt` facade.
+ *
+ * AES-256-GCM with a random 96-bit IV per value, so encrypting the same
+ * plaintext twice gives two different ciphertexts, and a value that was
+ * altered, truncated or encrypted under another key fails to decrypt rather
+ * than decrypting to something else.
+ *
+ * Every value is a self-describing envelope:
+ *
+ *     v1:<keyId>:<iv>:<ciphertext+tag>       (iv and ciphertext base64url)
+ *
+ * The key id is what makes rotation work: a value names the key it was
+ * written with, so after `current` moves to a new key the old values still
+ * decrypt as long as their key stays in `keys`, and `encryption:rotate` can
+ * tell which values still need re-encrypting without decrypting them. The
+ * `v1:<keyId>` prefix is authenticated as associated data, so it cannot be
+ * edited to point a value at a different key.
+ *
+ * The envelope is plain ASCII, so it fits any text column. It is longer than
+ * the plaintext: 4/3 of it plus about 50 characters.
+ */
+export declare class Encrypter {
+    static token: string;
+    private readonly keys;
+    private readonly currentId;
+    /**
+     * @throws EncryptionKeyError when a key is empty or not 32 bytes, an id is
+     * not a valid name, or `current` names no key. Construction is where a bad
+     * configuration is reported, which is why the provider builds this at boot.
+     */
+    constructor(config?: EncryptionConfig);
+    /** Whether a key is configured at all. */
+    get configured(): boolean;
+    /** The id of the key new values are encrypted with. */
+    get currentKeyId(): string;
+    /** Encrypts `plaintext` under the current key. */
+    encrypt(plaintext: string): string;
+    /**
+     * The plaintext of an envelope `encrypt` produced, under whichever
+     * configured key it names.
+     *
+     * @throws DecryptionError when the value is not an envelope, names a key
+     * that is not configured, or fails authentication (tampered, truncated, or
+     * encrypted under a different key with the same id). Never returns the input.
+     */
+    decrypt(envelope: string): string;
+    /** Whether `value` has the shape of an envelope. Says nothing about its key. */
+    isEncrypted(value: unknown): value is string;
+    /** The key id an envelope names, or `null` when `value` is not one. */
+    keyIdOf(value: unknown): string | null;
+    /**
+     * Whether `value` should be re-encrypted to be under the current key: true
+     * for an envelope under an older key and for anything that is not an
+     * envelope at all (a plaintext value written before the column was
+     * encrypted).
+     */
+    needsReencryption(value: string): boolean;
+    private requireCurrent;
+}
+/**
+ * The encryption configuration is unusable: no key, a key that is not 32
+ * bytes, or a `current` naming no key. Raised at boot when the app has
+ * encrypted columns, and by the first encrypt or decrypt otherwise.
+ */
+export declare class EncryptionKeyError extends Error {
+    constructor(message: string);
+}
+/**
+ * A value could not be decrypted. `reason` says why: `malformed` (not an
+ * envelope, such as a plaintext value written before the column was
+ * encrypted), `unknown_key` (its key is no longer configured) or `invalid`
+ * (it failed authentication). The value itself is never in the message.
+ */
+export declare class DecryptionError extends Error {
+    readonly reason: "malformed" | "unknown_key" | "invalid";
+    /** The model and field, when the value came from an encrypted column. */
+    column?: {
+        model: string;
+        field: string;
+    };
+    constructor(reason: "malformed" | "unknown_key" | "invalid", message: string);
+}
+//# sourceMappingURL=Encrypter.d.ts.map

package/dist/services/encryption/Encrypter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Encrypter.d.ts","sourceRoot":"","sources":["../../../services/encryption/Encrypter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,SAAS;IACpB,MAAM,CAAC,KAAK,SAAe;IAE3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAE/C;;;;OAIG;gBACS,MAAM,GAAE,gBAAqB;IA6BzC,0CAA0C;IAC1C,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,uDAAuD;IACvD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,kDAAkD;IAClD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAiBlC;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IA6BjC,gFAAgF;IAChF,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM;IAI5C,uEAAuE;IACvE,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;IAItC;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIzC,OAAO,CAAC,cAAc;CAWvB;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAKtB,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS;IAJjE,yEAAyE;IACzE,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;gBAGxB,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,EAC/D,OAAO,EAAE,MAAM;CAKlB"}

package/dist/services/encryption/EncryptionServiceProvider.d.ts

@@ -0,0 +1,13 @@
+import { ServiceProvider } from "../../support/ServiceProvider";
+export declare class EncryptionServiceProvider extends ServiceProvider {
+    register(): void;
+    /**
+     * A bad key fails the boot, not the first request that reads an encrypted
+     * column: constructing the `Encrypter` validates every key, and an app whose
+     * models have encrypted columns, or that configures OAuth connections,
+     * must have one configured. An app with
+     * neither pays for nothing but this check.
+     */
+    boot(): void;
+}
+//# sourceMappingURL=EncryptionServiceProvider.d.ts.map

package/dist/services/encryption/EncryptionServiceProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EncryptionServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/encryption/EncryptionServiceProvider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIhE,qBAAa,yBAA0B,SAAQ,eAAe;IAC5D,QAAQ;IAOR;;;;;;OAMG;IACH,IAAI;CA4BL"}

package/dist/services/encryption/config.d.ts

@@ -0,0 +1,36 @@
+export interface EncryptionConfig {
+    /**
+     * Every key that may have encrypted a value, by id. A key is 32 random
+     * bytes, base64 encoded (`openssl rand -base64 32`); a `base64:` prefix is
+     * accepted and ignored.
+     *
+     * The id is written into every value encrypted with the key, so it is how a
+     * value finds its key again after a rotation. Ids are short names you choose
+     * (`k1`, `2026-10`), made of letters, digits, `_` and `-`. Never reuse an id
+     * for a different key: values written under the old one would stop
+     * decrypting.
+     *
+     * Keep an old key here until `gemi run encryption:rotate` has re-encrypted
+     * everything it wrote. A key removed early makes those values unreadable.
+     */
+    keys?: Record<string, string | undefined>;
+    /**
+     * The id of the key new values are encrypted with. Must name an entry in
+     * `keys`. May be omitted when there is exactly one key.
+     */
+    current?: string;
+}
+/**
+ * Identity helper for `app/config/encryption.ts`:
+ *
+ * ```ts
+ * import { defineEncryptionConfig } from "gemi/services";
+ *
+ * export default defineEncryptionConfig({
+ *   keys: { k1: process.env.APP_ENCRYPTION_KEY },
+ *   current: "k1",
+ * });
+ * ```
+ */
+export declare function defineEncryptionConfig(config: EncryptionConfig): EncryptionConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/services/encryption/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../services/encryption/config.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAE1C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAEjF"}

package/dist/services/file-storage/drivers/FileStorageDriver.d.ts

@@ -1,4 +1,4 @@
-import type { DeleteFileParams, DeletePrefixOptions, FetchFileOptions, IFileStorageDriver, PutFileOptions, PutFileParams, ReadFileParams, ReadResult, ListObjectsOptions, StoredObject } from "./types";
+import type { DeleteFileParams, DeletePrefixOptions, FetchFileOptions, IFileStorageDriver, PutFileOptions, PutFileParams, PutStreamParams, ReadFileParams, ReadResult, ListObjectsOptions, StoredObject } from "./types";
 /**
  * Throws unless `prefix` names something narrower than the whole store.
  *
@@ -12,6 +12,17 @@ export declare function assertDeletablePrefix(prefix: string): void;
 export declare abstract class FileStorageDriver implements IFileStorageDriver {
     abstract fetch(params: ReadFileParams | string, options?: FetchFileOptions): Promise<Response>;
     abstract put(params: PutFileParams | Blob, options?: PutFileOptions): Promise<string>;
+    /**
+     * Stores a stream and returns the object name.
+     *
+     * The default reads the whole stream into memory, then hands it to `put()`,
+     * so it works on every driver and an error from the stream (a size limit,
+     * a dropped connection) rejects before anything is written. Bound the
+     * stream's size before calling it. A driver whose backend can take a stream
+     * without leaving a partial object behind overrides it, as
+     * `FileSystemDriver` does.
+     */
+    putStream({ body, ...params }: PutStreamParams, options?: PutFileOptions): Promise<string>;
     /**
      * @deprecated The result's shape differs per driver (the S3 driver returns
      * the raw, unpaginated `ListObjectsV2` output). Use `objects(prefix)`.

package/dist/services/file-storage/drivers/FileStorageDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileStorageDriver.d.ts","sourceRoot":"","sources":["../../../../services/file-storage/drivers/FileStorageDriver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAM1D;AAED,8BAAsB,iBAAkB,YAAW,kBAAkB;IACnE,QAAQ,CAAC,KAAK,CACZ,MAAM,EAAE,cAAc,GAAG,MAAM,EAC/B,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,QAAQ,CAAC;IACpB,QAAQ,CAAC,GAAG,CACV,MAAM,EAAE,aAAa,GAAG,IAAI,EAC5B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE3C;;;;;;OAMG;IAEI,OAAO,CACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,kBAAuB,GAChC,aAAa,CAAC,YAAY,CAAC;IAM9B;;;;;;;OAOG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC;IAclB;;;;;;;;OAQG;IACG,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D;;;;;;;;OAQG;IACG,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAoD/D;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAc7D"}
+{"version":3,"file":"FileStorageDriver.d.ts","sourceRoot":"","sources":["../../../../services/file-storage/drivers/FileStorageDriver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAM1D;AAED,8BAAsB,iBAAkB,YAAW,kBAAkB;IACnE,QAAQ,CAAC,KAAK,CACZ,MAAM,EAAE,cAAc,GAAG,MAAM,EAC/B,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,QAAQ,CAAC;IACpB,QAAQ,CAAC,GAAG,CACV,MAAM,EAAE,aAAa,GAAG,IAAI,EAC5B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACG,SAAS,CACb,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,eAAe,EACpC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC;IAkBlB;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAE3C;;;;;;OAMG;IAEI,OAAO,CACZ,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,kBAAuB,GAChC,aAAa,CAAC,YAAY,CAAC;IAM9B;;;;;;;OAOG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC;IAclB;;;;;;;;OAQG;IACG,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D;;;;;;;;OAQG;IACG,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAoD/D;;;;OAIG;IACG,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAc7D"}

package/dist/services/file-storage/drivers/FileSystemDriver.d.ts

@@ -1,4 +1,4 @@
-import type { DeleteFileParams, DeletePrefixOptions, FetchFileOptions, ListObjectsOptions, StoredObject, PutFileOptions, PutFileParams, ReadFileParams, ReadResult } from "./types";
+import type { DeleteFileParams, DeletePrefixOptions, FetchFileOptions, ListObjectsOptions, StoredObject, PutFileOptions, PutFileParams, PutStreamParams, ReadFileParams, ReadResult } from "./types";
 import { FileStorageDriver } from "./FileStorageDriver";
 export declare class FileSystemDriver extends FileStorageDriver {
     private readonly configured?;
@@ -26,6 +26,13 @@ export declare class FileSystemDriver extends FileStorageDriver {
      */
     private get folderPath();
     put(params: PutFileParams | Blob, { signal }?: PutFileOptions): Promise<string>;
+    /**
+     * Writes the stream to a temporary file next to the target and renames it
+     * into place once the stream has ended, so an error or an abort halfway
+     * leaves no file, and a reader never sees a half-written one. Memory stays
+     * at one chunk however large the file.
+     */
+    putStream({ name, body }: PutStreamParams, { signal }?: PutFileOptions): Promise<string>;
     fetch(params: ReadFileParams | string, { signal }?: FetchFileOptions): Promise<Response>;
     read(input: ReadFileParams | string): Promise<ReadResult>;
     size(params: ReadFileParams | string): Promise<number>;

package/dist/services/file-storage/drivers/FileSystemDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileSystemDriver.d.ts","sourceRoot":"","sources":["../../../../services/file-storage/drivers/FileSystemDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,EACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,iBAAiB,EAAyB,MAAM,qBAAqB,CAAC;AAQ/E,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;gBAEzB,UAAU,CAAC,EAAE,MAAM;IAK/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,KAAK,UAAU,GAErB;IAEK,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,GAAE,cAAmB;IA+BjE,KAAK,CACT,MAAM,EAAE,cAAc,GAAG,MAAM,EAC/B,EAAE,MAAM,EAAE,GAAE,gBAAqB;IAoC7B,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAyCzD,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM;IASpC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM;IA2B9C;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAcrB;;;;;OAKG;IACI,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,EAAE,MAAM,EAAE,GAAE,kBAAuB,GAClC,aAAa,CAAC,YAAY,CAAC;IA4C9B;;;OAGG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC;YAcJ,cAAc;IAgC5B,yFAAyF;IACnF,IAAI;CAKX"}
+{"version":3,"file":"FileSystemDriver.d.ts","sourceRoot":"","sources":["../../../../services/file-storage/drivers/FileSystemDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,EACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,iBAAiB,EAAyB,MAAM,qBAAqB,CAAC;AAQ/E,qBAAa,gBAAiB,SAAQ,iBAAiB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;gBAEzB,UAAU,CAAC,EAAE,MAAM;IAK/B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,KAAK,UAAU,GAErB;IAEK,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,GAAE,cAAmB;IA+BvE;;;;;OAKG;IACG,SAAS,CACb,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,eAAe,EAC/B,EAAE,MAAM,EAAE,GAAE,cAAmB,GAC9B,OAAO,CAAC,MAAM,CAAC;IA4CZ,KAAK,CACT,MAAM,EAAE,cAAc,GAAG,MAAM,EAC/B,EAAE,MAAM,EAAE,GAAE,gBAAqB;IAoC7B,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAyCzD,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM;IASpC,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM;IA2B9C;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAcrB;;;;;OAKG;IACI,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,EAAE,MAAM,EAAE,GAAE,kBAAuB,GAClC,aAAa,CAAC,YAAY,CAAC;IA4C9B;;;OAGG;IACG,YAAY,CAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,MAAM,CAAC;YAcJ,cAAc;IAgC5B,yFAAyF;IACnF,IAAI;CAKX"}

package/dist/services/file-storage/drivers/types.d.ts

@@ -14,6 +14,17 @@ export interface PutFileOptions {
      */
     signal?: AbortSignal;
 }
+/** What `putStream()` takes: `PutFileParams` with a stream for a body. */
+export interface PutStreamParams {
+    name: string;
+    bucket?: string;
+    /**
+     * The bytes to store. An error from the stream (a size limit, a broken
+     * connection) rejects `putStream()`, and no object is left behind.
+     */
+    body: ReadableStream<Uint8Array>;
+    contentType?: string;
+}
 export interface FetchFileOptions {
     /**
      * Cancels the read. An abort before the object is found rejects `fetch()`
@@ -91,6 +102,12 @@ export interface FileMetadata {
 export interface IFileStorageDriver {
     fetch(input: ReadFileParams | string, options?: FetchFileOptions): Promise<Response>;
     put(params: PutFileParams | Blob, options?: PutFileOptions): Promise<string>;
+    /**
+     * Optional: stores a stream. `FileStorageDriver`'s default reads the stream
+     * into memory and calls `put()`; a driver whose backend can take a stream
+     * overrides it. Either way, a stream that errors leaves no object behind.
+     */
+    putStream?(params: PutStreamParams, options?: PutFileOptions): Promise<string>;
     /**
      * Optional: `FileStorageDriver` supplies a `fetch()`-backed default, so
      * drivers written before this existed keep working.

package/dist/services/file-storage/drivers/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../services/file-storage/drivers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/C,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7E;;;OAGG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D;;;OAGG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;OAIG;IACH,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACpF;;;OAGG;IACH,YAAY,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../services/file-storage/drivers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB;;;;;OAKG;IACH,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/C,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7E;;;;OAIG;IACH,SAAS,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E;;;OAGG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D;;;OAGG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;OAIG;IACH,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACpF;;;OAGG;IACH,YAAY,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/E"}

package/dist/services/file-storage/putFromUrl.d.ts

@@ -0,0 +1,56 @@
+import { type SafeFetchOptions } from "../../http/safeFetch/safeFetch";
+import type { IFileStorageDriver } from "./drivers/types";
+export interface PutFromUrlOptions {
+    /**
+     * The object name to store under, e.g. `"sites/42/logo.png"`. Without it
+     * the name is generated: `<directory>/<uuid v7>.<extension of the sniffed
+     * type>`. Pass `name` or `directory`, not both.
+     */
+    name?: string;
+    /** The folder a generated name goes in, e.g. `"sites/42"`. */
+    directory?: string;
+    /** Bucket or container. Defaults as in `put()`. */
+    bucket?: string;
+    /**
+     * Largest file accepted, in bytes (after decompression). Checked against
+     * `Content-Length` up front and again while the body streams in. Default
+     * 10 MiB, as in `safeFetch`.
+     */
+    maxSize?: number;
+    /** The whole download in ms, redirects and body included. Default 30 000. */
+    timeout?: number;
+    /**
+     * Media types the file may be, e.g. `["image/*", "application/pdf"]`,
+     * checked against the type sniffed from the file's first bytes, not the
+     * `Content-Type` header. A wildcard never covers `image/svg+xml`,
+     * `text/html` or XML, which can carry script: list them by name to accept
+     * them. Anything else rejects with `ContentTypeError` before anything is
+     * stored. Default: any type except active content (HTML, XHTML, SVG and
+     * XML), which is refused unless listed here by name.
+     */
+    contentTypes?: readonly string[];
+    /** Cancels the download and the upload. */
+    signal?: AbortSignal;
+    /**
+     * Other `safeFetch` options: `headers`, `allow`, `deny`, `ports`,
+     * `allowPrivate`, `maxRedirects`, `connectTimeout`, `resolve`. Never build
+     * `allowPrivate` from user input.
+     */
+    fetch?: Omit<SafeFetchOptions, "method" | "body" | "signal" | "timeout" | "maxSize" | "contentTypes" | "redirect">;
+}
+export interface PutFromUrlResult {
+    /** The stored object's name, to persist and later pass to `fetch()`/`read()`. */
+    name: string;
+    /** Sniffed from the file's bytes; the type the object is stored with. */
+    contentType: string;
+    /** Bytes stored. */
+    size: number;
+    /** The URL the file was finally downloaded from, after redirects. */
+    url: string;
+}
+/**
+ * Downloads `url` through `safeFetch` and stores it with `driver`. The
+ * implementation behind `Storage.putFromUrl()`.
+ */
+export declare function putFromUrl(driver: IFileStorageDriver, url: string | URL, options?: PutFromUrlOptions): Promise<PutFromUrlResult>;
+//# sourceMappingURL=putFromUrl.d.ts.map

package/dist/services/file-storage/putFromUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"putFromUrl.d.ts","sourceRoot":"","sources":["../../../services/file-storage/putFromUrl.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAmB,MAAM,iBAAiB,CAAC;AAS3E,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,2CAA2C;IAC3C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,IAAI,CACV,gBAAgB,EACd,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,SAAS,GACT,SAAS,GACT,cAAc,GACd,UAAU,CACb,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,kBAAkB,EAC1B,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,gBAAgB,CAAC,CAgH3B"}

package/dist/services/file-storage/sniffContentType.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The media type of a file, read from its first bytes rather than from a name
+ * or a `Content-Type` header someone else chose.
+ *
+ * Recognizes the common image, audio, video, font, document and archive
+ * formats by their signatures, SVG, HTML and XML by their markup, and
+ * otherwise answers `text/plain` for bytes that decode as UTF-8 text with no
+ * control characters, and `application/octet-stream` for anything else.
+ * Formats that are text underneath (JSON, CSV, JavaScript, CSS) can't be told
+ * apart from their bytes and come out as `text/plain`.
+ *
+ * A few kilobytes are enough: `SNIFF_BYTES` is what `Storage.putFromUrl()`
+ * reads before deciding.
+ */
+export declare function sniffContentType(bytes: Uint8Array): string;
+/** How many leading bytes `sniffContentType` looks at, at most. */
+export declare const SNIFF_BYTES = 4096;
+/** The file extension `putFromUrl` names an object of this type with. */
+export declare function extensionFor(contentType: string): string;
+/**
+ * Whether a media type is active content a browser may run script from:
+ * HTML, XHTML, SVG and XML, including any `+xml` type (`image/svg+xml`,
+ * `application/atom+xml`, ...).
+ */
+export declare function isActiveContentType(type: string): boolean;
+/**
+ * Whether a sniffed type is in an allow-list of media types such as
+ * `["image/*", "application/pdf"]`. A wildcard never covers HTML, SVG or XML
+ * (see `isActiveContentType`), which can carry script; name them explicitly
+ * to accept them.
+ */
+export declare function isAllowedContentType(type: string, allowed: readonly string[]): boolean;
+//# sourceMappingURL=sniffContentType.d.ts.map

package/dist/services/file-storage/sniffContentType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sniffContentType.d.ts","sourceRoot":"","sources":["../../../services/file-storage/sniffContentType.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE1D;AAED,mEAAmE;AACnE,eAAO,MAAM,WAAW,OAAO,CAAC;AAsChC,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAiKD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAUtF"}

package/dist/services/index.d.ts

@@ -3,10 +3,15 @@ export { FilesystemManager } from "./file-storage/FilesystemManager";
 export { FileSystemDriver } from "./file-storage/drivers/FileSystemDriver";
 export { S3Driver } from "./file-storage/drivers/S3Driver";
 export { AzureBlobDriver, type AzureBlobDriverConfig, } from "./file-storage/drivers/AzureBlobDriver";
-export type { ByteRange, DeleteFileParams, DeletePrefixOptions, FetchFileOptions, FileMetadata, ListObjectsOptions, PutFileOptions, PutFileParams, ReadFileParams, ReadResult, StoredObject, } from "./file-storage/drivers/types";
+export type { ByteRange, DeleteFileParams, DeletePrefixOptions, FetchFileOptions, FileMetadata, ListObjectsOptions, PutFileOptions, PutFileParams, PutStreamParams, ReadFileParams, ReadResult, StoredObject, } from "./file-storage/drivers/types";
 export { FileStorageDriver, assertDeletablePrefix, } from "./file-storage/drivers/FileStorageDriver";
+export { type PutFromUrlOptions, type PutFromUrlResult, } from "./file-storage/putFromUrl";
+export { isActiveContentType, sniffContentType, } from "./file-storage/sniffContentType";
 export { resolveRange, toRangeHeaderValue, parseContentRange, } from "../http/range";
 export { FileNotFoundError, RangeNotSatisfiableError } from "../http/errors";
+export { EncryptionServiceProvider } from "./encryption/EncryptionServiceProvider";
+export { DecryptionError, Encrypter, EncryptionKeyError, } from "./encryption/Encrypter";
+export { defineEncryptionConfig, type EncryptionConfig, } from "./encryption/config";
 export { RateLimiterServiceProvider } from "./rate-limiter/RateLimiterServiceProvider";
 export { RateLimiter } from "./rate-limiter/RateLimiter";
 export { InMemoryRateLimiter, type InMemoryRateLimiterOptions, } from "./rate-limiter/drivers/InMemoryRateLimiterDriver";
@@ -34,11 +39,12 @@ export { LogServiceProvider } from "./logging/LogServiceProvider";
 export { LogManager } from "./logging/LogManager";
 export type { LogEntry } from "./logging/types";
 export { QueueServiceProvider } from "./queue/QueueServiceProvider";
-export { QueueManager, type DrainResult } from "./queue/QueueManager";
+export { QueueManager, type DrainResult, type DispatchedBatch, type JobBatchOptions, } from "./queue/QueueManager";
 export { MemoryQueueDriver } from "./queue/MemoryQueueDriver";
 export { DatabaseQueueDriver, type DatabaseQueueDriverOptions, type DatabaseJobStatus, } from "./queue/DatabaseQueueDriver";
-export type { QueueDriver, EnqueueJob, ClaimOptions, ClaimedJob, JobFailure, JobRelease, } from "./queue/QueueDriver";
-export { Job, type JobThrottle, type JobConcurrency } from "./queue/Job";
+export type { QueueDriver, EnqueueJob, ClaimOptions, ClaimedJob, JobFailure, JobRelease, EnqueueBatch, } from "./queue/QueueDriver";
+export type { BatchStatus, BatchCallbacks, JobCall } from "./queue/batch";
+export { Job, type JobThrottle, type JobConcurrency, type JobBatch, type JobCallArgs, } from "./queue/Job";
 export { LockManager, HeldLock, type AcquireOptions, type LockRunResult, } from "./lock/LockManager";
 export { LockLostError, type LockStore } from "./lock/LockStore";
 export { ChangeFeedServiceProvider } from "./change-feed/ChangeFeedServiceProvider";
@@ -67,6 +73,14 @@ export { GoogleOAuthProvider } from "../auth/oauth/GoogleOAuthProvider";
 export { XOAuthProvider } from "../auth/oauth/XOAuthProvider";
 export { OAuthCallbackError, OAuthProvider } from "../auth/oauth/OAuthProvider";
 export type { OAuthAuthorizationContext, OAuthCallbackContext, OAuthProfile, } from "../auth/oauth/OAuthProvider";
+export { OAuthConnectionProvider } from "../auth/connections/OAuthConnectionProvider";
+export type { OAuthConnectionProviderConfig, OAuthTokenSet, } from "../auth/connections/OAuthConnectionProvider";
+export { OAuthConnectionError, OAuthReconnectRequiredError } from "../auth/connections/errors";
+export type { OAuthConnectionErrorCode } from "../auth/connections/errors";
+export { ConnectionManager, ProviderConnection } from "../auth/connections/ConnectionManager";
+export type { ConnectionOwner, FakeConnectionHandler } from "../auth/connections/ConnectionManager";
+export { DatabaseConnectionStore, MemoryConnectionStore } from "../auth/connections/ConnectionStore";
+export type { ConnectionRecord, ConnectionStore } from "../auth/connections/ConnectionStore";
 export { MiddlewareServiceProvider } from "./middleware/MiddlewareServiceProvider";
 export { MiddlewareRegistry } from "./middleware/MiddlewareRegistry";
 export { KernelIdServiceProvider } from "./kernel-id/KernelIdServiceProvider";

package/dist/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../services/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,GAC3B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,GACb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3E,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,YAAY,EACV,aAAa,EACb,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,+BAA+B,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EACL,WAAW,EACX,QAAQ,EACR,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,gBAAgB,GACtB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,IAAI,uBAAuB,GACzC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,GAC9B,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,YAAY,EACV,OAAO,EACP,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAC/F,OAAO,EAAE,KAAK,EAAE,MAAM,0CAA0C,CAAC;AAGjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAMlE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIlD,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAChF,YAAY,EACV,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,GACb,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EACV,OAAO,EACP,UAAU,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAM7D,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,OAAO,EACL,aAAa,EACb,OAAO,EACP,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,UAAU,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,KAAK,SAAS,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../services/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,KAAK,qBAAqB,GAC3B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,EACV,YAAY,GACb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EACL,eAAe,EACf,SAAS,EACT,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3E,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,YAAY,EACV,aAAa,EACb,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,aAAa,EACb,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,+BAA+B,GACrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EACL,GAAG,EACH,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,WAAW,EACX,QAAQ,EACR,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,gBAAgB,GACtB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,IAAI,uBAAuB,GACzC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,GAC9B,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,YAAY,EACV,OAAO,EACP,gBAAgB,GACjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAC/F,OAAO,EAAE,KAAK,EAAE,MAAM,0CAA0C,CAAC;AAGjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAMlE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIlD,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAChF,YAAY,EACV,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,GACb,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,YAAY,EACV,6BAA6B,EAC7B,aAAa,GACd,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAC/F,YAAY,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC9F,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACpG,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACrG,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAG7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAMzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EACV,OAAO,EACP,UAAU,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAM7D,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,OAAO,EACL,aAAa,EACb,OAAO,EACP,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,UAAU,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,KAAK,SAAS,GACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC"}