orez-lite 0.9.7

package/dist/do-sql-tracking.js

@@ -0,0 +1,280 @@
+export const RETURNING_INTERNAL_PREFIX = '__orez_returning_';
+/** Structured error used by CF-facing layers to return an HTTP 429. */
+export class WriteBudgetExceededError extends Error {
+    windowRows;
+    budget;
+    windowMs;
+    error = 'writeBudgetExceeded';
+    constructor(windowRows, budget, windowMs) {
+        super(`row write budget exceeded: ${windowRows ?? 'unrecorded'}/${budget} rows in ${windowMs}ms`);
+        this.windowRows = windowRows;
+        this.budget = budget;
+        this.windowMs = windowMs;
+        this.name = 'WriteBudgetExceededError';
+    }
+    toJSON() {
+        return { error: this.error, windowRows: this.windowRows, budget: this.budget };
+    }
+}
+/**
+ * In-memory rolling row counter for a single Durable Object isolate.
+ *
+ * Persistence is deliberately left to the owner and only needed when the
+ * circuit changes state. Updating a SQLite meter row for every application
+ * write would itself increase Durable Object rows-written and amplify a burn.
+ */
+export class RollingRowWriteBudget {
+    #budgetRows;
+    #windowMs;
+    #bucketMs;
+    #now;
+    #samples = [];
+    #billableRows = 0;
+    #logicalRows = 0;
+    #trip = null;
+    constructor(options) {
+        if (!Number.isSafeInteger(options.budgetRows) || options.budgetRows < 1)
+            throw new TypeError('budgetRows must be a positive safe integer');
+        if (!Number.isSafeInteger(options.windowMs) || options.windowMs < 1)
+            throw new TypeError('windowMs must be a positive safe integer');
+        this.#budgetRows = options.budgetRows;
+        this.#windowMs = options.windowMs;
+        this.#bucketMs = Math.min(1_000, options.windowMs);
+        this.#now = options.now;
+    }
+    #prune(now) {
+        const cutoff = now - this.#windowMs;
+        let remove = 0;
+        while (remove < this.#samples.length &&
+            this.#samples[remove].at + this.#bucketMs <= cutoff) {
+            this.#billableRows -= this.#samples[remove].billableRows;
+            this.#logicalRows -= this.#samples[remove].logicalRows;
+            remove++;
+        }
+        if (remove > 0)
+            this.#samples.splice(0, remove);
+    }
+    status() {
+        const now = this.#now();
+        this.#prune(now);
+        const windowStartedAt = this.#samples[0]?.at ?? null;
+        return {
+            windowRows: this.#billableRows,
+            billableRows: this.#billableRows,
+            logicalRows: this.#logicalRows,
+            budget: this.#budgetRows,
+            windowMs: this.#windowMs,
+            windowStartedAt,
+            windowEndsAt: windowStartedAt === null ? null : windowStartedAt + this.#windowMs,
+            tripped: this.#trip !== null,
+            trippedAt: this.#trip?.at ?? null,
+            trippedWindowRows: this.#trip?.windowRows ?? null,
+            trippedBudget: this.#trip?.budget ?? null,
+        };
+    }
+    /** The trip to persist, so a restored object still reports what tripped it. */
+    trip() {
+        return this.#trip;
+    }
+    /** Trip immediately for an operator-requested, non-destructive write stop. */
+    forceTrip() {
+        if (this.#trip === null) {
+            this.#prune(this.#now());
+            this.#trip = {
+                at: this.#now(),
+                windowRows: this.#billableRows,
+                budget: this.#budgetRows,
+                windowMs: this.#windowMs,
+            };
+        }
+        return this.status();
+    }
+    assertOpen() {
+        const trip = this.#trip;
+        if (trip === null)
+            return;
+        throw new WriteBudgetExceededError(trip.windowRows, trip.budget, trip.windowMs);
+    }
+    #sample() {
+        const now = this.#now();
+        this.#prune(now);
+        const bucketAt = Math.floor(now / this.#bucketMs) * this.#bucketMs;
+        const last = this.#samples[this.#samples.length - 1];
+        if (last?.at === bucketAt)
+            return last;
+        const sample = { at: bucketAt, billableRows: 0, logicalRows: 0 };
+        this.#samples.push(sample);
+        return sample;
+    }
+    record(rowsWritten) {
+        return this.recordBillable(rowsWritten);
+    }
+    recordBillable(rowsWritten) {
+        this.assertOpen();
+        const rows = Number(rowsWritten);
+        if (!Number.isSafeInteger(rows) || rows <= 0)
+            return this.status();
+        const sample = this.#sample();
+        sample.billableRows += rows;
+        this.#billableRows += rows;
+        if (this.#billableRows > this.#budgetRows) {
+            this.#trip = {
+                at: this.#now(),
+                windowRows: this.#billableRows,
+                budget: this.#budgetRows,
+                windowMs: this.#windowMs,
+            };
+            throw new WriteBudgetExceededError(this.#billableRows, this.#budgetRows, this.#windowMs);
+        }
+        return this.status();
+    }
+    recordLogical(rowsWritten) {
+        const rows = Number(rowsWritten);
+        if (!Number.isSafeInteger(rows) || rows <= 0)
+            return this.status();
+        const sample = this.#sample();
+        sample.logicalRows += rows;
+        this.#logicalRows += rows;
+        return this.status();
+    }
+    /**
+     * Restore a sticky trip from durable storage.
+     *
+     * Accepts the bare timestamp written before trip counts were persisted. That
+     * format cannot say how far over budget the object went, so its count stays
+     * unrecorded rather than being reported as zero. Those values disappear the
+     * first time the namespace is reopened, which is the only way out anyway.
+     */
+    restoreTrip(persisted) {
+        const trip = typeof persisted === 'number' ? { at: persisted } : persisted;
+        const at = Number(trip?.at);
+        if (!Number.isFinite(at) || at <= 0)
+            return;
+        const windowRows = Number(trip.windowRows);
+        const budget = Number(trip.budget);
+        const windowMs = Number(trip.windowMs);
+        this.#trip = {
+            at,
+            windowRows: Number.isSafeInteger(windowRows) && windowRows > 0 ? windowRows : null,
+            budget: Number.isSafeInteger(budget) && budget > 0 ? budget : this.#budgetRows,
+            windowMs: Number.isSafeInteger(windowMs) && windowMs > 0 ? windowMs : this.#windowMs,
+        };
+    }
+    reopen() {
+        this.#samples = [];
+        this.#billableRows = 0;
+        this.#logicalRows = 0;
+        this.#trip = null;
+        return this.status();
+    }
+}
+const SQL_MUTATION_RE = /(?:^|;)\s*(?:insert|update|delete|replace|create|alter|drop|truncate|vacuum|reindex)\b/i;
+const SQL_ROW_MUTATION_RE = /(?:^|;)\s*(?:insert|update|delete|replace)\b/i;
+const SQL_WITH_RE = /(?:^|;)\s*with\b/i;
+const SQL_WITH_MUTATION_RE = /\b(?:insert|update|delete|replace)\b/i;
+function sqlWithoutLeadingTrivia(sql) {
+    const text = String(sql ?? '');
+    if (!text.includes('--') && !text.includes('/*'))
+        return text;
+    return text.replace(/(^|;)\s*(?:(?:--[^\n]*(?:\n|$))|(?:\/\*[\s\S]*?\*\/))\s*/g, '$1');
+}
+/** Classify a statement once for the write gate, CDC, and logical accounting. */
+export function classifySql(sql) {
+    // SqlStorage accepts comments before a statement. Remove only trivia at the
+    // beginning (and after statement separators) so a comment cannot bypass the
+    // pre-execution gate on a sticky circuit.
+    const text = sqlWithoutLeadingTrivia(sql);
+    const withMutation = SQL_WITH_RE.test(text) && SQL_WITH_MUTATION_RE.test(text);
+    return {
+        mutation: SQL_MUTATION_RE.test(text) || withMutation,
+        rowMutation: SQL_ROW_MUTATION_RE.test(text) || withMutation,
+    };
+}
+/** Conservative SQL classifier used to block writes before execution. */
+export function isSqlMutation(sql) {
+    return classifySql(sql).mutation;
+}
+/** Row-level DML classifier used to decide when a CDC drain must be atomic. */
+export function isSqlRowMutation(sql) {
+    return classifySql(sql).rowMutation;
+}
+/** Normalize Zero's optional PostgreSQL-style public schema prefix. */
+export function stripPublicPrefix(tableName) {
+    return tableName.startsWith('public.') ? tableName.slice('public.'.length) : tableName;
+}
+/**
+ * Account a mutation cursor's final billing rows as it is consumed.
+ *
+ * Cloudflare's `rowsWritten` can increase during cursor iteration (notably for
+ * `... RETURNING` statements). Sampling only when `sql.exec()` returns misses
+ * those writes. This proxy records monotonic deltas after every consumption
+ * method while preserving the cursor's native `this` binding.
+ */
+export function trackSqlCursorRowsWritten(cursor, record) {
+    if (!cursor || typeof cursor !== 'object')
+        return cursor;
+    let accountedRows = 0;
+    const account = () => {
+        const current = Number(cursor.rowsWritten ?? 0);
+        if (!Number.isSafeInteger(current) || current <= accountedRows)
+            return;
+        const delta = current - accountedRows;
+        accountedRows = current;
+        record(delta);
+    };
+    const wrapIterator = (iterator) => new Proxy(iterator, {
+        get(target, property) {
+            const value = Reflect.get(target, property, target);
+            if (property === 'next' && typeof value === 'function') {
+                return (...args) => {
+                    try {
+                        return Reflect.apply(value, target, args);
+                    }
+                    finally {
+                        account();
+                    }
+                };
+            }
+            return typeof value === 'function' ? value.bind(target) : value;
+        },
+    });
+    let proxy;
+    proxy = new Proxy(cursor, {
+        get(target, property) {
+            const value = Reflect.get(target, property, target);
+            if (property === Symbol.iterator) {
+                return () => proxy;
+            }
+            if ((property === 'next' || property === 'one' || property === 'toArray') &&
+                typeof value === 'function') {
+                return (...args) => {
+                    try {
+                        return Reflect.apply(value, target, args);
+                    }
+                    finally {
+                        account();
+                    }
+                };
+            }
+            if (property === 'raw' && typeof value === 'function') {
+                return (...args) => wrapIterator(Reflect.apply(value, target, args));
+            }
+            return typeof value === 'function' ? value.bind(target) : value;
+        },
+    });
+    account();
+    return proxy;
+}
+export function trackedChangeRow(row, track) {
+    const allowed = track.rowColumns ? new Set(track.rowColumns) : null;
+    const out = {};
+    for (const [key, value] of Object.entries(row)) {
+        if (key.startsWith(RETURNING_INTERNAL_PREFIX))
+            continue;
+        if (allowed && !allowed.has(key))
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=do-sql-tracking.js.map

package/dist/do-sql-tracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"do-sql-tracking.js","sourceRoot":"","sources":["../src/do-sql-tracking.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAA;AA8C5D,uEAAuE;AACvE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAItC;IACA;IACA;IALF,KAAK,GAAG,qBAAqB,CAAA;IAEtC,YACW,UAAyB,EACzB,MAAc,EACd,QAAgB;QAEzB,KAAK,CACH,8BAA8B,UAAU,IAAI,YAAY,IAAI,MAAM,YAAY,QAAQ,IAAI,CAC3F,CAAA;QANQ,eAAU,GAAV,UAAU,CAAe;QACzB,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAQ;QAKzB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;IAChF,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACvB,WAAW,CAAQ;IACnB,SAAS,CAAQ;IACjB,SAAS,CAAQ;IACjB,IAAI,CAAc;IAC3B,QAAQ,GAAqB,EAAE,CAAA;IAC/B,aAAa,GAAG,CAAC,CAAA;IACjB,YAAY,GAAG,CAAC,CAAA;IAChB,KAAK,GAA8B,IAAI,CAAA;IAEvC,YAAY,OAA8B;QACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC;YACrE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;QACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC;YACjE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;QACjE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAA;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAA;IACzB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAA;QACnC,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OACE,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,EACpD,CAAC;YACD,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC,YAAY,CAAA;YACzD,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC,WAAW,CAAA;YACvD,MAAM,EAAE,CAAA;QACV,CAAC;QACD,IAAI,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACjD,CAAC;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChB,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAA;QACpD,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,aAAa;YAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,MAAM,EAAE,IAAI,CAAC,WAAW;YACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,eAAe;YACf,YAAY,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,SAAS;YAChF,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;YAC5B,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;YACjC,iBAAiB,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,IAAI;YACjD,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI;SAC1C,CAAA;IACH,CAAC;IAED,+EAA+E;IAC/E,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,8EAA8E;IAC9E,SAAS;QACP,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACxB,IAAI,CAAC,KAAK,GAAG;gBACX,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE;gBACf,UAAU,EAAE,IAAI,CAAC,aAAa;gBAC9B,MAAM,EAAE,IAAI,CAAC,WAAW;gBACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;aACzB,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;IAED,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAM;QACzB,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjF,CAAC;IAED,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACpD,IAAI,IAAI,EAAE,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACtC,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;QAChE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,CAAC,WAAoB;QACzB,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED,cAAc,CAAC,WAAoB;QACjC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC7B,MAAM,CAAC,YAAY,IAAI,IAAI,CAAA;QAC3B,IAAI,CAAC,aAAa,IAAI,IAAI,CAAA;QAC1B,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,GAAG;gBACX,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE;gBACf,UAAU,EAAE,IAAI,CAAC,aAAa;gBAC9B,MAAM,EAAE,IAAI,CAAC,WAAW;gBACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;aACzB,CAAA;YACD,MAAM,IAAI,wBAAwB,CAChC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,CACf,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;IAED,aAAa,CAAC,WAAoB;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAA;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC7B,MAAM,CAAC,WAAW,IAAI,IAAI,CAAA;QAC1B,IAAI,CAAC,YAAY,IAAI,IAAI,CAAA;QACzB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAA+C;QACzD,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAM;QAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK,GAAG;YACX,EAAE;YACF,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YAClF,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YAC9E,QAAQ,EACN,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;SAC7E,CAAA;IACH,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAA;QAClB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAA;QACtB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;CACF;AAED,MAAM,eAAe,GACnB,yFAAyF,CAAA;AAC3F,MAAM,mBAAmB,GAAG,+CAA+C,CAAA;AAC3E,MAAM,WAAW,GAAG,mBAAmB,CAAA;AACvC,MAAM,oBAAoB,GAAG,uCAAuC,CAAA;AAEpE,SAAS,uBAAuB,CAAC,GAAY;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,2DAA2D,EAAE,IAAI,CAAC,CAAA;AACxF,CAAC;AAOD,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,4EAA4E;IAC5E,4EAA4E;IAC5E,0CAA0C;IAC1C,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IACzC,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9E,OAAO;QACL,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY;QACpD,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY;KAC5D,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;AAClC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAA;AACrC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAc,EACd,MAA8B;IAE9B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IACxD,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,aAAa;YAAE,OAAM;QACtE,MAAM,KAAK,GAAG,OAAO,GAAG,aAAa,CAAA;QACrC,aAAa,GAAG,OAAO,CAAA;QACvB,MAAM,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAU,EAAE,CAChD,IAAI,KAAK,CAAC,QAAQ,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,QAAQ;YAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACnD,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,IAAI,CAAC;wBACH,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBAC3C,CAAC;4BAAS,CAAC;wBACT,OAAO,EAAE,CAAA;oBACX,CAAC;gBACH,CAAC,CAAA;YACH,CAAC;YACD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACjE,CAAC;KACF,CAAC,CAAA;IAEJ,IAAI,KAAa,CAAA;IACjB,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE;QACxB,GAAG,CAAC,MAAM,EAAE,QAAQ;YAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACnD,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO,GAAG,EAAE,CAAC,KAAqC,CAAA;YACpD,CAAC;YACD,IACE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,SAAS,CAAC;gBACrE,OAAO,KAAK,KAAK,UAAU,EAC3B,CAAC;gBACD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,IAAI,CAAC;wBACH,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBAC3C,CAAC;4BAAS,CAAC;wBACT,OAAO,EAAE,CAAA;oBACX,CAAC;gBACH,CAAC,CAAA;YACH,CAAC;YACD,IAAI,QAAQ,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBACtD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAC5B,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAW,CAAC,CAAA;YAC9D,CAAC;YACD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACjE,CAAC;KACF,CAAC,CAAA;IACF,OAAO,EAAE,CAAA;IACT,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAA4B,EAC5B,KAAuB;IAEvB,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnE,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC;YAAE,SAAQ;QACvD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { createSQLiteApplicationDatabase, encodeSqlParams, encodeSqlValue, } from 'orez-sync-executor';
+export * from 'orez-sync-executor/core';
+export type { SqlWireValue } from 'orez-sync-executor';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,cAAc,GACf,MAAM,oBAAoB,CAAA;AAC3B,cAAc,yBAAyB,CAAA;AAEvC,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { createSQLiteApplicationDatabase, encodeSqlParams, encodeSqlValue, } from 'orez-sync-executor';
+export * from 'orez-sync-executor/core';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,cAAc,GACf,MAAM,oBAAoB,CAAA;AAC3B,cAAc,yBAAyB,CAAA"}

package/dist/wake.d.ts

@@ -0,0 +1,22 @@
+export type WakeCapability = {
+    readonly namespace: string;
+    readonly identity: string;
+    readonly expiresAt: number;
+};
+export type MintWakeCapabilityOptions = {
+    readonly namespace: string;
+    readonly identity: string;
+    readonly ttlMs: number;
+};
+export type VerifyWakeCapabilityOptions = {
+    readonly namespace: string;
+    readonly ttlMs: number;
+};
+export declare function timingSafeEqual(left: string | Uint8Array, right: string | Uint8Array): boolean;
+export declare function verifySharedSecretHeader(request: Request, secret: string, headerName?: string): boolean;
+export declare function mintWakeCapability(secret: string, options: MintWakeCapabilityOptions): Promise<{
+    readonly token: string;
+    readonly expiresAt: number;
+}>;
+export declare function verifyWakeCapability(secret: string, token: string | null | undefined, options: VerifyWakeCapabilityOptions): Promise<WakeCapability | null>;
+//# sourceMappingURL=wake.d.ts.map

package/dist/wake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake.d.ts","sourceRoot":"","sources":["../src/wake.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,CAAA;AAqDD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,WASpF;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,SAAgB,GACzB,OAAO,CAGT;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBjE;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAwChC"}

package/dist/wake.js

@@ -0,0 +1,114 @@
+const TOKEN_VERSION = 'v1';
+const SIGNATURE_CONTEXT = 'orez-wake-capability-v1:';
+const MAX_TOKEN_LENGTH = 2048;
+const MAX_NAMESPACE_LENGTH = 200;
+const MAX_IDENTITY_LENGTH = 200;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+function validateSecret(secret) {
+    if (!secret)
+        throw new TypeError('wake capability secret must not be empty');
+}
+function validateNamespace(namespace) {
+    if (!namespace || namespace.length > MAX_NAMESPACE_LENGTH) {
+        throw new TypeError('wake capability namespace is invalid');
+    }
+}
+function validateIdentity(identity) {
+    if (!identity || identity.length > MAX_IDENTITY_LENGTH) {
+        throw new TypeError('wake capability identity is invalid');
+    }
+}
+function validateTtl(ttlMs) {
+    if (!Number.isSafeInteger(ttlMs) || ttlMs <= 0) {
+        throw new TypeError('wake capability ttlMs must be a positive integer');
+    }
+}
+function encodeBase64Url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll('+', '-').replaceAll('/', '_').replace(/=+$/, '');
+}
+function decodeBase64Url(value) {
+    if (!/^[A-Za-z0-9_-]+$/.test(value))
+        throw new TypeError('invalid base64url');
+    const base64 = value.replaceAll('-', '+').replaceAll('_', '/');
+    const binary = atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, '='));
+    return Uint8Array.from(binary, (character) => character.charCodeAt(0));
+}
+async function sign(secret, payload) {
+    const key = await crypto.subtle.importKey('raw', encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    return new Uint8Array(await crypto.subtle.sign('HMAC', key, encoder.encode(SIGNATURE_CONTEXT + payload)));
+}
+export function timingSafeEqual(left, right) {
+    const leftBytes = typeof left === 'string' ? encoder.encode(left) : left;
+    const rightBytes = typeof right === 'string' ? encoder.encode(right) : right;
+    const length = Math.max(leftBytes.length, rightBytes.length);
+    let difference = leftBytes.length ^ rightBytes.length;
+    for (let index = 0; index < length; index++) {
+        difference |= (leftBytes[index] ?? 0) ^ (rightBytes[index] ?? 0);
+    }
+    return difference === 0;
+}
+export function verifySharedSecretHeader(request, secret, headerName = 'x-admin-key') {
+    const received = request.headers.get(headerName);
+    return received !== null && secret.length > 0 && timingSafeEqual(received, secret);
+}
+export async function mintWakeCapability(secret, options) {
+    validateSecret(secret);
+    validateNamespace(options.namespace);
+    validateIdentity(options.identity);
+    validateTtl(options.ttlMs);
+    const expiresAt = Date.now() + options.ttlMs;
+    const payload = encodeBase64Url(encoder.encode(JSON.stringify({
+        namespace: options.namespace,
+        identity: options.identity,
+        expiresAt,
+    })));
+    const signature = encodeBase64Url(await sign(secret, payload));
+    return { token: `${TOKEN_VERSION}.${payload}.${signature}`, expiresAt };
+}
+export async function verifyWakeCapability(secret, token, options) {
+    validateSecret(secret);
+    validateNamespace(options.namespace);
+    validateTtl(options.ttlMs);
+    if (!token || token.length > MAX_TOKEN_LENGTH)
+        return null;
+    const parts = token.split('.');
+    if (parts.length !== 3 || parts[0] !== TOKEN_VERSION)
+        return null;
+    const payload = parts[1];
+    const encodedSignature = parts[2];
+    if (!payload || !encodedSignature)
+        return null;
+    try {
+        const signature = decodeBase64Url(encodedSignature);
+        if (!timingSafeEqual(signature, await sign(secret, payload)))
+            return null;
+        const value = JSON.parse(decoder.decode(decodeBase64Url(payload)));
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            return null;
+        const capability = value;
+        const now = Date.now();
+        if (capability.namespace !== options.namespace ||
+            typeof capability.identity !== 'string' ||
+            !capability.identity ||
+            capability.identity.length > MAX_IDENTITY_LENGTH ||
+            typeof capability.expiresAt !== 'number' ||
+            !Number.isSafeInteger(capability.expiresAt) ||
+            capability.expiresAt <= now ||
+            capability.expiresAt > now + options.ttlMs) {
+            return null;
+        }
+        return {
+            namespace: options.namespace,
+            identity: capability.identity,
+            expiresAt: capability.expiresAt,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=wake.js.map

package/dist/wake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake.js","sourceRoot":"","sources":["../src/wake.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,iBAAiB,GAAG,0BAA0B,CAAA;AACpD,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAC7B,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAmB/B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACvD,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACzE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AACxE,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,OAAe;IACjD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,CAAC,CACnF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAyB,EAAE,KAA0B;IACnF,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5D,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACrD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,MAAc,EACd,UAAU,GAAG,aAAa;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAChD,OAAO,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,OAAkC;IAElC,cAAc,CAAC,MAAM,CAAC,CAAA;IACtB,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACpC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAC5C,MAAM,OAAO,GAAG,eAAe,CAC7B,OAAO,CAAC,MAAM,CACZ,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS;KACe,CAAC,CAC5B,CACF,CAAA;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC9D,OAAO,EAAE,KAAK,EAAE,GAAG,aAAa,IAAI,OAAO,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,CAAA;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,KAAgC,EAChC,OAAoC;IAEpC,cAAc,CAAC,MAAM,CAAC,CAAA;IACtB,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACpC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAE1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACjC,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAE9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;QACnD,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAEzE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5E,MAAM,UAAU,GAAG,KAAgC,CAAA;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IACE,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAC1C,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;YACvC,CAAC,UAAU,CAAC,QAAQ;YACpB,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB;YAChD,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;YACxC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAC3C,UAAU,CAAC,SAAS,IAAI,GAAG;YAC3B,UAAU,CAAC,SAAS,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,EAC1C,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/worker/cf-do-shim.d.ts

@@ -0,0 +1,53 @@
+/**
+ * namespace routing primitives for the Cloudflare Durable Object deploy.
+ *
+ * a multi-tenant CF/orez deploy shards data into one DO instance per tenant
+ * namespace (`ns:<scope>-<id>`) plus a control-plane `singleton`. the worker
+ * tiers carry the chosen namespace in a header (and re-stamp it so an inbound
+ * value is never trusted) and must validate its shape before routing — an
+ * unvalidated namespace would let a client mint unbounded DO instances.
+ *
+ * The routing decision and security-relevant shape validation live here as
+ * pure functions so caller-owned worker entrypoints do not copy the validation
+ * regex at every routing site.
+ */
+export interface NamespaceRoutingOptions {
+    /** allowed namespace scope prefixes. default `['proj', 'test']`. */
+    scopes?: readonly string[];
+    /**
+     * namespace values that resolve to the control-plane `singleton` instance,
+     * in addition to the empty string (which is always the singleton).
+     */
+    controlPlaneNamespaces?: readonly string[];
+    /** request header the worker tiers carry the namespace in. default `x-orez-ns`. */
+    nsHeader?: string;
+}
+/**
+ * true when `ns` is a structurally valid tenant namespace: a configured scope
+ * prefix followed by a 1-64 char `[A-Za-z0-9_-]` id. this is the gate that
+ * keeps a stray header from minting an unbounded DO instance, so every routing
+ * site that forwards a namespace should run it.
+ */
+export declare function isValidNamespace(ns: string, opts?: NamespaceRoutingOptions): boolean;
+/**
+ * resolve a raw namespace string to a DO instance name:
+ *   - `''` or a control-plane alias -> `'singleton'`
+ *   - a valid tenant namespace      -> `'ns:<ns>'`
+ *   - anything else                 -> `null` (caller should reject the request)
+ */
+export declare function doInstanceName(ns: string, opts?: NamespaceRoutingOptions): string | null;
+interface HeaderReader {
+    get(name: string): string | null;
+}
+/**
+ * read the namespace from a request (the configured header, falling back to the
+ * `?ns=` query param) and resolve it to a DO instance name. returns `null` for a
+ * structurally invalid namespace so the worker can reply 400 instead of routing.
+ */
+export declare function doInstanceNameForRequest(request: {
+    headers: HeaderReader;
+}, url: {
+    searchParams: HeaderReader;
+}, opts?: NamespaceRoutingOptions): string | null;
+export {};
+//# sourceMappingURL=cf-do-shim.d.ts.map

package/dist/worker/cf-do-shim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf-do-shim.d.ts","sourceRoot":"","sources":["../../src/worker/cf-do-shim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAmBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,uBAA4B,GACjC,MAAM,GAAG,IAAI,CAOf;AAED,UAAU,YAAY;IACpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE;IAAE,OAAO,EAAE,YAAY,CAAA;CAAE,EAClC,GAAG,EAAE;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,EACnC,IAAI,GAAE,uBAA4B,GACjC,MAAM,GAAG,IAAI,CAIf"}

package/dist/worker/cf-do-shim.js

@@ -0,0 +1,66 @@
+/**
+ * namespace routing primitives for the Cloudflare Durable Object deploy.
+ *
+ * a multi-tenant CF/orez deploy shards data into one DO instance per tenant
+ * namespace (`ns:<scope>-<id>`) plus a control-plane `singleton`. the worker
+ * tiers carry the chosen namespace in a header (and re-stamp it so an inbound
+ * value is never trusted) and must validate its shape before routing — an
+ * unvalidated namespace would let a client mint unbounded DO instances.
+ *
+ * The routing decision and security-relevant shape validation live here as
+ * pure functions so caller-owned worker entrypoints do not copy the validation
+ * regex at every routing site.
+ */
+/** default namespace scope prefixes (`proj-<id>`, `test-<id>`). */
+const DEFAULT_SCOPES = ['proj', 'test'];
+function escapeForRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function namespacePattern(scopes) {
+    const key = scopes.join('\0');
+    let pattern = namespacePatterns.get(key);
+    if (!pattern) {
+        const group = scopes.map(escapeForRegExp).join('|');
+        pattern = new RegExp(`^(?:${group})-[A-Za-z0-9_-]{1,64}$`);
+        namespacePatterns.set(key, pattern);
+    }
+    return pattern;
+}
+const namespacePatterns = new Map();
+/**
+ * true when `ns` is a structurally valid tenant namespace: a configured scope
+ * prefix followed by a 1-64 char `[A-Za-z0-9_-]` id. this is the gate that
+ * keeps a stray header from minting an unbounded DO instance, so every routing
+ * site that forwards a namespace should run it.
+ */
+export function isValidNamespace(ns, opts = {}) {
+    return namespacePattern(opts.scopes ?? DEFAULT_SCOPES).test(ns);
+}
+/**
+ * resolve a raw namespace string to a DO instance name:
+ *   - `''` or a control-plane alias -> `'singleton'`
+ *   - a valid tenant namespace      -> `'ns:<ns>'`
+ *   - anything else                 -> `null` (caller should reject the request)
+ */
+export function doInstanceName(ns, opts = {}) {
+    if (!ns)
+        return 'singleton';
+    if (ns === 'singleton')
+        return 'singleton';
+    if ((opts.controlPlaneNamespaces ?? []).includes(ns))
+        return 'singleton';
+    const raw = ns.startsWith('ns:') ? ns.slice(3) : ns;
+    if (!isValidNamespace(raw, opts))
+        return null;
+    return 'ns:' + raw;
+}
+/**
+ * read the namespace from a request (the configured header, falling back to the
+ * `?ns=` query param) and resolve it to a DO instance name. returns `null` for a
+ * structurally invalid namespace so the worker can reply 400 instead of routing.
+ */
+export function doInstanceNameForRequest(request, url, opts = {}) {
+    const ns = request.headers.get(opts.nsHeader ?? 'x-orez-ns') || url.searchParams.get('ns') || '';
+    return doInstanceName(ns, opts);
+}
+//# sourceMappingURL=cf-do-shim.js.map

package/dist/worker/cf-do-shim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf-do-shim.js","sourceRoot":"","sources":["../../src/worker/cf-do-shim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,mEAAmE;AACnE,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAA;AAchD,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyB;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnD,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,KAAK,wBAAwB,CAAC,CAAA;QAC1D,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAU,EACV,OAAgC,EAAE;IAElC,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,OAAgC,EAAE;IAElC,IAAI,CAAC,EAAE;QAAE,OAAO,WAAW,CAAA;IAC3B,IAAI,EAAE,KAAK,WAAW;QAAE,OAAO,WAAW,CAAA;IAC1C,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,WAAW,CAAA;IACxE,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACnD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,OAAO,KAAK,GAAG,GAAG,CAAA;AACpB,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC,EAClC,GAAmC,EACnC,OAAgC,EAAE;IAElC,MAAM,EAAE,GACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IACvF,OAAO,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;AACjC,CAAC"}

package/dist/zero-http/encrypted-column-codec.d.ts

@@ -0,0 +1,46 @@
+import type { EncryptedColumnManifest, EncryptionKeyring, PayloadCodec } from './payload-codec.js';
+export type { EncryptedColumnManifest, EncryptedRowBatch, EncryptionKeyring, JSONObject, JSONPrimitive, JSONValue, PayloadCodec, PullResponse, PushMutation, PushRequest, } from './payload-codec.js';
+export type RandomBytes = (length: number) => Uint8Array;
+export type X25519KeyPair = {
+    readonly privateKey: Uint8Array;
+    readonly publicKey: Uint8Array;
+};
+export type HPKECiphertext = {
+    readonly encapsulatedKey: Uint8Array;
+    readonly ciphertext: Uint8Array;
+};
+export declare function createEncryptedColumnCodec(options: {
+    readonly manifest: EncryptedColumnManifest;
+    readonly keyring: EncryptionKeyring;
+}): PayloadCodec;
+export declare function deriveX25519KeyPair(inputKeyMaterial: Uint8Array): X25519KeyPair;
+export declare function generateX25519KeyPair(randomBytes: RandomBytes): X25519KeyPair;
+export declare function hpkeSeal(options: {
+    readonly recipientPublicKey: Uint8Array;
+    readonly plaintext: Uint8Array;
+    readonly info?: Uint8Array;
+    readonly associatedData?: Uint8Array;
+    readonly randomBytes: RandomBytes;
+}): HPKECiphertext;
+export declare function hpkeOpen(options: {
+    readonly recipientPrivateKey: Uint8Array;
+    readonly encapsulatedKey: Uint8Array;
+    readonly ciphertext: Uint8Array;
+    readonly info?: Uint8Array;
+    readonly associatedData?: Uint8Array;
+}): Uint8Array;
+export declare function wrapContentKey(options: {
+    readonly recipientPublicKey: Uint8Array;
+    readonly contentKey: Uint8Array;
+    readonly info: Uint8Array;
+    readonly associatedData: Uint8Array;
+    readonly randomBytes: RandomBytes;
+}): HPKECiphertext;
+export declare function unwrapContentKey(options: {
+    readonly recipientPrivateKey: Uint8Array;
+    readonly encapsulatedKey: Uint8Array;
+    readonly ciphertext: Uint8Array;
+    readonly info: Uint8Array;
+    readonly associatedData: Uint8Array;
+}): Uint8Array;
+//# sourceMappingURL=encrypted-column-codec.d.ts.map

package/dist/zero-http/encrypted-column-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-column-codec.d.ts","sourceRoot":"","sources":["../../src/zero-http/encrypted-column-codec.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,uBAAuB,EAEvB,iBAAiB,EAGjB,YAAY,EAIb,MAAM,oBAAoB,CAAA;AAE3B,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,GACZ,MAAM,oBAAoB,CAAA;AAoB3B,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAA;AAExD,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAChC,CAAA;AAoCD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;IAC1C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CACpC,GAAG,YAAY,CA+Ff;AAED,wBAAgB,mBAAmB,CAAC,gBAAgB,EAAE,UAAU,GAAG,aAAa,CAU/E;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,CAE7E;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE;IAChC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAClC,GAAG,cAAc,CAqBjB;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE;IAChC,QAAQ,CAAC,mBAAmB,EAAE,UAAU,CAAA;IACxC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;CACrC,GAAG,UAAU,CAiBb;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAA;IACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAClC,GAAG,cAAc,CASjB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,QAAQ,CAAC,mBAAmB,EAAE,UAAU,CAAA;IACxC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAA;CACpC,GAAG,UAAU,CAIb"}