mindoodb 0.0.84 → 0.0.86

package/dist/cloudflare/MindooServerObject.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The server-wide Durable Object (one instance, named "server").
+ *
+ * It plays the role of the Node server's data directory minus the entry
+ * stores: `config.json` and its backups, the trusted-servers list, the server
+ * key bag with every tenant's `$publicinfos` key, and the tenant configs. It
+ * serves `/system/*` and the discovery endpoints, and hands each tenant's
+ * state (config + keys) to the database objects that serve the tenant.
+ */
+import type { DurableObjectState, MindooCloudflareEnv } from "./types";
+export declare class MindooServerObject {
+    private readonly ctx;
+    private readonly env;
+    private readonly settings;
+    private readonly dataStore;
+    private readonly tenantManager;
+    private readonly capabilityMatcher;
+    private readonly systemAdminAuth;
+    private readonly core;
+    private serverConfig;
+    /** Change events of all tenants: peer replication and the peer event feed listen. */
+    private readonly eventBus;
+    private cluster;
+    private clusterInit;
+    private readonly localStores;
+    constructor(ctx: DurableObjectState, env: MindooCloudflareEnv);
+    private get autoSync();
+    /**
+     * The cluster of this server: peer sessions and replicators, as on Node.
+     * Local stores are the database objects' stores, reached by store RPC.
+     * Replication runs on the cron tick and on reported writes instead of on a
+     * long-lived event stream to each peer.
+     */
+    private getCluster;
+    private localStore;
+    /** Start replication when `config.json` enables it (`cluster.autoSync`). */
+    private startClusterIfEnabled;
+    /**
+     * Cron tick: one replication pass with every peer, within a time budget so
+     * that a large first mirror stays inside the per-request CPU and subrequest
+     * limits. What the budget does not cover continues on the next tick.
+     */
+    private tick;
+    /** A database object accepted a write: tell peers (feed) and push to them. */
+    private localChange;
+    fetch(request: Request): Promise<Response>;
+    private route;
+    private parse;
+    /**
+     * Config and `$publicinfos` keys of one tenant, for the objects serving its
+     * databases. Only reachable from inside the Worker.
+     */
+    private tenantState;
+    /** `/system/*` with the routing and guards of the Node server's system router. */
+    private system;
+    private clusterHandler;
+    /** `/system/peer/*`: the server-to-server protocol, authenticated by peer tokens. */
+    private peer;
+    /** Change feed for a peer (Node peers keep it open to pull our writes promptly). */
+    private peerEventStream;
+    private systemHandler;
+}
+//# sourceMappingURL=MindooServerObject.d.ts.map

package/dist/cloudflare/MindooServerObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MindooServerObject.d.ts","sourceRoot":"","sources":["../../src/cloudflare/MindooServerObject.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoDH,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AA0EvE,qBAAa,kBAAkB;IAe3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAftB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyB;IACzD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,YAAY,CAAe;IACnC,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAC/C,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,WAAW,CAAwC;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4C;gBAGrD,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,mBAAmB;IAsE3C,OAAO,KAAK,QAAQ,GAEnB;IAED;;;;;OAKG;IACH,OAAO,CAAC,UAAU;IA0ClB,OAAO,CAAC,UAAU;IAgBlB,4EAA4E;YAC9D,qBAAqB;IAQnC;;;;OAIG;YACW,IAAI;IAalB,8EAA8E;YAChE,WAAW;IAUnB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;YAUlC,KAAK;YA6BL,KAAK;IAWnB;;;OAGG;YACW,WAAW;IAsBzB,kFAAkF;YACpE,MAAM;IA6CpB,OAAO,CAAC,cAAc;IAqCtB,qFAAqF;YACvE,IAAI;IAuClB,oFAAoF;IACpF,OAAO,CAAC,eAAe;IA+BvB,OAAO,CAAC,aAAa;CAkCtB"}

package/dist/cloudflare/MindooServerObject.js

@@ -0,0 +1,521 @@
+"use strict";
+/**
+ * The server-wide Durable Object (one instance, named "server").
+ *
+ * It plays the role of the Node server's data directory minus the entry
+ * stores: `config.json` and its backups, the trusted-servers list, the server
+ * key bag with every tenant's `$publicinfos` key, and the tenant configs. It
+ * serves `/system/*` and the discovery endpoints, and hands each tenant's
+ * state (config + keys) to the database objects that serve the tenant.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MindooServerObject = void 0;
+const base64_1 = require("../core/utils/base64");
+const MindooDBServerCore_1 = require("../server/http/MindooDBServerCore");
+const TenantManager_1 = require("../server/TenantManager");
+const CapabilityMatcher_1 = require("../server/CapabilityMatcher");
+const SystemAdminAuth_1 = require("../server/SystemAdminAuth");
+const DeviceDiscoveryService_1 = require("../server/DeviceDiscoveryService");
+const SyncEventBus_1 = require("../server/SyncEventBus");
+const serverConfig_1 = require("../server/serverConfig");
+const validation_1 = require("../server/validation");
+const rateLimits_1 = require("../server/rateLimits");
+const ClusterManager_1 = require("../server/peer/ClusterManager");
+const clusterHttp_1 = require("../server/peer/clusterHttp");
+const MindooDBServerCore_2 = require("../server/http/MindooDBServerCore");
+const storeRpc_1 = require("./storeRpc");
+const DurableObjectSql_1 = require("./DurableObjectSql");
+const WorkersCryptoAdapter_1 = require("./WorkersCryptoAdapter");
+const http_1 = require("./http");
+const host_1 = require("./host");
+const CONFIG_KEY = "config.json";
+const CONFIG_BACKUP_DIR = "config-backups";
+/** `config.json` and its backups as documents of the server object. */
+class StoredServerConfigRepository {
+    constructor(dataStore) {
+        this.dataStore = dataStore;
+    }
+    listBackups() {
+        const rows = this.dataStore.listFiles(CONFIG_BACKUP_DIR);
+        return rows
+            .filter((file) => (0, serverConfig_1.isConfigBackupFilename)(file))
+            .map((file) => ({ file, createdAt: (0, serverConfig_1.parseConfigBackupTimestamp)(file) }))
+            .sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    }
+    loadBackup(backupFile) {
+        if (!(0, serverConfig_1.isConfigBackupFilename)(backupFile)) {
+            throw new Error(`Invalid config backup filename: ${backupFile}`);
+        }
+        const raw = this.dataStore.readText(`${CONFIG_BACKUP_DIR}/${backupFile}`);
+        if (raw === null) {
+            throw new Error(`Config backup not found: ${backupFile}`);
+        }
+        return (0, serverConfig_1.validateServerConfig)(JSON.parse(raw), backupFile);
+    }
+    replace(config) {
+        const current = this.dataStore.readText(CONFIG_KEY);
+        let backupFile = null;
+        if (current !== null) {
+            backupFile = `config.${new Date().toISOString().replace(/:/g, "-")}.json`;
+            this.dataStore.writeText(`${CONFIG_BACKUP_DIR}/${backupFile}`, current);
+        }
+        this.dataStore.writeText(CONFIG_KEY, JSON.stringify(config, null, 2));
+        return backupFile;
+    }
+}
+/**
+ * Wall-time budget of one cron tick's replication pass. Each pass starts new
+ * store pairs only within it; cron invocations may run 15 minutes, and the
+ * CPU limit is raised to 5 minutes in wrangler.jsonc (`limits.cpu_ms`).
+ */
+const CLUSTER_TICK_BUDGET_MS = 4 * 60 * 1000;
+/** Most recent audit records kept; older ones are dropped. */
+const MAX_AUDIT_RECORDS = 10000;
+/** The cluster audit log as rows of the server object's SQLite. */
+class SqlClusterAuditStorage {
+    constructor(sql) {
+        this.sql = sql;
+        sql.exec("CREATE TABLE IF NOT EXISTS mindoo_cluster_audit (seq INTEGER PRIMARY KEY AUTOINCREMENT, line TEXT NOT NULL)");
+    }
+    appendLine(line) {
+        this.sql.exec("INSERT INTO mindoo_cluster_audit(line) VALUES(?)", line);
+        this.sql.exec("DELETE FROM mindoo_cluster_audit WHERE seq <= (SELECT MAX(seq) FROM mindoo_cluster_audit) - ?", MAX_AUDIT_RECORDS);
+    }
+    readLines() {
+        return this.sql
+            .exec("SELECT line FROM mindoo_cluster_audit ORDER BY seq")
+            .toArray()
+            .map((row) => row.line);
+    }
+}
+class MindooServerObject {
+    constructor(ctx, env) {
+        this.ctx = ctx;
+        this.env = env;
+        /** Change events of all tenants: peer replication and the peer event feed listen. */
+        this.eventBus = new SyncEventBus_1.SyncEventBus();
+        this.cluster = null;
+        this.clusterInit = null;
+        this.localStores = new Map();
+        this.settings = (0, host_1.createHostSettings)(env);
+        this.dataStore = new DurableObjectSql_1.DurableObjectServerDataStore(ctx.storage.sql);
+        (0, host_1.seedServerIdentity)(this.dataStore, env);
+        const storedConfig = this.dataStore.readText(CONFIG_KEY);
+        this.serverConfig = storedConfig !== null
+            ? (0, serverConfig_1.validateServerConfig)(JSON.parse(storedConfig), CONFIG_KEY)
+            : env.MINDOODB_SERVER_CONFIG
+                ? (0, serverConfig_1.validateServerConfig)(JSON.parse(env.MINDOODB_SERVER_CONFIG), "MINDOODB_SERVER_CONFIG")
+                : { capabilities: {} };
+        const cryptoAdapter = new WorkersCryptoAdapter_1.WorkersCryptoAdapter();
+        this.tenantManager = new TenantManager_1.TenantManager({
+            dataStore: this.dataStore,
+            cryptoAdapter,
+            serverPassword: env.MINDOODB_SERVER_PASSWORD,
+            storeProvider: {
+                createTenantStores: () => ({
+                    getStore: () => {
+                        throw new Error("The server object holds no entry stores");
+                    },
+                }),
+                listDatabases: () => [],
+                // The tenant's databases live in their own objects; the tenant's
+                // directory object knows them and wipes them.
+                removeTenantStores: async (tenantId) => {
+                    const response = await (0, host_1.databaseObject)(env, tenantId, "directory").fetch(`${http_1.INTERNAL_ORIGIN}/internal/wipe`, { method: "POST", headers: (0, host_1.internalHeaders)(tenantId, "directory") });
+                    if (!response.ok) {
+                        throw new Error(`Wiping tenant ${tenantId} failed with HTTP ${response.status}`);
+                    }
+                },
+            },
+        });
+        this.capabilityMatcher = new CapabilityMatcher_1.CapabilityMatcher(this.serverConfig);
+        this.systemAdminAuth = new SystemAdminAuth_1.SystemAdminAuthService(cryptoAdapter, this.serverConfig, {
+            isTenantAdminSigningKey: (publicsignkey) => this.tenantManager.isRegisteredTenantAdminSigningKey(publicsignkey),
+        });
+        this.core = new MindooDBServerCore_1.MindooDBServerCore({
+            tenantManager: this.tenantManager,
+            systemAdminAuth: this.systemAdminAuth,
+            capabilityMatcher: this.capabilityMatcher,
+            deviceDiscovery: new DeviceDiscoveryService_1.DeviceDiscoveryService(this.tenantManager, cryptoAdapter),
+            syncEvents: new SyncEventBus_1.SyncEventBus(),
+            configRepository: new StoredServerConfigRepository(this.dataStore),
+            getServerConfig: () => this.serverConfig,
+            reloadConfig: (config) => {
+                this.serverConfig = config;
+                this.capabilityMatcher.reload(config);
+                this.systemAdminAuth.reloadPrincipals(config);
+            },
+            tsaProviders: this.settings.tsaProviders,
+            jsonBodyLimit: this.settings.jsonBodyLimit,
+            allowInsecureSyncUrls: this.settings.allowInsecureSyncUrls,
+            runInBackground: (task) => ctx.waitUntil(task),
+            cluster: {
+                mirrorsForTenant: (tenantId) => this.cluster?.mirrorsForTenant(tenantId) ?? [],
+                syncReplicators: () => this.cluster?.syncReplicators(),
+                resolvePeerName: async (token) => (await this.getCluster()).auth.validateToken(token).then((p) => p?.sub),
+            },
+        });
+    }
+    // ==================== Peer replication ====================
+    get autoSync() {
+        return this.serverConfig.cluster?.autoSync === true;
+    }
+    /**
+     * The cluster of this server: peer sessions and replicators, as on Node.
+     * Local stores are the database objects' stores, reached by store RPC.
+     * Replication runs on the cron tick and on reported writes instead of on a
+     * long-lived event stream to each peer.
+     */
+    getCluster() {
+        if (this.cluster)
+            return Promise.resolve(this.cluster);
+        this.clusterInit ?? (this.clusterInit = (0, host_1.derivePeerJwtSecret)(this.env).then((peerJwtSecret) => {
+            const env = this.env;
+            const tenantManager = this.tenantManager;
+            this.cluster = new ClusterManager_1.ClusterManager({
+                cryptoAdapter: tenantManager.getCryptoAdapter(),
+                auditStorage: new SqlClusterAuditStorage(this.ctx.storage.sql),
+                eventBus: this.eventBus,
+                peerJwtSecret,
+                liveEventStream: false,
+                // 128 MB per isolate: one small batch in flight (attachment chunks are
+                // up to 256 KB, so a batch holds at most ~4 MB plus its copies).
+                transferLimits: { maxConcurrentBatches: 1, docsBatchSize: 100, attachmentsBatchSize: 16 },
+                localRole: this.serverConfig.cluster?.role,
+                listTrustedServers: () => tenantManager.listTrustedServers(),
+                localServerName: () => tenantManager.getServerPublicInfo()?.name ?? null,
+                localSigningPublicKey: () => tenantManager.getServerPublicInfo()?.signingPublicKey ?? null,
+                getSigningKey: async () => (await tenantManager.getWitnessSigner())?.signingPrivateKey,
+                getEncryptionKey: () => tenantManager.getServerEncryptionPrivateKey(),
+                listTenants: () => tenantManager.listTenants(),
+                listDatabases: async (tenantId) => {
+                    const response = await (0, host_1.databaseObject)(env, tenantId, "directory").fetch(`${http_1.INTERNAL_ORIGIN}/internal/databases`, { headers: (0, host_1.internalHeaders)(tenantId, "directory") });
+                    if (!response.ok)
+                        return ["directory"];
+                    return (await response.json()).databases;
+                },
+                getLocalStore: async (tenantId, dbId, storeKind) => this.localStore(tenantId, dbId, storeKind),
+                onDirectoryPulled: async (tenantId) => {
+                    await (0, host_1.databaseObject)(env, tenantId, "directory").fetch(`${http_1.INTERNAL_ORIGIN}/internal/directory/announce`, { method: "POST", headers: (0, host_1.internalHeaders)(tenantId, "directory") });
+                },
+            });
+            return this.cluster;
+        }));
+        return this.clusterInit;
+    }
+    localStore(tenantId, dbId, storeKind) {
+        const key = `${tenantId}\u0000${dbId}\u0000${storeKind}`;
+        let store = this.localStores.get(key);
+        if (!store) {
+            store = (0, storeRpc_1.remoteObjectStore)((0, host_1.databaseObject)(this.env, tenantId, dbId), (0, host_1.internalHeaders)(tenantId, dbId), tenantId, dbId, storeKind);
+            this.localStores.set(key, store);
+        }
+        return store;
+    }
+    /** Start replication when `config.json` enables it (`cluster.autoSync`). */
+    async startClusterIfEnabled() {
+        const cluster = await this.getCluster();
+        if (this.autoSync && !cluster.autoSyncEnabled) {
+            cluster.start();
+        }
+        return cluster;
+    }
+    /**
+     * Cron tick: one replication pass with every peer, within a time budget so
+     * that a large first mirror stays inside the per-request CPU and subrequest
+     * limits. What the budget does not cover continues on the next tick.
+     */
+    async tick() {
+        const cluster = await this.startClusterIfEnabled();
+        let deferred = false;
+        if (cluster.autoSyncEnabled) {
+            ({ deferred } = await cluster.syncAll({ deadline: Date.now() + CLUSTER_TICK_BUDGET_MS }));
+        }
+        return (0, http_1.jsonResponse)(200, {
+            autoSync: cluster.autoSyncEnabled,
+            peers: cluster.status().peers.length,
+            deferred,
+        });
+    }
+    /** A database object accepted a write: tell peers (feed) and push to them. */
+    async localChange(request) {
+        const event = (await request.json());
+        this.eventBus.publish(event);
+        const cluster = await this.startClusterIfEnabled();
+        if (cluster.autoSyncEnabled) {
+            await cluster.replicateLocalChange(event);
+        }
+        return (0, http_1.jsonResponse)(200, { ok: true });
+    }
+    async fetch(request) {
+        try {
+            return await this.route(request);
+        }
+        catch (error) {
+            if (error instanceof ParsedRejection)
+                return error.response;
+            console.error("[MindooServerObject] Request error:", error);
+            return (0, http_1.jsonResponse)(500, { error: "Internal server error" });
+        }
+    }
+    async route(request) {
+        const url = new URL(request.url);
+        if ((0, http_1.isInternalCall)(request)) {
+            const internal = /^\/internal\/tenants\/([^/]+)$/.exec(url.pathname);
+            if (internal)
+                return this.tenantState(decodeURIComponent(internal[1]));
+            if (url.pathname === "/internal/cluster/tick")
+                return this.tick();
+            if (url.pathname === "/internal/cluster/change")
+                return this.localChange(request);
+        }
+        const route = (0, http_1.matchRoute)(request.method, url.pathname);
+        switch (route.kind) {
+            case "serverInfo":
+                return (0, http_1.toResponse)(this.core.serverInfo());
+            case "clusterMirrors":
+                await this.startClusterIfEnabled();
+                return (0, http_1.toResponse)(this.core.clusterMirrors(await this.parse(request, {})));
+            case "peer":
+                return this.peer(request, route.path);
+            case "publicInfosFingerprints":
+                return (0, http_1.toResponse)(await this.core.publicInfosFingerprints(await this.parse(request, { tenantId: route.tenantId })));
+            case "system":
+                return this.system(request, route.path);
+            default:
+                return (0, http_1.jsonResponse)(404, { error: "Not found" });
+        }
+    }
+    async parse(request, params) {
+        const parsed = await (0, http_1.toServerRequest)(request, {
+            params,
+            jsonBodyLimitBytes: this.settings.jsonBodyLimitBytes,
+        });
+        if (parsed instanceof Response) {
+            throw new ParsedRejection(parsed);
+        }
+        return parsed;
+    }
+    /**
+     * Config and `$publicinfos` keys of one tenant, for the objects serving its
+     * databases. Only reachable from inside the Worker.
+     */
+    async tenantState(rawTenantId) {
+        const tenantId = rawTenantId.toLowerCase();
+        try {
+            (0, validation_1.validateTenantIdFormat)(tenantId);
+        }
+        catch {
+            return (0, http_1.jsonResponse)(400, { error: "Invalid tenant ID format" });
+        }
+        if (!this.tenantManager.tenantExists(tenantId)) {
+            return (0, http_1.jsonResponse)(200, { exists: false });
+        }
+        const config = JSON.parse(this.dataStore.readText(`${tenantId}/config.json`));
+        const keys = await this.tenantManager.getPublicInfosKeysForTenant(tenantId);
+        const trustedServers = this.tenantManager.listTrustedServers();
+        return (0, http_1.jsonResponse)(200, {
+            exists: true,
+            config,
+            publicInfosKeys: keys.map((key) => (0, base64_1.bytesToBase64)(key)),
+            trustedServers,
+            clusterActive: this.autoSync && trustedServers.some((server) => Boolean(server.url)),
+        });
+    }
+    /** `/system/*` with the routing and guards of the Node server's system router. */
+    async system(request, path) {
+        {
+            const method = request.method.toUpperCase();
+            const segments = path.split("/").slice(2).map((segment) => {
+                try {
+                    return decodeURIComponent(segment);
+                }
+                catch {
+                    return segment;
+                }
+            });
+            const lower = segments.map((segment) => segment.toLowerCase());
+            const clientIp = request.headers.get("x-mindoodb-client-ip") ?? "unknown";
+            if (method === "POST" && lower.length === 2 && lower[0] === "auth") {
+                const phase = lower[1] === "challenge" ? "challenge" : lower[1] === "authenticate" ? "authenticate" : null;
+                if (phase) {
+                    const req = await this.parse(request, {});
+                    const limited = await (0, host_1.rateLimited)(this.env.MINDOODB_RATE_LIMIT_AUTH, (0, rateLimits_1.buildAuthRateLimitKey)("system", phase, undefined, clientIp, req.body), "Too many authentication attempts, please try again later");
+                    if (limited)
+                        return limited;
+                    return (0, http_1.toResponse)(phase === "challenge"
+                        ? await this.core.systemChallenge(req)
+                        : await this.core.systemAuthenticate(req));
+                }
+            }
+            const cluster = lower[0] === "cluster";
+            const handler = cluster
+                ? this.clusterHandler(method, segments.slice(1), lower.slice(1), await this.startClusterIfEnabled())
+                : this.systemHandler(method, segments, lower);
+            if (!handler) {
+                return (0, http_1.jsonResponse)(404, { error: "Not found" });
+            }
+            const req = await this.parse(request, handler.params);
+            const rejection = await this.core.systemAdminGuard(req, path);
+            if (rejection)
+                return (0, http_1.toResponse)(rejection);
+            return (0, http_1.toResponse)(await handler.run(req));
+        }
+    }
+    clusterHandler(method, segments, lower, cluster) {
+        const handlers = new clusterHttp_1.ClusterAdminHandlers({
+            cluster,
+            listTrustedServers: () => this.tenantManager.listTrustedServers(),
+            saveTrustedServer: (peer) => this.tenantManager.saveTrustedServer(peer),
+            removeTrustedServer: (name) => this.tenantManager.removeTrustedServer(name),
+        });
+        const [first, second, third] = lower;
+        if (method === "GET" && lower.length === 1 && first === "topology")
+            return { params: {}, run: () => handlers.topology() };
+        if (method === "GET" && lower.length === 1 && first === "status")
+            return { params: {}, run: () => handlers.status() };
+        if (method === "GET" && lower.length === 3 && first === "status" && second === "tenants") {
+            return { params: { tenantId: segments[2] }, run: (req) => handlers.tenantStatus(req) };
+        }
+        if (method === "GET" && lower.length === 1 && first === "jobs")
+            return { params: {}, run: (req) => handlers.jobs(req) };
+        if (method === "GET" && lower.length === 2 && first === "jobs") {
+            return { params: { jobId: segments[1] }, run: (req) => handlers.job(req) };
+        }
+        if (method === "GET" && lower.length === 1 && first === "audit")
+            return { params: {}, run: (req) => handlers.audit(req) };
+        if (method === "POST" && lower.length === 2 && first === "actions") {
+            return { params: { action: segments[1] }, run: (req) => handlers.action(req) };
+        }
+        if (lower.length === 1 && first === "peers" && method === "GET")
+            return { params: {}, run: () => handlers.peers() };
+        if (lower.length === 2 && first === "peers") {
+            const params = { name: segments[1] };
+            if (method === "POST")
+                return { params, run: (req) => handlers.createPeer(req) };
+            if (method === "PATCH")
+                return { params, run: (req) => handlers.updatePeer(req) };
+            if (method === "DELETE")
+                return { params, run: (req) => handlers.deletePeer(req) };
+        }
+        void third;
+        return null;
+    }
+    /** `/system/peer/*`: the server-to-server protocol, authenticated by peer tokens. */
+    async peer(request, path) {
+        const cluster = await this.startClusterIfEnabled();
+        const handlers = new clusterHttp_1.PeerHttpHandlers({
+            cluster,
+            listTenants: () => this.tenantManager.listTenants(),
+            listDatabases: async (tenantId) => {
+                const response = await (0, host_1.databaseObject)(this.env, tenantId, "directory").fetch(`${http_1.INTERNAL_ORIGIN}/internal/databases`, { headers: (0, host_1.internalHeaders)(tenantId, "directory") });
+                return response.ok ? (await response.json()).databases : [];
+            },
+        });
+        const method = request.method.toUpperCase();
+        const name = path.split("/")[3]?.toLowerCase() ?? "";
+        const req = await this.parse(request, {});
+        if (method === "POST" && name === "challenge")
+            return (0, http_1.toResponse)(await handlers.challenge(req));
+        if (method === "POST" && name === "authenticate")
+            return (0, http_1.toResponse)(await handlers.authenticate(req));
+        const known = (method === "POST" && (name === "tenant-bloom" || name === "sync")) ||
+            (method === "GET" && (name === "databases" || name === "events"));
+        if (!known)
+            return (0, http_1.jsonResponse)(404, { error: "Not found" });
+        const rejection = await handlers.peerGuard(req);
+        if (rejection)
+            return (0, http_1.toResponse)(rejection);
+        switch (name) {
+            case "tenant-bloom":
+                return (0, http_1.toResponse)(handlers.tenantBloom(req));
+            case "databases":
+                return (0, http_1.toResponse)(await handlers.databases(req));
+            case "sync":
+                return (0, http_1.toResponse)(handlers.sync(req, (task) => this.ctx.waitUntil(task)));
+            default:
+                return this.peerEventStream(cluster, req.peerName);
+        }
+    }
+    /** Change feed for a peer (Node peers keep it open to pull our writes promptly). */
+    peerEventStream(cluster, peerName) {
+        const { readable, writable } = new TransformStream();
+        const writer = writable.getWriter();
+        const encoder = new TextEncoder();
+        let closed = false;
+        const cleanup = () => {
+            if (closed)
+                return;
+            closed = true;
+            clearInterval(heartbeat);
+            unsubscribe();
+            writer.close().catch(() => undefined);
+        };
+        const write = (frame) => {
+            if (!closed)
+                writer.write(encoder.encode(frame)).catch(cleanup);
+        };
+        write((0, MindooDBServerCore_2.formatSyncHelloEvent)());
+        const unsubscribe = this.eventBus.subscribe((event) => {
+            const frame = (0, clusterHttp_1.formatPeerChangeEvent)(cluster, peerName, event);
+            if (frame)
+                write(frame);
+        });
+        const heartbeat = setInterval(() => write((0, MindooDBServerCore_2.formatSyncHeartbeat)(Date.now())), MindooDBServerCore_2.SYNC_EVENT_HEARTBEAT_MS);
+        return new Response(readable, {
+            status: 200,
+            headers: {
+                "content-type": "text/event-stream",
+                "cache-control": "no-cache, no-transform",
+                "x-accel-buffering": "no",
+            },
+        });
+    }
+    systemHandler(method, segments, lower) {
+        const core = this.core;
+        if (lower[0] === "tenants") {
+            if (lower.length === 1 && method === "GET")
+                return { params: {}, run: () => core.listTenants() };
+            if (lower.length === 2) {
+                const params = { tenantId: segments[1] };
+                if (method === "POST")
+                    return { params, run: (req) => core.registerTenant(req) };
+                if (method === "PUT")
+                    return { params, run: (req) => core.updateTenant(req) };
+                if (method === "DELETE")
+                    return { params, run: (req) => core.deleteTenant(req) };
+            }
+        }
+        if (lower[0] === "trusted-servers") {
+            if (lower.length === 1 && method === "GET")
+                return { params: {}, run: () => core.listTrustedServers() };
+            if (lower.length === 1 && method === "POST")
+                return { params: {}, run: (req) => core.addTrustedServer(req) };
+            if (lower.length === 2 && method === "DELETE") {
+                return { params: { serverName: segments[1] }, run: (req) => core.removeTrustedServer(req) };
+            }
+        }
+        if (lower[0] === "config") {
+            if (lower.length === 1 && method === "GET")
+                return { params: {}, run: () => core.getConfig() };
+            if (lower.length === 1 && method === "PUT")
+                return { params: {}, run: (req) => core.updateConfig(req) };
+            if (lower.length === 2 && lower[1] === "backups" && method === "GET") {
+                return { params: {}, run: () => core.listConfigBackups() };
+            }
+            if (lower.length === 3 && lower[1] === "backups" && method === "GET") {
+                return { params: { backupFile: segments[2] }, run: (req) => core.getConfigBackup(req) };
+            }
+        }
+        return null;
+    }
+}
+exports.MindooServerObject = MindooServerObject;
+/** A request the body parser refused; carries the response to send. */
+class ParsedRejection extends Error {
+    constructor(response) {
+        super("request rejected while parsing");
+        this.response = response;
+    }
+}
+//# sourceMappingURL=MindooServerObject.js.map

package/dist/cloudflare/MindooServerObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MindooServerObject.js","sourceRoot":"","sources":["../../src/cloudflare/MindooServerObject.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,iDAAqD;AACrD,0EAAuE;AACvE,2DAAwD;AACxD,mEAAgE;AAChE,+DAAmE;AACnE,6EAA0E;AAC1E,yDAAsD;AACtD,yDAMgC;AAChC,qDAA8D;AAC9D,qDAA6D;AAG7D,kEAA+D;AAE/D,4DAA2G;AAI3G,0EAI2C;AAC3C,yCAA+C;AAE/C,yDAAkE;AAClE,iEAA8D;AAC9D,iCAOgB;AAChB,iCAQgB;AAGhB,MAAM,UAAU,GAAG,aAAa,CAAC;AACjC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C,uEAAuE;AACvE,MAAM,4BAA4B;IAChC,YAA6B,SAAuC;QAAvC,cAAS,GAAT,SAAS,CAA8B;IAAG,CAAC;IAExE,WAAW;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzD,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,qCAAsB,EAAC,IAAI,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAA,yCAA0B,EAAC,IAAI,CAAE,EAAE,CAAC,CAAC;aACvE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,IAAA,qCAAsB,EAAC,UAAU,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,iBAAiB,IAAI,UAAU,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAA,mCAAoB,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,MAAoB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC;YAC1E,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,iBAAiB,IAAI,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,KAAM,CAAC;AAEjC,mEAAmE;AACnE,MAAM,sBAAsB;IAC1B,YAA6B,GAAe;QAAf,QAAG,GAAH,GAAG,CAAY;QAC1C,GAAG,CAAC,IAAI,CACN,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kDAAkD,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,+FAA+F,EAC/F,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,GAAG;aACZ,IAAI,CAAmB,oDAAoD,CAAC;aAC5E,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,MAAa,kBAAkB;IAc7B,YACmB,GAAuB,EACvB,GAAwB;QADxB,QAAG,GAAH,GAAG,CAAoB;QACvB,QAAG,GAAH,GAAG,CAAqB;QAR3C,qFAAqF;QACpE,aAAQ,GAAG,IAAI,2BAAY,EAAE,CAAC;QACvC,YAAO,GAA0B,IAAI,CAAC;QACtC,gBAAW,GAAmC,IAAI,CAAC;QAC1C,gBAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;QAMtE,IAAI,CAAC,QAAQ,GAAG,IAAA,yBAAkB,EAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,+CAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,IAAA,yBAAkB,EAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAExC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,YAAY,KAAK,IAAI;YACvC,CAAC,CAAC,IAAA,mCAAoB,EAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;YAC5D,CAAC,CAAC,GAAG,CAAC,sBAAsB;gBAC1B,CAAC,CAAC,IAAA,mCAAoB,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,wBAAwB,CAAC;gBACxF,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAE3B,MAAM,aAAa,GAAG,IAAI,2CAAoB,EAAE,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa;YACb,cAAc,EAAE,GAAG,CAAC,wBAAwB;YAC5C,aAAa,EAAE;gBACb,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;oBACzB,QAAQ,EAAE,GAAG,EAAE;wBACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBAC7D,CAAC;iBACF,CAAC;gBACF,aAAa,EAAE,GAAG,EAAE,CAAC,EAAE;gBACvB,iEAAiE;gBACjE,8CAA8C;gBAC9C,kBAAkB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACrC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAc,EAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,CACrE,GAAG,sBAAe,gBAAgB,EAClC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAA,sBAAe,EAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CACpE,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBACjB,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBACnF,CAAC;gBACH,CAAC;aACF;SACF,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,qCAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,eAAe,GAAG,IAAI,wCAAsB,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE;YAClF,uBAAuB,EAAE,CAAC,aAAa,EAAE,EAAE,CACzC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,aAAa,CAAC;SACtE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,uCAAkB,CAAC;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,eAAe,EAAE,IAAI,+CAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC;YAC9E,UAAU,EAAE,IAAI,2BAAY,EAAE;YAC9B,gBAAgB,EAAE,IAAI,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YAClE,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY;YACxC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;gBACvB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;gBAC3B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;YACxC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YAC1C,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YAC1D,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YAC9C,OAAO,EAAE;gBACP,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAC9E,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE;gBACtD,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;aAC1G;SACF,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAE7D,IAAY,QAAQ;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,UAAU;QAChB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,KAAhB,IAAI,CAAC,WAAW,GAAK,IAAA,0BAAmB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE;YACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YACrB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;YACzC,IAAI,CAAC,OAAO,GAAG,IAAI,+BAAc,CAAC;gBAChC,aAAa,EAAE,aAAa,CAAC,gBAAgB,EAAE;gBAC/C,YAAY,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;gBAC9D,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,aAAa;gBACb,eAAe,EAAE,KAAK;gBACtB,uEAAuE;gBACvE,iEAAiE;gBACjE,cAAc,EAAE,EAAE,oBAAoB,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,EAAE;gBACzF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI;gBAC1C,kBAAkB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE;gBAC5D,eAAe,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,mBAAmB,EAAE,EAAE,IAAI,IAAI,IAAI;gBACxE,qBAAqB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,mBAAmB,EAAE,EAAE,gBAAgB,IAAI,IAAI;gBAC1F,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,gBAAgB,EAAE,CAAC,EAAE,iBAAiB;gBACtF,gBAAgB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,6BAA6B,EAAE;gBACrE,WAAW,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE;gBAC9C,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;oBAChC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAc,EAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,CACrE,GAAG,sBAAe,qBAAqB,EACvC,EAAE,OAAO,EAAE,IAAA,sBAAe,EAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CACpD,CAAC;oBACF,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,OAAO,CAAC,WAAW,CAAC,CAAC;oBACvC,OAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC,SAAS,CAAC;gBACxE,CAAC;gBACD,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC;gBAC9F,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACpC,MAAM,IAAA,qBAAc,EAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,CACpD,GAAG,sBAAe,8BAA8B,EAChD,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAA,sBAAe,EAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CACpE,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC,CAAC,EAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,UAAU,CAAC,QAAgB,EAAE,IAAY,EAAE,SAAoB;QACrE,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,IAAI,SAAS,SAAS,EAAE,CAAC;QACzD,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAA,4BAAiB,EACvB,IAAA,qBAAc,EAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EACxC,IAAA,sBAAe,EAAC,QAAQ,EAAE,IAAI,CAAC,EAC/B,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,qBAAqB;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC9C,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,IAAI;QAChB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACnD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,CAAC,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE;YACvB,QAAQ,EAAE,OAAO,CAAC,eAAe;YACjC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM;YACpC,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,WAAW,CAAC,OAAgB;QACxC,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAoB,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,OAAgB;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAA,qBAAc,EAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACrE,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,QAAQ,KAAK,wBAAwB;gBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,0BAA0B;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,IAAA,iBAAU,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC5C,KAAK,gBAAgB;gBACnB,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACnC,OAAO,IAAA,iBAAU,EAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,KAAK,yBAAyB;gBAC5B,OAAO,IAAA,iBAAU,EACf,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CACjG,CAAC;YACJ,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C;gBACE,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,MAA8B;QAClE,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAe,EAAC,OAAO,EAAE;YAC5C,MAAM;YACN,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;SACrD,CAAC,CAAC;QACH,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,WAAmB;QAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,IAAA,mCAAsB,EAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,QAAQ,cAAc,CAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC;QAC/D,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM;YACN,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC;YACtD,cAAc;YACd,aAAa,EAAE,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,IAAY;QACjD,CAAC;YACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACxD,IAAI,CAAC;oBACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,OAAO,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;YAE1E,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACnE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC3G,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC1C,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAW,EAC/B,IAAI,CAAC,GAAG,CAAC,wBAAwB,EACjC,IAAA,kCAAqB,EAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,EACrE,0DAA0D,CAC3D,CAAC;oBACF,IAAI,OAAO;wBAAE,OAAO,OAAO,CAAC;oBAC5B,OAAO,IAAA,iBAAU,EACf,KAAK,KAAK,WAAW;wBACnB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;wBACtC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAC5C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YACvC,MAAM,OAAO,GAAG,OAAO;gBACrB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACpG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9D,IAAI,SAAS;gBAAE,OAAO,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAA,iBAAU,EAAC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,MAAc,EACd,QAAkB,EAClB,KAAe,EACf,OAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,kCAAoB,CAAC;YACxC,OAAO;YACP,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE;YACjE,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC;YACvE,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,CAAC;SAC5E,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACrC,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1H,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACtH,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzF,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxH,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1H,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACpH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjF,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClF,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,KAAK,KAAK,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,IAAI,CAAC,OAAgB,EAAE,IAAY;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,8BAAgB,CAAC;YACpC,OAAO;YACP,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE;YACnD,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAChC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAc,EAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,KAAK,CAC1E,GAAG,sBAAe,qBAAqB,EACvC,EAAE,OAAO,EAAE,IAAA,sBAAe,EAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CACpD,CAAC;gBACF,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,IAAA,iBAAU,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChG,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc;YAAE,OAAO,IAAA,iBAAU,EAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAEtG,MAAM,KAAK,GACT,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC;YACnE,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS;YAAE,OAAO,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC;QAE5C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,cAAc;gBACjB,OAAO,IAAA,iBAAU,EAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,KAAK,WAAW;gBACd,OAAO,IAAA,iBAAU,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,KAAK,MAAM;gBACT,OAAO,IAAA,iBAAU,EAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5E;gBACE,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,QAAS,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,OAAuB,EAAE,QAAgB;QAC/D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,eAAe,EAA0B,CAAC;QAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;YAC9B,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC,CAAC;QACF,KAAK,CAAC,IAAA,yCAAoB,GAAE,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,IAAA,mCAAqB,EAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAA,wCAAmB,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,4CAAuB,CAAC,CAAC;QACrG,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,mBAAmB;gBACnC,eAAe,EAAE,wBAAwB;gBACzC,mBAAmB,EAAE,IAAI;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CACnB,MAAc,EACd,QAAkB,EAClB,KAAe;QAEf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjF,IAAI,MAAM,KAAK,KAAK;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9E,IAAI,MAAM,KAAK,QAAQ;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACnF,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,iBAAiB,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACxG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAC/F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACxG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrE,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAzcD,gDAycC;AAED,uEAAuE;AACvE,MAAM,eAAgB,SAAQ,KAAK;IACjC,YAAqB,QAAkB;QACrC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QADrB,aAAQ,GAAR,QAAQ,CAAU;IAEvC,CAAC;CACF"}

package/dist/cloudflare/WorkersCryptoAdapter.d.ts

@@ -0,0 +1,7 @@
+import type { CryptoAdapter } from "../core/crypto/CryptoAdapter";
+/** WebCrypto of the Workers runtime (`globalThis.crypto`). */
+export declare class WorkersCryptoAdapter implements CryptoAdapter {
+    getSubtle(): SubtleCrypto;
+    getRandomValues(array: Uint8Array): Uint8Array;
+}
+//# sourceMappingURL=WorkersCryptoAdapter.d.ts.map

package/dist/cloudflare/WorkersCryptoAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkersCryptoAdapter.d.ts","sourceRoot":"","sources":["../../src/cloudflare/WorkersCryptoAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,8DAA8D;AAC9D,qBAAa,oBAAqB,YAAW,aAAa;IACxD,SAAS,IAAI,YAAY;IAIzB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;CAG/C"}