gemi 0.118.0 → 0.119.0

package/dist/{chunk-k31qfe7a.js.map → chunk-xx7necqt.js.map}

@@ -4,10 +4,10 @@
   "sourcesContent": [
     "import type { SQL } from \"bun\";\n\nimport type { DatabaseConnection } from \"../../database/Connection\";\nimport type { Dialect } from \"../../database/dialect\";\nimport type { Encrypter } from \"../../services/encryption/Encrypter\";\nimport type { OAuthTokenSet } from \"./OAuthConnectionProvider\";\n\n/** One stored connection, tokens decrypted. Lives only inside the framework. */\nexport interface ConnectionRecord {\n  id: string;\n  userId: string;\n  provider: string;\n  providerAccountId: string | null;\n  scopes: string[];\n  accessToken: string;\n  refreshToken: string | null;\n  tokenType: string | null;\n  expiresAt: Date | null;\n  needsReconnect: boolean;\n  /** Bumped on every token change: the compare-and-swap that serialises refreshes. */\n  revision: number;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\n/** Where connections are kept. `DatabaseConnectionStore` in an app, `MemoryConnectionStore` in tests. */\nexport interface ConnectionStore {\n  find(userId: string, provider: string): Promise<ConnectionRecord | null>;\n  list(userId: string): Promise<ConnectionRecord[]>;\n  /** Stores a fresh grant, replacing any connection the user had to this provider. */\n  save(userId: string, provider: string, tokens: OAuthTokenSet): Promise<ConnectionRecord>;\n  /**\n   * Replaces the tokens of the connection at `revision`, or resolves `null`\n   * when it has moved on (another request refreshed it first) or is gone.\n   */\n  updateTokens(id: string, revision: number, tokens: OAuthTokenSet): Promise<ConnectionRecord | null>;\n  markNeedsReconnect(id: string): Promise<void>;\n  delete(id: string): Promise<void>;\n}\n\nexport class MemoryConnectionStore implements ConnectionStore {\n  private readonly rows = new Map<string, ConnectionRecord>();\n\n  async find(userId: string, provider: string) {\n    for (const row of this.rows.values()) {\n      if (row.userId === userId && row.provider === provider) return { ...row };\n    }\n    return null;\n  }\n\n  async list(userId: string) {\n    return [...this.rows.values()].filter((row) => row.userId === userId).map((row) => ({ ...row }));\n  }\n\n  async save(userId: string, provider: string, tokens: OAuthTokenSet) {\n    const existing = await this.find(userId, provider);\n    const now = new Date();\n    const row: ConnectionRecord = {\n      id: existing?.id ?? Bun.randomUUIDv7(),\n      userId,\n      provider,\n      ...fromTokens(tokens),\n      needsReconnect: false,\n      revision: (existing?.revision ?? 0) + 1,\n      createdAt: existing?.createdAt ?? now,\n      updatedAt: now,\n    };\n    this.rows.set(row.id, row);\n    return { ...row };\n  }\n\n  async updateTokens(id: string, revision: number, tokens: OAuthTokenSet) {\n    const row = this.rows.get(id);\n    if (!row || row.revision !== revision) return null;\n    const next = { ...row, ...fromTokens(tokens), needsReconnect: false, revision: revision + 1, updatedAt: new Date() };\n    this.rows.set(id, next);\n    return { ...next };\n  }\n\n  async markNeedsReconnect(id: string) {\n    const row = this.rows.get(id);\n    if (row) this.rows.set(id, { ...row, needsReconnect: true, updatedAt: new Date() });\n  }\n\n  async delete(id: string) {\n    this.rows.delete(id);\n  }\n}\n\nexport interface DatabaseConnectionStoreOptions {\n  /** Default `gemi_oauth_connections`. A plain identifier: it is spliced into every statement. */\n  table?: string;\n}\n\n/**\n * Connections in a table of the app's database, tokens encrypted with the\n * app's `Encrypter` (the keys in `app/config/encryption.ts`). Raw SQL, like\n * the queue's and the locks' tables, for SQLite, Postgres and MySQL 8 /\n * MariaDB: the table is not an ORM model, so no ORM read can return a token.\n */\nexport class DatabaseConnectionStore implements ConnectionStore {\n  readonly table: string;\n  private readonly sql: SQL;\n  private readonly dialect: Dialect;\n\n  constructor(\n    connection: Pick<DatabaseConnection, \"sql\" | \"dialect\">,\n    private readonly encrypter: () => Encrypter,\n    options: DatabaseConnectionStoreOptions = {},\n  ) {\n    const table = options.table ?? \"gemi_oauth_connections\";\n    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)) {\n      throw new Error(`The connections table name \"${table}\" is not a plain identifier.`);\n    }\n    this.table = table;\n    this.sql = connection.sql;\n    this.dialect = connection.dialect;\n  }\n\n  /** Creates the table if it does not exist: the DDL Prisma makes for the model in the docs. */\n  async createTable(): Promise<void> {\n    for (const statement of createConnectionTableStatements(this.dialect, this.table)) {\n      await this.sql.unsafe(statement);\n    }\n  }\n\n  async find(userId: string, provider: string) {\n    const q = this.sql;\n    const rows = (await q`\n      SELECT * FROM ${this.name(q)} WHERE user_id = ${userId} AND provider = ${provider}\n    `) as RawRow[];\n    return rows[0] ? this.decode(rows[0]) : null;\n  }\n\n  async list(userId: string) {\n    const q = this.sql;\n    const rows = (await q`\n      SELECT * FROM ${this.name(q)} WHERE user_id = ${userId} ORDER BY provider\n    `) as RawRow[];\n    return rows.map((row) => this.decode(row));\n  }\n\n  async save(userId: string, provider: string, tokens: OAuthTokenSet) {\n    const q = this.sql;\n    const values = this.encode(tokens);\n    const now = Date.now();\n\n    const update = async () =>\n      affected(\n        await q`\n          UPDATE ${this.name(q)}\n          SET provider_account_id = ${values.providerAccountId}, scopes = ${values.scopes},\n              access_token = ${values.accessToken}, refresh_token = ${values.refreshToken},\n              token_type = ${values.tokenType}, expires_at = ${values.expiresAt},\n              needs_reconnect = 0, revision = revision + 1, updated_at = ${now}\n          WHERE user_id = ${userId} AND provider = ${provider}\n        `,\n      );\n\n    if ((await update()) === 0) {\n      try {\n        await q`\n          INSERT INTO ${this.name(q)} (id, user_id, provider, provider_account_id, scopes,\n            access_token, refresh_token, token_type, expires_at, needs_reconnect, revision,\n            created_at, updated_at)\n          VALUES (${Bun.randomUUIDv7()}, ${userId}, ${provider}, ${values.providerAccountId},\n            ${values.scopes}, ${values.accessToken}, ${values.refreshToken}, ${values.tokenType},\n            ${values.expiresAt}, 0, 1, ${now}, ${now})\n        `;\n      } catch (error) {\n        // A concurrent callback for the same user and provider inserted first.\n        if ((await update()) === 0) throw error;\n      }\n    }\n\n    const saved = await this.find(userId, provider);\n    if (!saved) throw new Error(\"The OAuth connection vanished while it was being saved.\");\n    return saved;\n  }\n\n  async updateTokens(id: string, revision: number, tokens: OAuthTokenSet) {\n    const q = this.sql;\n    const values = this.encode(tokens);\n    const result = await q`\n      UPDATE ${this.name(q)}\n      SET provider_account_id = COALESCE(${values.providerAccountId}, provider_account_id),\n          scopes = ${values.scopes}, access_token = ${values.accessToken},\n          refresh_token = ${values.refreshToken}, token_type = ${values.tokenType},\n          expires_at = ${values.expiresAt}, needs_reconnect = 0, revision = revision + 1,\n          updated_at = ${Date.now()}\n      WHERE id = ${id} AND revision = ${revision}\n    `;\n    if (affected(result) === 0) return null;\n    const rows = (await q`SELECT * FROM ${this.name(q)} WHERE id = ${id}`) as RawRow[];\n    return rows[0] ? this.decode(rows[0]) : null;\n  }\n\n  async markNeedsReconnect(id: string) {\n    const q = this.sql;\n    await q`UPDATE ${this.name(q)} SET needs_reconnect = 1, updated_at = ${Date.now()} WHERE id = ${id}`;\n  }\n\n  async delete(id: string) {\n    const q = this.sql;\n    await q`DELETE FROM ${this.name(q)} WHERE id = ${id}`;\n  }\n\n  /**\n   * Re-encrypts every token still under an older key. Run by\n   * `gemi run encryption:rotate`; a token refreshed in the meantime is\n   * already current and is skipped by the revision check.\n   */\n  async rotateEncryption(options: { dryRun?: boolean } = {}): Promise<{ scanned: number; rotated: number }> {\n    const q = this.sql;\n    const encrypter = this.encrypter();\n    const rows = (await q`\n      SELECT id, access_token, refresh_token, revision FROM ${this.name(q)} ORDER BY id\n    `) as RawRow[];\n    let rotated = 0;\n    for (const row of rows) {\n      const stale = (value: string | null) => typeof value === \"string\" && encrypter.needsReencryption(value);\n      if (!stale(row.access_token) && !stale(row.refresh_token)) continue;\n      rotated += 1;\n      if (options.dryRun) continue;\n      const reseal = (value: string | null) => (value === null ? null : encrypter.encrypt(encrypter.decrypt(value)));\n      await q`\n        UPDATE ${this.name(q)}\n        SET access_token = ${reseal(row.access_token)}, refresh_token = ${reseal(row.refresh_token)},\n            revision = revision + 1\n        WHERE id = ${row.id} AND revision = ${Number(row.revision)}\n      `;\n    }\n    return { scanned: rows.length, rotated };\n  }\n\n  private encode(tokens: OAuthTokenSet) {\n    const encrypter = this.encrypter();\n    return {\n      providerAccountId: tokens.providerAccountId,\n      scopes: tokens.scopes.join(\" \"),\n      accessToken: encrypter.encrypt(tokens.accessToken),\n      refreshToken: tokens.refreshToken === null ? null : encrypter.encrypt(tokens.refreshToken),\n      tokenType: tokens.tokenType,\n      expiresAt: tokens.expiresAt === null ? null : tokens.expiresAt.getTime(),\n    };\n  }\n\n  private decode(row: RawRow): ConnectionRecord {\n    const encrypter = this.encrypter();\n    return {\n      id: String(row.id),\n      userId: String(row.user_id),\n      provider: String(row.provider),\n      providerAccountId: row.provider_account_id === null ? null : String(row.provider_account_id),\n      scopes: String(row.scopes ?? \"\").split(\" \").filter(Boolean),\n      accessToken: encrypter.decrypt(String(row.access_token)),\n      refreshToken: row.refresh_token === null ? null : encrypter.decrypt(String(row.refresh_token)),\n      tokenType: row.token_type === null ? null : String(row.token_type),\n      expiresAt: row.expires_at === null ? null : new Date(Number(row.expires_at)),\n      needsReconnect: Number(row.needs_reconnect) === 1,\n      revision: Number(row.revision),\n      createdAt: new Date(Number(row.created_at)),\n      updatedAt: new Date(Number(row.updated_at)),\n    };\n  }\n\n  private get mysql() {\n    return this.dialect === \"mysql\" || this.dialect === \"mariadb\";\n  }\n\n  private name(q: SQL) {\n    return q.unsafe(this.mysql ? `\\`${this.table}\\`` : `\"${this.table}\"`);\n  }\n}\n\ninterface RawRow {\n  id: unknown;\n  user_id: unknown;\n  provider: unknown;\n  provider_account_id: unknown;\n  scopes: unknown;\n  access_token: string;\n  refresh_token: string | null;\n  token_type: unknown;\n  expires_at: unknown;\n  needs_reconnect: unknown;\n  revision: unknown;\n  created_at: unknown;\n  updated_at: unknown;\n}\n\nfunction fromTokens(tokens: OAuthTokenSet) {\n  return {\n    providerAccountId: tokens.providerAccountId,\n    scopes: [...tokens.scopes],\n    accessToken: tokens.accessToken,\n    refreshToken: tokens.refreshToken,\n    tokenType: tokens.tokenType,\n    expiresAt: tokens.expiresAt,\n  };\n}\n\nfunction affected(result: unknown): number {\n  const counts = result as { count?: number | null; affectedRows?: number | null };\n  return Math.max(Number(counts.count ?? 0), Number(counts.affectedRows ?? 0));\n}\n\n/** The connections table, as Prisma generates it for the model in the docs, with `IF NOT EXISTS`. */\nexport function createConnectionTableStatements(dialect: Dialect, table: string): string[] {\n  if (dialect === \"mysql\" || dialect === \"mariadb\") {\n    return [\n      `CREATE TABLE IF NOT EXISTS \\`${table}\\` (\n    \\`id\\` VARCHAR(191) NOT NULL,\n    \\`user_id\\` VARCHAR(191) NOT NULL,\n    \\`provider\\` VARCHAR(191) NOT NULL,\n    \\`provider_account_id\\` VARCHAR(191) NULL,\n    \\`scopes\\` TEXT NOT NULL,\n    \\`access_token\\` TEXT NOT NULL,\n    \\`refresh_token\\` TEXT NULL,\n    \\`token_type\\` VARCHAR(191) NULL,\n    \\`expires_at\\` BIGINT NULL,\n    \\`needs_reconnect\\` INTEGER NOT NULL DEFAULT 0,\n    \\`revision\\` BIGINT NOT NULL DEFAULT 0,\n    \\`created_at\\` BIGINT NOT NULL,\n    \\`updated_at\\` BIGINT NOT NULL,\n\n    UNIQUE INDEX \\`${table}_user_id_provider_key\\`(\\`user_id\\`, \\`provider\\`),\n    PRIMARY KEY (\\`id\\`)\n) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci`,\n    ];\n  }\n  const key = dialect === \"sqlite\" ? `\"id\" TEXT NOT NULL PRIMARY KEY,` : `\"id\" TEXT NOT NULL,`;\n  const constraint =\n    dialect === \"sqlite\" ? \"\" : `,\\n\\n    CONSTRAINT \"${table}_pkey\" PRIMARY KEY (\"id\")`;\n  return [\n    `CREATE TABLE IF NOT EXISTS \"${table}\" (\n    ${key}\n    \"user_id\" TEXT NOT NULL,\n    \"provider\" TEXT NOT NULL,\n    \"provider_account_id\" TEXT,\n    \"scopes\" TEXT NOT NULL,\n    \"access_token\" TEXT NOT NULL,\n    \"refresh_token\" TEXT,\n    \"token_type\" TEXT,\n    \"expires_at\" BIGINT,\n    \"needs_reconnect\" INTEGER NOT NULL DEFAULT 0,\n    \"revision\" BIGINT NOT NULL DEFAULT 0,\n    \"created_at\" BIGINT NOT NULL,\n    \"updated_at\" BIGINT NOT NULL${constraint}\n)`,\n    `CREATE UNIQUE INDEX IF NOT EXISTS \"${table}_user_id_provider_key\" ON \"${table}\"(\"user_id\", \"provider\")`,\n  ];\n}\n",
     "/**\n * Why an OAuth connection operation failed. Never carries a token or a token\n * endpoint's body; `providerError` is the provider's RFC 6749 error code at\n * most (`invalid_grant`).\n */\nexport type OAuthConnectionErrorCode =\n  | \"unknown_provider\"\n  | \"exchange_failed\"\n  | \"refresh_failed\"\n  | \"reconnect_required\"\n  | \"revoke_failed\"\n  | \"revoke_unsupported\"\n  | \"forbidden_url\";\n\nexport class OAuthConnectionError extends Error {\n  readonly status?: number;\n  readonly providerError?: string;\n\n  constructor(\n    readonly code: OAuthConnectionErrorCode,\n    message: string,\n    options: { cause?: unknown; status?: number; providerError?: string } = {},\n  ) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined);\n    this.name = \"OAuthConnectionError\";\n    this.status = options.status;\n    this.providerError = options.providerError;\n  }\n}\n\n/**\n * The connection's tokens no longer work and refreshing them failed, so the\n * user has to connect the account again (send them to\n * `/auth/connections/<provider>`). The connection is marked, so every later\n * call fails the same way without asking the provider again, until it is\n * reconnected.\n */\nexport class OAuthReconnectRequiredError extends OAuthConnectionError {\n  constructor(\n    readonly provider: string,\n    options: { cause?: unknown; status?: number; providerError?: string } = {},\n  ) {\n    super(\n      \"reconnect_required\",\n      `The ${provider} connection needs to be reconnected: its tokens were refused and could not be refreshed.`,\n      options,\n    );\n    this.name = \"OAuthReconnectRequiredError\";\n  }\n}\n",
-    "import { OAuthConnectionError } from \"./errors\";\n\nexport interface OAuthConnectionProviderConfig {\n  /** The provider's authorization endpoint: `https://www.figma.com/oauth`. */\n  authorizeUrl: string;\n  /** The token endpoint, for the code exchange and refreshes. */\n  tokenUrl: string;\n  /**\n   * The RFC 7009 revocation endpoint. Without one, `revoke()` is refused and\n   * `disconnect()` (which forgets the tokens locally) is the way to remove a\n   * connection.\n   */\n  revokeUrl?: string;\n  clientId: string;\n  clientSecret: string;\n  /** The scopes to request. */\n  scopes: string[];\n  /** How `scopes` are joined on the authorization URL. Default `\" \"` (RFC 6749). */\n  scopeSeparator?: string;\n  /**\n   * How the client authenticates to the token and revocation endpoints:\n   * `\"body\"` sends `client_id` and `client_secret` as form fields (what most\n   * providers document), `\"basic\"` sends them as HTTP Basic credentials.\n   * Default `\"body\"`.\n   */\n  clientAuth?: \"body\" | \"basic\";\n  /** Send a PKCE challenge (S256). Default `true`; turn off only for a provider that rejects it. */\n  pkce?: boolean;\n  /**\n   * Extra query parameters for the authorization URL, such as\n   * `{ access_type: \"offline\", prompt: \"consent\" }` for Google. They cannot\n   * replace `state`, the PKCE challenge, `redirect_uri`, `client_id` or `scope`.\n   */\n  authorizationParams?: Record<string, string>;\n  /**\n   * The callback URL registered with the provider. Default\n   * `${HOST_NAME}/auth/connections/<name>/callback` (the request's origin when\n   * `HOST_NAME` is unset).\n   */\n  redirectUri?: string;\n  /**\n   * Where the provider's API lives: `https://api.figma.com`. Required:\n   * `connection.fetch` takes paths relative to it and **refuses any other\n   * origin**, so the user's token only ever goes to the provider's API host,\n   * even for a URL that came from user input.\n   */\n  apiBaseUrl: string;\n  /** Refresh this many seconds before the access token expires. Default 60. */\n  refreshLeewaySeconds?: number;\n}\n\n/** What a token endpoint answered, normalised. */\nexport interface OAuthTokenSet {\n  accessToken: string;\n  refreshToken: string | null;\n  tokenType: string | null;\n  /** Absent when the provider did not say (`expires_in` missing). */\n  expiresAt: Date | null;\n  /** The scopes granted, when the provider says; otherwise the ones requested. */\n  scopes: string[];\n  /** The provider's id for the account, when the token response carries one (Figma's `user_id`). */\n  providerAccountId: string | null;\n}\n\n/**\n * A provider an app can connect a user's account to, to call its API on the\n * user's behalf — as opposed to `OAuthProvider`, which signs the user in.\n * Configured under `auth.connections`:\n *\n * ```ts\n * connections: {\n *   figma: new OAuthConnectionProvider({\n *     authorizeUrl: \"https://www.figma.com/oauth\",\n *     tokenUrl: \"https://api.figma.com/v1/oauth/token\",\n *     clientId: process.env.FIGMA_CLIENT_ID!,\n *     clientSecret: process.env.FIGMA_CLIENT_SECRET!,\n *     scopes: [\"file_content:read\"],\n *     apiBaseUrl: \"https://api.figma.com\",\n *   }),\n * }\n * ```\n */\nexport class OAuthConnectionProvider {\n  readonly config: Required<\n    Omit<OAuthConnectionProviderConfig, \"revokeUrl\" | \"redirectUri\">\n  > &\n    Pick<OAuthConnectionProviderConfig, \"revokeUrl\" | \"redirectUri\">;\n\n  constructor(config: OAuthConnectionProviderConfig) {\n    for (const key of [\"authorizeUrl\", \"tokenUrl\"] as const) {\n      assertHttpUrl(key, config[key]);\n    }\n    if (config.revokeUrl !== undefined) assertHttpUrl(\"revokeUrl\", config.revokeUrl);\n    // Required (not just recommended): it is what keeps `connection.fetch`\n    // from sending the user's token anywhere but the provider's API host. A\n    // missing one (`process.env.X` unset, or plain JS) fails the boot, when\n    // the auth config is loaded, rather than the first `fetch`.\n    if (config.apiBaseUrl === undefined || config.apiBaseUrl === null || config.apiBaseUrl === \"\") {\n      throw new Error(\n        \"OAuthConnectionProvider: apiBaseUrl is required. Set it to the provider's API origin \" +\n          '(e.g. apiBaseUrl: \"https://api.figma.com\"); connection.fetch only sends the token there.',\n      );\n    }\n    assertHttpUrl(\"apiBaseUrl\", config.apiBaseUrl);\n    this.config = {\n      scopeSeparator: \" \",\n      clientAuth: \"body\",\n      pkce: true,\n      authorizationParams: {},\n      refreshLeewaySeconds: 60,\n      ...config,\n    };\n  }\n\n  /** The URL to send the browser to. */\n  authorizationUrl(args: { state: string; codeChallenge: string; redirectUri: string }): string {\n    const url = new URL(this.config.authorizeUrl);\n    const params: Record<string, string> = {\n      ...this.config.authorizationParams,\n      response_type: \"code\",\n      client_id: this.config.clientId,\n      redirect_uri: args.redirectUri,\n      scope: this.config.scopes.join(this.config.scopeSeparator),\n      state: args.state,\n    };\n    if (this.config.pkce) {\n      params.code_challenge = args.codeChallenge;\n      params.code_challenge_method = \"S256\";\n    }\n    for (const [key, value] of Object.entries(params)) url.searchParams.set(key, value);\n    return url.toString();\n  }\n\n  /** Exchanges an authorization code for tokens. */\n  exchangeCode(args: { code: string; codeVerifier: string; redirectUri: string }): Promise<OAuthTokenSet> {\n    const body = new URLSearchParams({\n      grant_type: \"authorization_code\",\n      code: args.code,\n      redirect_uri: args.redirectUri,\n    });\n    if (this.config.pkce) body.set(\"code_verifier\", args.codeVerifier);\n    return this.tokenRequest(body, { scopes: this.config.scopes, refreshToken: null, phase: \"exchange\" });\n  }\n\n  /**\n   * Spends `refreshToken` for a new access token. A provider that does not\n   * rotate refresh tokens answers without one, and the old one is kept.\n   */\n  refresh(refreshToken: string, scopes: string[]): Promise<OAuthTokenSet> {\n    const body = new URLSearchParams({ grant_type: \"refresh_token\", refresh_token: refreshToken });\n    return this.tokenRequest(body, { scopes, refreshToken, phase: \"refresh\" });\n  }\n\n  /** Revokes `token` at the provider (RFC 7009). */\n  async revoke(token: string, hint: \"refresh_token\" | \"access_token\"): Promise<void> {\n    if (!this.config.revokeUrl) {\n      throw new OAuthConnectionError(\n        \"revoke_unsupported\",\n        \"This provider has no revokeUrl configured. Use disconnect() to forget the tokens locally.\",\n      );\n    }\n    const body = new URLSearchParams({ token, token_type_hint: hint });\n    let response: Response;\n    try {\n      response = await fetch(this.config.revokeUrl, this.post(body));\n    } catch (cause) {\n      throw new OAuthConnectionError(\"revoke_failed\", \"The revocation request failed.\", { cause });\n    }\n    // RFC 7009: 200 whether or not the token was still valid.\n    if (!response.ok) {\n      throw new OAuthConnectionError(\n        \"revoke_failed\",\n        `The provider refused the revocation (HTTP ${response.status}).`,\n        { status: response.status },\n      );\n    }\n  }\n\n  private post(body: URLSearchParams): RequestInit {\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      // GitHub answers form-encoded unless asked for JSON.\n      Accept: \"application/json\",\n    };\n    if (this.config.clientAuth === \"basic\") {\n      const credentials = `${encodeURIComponent(this.config.clientId)}:${encodeURIComponent(this.config.clientSecret)}`;\n      headers.Authorization = `Basic ${Buffer.from(credentials).toString(\"base64\")}`;\n    } else {\n      body.set(\"client_id\", this.config.clientId);\n      body.set(\"client_secret\", this.config.clientSecret);\n    }\n    return { method: \"POST\", headers, body: body.toString(), redirect: \"error\" };\n  }\n\n  private async tokenRequest(\n    body: URLSearchParams,\n    previous: { scopes: string[]; refreshToken: string | null; phase: \"exchange\" | \"refresh\" },\n  ): Promise<OAuthTokenSet> {\n    const failure = previous.phase === \"exchange\" ? \"exchange_failed\" : \"refresh_failed\";\n    let response: Response;\n    try {\n      response = await fetch(this.config.tokenUrl, this.post(body));\n    } catch (cause) {\n      throw new OAuthConnectionError(failure, \"The token request failed.\", { cause });\n    }\n\n    const payload = (await response.json().catch(() => ({}))) as Record<string, unknown>;\n    if (!response.ok || typeof payload.access_token !== \"string\" || payload.access_token === \"\") {\n      // Only the provider's error code, never the body: it can echo the grant.\n      const code = typeof payload.error === \"string\" && /^[a-z0-9_]{1,64}$/.test(payload.error) ? payload.error : undefined;\n      throw new OAuthConnectionError(\n        failure,\n        `The token endpoint refused the ${previous.phase === \"exchange\" ? \"code\" : \"refresh token\"} ` +\n          `(HTTP ${response.status}${code ? `, ${code}` : \"\"}).`,\n        { status: response.status, providerError: code },\n      );\n    }\n\n    const expiresIn = Number(payload.expires_in);\n    const scope = typeof payload.scope === \"string\" ? payload.scope : undefined;\n    const accountId = payload.user_id ?? payload.account_id;\n    return {\n      accessToken: payload.access_token,\n      refreshToken:\n        typeof payload.refresh_token === \"string\" && payload.refresh_token !== \"\"\n          ? payload.refresh_token\n          : previous.refreshToken,\n      tokenType: typeof payload.token_type === \"string\" ? payload.token_type : null,\n      expiresAt: Number.isFinite(expiresIn) && expiresIn > 0 ? new Date(Date.now() + expiresIn * 1000) : null,\n      scopes: scope !== undefined ? scope.split(/[\\s,]+/).filter(Boolean) : previous.scopes,\n      providerAccountId:\n        typeof accountId === \"string\" || typeof accountId === \"number\" ? String(accountId) : null,\n    };\n  }\n}\n\nfunction assertHttpUrl(key: string, value: unknown): void {\n  let url: URL | undefined;\n  try {\n    url = new URL(String(value));\n  } catch {\n    url = undefined;\n  }\n  if (!url || (url.protocol !== \"https:\" && !(url.protocol === \"http:\" && isLoopback(url.hostname)))) {\n    throw new Error(\n      `OAuthConnectionProvider: ${key} must be an https URL (http only for localhost), got ${JSON.stringify(value)}.`,\n    );\n  }\n}\n\nexport function isLoopback(hostname: string): boolean {\n  return hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"[::1]\" || hostname === \"::1\";\n}\n",
+    "import { OAuthConnectionError } from \"./errors\";\n\nexport interface OAuthConnectionProviderConfig {\n  /** The provider's authorization endpoint: `https://www.figma.com/oauth`. */\n  authorizeUrl: string;\n  /** The token endpoint, for the code exchange and refreshes. */\n  tokenUrl: string;\n  /**\n   * The RFC 7009 revocation endpoint. Without one, `revoke()` is refused and\n   * `disconnect()` (which forgets the tokens locally) is the way to remove a\n   * connection.\n   */\n  revokeUrl?: string;\n  clientId: string;\n  clientSecret: string;\n  /** The scopes to request. */\n  scopes: string[];\n  /** How `scopes` are joined on the authorization URL. Default `\" \"` (RFC 6749). */\n  scopeSeparator?: string;\n  /**\n   * How the client authenticates to the token and revocation endpoints:\n   * `\"body\"` sends `client_id` and `client_secret` as form fields (what most\n   * providers document), `\"basic\"` sends them as HTTP Basic credentials.\n   * Default `\"body\"`.\n   */\n  clientAuth?: \"body\" | \"basic\";\n  /** Send a PKCE challenge (S256). Default `true`; turn off only for a provider that rejects it. */\n  pkce?: boolean;\n  /**\n   * Extra query parameters for the authorization URL, such as\n   * `{ access_type: \"offline\", prompt: \"consent\" }` for Google. They cannot\n   * replace `state`, the PKCE challenge, `redirect_uri`, `client_id` or `scope`.\n   */\n  authorizationParams?: Record<string, string>;\n  /**\n   * The callback URL registered with the provider. Default\n   * `${HOST_NAME}/auth/connections/<name>/callback` (the request's origin when\n   * `HOST_NAME` is unset).\n   */\n  redirectUri?: string;\n  /**\n   * Where the provider's API lives: `https://api.figma.com`. Required:\n   * `connection.fetch` takes paths relative to it and **refuses any other\n   * origin**, so the user's token only ever goes to the provider's API host,\n   * even for a URL that came from user input.\n   */\n  apiBaseUrl: string;\n  /** Refresh this many seconds before the access token expires. Default 60. */\n  refreshLeewaySeconds?: number;\n}\n\n/** What a token endpoint answered, normalised. */\nexport interface OAuthTokenSet {\n  accessToken: string;\n  refreshToken: string | null;\n  tokenType: string | null;\n  /** Absent when the provider did not say (`expires_in` missing). */\n  expiresAt: Date | null;\n  /** The scopes granted, when the provider says; otherwise the ones requested. */\n  scopes: string[];\n  /**\n   * The provider's id for the account, when the token response carries one\n   * (Figma's `user_id_string`; `user_id` or `account_id` otherwise).\n   */\n  providerAccountId: string | null;\n}\n\n/**\n * A provider an app can connect a user's account to, to call its API on the\n * user's behalf — as opposed to `OAuthProvider`, which signs the user in.\n * Configured under `auth.connections`:\n *\n * ```ts\n * connections: {\n *   figma: new OAuthConnectionProvider({\n *     authorizeUrl: \"https://www.figma.com/oauth\",\n *     tokenUrl: \"https://api.figma.com/v1/oauth/token\",\n *     clientId: process.env.FIGMA_CLIENT_ID!,\n *     clientSecret: process.env.FIGMA_CLIENT_SECRET!,\n *     scopes: [\"file_content:read\"],\n *     apiBaseUrl: \"https://api.figma.com\",\n *   }),\n * }\n * ```\n */\nexport class OAuthConnectionProvider {\n  readonly config: Required<\n    Omit<OAuthConnectionProviderConfig, \"revokeUrl\" | \"redirectUri\">\n  > &\n    Pick<OAuthConnectionProviderConfig, \"revokeUrl\" | \"redirectUri\">;\n\n  constructor(config: OAuthConnectionProviderConfig) {\n    for (const key of [\"authorizeUrl\", \"tokenUrl\"] as const) {\n      assertHttpUrl(key, config[key]);\n    }\n    if (config.revokeUrl !== undefined) assertHttpUrl(\"revokeUrl\", config.revokeUrl);\n    // Required (not just recommended): it is what keeps `connection.fetch`\n    // from sending the user's token anywhere but the provider's API host. A\n    // missing one (`process.env.X` unset, or plain JS) fails the boot, when\n    // the auth config is loaded, rather than the first `fetch`.\n    if (config.apiBaseUrl === undefined || config.apiBaseUrl === null || config.apiBaseUrl === \"\") {\n      throw new Error(\n        \"OAuthConnectionProvider: apiBaseUrl is required. Set it to the provider's API origin \" +\n          '(e.g. apiBaseUrl: \"https://api.figma.com\"); connection.fetch only sends the token there.',\n      );\n    }\n    assertHttpUrl(\"apiBaseUrl\", config.apiBaseUrl);\n    this.config = {\n      scopeSeparator: \" \",\n      clientAuth: \"body\",\n      pkce: true,\n      authorizationParams: {},\n      refreshLeewaySeconds: 60,\n      ...config,\n    };\n  }\n\n  /** The URL to send the browser to. */\n  authorizationUrl(args: { state: string; codeChallenge: string; redirectUri: string }): string {\n    const url = new URL(this.config.authorizeUrl);\n    const params: Record<string, string> = {\n      ...this.config.authorizationParams,\n      response_type: \"code\",\n      client_id: this.config.clientId,\n      redirect_uri: args.redirectUri,\n      scope: this.config.scopes.join(this.config.scopeSeparator),\n      state: args.state,\n    };\n    if (this.config.pkce) {\n      params.code_challenge = args.codeChallenge;\n      params.code_challenge_method = \"S256\";\n    }\n    for (const [key, value] of Object.entries(params)) url.searchParams.set(key, value);\n    return url.toString();\n  }\n\n  /** Exchanges an authorization code for tokens. */\n  exchangeCode(args: { code: string; codeVerifier: string; redirectUri: string }): Promise<OAuthTokenSet> {\n    const body = new URLSearchParams({\n      grant_type: \"authorization_code\",\n      code: args.code,\n      redirect_uri: args.redirectUri,\n    });\n    if (this.config.pkce) body.set(\"code_verifier\", args.codeVerifier);\n    return this.tokenRequest(body, { scopes: this.config.scopes, refreshToken: null, phase: \"exchange\" });\n  }\n\n  /**\n   * Spends `refreshToken` for a new access token. A provider that does not\n   * rotate refresh tokens answers without one, and the old one is kept.\n   */\n  refresh(refreshToken: string, scopes: string[]): Promise<OAuthTokenSet> {\n    const body = new URLSearchParams({ grant_type: \"refresh_token\", refresh_token: refreshToken });\n    return this.tokenRequest(body, { scopes, refreshToken, phase: \"refresh\" });\n  }\n\n  /** Revokes `token` at the provider (RFC 7009). */\n  async revoke(token: string, hint: \"refresh_token\" | \"access_token\"): Promise<void> {\n    if (!this.config.revokeUrl) {\n      throw new OAuthConnectionError(\n        \"revoke_unsupported\",\n        \"This provider has no revokeUrl configured. Use disconnect() to forget the tokens locally.\",\n      );\n    }\n    const body = new URLSearchParams({ token, token_type_hint: hint });\n    let response: Response;\n    try {\n      response = await fetch(this.config.revokeUrl, this.post(body));\n    } catch (cause) {\n      throw new OAuthConnectionError(\"revoke_failed\", \"The revocation request failed.\", { cause });\n    }\n    // RFC 7009: 200 whether or not the token was still valid.\n    if (!response.ok) {\n      throw new OAuthConnectionError(\n        \"revoke_failed\",\n        `The provider refused the revocation (HTTP ${response.status}).`,\n        { status: response.status },\n      );\n    }\n  }\n\n  private post(body: URLSearchParams): RequestInit {\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      // GitHub answers form-encoded unless asked for JSON.\n      Accept: \"application/json\",\n    };\n    if (this.config.clientAuth === \"basic\") {\n      const credentials = `${encodeURIComponent(this.config.clientId)}:${encodeURIComponent(this.config.clientSecret)}`;\n      headers.Authorization = `Basic ${Buffer.from(credentials).toString(\"base64\")}`;\n    } else {\n      body.set(\"client_id\", this.config.clientId);\n      body.set(\"client_secret\", this.config.clientSecret);\n    }\n    return { method: \"POST\", headers, body: body.toString(), redirect: \"error\" };\n  }\n\n  private async tokenRequest(\n    body: URLSearchParams,\n    previous: { scopes: string[]; refreshToken: string | null; phase: \"exchange\" | \"refresh\" },\n  ): Promise<OAuthTokenSet> {\n    const failure = previous.phase === \"exchange\" ? \"exchange_failed\" : \"refresh_failed\";\n    let response: Response;\n    try {\n      response = await fetch(this.config.tokenUrl, this.post(body));\n    } catch (cause) {\n      throw new OAuthConnectionError(failure, \"The token request failed.\", { cause });\n    }\n\n    const payload = (await response.json().catch(() => ({}))) as Record<string, unknown>;\n    if (!response.ok || typeof payload.access_token !== \"string\" || payload.access_token === \"\") {\n      // Only the provider's error code, never the body: it can echo the grant.\n      const code = typeof payload.error === \"string\" && /^[a-z0-9_]{1,64}$/.test(payload.error) ? payload.error : undefined;\n      throw new OAuthConnectionError(\n        failure,\n        `The token endpoint refused the ${previous.phase === \"exchange\" ? \"code\" : \"refresh token\"} ` +\n          `(HTTP ${response.status}${code ? `, ${code}` : \"\"}).`,\n        { status: response.status, providerError: code },\n      );\n    }\n\n    const expiresIn = Number(payload.expires_in);\n    const scope = typeof payload.scope === \"string\" ? payload.scope : undefined;\n    // Figma's `user_id_string` before its deprecated numeric `user_id`, which\n    // JSON parsing has already rounded: Figma's ids do not fit a double.\n    const accountId = payload.user_id_string ?? payload.user_id ?? payload.account_id;\n    return {\n      accessToken: payload.access_token,\n      refreshToken:\n        typeof payload.refresh_token === \"string\" && payload.refresh_token !== \"\"\n          ? payload.refresh_token\n          : previous.refreshToken,\n      tokenType: typeof payload.token_type === \"string\" ? payload.token_type : null,\n      expiresAt: Number.isFinite(expiresIn) && expiresIn > 0 ? new Date(Date.now() + expiresIn * 1000) : null,\n      scopes: scope !== undefined ? scope.split(/[\\s,]+/).filter(Boolean) : previous.scopes,\n      providerAccountId:\n        typeof accountId === \"string\" || typeof accountId === \"number\" ? String(accountId) : null,\n    };\n  }\n}\n\nfunction assertHttpUrl(key: string, value: unknown): void {\n  let url: URL | undefined;\n  try {\n    url = new URL(String(value));\n  } catch {\n    url = undefined;\n  }\n  if (!url || (url.protocol !== \"https:\" && !(url.protocol === \"http:\" && isLoopback(url.hostname)))) {\n    throw new Error(\n      `OAuthConnectionProvider: ${key} must be an https URL (http only for localhost), got ${JSON.stringify(value)}.`,\n    );\n  }\n}\n\nexport function isLoopback(hostname: string): boolean {\n  return hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"[::1]\" || hostname === \"::1\";\n}\n",
     "import { DatabaseManager } from \"../../database/DatabaseManager\";\nimport { app } from \"../../foundation/app\";\nimport { currentEncrypter } from \"../../orm/encryption\";\nimport { LockManager } from \"../../services/lock/LockManager\";\nimport {\n  type ConnectionRecord,\n  type ConnectionStore,\n  DatabaseConnectionStore,\n  MemoryConnectionStore,\n} from \"./ConnectionStore\";\nimport { OAuthConnectionError, OAuthReconnectRequiredError } from \"./errors\";\nimport { type OAuthConnectionProvider, type OAuthTokenSet, isLoopback } from \"./OAuthConnectionProvider\";\n\n/** A user, as far as a connection is concerned: anything with an `id`. */\nexport type ConnectionOwner = { id: string | number } | string | number;\n\n/** What `Connections.fake` answers an API request with. */\nexport type FakeConnectionHandler = (request: Request) => Response | Promise<Response>;\n\nexport interface ConnectionManagerOptions {\n  providers: Record<string, OAuthConnectionProvider>;\n  /** Default: a `DatabaseConnectionStore` on the default database connection. */\n  store?: ConnectionStore | (() => ConnectionStore);\n}\n\n/**\n * The OAuth connections a user has made, and the one place their tokens are\n * read, refreshed and spent. Reached through the `Connections` facade.\n */\nexport class ConnectionManager {\n  static token = \"auth.connections\";\n\n  private resolvedStore: ConnectionStore | undefined;\n  private readonly refreshing = new Map<string, Promise<ConnectionRecord>>();\n  private fakes: Map<string, FakeConnectionHandler> | undefined;\n  private fakeStore: MemoryConnectionStore | undefined;\n  readonly fakeRequests: Request[] = [];\n\n  constructor(private readonly options: ConnectionManagerOptions) {}\n\n  get providers(): Record<string, OAuthConnectionProvider> {\n    return this.options.providers;\n  }\n\n  /** The store connections are kept in. */\n  get store(): ConnectionStore {\n    if (this.fakeStore) return this.fakeStore;\n    if (!this.resolvedStore) {\n      const configured = this.options.store;\n      this.resolvedStore =\n        typeof configured === \"function\"\n          ? configured()\n          : (configured ??\n            new DatabaseConnectionStore(app(DatabaseManager).connection(), () => currentEncrypter()));\n    }\n    return this.resolvedStore;\n  }\n\n  provider(name: string): OAuthConnectionProvider {\n    const provider = this.options.providers[name];\n    if (!provider) {\n      const known = Object.keys(this.options.providers);\n      throw new OAuthConnectionError(\n        \"unknown_provider\",\n        `No OAuth connection provider \"${name}\" in auth.connections` +\n          (known.length > 0 ? ` (configured: ${known.join(\", \")}).` : \" (none are configured).\"),\n      );\n    }\n    return provider;\n  }\n\n  /** The user's connection to `provider`, or `null` when they have not connected it. */\n  async for(user: ConnectionOwner, provider: string): Promise<ProviderConnection | null> {\n    this.provider(provider);\n    const record = await this.store.find(ownerId(user), provider);\n    return record ? new ProviderConnection(this, record) : null;\n  }\n\n  /** Every connection the user has. */\n  async list(user: ConnectionOwner): Promise<ProviderConnection[]> {\n    const records = await this.store.list(ownerId(user));\n    return records\n      .filter((record) => record.provider in this.options.providers)\n      .map((record) => new ProviderConnection(this, record));\n  }\n\n  /**\n   * Stores tokens for the user, replacing any earlier connection to the same\n   * provider. The connect callback calls this; call it yourself for tokens\n   * obtained some other way.\n   */\n  async save(\n    user: ConnectionOwner,\n    provider: string,\n    tokens: Partial<OAuthTokenSet> & { accessToken: string },\n  ): Promise<ProviderConnection> {\n    const config = this.provider(provider);\n    const record = await this.store.save(ownerId(user), provider, {\n      refreshToken: null,\n      tokenType: null,\n      expiresAt: null,\n      providerAccountId: null,\n      scopes: config.config.scopes,\n      ...tokens,\n    });\n    return new ProviderConnection(this, record);\n  }\n\n  // --- testing ---------------------------------------------------------------\n\n  /**\n   * Fakes every provider's API: connections live in memory, `fetch` answers\n   * through `handlers[provider]` (recorded in `fakeRequests`), and nothing\n   * reaches a token or revocation endpoint. Returns `this` so a test can\n   * `save` a connection to start from.\n   */\n  fake(handlers: Record<string, FakeConnectionHandler> = {}): this {\n    this.fakes = new Map(Object.entries(handlers));\n    this.fakeStore = new MemoryConnectionStore();\n    this.fakeRequests.length = 0;\n    return this;\n  }\n\n  /** Undoes `fake`. */\n  restore(): void {\n    this.fakes = undefined;\n    this.fakeStore = undefined;\n    this.fakeRequests.length = 0;\n  }\n\n  get faked(): boolean {\n    return this.fakes !== undefined;\n  }\n\n  // --- internals, for ProviderConnection ---------------------------------------\n\n  /** @internal */\n  async send(provider: string, request: Request): Promise<Response> {\n    if (!this.fakes) return fetch(request);\n    this.fakeRequests.push(request.clone());\n    const handler = this.fakes.get(provider);\n    if (!handler) {\n      throw new Error(`Connections.fake() has no handler for \"${provider}\". Pass one: Connections.fake({ ${provider}: (req) => ... }).`);\n    }\n    return handler(request);\n  }\n\n  /**\n   * A record whose access token is not the one at `staleRevision`: refreshed\n   * by this call, or by whoever refreshed it first. Serialised per connection\n   * in this process (concurrent callers share one refresh) and, through the\n   * app's lock store, across processes — a rotating refresh token must be\n   * spent exactly once.\n   *\n   * @internal\n   */\n  refresh(record: ConnectionRecord): Promise<ConnectionRecord> {\n    const inFlight = this.refreshing.get(record.id);\n    if (inFlight) return inFlight;\n    const task = this.withLock(record.id, () => this.refreshOnce(record)).finally(() =>\n      this.refreshing.delete(record.id),\n    );\n    this.refreshing.set(record.id, task);\n    return task;\n  }\n\n  private async refreshOnce(seen: ConnectionRecord): Promise<ConnectionRecord> {\n    // Re-read under the lock: another process may have refreshed already.\n    const current = await this.store.find(seen.userId, seen.provider);\n    if (!current || current.id !== seen.id) {\n      throw new OAuthReconnectRequiredError(seen.provider);\n    }\n    if (current.revision !== seen.revision && !current.needsReconnect) return current;\n    if (current.needsReconnect) throw new OAuthReconnectRequiredError(seen.provider);\n\n    const provider = this.provider(current.provider);\n    if (this.faked || current.refreshToken === null) {\n      if (this.faked) return current;\n      await this.store.markNeedsReconnect(current.id);\n      throw new OAuthReconnectRequiredError(current.provider);\n    }\n\n    let tokens: OAuthTokenSet;\n    try {\n      tokens = await provider.refresh(current.refreshToken, current.scopes);\n    } catch (error) {\n      // A refusal from the token endpoint is final: the grant is gone. A\n      // network error or a 5xx is not, and leaves the connection alone.\n      if (error instanceof OAuthConnectionError && error.status !== undefined && error.status >= 400 && error.status < 500) {\n        await this.store.markNeedsReconnect(current.id);\n        throw new OAuthReconnectRequiredError(current.provider, {\n          cause: error,\n          status: error.status,\n          providerError: error.providerError,\n        });\n      }\n      throw error;\n    }\n\n    const updated = await this.store.updateTokens(current.id, current.revision, tokens);\n    if (updated) return updated;\n    // Someone else wrote first (only possible without a shared lock store).\n    const winner = await this.store.find(current.userId, current.provider);\n    if (!winner) throw new OAuthReconnectRequiredError(current.provider);\n    return winner;\n  }\n\n  private async withLock<T>(id: string, fn: () => Promise<T>): Promise<T> {\n    const application = app();\n    if (this.faked || !application.bound(LockManager)) return fn();\n    const result = await application\n      .make(LockManager)\n      .run(`gemi:oauth-connection:${id}`, { ttl: 30_000, wait: 20_000 }, () => fn());\n    if (!result.acquired) {\n      throw new OAuthConnectionError(\n        \"refresh_failed\",\n        \"Timed out waiting for another refresh of this connection to finish.\",\n      );\n    }\n    return result.value as T;\n  }\n}\n\n/**\n * One user's connection to one provider. Never exposes a token as a property,\n * and serialises (`toJSON`, `console.log`) without them.\n */\nexport class ProviderConnection {\n  constructor(\n    private readonly manager: ConnectionManager,\n    private record: ConnectionRecord,\n  ) {}\n\n  get provider(): string {\n    return this.record.provider;\n  }\n  get userId(): string {\n    return this.record.userId;\n  }\n  get providerAccountId(): string | null {\n    return this.record.providerAccountId;\n  }\n  /** The scopes the provider granted. */\n  get scopes(): readonly string[] {\n    return this.record.scopes;\n  }\n  get expiresAt(): Date | null {\n    return this.record.expiresAt;\n  }\n  /** A refresh was refused: the user has to connect again. */\n  get needsReconnect(): boolean {\n    return this.record.needsReconnect;\n  }\n  get connectedAt(): Date {\n    return this.record.createdAt;\n  }\n\n  /** Whether every one of `scopes` was granted. */\n  hasScopes(...scopes: string[]): boolean {\n    return scopes.every((scope) => this.record.scopes.includes(scope));\n  }\n\n  /**\n   * `fetch`, as the user: adds `Authorization: Bearer <token>`, refreshes the\n   * token first when it is about to expire, and after a 401 refreshes and\n   * retries once. A refresh the provider refuses marks the connection and\n   * throws `OAuthReconnectRequiredError`.\n   *\n   * A path is resolved against the provider's `apiBaseUrl`, and a URL on any\n   * other origin is refused (`OAuthConnectionError`,\n   * `forbidden_url`), so the token only ever goes to the provider. Redirects\n   * are followed by hand: the token is dropped on one that leaves the origin.\n   * A streamed request body cannot be sent twice, so a 401 for one is\n   * returned rather than retried.\n   */\n  async fetch(input: string | URL, init: RequestInit = {}): Promise<Response> {\n    const url = this.resolveUrl(input);\n    const record = await this.current();\n    const first = await this.send(url, init, record.accessToken);\n    // Retry only a 401 for the token itself, not one from where a redirect\n    // led after the token was dropped.\n    if (first.response.status !== 401 || !first.authorized || init.body instanceof ReadableStream) {\n      return first.response;\n    }\n\n    await first.response.body?.cancel().catch(() => {});\n    const refreshed = await this.refreshFrom(record);\n    return (await this.send(url, init, refreshed.accessToken)).response;\n  }\n\n  /**\n   * A valid access token, refreshed first if it is about to expire — for an\n   * SDK that wants the token itself. Prefer `fetch`, which also retries a 401.\n   */\n  async accessToken(): Promise<string> {\n    return (await this.current()).accessToken;\n  }\n\n  /** Refreshes now, whatever the expiry says. */\n  async refresh(): Promise<void> {\n    await this.refreshFrom(this.record);\n  }\n\n  /**\n   * Revokes the grant at the provider (the refresh token when there is one,\n   * which ends the whole grant, else the access token) and deletes the\n   * connection. If the provider refuses, nothing is deleted and\n   * `OAuthConnectionError` (`revoke_failed`) is thrown — call `disconnect()`\n   * to forget the tokens anyway. A provider without a `revokeUrl` throws\n   * `revoke_unsupported`; use `disconnect()`.\n   */\n  async revoke(): Promise<void> {\n    if (!this.manager.faked) {\n      const provider = this.manager.provider(this.record.provider);\n      if (this.record.refreshToken !== null) {\n        await provider.revoke(this.record.refreshToken, \"refresh_token\");\n      } else {\n        await provider.revoke(this.record.accessToken, \"access_token\");\n      }\n    }\n    await this.manager.store.delete(this.record.id);\n  }\n\n  /** Forgets the tokens locally without telling the provider. */\n  async disconnect(): Promise<void> {\n    await this.manager.store.delete(this.record.id);\n  }\n\n  toJSON() {\n    return {\n      provider: this.provider,\n      providerAccountId: this.providerAccountId,\n      scopes: [...this.scopes],\n      expiresAt: this.expiresAt,\n      needsReconnect: this.needsReconnect,\n      connectedAt: this.connectedAt,\n    };\n  }\n\n  [Symbol.for(\"nodejs.util.inspect.custom\")]() {\n    return { ProviderConnection: this.toJSON() };\n  }\n\n  private async current(): Promise<ConnectionRecord> {\n    if (this.record.needsReconnect) throw new OAuthReconnectRequiredError(this.record.provider);\n    const leeway = this.manager.provider(this.record.provider).config.refreshLeewaySeconds * 1000;\n    const expiresAt = this.record.expiresAt?.getTime();\n    if (expiresAt !== undefined && expiresAt - Date.now() <= leeway) {\n      return this.refreshFrom(this.record);\n    }\n    return this.record;\n  }\n\n  private async refreshFrom(record: ConnectionRecord): Promise<ConnectionRecord> {\n    try {\n      this.record = await this.manager.refresh(record);\n    } catch (error) {\n      if (error instanceof OAuthReconnectRequiredError) {\n        this.record = { ...this.record, needsReconnect: true };\n      }\n      throw error;\n    }\n    return this.record;\n  }\n\n  private resolveUrl(input: string | URL): URL {\n    const base = this.manager.provider(this.record.provider).config.apiBaseUrl;\n    let url: URL;\n    try {\n      url = new URL(String(input), base);\n    } catch {\n      throw new OAuthConnectionError(\n        \"forbidden_url\",\n        `connection.fetch was given ${JSON.stringify(String(input))}, which is not a URL.`,\n      );\n    }\n    if (url.origin !== new URL(base).origin) {\n      throw new OAuthConnectionError(\n        \"forbidden_url\",\n        `connection.fetch only sends the ${this.record.provider} token to ${new URL(base).origin} ` +\n          `(apiBaseUrl), not to ${url.origin}.`,\n      );\n    }\n    if (url.protocol !== \"https:\" && !(url.protocol === \"http:\" && isLoopback(url.hostname))) {\n      throw new OAuthConnectionError(\n        \"forbidden_url\",\n        `connection.fetch only sends a token over https, not to ${url.origin}.`,\n      );\n    }\n    return url;\n  }\n\n  private async send(url: URL, init: RequestInit, token: string): Promise<{ response: Response; authorized: boolean }> {\n    let target = url;\n    let method = (init.method ?? \"GET\").toUpperCase();\n    let body = init.body;\n    let authorized = true;\n\n    // Followed by hand (unless the caller asked for \"manual\" or \"error\"), so\n    // the token never follows a redirect to another origin.\n    if (init.redirect === \"manual\" || init.redirect === \"error\") {\n      const response = await this.manager.send(this.record.provider, this.request(target, init, method, body, token));\n      return { response, authorized };\n    }\n\n    for (let hop = 0; ; hop++) {\n      const request = this.request(target, { ...init, redirect: \"manual\" }, method, body, authorized ? token : null);\n      const response = await this.manager.send(this.record.provider, request);\n      const location = response.headers.get(\"location\");\n      if (!REDIRECTS.has(response.status) || location === null || hop >= 5) return { response, authorized };\n\n      await response.body?.cancel().catch(() => {});\n      const next = new URL(location, target);\n      if (next.origin !== target.origin) authorized = false;\n      if (response.status === 303 || ((response.status === 301 || response.status === 302) && method === \"POST\")) {\n        method = \"GET\";\n        body = undefined;\n      }\n      target = next;\n    }\n  }\n\n  private request(url: URL, init: RequestInit, method: string, body: RequestInit[\"body\"], token: string | null): Request {\n    const headers = new Headers(init.headers);\n    if (token === null) headers.delete(\"authorization\");\n    else headers.set(\"Authorization\", `Bearer ${token}`);\n    return new Request(url, { ...init, method, body, headers });\n  }\n}\n\nconst REDIRECTS = new Set([301, 302, 303, 307, 308]);\n\nfunction ownerId(user: ConnectionOwner): string {\n  const id = typeof user === \"object\" && user !== null ? user.id : user;\n  if (id === undefined || id === null || id === \"\") {\n    throw new TypeError(\"An OAuth connection belongs to a user: pass the user (or its id).\");\n  }\n  return String(id);\n}\n"
   ],
-  "mappings": ";sLAwCO,AAAM,LAAiD,LAC3C,KAAO,IAAI,SAEtB,KAAI,CAAC,EAAgB,EAAkB,CAC3C,QAAW,KAAO,KAAK,KAAK,OAAO,EACjC,GAAI,EAAI,SAAW,GAAU,EAAI,WAAa,EAAU,MAAO,IAAK,CAAI,EAE1E,OAAO,UAGH,KAAI,CAAC,EAAgB,CACzB,MAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,IAAQ,EAAI,SAAW,CAAM,EAAE,IAAI,CAAC,KAAS,IAAK,CAAI,EAAE,OAG3F,KAAI,CAAC,EAAgB,EAAkB,EAAuB,CAClE,IAAM,EAAW,MAAM,KAAK,KAAK,EAAQ,CAAQ,EAC3C,EAAM,IAAI,KACV,EAAwB,CAC5B,GAAI,GAAU,IAAM,IAAI,aAAa,EACrC,SACA,cACG,EAAW,CAAM,EACpB,eAAgB,GAChB,UAAW,GAAU,UAAY,GAAK,EACtC,UAAW,GAAU,WAAa,EAClC,UAAW,CACb,EAEA,OADA,KAAK,KAAK,IAAI,EAAI,GAAI,CAAG,EAClB,IAAK,CAAI,OAGZ,aAAY,CAAC,EAAY,EAAkB,EAAuB,CACtE,IAAM,EAAM,KAAK,KAAK,IAAI,CAAE,EAC5B,GAAI,CAAC,GAAO,EAAI,WAAa,EAAU,OAAO,KAC9C,IAAM,EAAO,IAAK,KAAQ,EAAW,CAAM,EAAG,eAAgB,GAAO,SAAU,EAAW,EAAG,UAAW,IAAI,IAAO,EAEnH,OADA,KAAK,KAAK,IAAI,EAAI,CAAI,EACf,IAAK,CAAK,OAGb,mBAAkB,CAAC,EAAY,CACnC,IAAM,EAAM,KAAK,KAAK,IAAI,CAAE,EAC5B,GAAI,EAAK,KAAK,KAAK,IAAI,EAAI,IAAK,EAAK,eAAgB,GAAM,UAAW,IAAI,IAAO,CAAC,OAG9E,OAAM,CAAC,EAAY,CACvB,KAAK,KAAK,OAAO,CAAE,EAEvB,CAaO,MAAM,CAAmD,CAO3C,UANV,MACQ,IACA,QAEjB,WAAW,CACT,EACiB,EACjB,EAA0C,CAAC,EAC3C,CAFiB,iBAGjB,IAAM,EAAQ,EAAQ,OAAS,yBAC/B,GAAI,CAAC,2BAA2B,KAAK,CAAK,EACxC,MAAU,MAAM,+BAA+B,+BAAmC,EAEpF,KAAK,MAAQ,EACb,KAAK,IAAM,EAAW,IACtB,KAAK,QAAU,EAAW,aAItB,YAAW,EAAkB,CACjC,QAAW,KAAa,EAAgC,KAAK,QAAS,KAAK,KAAK,EAC9E,MAAM,KAAK,IAAI,OAAO,CAAS,OAI7B,KAAI,CAAC,EAAgB,EAAkB,CAC3C,IAAM,EAAI,KAAK,IACT,EAAQ,KAAM;AAAA,sBACF,KAAK,KAAK,CAAC,qBAAqB,oBAAyB;AAAA,MAE3E,OAAO,EAAK,GAAK,KAAK,OAAO,EAAK,EAAE,EAAI,UAGpC,KAAI,CAAC,EAAgB,CACzB,IAAM,EAAI,KAAK,IAIf,OAHc,KAAM;AAAA,sBACF,KAAK,KAAK,CAAC,qBAAqB;AAAA,OAEtC,IAAI,CAAC,IAAQ,KAAK,OAAO,CAAG,CAAC,OAGrC,KAAI,CAAC,EAAgB,EAAkB,EAAuB,CAClE,IAAM,EAAI,KAAK,IACT,EAAS,KAAK,OAAO,CAAM,EAC3B,EAAM,KAAK,IAAI,EAEf,EAAS,SACb,EACE,KAAM;AAAA,mBACK,KAAK,KAAK,CAAC;AAAA,sCACQ,EAAO,+BAA+B,EAAO;AAAA,+BACpD,EAAO,gCAAgC,EAAO;AAAA,6BAChD,EAAO,2BAA2B,EAAO;AAAA,2EACK;AAAA,4BAC/C,oBAAyB;AAAA,SAE/C,EAEF,GAAK,MAAM,EAAO,IAAO,EACvB,GAAI,CACF,KAAM;AAAA,wBACU,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA,oBAGf,IAAI,aAAa,MAAM,MAAW,MAAa,EAAO;AAAA,cAC5D,EAAO,WAAW,EAAO,gBAAgB,EAAO,iBAAiB,EAAO;AAAA,cACxE,EAAO,oBAAoB,MAAQ;AAAA,UAEzC,MAAO,EAAO,CAEd,GAAK,MAAM,EAAO,IAAO,EAAG,MAAM,EAItC,IAAM,EAAQ,MAAM,KAAK,KAAK,EAAQ,CAAQ,EAC9C,GAAI,CAAC,EAAO,MAAU,MAAM,yDAAyD,EACrF,OAAO,OAGH,aAAY,CAAC,EAAY,EAAkB,EAAuB,CACtE,IAAM,EAAI,KAAK,IACT,EAAS,KAAK,OAAO,CAAM,EAC3B,EAAS,KAAM;AAAA,eACV,KAAK,KAAK,CAAC;AAAA,2CACiB,EAAO;AAAA,qBAC7B,EAAO,0BAA0B,EAAO;AAAA,4BACjC,EAAO,8BAA8B,EAAO;AAAA,yBAC/C,EAAO;AAAA,yBACP,KAAK,IAAI;AAAA,mBACf,oBAAqB;AAAA,MAEpC,GAAI,EAAS,CAAM,IAAM,EAAG,OAAO,KACnC,IAAM,EAAQ,KAAM,mBAAkB,KAAK,KAAK,CAAC,gBAAgB,IACjE,OAAO,EAAK,GAAK,KAAK,OAAO,EAAK,EAAE,EAAI,UAGpC,mBAAkB,CAAC,EAAY,CACnC,IAAM,EAAI,KAAK,IACf,KAAM,YAAW,KAAK,KAAK,CAAC,2CAA2C,KAAK,IAAI,gBAAgB,SAG5F,OAAM,CAAC,EAAY,CACvB,IAAM,EAAI,KAAK,IACf,KAAM,iBAAgB,KAAK,KAAK,CAAC,gBAAgB,SAQ7C,iBAAgB,CAAC,EAAgC,CAAC,EAAkD,CACxG,IAAM,EAAI,KAAK,IACT,EAAY,KAAK,UAAU,EAC3B,EAAQ,KAAM;AAAA,8DACsC,KAAK,KAAK,CAAC;AAAA,MAEjE,EAAU,EACd,QAAW,KAAO,EAAM,CACtB,IAAM,EAAQ,CAAC,IAAyB,OAAO,IAAU,UAAY,EAAU,kBAAkB,CAAK,EACtG,GAAI,CAAC,EAAM,EAAI,YAAY,GAAK,CAAC,EAAM,EAAI,aAAa,EAAG,SAE3D,GADA,GAAW,EACP,EAAQ,OAAQ,SACpB,IAAM,EAAS,CAAC,IAA0B,IAAU,KAAO,KAAO,EAAU,QAAQ,EAAU,QAAQ,CAAK,CAAC,EAC5G,KAAM;AAAA,iBACK,KAAK,KAAK,CAAC;AAAA,6BACC,EAAO,EAAI,YAAY,sBAAsB,EAAO,EAAI,aAAa;AAAA;AAAA,qBAE7E,EAAI,qBAAqB,OAAO,EAAI,QAAQ;AAAA,QAG7D,MAAO,CAAE,QAAS,EAAK,OAAQ,SAAQ,EAGjC,MAAM,CAAC,EAAuB,CACpC,IAAM,EAAY,KAAK,UAAU,EACjC,MAAO,CACL,kBAAmB,EAAO,kBAC1B,OAAQ,EAAO,OAAO,KAAK,GAAG,EAC9B,YAAa,EAAU,QAAQ,EAAO,WAAW,EACjD,aAAc,EAAO,eAAiB,KAAO,KAAO,EAAU,QAAQ,EAAO,YAAY,EACzF,UAAW,EAAO,UAClB,UAAW,EAAO,YAAc,KAAO,KAAO,EAAO,UAAU,QAAQ,CACzE,EAGM,MAAM,CAAC,EAA+B,CAC5C,IAAM,EAAY,KAAK,UAAU,EACjC,MAAO,CACL,GAAI,OAAO,EAAI,EAAE,EACjB,OAAQ,OAAO,EAAI,OAAO,EAC1B,SAAU,OAAO,EAAI,QAAQ,EAC7B,kBAAmB,EAAI,sBAAwB,KAAO,KAAO,OAAO,EAAI,mBAAmB,EAC3F,OAAQ,OAAO,EAAI,QAAU,EAAE,EAAE,MAAM,GAAG,EAAE,OAAO,OAAO,EAC1D,YAAa,EAAU,QAAQ,OAAO,EAAI,YAAY,CAAC,EACvD,aAAc,EAAI,gBAAkB,KAAO,KAAO,EAAU,QAAQ,OAAO,EAAI,aAAa,CAAC,EAC7F,UAAW,EAAI,aAAe,KAAO,KAAO,OAAO,EAAI,UAAU,EACjE,UAAW,EAAI,aAAe,KAAO,KAAO,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,EAC3E,eAAgB,OAAO,EAAI,eAAe,IAAM,EAChD,SAAU,OAAO,EAAI,QAAQ,EAC7B,UAAW,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,EAC1C,UAAW,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,CAC5C,KAGU,MAAK,EAAG,CAClB,OAAO,KAAK,UAAY,SAAW,KAAK,UAAY,UAG9C,IAAI,CAAC,EAAQ,CACnB,OAAO,EAAE,OAAO,KAAK,MAAQ,KAAK,KAAK,UAAY,IAAI,KAAK,QAAQ,EAExE,CAkBA,SAAS,CAAU,CAAC,EAAuB,CACzC,MAAO,CACL,kBAAmB,EAAO,kBAC1B,OAAQ,CAAC,GAAG,EAAO,MAAM,EACzB,YAAa,EAAO,YACpB,aAAc,EAAO,aACrB,UAAW,EAAO,UAClB,UAAW,EAAO,SACpB,EAGF,SAAS,CAAQ,CAAC,EAAyB,CACzC,IAAM,EAAS,EACf,OAAO,KAAK,IAAI,OAAO,EAAO,OAAS,CAAC,EAAG,OAAO,EAAO,cAAgB,CAAC,CAAC,EAItE,SAAS,CAA+B,CAAC,EAAkB,EAAyB,CACzF,GAAI,IAAY,SAAW,IAAY,UACrC,MAAO,CACL,gCAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAejB;AAAA;AAAA,2DAGjB,EAEF,IAAM,EAAM,IAAY,SAAW,kCAAoC,sBACjE,EACJ,IAAY,SAAW,GAAK;AAAA;AAAA,kBAAwB,6BACtD,MAAO,CACL,+BAA+B;AAAA,MAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kCAY4B;AAAA,GAE9B,sCAAsC,+BAAmC,2BAC3E,ECjVK,MAAM,UAA6B,KAAM,CAKnC,KAJF,OACA,cAET,WAAW,CACA,EACT,EACA,EAAwE,CAAC,EACzE,CACA,MAAM,EAAS,EAAQ,QAAU,OAAY,CAAE,MAAO,EAAQ,KAAM,EAAI,MAAS,EAJxE,YAKT,KAAK,KAAO,uBACZ,KAAK,OAAS,EAAQ,OACtB,KAAK,cAAgB,EAAQ,cAEjC,CASO,MAAM,UAAoC,CAAqB,CAEzD,SADX,WAAW,CACA,EACT,EAAwE,CAAC,EACzE,CACA,MACE,qBACA,OAAO,4FACP,CACF,EAPS,gBAQT,KAAK,KAAO,8BAEhB,CCiCO,MAAM,CAAwB,CAC1B,OAKT,WAAW,CAAC,EAAuC,CACjD,QAAW,IAAO,CAAC,eAAgB,UAAU,EAC3C,EAAc,EAAK,EAAO,EAAI,EAEhC,GAAI,EAAO,YAAc,OAAW,EAAc,YAAa,EAAO,SAAS,EAK/E,GAAI,EAAO,aAAe,QAAa,EAAO,aAAe,MAAQ,EAAO,aAAe,GACzF,MAAU,MACR,+KAEF,EAEF,EAAc,aAAc,EAAO,UAAU,EAC7C,KAAK,OAAS,CACZ,eAAgB,IAChB,WAAY,OACZ,KAAM,GACN,oBAAqB,CAAC,EACtB,qBAAsB,MACnB,CACL,EAIF,gBAAgB,CAAC,EAA6E,CAC5F,IAAM,EAAM,IAAI,IAAI,KAAK,OAAO,YAAY,EACtC,EAAiC,IAClC,KAAK,OAAO,oBACf,cAAe,OACf,UAAW,KAAK,OAAO,SACvB,aAAc,EAAK,YACnB,MAAO,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,cAAc,EACzD,MAAO,EAAK,KACd,EACA,GAAI,KAAK,OAAO,KACd,EAAO,eAAiB,EAAK,cAC7B,EAAO,sBAAwB,OAEjC,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAM,EAAG,EAAI,aAAa,IAAI,EAAK,CAAK,EAClF,OAAO,EAAI,SAAS,EAItB,YAAY,CAAC,EAA2F,CACtG,IAAM,EAAO,IAAI,gBAAgB,CAC/B,WAAY,qBACZ,KAAM,EAAK,KACX,aAAc,EAAK,WACrB,CAAC,EACD,GAAI,KAAK,OAAO,KAAM,EAAK,IAAI,gBAAiB,EAAK,YAAY,EACjE,OAAO,KAAK,aAAa,EAAM,CAAE,OAAQ,KAAK,OAAO,OAAQ,aAAc,KAAM,MAAO,UAAW,CAAC,EAOtG,OAAO,CAAC,EAAsB,EAA0C,CACtE,IAAM,EAAO,IAAI,gBAAgB,CAAE,WAAY,gBAAiB,cAAe,CAAa,CAAC,EAC7F,OAAO,KAAK,aAAa,EAAM,CAAE,SAAQ,eAAc,MAAO,SAAU,CAAC,OAIrE,OAAM,CAAC,EAAe,EAAuD,CACjF,GAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,EACR,qBACA,2FACF,EAEF,IAAM,EAAO,IAAI,gBAAgB,CAAE,QAAO,gBAAiB,CAAK,CAAC,EAC7D,EACJ,GAAI,CACF,EAAW,MAAM,MAAM,KAAK,OAAO,UAAW,KAAK,KAAK,CAAI,CAAC,EAC7D,MAAO,EAAO,CACd,MAAM,IAAI,EAAqB,gBAAiB,iCAAkC,CAAE,OAAM,CAAC,EAG7F,GAAI,CAAC,EAAS,GACZ,MAAM,IAAI,EACR,gBACA,6CAA6C,EAAS,WACtD,CAAE,OAAQ,EAAS,MAAO,CAC5B,EAII,IAAI,CAAC,EAAoC,CAC/C,IAAM,EAAkC,CACtC,eAAgB,oCAEhB,OAAQ,kBACV,EACA,GAAI,KAAK,OAAO,aAAe,QAAS,CACtC,IAAM,EAAc,GAAG,mBAAmB,KAAK,OAAO,QAAQ,KAAK,mBAAmB,KAAK,OAAO,YAAY,IAC9G,EAAQ,cAAgB,SAAS,OAAO,KAAK,CAAW,EAAE,SAAS,QAAQ,IAE3E,OAAK,IAAI,YAAa,KAAK,OAAO,QAAQ,EAC1C,EAAK,IAAI,gBAAiB,KAAK,OAAO,YAAY,EAEpD,MAAO,CAAE,OAAQ,OAAQ,UAAS,KAAM,EAAK,SAAS,EAAG,SAAU,OAAQ,OAG/D,aAAY,CACxB,EACA,EACwB,CACxB,IAAM,EAAU,EAAS,QAAU,WAAa,kBAAoB,iBAChE,EACJ,GAAI,CACF,EAAW,MAAM,MAAM,KAAK,OAAO,SAAU,KAAK,KAAK,CAAI,CAAC,EAC5D,MAAO,EAAO,CACd,MAAM,IAAI,EAAqB,EAAS,4BAA6B,CAAE,OAAM,CAAC,EAGhF,IAAM,EAAW,MAAM,EAAS,KAAK,EAAE,MAAM,KAAO,CAAC,EAAE,EACvD,GAAI,CAAC,EAAS,IAAM,OAAO,EAAQ,eAAiB,UAAY,EAAQ,eAAiB,GAAI,CAE3F,IAAM,EAAO,OAAO,EAAQ,QAAU,UAAY,oBAAoB,KAAK,EAAQ,KAAK,EAAI,EAAQ,MAAQ,OAC5G,MAAM,IAAI,EACR,EACA,kCAAkC,EAAS,QAAU,WAAa,OAAS,yBAChE,EAAS,SAAS,EAAO,KAAK,IAAS,OAClD,CAAE,OAAQ,EAAS,OAAQ,cAAe,CAAK,CACjD,EAGF,IAAM,EAAY,OAAO,EAAQ,UAAU,EACrC,EAAQ,OAAO,EAAQ,QAAU,SAAW,EAAQ,MAAQ,OAC5D,EAAY,EAAQ,SAAW,EAAQ,WAC7C,MAAO,CACL,YAAa,EAAQ,aACrB,aACE,OAAO,EAAQ,gBAAkB,UAAY,EAAQ,gBAAkB,GACnE,EAAQ,cACR,EAAS,aACf,UAAW,OAAO,EAAQ,aAAe,SAAW,EAAQ,WAAa,KACzE,UAAW,OAAO,SAAS,CAAS,GAAK,EAAY,EAAI,IAAI,KAAK,KAAK,IAAI,EAAI,EAAY,IAAI,EAAI,KACnG,OAAQ,IAAU,OAAY,EAAM,MAAM,QAAQ,EAAE,OAAO,OAAO,EAAI,EAAS,OAC/E,kBACE,OAAO,IAAc,UAAY,OAAO,IAAc,SAAW,OAAO,CAAS,EAAI,IACzF,EAEJ,CAEA,SAAS,CAAa,CAAC,EAAa,EAAsB,CACxD,IAAI,EACJ,GAAI,CACF,EAAM,IAAI,IAAI,OAAO,CAAK,CAAC,EAC3B,KAAM,CACN,EAAM,OAER,GAAI,CAAC,GAAQ,EAAI,WAAa,UAAY,EAAE,EAAI,WAAa,SAAW,EAAW,EAAI,QAAQ,GAC7F,MAAU,MACR,4BAA4B,yDAA2D,KAAK,UAAU,CAAK,IAC7G,EAIG,SAAS,CAAU,CAAC,EAA2B,CACpD,OAAO,IAAa,aAAe,IAAa,aAAe,IAAa,SAAW,IAAa,MC9N/F,MAAM,CAAkB,CASA,cARtB,OAAQ,mBAEP,cACS,WAAa,IAAI,IAC1B,MACA,UACC,aAA0B,CAAC,EAEpC,WAAW,CAAkB,EAAmC,CAAnC,kBAEzB,UAAS,EAA4C,CACvD,OAAO,KAAK,QAAQ,aAIlB,MAAK,EAAoB,CAC3B,GAAI,KAAK,UAAW,OAAO,KAAK,UAChC,GAAI,CAAC,KAAK,cAAe,CACvB,IAAM,EAAa,KAAK,QAAQ,MAChC,KAAK,cACH,OAAO,IAAe,WAClB,EAAW,EACV,GACD,IAAI,EAAwB,EAAI,CAAe,EAAE,WAAW,EAAG,IAAM,EAAiB,CAAC,EAE/F,OAAO,KAAK,cAGd,QAAQ,CAAC,EAAuC,CAC9C,IAAM,EAAW,KAAK,QAAQ,UAAU,GACxC,GAAI,CAAC,EAAU,CACb,IAAM,EAAQ,OAAO,KAAK,KAAK,QAAQ,SAAS,EAChD,MAAM,IAAI,EACR,mBACA,iCAAiC,0BAC9B,EAAM,OAAS,EAAI,iBAAiB,EAAM,KAAK,IAAI,MAAQ,0BAChE,EAEF,OAAO,OAIH,IAAG,CAAC,EAAuB,EAAsD,CACrF,KAAK,SAAS,CAAQ,EACtB,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,EAAG,CAAQ,EAC5D,OAAO,EAAS,IAAI,EAAmB,KAAM,CAAM,EAAI,UAInD,KAAI,CAAC,EAAsD,CAE/D,OADgB,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,CAAC,GAEhD,OAAO,CAAC,KAAW,EAAO,YAAY,KAAK,QAAQ,UAAS,EAC5D,IAAI,CAAC,IAAW,IAAI,EAAmB,KAAM,CAAM,CAAC,OAQnD,KAAI,CACR,EACA,EACA,EAC6B,CAC7B,IAAM,EAAS,KAAK,SAAS,CAAQ,EAC/B,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,EAAG,EAAU,CAC5D,aAAc,KACd,UAAW,KACX,UAAW,KACX,kBAAmB,KACnB,OAAQ,EAAO,OAAO,UACnB,CACL,CAAC,EACD,OAAO,IAAI,EAAmB,KAAM,CAAM,EAW5C,IAAI,CAAC,EAAkD,CAAC,EAAS,CAI/D,OAHA,KAAK,MAAQ,IAAI,IAAI,OAAO,QAAQ,CAAQ,CAAC,EAC7C,KAAK,UAAY,IAAI,EACrB,KAAK,aAAa,OAAS,EACpB,KAIT,OAAO,EAAS,CACd,KAAK,MAAQ,OACb,KAAK,UAAY,OACjB,KAAK,aAAa,OAAS,KAGzB,MAAK,EAAY,CACnB,OAAO,KAAK,QAAU,YAMlB,KAAI,CAAC,EAAkB,EAAqC,CAChE,GAAI,CAAC,KAAK,MAAO,OAAO,MAAM,CAAO,EACrC,KAAK,aAAa,KAAK,EAAQ,MAAM,CAAC,EACtC,IAAM,EAAU,KAAK,MAAM,IAAI,CAAQ,EACvC,GAAI,CAAC,EACH,MAAU,MAAM,0CAA0C,oCAA2C,qBAA4B,EAEnI,OAAO,EAAQ,CAAO,EAYxB,OAAO,CAAC,EAAqD,CAC3D,IAAM,EAAW,KAAK,WAAW,IAAI,EAAO,EAAE,EAC9C,GAAI,EAAU,OAAO,EACrB,IAAM,EAAO,KAAK,SAAS,EAAO,GAAI,IAAM,KAAK,YAAY,CAAM,CAAC,EAAE,QAAQ,IAC5E,KAAK,WAAW,OAAO,EAAO,EAAE,CAClC,EAEA,OADA,KAAK,WAAW,IAAI,EAAO,GAAI,CAAI,EAC5B,OAGK,YAAW,CAAC,EAAmD,CAE3E,IAAM,EAAU,MAAM,KAAK,MAAM,KAAK,EAAK,OAAQ,EAAK,QAAQ,EAChE,GAAI,CAAC,GAAW,EAAQ,KAAO,EAAK,GAClC,MAAM,IAAI,EAA4B,EAAK,QAAQ,EAErD,GAAI,EAAQ,WAAa,EAAK,UAAY,CAAC,EAAQ,eAAgB,OAAO,EAC1E,GAAI,EAAQ,eAAgB,MAAM,IAAI,EAA4B,EAAK,QAAQ,EAE/E,IAAM,EAAW,KAAK,SAAS,EAAQ,QAAQ,EAC/C,GAAI,KAAK,OAAS,EAAQ,eAAiB,KAAM,CAC/C,GAAI,KAAK,MAAO,OAAO,EAEvB,MADA,MAAM,KAAK,MAAM,mBAAmB,EAAQ,EAAE,EACxC,IAAI,EAA4B,EAAQ,QAAQ,EAGxD,IAAI,EACJ,GAAI,CACF,EAAS,MAAM,EAAS,QAAQ,EAAQ,aAAc,EAAQ,MAAM,EACpE,MAAO,EAAO,CAGd,GAAI,aAAiB,GAAwB,EAAM,SAAW,QAAa,EAAM,QAAU,KAAO,EAAM,OAAS,IAE/G,MADA,MAAM,KAAK,MAAM,mBAAmB,EAAQ,EAAE,EACxC,IAAI,EAA4B,EAAQ,SAAU,CACtD,MAAO,EACP,OAAQ,EAAM,OACd,cAAe,EAAM,aACvB,CAAC,EAEH,MAAM,EAGR,IAAM,EAAU,MAAM,KAAK,MAAM,aAAa,EAAQ,GAAI,EAAQ,SAAU,CAAM,EAClF,GAAI,EAAS,OAAO,EAEpB,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,OAAQ,EAAQ,QAAQ,EACrE,GAAI,CAAC,EAAQ,MAAM,IAAI,EAA4B,EAAQ,QAAQ,EACnE,OAAO,OAGK,SAAW,CAAC,EAAY,EAAkC,CACtE,IAAM,EAAc,EAAI,EACxB,GAAI,KAAK,OAAS,CAAC,EAAY,MAAM,CAAW,EAAG,OAAO,EAAG,EAC7D,IAAM,EAAS,MAAM,EAClB,KAAK,CAAW,EAChB,IAAI,yBAAyB,IAAM,CAAE,IAAK,MAAQ,KAAM,KAAO,EAAG,IAAM,EAAG,CAAC,EAC/E,GAAI,CAAC,EAAO,SACV,MAAM,IAAI,EACR,iBACA,qEACF,EAEF,OAAO,EAAO,MAElB,CAMO,MAAM,CAAmB,CAEX,QACT,OAFV,WAAW,CACQ,EACT,EACR,CAFiB,eACT,iBAGN,SAAQ,EAAW,CACrB,OAAO,KAAK,OAAO,YAEjB,OAAM,EAAW,CACnB,OAAO,KAAK,OAAO,UAEjB,kBAAiB,EAAkB,CACrC,OAAO,KAAK,OAAO,qBAGjB,OAAM,EAAsB,CAC9B,OAAO,KAAK,OAAO,UAEjB,UAAS,EAAgB,CAC3B,OAAO,KAAK,OAAO,aAGjB,eAAc,EAAY,CAC5B,OAAO,KAAK,OAAO,kBAEjB,YAAW,EAAS,CACtB,OAAO,KAAK,OAAO,UAIrB,SAAS,IAAI,EAA2B,CACtC,OAAO,EAAO,MAAM,CAAC,IAAU,KAAK,OAAO,OAAO,SAAS,CAAK,CAAC,OAgB7D,MAAK,CAAC,EAAqB,EAAoB,CAAC,EAAsB,CAC1E,IAAM,EAAM,KAAK,WAAW,CAAK,EAC3B,EAAS,MAAM,KAAK,QAAQ,EAC5B,EAAQ,MAAM,KAAK,KAAK,EAAK,EAAM,EAAO,WAAW,EAG3D,GAAI,EAAM,SAAS,SAAW,KAAO,CAAC,EAAM,YAAc,EAAK,gBAAgB,eAC7E,OAAO,EAAM,SAGf,MAAM,EAAM,SAAS,MAAM,OAAO,EAAE,MAAM,IAAM,EAAE,EAClD,IAAM,EAAY,MAAM,KAAK,YAAY,CAAM,EAC/C,OAAQ,MAAM,KAAK,KAAK,EAAK,EAAM,EAAU,WAAW,GAAG,cAOvD,YAAW,EAAoB,CACnC,OAAQ,MAAM,KAAK,QAAQ,GAAG,iBAI1B,QAAO,EAAkB,CAC7B,MAAM,KAAK,YAAY,KAAK,MAAM,OAW9B,OAAM,EAAkB,CAC5B,GAAI,CAAC,KAAK,QAAQ,MAAO,CACvB,IAAM,EAAW,KAAK,QAAQ,SAAS,KAAK,OAAO,QAAQ,EAC3D,GAAI,KAAK,OAAO,eAAiB,KAC/B,MAAM,EAAS,OAAO,KAAK,OAAO,aAAc,eAAe,EAE/D,WAAM,EAAS,OAAO,KAAK,OAAO,YAAa,cAAc,EAGjE,MAAM,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,EAAE,OAI1C,WAAU,EAAkB,CAChC,MAAM,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,EAAE,EAGhD,MAAM,EAAG,CACP,MAAO,CACL,SAAU,KAAK,SACf,kBAAmB,KAAK,kBACxB,OAAQ,CAAC,GAAG,KAAK,MAAM,EACvB,UAAW,KAAK,UAChB,eAAgB,KAAK,eACrB,YAAa,KAAK,WACpB,GAGD,OAAO,IAAI,4BAA4B,EAAE,EAAG,CAC3C,MAAO,CAAE,mBAAoB,KAAK,OAAO,CAAE,OAG/B,QAAO,EAA8B,CACjD,GAAI,KAAK,OAAO,eAAgB,MAAM,IAAI,EAA4B,KAAK,OAAO,QAAQ,EAC1F,IAAM,EAAS,KAAK,QAAQ,SAAS,KAAK,OAAO,QAAQ,EAAE,OAAO,qBAAuB,KACnF,EAAY,KAAK,OAAO,WAAW,QAAQ,EACjD,GAAI,IAAc,QAAa,EAAY,KAAK,IAAI,GAAK,EACvD,OAAO,KAAK,YAAY,KAAK,MAAM,EAErC,OAAO,KAAK,YAGA,YAAW,CAAC,EAAqD,CAC7E,GAAI,CACF,KAAK,OAAS,MAAM,KAAK,QAAQ,QAAQ,CAAM,EAC/C,MAAO,EAAO,CACd,GAAI,aAAiB,EACnB,KAAK,OAAS,IAAK,KAAK,OAAQ,eAAgB,EAAK,EAEvD,MAAM,EAER,OAAO,KAAK,OAGN,UAAU,CAAC,EAA0B,CAC3C,IAAM,EAAO,KAAK,QAAQ,SAAS,KAAK,OAAO,QAAQ,EAAE,OAAO,WAC5D,EACJ,GAAI,CACF,EAAM,IAAI,IAAI,OAAO,CAAK,EAAG,CAAI,EACjC,KAAM,CACN,MAAM,IAAI,EACR,gBACA,8BAA8B,KAAK,UAAU,OAAO,CAAK,CAAC,wBAC5D,EAEF,GAAI,EAAI,SAAW,IAAI,IAAI,CAAI,EAAE,OAC/B,MAAM,IAAI,EACR,gBACA,mCAAmC,KAAK,OAAO,qBAAqB,IAAI,IAAI,CAAI,EAAE,+BACxD,EAAI,SAChC,EAEF,GAAI,EAAI,WAAa,UAAY,EAAE,EAAI,WAAa,SAAW,EAAW,EAAI,QAAQ,GACpF,MAAM,IAAI,EACR,gBACA,0DAA0D,EAAI,SAChE,EAEF,OAAO,OAGK,KAAI,CAAC,EAAU,EAAmB,EAAqE,CACnH,IAAI,EAAS,EACT,GAAU,EAAK,QAAU,OAAO,YAAY,EAC5C,EAAO,EAAK,KACZ,EAAa,GAIjB,GAAI,EAAK,WAAa,UAAY,EAAK,WAAa,QAElD,MAAO,CAAE,SADQ,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,SAAU,KAAK,QAAQ,EAAQ,EAAM,EAAQ,EAAM,CAAK,CAAC,EAC3F,YAAW,EAGhC,QAAS,EAAM,GAAK,IAAO,CACzB,IAAM,EAAU,KAAK,QAAQ,EAAQ,IAAK,EAAM,SAAU,QAAS,EAAG,EAAQ,EAAM,EAAa,EAAQ,IAAI,EACvG,EAAW,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,SAAU,CAAO,EAChE,EAAW,EAAS,QAAQ,IAAI,UAAU,EAChD,GAAI,CAAC,EAAU,IAAI,EAAS,MAAM,GAAK,IAAa,MAAQ,GAAO,EAAG,MAAO,CAAE,WAAU,YAAW,EAEpG,MAAM,EAAS,MAAM,OAAO,EAAE,MAAM,IAAM,EAAE,EAC5C,IAAM,EAAO,IAAI,IAAI,EAAU,CAAM,EACrC,GAAI,EAAK,SAAW,EAAO,OAAQ,EAAa,GAChD,GAAI,EAAS,SAAW,MAAS,EAAS,SAAW,KAAO,EAAS,SAAW,MAAQ,IAAW,OACjG,EAAS,MACT,EAAO,OAET,EAAS,GAIL,OAAO,CAAC,EAAU,EAAmB,EAAgB,EAA2B,EAA+B,CACrH,IAAM,EAAU,IAAI,QAAQ,EAAK,OAAO,EACxC,GAAI,IAAU,KAAM,EAAQ,OAAO,eAAe,EAC7C,OAAQ,IAAI,gBAAiB,UAAU,GAAO,EACnD,OAAO,IAAI,QAAQ,EAAK,IAAK,EAAM,SAAQ,OAAM,SAAQ,CAAC,EAE9D,CAEA,IAAM,EAAY,IAAI,IAAI,CAAC,IAAK,IAAK,IAAK,IAAK,GAAG,CAAC,EAEnD,SAAS,CAAO,CAAC,EAA+B,CAC9C,IAAM,EAAK,OAAO,IAAS,UAAY,IAAS,KAAO,EAAK,GAAK,EACjE,GAAI,IAAO,QAAa,IAAO,MAAQ,IAAO,GAC5C,MAAU,UAAU,mEAAmE,EAEzF,OAAO,OAAO,CAAE",
-  "debugId": "7D5DD820045F8F3E64756E2164756E21",
+  "mappings": ";sLAwCO,AAAM,LAAiD,LAC3C,KAAO,IAAI,SAEtB,KAAI,CAAC,EAAgB,EAAkB,CAC3C,QAAW,KAAO,KAAK,KAAK,OAAO,EACjC,GAAI,EAAI,SAAW,GAAU,EAAI,WAAa,EAAU,MAAO,IAAK,CAAI,EAE1E,OAAO,UAGH,KAAI,CAAC,EAAgB,CACzB,MAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,IAAQ,EAAI,SAAW,CAAM,EAAE,IAAI,CAAC,KAAS,IAAK,CAAI,EAAE,OAG3F,KAAI,CAAC,EAAgB,EAAkB,EAAuB,CAClE,IAAM,EAAW,MAAM,KAAK,KAAK,EAAQ,CAAQ,EAC3C,EAAM,IAAI,KACV,EAAwB,CAC5B,GAAI,GAAU,IAAM,IAAI,aAAa,EACrC,SACA,cACG,EAAW,CAAM,EACpB,eAAgB,GAChB,UAAW,GAAU,UAAY,GAAK,EACtC,UAAW,GAAU,WAAa,EAClC,UAAW,CACb,EAEA,OADA,KAAK,KAAK,IAAI,EAAI,GAAI,CAAG,EAClB,IAAK,CAAI,OAGZ,aAAY,CAAC,EAAY,EAAkB,EAAuB,CACtE,IAAM,EAAM,KAAK,KAAK,IAAI,CAAE,EAC5B,GAAI,CAAC,GAAO,EAAI,WAAa,EAAU,OAAO,KAC9C,IAAM,EAAO,IAAK,KAAQ,EAAW,CAAM,EAAG,eAAgB,GAAO,SAAU,EAAW,EAAG,UAAW,IAAI,IAAO,EAEnH,OADA,KAAK,KAAK,IAAI,EAAI,CAAI,EACf,IAAK,CAAK,OAGb,mBAAkB,CAAC,EAAY,CACnC,IAAM,EAAM,KAAK,KAAK,IAAI,CAAE,EAC5B,GAAI,EAAK,KAAK,KAAK,IAAI,EAAI,IAAK,EAAK,eAAgB,GAAM,UAAW,IAAI,IAAO,CAAC,OAG9E,OAAM,CAAC,EAAY,CACvB,KAAK,KAAK,OAAO,CAAE,EAEvB,CAaO,MAAM,CAAmD,CAO3C,UANV,MACQ,IACA,QAEjB,WAAW,CACT,EACiB,EACjB,EAA0C,CAAC,EAC3C,CAFiB,iBAGjB,IAAM,EAAQ,EAAQ,OAAS,yBAC/B,GAAI,CAAC,2BAA2B,KAAK,CAAK,EACxC,MAAU,MAAM,+BAA+B,+BAAmC,EAEpF,KAAK,MAAQ,EACb,KAAK,IAAM,EAAW,IACtB,KAAK,QAAU,EAAW,aAItB,YAAW,EAAkB,CACjC,QAAW,KAAa,EAAgC,KAAK,QAAS,KAAK,KAAK,EAC9E,MAAM,KAAK,IAAI,OAAO,CAAS,OAI7B,KAAI,CAAC,EAAgB,EAAkB,CAC3C,IAAM,EAAI,KAAK,IACT,EAAQ,KAAM;AAAA,sBACF,KAAK,KAAK,CAAC,qBAAqB,oBAAyB;AAAA,MAE3E,OAAO,EAAK,GAAK,KAAK,OAAO,EAAK,EAAE,EAAI,UAGpC,KAAI,CAAC,EAAgB,CACzB,IAAM,EAAI,KAAK,IAIf,OAHc,KAAM;AAAA,sBACF,KAAK,KAAK,CAAC,qBAAqB;AAAA,OAEtC,IAAI,CAAC,IAAQ,KAAK,OAAO,CAAG,CAAC,OAGrC,KAAI,CAAC,EAAgB,EAAkB,EAAuB,CAClE,IAAM,EAAI,KAAK,IACT,EAAS,KAAK,OAAO,CAAM,EAC3B,EAAM,KAAK,IAAI,EAEf,EAAS,SACb,EACE,KAAM;AAAA,mBACK,KAAK,KAAK,CAAC;AAAA,sCACQ,EAAO,+BAA+B,EAAO;AAAA,+BACpD,EAAO,gCAAgC,EAAO;AAAA,6BAChD,EAAO,2BAA2B,EAAO;AAAA,2EACK;AAAA,4BAC/C,oBAAyB;AAAA,SAE/C,EAEF,GAAK,MAAM,EAAO,IAAO,EACvB,GAAI,CACF,KAAM;AAAA,wBACU,KAAK,KAAK,CAAC;AAAA;AAAA;AAAA,oBAGf,IAAI,aAAa,MAAM,MAAW,MAAa,EAAO;AAAA,cAC5D,EAAO,WAAW,EAAO,gBAAgB,EAAO,iBAAiB,EAAO;AAAA,cACxE,EAAO,oBAAoB,MAAQ;AAAA,UAEzC,MAAO,EAAO,CAEd,GAAK,MAAM,EAAO,IAAO,EAAG,MAAM,EAItC,IAAM,EAAQ,MAAM,KAAK,KAAK,EAAQ,CAAQ,EAC9C,GAAI,CAAC,EAAO,MAAU,MAAM,yDAAyD,EACrF,OAAO,OAGH,aAAY,CAAC,EAAY,EAAkB,EAAuB,CACtE,IAAM,EAAI,KAAK,IACT,EAAS,KAAK,OAAO,CAAM,EAC3B,EAAS,KAAM;AAAA,eACV,KAAK,KAAK,CAAC;AAAA,2CACiB,EAAO;AAAA,qBAC7B,EAAO,0BAA0B,EAAO;AAAA,4BACjC,EAAO,8BAA8B,EAAO;AAAA,yBAC/C,EAAO;AAAA,yBACP,KAAK,IAAI;AAAA,mBACf,oBAAqB;AAAA,MAEpC,GAAI,EAAS,CAAM,IAAM,EAAG,OAAO,KACnC,IAAM,EAAQ,KAAM,mBAAkB,KAAK,KAAK,CAAC,gBAAgB,IACjE,OAAO,EAAK,GAAK,KAAK,OAAO,EAAK,EAAE,EAAI,UAGpC,mBAAkB,CAAC,EAAY,CACnC,IAAM,EAAI,KAAK,IACf,KAAM,YAAW,KAAK,KAAK,CAAC,2CAA2C,KAAK,IAAI,gBAAgB,SAG5F,OAAM,CAAC,EAAY,CACvB,IAAM,EAAI,KAAK,IACf,KAAM,iBAAgB,KAAK,KAAK,CAAC,gBAAgB,SAQ7C,iBAAgB,CAAC,EAAgC,CAAC,EAAkD,CACxG,IAAM,EAAI,KAAK,IACT,EAAY,KAAK,UAAU,EAC3B,EAAQ,KAAM;AAAA,8DACsC,KAAK,KAAK,CAAC;AAAA,MAEjE,EAAU,EACd,QAAW,KAAO,EAAM,CACtB,IAAM,EAAQ,CAAC,IAAyB,OAAO,IAAU,UAAY,EAAU,kBAAkB,CAAK,EACtG,GAAI,CAAC,EAAM,EAAI,YAAY,GAAK,CAAC,EAAM,EAAI,aAAa,EAAG,SAE3D,GADA,GAAW,EACP,EAAQ,OAAQ,SACpB,IAAM,EAAS,CAAC,IAA0B,IAAU,KAAO,KAAO,EAAU,QAAQ,EAAU,QAAQ,CAAK,CAAC,EAC5G,KAAM;AAAA,iBACK,KAAK,KAAK,CAAC;AAAA,6BACC,EAAO,EAAI,YAAY,sBAAsB,EAAO,EAAI,aAAa;AAAA;AAAA,qBAE7E,EAAI,qBAAqB,OAAO,EAAI,QAAQ;AAAA,QAG7D,MAAO,CAAE,QAAS,EAAK,OAAQ,SAAQ,EAGjC,MAAM,CAAC,EAAuB,CACpC,IAAM,EAAY,KAAK,UAAU,EACjC,MAAO,CACL,kBAAmB,EAAO,kBAC1B,OAAQ,EAAO,OAAO,KAAK,GAAG,EAC9B,YAAa,EAAU,QAAQ,EAAO,WAAW,EACjD,aAAc,EAAO,eAAiB,KAAO,KAAO,EAAU,QAAQ,EAAO,YAAY,EACzF,UAAW,EAAO,UAClB,UAAW,EAAO,YAAc,KAAO,KAAO,EAAO,UAAU,QAAQ,CACzE,EAGM,MAAM,CAAC,EAA+B,CAC5C,IAAM,EAAY,KAAK,UAAU,EACjC,MAAO,CACL,GAAI,OAAO,EAAI,EAAE,EACjB,OAAQ,OAAO,EAAI,OAAO,EAC1B,SAAU,OAAO,EAAI,QAAQ,EAC7B,kBAAmB,EAAI,sBAAwB,KAAO,KAAO,OAAO,EAAI,mBAAmB,EAC3F,OAAQ,OAAO,EAAI,QAAU,EAAE,EAAE,MAAM,GAAG,EAAE,OAAO,OAAO,EAC1D,YAAa,EAAU,QAAQ,OAAO,EAAI,YAAY,CAAC,EACvD,aAAc,EAAI,gBAAkB,KAAO,KAAO,EAAU,QAAQ,OAAO,EAAI,aAAa,CAAC,EAC7F,UAAW,EAAI,aAAe,KAAO,KAAO,OAAO,EAAI,UAAU,EACjE,UAAW,EAAI,aAAe,KAAO,KAAO,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,EAC3E,eAAgB,OAAO,EAAI,eAAe,IAAM,EAChD,SAAU,OAAO,EAAI,QAAQ,EAC7B,UAAW,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,EAC1C,UAAW,IAAI,KAAK,OAAO,EAAI,UAAU,CAAC,CAC5C,KAGU,MAAK,EAAG,CAClB,OAAO,KAAK,UAAY,SAAW,KAAK,UAAY,UAG9C,IAAI,CAAC,EAAQ,CACnB,OAAO,EAAE,OAAO,KAAK,MAAQ,KAAK,KAAK,UAAY,IAAI,KAAK,QAAQ,EAExE,CAkBA,SAAS,CAAU,CAAC,EAAuB,CACzC,MAAO,CACL,kBAAmB,EAAO,kBAC1B,OAAQ,CAAC,GAAG,EAAO,MAAM,EACzB,YAAa,EAAO,YACpB,aAAc,EAAO,aACrB,UAAW,EAAO,UAClB,UAAW,EAAO,SACpB,EAGF,SAAS,CAAQ,CAAC,EAAyB,CACzC,IAAM,EAAS,EACf,OAAO,KAAK,IAAI,OAAO,EAAO,OAAS,CAAC,EAAG,OAAO,EAAO,cAAgB,CAAC,CAAC,EAItE,SAAS,CAA+B,CAAC,EAAkB,EAAyB,CACzF,GAAI,IAAY,SAAW,IAAY,UACrC,MAAO,CACL,gCAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAejB;AAAA;AAAA,2DAGjB,EAEF,IAAM,EAAM,IAAY,SAAW,kCAAoC,sBACjE,EACJ,IAAY,SAAW,GAAK;AAAA;AAAA,kBAAwB,6BACtD,MAAO,CACL,+BAA+B;AAAA,MAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kCAY4B;AAAA,GAE9B,sCAAsC,+BAAmC,2BAC3E,ECjVK,MAAM,UAA6B,KAAM,CAKnC,KAJF,OACA,cAET,WAAW,CACA,EACT,EACA,EAAwE,CAAC,EACzE,CACA,MAAM,EAAS,EAAQ,QAAU,OAAY,CAAE,MAAO,EAAQ,KAAM,EAAI,MAAS,EAJxE,YAKT,KAAK,KAAO,uBACZ,KAAK,OAAS,EAAQ,OACtB,KAAK,cAAgB,EAAQ,cAEjC,CASO,MAAM,UAAoC,CAAqB,CAEzD,SADX,WAAW,CACA,EACT,EAAwE,CAAC,EACzE,CACA,MACE,qBACA,OAAO,4FACP,CACF,EAPS,gBAQT,KAAK,KAAO,8BAEhB,CCoCO,MAAM,CAAwB,CAC1B,OAKT,WAAW,CAAC,EAAuC,CACjD,QAAW,IAAO,CAAC,eAAgB,UAAU,EAC3C,EAAc,EAAK,EAAO,EAAI,EAEhC,GAAI,EAAO,YAAc,OAAW,EAAc,YAAa,EAAO,SAAS,EAK/E,GAAI,EAAO,aAAe,QAAa,EAAO,aAAe,MAAQ,EAAO,aAAe,GACzF,MAAU,MACR,+KAEF,EAEF,EAAc,aAAc,EAAO,UAAU,EAC7C,KAAK,OAAS,CACZ,eAAgB,IAChB,WAAY,OACZ,KAAM,GACN,oBAAqB,CAAC,EACtB,qBAAsB,MACnB,CACL,EAIF,gBAAgB,CAAC,EAA6E,CAC5F,IAAM,EAAM,IAAI,IAAI,KAAK,OAAO,YAAY,EACtC,EAAiC,IAClC,KAAK,OAAO,oBACf,cAAe,OACf,UAAW,KAAK,OAAO,SACvB,aAAc,EAAK,YACnB,MAAO,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,cAAc,EACzD,MAAO,EAAK,KACd,EACA,GAAI,KAAK,OAAO,KACd,EAAO,eAAiB,EAAK,cAC7B,EAAO,sBAAwB,OAEjC,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAM,EAAG,EAAI,aAAa,IAAI,EAAK,CAAK,EAClF,OAAO,EAAI,SAAS,EAItB,YAAY,CAAC,EAA2F,CACtG,IAAM,EAAO,IAAI,gBAAgB,CAC/B,WAAY,qBACZ,KAAM,EAAK,KACX,aAAc,EAAK,WACrB,CAAC,EACD,GAAI,KAAK,OAAO,KAAM,EAAK,IAAI,gBAAiB,EAAK,YAAY,EACjE,OAAO,KAAK,aAAa,EAAM,CAAE,OAAQ,KAAK,OAAO,OAAQ,aAAc,KAAM,MAAO,UAAW,CAAC,EAOtG,OAAO,CAAC,EAAsB,EAA0C,CACtE,IAAM,EAAO,IAAI,gBAAgB,CAAE,WAAY,gBAAiB,cAAe,CAAa,CAAC,EAC7F,OAAO,KAAK,aAAa,EAAM,CAAE,SAAQ,eAAc,MAAO,SAAU,CAAC,OAIrE,OAAM,CAAC,EAAe,EAAuD,CACjF,GAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,EACR,qBACA,2FACF,EAEF,IAAM,EAAO,IAAI,gBAAgB,CAAE,QAAO,gBAAiB,CAAK,CAAC,EAC7D,EACJ,GAAI,CACF,EAAW,MAAM,MAAM,KAAK,OAAO,UAAW,KAAK,KAAK,CAAI,CAAC,EAC7D,MAAO,EAAO,CACd,MAAM,IAAI,EAAqB,gBAAiB,iCAAkC,CAAE,OAAM,CAAC,EAG7F,GAAI,CAAC,EAAS,GACZ,MAAM,IAAI,EACR,gBACA,6CAA6C,EAAS,WACtD,CAAE,OAAQ,EAAS,MAAO,CAC5B,EAII,IAAI,CAAC,EAAoC,CAC/C,IAAM,EAAkC,CACtC,eAAgB,oCAEhB,OAAQ,kBACV,EACA,GAAI,KAAK,OAAO,aAAe,QAAS,CACtC,IAAM,EAAc,GAAG,mBAAmB,KAAK,OAAO,QAAQ,KAAK,mBAAmB,KAAK,OAAO,YAAY,IAC9G,EAAQ,cAAgB,SAAS,OAAO,KAAK,CAAW,EAAE,SAAS,QAAQ,IAE3E,OAAK,IAAI,YAAa,KAAK,OAAO,QAAQ,EAC1C,EAAK,IAAI,gBAAiB,KAAK,OAAO,YAAY,EAEpD,MAAO,CAAE,OAAQ,OAAQ,UAAS,KAAM,EAAK,SAAS,EAAG,SAAU,OAAQ,OAG/D,aAAY,CACxB,EACA,EACwB,CACxB,IAAM,EAAU,EAAS,QAAU,WAAa,kBAAoB,iBAChE,EACJ,GAAI,CACF,EAAW,MAAM,MAAM,KAAK,OAAO,SAAU,KAAK,KAAK,CAAI,CAAC,EAC5D,MAAO,EAAO,CACd,MAAM,IAAI,EAAqB,EAAS,4BAA6B,CAAE,OAAM,CAAC,EAGhF,IAAM,EAAW,MAAM,EAAS,KAAK,EAAE,MAAM,KAAO,CAAC,EAAE,EACvD,GAAI,CAAC,EAAS,IAAM,OAAO,EAAQ,eAAiB,UAAY,EAAQ,eAAiB,GAAI,CAE3F,IAAM,EAAO,OAAO,EAAQ,QAAU,UAAY,oBAAoB,KAAK,EAAQ,KAAK,EAAI,EAAQ,MAAQ,OAC5G,MAAM,IAAI,EACR,EACA,kCAAkC,EAAS,QAAU,WAAa,OAAS,yBAChE,EAAS,SAAS,EAAO,KAAK,IAAS,OAClD,CAAE,OAAQ,EAAS,OAAQ,cAAe,CAAK,CACjD,EAGF,IAAM,EAAY,OAAO,EAAQ,UAAU,EACrC,EAAQ,OAAO,EAAQ,QAAU,SAAW,EAAQ,MAAQ,OAG5D,EAAY,EAAQ,gBAAkB,EAAQ,SAAW,EAAQ,WACvE,MAAO,CACL,YAAa,EAAQ,aACrB,aACE,OAAO,EAAQ,gBAAkB,UAAY,EAAQ,gBAAkB,GACnE,EAAQ,cACR,EAAS,aACf,UAAW,OAAO,EAAQ,aAAe,SAAW,EAAQ,WAAa,KACzE,UAAW,OAAO,SAAS,CAAS,GAAK,EAAY,EAAI,IAAI,KAAK,KAAK,IAAI,EAAI,EAAY,IAAI,EAAI,KACnG,OAAQ,IAAU,OAAY,EAAM,MAAM,QAAQ,EAAE,OAAO,OAAO,EAAI,EAAS,OAC/E,kBACE,OAAO,IAAc,UAAY,OAAO,IAAc,SAAW,OAAO,CAAS,EAAI,IACzF,EAEJ,CAEA,SAAS,CAAa,CAAC,EAAa,EAAsB,CACxD,IAAI,EACJ,GAAI,CACF,EAAM,IAAI,IAAI,OAAO,CAAK,CAAC,EAC3B,KAAM,CACN,EAAM,OAER,GAAI,CAAC,GAAQ,EAAI,WAAa,UAAY,EAAE,EAAI,WAAa,SAAW,EAAW,EAAI,QAAQ,GAC7F,MAAU,MACR,4BAA4B,yDAA2D,KAAK,UAAU,CAAK,IAC7G,EAIG,SAAS,CAAU,CAAC,EAA2B,CACpD,OAAO,IAAa,aAAe,IAAa,aAAe,IAAa,SAAW,IAAa,MCnO/F,MAAM,CAAkB,CASA,cARtB,OAAQ,mBAEP,cACS,WAAa,IAAI,IAC1B,MACA,UACC,aAA0B,CAAC,EAEpC,WAAW,CAAkB,EAAmC,CAAnC,kBAEzB,UAAS,EAA4C,CACvD,OAAO,KAAK,QAAQ,aAIlB,MAAK,EAAoB,CAC3B,GAAI,KAAK,UAAW,OAAO,KAAK,UAChC,GAAI,CAAC,KAAK,cAAe,CACvB,IAAM,EAAa,KAAK,QAAQ,MAChC,KAAK,cACH,OAAO,IAAe,WAClB,EAAW,EACV,GACD,IAAI,EAAwB,EAAI,CAAe,EAAE,WAAW,EAAG,IAAM,EAAiB,CAAC,EAE/F,OAAO,KAAK,cAGd,QAAQ,CAAC,EAAuC,CAC9C,IAAM,EAAW,KAAK,QAAQ,UAAU,GACxC,GAAI,CAAC,EAAU,CACb,IAAM,EAAQ,OAAO,KAAK,KAAK,QAAQ,SAAS,EAChD,MAAM,IAAI,EACR,mBACA,iCAAiC,0BAC9B,EAAM,OAAS,EAAI,iBAAiB,EAAM,KAAK,IAAI,MAAQ,0BAChE,EAEF,OAAO,OAIH,IAAG,CAAC,EAAuB,EAAsD,CACrF,KAAK,SAAS,CAAQ,EACtB,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,EAAG,CAAQ,EAC5D,OAAO,EAAS,IAAI,EAAmB,KAAM,CAAM,EAAI,UAInD,KAAI,CAAC,EAAsD,CAE/D,OADgB,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,CAAC,GAEhD,OAAO,CAAC,KAAW,EAAO,YAAY,KAAK,QAAQ,UAAS,EAC5D,IAAI,CAAC,IAAW,IAAI,EAAmB,KAAM,CAAM,CAAC,OAQnD,KAAI,CACR,EACA,EACA,EAC6B,CAC7B,IAAM,EAAS,KAAK,SAAS,CAAQ,EAC/B,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,CAAI,EAAG,EAAU,CAC5D,aAAc,KACd,UAAW,KACX,UAAW,KACX,kBAAmB,KACnB,OAAQ,EAAO,OAAO,UACnB,CACL,CAAC,EACD,OAAO,IAAI,EAAmB,KAAM,CAAM,EAW5C,IAAI,CAAC,EAAkD,CAAC,EAAS,CAI/D,OAHA,KAAK,MAAQ,IAAI,IAAI,OAAO,QAAQ,CAAQ,CAAC,EAC7C,KAAK,UAAY,IAAI,EACrB,KAAK,aAAa,OAAS,EACpB,KAIT,OAAO,EAAS,CACd,KAAK,MAAQ,OACb,KAAK,UAAY,OACjB,KAAK,aAAa,OAAS,KAGzB,MAAK,EAAY,CACnB,OAAO,KAAK,QAAU,YAMlB,KAAI,CAAC,EAAkB,EAAqC,CAChE,GAAI,CAAC,KAAK,MAAO,OAAO,MAAM,CAAO,EACrC,KAAK,aAAa,KAAK,EAAQ,MAAM,CAAC,EACtC,IAAM,EAAU,KAAK,MAAM,IAAI,CAAQ,EACvC,GAAI,CAAC,EACH,MAAU,MAAM,0CAA0C,oCAA2C,qBAA4B,EAEnI,OAAO,EAAQ,CAAO,EAYxB,OAAO,CAAC,EAAqD,CAC3D,IAAM,EAAW,KAAK,WAAW,IAAI,EAAO,EAAE,EAC9C,GAAI,EAAU,OAAO,EACrB,IAAM,EAAO,KAAK,SAAS,EAAO,GAAI,IAAM,KAAK,YAAY,CAAM,CAAC,EAAE,QAAQ,IAC5E,KAAK,WAAW,OAAO,EAAO,EAAE,CAClC,EAEA,OADA,KAAK,WAAW,IAAI,EAAO,GAAI,CAAI,EAC5B,OAGK,YAAW,CAAC,EAAmD,CAE3E,IAAM,EAAU,MAAM,KAAK,MAAM,KAAK,EAAK,OAAQ,EAAK,QAAQ,EAChE,GAAI,CAAC,GAAW,EAAQ,KAAO,EAAK,GAClC,MAAM,IAAI,EAA4B,EAAK,QAAQ,EAErD,GAAI,EAAQ,WAAa,EAAK,UAAY,CAAC,EAAQ,eAAgB,OAAO,EAC1E,GAAI,EAAQ,eAAgB,MAAM,IAAI,EAA4B,EAAK,QAAQ,EAE/E,IAAM,EAAW,KAAK,SAAS,EAAQ,QAAQ,EAC/C,GAAI,KAAK,OAAS,EAAQ,eAAiB,KAAM,CAC/C,GAAI,KAAK,MAAO,OAAO,EAEvB,MADA,MAAM,KAAK,MAAM,mBAAmB,EAAQ,EAAE,EACxC,IAAI,EAA4B,EAAQ,QAAQ,EAGxD,IAAI,EACJ,GAAI,CACF,EAAS,MAAM,EAAS,QAAQ,EAAQ,aAAc,EAAQ,MAAM,EACpE,MAAO,EAAO,CAGd,GAAI,aAAiB,GAAwB,EAAM,SAAW,QAAa,EAAM,QAAU,KAAO,EAAM,OAAS,IAE/G,MADA,MAAM,KAAK,MAAM,mBAAmB,EAAQ,EAAE,EACxC,IAAI,EAA4B,EAAQ,SAAU,CACtD,MAAO,EACP,OAAQ,EAAM,OACd,cAAe,EAAM,aACvB,CAAC,EAEH,MAAM,EAGR,IAAM,EAAU,MAAM,KAAK,MAAM,aAAa,EAAQ,GAAI,EAAQ,SAAU,CAAM,EAClF,GAAI,EAAS,OAAO,EAEpB,IAAM,EAAS,MAAM,KAAK,MAAM,KAAK,EAAQ,OAAQ,EAAQ,QAAQ,EACrE,GAAI,CAAC,EAAQ,MAAM,IAAI,EAA4B,EAAQ,QAAQ,EACnE,OAAO,OAGK,SAAW,CAAC,EAAY,EAAkC,CACtE,IAAM,EAAc,EAAI,EACxB,GAAI,KAAK,OAAS,CAAC,EAAY,MAAM,CAAW,EAAG,OAAO,EAAG,EAC7D,IAAM,EAAS,MAAM,EAClB,KAAK,CAAW,EAChB,IAAI,yBAAyB,IAAM,CAAE,IAAK,MAAQ,KAAM,KAAO,EAAG,IAAM,EAAG,CAAC,EAC/E,GAAI,CAAC,EAAO,SACV,MAAM,IAAI,EACR,iBACA,qEACF,EAEF,OAAO,EAAO,MAElB,CAMO,MAAM,CAAmB,CAEX,QACT,OAFV,WAAW,CACQ,EACT,EACR,CAFiB,eACT,iBAGN,SAAQ,EAAW,CACrB,OAAO,KAAK,OAAO,YAEjB,OAAM,EAAW,CACnB,OAAO,KAAK,OAAO,UAEjB,kBAAiB,EAAkB,CACrC,OAAO,KAAK,OAAO,qBAGjB,OAAM,EAAsB,CAC9B,OAAO,KAAK,OAAO,UAEjB,UAAS,EAAgB,CAC3B,OAAO,KAAK,OAAO,aAGjB,eAAc,EAAY,CAC5B,OAAO,KAAK,OAAO,kBAEjB,YAAW,EAAS,CACtB,OAAO,KAAK,OAAO,UAIrB,SAAS,IAAI,EAA2B,CACtC,OAAO,EAAO,MAAM,CAAC,IAAU,KAAK,OAAO,OAAO,SAAS,CAAK,CAAC,OAgB7D,MAAK,CAAC,EAAqB,EAAoB,CAAC,EAAsB,CAC1E,IAAM,EAAM,KAAK,WAAW,CAAK,EAC3B,EAAS,MAAM,KAAK,QAAQ,EAC5B,EAAQ,MAAM,KAAK,KAAK,EAAK,EAAM,EAAO,WAAW,EAG3D,GAAI,EAAM,SAAS,SAAW,KAAO,CAAC,EAAM,YAAc,EAAK,gBAAgB,eAC7E,OAAO,EAAM,SAGf,MAAM,EAAM,SAAS,MAAM,OAAO,EAAE,MAAM,IAAM,EAAE,EAClD,IAAM,EAAY,MAAM,KAAK,YAAY,CAAM,EAC/C,OAAQ,MAAM,KAAK,KAAK,EAAK,EAAM,EAAU,WAAW,GAAG,cAOvD,YAAW,EAAoB,CACnC,OAAQ,MAAM,KAAK,QAAQ,GAAG,iBAI1B,QAAO,EAAkB,CAC7B,MAAM,KAAK,YAAY,KAAK,MAAM,OAW9B,OAAM,EAAkB,CAC5B,GAAI,CAAC,KAAK,QAAQ,MAAO,CACvB,IAAM,EAAW,KAAK,QAAQ,SAAS,KAAK,OAAO,QAAQ,EAC3D,GAAI,KAAK,OAAO,eAAiB,KAC/B,MAAM,EAAS,OAAO,KAAK,OAAO,aAAc,eAAe,EAE/D,WAAM,EAAS,OAAO,KAAK,OAAO,YAAa,cAAc,EAGjE,MAAM,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,EAAE,OAI1C,WAAU,EAAkB,CAChC,MAAM,KAAK,QAAQ,MAAM,OAAO,KAAK,OAAO,EAAE,EAGhD,MAAM,EAAG,CACP,MAAO,CACL,SAAU,KAAK,SACf,kBAAmB,KAAK,kBACxB,OAAQ,CAAC,GAAG,KAAK,MAAM,EACvB,UAAW,KAAK,UAChB,eAAgB,KAAK,eACrB,YAAa,KAAK,WACpB,GAGD,OAAO,IAAI,4BAA4B,EAAE,EAAG,CAC3C,MAAO,CAAE,mBAAoB,KAAK,OAAO,CAAE,OAG/B,QAAO,EAA8B,CACjD,GAAI,KAAK,OAAO,eAAgB,MAAM,IAAI,EAA4B,KAAK,OAAO,QAAQ,EAC1F,IAAM,EAAS,KAAK,QAAQ,SAAS,KAAK,OAAO,QAAQ,EAAE,OAAO,qBAAuB,KACnF,EAAY,KAAK,OAAO,WAAW,QAAQ,EACjD,GAAI,IAAc,QAAa,EAAY,KAAK,IAAI,GAAK,EACvD,OAAO,KAAK,YAAY,KAAK,MAAM,EAErC,OAAO,KAAK,YAGA,YAAW,CAAC,EAAqD,CAC7E,GAAI,CACF,KAAK,OAAS,MAAM,KAAK,QAAQ,QAAQ,CAAM,EAC/C,MAAO,EAAO,CACd,GAAI,aAAiB,EACnB,KAAK,OAAS,IAAK,KAAK,OAAQ,eAAgB,EAAK,EAEvD,MAAM,EAER,OAAO,KAAK,OAGN,UAAU,CAAC,EAA0B,CAC3C,IAAM,EAAO,KAAK,QAAQ,SAAS,KAAK,OAAO,QAAQ,EAAE,OAAO,WAC5D,EACJ,GAAI,CACF,EAAM,IAAI,IAAI,OAAO,CAAK,EAAG,CAAI,EACjC,KAAM,CACN,MAAM,IAAI,EACR,gBACA,8BAA8B,KAAK,UAAU,OAAO,CAAK,CAAC,wBAC5D,EAEF,GAAI,EAAI,SAAW,IAAI,IAAI,CAAI,EAAE,OAC/B,MAAM,IAAI,EACR,gBACA,mCAAmC,KAAK,OAAO,qBAAqB,IAAI,IAAI,CAAI,EAAE,+BACxD,EAAI,SAChC,EAEF,GAAI,EAAI,WAAa,UAAY,EAAE,EAAI,WAAa,SAAW,EAAW,EAAI,QAAQ,GACpF,MAAM,IAAI,EACR,gBACA,0DAA0D,EAAI,SAChE,EAEF,OAAO,OAGK,KAAI,CAAC,EAAU,EAAmB,EAAqE,CACnH,IAAI,EAAS,EACT,GAAU,EAAK,QAAU,OAAO,YAAY,EAC5C,EAAO,EAAK,KACZ,EAAa,GAIjB,GAAI,EAAK,WAAa,UAAY,EAAK,WAAa,QAElD,MAAO,CAAE,SADQ,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,SAAU,KAAK,QAAQ,EAAQ,EAAM,EAAQ,EAAM,CAAK,CAAC,EAC3F,YAAW,EAGhC,QAAS,EAAM,GAAK,IAAO,CACzB,IAAM,EAAU,KAAK,QAAQ,EAAQ,IAAK,EAAM,SAAU,QAAS,EAAG,EAAQ,EAAM,EAAa,EAAQ,IAAI,EACvG,EAAW,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO,SAAU,CAAO,EAChE,EAAW,EAAS,QAAQ,IAAI,UAAU,EAChD,GAAI,CAAC,EAAU,IAAI,EAAS,MAAM,GAAK,IAAa,MAAQ,GAAO,EAAG,MAAO,CAAE,WAAU,YAAW,EAEpG,MAAM,EAAS,MAAM,OAAO,EAAE,MAAM,IAAM,EAAE,EAC5C,IAAM,EAAO,IAAI,IAAI,EAAU,CAAM,EACrC,GAAI,EAAK,SAAW,EAAO,OAAQ,EAAa,GAChD,GAAI,EAAS,SAAW,MAAS,EAAS,SAAW,KAAO,EAAS,SAAW,MAAQ,IAAW,OACjG,EAAS,MACT,EAAO,OAET,EAAS,GAIL,OAAO,CAAC,EAAU,EAAmB,EAAgB,EAA2B,EAA+B,CACrH,IAAM,EAAU,IAAI,QAAQ,EAAK,OAAO,EACxC,GAAI,IAAU,KAAM,EAAQ,OAAO,eAAe,EAC7C,OAAQ,IAAI,gBAAiB,UAAU,GAAO,EACnD,OAAO,IAAI,QAAQ,EAAK,IAAK,EAAM,SAAQ,OAAM,SAAQ,CAAC,EAE9D,CAEA,IAAM,EAAY,IAAI,IAAI,CAAC,IAAK,IAAK,IAAK,IAAK,GAAG,CAAC,EAEnD,SAAS,CAAO,CAAC,EAA+B,CAC9C,IAAM,EAAK,OAAO,IAAS,UAAY,IAAS,KAAO,EAAK,GAAK,EACjE,GAAI,IAAO,QAAa,IAAO,MAAQ,IAAO,GAC5C,MAAU,UAAU,mEAAmE,EAEzF,OAAO,OAAO,CAAE",
+  "debugId": "95988480893BA2D664756E2164756E21",
   "names": []
 }

package/dist/console/run.js

@@ -1,5 +1,5 @@
 // @bun
-import{ba as c}from"../chunk-qkxnvpaj.js";import{gb as f,hb as o}from"../chunk-thz75w6e.js";import{kc as A,nc as n,oc as u,yc as r}from"../chunk-r1favzz4.js";import"../chunk-675kzd7z.js";import"../chunk-nang3847.js";import{Qg as g,Ug as v}from"../chunk-k31qfe7a.js";import{dh as h}from"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import{Nh as t}from"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import{Ri as k}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import{$i as a}from"../chunk-jg79n382.js";import"../chunk-hm9cjxy2.js";function E(){let z=Promise.resolve(),J=Promise.resolve(),Y=(Q,G)=>new Promise(($)=>{Q.write(G,()=>$())});return{stdout:(Q)=>{z=Y(process.stdout,Q)},stderr:(Q)=>{J=Y(process.stderr,Q)},flush:async()=>{await Promise.all([z,J])}}}function x(z){let J=z.writers??E();return{args:z.args,options:z.options,argv:z.argv,line:(Y="")=>J.stdout(`${Y}
+import{ba as c}from"../chunk-qkxnvpaj.js";import{gb as f,hb as o}from"../chunk-thz75w6e.js";import{kc as A,nc as n,oc as u,yc as r}from"../chunk-r1favzz4.js";import"../chunk-675kzd7z.js";import"../chunk-nang3847.js";import{Qg as g,Ug as v}from"../chunk-xx7necqt.js";import{dh as h}from"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import{Nh as t}from"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import{Ri as k}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import{$i as a}from"../chunk-jg79n382.js";import"../chunk-hm9cjxy2.js";function E(){let z=Promise.resolve(),J=Promise.resolve(),Y=(Q,G)=>new Promise(($)=>{Q.write(G,()=>$())});return{stdout:(Q)=>{z=Y(process.stdout,Q)},stderr:(Q)=>{J=Y(process.stderr,Q)},flush:async()=>{await Promise.all([z,J])}}}function x(z){let J=z.writers??E();return{args:z.args,options:z.options,argv:z.argv,line:(Y="")=>J.stdout(`${Y}
 `),error:(Y)=>J.stderr(`${Y}
 `),fail:(Y,Q=1)=>{throw new A(Y,Q)}}}import b from"path";var Gz=u("encryption:rotate").describe("Re-encrypt encrypted columns that are still under an older key").arg("model",{description:"The model to rotate. Omit to rotate every model with encrypted columns"}).option("batchSize",{type:"number",default:500,description:"Rows read and rewritten per batch"}).option("dryRun",{type:"boolean",description:"Count what would be re-encrypted, and write nothing"}).option("encryptPlaintext",{type:"boolean",description:"Also encrypt values that are not encrypted yet (a column just marked @gemi.encrypted)"}).handle(async({args:z,options:J,line:Y,fail:Q})=>{let G=z.model?[z.model]:[...new Set(h().map((B)=>B.split(".")[0]))],$=z.model?null:Jz();if(G.length===0&&!$){Y("No model has encrypted columns.");return}if($){let B=await $.rotateEncryption({dryRun:J.dryRun});Y(`OAuth connections: ${B.scanned} rows, ${B.rotated} ${J.dryRun?"to re-encrypt":"re-encrypted"}`)}let _=0;for(let B of G){let V=await c(B,{batchSize:J.batchSize,dryRun:J.dryRun,encryptPlaintext:J.encryptPlaintext});_+=V.plaintext,Y(`${V.model} (${V.fields.join(", ")}): ${V.scanned} rows, ${V.rotated} ${J.dryRun?"to re-encrypt":"re-encrypted"}`+(V.skipped>0?`, ${V.skipped} changed meanwhile (already current)`:"")+(V.plaintext>0?`, ${V.plaintext} not encrypted yet`:""))}if(_>0)Q(`${_} value${_===1?" is":"s are"} not encrypted. If the column was just marked @gemi.encrypted, run again with --encrypt-plaintext.`)});function Jz(){let z=k();if(!z.bound(v))return null;let J=z.make(v);if(Object.keys(J.providers).length===0)return null;let Y=J.store;return Y instanceof g?Y:null}var m=[Gz];function R(z){return z.replace(/([a-z0-9])([A-Z])/g,"$1-$2").replace(/([A-Z])([A-Z][a-z])/g,"$1-$2").toLowerCase()}function Qz(z){let J=new Map,Y=new Map;for(let Q of z){J.set(R(Q.name),Q),J.set(Q.name,Q);let G="alias"in Q?Q.alias:void 0;if(G)Y.set(G,Q)}return{byName:J,byAlias:Y}}function l(z){if(z==="--")return!0;if(!z.startsWith("-"))return!1;if(z==="-")return!1;if(/^-(\d|\.\d)/.test(z))return!1;return!0}function p(z,J){let{byName:Y,byAlias:Q}=Qz(z.options),G=[],$=[],_=new Map,B=!Y.has("help"),V=!Q.has("h"),F=!1,N=!1,W=(X)=>G.push(`Unknown option ${X} for command "${z.commandName}".`),T=(X,Z)=>{if(Z==="--help"||Z==="-h")N=!0;G.push(Z===void 0?`Option ${X} needs a value.`:`Option ${X} needs a value, but the next token is ${JSON.stringify(Z)}, which is another option. If that really is the value, write ${X}=${Z}.`)},j=0;while(j<J.length){let X=J[j];if(X==="--"){$.push(...J.slice(j+1));break}if(X.startsWith("--")){let Z=X.slice(2),K=Z.indexOf("="),M=K===-1?Z:Z.slice(0,K),O=K===-1?void 0:Z.slice(K+1),P=Y.get(M),D=!1;if(!P&&M.startsWith("no-")){let S=Y.get(M.slice(3));if(S&&S.type==="boolean")P=S,D=!0}if(!P&&M==="help"&&B){F=!0,j+=1;continue}if(!P){W(`--${M}`),j+=1;continue}if(P.type==="boolean"){if(O!==void 0&&O!=="true"&&O!=="false")G.push(`Option --${R(P.name)} is a flag and takes no value, but got ${JSON.stringify(O)}.`);else{let S=O===void 0?!0:O==="true";_.set(P.name,D?!S:S)}j+=1;continue}if(O!==void 0){_.set(P.name,O),j+=1;continue}let L=J[j+1];if(L===void 0||l(L)){T(`--${R(P.name)}`,L),j+=1;continue}_.set(P.name,L),j+=2;continue}if(X.startsWith("-")&&X.length>1){let Z=X.slice(1),K=!1;for(let M=0;M<Z.length;M+=1){let O=Q.get(Z[M]);if(!O){if(Z[M]==="h"&&V){F=!0;continue}W(`-${Z[M]}`);break}if(O.type==="boolean"){_.set(O.name,!0);continue}let P=Z.slice(M+1),D=P.startsWith("=")?P.slice(1):P;if(D!==""){_.set(O.name,D);break}let L=J[j+1];if(L===void 0||l(L)){T(`-${O.alias}`,L);break}_.set(O.name,L),K=!0;break}j+=K?2:1;continue}$.push(X),j+=1}let H={},I=0;for(let X of z.args){if(X.variadic){let K=$.slice(I);if(I=$.length,H[X.name]=K,X.required&&K.length===0)G.push(`Missing required argument <${X.name}...>. Command "${z.commandName}" needs at least one.`);continue}let Z=$[I];if(I+=1,Z!==void 0){H[X.name]=Z;continue}if(X.default!==void 0){H[X.name]=X.default;continue}if(X.required)G.push(`Missing required argument <${X.name}>.`);H[X.name]=void 0}if(I<$.length){let X=$.slice(I);G.push(`Unexpected argument${X.length===1?"":"s"} ${X.map((Z)=>JSON.stringify(Z)).join(", ")}. Command "${z.commandName}" takes ${z.args.length} argument${z.args.length===1?"":"s"}.`)}let U={};for(let X of z.options){let Z=_.get(X.name);if(X.type==="boolean"){U[X.name]=Z===void 0?X.default??!1:Boolean(Z);continue}if(Z===void 0){if(X.default!==void 0)U[X.name]=X.default;else if(X.required)G.push(`Missing required option --${R(X.name)}.`),U[X.name]=void 0;else U[X.name]=void 0;continue}let K=String(Z);if(X.type==="number"){let M=Number(K);if(K.trim()===""||!Number.isFinite(M))G.push(`Option --${R(X.name)} expects a number, but got ${JSON.stringify(K)}.`),U[X.name]=void 0;else U[X.name]=M;continue}U[X.name]=K}let q=F&&!N;if(G.length>0)return{ok:!1,help:q,errors:G};return{ok:!0,help:q,args:H,options:U}}function C(z,J="  "){let Y=z.reduce((Q,[G])=>Math.max(Q,G.length),0);return z.map(([Q,G])=>G===""?`${J}${Q}`:`${J}${Q.padEnd(Y)}  ${G}`)}function d(z){let J=z.variadic?`${z.name}...`:z.name;return z.required?`<${J}>`:`[${J}]`}function Xz(z){let J=(G)=>z.options.some(G),Y=J((G)=>G.name==="help"||R(G.name)==="help"),Q=J((G)=>("alias"in G)&&G.alias==="h");if(Y&&Q)return[];if(Y)return[["-h","Show this message"]];return[[`${Q?"":"-h, "}--help`,"Show this message"]]}function w(z){let J=[],Y=z.args.map(d).join(" "),Q=["gemi run",z.commandName,z.options.length>0?"[options]":"",Y].filter(Boolean).join(" ");if(J.push(`Usage: ${Q}`),z.description)J.push("",z.description);if(z.args.length>0)J.push("","Arguments:"),J.push(...C(z.args.map((G)=>{let $=[G.description??"",G.default!==void 0?`(default: ${JSON.stringify(G.default)})`:""].filter(Boolean).join(" ");return[d(G),$]})));return J.push("","Options:"),J.push(...C([...z.options.map((G)=>{let $="alias"in G&&G.alias?`-${G.alias}, `:"",_=G.type==="boolean"?"":` <${G.type}>`,B=[G.description??"",G.default!==void 0?`(default: ${JSON.stringify(G.default)})`:"","required"in G&&G.required?"(required)":""].filter(Boolean).join(" ");return[`${$}--${R(G.name)}${_}`,B]}),...Xz(z)])),J.join(`
 `)}function i(z){return["Provided by gemi:","",...C(z.map((J)=>[J.commandName,J.description]))].join(`

package/dist/facades/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{Gd as c,Hd as d,Id as f,Jd as g,Kd as i,Ld as j,Md as k,Nd as l,Od as m,Pd as n,Qd as o,_d as p,gd as a,me as q,ne as r,oe as s}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Bg as h,ag as b,zg as e}from"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-k31qfe7a.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";export{g as Url,e as Storage,k as Redis,a as Redirect,l as RateLimiter,f as Query,i as Meta,h as Log,m as Lock,d as Lang,q as Features,b as Facade,s as DB,n as Crypt,j as Cookie,o as Connections,r as ConnectionQueries,p as ChangeFeed,c as Auth};
+import{Gd as c,Hd as d,Id as f,Jd as g,Kd as i,Ld as j,Md as k,Nd as l,Od as m,Pd as n,Qd as o,_d as p,gd as a,me as q,ne as r,oe as s}from"../chunk-dxag6enj.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Bg as h,ag as b,zg as e}from"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-xx7necqt.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";export{g as Url,e as Storage,k as Redis,a as Redirect,l as RateLimiter,f as Query,i as Meta,h as Log,m as Lock,d as Lang,q as Features,b as Facade,s as DB,n as Crypt,j as Cookie,o as Connections,r as ConnectionQueries,p as ChangeFeed,c as Auth};
 
 //# debugId=4A00412B3399134364756E2164756E21

package/dist/http/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{$c as p,$e as ka,Qe as $,Re as aa,Se as ba,Te as ca,Ue as da,Ve as ea,We as fa,Xe as ga,Ye as ha,Zc as n,Ze as ia,_c as o,_e as ja,ad as q,bd as r,cd as y,dd as z,ed as A,fd as B,hd as C,id as D,jd as E,kd as F,ld as G,md as H,nd as I,sd as J,td as K,ud as L,we as _}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{$f as x,Af as b,Bf as d,Gf as e,Hf as f,If as g,Jf as h,Kf as i,Lf as j,Qf as k,Rf as l,Vf as m,Wf as s,Xf as t,Yf as u,Zf as v,_f as w,jg as M,kg as N,lg as O,mg as P,ng as Q,og as R,pg as S,qg as T,rg as U,sg as V,tg as W,ug as X,vg as Y,wg as Z,zf as a}from"../chunk-3zxfd7pn.js";import{Jg as c}from"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-k31qfe7a.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";export{g as toRangeHeaderValue,n as toMiddlewareList,Z as safeFetch,f as resolveRange,e as parseRangeHeader,h as parseContentRange,r as parseByteSize,I as middlewareConfigDefaults,D as httpError,d as getCookies,j as formatUnsatisfiedContentRange,i as formatContentRange,ga as defineResourcePolicy,H as defineMiddlewareConfig,o as createUnsatisfiableResponse,p as createStreamResponse,E as createFileResponse,L as clientIp,X as classifyAddress,F as ViewRouter,k as ValidationError,U as TooManyRedirectsError,S as TooLargeError,R as TimeoutError,ha as SitemapError,ia as Sitemap,Y as SafeResponse,M as SafeFetchError,ja as RobotsTxt,ka as Robots,fa as ResourcePolicy,b as ResourceController,c as RequestBreakerError,K as RateLimitMiddleware,J as RateLimitExceededError,u as RangeNotSatisfiableError,da as PoliciesServiceProvider,ea as Policies,q as PayloadTooLargeError,v as NotFoundError,V as NetworkError,G as Middleware,B as McpRouter,A as McpRouteDeclaration,z as McpModelParam,l as InvalidValidationRuleError,N as InvalidUrlError,t as InsufficientPermissionsError,W as HttpStatusError,C as HttpResponse,m as HttpRequest,w as FileNotFoundError,Q as DnsError,ba as CorsMiddleware,a as Controller,T as ContentTypeError,aa as CacheMiddleware,ca as CSRFMiddleware,_ as BodyLimitMiddleware,O as BlockedHostError,P as BlockedAddressError,s as AuthorizationError,$ as AuthenticationMiddleware,x as AuthenticationError,y as ApiRouter};
+import{$c as p,$e as ka,Qe as $,Re as aa,Se as ba,Te as ca,Ue as da,Ve as ea,We as fa,Xe as ga,Ye as ha,Zc as n,Ze as ia,_c as o,_e as ja,ad as q,bd as r,cd as y,dd as z,ed as A,fd as B,hd as C,id as D,jd as E,kd as F,ld as G,md as H,nd as I,sd as J,td as K,ud as L,we as _}from"../chunk-dxag6enj.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{$f as x,Af as b,Bf as d,Gf as e,Hf as f,If as g,Jf as h,Kf as i,Lf as j,Qf as k,Rf as l,Vf as m,Wf as s,Xf as t,Yf as u,Zf as v,_f as w,jg as M,kg as N,lg as O,mg as P,ng as Q,og as R,pg as S,qg as T,rg as U,sg as V,tg as W,ug as X,vg as Y,wg as Z,zf as a}from"../chunk-3zxfd7pn.js";import{Jg as c}from"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-xx7necqt.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";export{g as toRangeHeaderValue,n as toMiddlewareList,Z as safeFetch,f as resolveRange,e as parseRangeHeader,h as parseContentRange,r as parseByteSize,I as middlewareConfigDefaults,D as httpError,d as getCookies,j as formatUnsatisfiedContentRange,i as formatContentRange,ga as defineResourcePolicy,H as defineMiddlewareConfig,o as createUnsatisfiableResponse,p as createStreamResponse,E as createFileResponse,L as clientIp,X as classifyAddress,F as ViewRouter,k as ValidationError,U as TooManyRedirectsError,S as TooLargeError,R as TimeoutError,ha as SitemapError,ia as Sitemap,Y as SafeResponse,M as SafeFetchError,ja as RobotsTxt,ka as Robots,fa as ResourcePolicy,b as ResourceController,c as RequestBreakerError,K as RateLimitMiddleware,J as RateLimitExceededError,u as RangeNotSatisfiableError,da as PoliciesServiceProvider,ea as Policies,q as PayloadTooLargeError,v as NotFoundError,V as NetworkError,G as Middleware,B as McpRouter,A as McpRouteDeclaration,z as McpModelParam,l as InvalidValidationRuleError,N as InvalidUrlError,t as InsufficientPermissionsError,W as HttpStatusError,C as HttpResponse,m as HttpRequest,w as FileNotFoundError,Q as DnsError,ba as CorsMiddleware,a as Controller,T as ContentTypeError,aa as CacheMiddleware,ca as CSRFMiddleware,_ as BodyLimitMiddleware,O as BlockedHostError,P as BlockedAddressError,s as AuthorizationError,$ as AuthenticationMiddleware,x as AuthenticationError,y as ApiRouter};
 
 //# debugId=07FD44C2A7425CED64756E2164756E21

package/dist/i18n/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{ca as T}from"../chunk-j5858bz7.js";import"../chunk-epvpmakp.js";import{fb as D}from"../chunk-3nf95j9e.js";import{Wc as b,Xc as w}from"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{Hd as j}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-k31qfe7a.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import{Ii as V,Ji as X,Ki as E,Li as L,Mi as R,Ni as S}from"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";import{createElement as J,Fragment as M,isValidElement as U}from"react";function $(q,B){let G=Object.values(B).some((z)=>typeof z==="function"&&U(z(""))),Q=/{{([^{}]+?)(?::([^{}\[\]]+?))?(?:\[(.*?)\])?}}/g;if(!G)return q.replace(Q,(W,O,_,Z)=>{let C=O.includes(":")?O.split(":")[0]:O,H=B[C];if(H===void 0)return W;if(typeof H==="function"){let K=H(Z!==void 0?Z:"");if(U(K))throw Error("JSX returned in string context");return String(K)}if(_)switch(_.toLowerCase()){case"number":return Number(H).toString();case"string":return String(H);case"boolean":return Boolean(H).toString();default:return String(H)}return String(H)});else{let z=[],W=0,O=null;while((O=Q.exec(q))!==null){let[_,Z,C,H]=O,F=O.index,K=Z.includes(":")?Z.split(":")[0]:Z;if(F>W)z.push(q.substring(W,F));let Y=B[K];if(Y===void 0)z.push(_);else if(typeof Y==="function"){let A=Y(H!==void 0?H:"");z.push(A)}else if(C)switch(C.toLowerCase()){case"number":z.push(Number(Y).toString());break;case"string":z.push(String(Y));break;case"boolean":z.push(Boolean(Y).toString());break;default:z.push(String(Y))}else z.push(String(Y));W=F+_.length}if(W<q.length)z.push(q.substring(W));return J(M,{},...z)}}class P{name;dictionary;constructor(q,B){this.name=q;this.dictionary=B}reference(q){if(typeof window<"u")throw Error("Cannot use reference in the browser");if(!this.dictionary?.[q])throw Error(`Translation not found for ${String(q)}`);return this.dictionary[q]}render(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B[0]};if(typeof window<"u")throw Error("Cannot use render in the browser");if(!this.dictionary?.[q]?.[G])throw Error(`Translation not found for ${String(q)} in ${String(G)}`);return $(this.dictionary[q][G],Q??{})}static create(q,B){return new P(q,B)}static text(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B?.[0]};if(!q?.[G])throw Error(`Translation not found for ${String(G)}`);return $(q[G],Q??{})}}async function N(q,B,...G){let{locale:Q=j.locale(),params:z}={params:{},...G[0]},O=(await q.load(String(Q)))[B];if(typeof O!=="string")throw Error(`Translation not found for "${B}" in "${String(Q)}" (dictionary ${q.id})`);return $(O,z??{})}export{w as translationConfigDefaults,N as translate,V as resolveLocale,X as negotiateLocale,L as isValidTimeZone,b as defineTranslationConfig,T as defineDictionary,R as createFormatter,S as Translator,D as TranslationServiceProvider,P as Dictionary,E as DEFAULT_TIME_ZONE};
+import{ca as T}from"../chunk-j5858bz7.js";import"../chunk-epvpmakp.js";import{fb as D}from"../chunk-3nf95j9e.js";import{Wc as b,Xc as w}from"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{Hd as j}from"../chunk-dxag6enj.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import"../chunk-xx7necqt.js";import"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import{Ii as V,Ji as X,Ki as E,Li as L,Mi as R,Ni as S}from"../chunk-z759yah5.js";import"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";import{createElement as J,Fragment as M,isValidElement as U}from"react";function $(q,B){let G=Object.values(B).some((z)=>typeof z==="function"&&U(z(""))),Q=/{{([^{}]+?)(?::([^{}\[\]]+?))?(?:\[(.*?)\])?}}/g;if(!G)return q.replace(Q,(W,O,_,Z)=>{let C=O.includes(":")?O.split(":")[0]:O,H=B[C];if(H===void 0)return W;if(typeof H==="function"){let K=H(Z!==void 0?Z:"");if(U(K))throw Error("JSX returned in string context");return String(K)}if(_)switch(_.toLowerCase()){case"number":return Number(H).toString();case"string":return String(H);case"boolean":return Boolean(H).toString();default:return String(H)}return String(H)});else{let z=[],W=0,O=null;while((O=Q.exec(q))!==null){let[_,Z,C,H]=O,F=O.index,K=Z.includes(":")?Z.split(":")[0]:Z;if(F>W)z.push(q.substring(W,F));let Y=B[K];if(Y===void 0)z.push(_);else if(typeof Y==="function"){let A=Y(H!==void 0?H:"");z.push(A)}else if(C)switch(C.toLowerCase()){case"number":z.push(Number(Y).toString());break;case"string":z.push(String(Y));break;case"boolean":z.push(Boolean(Y).toString());break;default:z.push(String(Y))}else z.push(String(Y));W=F+_.length}if(W<q.length)z.push(q.substring(W));return J(M,{},...z)}}class P{name;dictionary;constructor(q,B){this.name=q;this.dictionary=B}reference(q){if(typeof window<"u")throw Error("Cannot use reference in the browser");if(!this.dictionary?.[q])throw Error(`Translation not found for ${String(q)}`);return this.dictionary[q]}render(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B[0]};if(typeof window<"u")throw Error("Cannot use render in the browser");if(!this.dictionary?.[q]?.[G])throw Error(`Translation not found for ${String(q)} in ${String(G)}`);return $(this.dictionary[q][G],Q??{})}static create(q,B){return new P(q,B)}static text(q,...B){let{locale:G=j.locale(),params:Q}={params:{},...B?.[0]};if(!q?.[G])throw Error(`Translation not found for ${String(G)}`);return $(q[G],Q??{})}}async function N(q,B,...G){let{locale:Q=j.locale(),params:z}={params:{},...G[0]},O=(await q.load(String(Q)))[B];if(typeof O!=="string")throw Error(`Translation not found for "${B}" in "${String(Q)}" (dictionary ${q.id})`);return $(O,z??{})}export{w as translationConfigDefaults,N as translate,V as resolveLocale,X as negotiateLocale,L as isValidTimeZone,b as defineTranslationConfig,T as defineDictionary,R as createFormatter,S as Translator,D as TranslationServiceProvider,P as Dictionary,E as DEFAULT_TIME_ZONE};
 
 //# debugId=2E75C41A3B3A3BC564756E2164756E21

package/dist/kernel/index.js

@@ -1,5 +1,5 @@
 // @bun
-import{Ja as g}from"../chunk-xtzn0qfh.js";import{eb as jj}from"../chunk-1z1rj2zq.js";import{fb as w}from"../chunk-3nf95j9e.js";import{Bb as S,Cb as h,Db as R,Fb as u,Gb as l,Hb as v,Ib as d,Lb as c,Mb as p,Pb as n,Sb as a,Tb as s,rb as e,sb as T,tb as D,ub as Jj,vb as A,wb as y,xb as P}from"../chunk-0gtyects.js";import"../chunk-39kyz4k6.js";import"../chunk-r1favzz4.js";import"../chunk-675kzd7z.js";import{Rc as zj}from"../chunk-nang3847.js";import"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{Ad as Oj,Ce as I,Dd as Hj,De as q,Ed as Lj,He as K,Ie as E,Je as o,Ke as m,Le as C,Me as Q,Ne as i,Oe as r,xe as x,zd as Nj}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Vf as b}from"../chunk-3zxfd7pn.js";import{Ig as B}from"../chunk-1m3hvy3q.js";import{Og as L}from"../chunk-490sbcma.js";import"../chunk-k31qfe7a.js";import{Zg as t}from"../chunk-y09r0wsw.js";import{rh as V,wh as f}from"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-cvfg88cx.js";import"../chunk-z759yah5.js";import{Oi as _,Qi as O,Ri as F}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import{cj as M}from"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";function Yj(j){let X=j.headers.get("Cache-Control")?.toLowerCase()??"";return/(^|[\s,])(public|s-maxage)\b/.test(X)}var Zj=new Set,$j={refusal:null,apply:(j)=>j,carried:null};async function k(j){let X=F(x);if(X.config.global.length===0)return $j;let{pathname:Z}=new URL(j.url),W=M(Z),z=new b(j,{},W?"api":"view","");return await L.run(z,async()=>{let $=L.getStore(),{headers:N,cookies:Xj}=$,Y=(J)=>{if(!Yj(J))return Q(J,N,Xj);let G=new Headers(N);return G.delete("Set-Cookie"),Q(J,G,Zj)};try{return await X.runGlobalMiddleware(),{refusal:null,apply:Y,carried:{user:$.user}}}catch(J){let G=!W&&Z.endsWith(".json");if(J?.kind===B){let H=W?C(J.payload.api):G?E(J.payload.viewData??J.payload.api):K(J.payload.view);return{refusal:Y(H),apply:Y,carried:null}}if(V(J)&&(W||G))return{refusal:Y(m()),apply:Y,carried:null};if(f(J)){console.error(J);let H=W||G?I():K(q());return{refusal:Y(H),apply:Y,carried:null}}throw J}finally{$.destroy()}})}var U=[d,p,g,R,S,s,y,h,c,l,D,u,a,v,w,n,P,A];class Wj{config={};providers=[];services=[];serviceInstances=[];serviceTokens=new Set;servicesBooted=!1;models=[];app=new O;boot(){if(this.models.length>0)jj(...this.models);else Gj();this.app.config.merge(this.config),O.setInstance(this.app),this.app.registerMany([...U,...this.providers]),this.registerServices()}registerServices(){let j=this.serviceTokens;this.serviceInstances=[],this.serviceTokens=new Set,this.servicesBooted=!1;let X=new Map;for(let Z of this.services){let W=typeof Z==="function"?new Z:Z,z=W.constructor;if(!z.token)throw Error(`Service [${z.name}] is listed in \`services\` but does not declare a \`static token\`.`);let $=X.get(z.token);if($)throw Error(`Services [${$}] and [${z.name}] both declare the token "${z.token}". Tokens are the container's keys, so they must be unique.`);X.set(z.token,z.name);let N=z;if(!j.has(z.token)&&this.app.bound(N))throw Error(`Service [${z.name}] declares the token "${z.token}", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`);this.app.instance(N,W),this.serviceInstances.push(W),this.serviceTokens.add(z.token)}}async waitForBoot(){await this.app.boot(),await this.bootServices(),Jj(this.app)}async bootServices(){if(this.servicesBooted)return;for(let j of this.serviceInstances)await j.boot();this.servicesBooted=!0}shutdown(j){return this.run(()=>this.app.shutdown(j))}run(j){return _.run(this.app,j)}resolve(j){return this.app.make(j)}apiRoutes(){return this.app.make(i)}viewRoutes(){return this.app.make(o)}domains(){return this.app.make(r)}queue(){return this.app.make(zj)}mcpHttp(){return this.app.config.get("route.mcp.remote.enabled")===!0?this.app.make(e):null}globalMiddleware(j){return k(j)}destroy(){if(this.app.resolved(T))this.app.make(T).stop();if(this.app.flush(),O.getInstance()===this.app)O.setInstance(void 0);_.disable()}}function Gj(){if(Bun.env.NODE_ENV==="production")return;let j=t();if(j.length===0)return;console.warn(`[gemi] ${j.length} model${j.length===1?" is":"s are"} registered, but Kernel.models is empty.
+import{Ja as g}from"../chunk-xtzn0qfh.js";import{eb as jj}from"../chunk-1z1rj2zq.js";import{fb as w}from"../chunk-3nf95j9e.js";import{Bb as S,Cb as h,Db as R,Fb as u,Gb as l,Hb as v,Ib as d,Lb as c,Mb as p,Pb as n,Sb as a,Tb as s,rb as e,sb as T,tb as D,ub as Jj,vb as A,wb as y,xb as P}from"../chunk-vkkt7j2y.js";import"../chunk-39kyz4k6.js";import"../chunk-r1favzz4.js";import"../chunk-675kzd7z.js";import{Rc as zj}from"../chunk-nang3847.js";import"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{Ad as Oj,Ce as I,Dd as Hj,De as q,Ed as Lj,He as K,Ie as E,Je as o,Ke as m,Le as C,Me as Q,Ne as i,Oe as r,xe as x,zd as Nj}from"../chunk-dxag6enj.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Vf as b}from"../chunk-3zxfd7pn.js";import{Ig as B}from"../chunk-1m3hvy3q.js";import{Og as L}from"../chunk-490sbcma.js";import"../chunk-xx7necqt.js";import{Zg as t}from"../chunk-y09r0wsw.js";import{rh as V,wh as f}from"../chunk-9pkj7sk6.js";import"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import"../chunk-cvfg88cx.js";import"../chunk-z759yah5.js";import{Oi as _,Qi as O,Ri as F}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import{cj as M}from"../chunk-jf6qqzat.js";import"../chunk-hm9cjxy2.js";function Yj(j){let X=j.headers.get("Cache-Control")?.toLowerCase()??"";return/(^|[\s,])(public|s-maxage)\b/.test(X)}var Zj=new Set,$j={refusal:null,apply:(j)=>j,carried:null};async function k(j){let X=F(x);if(X.config.global.length===0)return $j;let{pathname:Z}=new URL(j.url),W=M(Z),z=new b(j,{},W?"api":"view","");return await L.run(z,async()=>{let $=L.getStore(),{headers:N,cookies:Xj}=$,Y=(J)=>{if(!Yj(J))return Q(J,N,Xj);let G=new Headers(N);return G.delete("Set-Cookie"),Q(J,G,Zj)};try{return await X.runGlobalMiddleware(),{refusal:null,apply:Y,carried:{user:$.user}}}catch(J){let G=!W&&Z.endsWith(".json");if(J?.kind===B){let H=W?C(J.payload.api):G?E(J.payload.viewData??J.payload.api):K(J.payload.view);return{refusal:Y(H),apply:Y,carried:null}}if(V(J)&&(W||G))return{refusal:Y(m()),apply:Y,carried:null};if(f(J)){console.error(J);let H=W||G?I():K(q());return{refusal:Y(H),apply:Y,carried:null}}throw J}finally{$.destroy()}})}var U=[d,p,g,R,S,s,y,h,c,l,D,u,a,v,w,n,P,A];class Wj{config={};providers=[];services=[];serviceInstances=[];serviceTokens=new Set;servicesBooted=!1;models=[];app=new O;boot(){if(this.models.length>0)jj(...this.models);else Gj();this.app.config.merge(this.config),O.setInstance(this.app),this.app.registerMany([...U,...this.providers]),this.registerServices()}registerServices(){let j=this.serviceTokens;this.serviceInstances=[],this.serviceTokens=new Set,this.servicesBooted=!1;let X=new Map;for(let Z of this.services){let W=typeof Z==="function"?new Z:Z,z=W.constructor;if(!z.token)throw Error(`Service [${z.name}] is listed in \`services\` but does not declare a \`static token\`.`);let $=X.get(z.token);if($)throw Error(`Services [${$}] and [${z.name}] both declare the token "${z.token}". Tokens are the container's keys, so they must be unique.`);X.set(z.token,z.name);let N=z;if(!j.has(z.token)&&this.app.bound(N))throw Error(`Service [${z.name}] declares the token "${z.token}", which is already bound in the container by the framework or a provider. Binding it would replace that service everywhere, so pick a token nothing else owns.`);this.app.instance(N,W),this.serviceInstances.push(W),this.serviceTokens.add(z.token)}}async waitForBoot(){await this.app.boot(),await this.bootServices(),Jj(this.app)}async bootServices(){if(this.servicesBooted)return;for(let j of this.serviceInstances)await j.boot();this.servicesBooted=!0}shutdown(j){return this.run(()=>this.app.shutdown(j))}run(j){return _.run(this.app,j)}resolve(j){return this.app.make(j)}apiRoutes(){return this.app.make(i)}viewRoutes(){return this.app.make(o)}domains(){return this.app.make(r)}queue(){return this.app.make(zj)}mcpHttp(){return this.app.config.get("route.mcp.remote.enabled")===!0?this.app.make(e):null}globalMiddleware(j){return k(j)}destroy(){if(this.app.resolved(T))this.app.make(T).stop();if(this.app.flush(),O.getInstance()===this.app)O.setInstance(void 0);_.disable()}}function Gj(){if(Bun.env.NODE_ENV==="production")return;let j=t();if(j.length===0)return;console.warn(`[gemi] ${j.length} model${j.length===1?" is":"s are"} registered, but Kernel.models is empty.
         Nested relation reads resolve a model by name, so a policy on a subclass that does not own its
 `+"        name is skipped inside every include \u2014 scoped at the root, "+`unscoped in an include, with nothing
         to notice it. Declaring the modules registers each class under its own name and audits the set:

package/dist/server/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{Ha as I}from"../chunk-2bja99cq.js";import{Ia as W}from"../chunk-bz8xssrc.js";import{Ui as b,Wi as V,Xi as A,Yi as H,Zi as O}from"../chunk-8wcpxm41.js";import{bj as k}from"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import{ij as $}from"../chunk-hm9cjxy2.js";var X=Symbol.for("gemi.server.devGeneration"),L={graceMs:1e4,providerTimeoutMs:5000};class Q{app;inFlight=0;waiters=new Set;constructor(z){this.app=z}track(z){return async(B,J)=>{this.inFlight++;try{return await z(B,J)}finally{if(this.inFlight--,this.inFlight===0)this.wake()}}}get pending(){return this.inFlight}async retire({graceMs:z,providerTimeoutMs:B}){try{await this.idle(z),await Promise.resolve().then(()=>this.app.shutdown({timeoutMs:B}))}catch(J){Z(J)}}idle(z){if(this.inFlight===0)return Promise.resolve();return new Promise((B)=>{let J=()=>{clearTimeout(K),this.waiters.delete(J),B()},K=setTimeout(J,z);this.waiters.add(J)})}wake(){for(let z of this.waiters)z()}}function Y(z,B=L){let J=globalThis,K=J[X];if(J[X]=z,!K||K===z||typeof K.retire!=="function")return Promise.resolve();let _=K.retire.bind(K);return Promise.resolve().then(()=>_(B)).catch(Z)}function Z(z){console.error("[gemi] Shutting down the application a reload replaced failed:",z)}class P{app;instrumentation;handleSignals;server;stopping;settings;constructor(z){this.app=new W({kernel:z.kernel}),this.handleSignals=z.handleSignals??!0,this.instrumentation=H(z.instrumentation??((B,J)=>J(B)))}async start(){process.env.ROOT_DIR=k();let z=Bun.env.NODE_ENV==="production";if(z){if(this.handleSignals)O(()=>this.stop());this.settings=V()}try{await this.app.waitForBoot()}catch(B){if(!z)this.app.shutdown({timeoutMs:L.providerTimeoutMs});throw B}if(z){let{httpProd:B}=await import("../chunk-sd02ktf2.js");this.server=await B(this.app,this.instrumentation.bind(this))}else{I();let{httpDev:B}=await import("../chunk-xzyy896s.js"),J=new Q(this.app);this.server=await B(this.app,J.track(this.instrumentation.bind(this))),Y(J)}return this.server}stop(z={}){return this.stopping??=A({server:this.server,shutdownProviders:(B)=>this.app.shutdown(B),settings:{...this.settings??V(),...z}}),this.stopping}}export{b as isShuttingDown,P as Server};
+import{Ha as I}from"../chunk-2bja99cq.js";import{Ia as W}from"../chunk-bz8xssrc.js";import{Ui as b,Wi as V,Xi as A,Yi as H,Zi as O}from"../chunk-8wcpxm41.js";import{bj as k}from"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import{ij as $}from"../chunk-hm9cjxy2.js";var X=Symbol.for("gemi.server.devGeneration"),L={graceMs:1e4,providerTimeoutMs:5000};class Q{app;inFlight=0;waiters=new Set;constructor(z){this.app=z}track(z){return async(B,J)=>{this.inFlight++;try{return await z(B,J)}finally{if(this.inFlight--,this.inFlight===0)this.wake()}}}get pending(){return this.inFlight}async retire({graceMs:z,providerTimeoutMs:B}){try{await this.idle(z),await Promise.resolve().then(()=>this.app.shutdown({timeoutMs:B}))}catch(J){Z(J)}}idle(z){if(this.inFlight===0)return Promise.resolve();return new Promise((B)=>{let J=()=>{clearTimeout(K),this.waiters.delete(J),B()},K=setTimeout(J,z);this.waiters.add(J)})}wake(){for(let z of this.waiters)z()}}function Y(z,B=L){let J=globalThis,K=J[X];if(J[X]=z,!K||K===z||typeof K.retire!=="function")return Promise.resolve();let _=K.retire.bind(K);return Promise.resolve().then(()=>_(B)).catch(Z)}function Z(z){console.error("[gemi] Shutting down the application a reload replaced failed:",z)}class P{app;instrumentation;handleSignals;server;stopping;settings;constructor(z){this.app=new W({kernel:z.kernel}),this.handleSignals=z.handleSignals??!0,this.instrumentation=H(z.instrumentation??((B,J)=>J(B)))}async start(){process.env.ROOT_DIR=k();let z=Bun.env.NODE_ENV==="production";if(z){if(this.handleSignals)O(()=>this.stop());this.settings=V()}try{await this.app.waitForBoot()}catch(B){if(!z)this.app.shutdown({timeoutMs:L.providerTimeoutMs});throw B}if(z){let{httpProd:B}=await import("../chunk-qntv7bms.js");this.server=await B(this.app,this.instrumentation.bind(this))}else{I();let{httpDev:B}=await import("../chunk-q86tfx95.js"),J=new Q(this.app);this.server=await B(this.app,J.track(this.instrumentation.bind(this))),Y(J)}return this.server}stop(z={}){return this.stopping??=A({server:this.server,shutdownProviders:(B)=>this.app.shutdown(B),settings:{...this.settings??V(),...z}}),this.stopping}}export{b as isShuttingDown,P as Server};
 
 //# debugId=B6DA65ECC9FB26F464756E2164756E21

package/dist/services/index.js

@@ -1,5 +1,5 @@
 // @bun
-import{hb as I8}from"../chunk-thz75w6e.js";import{Ab as z8,Bb as X8,Cb as B8,Db as M8,Eb as k,Fb as j8,Gb as N8,Hb as x8,Ib as L8,Jb as D8,Kb as F8,Lb as H8,Mb as U8,Nb as S8,Ob as O8,Pb as R8,Qb as f8,Rb as _8,Sb as k8,Tb as C8,ib as N5,jb as x5,kb as L5,lb as D5,mb as z4,nb as F5,ob as Q4,pb as Y4,qb as I1,rb as H5,sb as S5,tb as W8,vb as J8,wb as Z8,xb as Y8,yb as G8,zb as K8}from"../chunk-0gtyects.js";import"../chunk-39kyz4k6.js";import{kc as h5,lc as g5,mc as E5,nc as m5,oc as c5,pc as d5,qc as p5,rc as l5,sc as n5,tc as i5,uc as o5,vc as s5,wc as a5,xc as t5,yc as r5,zc as e5}from"../chunk-r1favzz4.js";import{Ac as u5}from"../chunk-675kzd7z.js";import{Bc as U5,Cc as O5,Dc as R5,Ec as f5,Fc as _5,Gc as k5,Hc as C5,Ic as I5,Jc as b5,Kc as T5,Lc as v5,Mc as P5,Nc as w5,Oc as V5,Pc as q5,Qc as y5,Rc as A5}from"../chunk-nang3847.js";import{Wc as $8,Xc as Q8}from"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{$d as hW,Ae as $5,Bd as GW,Be as Q5,Cd as KW,Ee as Y5,Fd as A0,Je as G5,Ne as K5,Pe as b1,Rd as bW,Sd as TW,Td as vW,Ud as PW,Vd as wW,Wd as VW,Xd as qW,Yd as yW,Zd as AW,ae as gW,be as EW,ce as mW,de as cW,ee as uW,fe as dW,ge as x0,he as pW,ie as lW,je as nW,ke as iW,le as oW,md as e6,nd as WW,od as JW,pd as ZW,pe as q,qd as $W,qe as j1,rd as QW,re as sW,se as aW,te as tW,ud as y0,ue as rW,vd as S0,ve as eW,wd as O0,xd as t1,xe as W5,yd as YW,ye as J5,ze as Z5}from"../chunk-47h12eme.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Ag as xW,Cg as _1,Hf as a1,If as i1,Jf as K1,Vf as $4,Yf as i,_f as c,cg as o1,dg as z1,eg as f1,fg as zW,gg as XW,hg as BW,ig as MW,xg as jW,yg as NW}from"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import{Pg as OW,Qg as RW,Rg as fW,Sg as _W,Tg as kW,Ug as CW,Vg as IW}from"../chunk-k31qfe7a.js";import{$g as HW,ah as UW,bh as SW}from"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import{Kh as LW,Lh as DW,Mh as FW}from"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import{Ci as z5,Di as X5,Ei as B5,Fi as M5,Hi as j5}from"../chunk-cvfg88cx.js";import"../chunk-z759yah5.js";import{Ri as v}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import{ij as D0}from"../chunk-hm9cjxy2.js";import{Buffer as L0}from"buffer";class F0 extends z1{client;config;constructor(...W){super();this.config=W}async connect(){let W=await import("../chunk-cte6ysqd.js");return this.client??=new W.S3Client(...this.config),{sdk:W,client:this.client}}async put(W,{signal:J}={}){J?.throwIfAborted();let Z,$,Q,Y=process.env.BUCKET_NAME;if(W instanceof Blob)Z=W,Q=`${Bun.randomUUIDv7()}.${W.type.split("/")[1].split(";")[0]}`,$=W.type;else Z=W.body,Q=W.name,Y=W.bucket??Y,$=W.contentType||(Z instanceof Blob||Z instanceof File?Z.type:void 0);$=$||void 0;let G=Z instanceof L0?Z:Z instanceof Blob||Z instanceof File?L0.from(await Z.arrayBuffer()):"",{sdk:K,client:z}=await this.connect();return J?.throwIfAborted(),await z.send(new K.PutObjectCommand({Bucket:Y,Key:Q,Body:G,ContentType:$}),{abortSignal:J}),Q}async delete(W){let J=typeof W==="string"?W:W.name,Z=(typeof W==="string"?void 0:W.bucket)??process.env.BUCKET_NAME;if(!J)throw Error("Object name has to be specified");let{sdk:$,client:Q}=await this.connect();try{await Q.send(new $.DeleteObjectCommand({Bucket:Z,Key:J}))}catch(Y){if(Y?.name==="NoSuchKey"||Y?.$metadata?.httpStatusCode===404)return;throw Y}}async*pages(W,{bucket:J,signal:Z}){let{sdk:$,client:Q}=await this.connect(),Y;do{Z?.throwIfAborted();let G=await Q.send(new $.ListObjectsV2Command({Bucket:J??process.env.BUCKET_NAME,Prefix:W,ContinuationToken:Y}),{abortSignal:Z});yield(G.Contents??[]).map((K)=>({name:K.Key,size:K.Size??0,lastModified:K.LastModified??new Date(0)})),Y=G.IsTruncated?G.NextContinuationToken:void 0}while(Y)}async*objects(W,J={}){for await(let Z of this.pages(W,J))yield*Z}async deletePrefix(W,J={}){o1(W);let Z=J.bucket??process.env.BUCKET_NAME,{sdk:$,client:Q}=await this.connect(),Y=0;for await(let G of this.pages(W,{...J,bucket:Z})){if(G.length===0)continue;J.signal?.throwIfAborted();let z=(await Q.send(new $.DeleteObjectsCommand({Bucket:Z,Delete:{Objects:G.map((X)=>({Key:X.name})),Quiet:!0}}),{abortSignal:J.signal}))?.Errors??[];if(z.length>0){let X=z[0];throw Error(`S3 could not delete ${z.length} object(s) under "${W}", e.g. "${X.Key}": ${X.Code??"unknown"} ${X.Message??""}`.trim())}Y+=G.length}return Y}async list(W){let{sdk:J,client:Z}=await this.connect();return await Z.send(new J.ListObjectsV2Command({Bucket:process.env.BUCKET_NAME,Prefix:W}))}async fetch(W,{signal:J}={}){J?.throwIfAborted();let Z=process.env.BUCKET_NAME,$;if(typeof W==="string")$=W;else Z=W.bucket??Z,$=W.name;if(!$)throw Error("Object name has to be specified");let{sdk:Q,client:Y}=await this.connect();J?.throwIfAborted();let G=await Y.send(new Q.GetObjectCommand({Bucket:Z,Key:$}),{abortSignal:J}),K=f1(G.Body.transformToWebStream(),J);return J?.throwIfAborted(),new Response(K,{headers:{"Content-Type":G.ContentType,"Content-Length":G.ContentLength.toString(),"Cache-Control":"private, max-age=12000, must-revalidate","Last-Modified":G.LastModified?.toUTCString()||"",ETag:G.ETag||""}})}async read(W){let J=typeof W==="string"?{name:W}:W,Z=J.bucket??process.env.BUCKET_NAME,{name:$,range:Q=null}=J;if(!$)throw Error("Object name has to be specified");let{sdk:Y,client:G}=await this.connect(),K;try{K=await G.send(new Y.GetObjectCommand({Bucket:Z,Key:$,Range:Q?i1(Q):void 0}))}catch(M){if(M?.name==="InvalidRange"||M?.$metadata?.httpStatusCode===416)throw new i(await this.size({name:$,bucket:Z}));if(M?.name==="NoSuchKey"||M?.$metadata?.httpStatusCode===404)throw new c($);throw M}let z=K1(K.ContentRange),X=Boolean(z)&&K.$metadata?.httpStatusCode===206,B=z?.total??K.ContentLength??0;return{body:K.Body.transformToWebStream(),start:z?.start??0,end:z?.end??B-1,total:B,partial:X,type:K.ContentType??"application/octet-stream",etag:K.ETag||void 0,lastModified:K.LastModified,name:$}}async size(W){let J=typeof W==="string"?W:W.name,Z=(typeof W==="string"?void 0:W.bucket)??process.env.BUCKET_NAME,{sdk:$,client:Q}=await this.connect();try{return(await Q.send(new $.HeadObjectCommand({Bucket:Z,Key:J}))).ContentLength??0}catch(Y){if(Y?.name==="NotFound"||Y?.$metadata?.httpStatusCode===404)throw new c(J);throw Y}}}import{Buffer as H0}from"buffer";import{Readable as H6}from"stream";function s1(W){return W?.statusCode===404||W?.details?.errorCode==="BlobNotFound"||W?.code==="BlobNotFound"}function U6(W){return W?.statusCode===416||W?.details?.errorCode==="InvalidRange"||W?.code==="InvalidRange"}class U0 extends z1{config;serviceClientPromise=null;constructor(W={}){super();this.config=W}async serviceClient(){if(this.config.serviceClient)return this.config.serviceClient;return this.serviceClientPromise??=(async()=>{let W;try{W=await import("@azure/storage-blob")}catch{throw Error("AzureBlobDriver requires the '@azure/storage-blob' package. Install it with `bun add @azure/storage-blob`, or pass a pre-built `serviceClient`.")}let J=this.config.connectionString??process.env.AZURE_STORAGE_CONNECTION_STRING;if(this.config.url)return new W.BlobServiceClient(this.config.url,this.config.credential);if(J)return W.BlobServiceClient.fromConnectionString(J);throw Error("AzureBlobDriver needs a connection string (AZURE_STORAGE_CONNECTION_STRING), a `url`, or a `serviceClient`.")})(),this.serviceClientPromise}async blob(W,J){if(!W)throw Error("Object name has to be specified");let Z=J??this.config.container??process.env.BUCKET_NAME;if(!Z)throw Error("AzureBlobDriver needs a container name, from `bucket`, the `container` config, or BUCKET_NAME.");return(await this.serviceClient()).getContainerClient(Z).getBlockBlobClient(W)}async put(W,{signal:J}={}){J?.throwIfAborted();let Z,$,Q,Y;if(W instanceof Blob)Z=W,Q=`${Bun.randomUUIDv7()}.${W.type.split("/")[1].split(";")[0]}`,$=W.type;else Z=W.body,Q=W.name,Y=W.bucket,$=W.contentType??(Z instanceof Blob||Z instanceof File?Z.type:void 0);let G=Z instanceof H0?Z:H0.from(await Z.arrayBuffer()),K=await this.blob(Q,Y);return J?.throwIfAborted(),await K.uploadData(G,{blobHTTPHeaders:$?{blobContentType:$}:void 0,abortSignal:J}),Q}async*objects(W,{bucket:J,signal:Z}={}){Z?.throwIfAborted();let $=J??this.config.container??process.env.BUCKET_NAME;if(!$)throw Error("AzureBlobDriver needs a container name, from `bucket`, the `container` config, or BUCKET_NAME.");let Y=(await this.serviceClient()).getContainerClient($);for await(let G of Y.listBlobsFlat({prefix:W}))Z?.throwIfAborted(),yield{name:G.name,size:G.properties?.contentLength??0,lastModified:G.properties?.lastModified??new Date(0)}}async list(W){let J=this.config.container??process.env.BUCKET_NAME,$=(await this.serviceClient()).getContainerClient(J),Q=[];for await(let Y of $.listBlobsFlat({prefix:W}))Q.push(Y.name);return Q}async fetch(W,{signal:J}={}){J?.throwIfAborted();let Z=await this.download(typeof W==="string"?{name:W}:{name:W.name,bucket:W.bucket},J);return new Response(Z.body,{headers:{"Content-Type":Z.type,"Content-Length":String(Z.total),"Cache-Control":"private, max-age=12000, must-revalidate","Last-Modified":Z.lastModified?.toUTCString()??"",ETag:Z.etag??""}})}async read(W){return this.download(typeof W==="string"?{name:W}:W)}async download(W,J){let{name:Z,bucket:$,range:Q=null}=W,Y=await this.blob(Z,$);J?.throwIfAborted();let G,K,z=Q?.kind==="suffix"||Q?.kind==="offset"&&Q.end===null&&Q.start===0;if(Q&&z){let H=await this.size({name:Z,bucket:$}),m=a1(Q,H);if(!m)throw new i(H);G=m.start,K=m.length}else if(Q?.kind==="offset")G=Q.start,K=Q.end===null?void 0:Q.end-Q.start+1;let X;try{X=await Y.download(G,K,J?{abortSignal:J}:void 0)}catch(H){if(U6(H))throw new i(await this.size({name:Z,bucket:$}));if(s1(H))throw new c(Z);throw H}let B=K1(X.contentRange),M=Boolean(B),D=B?.total??X.contentLength??0,S=await S6(X);if(S instanceof ReadableStream)S=f1(S,J);return J?.throwIfAborted(),{body:S,start:B?.start??0,end:B?.end??D-1,total:D,partial:M,type:X.contentType??"application/octet-stream",etag:X.etag||void 0,lastModified:X.lastModified,name:Z}}async size(W){let J=typeof W==="string"?W:W.name,Z=typeof W==="string"?void 0:W.bucket,$=await this.blob(J,Z);try{return(await $.getProperties()).contentLength??0}catch(Q){if(s1(Q))throw new c(J);throw Q}}async delete(W){let J=typeof W==="string"?W:W.name,Z=typeof W==="string"?void 0:W.bucket,$=await this.blob(J,Z);try{await $.delete()}catch(Q){if(s1(Q))return;throw Q}}}async function S6(W){if(W.blobBody)return await W.blobBody;if(W.readableStreamBody)return H6.toWeb(W.readableStreamBody);return null}function O6(W){return W}var R6=`
+import{hb as I8}from"../chunk-thz75w6e.js";import{Ab as z8,Bb as X8,Cb as B8,Db as M8,Eb as k,Fb as j8,Gb as N8,Hb as x8,Ib as L8,Jb as D8,Kb as F8,Lb as H8,Mb as U8,Nb as S8,Ob as O8,Pb as R8,Qb as f8,Rb as _8,Sb as k8,Tb as C8,ib as N5,jb as x5,kb as L5,lb as D5,mb as z4,nb as F5,ob as Q4,pb as Y4,qb as I1,rb as H5,sb as S5,tb as W8,vb as J8,wb as Z8,xb as Y8,yb as G8,zb as K8}from"../chunk-vkkt7j2y.js";import"../chunk-39kyz4k6.js";import{kc as h5,lc as g5,mc as E5,nc as m5,oc as c5,pc as d5,qc as p5,rc as l5,sc as n5,tc as i5,uc as o5,vc as s5,wc as a5,xc as t5,yc as r5,zc as e5}from"../chunk-r1favzz4.js";import{Ac as u5}from"../chunk-675kzd7z.js";import{Bc as U5,Cc as O5,Dc as R5,Ec as f5,Fc as _5,Gc as k5,Hc as C5,Ic as I5,Jc as b5,Kc as T5,Lc as v5,Mc as P5,Nc as w5,Oc as V5,Pc as q5,Qc as y5,Rc as A5}from"../chunk-nang3847.js";import{Wc as $8,Xc as Q8}from"../chunk-tzdenj0n.js";import"../chunk-30xxc6r7.js";import{$d as hW,Ae as $5,Bd as GW,Be as Q5,Cd as KW,Ee as Y5,Fd as A0,Je as G5,Ne as K5,Pe as b1,Rd as bW,Sd as TW,Td as vW,Ud as PW,Vd as wW,Wd as VW,Xd as qW,Yd as yW,Zd as AW,ae as gW,be as EW,ce as mW,de as cW,ee as uW,fe as dW,ge as x0,he as pW,ie as lW,je as nW,ke as iW,le as oW,md as e6,nd as WW,od as JW,pd as ZW,pe as q,qd as $W,qe as j1,rd as QW,re as sW,se as aW,te as tW,ud as y0,ue as rW,vd as S0,ve as eW,wd as O0,xd as t1,xe as W5,yd as YW,ye as J5,ze as Z5}from"../chunk-dxag6enj.js";import"../chunk-hkf2k2eq.js";import"../chunk-eke2frrm.js";import{Ag as xW,Cg as _1,Hf as a1,If as i1,Jf as K1,Vf as $4,Yf as i,_f as c,cg as o1,dg as z1,eg as f1,fg as zW,gg as XW,hg as BW,ig as MW,xg as jW,yg as NW}from"../chunk-3zxfd7pn.js";import"../chunk-1m3hvy3q.js";import"../chunk-490sbcma.js";import{Pg as OW,Qg as RW,Rg as fW,Sg as _W,Tg as kW,Ug as CW,Vg as IW}from"../chunk-xx7necqt.js";import{$g as HW,ah as UW,bh as SW}from"../chunk-y09r0wsw.js";import"../chunk-9pkj7sk6.js";import{Kh as LW,Lh as DW,Mh as FW}from"../chunk-xx3zvc3g.js";import"../chunk-gqfqnv3f.js";import"../chunk-kkte8nze.js";import"../chunk-hr1r3g0d.js";import"../chunk-g9hhdcax.js";import{Ci as z5,Di as X5,Ei as B5,Fi as M5,Hi as j5}from"../chunk-cvfg88cx.js";import"../chunk-z759yah5.js";import{Ri as v}from"../chunk-g5ppst76.js";import"../chunk-d806cy7p.js";import"../chunk-8wcpxm41.js";import"../chunk-jg79n382.js";import"../chunk-jf6qqzat.js";import{ij as D0}from"../chunk-hm9cjxy2.js";import{Buffer as L0}from"buffer";class F0 extends z1{client;config;constructor(...W){super();this.config=W}async connect(){let W=await import("../chunk-cte6ysqd.js");return this.client??=new W.S3Client(...this.config),{sdk:W,client:this.client}}async put(W,{signal:J}={}){J?.throwIfAborted();let Z,$,Q,Y=process.env.BUCKET_NAME;if(W instanceof Blob)Z=W,Q=`${Bun.randomUUIDv7()}.${W.type.split("/")[1].split(";")[0]}`,$=W.type;else Z=W.body,Q=W.name,Y=W.bucket??Y,$=W.contentType||(Z instanceof Blob||Z instanceof File?Z.type:void 0);$=$||void 0;let G=Z instanceof L0?Z:Z instanceof Blob||Z instanceof File?L0.from(await Z.arrayBuffer()):"",{sdk:K,client:z}=await this.connect();return J?.throwIfAborted(),await z.send(new K.PutObjectCommand({Bucket:Y,Key:Q,Body:G,ContentType:$}),{abortSignal:J}),Q}async delete(W){let J=typeof W==="string"?W:W.name,Z=(typeof W==="string"?void 0:W.bucket)??process.env.BUCKET_NAME;if(!J)throw Error("Object name has to be specified");let{sdk:$,client:Q}=await this.connect();try{await Q.send(new $.DeleteObjectCommand({Bucket:Z,Key:J}))}catch(Y){if(Y?.name==="NoSuchKey"||Y?.$metadata?.httpStatusCode===404)return;throw Y}}async*pages(W,{bucket:J,signal:Z}){let{sdk:$,client:Q}=await this.connect(),Y;do{Z?.throwIfAborted();let G=await Q.send(new $.ListObjectsV2Command({Bucket:J??process.env.BUCKET_NAME,Prefix:W,ContinuationToken:Y}),{abortSignal:Z});yield(G.Contents??[]).map((K)=>({name:K.Key,size:K.Size??0,lastModified:K.LastModified??new Date(0)})),Y=G.IsTruncated?G.NextContinuationToken:void 0}while(Y)}async*objects(W,J={}){for await(let Z of this.pages(W,J))yield*Z}async deletePrefix(W,J={}){o1(W);let Z=J.bucket??process.env.BUCKET_NAME,{sdk:$,client:Q}=await this.connect(),Y=0;for await(let G of this.pages(W,{...J,bucket:Z})){if(G.length===0)continue;J.signal?.throwIfAborted();let z=(await Q.send(new $.DeleteObjectsCommand({Bucket:Z,Delete:{Objects:G.map((X)=>({Key:X.name})),Quiet:!0}}),{abortSignal:J.signal}))?.Errors??[];if(z.length>0){let X=z[0];throw Error(`S3 could not delete ${z.length} object(s) under "${W}", e.g. "${X.Key}": ${X.Code??"unknown"} ${X.Message??""}`.trim())}Y+=G.length}return Y}async list(W){let{sdk:J,client:Z}=await this.connect();return await Z.send(new J.ListObjectsV2Command({Bucket:process.env.BUCKET_NAME,Prefix:W}))}async fetch(W,{signal:J}={}){J?.throwIfAborted();let Z=process.env.BUCKET_NAME,$;if(typeof W==="string")$=W;else Z=W.bucket??Z,$=W.name;if(!$)throw Error("Object name has to be specified");let{sdk:Q,client:Y}=await this.connect();J?.throwIfAborted();let G=await Y.send(new Q.GetObjectCommand({Bucket:Z,Key:$}),{abortSignal:J}),K=f1(G.Body.transformToWebStream(),J);return J?.throwIfAborted(),new Response(K,{headers:{"Content-Type":G.ContentType,"Content-Length":G.ContentLength.toString(),"Cache-Control":"private, max-age=12000, must-revalidate","Last-Modified":G.LastModified?.toUTCString()||"",ETag:G.ETag||""}})}async read(W){let J=typeof W==="string"?{name:W}:W,Z=J.bucket??process.env.BUCKET_NAME,{name:$,range:Q=null}=J;if(!$)throw Error("Object name has to be specified");let{sdk:Y,client:G}=await this.connect(),K;try{K=await G.send(new Y.GetObjectCommand({Bucket:Z,Key:$,Range:Q?i1(Q):void 0}))}catch(M){if(M?.name==="InvalidRange"||M?.$metadata?.httpStatusCode===416)throw new i(await this.size({name:$,bucket:Z}));if(M?.name==="NoSuchKey"||M?.$metadata?.httpStatusCode===404)throw new c($);throw M}let z=K1(K.ContentRange),X=Boolean(z)&&K.$metadata?.httpStatusCode===206,B=z?.total??K.ContentLength??0;return{body:K.Body.transformToWebStream(),start:z?.start??0,end:z?.end??B-1,total:B,partial:X,type:K.ContentType??"application/octet-stream",etag:K.ETag||void 0,lastModified:K.LastModified,name:$}}async size(W){let J=typeof W==="string"?W:W.name,Z=(typeof W==="string"?void 0:W.bucket)??process.env.BUCKET_NAME,{sdk:$,client:Q}=await this.connect();try{return(await Q.send(new $.HeadObjectCommand({Bucket:Z,Key:J}))).ContentLength??0}catch(Y){if(Y?.name==="NotFound"||Y?.$metadata?.httpStatusCode===404)throw new c(J);throw Y}}}import{Buffer as H0}from"buffer";import{Readable as H6}from"stream";function s1(W){return W?.statusCode===404||W?.details?.errorCode==="BlobNotFound"||W?.code==="BlobNotFound"}function U6(W){return W?.statusCode===416||W?.details?.errorCode==="InvalidRange"||W?.code==="InvalidRange"}class U0 extends z1{config;serviceClientPromise=null;constructor(W={}){super();this.config=W}async serviceClient(){if(this.config.serviceClient)return this.config.serviceClient;return this.serviceClientPromise??=(async()=>{let W;try{W=await import("@azure/storage-blob")}catch{throw Error("AzureBlobDriver requires the '@azure/storage-blob' package. Install it with `bun add @azure/storage-blob`, or pass a pre-built `serviceClient`.")}let J=this.config.connectionString??process.env.AZURE_STORAGE_CONNECTION_STRING;if(this.config.url)return new W.BlobServiceClient(this.config.url,this.config.credential);if(J)return W.BlobServiceClient.fromConnectionString(J);throw Error("AzureBlobDriver needs a connection string (AZURE_STORAGE_CONNECTION_STRING), a `url`, or a `serviceClient`.")})(),this.serviceClientPromise}async blob(W,J){if(!W)throw Error("Object name has to be specified");let Z=J??this.config.container??process.env.BUCKET_NAME;if(!Z)throw Error("AzureBlobDriver needs a container name, from `bucket`, the `container` config, or BUCKET_NAME.");return(await this.serviceClient()).getContainerClient(Z).getBlockBlobClient(W)}async put(W,{signal:J}={}){J?.throwIfAborted();let Z,$,Q,Y;if(W instanceof Blob)Z=W,Q=`${Bun.randomUUIDv7()}.${W.type.split("/")[1].split(";")[0]}`,$=W.type;else Z=W.body,Q=W.name,Y=W.bucket,$=W.contentType??(Z instanceof Blob||Z instanceof File?Z.type:void 0);let G=Z instanceof H0?Z:H0.from(await Z.arrayBuffer()),K=await this.blob(Q,Y);return J?.throwIfAborted(),await K.uploadData(G,{blobHTTPHeaders:$?{blobContentType:$}:void 0,abortSignal:J}),Q}async*objects(W,{bucket:J,signal:Z}={}){Z?.throwIfAborted();let $=J??this.config.container??process.env.BUCKET_NAME;if(!$)throw Error("AzureBlobDriver needs a container name, from `bucket`, the `container` config, or BUCKET_NAME.");let Y=(await this.serviceClient()).getContainerClient($);for await(let G of Y.listBlobsFlat({prefix:W}))Z?.throwIfAborted(),yield{name:G.name,size:G.properties?.contentLength??0,lastModified:G.properties?.lastModified??new Date(0)}}async list(W){let J=this.config.container??process.env.BUCKET_NAME,$=(await this.serviceClient()).getContainerClient(J),Q=[];for await(let Y of $.listBlobsFlat({prefix:W}))Q.push(Y.name);return Q}async fetch(W,{signal:J}={}){J?.throwIfAborted();let Z=await this.download(typeof W==="string"?{name:W}:{name:W.name,bucket:W.bucket},J);return new Response(Z.body,{headers:{"Content-Type":Z.type,"Content-Length":String(Z.total),"Cache-Control":"private, max-age=12000, must-revalidate","Last-Modified":Z.lastModified?.toUTCString()??"",ETag:Z.etag??""}})}async read(W){return this.download(typeof W==="string"?{name:W}:W)}async download(W,J){let{name:Z,bucket:$,range:Q=null}=W,Y=await this.blob(Z,$);J?.throwIfAborted();let G,K,z=Q?.kind==="suffix"||Q?.kind==="offset"&&Q.end===null&&Q.start===0;if(Q&&z){let H=await this.size({name:Z,bucket:$}),m=a1(Q,H);if(!m)throw new i(H);G=m.start,K=m.length}else if(Q?.kind==="offset")G=Q.start,K=Q.end===null?void 0:Q.end-Q.start+1;let X;try{X=await Y.download(G,K,J?{abortSignal:J}:void 0)}catch(H){if(U6(H))throw new i(await this.size({name:Z,bucket:$}));if(s1(H))throw new c(Z);throw H}let B=K1(X.contentRange),M=Boolean(B),D=B?.total??X.contentLength??0,S=await S6(X);if(S instanceof ReadableStream)S=f1(S,J);return J?.throwIfAborted(),{body:S,start:B?.start??0,end:B?.end??D-1,total:D,partial:M,type:X.contentType??"application/octet-stream",etag:X.etag||void 0,lastModified:X.lastModified,name:Z}}async size(W){let J=typeof W==="string"?W:W.name,Z=typeof W==="string"?void 0:W.bucket,$=await this.blob(J,Z);try{return(await $.getProperties()).contentLength??0}catch(Q){if(s1(Q))throw new c(J);throw Q}}async delete(W){let J=typeof W==="string"?W:W.name,Z=typeof W==="string"?void 0:W.bucket,$=await this.blob(J,Z);try{await $.delete()}catch(Q){if(s1(Q))return;throw Q}}}async function S6(W){if(W.blobBody)return await W.blobBody;if(W.readableStreamBody)return H6.toWeb(W.readableStreamBody);return null}function O6(W){return W}var R6=`
 local currentKey = KEYS[1]
 local previousKey = KEYS[2]
 local limit = tonumber(ARGV[1])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gemi",
-  "version": "0.118.0",
+  "version": "0.119.0",
   "private": false,
   "license": "MIT",
   "author": "Enes Tufekci <enes@gemijs.dev>",

package/dist/chunk-k31qfe7a.js

@@ -1,71 +0,0 @@
-// @bun
-import{eh as R}from"./chunk-y09r0wsw.js";import{Mh as L}from"./chunk-xx3zvc3g.js";import{ri as T}from"./chunk-hr1r3g0d.js";import{Ri as D}from"./chunk-g5ppst76.js";class X{rows=new Map;async find(j,B){for(let G of this.rows.values())if(G.userId===j&&G.provider===B)return{...G};return null}async list(j){return[...this.rows.values()].filter((B)=>B.userId===j).map((B)=>({...B}))}async save(j,B,G){let K=await this.find(j,B),J=new Date,Q={id:K?.id??Bun.randomUUIDv7(),userId:j,provider:B,...P(G),needsReconnect:!1,revision:(K?.revision??0)+1,createdAt:K?.createdAt??J,updatedAt:J};return this.rows.set(Q.id,Q),{...Q}}async updateTokens(j,B,G){let K=this.rows.get(j);if(!K||K.revision!==B)return null;let J={...K,...P(G),needsReconnect:!1,revision:B+1,updatedAt:new Date};return this.rows.set(j,J),{...J}}async markNeedsReconnect(j){let B=this.rows.get(j);if(B)this.rows.set(j,{...B,needsReconnect:!0,updatedAt:new Date})}async delete(j){this.rows.delete(j)}}class F{encrypter;table;sql;dialect;constructor(j,B,G={}){this.encrypter=B;let K=G.table??"gemi_oauth_connections";if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(K))throw Error(`The connections table name "${K}" is not a plain identifier.`);this.table=K,this.sql=j.sql,this.dialect=j.dialect}async createTable(){for(let j of A(this.dialect,this.table))await this.sql.unsafe(j)}async find(j,B){let G=this.sql,K=await G`
-      SELECT * FROM ${this.name(G)} WHERE user_id = ${j} AND provider = ${B}
-    `;return K[0]?this.decode(K[0]):null}async list(j){let B=this.sql;return(await B`
-      SELECT * FROM ${this.name(B)} WHERE user_id = ${j} ORDER BY provider
-    `).map((K)=>this.decode(K))}async save(j,B,G){let K=this.sql,J=this.encode(G),Q=Date.now(),V=async()=>x(await K`
-          UPDATE ${this.name(K)}
-          SET provider_account_id = ${J.providerAccountId}, scopes = ${J.scopes},
-              access_token = ${J.accessToken}, refresh_token = ${J.refreshToken},
-              token_type = ${J.tokenType}, expires_at = ${J.expiresAt},
-              needs_reconnect = 0, revision = revision + 1, updated_at = ${Q}
-          WHERE user_id = ${j} AND provider = ${B}
-        `);if(await V()===0)try{await K`
-          INSERT INTO ${this.name(K)} (id, user_id, provider, provider_account_id, scopes,
-            access_token, refresh_token, token_type, expires_at, needs_reconnect, revision,
-            created_at, updated_at)
-          VALUES (${Bun.randomUUIDv7()}, ${j}, ${B}, ${J.providerAccountId},
-            ${J.scopes}, ${J.accessToken}, ${J.refreshToken}, ${J.tokenType},
-            ${J.expiresAt}, 0, 1, ${Q}, ${Q})
-        `}catch(W){if(await V()===0)throw W}let Z=await this.find(j,B);if(!Z)throw Error("The OAuth connection vanished while it was being saved.");return Z}async updateTokens(j,B,G){let K=this.sql,J=this.encode(G),Q=await K`
-      UPDATE ${this.name(K)}
-      SET provider_account_id = COALESCE(${J.providerAccountId}, provider_account_id),
-          scopes = ${J.scopes}, access_token = ${J.accessToken},
-          refresh_token = ${J.refreshToken}, token_type = ${J.tokenType},
-          expires_at = ${J.expiresAt}, needs_reconnect = 0, revision = revision + 1,
-          updated_at = ${Date.now()}
-      WHERE id = ${j} AND revision = ${B}
-    `;if(x(Q)===0)return null;let V=await K`SELECT * FROM ${this.name(K)} WHERE id = ${j}`;return V[0]?this.decode(V[0]):null}async markNeedsReconnect(j){let B=this.sql;await B`UPDATE ${this.name(B)} SET needs_reconnect = 1, updated_at = ${Date.now()} WHERE id = ${j}`}async delete(j){let B=this.sql;await B`DELETE FROM ${this.name(B)} WHERE id = ${j}`}async rotateEncryption(j={}){let B=this.sql,G=this.encrypter(),K=await B`
-      SELECT id, access_token, refresh_token, revision FROM ${this.name(B)} ORDER BY id
-    `,J=0;for(let Q of K){let V=(W)=>typeof W==="string"&&G.needsReencryption(W);if(!V(Q.access_token)&&!V(Q.refresh_token))continue;if(J+=1,j.dryRun)continue;let Z=(W)=>W===null?null:G.encrypt(G.decrypt(W));await B`
-        UPDATE ${this.name(B)}
-        SET access_token = ${Z(Q.access_token)}, refresh_token = ${Z(Q.refresh_token)},
-            revision = revision + 1
-        WHERE id = ${Q.id} AND revision = ${Number(Q.revision)}
-      `}return{scanned:K.length,rotated:J}}encode(j){let B=this.encrypter();return{providerAccountId:j.providerAccountId,scopes:j.scopes.join(" "),accessToken:B.encrypt(j.accessToken),refreshToken:j.refreshToken===null?null:B.encrypt(j.refreshToken),tokenType:j.tokenType,expiresAt:j.expiresAt===null?null:j.expiresAt.getTime()}}decode(j){let B=this.encrypter();return{id:String(j.id),userId:String(j.user_id),provider:String(j.provider),providerAccountId:j.provider_account_id===null?null:String(j.provider_account_id),scopes:String(j.scopes??"").split(" ").filter(Boolean),accessToken:B.decrypt(String(j.access_token)),refreshToken:j.refresh_token===null?null:B.decrypt(String(j.refresh_token)),tokenType:j.token_type===null?null:String(j.token_type),expiresAt:j.expires_at===null?null:new Date(Number(j.expires_at)),needsReconnect:Number(j.needs_reconnect)===1,revision:Number(j.revision),createdAt:new Date(Number(j.created_at)),updatedAt:new Date(Number(j.updated_at))}}get mysql(){return this.dialect==="mysql"||this.dialect==="mariadb"}name(j){return j.unsafe(this.mysql?`\`${this.table}\``:`"${this.table}"`)}}function P(j){return{providerAccountId:j.providerAccountId,scopes:[...j.scopes],accessToken:j.accessToken,refreshToken:j.refreshToken,tokenType:j.tokenType,expiresAt:j.expiresAt}}function x(j){let B=j;return Math.max(Number(B.count??0),Number(B.affectedRows??0))}function A(j,B){if(j==="mysql"||j==="mariadb")return[`CREATE TABLE IF NOT EXISTS \`${B}\` (
-    \`id\` VARCHAR(191) NOT NULL,
-    \`user_id\` VARCHAR(191) NOT NULL,
-    \`provider\` VARCHAR(191) NOT NULL,
-    \`provider_account_id\` VARCHAR(191) NULL,
-    \`scopes\` TEXT NOT NULL,
-    \`access_token\` TEXT NOT NULL,
-    \`refresh_token\` TEXT NULL,
-    \`token_type\` VARCHAR(191) NULL,
-    \`expires_at\` BIGINT NULL,
-    \`needs_reconnect\` INTEGER NOT NULL DEFAULT 0,
-    \`revision\` BIGINT NOT NULL DEFAULT 0,
-    \`created_at\` BIGINT NOT NULL,
-    \`updated_at\` BIGINT NOT NULL,
-
-    UNIQUE INDEX \`${B}_user_id_provider_key\`(\`user_id\`, \`provider\`),
-    PRIMARY KEY (\`id\`)
-) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci`];let G=j==="sqlite"?'"id" TEXT NOT NULL PRIMARY KEY,':'"id" TEXT NOT NULL,',K=j==="sqlite"?"":`,
-
-    CONSTRAINT "${B}_pkey" PRIMARY KEY ("id")`;return[`CREATE TABLE IF NOT EXISTS "${B}" (
-    ${G}
-    "user_id" TEXT NOT NULL,
-    "provider" TEXT NOT NULL,
-    "provider_account_id" TEXT,
-    "scopes" TEXT NOT NULL,
-    "access_token" TEXT NOT NULL,
-    "refresh_token" TEXT,
-    "token_type" TEXT,
-    "expires_at" BIGINT,
-    "needs_reconnect" INTEGER NOT NULL DEFAULT 0,
-    "revision" BIGINT NOT NULL DEFAULT 0,
-    "created_at" BIGINT NOT NULL,
-    "updated_at" BIGINT NOT NULL${K}
-)`,`CREATE UNIQUE INDEX IF NOT EXISTS "${B}_user_id_provider_key" ON "${B}"("user_id", "provider")`]}class Y extends Error{code;status;providerError;constructor(j,B,G={}){super(B,G.cause!==void 0?{cause:G.cause}:void 0);this.code=j;this.name="OAuthConnectionError",this.status=G.status,this.providerError=G.providerError}}class _ extends Y{provider;constructor(j,B={}){super("reconnect_required",`The ${j} connection needs to be reconnected: its tokens were refused and could not be refreshed.`,B);this.provider=j;this.name="OAuthReconnectRequiredError"}}class O{config;constructor(j){for(let B of["authorizeUrl","tokenUrl"])H(B,j[B]);if(j.revokeUrl!==void 0)H("revokeUrl",j.revokeUrl);if(j.apiBaseUrl===void 0||j.apiBaseUrl===null||j.apiBaseUrl==="")throw Error(`OAuthConnectionProvider: apiBaseUrl is required. Set it to the provider's API origin (e.g. apiBaseUrl: "https://api.figma.com"); connection.fetch only sends the token there.`);H("apiBaseUrl",j.apiBaseUrl),this.config={scopeSeparator:" ",clientAuth:"body",pkce:!0,authorizationParams:{},refreshLeewaySeconds:60,...j}}authorizationUrl(j){let B=new URL(this.config.authorizeUrl),G={...this.config.authorizationParams,response_type:"code",client_id:this.config.clientId,redirect_uri:j.redirectUri,scope:this.config.scopes.join(this.config.scopeSeparator),state:j.state};if(this.config.pkce)G.code_challenge=j.codeChallenge,G.code_challenge_method="S256";for(let[K,J]of Object.entries(G))B.searchParams.set(K,J);return B.toString()}exchangeCode(j){let B=new URLSearchParams({grant_type:"authorization_code",code:j.code,redirect_uri:j.redirectUri});if(this.config.pkce)B.set("code_verifier",j.codeVerifier);return this.tokenRequest(B,{scopes:this.config.scopes,refreshToken:null,phase:"exchange"})}refresh(j,B){let G=new URLSearchParams({grant_type:"refresh_token",refresh_token:j});return this.tokenRequest(G,{scopes:B,refreshToken:j,phase:"refresh"})}async revoke(j,B){if(!this.config.revokeUrl)throw new Y("revoke_unsupported","This provider has no revokeUrl configured. Use disconnect() to forget the tokens locally.");let G=new URLSearchParams({token:j,token_type_hint:B}),K;try{K=await fetch(this.config.revokeUrl,this.post(G))}catch(J){throw new Y("revoke_failed","The revocation request failed.",{cause:J})}if(!K.ok)throw new Y("revoke_failed",`The provider refused the revocation (HTTP ${K.status}).`,{status:K.status})}post(j){let B={"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"};if(this.config.clientAuth==="basic"){let G=`${encodeURIComponent(this.config.clientId)}:${encodeURIComponent(this.config.clientSecret)}`;B.Authorization=`Basic ${Buffer.from(G).toString("base64")}`}else j.set("client_id",this.config.clientId),j.set("client_secret",this.config.clientSecret);return{method:"POST",headers:B,body:j.toString(),redirect:"error"}}async tokenRequest(j,B){let G=B.phase==="exchange"?"exchange_failed":"refresh_failed",K;try{K=await fetch(this.config.tokenUrl,this.post(j))}catch(W){throw new Y(G,"The token request failed.",{cause:W})}let J=await K.json().catch(()=>({}));if(!K.ok||typeof J.access_token!=="string"||J.access_token===""){let W=typeof J.error==="string"&&/^[a-z0-9_]{1,64}$/.test(J.error)?J.error:void 0;throw new Y(G,`The token endpoint refused the ${B.phase==="exchange"?"code":"refresh token"} (HTTP ${K.status}${W?`, ${W}`:""}).`,{status:K.status,providerError:W})}let Q=Number(J.expires_in),V=typeof J.scope==="string"?J.scope:void 0,Z=J.user_id??J.account_id;return{accessToken:J.access_token,refreshToken:typeof J.refresh_token==="string"&&J.refresh_token!==""?J.refresh_token:B.refreshToken,tokenType:typeof J.token_type==="string"?J.token_type:null,expiresAt:Number.isFinite(Q)&&Q>0?new Date(Date.now()+Q*1000):null,scopes:V!==void 0?V.split(/[\s,]+/).filter(Boolean):B.scopes,providerAccountId:typeof Z==="string"||typeof Z==="number"?String(Z):null}}}function H(j,B){let G;try{G=new URL(String(B))}catch{G=void 0}if(!G||G.protocol!=="https:"&&!(G.protocol==="http:"&&U(G.hostname)))throw Error(`OAuthConnectionProvider: ${j} must be an https URL (http only for localhost), got ${JSON.stringify(B)}.`)}function U(j){return j==="localhost"||j==="127.0.0.1"||j==="[::1]"||j==="::1"}class E{options;static token="auth.connections";resolvedStore;refreshing=new Map;fakes;fakeStore;fakeRequests=[];constructor(j){this.options=j}get providers(){return this.options.providers}get store(){if(this.fakeStore)return this.fakeStore;if(!this.resolvedStore){let j=this.options.store;this.resolvedStore=typeof j==="function"?j():j??new F(D(T).connection(),()=>R())}return this.resolvedStore}provider(j){let B=this.options.providers[j];if(!B){let G=Object.keys(this.options.providers);throw new Y("unknown_provider",`No OAuth connection provider "${j}" in auth.connections`+(G.length>0?` (configured: ${G.join(", ")}).`:" (none are configured)."))}return B}async for(j,B){this.provider(B);let G=await this.store.find(z(j),B);return G?new N(this,G):null}async list(j){return(await this.store.list(z(j))).filter((G)=>(G.provider in this.options.providers)).map((G)=>new N(this,G))}async save(j,B,G){let K=this.provider(B),J=await this.store.save(z(j),B,{refreshToken:null,tokenType:null,expiresAt:null,providerAccountId:null,scopes:K.config.scopes,...G});return new N(this,J)}fake(j={}){return this.fakes=new Map(Object.entries(j)),this.fakeStore=new X,this.fakeRequests.length=0,this}restore(){this.fakes=void 0,this.fakeStore=void 0,this.fakeRequests.length=0}get faked(){return this.fakes!==void 0}async send(j,B){if(!this.fakes)return fetch(B);this.fakeRequests.push(B.clone());let G=this.fakes.get(j);if(!G)throw Error(`Connections.fake() has no handler for "${j}". Pass one: Connections.fake({ ${j}: (req) => ... }).`);return G(B)}refresh(j){let B=this.refreshing.get(j.id);if(B)return B;let G=this.withLock(j.id,()=>this.refreshOnce(j)).finally(()=>this.refreshing.delete(j.id));return this.refreshing.set(j.id,G),G}async refreshOnce(j){let B=await this.store.find(j.userId,j.provider);if(!B||B.id!==j.id)throw new _(j.provider);if(B.revision!==j.revision&&!B.needsReconnect)return B;if(B.needsReconnect)throw new _(j.provider);let G=this.provider(B.provider);if(this.faked||B.refreshToken===null){if(this.faked)return B;throw await this.store.markNeedsReconnect(B.id),new _(B.provider)}let K;try{K=await G.refresh(B.refreshToken,B.scopes)}catch(V){if(V instanceof Y&&V.status!==void 0&&V.status>=400&&V.status<500)throw await this.store.markNeedsReconnect(B.id),new _(B.provider,{cause:V,status:V.status,providerError:V.providerError});throw V}let J=await this.store.updateTokens(B.id,B.revision,K);if(J)return J;let Q=await this.store.find(B.userId,B.provider);if(!Q)throw new _(B.provider);return Q}async withLock(j,B){let G=D();if(this.faked||!G.bound(L))return B();let K=await G.make(L).run(`gemi:oauth-connection:${j}`,{ttl:30000,wait:20000},()=>B());if(!K.acquired)throw new Y("refresh_failed","Timed out waiting for another refresh of this connection to finish.");return K.value}}class N{manager;record;constructor(j,B){this.manager=j;this.record=B}get provider(){return this.record.provider}get userId(){return this.record.userId}get providerAccountId(){return this.record.providerAccountId}get scopes(){return this.record.scopes}get expiresAt(){return this.record.expiresAt}get needsReconnect(){return this.record.needsReconnect}get connectedAt(){return this.record.createdAt}hasScopes(...j){return j.every((B)=>this.record.scopes.includes(B))}async fetch(j,B={}){let G=this.resolveUrl(j),K=await this.current(),J=await this.send(G,B,K.accessToken);if(J.response.status!==401||!J.authorized||B.body instanceof ReadableStream)return J.response;await J.response.body?.cancel().catch(()=>{});let Q=await this.refreshFrom(K);return(await this.send(G,B,Q.accessToken)).response}async accessToken(){return(await this.current()).accessToken}async refresh(){await this.refreshFrom(this.record)}async revoke(){if(!this.manager.faked){let j=this.manager.provider(this.record.provider);if(this.record.refreshToken!==null)await j.revoke(this.record.refreshToken,"refresh_token");else await j.revoke(this.record.accessToken,"access_token")}await this.manager.store.delete(this.record.id)}async disconnect(){await this.manager.store.delete(this.record.id)}toJSON(){return{provider:this.provider,providerAccountId:this.providerAccountId,scopes:[...this.scopes],expiresAt:this.expiresAt,needsReconnect:this.needsReconnect,connectedAt:this.connectedAt}}[Symbol.for("nodejs.util.inspect.custom")](){return{ProviderConnection:this.toJSON()}}async current(){if(this.record.needsReconnect)throw new _(this.record.provider);let j=this.manager.provider(this.record.provider).config.refreshLeewaySeconds*1000,B=this.record.expiresAt?.getTime();if(B!==void 0&&B-Date.now()<=j)return this.refreshFrom(this.record);return this.record}async refreshFrom(j){try{this.record=await this.manager.refresh(j)}catch(B){if(B instanceof _)this.record={...this.record,needsReconnect:!0};throw B}return this.record}resolveUrl(j){let B=this.manager.provider(this.record.provider).config.apiBaseUrl,G;try{G=new URL(String(j),B)}catch{throw new Y("forbidden_url",`connection.fetch was given ${JSON.stringify(String(j))}, which is not a URL.`)}if(G.origin!==new URL(B).origin)throw new Y("forbidden_url",`connection.fetch only sends the ${this.record.provider} token to ${new URL(B).origin} (apiBaseUrl), not to ${G.origin}.`);if(G.protocol!=="https:"&&!(G.protocol==="http:"&&U(G.hostname)))throw new Y("forbidden_url",`connection.fetch only sends a token over https, not to ${G.origin}.`);return G}async send(j,B,G){let K=j,J=(B.method??"GET").toUpperCase(),Q=B.body,V=!0;if(B.redirect==="manual"||B.redirect==="error")return{response:await this.manager.send(this.record.provider,this.request(K,B,J,Q,G)),authorized:V};for(let Z=0;;Z++){let W=this.request(K,{...B,redirect:"manual"},J,Q,V?G:null),$=await this.manager.send(this.record.provider,W),M=$.headers.get("location");if(!C.has($.status)||M===null||Z>=5)return{response:$,authorized:V};await $.body?.cancel().catch(()=>{});let S=new URL(M,K);if(S.origin!==K.origin)V=!1;if($.status===303||($.status===301||$.status===302)&&J==="POST")J="GET",Q=void 0;K=S}}request(j,B,G,K,J){let Q=new Headers(B.headers);if(J===null)Q.delete("authorization");else Q.set("Authorization",`Bearer ${J}`);return new Request(j,{...B,method:G,body:K,headers:Q})}}var C=new Set([301,302,303,307,308]);function z(j){let B=typeof j==="object"&&j!==null?j.id:j;if(B===void 0||B===null||B==="")throw TypeError("An OAuth connection belongs to a user: pass the user (or its id).");return String(B)}
-export{X as Pg,F as Qg,Y as Rg,_ as Sg,O as Tg,E as Ug,N as Vg};
-
-//# debugId=7D5DD820045F8F3E64756E2164756E21