orez 0.9.7 → 0.10.0

package/dist/sync-browser-host/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../packages/sync-browser-host/src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,KAAK,EACV,QAAQ,EACR,UAAU,EACV,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EACjB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,UAAU,EACV,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,eAAe,GACrB,MAAM,8BAA8B,CAAA;AACrC,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE1D,MAAM,WAAW,OAAO;IACtB,IAAI,CACF,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,QAAQ,CAAC,EAAE,oBAAoB,GAC9B,UAAU,CAAA;IACb,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,GAAG,EAAE,CAAA;CACT;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,aAAa,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,qBAAqB,CAC/B,CAAC,SAAS,MAAM,GAAG,MAAM,EACzB,CAAC,SAAS,QAAQ,GAAG,QAAQ,IAC3B;IACF,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,qBAAqB,CAAA;IAC9B,MAAM,EAAE,CAAC,CAAA;IACT,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5D,SAAS,CACP,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,CAAC,GAAG,IAAI,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7B,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAA;IAC5B,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,UAAU,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,CAAA;IACxD,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,SAAS,EAAE,EAC1B,QAAQ,EAAE,CAAC,GAAG,IAAI,KACf,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,qBAAqB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,CAAA;IACjE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACxB,sBAAsB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACxD,aAAa,CAAC,EAAE,MAAM,IAAI,CAAA;CAC3B,CAAA;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACxD,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;IAClC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/C,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/C,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACjB,IAAI,CACF,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,QAAQ,CAAC,EAAE,oBAAoB,GAC9B,OAAO,CAAC,UAAU,CAAC,CAAA;IACtB,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3E,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,GAC1B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACjB,IAAI,CACF,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,EAC3B,QAAQ,CAAC,EAAE,oBAAoB,GAC9B,OAAO,CAAC,UAAU,CAAC,CAAA;IACtB,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAA;IAC3C,KAAK,IAAI,IAAI,CAAA;CACd"}

package/dist/sync-browser-host/types.js

@@ -1,2 +0,0 @@
-export { visibility, } from 'orez-sync-cf-host/visibility';
-//# sourceMappingURL=types.js.map

package/dist/sync-browser-host/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../packages/sync-browser-host/src/types.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,UAAU,GAKX,MAAM,8BAA8B,CAAA"}

package/dist/sync-cf-host.d.ts

@@ -1,2 +0,0 @@
-export * from 'orez-sync-cf-host';
-//# sourceMappingURL=sync-cf-host.d.ts.map

package/dist/sync-cf-host.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-cf-host.d.ts","sourceRoot":"","sources":["../src/sync-cf-host.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA"}

package/dist/sync-cf-host.js

@@ -1,2 +0,0 @@
-export * from 'orez-sync-cf-host';
-//# sourceMappingURL=sync-cf-host.js.map

package/dist/sync-cf-host.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-cf-host.js","sourceRoot":"","sources":["../src/sync-cf-host.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA"}

package/dist/sync-executor.d.ts

@@ -1,2 +0,0 @@
-export * from 'orez-sync-executor';
-//# sourceMappingURL=sync-executor.d.ts.map

package/dist/sync-executor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-executor.d.ts","sourceRoot":"","sources":["../src/sync-executor.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAA"}

package/dist/sync-executor.js

@@ -1,2 +0,0 @@
-export * from 'orez-sync-executor';
-//# sourceMappingURL=sync-executor.js.map

package/dist/sync-executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-executor.js","sourceRoot":"","sources":["../src/sync-executor.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAA"}

package/dist/wake.d.ts

@@ -1,22 +0,0 @@
-export type WakeCapability = {
-    readonly namespace: string;
-    readonly identity: string;
-    readonly expiresAt: number;
-};
-export type MintWakeCapabilityOptions = {
-    readonly namespace: string;
-    readonly identity: string;
-    readonly ttlMs: number;
-};
-export type VerifyWakeCapabilityOptions = {
-    readonly namespace: string;
-    readonly ttlMs: number;
-};
-export declare function timingSafeEqual(left: string | Uint8Array, right: string | Uint8Array): boolean;
-export declare function verifySharedSecretHeader(request: Request, secret: string, headerName?: string): boolean;
-export declare function mintWakeCapability(secret: string, options: MintWakeCapabilityOptions): Promise<{
-    readonly token: string;
-    readonly expiresAt: number;
-}>;
-export declare function verifyWakeCapability(secret: string, token: string | null | undefined, options: VerifyWakeCapabilityOptions): Promise<WakeCapability | null>;
-//# sourceMappingURL=wake.d.ts.map

package/dist/wake.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wake.d.ts","sourceRoot":"","sources":["../src/wake.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,CAAA;AAqDD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,WASpF;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,SAAgB,GACzB,OAAO,CAGT;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBjE;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAwChC"}

package/dist/wake.js

@@ -1,114 +0,0 @@
-const TOKEN_VERSION = 'v1';
-const SIGNATURE_CONTEXT = 'orez-wake-capability-v1:';
-const MAX_TOKEN_LENGTH = 2048;
-const MAX_NAMESPACE_LENGTH = 200;
-const MAX_IDENTITY_LENGTH = 200;
-const encoder = new TextEncoder();
-const decoder = new TextDecoder();
-function validateSecret(secret) {
-    if (!secret)
-        throw new TypeError('wake capability secret must not be empty');
-}
-function validateNamespace(namespace) {
-    if (!namespace || namespace.length > MAX_NAMESPACE_LENGTH) {
-        throw new TypeError('wake capability namespace is invalid');
-    }
-}
-function validateIdentity(identity) {
-    if (!identity || identity.length > MAX_IDENTITY_LENGTH) {
-        throw new TypeError('wake capability identity is invalid');
-    }
-}
-function validateTtl(ttlMs) {
-    if (!Number.isSafeInteger(ttlMs) || ttlMs <= 0) {
-        throw new TypeError('wake capability ttlMs must be a positive integer');
-    }
-}
-function encodeBase64Url(bytes) {
-    let binary = '';
-    for (const byte of bytes)
-        binary += String.fromCharCode(byte);
-    return btoa(binary).replaceAll('+', '-').replaceAll('/', '_').replace(/=+$/, '');
-}
-function decodeBase64Url(value) {
-    if (!/^[A-Za-z0-9_-]+$/.test(value))
-        throw new TypeError('invalid base64url');
-    const base64 = value.replaceAll('-', '+').replaceAll('_', '/');
-    const binary = atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, '='));
-    return Uint8Array.from(binary, (character) => character.charCodeAt(0));
-}
-async function sign(secret, payload) {
-    const key = await crypto.subtle.importKey('raw', encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
-    return new Uint8Array(await crypto.subtle.sign('HMAC', key, encoder.encode(SIGNATURE_CONTEXT + payload)));
-}
-export function timingSafeEqual(left, right) {
-    const leftBytes = typeof left === 'string' ? encoder.encode(left) : left;
-    const rightBytes = typeof right === 'string' ? encoder.encode(right) : right;
-    const length = Math.max(leftBytes.length, rightBytes.length);
-    let difference = leftBytes.length ^ rightBytes.length;
-    for (let index = 0; index < length; index++) {
-        difference |= (leftBytes[index] ?? 0) ^ (rightBytes[index] ?? 0);
-    }
-    return difference === 0;
-}
-export function verifySharedSecretHeader(request, secret, headerName = 'x-admin-key') {
-    const received = request.headers.get(headerName);
-    return received !== null && secret.length > 0 && timingSafeEqual(received, secret);
-}
-export async function mintWakeCapability(secret, options) {
-    validateSecret(secret);
-    validateNamespace(options.namespace);
-    validateIdentity(options.identity);
-    validateTtl(options.ttlMs);
-    const expiresAt = Date.now() + options.ttlMs;
-    const payload = encodeBase64Url(encoder.encode(JSON.stringify({
-        namespace: options.namespace,
-        identity: options.identity,
-        expiresAt,
-    })));
-    const signature = encodeBase64Url(await sign(secret, payload));
-    return { token: `${TOKEN_VERSION}.${payload}.${signature}`, expiresAt };
-}
-export async function verifyWakeCapability(secret, token, options) {
-    validateSecret(secret);
-    validateNamespace(options.namespace);
-    validateTtl(options.ttlMs);
-    if (!token || token.length > MAX_TOKEN_LENGTH)
-        return null;
-    const parts = token.split('.');
-    if (parts.length !== 3 || parts[0] !== TOKEN_VERSION)
-        return null;
-    const payload = parts[1];
-    const encodedSignature = parts[2];
-    if (!payload || !encodedSignature)
-        return null;
-    try {
-        const signature = decodeBase64Url(encodedSignature);
-        if (!timingSafeEqual(signature, await sign(secret, payload)))
-            return null;
-        const value = JSON.parse(decoder.decode(decodeBase64Url(payload)));
-        if (!value || typeof value !== 'object' || Array.isArray(value))
-            return null;
-        const capability = value;
-        const now = Date.now();
-        if (capability.namespace !== options.namespace ||
-            typeof capability.identity !== 'string' ||
-            !capability.identity ||
-            capability.identity.length > MAX_IDENTITY_LENGTH ||
-            typeof capability.expiresAt !== 'number' ||
-            !Number.isSafeInteger(capability.expiresAt) ||
-            capability.expiresAt <= now ||
-            capability.expiresAt > now + options.ttlMs) {
-            return null;
-        }
-        return {
-            namespace: options.namespace,
-            identity: capability.identity,
-            expiresAt: capability.expiresAt,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=wake.js.map

package/dist/wake.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"wake.js","sourceRoot":"","sources":["../src/wake.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,IAAI,CAAA;AAC1B,MAAM,iBAAiB,GAAG,0BAA0B,CAAA;AACpD,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAC7B,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAmB/B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACvD,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACzE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AACxE,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,OAAe;IACjD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,CAAC,CACnF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAyB,EAAE,KAA0B;IACnF,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5D,IAAI,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;IACrD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,UAAU,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,MAAc,EACd,UAAU,GAAG,aAAa;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAChD,OAAO,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,OAAkC;IAElC,cAAc,CAAC,MAAM,CAAC,CAAA;IACtB,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACpC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAC5C,MAAM,OAAO,GAAG,eAAe,CAC7B,OAAO,CAAC,MAAM,CACZ,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS;KACe,CAAC,CAC5B,CACF,CAAA;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC9D,OAAO,EAAE,KAAK,EAAE,GAAG,aAAa,IAAI,OAAO,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,CAAA;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,KAAgC,EAChC,OAAoC;IAEpC,cAAc,CAAC,MAAM,CAAC,CAAA;IACtB,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACpC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAE1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACjC,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAE9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;QACnD,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAEzE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC5E,MAAM,UAAU,GAAG,KAAgC,CAAA;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IACE,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAC1C,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;YACvC,CAAC,UAAU,CAAC,QAAQ;YACpB,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB;YAChD,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;YACxC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAC3C,UAAU,CAAC,SAAS,IAAI,GAAG;YAC3B,UAAU,CAAC,SAAS,GAAG,GAAG,GAAG,OAAO,CAAC,KAAK,EAC1C,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/worker/cf-do-shim.d.ts

@@ -1,55 +0,0 @@
-/**
- * namespace routing primitives for the Cloudflare Durable Object deploy.
- *
- * a multi-tenant CF/orez deploy shards data into one DO instance per tenant
- * namespace (`ns:<scope>-<id>`) plus a control-plane `singleton`. the worker
- * tiers carry the chosen namespace in a header (and re-stamp it so an inbound
- * value is never trusted) and must validate its shape before routing — an
- * unvalidated namespace would let a client mint unbounded DO instances.
- *
- * the deployed worker entry classes are bundled strings in the consumer's
- * deploy integration (awkward to unit-test), so the routing decision and the
- * security-relevant shape validation live here as pure functions, tested in
- * cf-do-shim.test.ts. consumers import these into their worker shims instead of
- * copy-pasting the validation regex at every routing site.
- */
-export interface NamespaceRoutingOptions {
-    /** allowed namespace scope prefixes. default `['proj', 'test']`. */
-    scopes?: readonly string[];
-    /**
-     * namespace values that resolve to the control-plane `singleton` instance,
-     * in addition to the empty string (which is always the singleton).
-     */
-    controlPlaneNamespaces?: readonly string[];
-    /** request header the worker tiers carry the namespace in. default `x-orez-ns`. */
-    nsHeader?: string;
-}
-/**
- * true when `ns` is a structurally valid tenant namespace: a configured scope
- * prefix followed by a 1-64 char `[A-Za-z0-9_-]` id. this is the gate that
- * keeps a stray header from minting an unbounded DO instance, so every routing
- * site that forwards a namespace should run it.
- */
-export declare function isValidNamespace(ns: string, opts?: NamespaceRoutingOptions): boolean;
-/**
- * resolve a raw namespace string to a DO instance name:
- *   - `''` or a control-plane alias -> `'singleton'`
- *   - a valid tenant namespace      -> `'ns:<ns>'`
- *   - anything else                 -> `null` (caller should reject the request)
- */
-export declare function doInstanceName(ns: string, opts?: NamespaceRoutingOptions): string | null;
-interface HeaderReader {
-    get(name: string): string | null;
-}
-/**
- * read the namespace from a request (the configured header, falling back to the
- * `?ns=` query param) and resolve it to a DO instance name. returns `null` for a
- * structurally invalid namespace so the worker can reply 400 instead of routing.
- */
-export declare function doInstanceNameForRequest(request: {
-    headers: HeaderReader;
-}, url: {
-    searchParams: HeaderReader;
-}, opts?: NamespaceRoutingOptions): string | null;
-export {};
-//# sourceMappingURL=cf-do-shim.d.ts.map

package/dist/worker/cf-do-shim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cf-do-shim.d.ts","sourceRoot":"","sources":["../../src/worker/cf-do-shim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAWD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,uBAA4B,GACjC,MAAM,GAAG,IAAI,CAKf;AAED,UAAU,YAAY;IACpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE;IAAE,OAAO,EAAE,YAAY,CAAA;CAAE,EAClC,GAAG,EAAE;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,EACnC,IAAI,GAAE,uBAA4B,GACjC,MAAM,GAAG,IAAI,CAIf"}

package/dist/worker/cf-do-shim.js

@@ -1,58 +0,0 @@
-/**
- * namespace routing primitives for the Cloudflare Durable Object deploy.
- *
- * a multi-tenant CF/orez deploy shards data into one DO instance per tenant
- * namespace (`ns:<scope>-<id>`) plus a control-plane `singleton`. the worker
- * tiers carry the chosen namespace in a header (and re-stamp it so an inbound
- * value is never trusted) and must validate its shape before routing — an
- * unvalidated namespace would let a client mint unbounded DO instances.
- *
- * the deployed worker entry classes are bundled strings in the consumer's
- * deploy integration (awkward to unit-test), so the routing decision and the
- * security-relevant shape validation live here as pure functions, tested in
- * cf-do-shim.test.ts. consumers import these into their worker shims instead of
- * copy-pasting the validation regex at every routing site.
- */
-/** default namespace scope prefixes (`proj-<id>`, `test-<id>`). */
-const DEFAULT_SCOPES = ['proj', 'test'];
-function escapeForRegExp(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-function namespacePattern(scopes) {
-    const group = scopes.map(escapeForRegExp).join('|');
-    return new RegExp(`^(?:${group})-[A-Za-z0-9_-]{1,64}$`);
-}
-/**
- * true when `ns` is a structurally valid tenant namespace: a configured scope
- * prefix followed by a 1-64 char `[A-Za-z0-9_-]` id. this is the gate that
- * keeps a stray header from minting an unbounded DO instance, so every routing
- * site that forwards a namespace should run it.
- */
-export function isValidNamespace(ns, opts = {}) {
-    return namespacePattern(opts.scopes ?? DEFAULT_SCOPES).test(ns);
-}
-/**
- * resolve a raw namespace string to a DO instance name:
- *   - `''` or a control-plane alias -> `'singleton'`
- *   - a valid tenant namespace      -> `'ns:<ns>'`
- *   - anything else                 -> `null` (caller should reject the request)
- */
-export function doInstanceName(ns, opts = {}) {
-    if (!ns)
-        return 'singleton';
-    if ((opts.controlPlaneNamespaces ?? []).includes(ns))
-        return 'singleton';
-    if (!isValidNamespace(ns, opts))
-        return null;
-    return 'ns:' + ns;
-}
-/**
- * read the namespace from a request (the configured header, falling back to the
- * `?ns=` query param) and resolve it to a DO instance name. returns `null` for a
- * structurally invalid namespace so the worker can reply 400 instead of routing.
- */
-export function doInstanceNameForRequest(request, url, opts = {}) {
-    const ns = request.headers.get(opts.nsHeader ?? 'x-orez-ns') || url.searchParams.get('ns') || '';
-    return doInstanceName(ns, opts);
-}
-//# sourceMappingURL=cf-do-shim.js.map

package/dist/worker/cf-do-shim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cf-do-shim.js","sourceRoot":"","sources":["../../src/worker/cf-do-shim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,mEAAmE;AACnE,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAA;AAchD,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyB;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,wBAAwB,CAAC,CAAA;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAU,EACV,OAAgC,EAAE;IAElC,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,OAAgC,EAAE;IAElC,IAAI,CAAC,EAAE;QAAE,OAAO,WAAW,CAAA;IAC3B,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,WAAW,CAAA;IACxE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,KAAK,GAAG,EAAE,CAAA;AACnB,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC,EAClC,GAAmC,EACnC,OAAgC,EAAE;IAElC,MAAM,EAAE,GACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IACvF,OAAO,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;AACjC,CAAC"}

package/dist/worker/cf-patches.d.ts

@@ -1,43 +0,0 @@
-/**
- * zero-cache CF Workers overlay.
- *
- * copies @rocicorp/zero's compiled `out/` tree into a generated overlay and
- * applies CF Worker patches there. the installed package in node_modules is
- * never modified.
- *
- * eleven patches:
- * 1. worker-urls.js — replace file:// URLs with zero-worker:// identifiers
- * 2. server worker entrypoints — disable CLI auto-start blocks
- * 3. worker state — localize log contexts and disable process-global telemetry
- * 4. processes.js — replace dynamic import() with static worker module lookup
- * 5. process lifecycle — stop and join a cancelled in-process worker tree
- * 6. write-worker-client.js — run zero-cache's replica writer in-process
- * 7. custom/fetch.js — route mutate/query fetches by logical DO identity
- * 8. initial-sync.js — cap DO batch parameter counts
- * 9. litestream commands.js — retain the durable replica on restart
- * 10. change-streamer-service.js — keep cleanup alive after no-subscriber ticks
- * 11. pgsql-parser — load libpg-query as a precompiled Worker wasm module
- *
- * usage in a worker build script:
- *
- *   import { prepareZeroCacheForCF } from 'orez/worker/cf-patches'
- *   import { getBrowserAliases } from 'orez/worker/browser-build-config'
- *
- *   const zero = prepareZeroCacheForCF({ nodeModulesPath: './node_modules' })
- *   const alias = getBrowserAliases(zero)
- *
- * idempotent: safe to run multiple times. the overlay directory is recreated.
- */
-export interface ZeroCacheCFPrepareOptions {
-    nodeModulesPath: string;
-    outDir?: string;
-}
-export interface ZeroCacheCFPrepareResult {
-    nodeModulesPath: string;
-    outDir: string;
-    zeroOutDir: string;
-    zeroCacheSrcDir: string;
-    aliases: Record<string, string>;
-}
-export declare function prepareZeroCacheForCF(input: string | ZeroCacheCFPrepareOptions): ZeroCacheCFPrepareResult;
-//# sourceMappingURL=cf-patches.d.ts.map

package/dist/worker/cf-patches.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cf-patches.d.ts","sourceRoot":"","sources":["../../src/worker/cf-patches.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAsCH,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAChC;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAAG,yBAAyB,GACxC,wBAAwB,CAoF1B"}